MurphyA/hacker-news huggingface dataset:
by cyberax | 2025-07-25 06:14:31+00:00
On the contrary. I have researched every statement behind them, and ran simulations to prove them. And I was not actually the first person to do that, what I said is well known.

Urbanists just prefer not to talk about it, it complicates the propaganda. After all, urbanism is supposed to have no downsides. It's like violence: if it's not helping, you're not doing enough of it.
by Jstreetman | 2025-07-25 06:14:37+00:00
NextTurn is a social platform where developers build, share, and level up. It’s like GitHub meets LinkedIn, but with XP, ranks, and Prestige Mode — rewarding you for shipping code, contributing to projects, and posting dev updates. Join or create communities, link your GitHub, earn XP, and climb the leaderboard. Try it here at https://nextturn.dev Looking for feedback from developers, indie hackers, and open source devs!
by District5524 | 2025-07-25 06:16:40+00:00
No, because jurisdiction of the competition authority will still be based on the market activity (or place of registration etc.) of the companies colluding, not on the physical location of the colluding/anti-competitive activity itself. While such conspirative theatre may decrease the risks of discovery, collusions usually come to light by one participant notifying the authority in exchange for immunity or decreased fines.
by teo_zero | 2025-07-25 06:16:50+00:00
Sorry but you didn't just reformatted it, you added new variables and return statements that were not in the original code (and even introduced bugs like row 41).

As of short variable names, I'd argue that they are actually more readable than long ones when they're the iterator of a loop:

while... XNextEvent(... &e)

What else can "e" stand for in the body of this loop?

Longer lifetimes and not-as-obvious scopes do deserve longer names.

Finally, I strongly dislike this kind of reversed conditions:

if (const == var)

To paraphrase your own words, we're in 2025 and we should not be limited by our fear of forgetting one "=".
by vpq | 2025-07-25 06:17:04+00:00
WiX usage is easy to check, just open an installer with Orca, and you'll see a bunch of WiX artifacts.

Checking whether it's their own compile or official binaries is also simple if they use an extension like the official Util one, which many do: It embeds a binary that implements the custom action, which is signed by FireGiant.

As for turning this into analytics / statistics, I imagine you could just download every MSI from winget and just check if they contain a FireGiant-signed extension dll.
by onli | 2025-07-25 06:19:27+00:00
You are exactly right. To summarise for those who do not want to watch a video, the video shows communications with Graphenes lead developer in which he was extremely hostile and threatened Rossman. It also goes into how said developers hallucinates being attacked by specific other sites, like a Linux YouTube channel that obviously did nothing to him. His goons then attack those projects.

You have to be aware that you give that person root when you use Graphene. All possible technical improvements aside this is a very big risk. He claimed he would step back after the video released, then called that a lie and continued with everything.

Calyx seems to be the best alternative right now without such a risk factor.
by seszett | 2025-07-25 06:19:34+00:00
It does. It's not obvious from the writing but Google actually sent this email to the attacker (which then redirected it mostly unchanged except for the To: header).

The main content of the email is text used for the "App Name" field of the attacker's OAuth app. This explains why the screenshot of the email actually does look weird, with unlinked URLs and weird formatting.

I'm pretty sure there is a lot more at the end of the email that makes it obvious it's not legitimate. But then I also understand how quite a few people wouldn't even get to the end.
by porridgeraisin | 2025-07-25 06:21:37+00:00
It does not work as seamlessly as CC w.r.t chargebacks.

What a lot of folks do is they pay for most purchases with UPI but try and ensure there is some kind of "undo" button somewhere for large purchases. If I am making a purchase on a shady website, or making a large purchase, I will pay using CC so that I can chargeback and the CC company will deal with it. However, even if I am buying a laptop or whatever on Amazon, I know that amazon will deal with returns and stuff properly, so I would just UPI it. There is also the matter of credit card offers and points and what not. If there is a good discount then CC is used.
by stevengoodwin | 2025-07-25 06:23:45+00:00
This is a really nice, and very compact, way of demonstrating the terminal in action.

