MurphyA/hacker-news huggingface dataset:
by gofastercloud | 2025-07-19 06:32:24+00:00
My wife has an old-ish Lenovo T14s which I’m debating stealing to play with Linux on. Last time I ran Linux as a desktop OS was Gentoo on a Sony Vaio about 15 years ago and, while the experience was good, the weekends spent building software from source were not!!!

I’ve been a Mac user for about 10 years now, but been doing Unix/Linux sysadmin since the late 90s. Hopefully I can pick it up again! What are people using for a distro nowadays? Any recommendations that work well with Thinkpads?
by Loic | 2025-07-19 06:32:41+00:00
It is more than depressing. During my PhD/Postdoc, we had excellent collaboration with the EPA on stuff which then really improved the life of people in the US. These agencies need to do research to stay ahead of/keep up with the development.

Context: we developed chemicals toxicity prediction models. This was 20 years ago, this allowed the EPA to quality check applications made by chemical companies.
by mirdaki | 2025-07-19 06:34:44+00:00
I've found a lot of docs (Proxmox and TrueNAS are both guilty of this) assume you have existing domain or tool knowledge. I'd recommend checking out some videos from selfhosting YouTubers. They often explain more about what's actually happening than just what buttons to select

Also, I found TrueNAS's interface a little more understandable. If Proxmox isn't jiving with you, you could give that a try
by jraedisch | 2025-07-19 06:35:39+00:00
The reasoning could be that this makes reliably scaling down (and thus keep making a profit) easier, starting with getting rid of SREs.

We have similar movement going on with Xing here in Hamburg, Germany (once conceived as a LinkedIn competitor).

Great names that still have a lot of momentum, but are expected by ownership to slow down.

Reminds me of Scott Galloway’s most profitable investment having been a yellow pages company. Yes, the market shrunk, but they could shrink running costs as fast or even faster.
by FreakLegion | 2025-07-19 06:36:33+00:00
All the time, where ancient is, say, 15+ years old. I can't remember ever having an issue with it, unlike the reverse [1]. Even if there were issues, though, glibc's symbol versioning is a different beast than the Linux ABI.

1. https://news.ycombinator.com/item?id=31963255
by northhnbesthn | 2025-07-19 06:36:52+00:00
This seems like a fairly ORM 100-level thing. Read the documentation that comes with your ORM I guarantee it has a best practices section and a performance considerations section. N+1 is trivial and widely covered by every ORM as it’s a common thing. nb I use entity framework so ymmv, but EF Core especially newer versions with one-way updates and deletes have been good to me and migrations aren’t half bad either. The code is I think much easier on the eyes than python/django but that’s a personal pref.
by vunderba | 2025-07-19 06:37:15+00:00
What if it's a story but with very detailed descriptions? What if that short story is adapted into a video game but it's only a text adventure? What if we add artwork to it, but it's just pixel art? etc etc.

The ability and the freedom to explore the darkest parts of our psyche in a safe, controlled, and fictitious environment IS important. Even if we find certain aspects or fetishes repugnant and distasteful.

I find the idea that payment processors have enough power to dictate the morality of a game market concerning. Given the number of other NSFW fetishistic stuff that is still being permitted on Steam I don't buy the "chargeback" rational AT ALL.
by mirdaki | 2025-07-19 06:37:35+00:00
This article (https://xeiaso.net/blog/paranoid-nixos-2021-07-18/) walks through a lot of the steps I've done on all my NixOS systems

As for Nextcloud vs a restic server, Nextcloud is heavier, but I do benefit from it's extra features (like Calendar and Contact management) as well as use a couple of apps (Memories for photos is quite nice). Plus it's much more family friendly, which was a core requirement for my setup
by chii | 2025-07-19 06:40:10+00:00
> I do think it's funny that the investor class doesn't think AI will come for their role..

investors don't perform work (labour); they take capital risk. An ai do not own capital, and thus cannot "take" that role.

If you're asking about the role of a manager of investment, that's not an investor - that's just a worker, which can and would be automated eventually. Robo-advisors are already quite common. The owner of capital can use AI to "think" for them in choosing what capital risk to take.

And as for massive number of people who don't have income - i dont think that will come to pass either (just as you dont think AGI will come to pass). Mostly because the speed of these automation will decline as it's not that trivial to do so - the low hanging fruits would've been picked asap, and the difficult ones left will take ages to automate.
by Expurple | 2025-07-19 06:40:56+00:00
> What are the outcomes that we are talking about here?

Living a life free of guilt and regrets. People make mistakes and can't foresee everything. That's normal. That shouldn't imply any guilt. I was talking specifically about cases where, in advance, you think that you're doing the wrong thing at the cost of short-term convenience.

