MurphyA/hacker-news huggingface dataset:
by aaron695 | 2025-07-25 17:06:58+00:00
4chan thread with details of the hack - https://boards.4chan.org/pol/thread/511317913

They have geo-mapped all the users - https://imgur.com/bRAJ2nU

Some of the users photo's are AI, which is interesting.

They got all the chat logs - https://x.com/NEElimit/status/1948766332503130562

60 Gig torrent said to be out with all the data - https://x.com/cremieuxrecueil/status/1948787086493901097 data structure - https://files.catbox.moe/c6ej81.json

For those who wish for the old days - "Vibe Coding" - shonky websites with shonky security, doxxing on all sides, 4chan pops back into relevance. You get your early internet redo.

HN 'Tea' thread discussing the ethics of the doxxing app - https://news.ycombinator.com/item?id=44682914
by tim333 | 2025-07-25 17:06:58+00:00
British voter here who voted Labour and could change. I'm not wholly against nerfing the web a bit to protect kids. I haven't read the bill or analysed the details to try to figure if it'll work. I think that's not so atypical for voters. Grown ups can always VPN etc.

It's hard to know how it'll work in practice without trying it.
by ehnto | 2025-07-25 17:07:03+00:00
You are in luck, there is an amazing youtube series about someone who made an engine simulator so he could simulate engine sounds:

https://youtube.com/playlist?list=PLUahe1BHkKtVN4nPDmueo7huQ...

The simulation of tires is interesting too, because you can get totally playable vehicles without simulating them at all. Or you can simulate some aspects for gameplay reasons (tire wear, heat, rudimentary grip level change)

Or, you can go really, really deep, and simulate the real physics going on, and that's what games like Beam NG, iRacing, Assetto Corsa etc. are doing. Usually known as the "tire model" in case you want a term to search up. They're still approximations but ever improving accuracy.
by ltbarcly3 | 2025-07-25 17:07:12+00:00
When I read this I just feel like Sussman is getting out of touch and maybe a little disillusioned. From the wording he seems annoyed about the change, isn't even sure why it was made "probably because there's some library for robots", has gone from someone who would have a complete understanding of complex systems to someone who sounds more like a frustrated beginner. "Doing basic science on libraries to see how they behave" instead of grabbing the source and looking at it - he is expressing the view of someone who wants to complete their ticket in Jira without too much effort and go home for the night rather than someone with an actual curiosity and enjoyment of what they are doing.
by cstone | 2025-07-25 17:07:31+00:00
Hey - if you're interested in prototyping with real data, we've built a platform for stuff like this -- Fulcra Context (https://www.fulcradynamics.com/). We have an iOS app that collects Apple Health data, and you can then share it with a coach/trainer/doctor/etc.

We have a REST API with python client lib (https://fulcradynamics.github.io/developer-docs/), an MCP server (https://fulcradynamics.github.io/developer-docs/mcp-server/), and did some experiments with ChatGPT actions as well (https://www.fulcradynamics.com/chatgpt).

It doesn't have the simplicity of a plain export to duckdb/sqlite, but it definitely helps solve a lot of the sharing/collaboration problems.
by nine_k | 2025-07-25 17:07:40+00:00
Can somebody versed in thermodynamics explain me how can it work?

They say that they keep CO2 in liquid form at room temperature, then turn it into gas, and grab the energy so released.

* Isn't the gas be very cold on expansion from a high-pressure, room-temp liquid? It could grab some thermal energy from the environment, of course, even in winter, but isn't the efficiency going to depend on ambient temperature significantly?

- To turn the gas into the liquid, they need to compress it; this will produce large amounts of heat. It will need large radiators to dissipate (and lose), or some kind of storage to be reused when expanding the gas. What could that be?

- How can the whole thing have a 75% round-trip efficiency, if they use turbines that only have about 40% efficiency in thermal power plants? They must be using something else, not bound by the confines of the Carnot cycle. What might that be?
by webdevver | 2025-07-25 17:08:07+00:00
its unironically going to the moon. the mag7 are doing better than ever:

- google ai-maxxed and wiping the floor after a slow start

- apple owning the smartphone space right as desktops are becoming genuinely irrelevant

- microsoft owning the corporate space right as local and on-site is becoming genuinely irrelevant

- nvidia building gigashovels for the gold rush

- meta... well, we'll see how the 'superintelligence' turns out. meta is the weakest bet of the bunch.