I used it to show off my 2002 version of ASCII pacman game, since no one's going to bother compiling it, and it'll eventually end up with bitrot.

You can see me playing it (really badly!) at https://asciinema.org/a/723703
by burnt-resistor | 2025-07-25 06:24:43+00:00
Meta MPK still has bits of Sun Microsystems logos here and there: back of the main entrance sign and some of the (repurposed) interior office window glazing.

</old-man-story>I used to care and feed a SPARCstation 2 and 4 at a nuclear engineering consultancy in the 90's. They had 128k ISDN internet access and one had expansion with commodity PC SCSI HDDs metadisked (risky like RAID0) with the existing drives.</old-man-story>
by inglor_cz | 2025-07-25 06:25:32+00:00
There must be some selection effect at work. "Those who live with them" are the ones who have chosen to live with them, which excludes:

a) all who have learnt about the situation before birth and chose abortion,

b) all who gave the kid away to some institution.

A N == 1 case from my life. My classmate had a Down kid at 20 - very rare, as Down is not typical in young mothers. She seems to be happy, even though she sacrificed her dream of a bigger family for him; it was so challenging having a Down kid that she didn't have any other.

But the father absconded and wants nothing to have with his disabled son.
by seszett | 2025-07-25 06:25:39+00:00
Well there are a few different big failures, from not signing the To: to allowing long arbitrary content in an email sent from a legitimate Google address...

But I think Google sites is the most important one because it makes sites look like they are actually Google wherever one comes from, it could be a pop-under loaded by another site or whatever, I think it's a more universal avenue for phishing than just exploiting DKIM.
by ThePowerOfFuet | 2025-07-25 06:25:44+00:00
Many apps claim to require Play Services, but all my (several) bank apps work perfectly on GrapheneOS. No notifications because they rely on Google, but that is more feature than bug in my books.

Signal brings its own notifications, so they work perfectly.

The only app which was broken to the point of unusability was Too Good To Go, which demands that you pick locations on a map which relies on Play Services; the manual city entry is broken.

I use Google Maps only in Firefox Focus, but I've heard that builds of Google Maps up to about a year or so ago didn't rely on Play Services, and with Aurora Store you can manually enter a build number to install.

tl;dr: 10/10, fabulous experience.
by abrookewood | 2025-07-25 06:27:41+00:00
Ignoring for a moment all of the other functions that MCP can allow an agent to do (open a webpage, query a database, run another agent, execute local commands etc) and only focussing on the use of MCP to provide context, the big advantage of MCP over RAG is that a RAG system needs to be built and maintained: you need to extract your content, vectorise it, store it in a database, query it, update it etc etc. With MCP, you just point it at your database and the agent gets up-to-date info.
by dmoy | 2025-07-25 06:28:06+00:00
> Glocks, two built-in safeties internally that would prevent misfires. The only way they would fire is if the trigger is pulled. Period.

Two built in safeties, plus a half-cocked striker instead of fully cocked like Sig. Another big difference is that one of the safeties is a physical thing sitting in between the striker and the primer. The equivalent on a sig 320 is a physical thing sitting in front of a lug attached to the striker, not actually in between the striker and the primer. That makes it a single point of failure, because if the lug shears off of the striker, the gun immediately discharges.

The big failure case for a Glock is something (drawstring, etc) getting into the holster and pulling the trigger. If you commit to never holstering without going really slow and shining a light down in there to verify nothing is getting at the trigger, it's safe. Which works if you just never take it out of the holster except at the range. Remove the holster and gun as a unit, stick holster and gun together in a safe, etc.
by alprado50 | 2025-07-25 06:28:24+00:00
I think that it is kinda cool to convert your notes to a website, especially if you want to easily share them. I just created a Shortcut that sends my modified notes to an email address, and then I use Eleventy to build a website. Here is the result: https://albertoprado70.github.io/Mini/this-blog-uses-ios-not...
by jrapdx3 | 2025-07-25 06:28:50+00:00
Absolutely. Years ago writing programs for *BSD/Linux, PS was the natural, most direct way to implement printing to printers equipped with a PS interpreter.