Regarding KHTML, I don't have any data and can't say for sure. But I'd be surprised if most developers regretted their decision later. They knew in advance that they were getting into an LGPL project that can be used as part of something freedom-restricting. And, in my subjective opinion, Safari isn't so catastrofic and harmful that it defies common expectations of how harmful a freedom-restricting product can be
by nielsbot | 2025-07-19 06:41:38+00:00
Seems to me that a government agency must, above all, have a service goal. Serve the most people the best. If you look at it that way then the IRS creating their own simple filing solution is the only way to go.

Maybe IRS execs still suffer under Reagan-era propaganda? (government is always bad. government should never compete with private industry)
by philwelch | 2025-07-19 06:42:08+00:00
> Republicans literally argue it's better for the country to have school shooters and for survivors and parents to live with PTSD for the rest of their lives than to limit access to military-grade weapons.

Can you quote any Republican who has “literally argued” this or are you just spreading lies that make it easier for you to vilify and dehumanize people who disagree with you politically?
by anigbrowl | 2025-07-19 06:42:35+00:00
They should be putting out model legislation now on a monthly basis. No, none of it can pass, none of it can get to the floor. But they need bills that they can say they will pass if given a majority, and they need to be OK with the Republicans attacking them for the next 15 months. In fact the more time the Republicans spend attacking Democratic legislative proposals, the less time they are spending on selling their own.

The Democrats also need to put out radical proposals, not incrementalist ones or business-as-usualones along with fluffy messages about competency and management skills. The public does not want a party of competent middle managers whose primary skillset is watering down expectations and telling people to be patient while they redecorate. They need to put out policies that are going to make people spit out their coffee.
by spauldo | 2025-07-19 06:43:36+00:00
I tell my coworkers, "Hey, we need this coded up as a Windows service!" and I get crickets.

So I spin up a Debian VM and POSIX the hell out of it. If they dare to complain, I tell 'em to do their damn jobs and not leave all the hard stuff to the guy that only programs on UNIX.
by mirdaki | 2025-07-19 06:43:53+00:00
Oh yeah, I don't think the way I went about it was necessarily the most cost effective. I bought half of them on sale one year, didn't get around to setting things up, then bought the other two a year later on another sale once I finally got my server put together. I got them before I had my current plan in place. At one point I thought about having more services in a Kubernets cluster or something, but dropped that idea

Also agree, RAID isn't a replacement for a backup. I have all my important data on my desktop and laptop with plans for a dedicated backup server in the future. RAID does give you more breathing room if things go wrong, and I decided that was worth it
by goku12 | 2025-07-19 06:44:15+00:00
> GPL is a theoretical idea that doesn't work in the real world, because in the real world, not everyone wants to or even can share their work products with everyone

In practice, that is wrong. GPL software is useful even in a corporate environment because you are required to distribute your modifications only to the users who you distribute the software to. So if your modifications are meant for internal use only, then it's perfectly fine to keep the modifications confined to internal distribution.

On the other hand, if you're talking about publicly distributing modified software with undisclosed modifications, then you're financially exploiting the labor of the original contributors. They did most of the work from which you derive monetary profits. The fair thing to do in such a case is to negotiate an alternate arrangement with the original contributors. Or you could opt to distribute the changes according to the original license, if that's an acceptable option.

I have seen GPL software used in corporate environments in both the manners described above, without any sort of legal or ethical concerns. But the avenue of unpaid labor is so enticing for many large tech companies, that they fearmonger against copyleft licenses as if they're the worst crime committed against open source. Their argument is that copyleft licenses are too restrictive. Restrictive to their financial ambitions, perhaps? Because I don't see them restricting the developers or the normal users in any manner.

> A very common reason as to why they aren't more popular is because they are often licensed with GPL.

They're unpopular simply because of the vilification campaigns I mentioned above. It was very popular at one time to diss on copyleft licenses without a discernable reason. That was until many realized that the permissive licenses, combined with CLAs were an easy avenue for many of those companies to extract free labor from them.
by dehrmann | 2025-07-19 06:44:34+00:00
I'm in the market for a new desktop PC. Historically, Intel has been better, or at least more likely to have Linux support. Performance-wise, it's comparable enough for productivity use and maybe more power efficient, but the company is losing money, shipping bugs that can damage hardware, and disinvesting in software. I'm late to the party, but I feel like I have to go AMD.
by anthk | 2025-07-19 06:47:13+00:00
TBH things like EFF and such were a reality, and the devs for sure they were aware, as they knew geeky/nerdy games like Nethack too; and deducing knowledge about free software and digital rights it's trivial.

Also, Deus Ex and the Unreal Engine had a GL renderer with worked amazingly great with Wine back in the day, it was one of the best games to run in early 00's. Yeah, the game was propietary and yadda, yadda; but there's the Surreal engine (libre implementation of Unreal1) on the works.

Another game on dystopias which looks parodical but it's heavily reality grounded it's Liberal Crime Squad. As an European I know near nil about the USA goverment branches and how the goverment it's built, but that game taught me the process exceptionally well. And, yes, it's a must play giving how current politics are going:

https://github.com/Kamal-Sadek/Liberal-Crime-Squad

It has an Augmentation system a la Deus Ex too.
by Expurple | 2025-07-19 06:48:17+00:00
Your comment is pointless, unless you follow up and point out what specifically has changed in these 10 years and invalidated the argument made in the article.

