MurphyA/hacker-news huggingface dataset:
by ankit219 | 2025-07-04 07:57:42+00:00
Calling it sloppy work is too charitable. It's one thing for others to give you a benefit of the doubt, it's absolutely crazy that you yourself are doing it. It's clear if the other guy did not speak up, you would not have "corrected" the incorrect attribution. Your entire repo uses the work from someone else, and you did not even credit the person who built it until he called you out for the deception.
by marcyb5st | 2025-07-04 07:57:44+00:00
The problem is that it is not ok for every other animal and plant sharing the planet with us. The climate is changing at never seen rates apart from the aftermath of asteroid impacts, mega eruptions, and other such events.

It is so fast in fact, that animals especially don't/won't have the number of generations necessary to make natural selection make them evolve in the right ways to survive a warmer Earth.

Finally, it might not be Ok as the planet could become uninhabitable. For example, given enough CO2/other greenhouse gasses the air becomes warmer to a level where it can hold enough water vapor (a more powerful greenhouse gas than CO2) that the planet could enter a spiral where it get's warmer, warmer air can hold more water vapor, which makes everything warmer, ... until you get to something that is closer to Venus with its super high greenhouse gasses and hot atmosphere.
by oaiey | 2025-07-04 07:58:04+00:00
I do not know what is wrong with software engineers. This is theft (or whatever the lawyers says in the IP law) and now stating: Ooops we did not know, our bad, we keep it till we have found a replacement. Mistakes happen also in real life, but libraries is a common thing, like cars standing on a street. You do not accidently steal a car.

Software Engineering is more than coding. Basic license management incl. library vetting is part of it. If you decide to ignore that, you do not run a business enterprise, you run a criminal enterprise.
Estimating the number of J programmers in HN
by betasilly | 2025-07-04 08:00:28+00:00
In statistic you can estimate the population size by coloring fishes that you put in a lake and some time later you fish in that lake, the proportion of colored fishes allows you to estimate the size of the population.

Four month ago I posted some J identities and there was only one comment form a J programmer, yesterday I posted some J code and the only comment was from the same commenter (or colored fish), so there must be very few J programmers in HN, or more precisely, very few that post J related material.

Since many people dislike J code and downvote it that is equivalent to fishes that flee to not be captured, so this method of population size estimation could be biased, can you hint how to estimate it better?

Edited: My guess?, I should guess that there are less than 10 active J programmers in HN.
by hnlmorg | 2025-07-04 08:01:28+00:00
Seeming as I'm getting downvoted, let me explain my point better -- and please hear me through because I'm genuinely making some balanced arguments here rather than just viewing things as "black and white":

If you care about security enough to be concerned about memory-safety bugs in tmux, then tmux is already a fail, regardless of whether it's written in Rust. I detailed some features in another comment about some of tmux's features that basically make it spyware for untrusted code. And that's got nothing to do with the language it is written in.

But assuming you only care about terminal output and trust the software you execute, then you still have a hundred other libraries written in C between and tmux and the internet: openssh, libcurl, openssl, glibc, and so on and so forth. I'd actually welcome seeing many other those rewritten in Rust (or another memory safe language). So rewriting tmux before them is a lot like closing the barn door after the horse has already bolted.

Thus if you're genuinely concerned about memory safety security vulnerabilities then the only safe way to work with untrusted output is in a VM.

As it happens, this is exactly how highly secure systems operate. Their developers work on VMs which are tightly locked down by the vendor and easy to destroy if they become compromised.

Literally the only way to solve the problem you describe is to assume the entire stack is already compromised and thus run it in a sandbox.

So does rewriting tmux in Rust improve security? Yes, technically you're right. But it makes almost zero practical benefit compared to everything else. Memory-safety in tmux is not your weak link here. Not even remotely.

Disclaimer: I've developed terminal emulators, shells and terminal multiplexers in memory safe languages. My latest project makes heavy use of tmux integrations (again, in a memory safe language) so I'm very familiar with tmux's quirks. I also have a background in DevSecOps. You could almost say this topic is my specialist subject ;) The Rust hype is a generally good thing but misplaced in this very specific discussion.
by account42 | 2025-07-04 08:01:39+00:00
> ICE is already brutally arresting vacationers in the US on valid tourist visas, accusing them of being "illegals" simply for being brown.