Fortunately the PS language was very well documented. That made writing PS pretty straightforward, at least for the reasons I was using it. Curiously other concatenative languages have been harder for me to grasp. Maybe that's because I regarded PS as a specific-use tool vs. a general purpose language.

If nothing else PS showed the value of excellent documentation. Lack of it probably accounts for many software project failures, particularly in the open-source world.
by theshackleford | 2025-07-25 06:29:26+00:00
Sure, but the question was specifically regarding credit cards, not debit cards. In which case, they would be correct in that penetration is appears lower for credit cards in the EU no?

Note, I am not suggesting that is a bad thing, I fail to see largely how its a bad think but perhaps I lack enough understanding to see why people not loading up on credit cards is a negative.
by eredengrin | 2025-07-25 06:29:29+00:00
> Comparing sudo <bash script> to any Windows install is 30+ years out of date. sudo can access almost all memory, raw device access, and anywhere on disk.

They didn't say anything about sudo, so assuming global filesystem/memory/device/etc access is not really a fair comparison. Many installers that come as bash scripts don't require root. There are definitely times I examine installer scripts before running them, and sudo is a pretty big determining factor in how much examination an installer will get from me (other factors include the reputation of the project, past personal experience with it, whether I'm running it in a vm or container already, how I feel on the day, etc).
by sirwhinesalot | 2025-07-25 06:29:56+00:00
I have a PhD in computer science and I'm also able to stop for two seconds and understand what ECS as used by game devs means. It is pointed out in the talk that the design pattern was used in sketchpad of all things and reinvented in 1998. They call that pattern ECS. It is unfortunate the name is overloaded but that doesn't mean that when they say ECS they're referring to the ECS you are and it is somehow a gotcha since that other ECS is still very much OOP.

They are not talking about that ECS.
by crossroadsguy | 2025-07-25 06:29:57+00:00
First things first — this is correct. As a matter of fact, the Brazillian Pix - which gets much more “eyeballs” on places like HN, are much newer than UPI and UPI was one of the inspirations, if I may say so, behind it; and it dwarves in scale. Not to mention UPI is designed to be decentralised (almost decentralised).

Fair warning (pc, please know that I am not targeting you) about the URL pc has shared - it’s literally the mouthpiece of India’s ultra right mothership org (it’s literally called that - mother org - RSS) which is affiliated with BJP (in fact practically BJP, the authoritarian ruling party, is a branch/child of this org). And they are known for omitting and distorting history and context.

Here you go - some alt sources -

https://en.wikipedia.org/wiki/Unified_Payments_Interface

But UPI is a product - real deal comes from here https://en.m.wikipedia.org/wiki/National_Payments_Corporatio...

These sources and alt sources also will highlight the history and thinking behind all this.

Like or dislike this Govt (tbh: I clearly fall in latter bracket) but I think payments is one arena (among many) where India is going really great and there many great things lined up. Luckily India is in a position right now to deliver a loud and unequivocal “F— You” to efforts from entities like MC/Visa when they try to assert their “birthright” of monopolising the world.
by SJC_Hacker | 2025-07-25 06:30:43+00:00
There isn’t anything could do about the US invading Cuba because no one has much of a blue water navy outside the US itself.

Now granted, China is getting there but their navy is still mostly brown water (by design). And in any Taiwan / SCS conflict they would have an advantage because they can use their land assets, especially air force and land based anti ship rockets, on top of their navy.

The US land bases in the region are few or dependent on the grace of the host countries. Depending on political situation they might not Ok strikes against China if a conflict occurs for fear of being drawn into the war and angering China if the US loses. The only one Id be 100% on is Japan, they’d fight China to the last.
by ThePowerOfFuet | 2025-07-25 06:30:49+00:00
>The only technical limitation I have encountered using these ROMs is related to GPS: my position is often lost and I need at least multiple minutes to gain it back (or sometimes it never comes back, depending on where I am). This is likely related to not using Google's location services, even though I have turned on all settings like using WiFi / bluetooth to improve the location accuracy. I tried every advice I found online, without luck. Somehow the issue is a bit worse on Graphene, as my position is lost every time I close the Maps app, but it may be related to the phone and not the OS.