- aws... doing cloud stuff, i guess. also not a clear story.

if anyone got lucky, its zuck. between vr, metaverse, and now his thick-rimmed goggles he appears to be genuinely clueless, riding the waves of his facebook moonshot.

the mag7 are gonna be called the giga7 by 2030.

you think the stocks are overheated? you haven't seen nothing. what we call a 'bubble' today, will appear to have been a gentle ramp-up for the real bubble that's waiting for us in 2030.

the printing will continue, btw. and the debt will hit $100 trillion by 2030. and the US will be even more powerful than previously thought possible.

long pax americana, long orange fool, long whoever succeeds him, long the deep state.
by strcat | 2025-07-25 17:08:10+00:00
F-Droid only uses reproducible builds for a tiny portion of apps, and there are still significant disadvantages. It depends on the app developers always complying with F-Droid's rules otherwise users are left without updates. F-Droid only checks that the build matches, they do not review/audit the apps and will not catch hidden malicious behavior or simply non-compliance with their rules. WireGuard's app deliberately broke F-Droid's rules by including a self-updater which was not noticed by F-Droid and shipped by F-Droid. WireGuard used this to start taking over updates for itself to migrate their users away from F-Droid. F-Droid eventually found out when the WireGuard developer brought it up many months later and couldn't do anything beyond dropping the app. It had taken over updates for itself already and F-Droid wasn't in the picture anymore.

The process adds a significant delay for updates but it does not actually protect users from developers in any meaningful way. This real world example with WireGuard demonstrates that.
by l-albertovich | 2025-07-25 17:08:20+00:00
Oh no, I accidentally duplicated a function call while quickly rewriting the code for fun, what a terrible sin! (as a side note, I didn't even compile the code but I after quick check I don't see any notes on the man page that suggest that the accidental spurious repeated call could cause a problem)

I understand that you might not like that style but I think you're comming a bit too strong on this, especially considering how carefully I worded my message in terms of not hurting any feeling and being clear about this being MY preference.

I guess I shouldn't probably even answer but it saddens me and makes me a bit angry to get a reminder of why I don't usually participate in social media.
by lonelyasacloud | 2025-07-25 17:08:43+00:00
Have seen similar issues with understanding things that are somewhat orthogonal concerns to the main thing that is being worked on.

My guess is that context = main thing + somewhat unrelated thing is too big a space for the models to perform well at this point in time.

The practical solution is to remove the need for the model to figure it out each time and instead explicitly tell it about as much as possible before hand in CLAUDE.md.
by conradev | 2025-07-25 17:08:46+00:00
Lithium-ion batteries are falling in cost so rapidly that any new process being ramped up is risky business. Form is way further along than this landing page and yet has a long way to go:

https://www.latitudemedia.com/news/form-energy-brings-in-mor...

The scale of investment required makes it quite hard for new companies to compete on cost:

https://www.theinformation.com/articles/battery-industry-sca...
by numpad0 | 2025-07-25 17:09:37+00:00
"Molex" usually refers to flat 4 pin AMP 1-480424-0 or Molex 8981-04P connectors(part number taken from random pdf on the Internet[1]). Confusing as it is... Actual Molex Mini-Fit are rarely colloquially referred to as Molex.

1: https://community.intel.com/cipcp26785/attachments/cipcp2678...
by lrvick | 2025-07-25 17:09:56+00:00
Plenty of laptops exist you can get away with running fully open source and auditable firmware, and a few that are mostly open hardware too, by the MNT Reform team.

The Precursor is the only pocket computer platform that is maximally open hardware, software, and firmware but you revert back to the 90s in terms of power as a consequence with alpha quality software today. If Bunnie is successful with his IRIS approach and making custom home-user-inspectable ASICS then maybe a middle ground path can be forged in the next few years.

For now the only modern computing experience with fully open hardware and software I am aware of are the ppc64le based devices by Raptor Engineering, but at a very high cost due to low demand, with huge form factor and no power management. I still own one anyway because we have to start somewhere.