Can you back that up with evidence? Just because someone claims that they were denied entry / detained / deported due to skin color doesn't mean that was the case. Many such cases where media has jumped on to claims that turned out to be false.

> This is why no one from the rest of the world wants to vacation, work, or live in America anymore.

Absolutely false, only those who let them be manipulated by scare media think there is actually a measurable risk for coming to the US legally.
by patrickhogan1 | 2025-07-04 08:02:12+00:00
Australia printed a lot more money relatively than the US from COVID-19 until now, largely to capitalize on a booming commodities sector. A factor that led to some do weakness.

But I think any weakness is temporary. With a stable government and abundant natural resources that will be even more sought-after in an AI-driven world and largely insulated from automation Australia’s long-term prospects look strong.
by novacustom | 2025-07-04 08:03:32+00:00
Heads firmware is an underrated but vital security tool for the highest security standards, especially useful for operating systems that don't support UEFI Secure Boot (like Qubes OS). Sometimes, Qubes-related stuff is just too long to read, especially for newbies. We often get the question: what is Heads firmware?

Without going into details, this video shows the use case and how the boot process works.
Show HN: YouTube Thumbnail Downloader – HD Thumbnails for Shorts and Videos
by sachou | 2025-07-04 08:03:53+00:00
I built a free tool to download YouTube thumbnails in HD no ads, no signup, just paste a link and download.

It works for Shorts, long-form videos, and playlists.

I made it for my own YouTube workflow to include in aithumbnail.so

looking for any feedback!
by MatteoFrigo | 2025-07-04 08:03:53+00:00
Great question. The current thinking, at least in high level-of-assurance situations, is this. The identity document is only usable in cooperation with a hardware security element. The relying party picks a random nonce and sends it to the device. The device signs the nonce using the SE, and either sends the signature back to the relying party (in the non-ZKP case), or produces a ZKP that the signature is correct. The SE requires some kind of biometric authentication to work, e.g. fingerprint. So you cannot set up a bot that mints attestations. (All this has nothing to do with ZKP and would work the same way without ZKP.)

In general there is a tradeoff between security and privacy, and different use cases will need to choose where they want to be on this spectrum. Our ZKP library at least makes the privacy end possible.
by factsaresacred | 2025-07-04 08:04:17+00:00
I follow a bunch of YC founders on X. Lots of behavior that could be construed as 'growth hacking - or 'deceptive' depending on your bent: promoting open source libraries that don't work, rewriting tweets from smaller accounts, coordinated replies from mutuals and so on.

I guess that's the game, but they do seem a lot more cavalier about it of late. Increasingly resembles the crypto 'community' (derogatory).
by dale_glass | 2025-07-04 08:04:30+00:00
I mean, retail has many different instances of it. Yes, I can imagine working in a busy supermarket owned by a giant like Walmart would be unpleasant.

But imagine working in a nice cafe in a quiet small town, or a business that's not too frantically paced, like a clothing store. Add some perks like not always doing the same job and a decent boss, and it shouldn't be too bad. Most any job can be drastically improved by decreasing the workload, cutting hours and adding some variety. I don't think being a cashier is inherently miserable. It's just the way we structure things most of the time makes it suck.

Just like you think a human touch makes art special, a human touch can make a mundane job special. A human serving coffee instead of a machine can tell you about what different options are available, recommend things, offer adjustments a machine might not, chat about stuff while it's brewing... You may end up patronizing a particular cafe because you like the person at the counter.
by timewizard | 2025-07-04 08:04:33+00:00
> the dollar has been insanely overvalued post-COVID.

That's an odd way of saying the US doubled it's federal budget from $3T to $6T in response to COVID and has now ensconced this pork further into law. Under a "republican" administration, no less.

> The dollar losing its value is a return to the pre-covid norm.

Which is to say that even $3T contained an unjustified amount of debt spending just not as obscene as it is today.

> It's a high that can't last forever.