Pixel 8 works amazingly with Graphene's new network location feature. Position fixes are SO MUCH FASTER. It is truly a gamechanger. First it was Wi-Fi only, but they just released cellular location as well. They provide a proxy to Apple's location services.
by deelowe | 2025-07-25 06:30:56+00:00
Two different issues. Drop safe and uncommanded discharge. The rework is only for the former. Sig still denies the latter has ever happened. I'm guessing that's about to change though as I know of 3 separate instances of uncommanded discharge that are well documented. Two with law enforcement (one on video posted earlier in this thread) and now this one). There's something very off with the FCG in this firearm.
by phyzix5761 | 2025-07-25 06:31:03+00:00
I'm not seeing where private citizens are prevented from engaging in lawful private microeconomic activity when a privately owned payment processor doesn't want to engage in certain transactions. The private citizen has the option to pay cash, bitcoin, trade goods or services, etc. Are these options as convenient in this day and age as tapping a credit card? No, but that doesn't mean everyone is entitled to convenience in every situation.

Also, how do you reconcile the fact that many US citizens, for religious or other reasons, can't in good conscience endorse certain economic exchanges? A government that is supposed to represent the needs of all citizens would fail if it engaged in facilitating transactions that some portion of its population found immoral or inappropriate. The public has no say in private, legal, transactions but public enforcement on private entities is a different story; akin to endorsement.

The best we can do is ensure that private citizens have the freedom to engage in legal transactions. But if we start forcing private entities to participate in every legal transaction, we risk setting a precedent that could backfire. Especially when a future administration decides to enforce or block transactions based on political or ideological grounds that conflict with our own values.
by acoustics | 2025-07-25 06:31:42+00:00
Big tech companies use open-source software primarily because it is free and unencumbered.

If an author uses a license that makes big tech pay, they will not pay. They will just not use the software. We already see a similar dynamic with AGPL.

It's easy to fall into a trap of thinking "I have several big companies using this software. If I had charged a reasonable license fee, I'd be making $100k/yr on this project." But, of course, if the project has started with this license, it never would have gotten to the point where several big companies were using it.

This is why we very rarely see successful GitHub projects that have asked for payment from the beginning. If a maintainer wants to make money on a GitHub project, the far more common path is: 1) release the software with a free and unencumbered license; 2) wait for people to adopt your software because it's free; and finally 3) once people have adopted your software because it's free, then ask them to start paying you.

In fact, in the early stages of an open source project, if someone opened an issue that said "hey do you want to set a norm of commercial users paying to use your software?" it would be rational to say no! You don't want to scare off big tech engineers. Better to wait until they're already using the software.
by matheusmoreira | 2025-07-25 06:31:49+00:00
American corporations have never been shy about using the might of the US government to protect their own interests. USTR's "notorious market reports" is a nice example. "Our stakeholders" want this, "our stakeholders" are concerned about that. It's a huge list sovereign nations get onto when american corporations don't like them. They put Canada on that list at some point.

I fully expected Trump to attempt to leverage the Bolsonaro trial into economic advantage but it was pretty surprising to see him take issue with pix of all things.
by edg5000 | 2025-07-25 06:31:56+00:00
Good point about those constraints. It's bad when governments have a superhighway of information with an email provider. If they have to go through a painful process for each email, it would be like the paper envelope. But if they have an arrangement with the email provider where they can access whatever they want, that would be a terrible downgrade for the people compared to the paper mail days indeed. We have proof that such mass data collection happened in some countries.
by rconstant1 | 2025-07-25 06:31:59+00:00
If such a fundamental theory appeared and, say, showed that quantum probabilities are merely emergent from a deeper, almost “informationally deterministic”, law—my first reaction would be both awe and pragmatic excitement. But my essential question would be:

How does the new framework make concrete, falsifiable contact with measurement? In other words: Does it yield unmistakable, testable consequences in the way we extract information from experiments—not just new field equations or mathematically elegant objects?