For those that want this story to get better, please buy and promote the products of the few people trying to break us out of dependence on proprietary platforms.
by dcrazy | 2025-07-25 17:10:20+00:00
> Sig Sauer, Inc is an American company

It appears to be the American half of a German-owned transnational company: https://en.wikipedia.org/wiki/SIG_Sauer

The German company and American company are clearly related, given the German company is alleged to have manufactured and shipped firearms to the American company with falsified end-user certificates, which the American company then resold to Colombia in violation of German law: https://www.nhpr.org/post/ceo-nh-gun-maker-facing-five-years...
by mort96 | 2025-07-25 17:10:24+00:00
And I encounter _serious_ issues when I use X. Neither is perfect, but this insistence that Wayland is "not ready" because it doesn't have certain people's pet features ignores the silent majority for whom it just works and works better than X ever did.

This is not me downplaying those issues some people encounter in Wayland. But I think you're sort of doing the opposite.

(And, Wayland is not a "product".)
by strcat | 2025-07-25 17:10:33+00:00
Private Space has a superior approach to isolation and encryption matching user profiles. Work profiles have some compromises for historical reasons. Private Space should be preferred over a work profile and the only reason to use a work profile for your own local usage is to use both a work profile and Private Space at the same time. Once GrapheneOS has support for multiple Private Spaces within a user, the use case for work profiles will be limited to the intended Bring Your Own Device enterprise deployment purpose. The intended purpose of work profiles is companies not having to give their employees work phones but rather owning/controlling a specific profile on their device with some influence over the overall device via rules for lock method, etc.
by subarctic | 2025-07-25 17:10:44+00:00
Ok it may be just as painful and non-mainstream to self host these days as the pre-iphone or pre-blackberry smartphones were, and i can imagine that it could get easier in the future, but still what's the point of selfhosting for regular people when the cloud exists? Having a calendar, email/chat apps, webbrowser, maps+gps and everything else in your pocket was a major convenience improvement, but i don't see a benefit like that from self hosting. I only see better privacy, more control and ownership over your data, and in some cases lower cost (but often higher), and those aren't nearly as powerful motivators for people.

I could imagine self hosting becoming more accessible but don't see how it could become mainstream when it's just an alternative to stuff that's already available in the cloud
by horsawlarway | 2025-07-25 17:10:46+00:00
I think this implies a meaning of "the" that doesn't actually exist in modern english.

"The" often refers to a group or category.

"The other" is actually a phrase I would take to be incredibly inclusive in meaning if not followed by another specifier (it means "the category of everything that is not us").

"The alternative" is similarly a category structure. It's a singular category, made of many possible members, or alternatives.

You may still only pick a single alternate for each case, but that does not mean that a category of multiple possible alternative choices does not exist.

---

All that said, sparkfun is messing up by labeling this DE9. Spoken as someone who's done quite a bit of serial communication work. The defacto industry term is DB9, whether they like it or not, and most searching/purchasing will be done using that term. This is a "technically correct" fun article, with a name that would immediately mean I don't ever find this product (and would not purchase this product) unless they highlight that this is a DB9 breakout board with a bad name.

Simple test? Amazon has more than 4000 results for "db9 cable" and only ~110 results for "de9" cable. Even specialty sites like McMaster, which are usually pretty particular with their terms are happily calling this a db9 connector: https://www.mcmaster.com/products/connectors/computer-connec...
by pama | 2025-07-25 17:11:19+00:00
An alternative and perhaps easier way to estimate the relative importance of the GPU cost vs the electricity cost is to estimate how many years of constant use of the GPU at full power you need for the cost of industrial-scale electricity to catch up to the cost of the industrial scale GPU pricing. The H200 had 700W max power draw and about 40k USD cost (price varies a lot); typical lowest rental price a year ago was 2USD/h, possibly a bit lower by now. In 1h you could not even spent 1kWh electricity with them in optimal compute conditions, yet, at scale, you can negotiate prices lower than 0.05 USD per kWh of electricity at some parts of the US. Alternatively, assume 0.05 USD per kWh, and use the GB200 NVL72 that draws 120kW at peak. That is a cost of 6USD/hour or $52.6k per year. Even if one were to use the hardware for 10 years straight without problems at peak performance, the cost of electricity is way cheaper than the cost of the hardware itself (you have to ask NVidia for a quote, but expect a multi-million dollar tag and they have no shortage of customers ready to pay.)
by resoluteteeth | 2025-07-25 17:11:35+00:00
You can buy nonstick wok-shaped pans but real woks that would be used for high temperature cooking are usually not nonstick. The original assertion that I was responding to was suggesting that the cause of the higher lung cancer rates in asian americans might be because of high temperature wok cooking.