That's the "big beautiful bill" for ya.
Tell HN: Sweden has its first arrest against a man for "insult against official"
by acadapter | 2025-07-04 08:05:20+00:00
On July 2, it became illegal to phrase insults against publicly employed staff such as police officers, teachers, medical personnel, etc.

A 60 year old man in Sweden was stopped and arrested for both a DUI and the insults he said in conjunction to the police stop. The penalty scale for "insult against official" can be fines or up to 5 months in prison depending on severity.

/r/sweden discussion with news link (in Swedish):

https://old.reddit.com/r/sweden/comments/1lqnxea/f%C3%B6rsta_gripande_f%C3%B6r_f%C3%B6rol%C3%A4mpning_mot_polisen/
by _l7dh | 2025-07-04 08:05:42+00:00
Of course. Here is a corrected version of your text that fixes the grammar and typos while keeping the colloquial tone:

I'd like to offer a less skeptical view on this, contrary to what I've read here so far. LLMs that act (a.k.a. agents) bring a whole lot of new security and privacy issues. If we were already heading toward a privacy dystopia (with trackers, centralized services, etc.), agents could take that to a whole new level.

That's why I can only cheer when I see a different path where agents are run locally (by the way, Hugging Face has already published a couple of spaces demonstrating that). As a plus, because they're small, their environmental footprint will also be smaller (although, admittedly, I can also see the Jevons Paradox possibly happening here too).
by SeanAnderson | 2025-07-04 08:06:43+00:00
https://i.imgur.com/LkclqgV.png

Here's how the US Dollar Index has performed over the last ~30 years. The swing looks pretty typical to me. If it drops another 10% (as the article says Morgan Stanley thinks it might) then I could see this event as an outlier. For now, I find it interesting but not especially concerning. There's pros and cons to having stronger/weaker currency. I think it's probably worse to have a volatile currency than an especially strong or weak one?
by littlestymaar | 2025-07-04 08:06:52+00:00
> Historically, the euro has generally been a good bit more valuable than the dollar. But in 2022, the dollar was more valuable than the euro at a point

That's what inflation does.

People are routinely taught that inflation is the “decline of value of money”, but that's not the reality. Inflation is just the increase in consumer price, which is perceived as a decline in the relative value of the money, but its absolute value on foreign markets isn't (directly) affected by inflation.

And when the Central bank raise the interest rate to cool the economy down and temper inflation, then the absolute value of the money rises (because the higher the interest rates, the pricier the currency on the FX market). This increase in the currency value in turn also helps fighting inflation because it lowers the cost of imported goods.

So, indirectly, because of the central bank's reaction, inflation is actually increasing the absolute value of money, and this is what we saw in 2022 when the Fed raised the interest rates 9 month or so before the ECB start doing the same (because the inflation came in advance for the US compared to EU).
by clarionbell | 2025-07-04 08:07:02+00:00
US doesn't just make weaponry but let's roll with that. You said there are two major markets now, I assume you mean Europe, that is the most wealthy continent, and Middle East one of the most awash with cash regions in the world.

You may be tempted to assume that only active participants in wars buy weapons, but that has never been the case. And especially now, you have many countries trying to restock and prepare.
by eesmith | 2025-07-04 08:08:08+00:00
Rarely. I feel lost when I use GPS to get places.

Alec Watson of Technology Connections points out that GPS routing defaults to minimizing time, even when that may not the most logical way to get somewhere.

His commentary, which starts at https://youtu.be/QEJpZjg8GuA?t=1804 , is an example of his larger argument about the complacency of letting automation do things for you.

His example is a Google Maps routing which saves one minute by going a long way to use a fast expressway (plus $1 toll), rather than more direct but slower state routes and surface streets. It optimizes one variable - time - of the many variables which might be important to you - wear&tear, toll costs, and the delight of knowing more about what's going on in the neighborhood.

His makes the point that he is not calling for a return to paper maps, but rather to reject automation complacency, which I'll interpret as letting the GPS figure everything out for you.