I’ve devoted my own research (see https://github.com/rconstant1/metrologie-entropique-constant... ) to this question of measurement-as-bias-correction:

Instead of seeing quantum uncertainty or bias in data as “annoying noise”, I treat it as an informational clue to what’s truly fundamental.

If the new theory makes quantum randomness deterministic below the surface, then measurement outcomes (and their entropic corrections) become the direct probes of this “hidden layer”.

So the recipe for revolutionary science would be:

Propose your elegant new equation.

Show exactly how any experiment’s entropic bias or uncertainty will shift in the new theory—compared to the old one.

Publish the “statistical procedure” for experimenters: what concrete bias-corrections or informational signatures should they hunt for, in atomic clocks, cosmological surveys, or particle beams, that Einstein/Bohr did not predict?

If quantum processes turn out to be deterministic under the hood, “entropy” and “bias correction” will be the microscopes, not the obstacles, to seeing the new reality.

Ultimately, what would revolutionize science isn’t just a new equation, but a new attitude toward measurement —where information theory, uncertainty, and bias quantification become our main laboratory tools to find cracks in today’s deepest laws.

Would love to see foundational theorists and experimentalists collaborate on this directly—not just for gravity or quantum, but for all of science.

(PS: If any theorists or experimentalists want to brainstorm practical protocols that could reveal “hidden determinism,” DM or comment!)
by ashdksnndck | 2025-07-25 06:32:00+00:00
Be careful keeping important things in Apple Notes and not backing it up elsewhere. One time I disabled the iCloud sync on Apple Note from my Mac. All of my notes disappeared everywhere. The notes were previously available across all my devices logged into that account as well as the web UI - all gone and unrecoverable (I did a lot of research and tried everything). And no warning in the UI that disabling the iCloud sync would delete any data.

Dumb mistake I won’t make again.

I’ve heard many times over the years not to trust “the cloud” and don’t consider it to be a valid backup solution. This is the first time I’ve ever actually been bitten by it.
by righthand | 2025-07-25 06:32:04+00:00
You’re not listening then, you have to incentivize the use of healthcare. That solves that situation. If using healthcare isn’t a stigma that leaves you with a horrendously expensive bill, then people would feel confident in getting the help.

I am sorry you had to listen to someone scream. At least that person wasn’t unjustly locked up and stripped of their rights because you got anxiety. Her screaming is a 10000% better than creating another “mental health” private prison system.
by burnt-resistor | 2025-07-25 06:32:06+00:00
Don't do that for anything critical. Manage mdraid yourself. It's a whole lot more predictable, manageable, and debuggable than an opaque abstraction.

Example: I have 5 XFS volumes across 45 drives on a 4U NAS box with 1 cold spare. Granted, I probably should've chopped them up with a single-box hypervisor RAIDless Ceph cluster of VMs in retrospect.
by SkiFire13 | 2025-07-25 06:32:18+00:00
The segfault seen here is not a property of the language implementation, it's just a consequence of the address chosen by the attacker: 42. If you replicated this code in C you would get the same result, and if you used an address pointing to mapped memory in Go then the program would continue executing like in similar exploits in C.

The only reason this isn't a more critical issue is because data races are hard to exploit and there aren't lot of concurrent Go programs/system libraries that accept lot of attacker controlled inputs.
by globular-toast | 2025-07-25 06:32:38+00:00
I've blown people's minds by spoofing "From" before. It's amazing the completely unwarranted level of trust people have in things. I tell people it's no different from me typing up a letter and putting "love from Mum" at the bottom.

I blame shiny email clients like Outhouse etc. It's really dangerous to make something look like a better system than it is. If email were still viewed as plain text I don't think it would be seen the same.
by oskarkk | 2025-07-25 06:33:10+00:00
So, given that human body area viewed from the front is around 0.5 m^2, then a 70 kg human in space 1000 miles from the explosion would get 6.4 kJ * 0.5 / 70 kg = 45 gray. That would mean that even being a couple thousand miles away could be fatal. But that's assuming 100% of Tsar Bomba energy would be ionizing radiation, I don't know what % would that be in reality.