I have no idea if nonstick pans are associated with higher lung cancer rates but even if they are I have no reason to think that asian americans are more likely to use nonstick pans, so the fact that it is easy to overheat nonstick pans in general might not explain asian americans having higher lung cancer rates.
by danbruc | 2025-07-25 17:11:37+00:00
A column that is nullable but never null might indicate that it should be non-nullable but does not necessarily imply so. Say you have an optional comment field, it might just happen by accident that a comment was recorded for each row, but that of course becomes increasingly unlikely with each additional row in the table. There is probably no harm in checking your database for such columns, especially in tables with many rows, but in the end it is up to the semantics of the data model whether a column should be nullable or not. The absence of NULLs is an indicator but not a determiner.
by lblume | 2025-07-25 17:12:24+00:00
In that case we read it entirely differently — the last paragraph explicitly mentions inferring "Nullable fields that never hold nulls are often the result of incomplete migrations or forgotten cleanup steps". The author also proposes a script "to identify cases where the field could safely be changed to non-nullable". But alas, we cannot do that with full generality, due to there being a big difference in intent that cannot be captured purely by counting nulls, and surely not by only calculating percentages.
by willquack | 2025-07-25 17:13:04+00:00
Am I crazy or did my 2006 iMac come with a home media server for serving movies / tv shows / music photos from your filesystem. I think it even came with a slick looking remote!

You could stream content from it over your home network (as long as you were connecting from another Apple device)

Is this lost technology or just a figment of my imagination? I've long since switched to linux and run the typical Jellyfin setup etc
by lutusp | 2025-07-25 17:14:07+00:00
This might not prevail in the world of tech, but in language studies, words mean what the majority of their users think they mean. Examples:

* Decimated. How many of you know this means (or once meant) reduced by 1/10? * Literally. Often used to mean figuratively, to the degree that it can be relied on to mean nothing at all. * Reign, as in "reign him in". Clearly now an accepted misuse, reign once defined what a monarch does to a kingdom, not what a cowboy does to a horse (i.e. rein). * Fewer / less. Sadly interchangeable in modern writing, "fewer" was once reserved for enumerable things, while "less" referred to continuous measures. Less water, fewer liters of water. * Double precision. In computer science, defined in IEEE 754 as a floating-point data format with a 53-bit mantissa, therefore 15.95 decimal digits (53 * log(2)/log(10)). Now the norm, the default, to the degree that people may forget what "double" refers to. Because of double's ubiquity, in the fullness of time I expect single precision will come to be known as ... wait for it ... half precision.

Lexicographers are at pains to point out that words mean what people think they mean. I think they have a point.
by whatamidoingyo | 2025-07-25 17:14:07+00:00
Here's a part of the message I received from them:

- $25.00 - Monthly fee for the merchant account.

- $19.95 - Monthly fee for the Authorize.net payment gateway (API Connection to your website)

- 3.95% - Keyed rate

- $0.25 - per transaction fee

- $1,450 - HIGH-RISK fee

- 10% Rolling reserve

It just seems unfair, as these fees are for "adult content" sites (i.e. nudity, etc.), which is not what I built.
by SoftTalker | 2025-07-25 17:14:18+00:00
With the energy source (presumably solar/wind) being "free," efficiency isn't the most important thing. But the whole thing sounds sort of "Rube Goldberg" even if it works, batteries or supercapacitors or something like that are probably going to be a lot more reliable.