We've all heard stories of people depending on their GPS too much then ending up stuck on a forest road, or in a lake, or other place which requires rescue - what's the equivalent failure mode with a calculator?
by hnlmorg | 2025-07-04 08:08:53+00:00
This whole industry is complex and needs constant maintenance. APIs break all the time -- and that's assuming they were even correct to begin with. New models are constantly released, each with their own new quirks. People are still figuring out how to build this tech -- and as quickly as they figure one thing out, the goal posts move again.

This entire field is basically being built on quicksand. And it will stay like this until the bubble bursts.
Show HN: I built an AI that automates my entire freelancing business–now what?
by cranberryturkey | 2025-07-04 08:09:25+00:00
I was tired of repetitive client work—proposal writing, emailing, lead-gen, chasing payments—so I built an AI-driven system that automates all of it.

My system handles:

- Lead sourcing and qualification - Proposal generation (customized, human-quality RFP responses) - Invoicing and follow-ups - Even basic client communications via email/chat automation

Now I'm spending almost no time on routine business tasks.

But here's the twist: I’m getting restless. This thing freed up so much of my time that I'm not even sure what to do next.

I'd love some feedback—has anyone else automated themselves out of their job? What did you do afterward?
by seanhunter | 2025-07-04 08:09:35+00:00
To attach a couple of personal anecdotes to this:

1) I once was in a position where I had root on the linux boxes at a large corporation because I had been a sysadmin there and even when I changed roles, I was never removed from sudoers. Years later there was an accusation that someone had stolen source code and taken it with them to a new job. On its face this made absolutely no sense whatsoever - the system they were accused of stealing was a complete pos in the middle of a complex ecosystem so even if you had it, you couldn’t use it without all the other pieces and in any case, it was old and outdated and just total garbage. Anyway this accusation was somewhat hush—hush so the cto came to me and asked me to just look into whether or not it could be true. Sure enough, there in his bash history I could see him checking out the code and pushing it to an external repo. It made absolutely no sense, but he had indeed stolen the source code to a system that was a total piece of junk. He ended up with a criminal conviction, he lost his shiny new job, his wife left him etc. It was very said and baffling.

2)Second example, fast forward some years and I was working for a saas provider. We had won an initial proof of concept and were negotiating a 5-year, multi-million dollar contract. At the same time, our client asked us to just do a free two-week spike on something unrelated. We had to sign a (different) zero dollar contract to cover licenses, liability etc for the free spike. The same purchasing lawyer was working on both contracts. The usual contracting process is you send the contract over to the other side with some markup and comments, they make some markup and comments, you propose language, they amend it, they propose language, you amend it, eventually everyone agrees and you make a clean copy and both sides sign. While we were doing this for the big contract, we got to the point of signing the zero dollar contract. At the last moment with everything agreed, the other side said they would make the clean copy. They sent it over to us and when we did our final check before signing we found the guy on the other side had meticulously gone through and made a version which accepted all their changes and backed out all of our changes. This required a lot of extra work and could not have been an accident (think cherrypicking commits and fixing all the merge conflicts using only MS Word revision history), and it was on the zero dollar contract so there was no conceivable upside except he could say he “won” somehow by tricking us. All this while we were negotiating the multi-million dollar multiyear contract. It made absolutely no sense whatsoever to do what he did. There is no way to understand why he decided to do it, but he did it.

So yeah, don’t even try to understand why some people do the unethical things they do. Scorpions gotta sting. It’s just what they do.
by reify | 2025-07-04 08:10:27+00:00
being an android AOSP user I had no way to download or check for updates for signal messenger.

writing this bash script at nearly 70 years old was like getting my first degree.

it took me ages.

download-signal-script.sh

signal is now available in the Guardian project repo.