It's sort of like arguing for going back to steam engines because we've got a new way to boil water.
by epistasis | 2025-07-25 17:14:32+00:00
Some key parameters for new grid storage tech:

- Round trip efficiency: how much electricity comes out from electricity going in

- $/kWH capacity: lower is better, how does the battery cost scale as additional energy capacity is added?

- $/kW capacity: lower is better, how does the battery cost scale as additional power capacity is added?

- power to energy ratio: higher is better, to a certain point, but not usually at the expense of $/kWh capacity. If your ratio is 1:100, then you're in range of 4 days duration, which means at most 90 full discharges in a year, which highly limits the amounts of revenue possible.

- Leakage of energy per hour, when charged: does a charged battery hold for hours? Days? Weeks?

These all add up to the $/kWh delivered back to the grid, which determines the ultimate economic potential of the battery tech.

Lithium ion is doing really great on all of these, and is getting cheaper at a tremendous rate, so to compete a new tech has to already be beating it on at least one metric, and have the hope of keeping up as lithium ion advances.
by ethagnawl | 2025-07-25 17:14:46+00:00
> I hope it served as a good lesson to the average person to be more cautious while submitting sensitive information like a government ID.

This absolutely should not be normalized. If I'm ever prompted to submit photos of a government ID to some service, I'm turning heel. I'll try to use their phone service (which I just did successfully this week), correspond via mail or maybe, as you've said, handle it in person but I'm probably content to go without.
by oaxacaoaxaca | 2025-07-25 17:14:51+00:00
Hi HN,

I have a personal project for managing my monthly bills. Ten years ago I wrote it in React (and even posted it here - https://news.ycombinator.com/item?id=12010853 - zero comments lol). Recently I rewrote it using HTMX and the newly-beta Web Awesome.

I'm really happy with the result. IMO it feels like a 2025 website should – it has animations, loading indicators, a nice theme, etc. No landing page though. Again, I wrote this to solve my own problem, not to create a product to sell.

I'd encourage folks to check it out to see that an HTMX site can look & feel just as modern as a React site.

NB: use dummy data and bogus emails – I don't want your real data.

Thanks for reading :)

https://getbudgeter.com/signup
by JoshTriplett | 2025-07-25 17:15:00+00:00
Sure; that was exactly the kind of case that previously led me to edit my comment to add the "for the vast majority" qualifier. Similarly, bank payments are popular in European countries because there are convenient wrappers around them, if you're only selling to certain countries.

Along the same lines, I qualified it as "online businesses" because there are still some brick-and-mortar businesses that require cash. It's still limiting your business, but less so, especially if you're in a context where people expect many businesses to be that way (e.g. a farmer's market).

But for online businesses that aren't country-specific, which I'd argue is the vast majority of online businesses? You accept credit cards or you get a lot less business. (And the next-most-popular option, PayPal, does even more of this kind of thing than Visa and MasterCard do, and much more capriciously.)
by ralfj | 2025-07-25 17:15:09+00:00
> The perception created by your article is that people shouldn't use Go because it's not memory-safe.

Uh, where exactly am I saying or implying that? I am, in fact, saying that Go is much closer to memory-safe languages than to C, safety-wise.

But I am arguing that the term "memory safe" should only be used for languages that actually went through the effort of thinking this problem through to the end and plugging all the holes through which memory safety violates can sneak in. Go is 99% there, but it's falling slightly short of the goal. I think that's a useful distinction, and I am disappointed that it is regularly swept under the rug, which is why I wrote this blog post. You are free to disagree, I never expected to convince everyone. But I think I gave some people some new food for thought, and that's all I can hope for.
by tptacek | 2025-07-25 17:15:17+00:00
It's made what would be a valid point using misleading terminology and framing that suggests these are security issues, which they simply are not.

"One could easily turn this example into a function that casts an integer to a pointer, and then cause arbitrary memory corruption."

No, one couldn't! One has contrived a program that hardcodes precisely the condition one wants to achieve. In doing so, one hasn't even demonstrated even one of the two predicates for a memory corruption vulnerability (attacker control of the data, and attacker ability to place controlled data somewhere advantageous to the attacker).

What the author is doing is demonstrating correctness advantages of Rust using inappropriate security framing.