===========================

#! /bin/bash

# save json output to read shasums

curl -s https://updates.signal.org/android/latest.json -o json.txt

# save url from json to file

curl -s https://updates.signal.org/android/latest.json | jq ".url" -r >signal.txt

# show url

cat json.txt | jq ".url" -r

# remove files if selcted no and ext

trap "rm -f json.txt signal.txt" EXIT

# ask to continue

while true

do

read -r -p 'Do you want to continue? ' choice case "$choice" in y|Y) break;; n|N) exit;; esac

done

# download new signal update

xargs -n 1 curl -O < signal.txt

# extract the sha256sum from the url or json file

# curl -s https://updates.signal.org/android/latest.json | jq ".sha256sum" -r

# check the files sha256sum

cat signal.txt | echo | sha256sum *.apk

# compare shasums

cat json.txt | jq ".sha256sum" -r

===============================================
by konstantina_ps | 2025-07-04 08:10:37+00:00
Kaedim | Software Engineer, Machine Learning Engineer, Customer Support Engineer, Product Manager, Founding Recruiter | Onsite | Full-time | San Francisco, Singapore, London | US & UK Sponsorship Available Kaedim is an AI startup building ML algorithms that turn images into digital 3d models. We are a group of ~10 looking to grow the team to help streamline 3d content creation for 3d artists and are already working with 1 of the top 10 games of all time! Using our AI and in-house art team, we have the most accurate, game-ready 2d → 3d asset generation pipeline. Currently, we are offering a 10x speed up to 3D asset creation pipelines of 200+ game developers and we are working with partners like Voodoo, Upland, Azra Games.

Check out our demo here: https://www.youtube.com/watch?v=tlQWFG1DLb0

Job descriptions and application link: https://join-kaedim.notion.site/

Tech Stack:

Product (web app, API): React, MySQL, NodeJS, Python, AWS

Machine Learning: Python, PyTorch, AWS
by sandGorgon | 2025-07-04 08:11:36+00:00
i build an opensource mobile browser - we create ai agents (that run in the background) on the mobile browser. and build an extension framework on top so u can create these agents by publishing an extension.

we hook into the android workmanager framework and do some quirky things with tab handling to make this work. its harder to do this on mobile than on desktop.

bunch of people are trying to do interesting things like an automatic labubu purchase agent (on popmart) :D lots of purchase related agents

pull requests welcome ! https://github.com/wootzapp/wootz-browser/pull/334
by Cthulhu_ | 2025-07-04 08:11:52+00:00
I've said it in another comment (might be here or Reddit, I don't even know anymore) and it feels like basic skills are just overlooked or taken for granted these days - computer use, mouse / keyboard / typing skills, reading comprehension, writing ability, communication skills, etc.

I'm nowhere near a hiring position but if I was I'd add assessing that to the application procedure.

It feels like this is part of a set of growing issues, with millennials being the only generation in between gen X / boomers and gen Z that have computer skills and can do things like manage files or read a whole paragraph of text without a computer generated voice + RSVP [0] + Subway Surfers gameplay in the background.

But it was also millennials that identified their own quickly diminishing attention spans, during the rise of Twitter, Youtube, Netflix and the like [1].

I want to believe all of this is giving me some job security at least.

[0] https://en.wikipedia.org/wiki/Rapid_serial_visual_presentati...

[1] https://randsinrepose.com/archives/nadd/ (originally published 2003, updated over time to reference newer trends)
by hx8 | 2025-07-04 08:11:54+00:00
You should evaluate foreign market results based on your domestic currency. Here is the US centric example.

1. You exchange Dollars for Euros

2. You buy a stock in Euros

3. You hold the stock in Euros for a period of time

4. You sell the stock in Euros

5. You exchange your Euros for Dollars.

The difference in the exchange rate in step 1 and 5 can have a very large impact on your total return, often times a larger impact than step 3.
by chneu | 2025-07-04 08:12:08+00:00
Stop blaming China and India. They're an easy excuse.

And yes, we do need to give up several aspects of our lifestyles. Meat consumption absolutely must come down. Air travel must come down. Disposable goods, and consumer plastics, must come down. Our lifestyles must change. Capitalism encourages status symbol goods such as beef, travel/tourism, excessive consumption goods, etc.

We need widespread consumer behavioral change before we have any hope of governments listening to people. As long as half of the population doesn't care about the climate then nothing meaningful will get done. For real change to happen people need sunk cost. Right now people have far too many excuses and denials to actually do much. There is always a China to blame, or a company to blame, or a mega rich person to blame.