I don't take its conclusions uncritically. I examine them logically and I map them onto my own recent practical experience. Actually, in this thread people gave multiple good counter-examples that I haven't processed yet
by Thorrez | 2025-07-19 06:50:37+00:00
As a techie, experienced in security, reading the OIDC spec... there are definitely some things I don't understand in there. I'm not sure the authors even understand what's going on.

On 2023-12-15 they published an update to OpenID Connect Core 1.0, called "errata set 2". Previously it said to verify an ID token in a token response, the client needs to

> * If the ID Token contains multiple audiences, the Client SHOULD verify that an azp Claim is present.

> * If an azp (authorized party) Claim is present, the Client SHOULD verify that its client_id is the Claim Value.

The new version is quite different. Now it says

> * If the implementation is using extensions (which are beyond the scope of this specification) that result in the azp (authorized party) Claim being present, it SHOULD validate the azp value as specified by those extensions.

> * This validation MAY include that when an azp (authorized party) Claim is present, the Client SHOULD verify that its client_id is the Claim Value.

So core parts of the security of the ID Token are being changed in errata updates. What was the old purpose of azp? What is the new purpose of azp? Hard to tell. Did all the OIDC implementations in existence change to follow the new errata update (which didn't update the version number)? I doubt it.

https://openid.net/specs/openid-connect-core-1_0.html

https://web.archive.org/web/20231214085702/https://openid.ne...

Or how about a more fundamental question: Why does the ID Token have a signature? What attack does that signature prevent? What use cases does the signature allow? The spec doesn't explain that.
by tmountain | 2025-07-19 06:50:41+00:00
They won’t get power again in a meaningful way. The last election was their “last stand”. The U.S. has a rigged court and gerrymandered senate. Kamala was right about one thing, “we’re not going back”. Unfortunately, the context was wrong. In this case, it’s, “we’re not going back to being a functional democracy”.
by Hamuko | 2025-07-19 06:51:13+00:00
Seems like this could be easily solved with legislation without having to invent new currencies. Just make it a law that payment processors are not allowed to discriminate between legitimate goods and services. If the government thinks that sugary water or porn magazines are fine to buy and sell, why should MasterCard have anything to say about it? Payment processors are basically natural monopolies, so they should be able to be regulated.
by veganmosfet | 2025-07-19 06:51:49+00:00
I experimented with MCP and was surprised how simple 'indirect prompt injection' is (and I don't want to sell any countermeasures). People are now creating MCP servers for OT (factories); combined with untrusted input processing (common with LLMs), this may be problematic. https://veganmosfet.github.io/2025/07/14/prompt_injection_OT...
by asdfasdf1 | 2025-07-19 06:52:25+00:00
phone numbers and email are virtually mandatory nowadays for banking, taxes, and many other things, including dealing with government bureaucracy... so why the hell is not made mandatory by law to be able to go to an email/sim phone service provider's office with your ID/passport/drivers license and be able to recover your account/number?? (allowing users to choose to provide that identification&recovery info when creating their email obviously)
by Youden | 2025-07-19 06:52:29+00:00
"Helm charts and container images' open-source code will continue to be maintained up-to-date and accessible on GitHub under the Apache 2 license."

Doesn't this mean everything is still available, just in source form instead of binary? Could a situation like AlmaLinux/Rocky Linux etc. spin up where folks build a community-supported set of binaries from source?
by roenxi | 2025-07-19 06:55:23+00:00
They didn't "learn this lesson", they had a constitution imposed on them and were basically occupied for 50 years by multiple foreign powers; even up until 2020 as I recall there were about as many active US army personnel in Germany as German ones. There isn't a hugely compelling story that the constitution is the big factor in the German journey.

It isn't possible to build a paper system that consistently resists an incompetent elite and the people deciding to re-roll the dice on a new system because the current one isn't working. Corruption creeps in and people stop following the official rules.
by reichstein | 2025-07-19 06:56:07+00:00
So "cooperative multitasking is not preemptive multitasking".

The typical use of the word "asynchronous" means that the _language is single-threaded_ with cooperative multitasking (yield points) and event based, and external computations may run concurrently, instead of blocking, and will report result(s) as events.

There is no point in having asynchrony in a multithreaded or concurrent execution model, you can use blocking I/O and still have progress in the program while that one execution thread is blocked. Then you don't need the yield points to be explicit.
by LargoLasskhyfv | 2025-07-19 06:56:26+00:00
> MRI machines are not getting Moore's Lawed

Are you sure about that?

Commercial: https://hyperfine.io

'DIY':

https://hackaday.com/2015/05/04/hackaday-prize-entry-a-low-c...

https://www.eevblog.com/forum/projects/building-an-mri-machi...

https://www.ismrm.org/22/program-files/ET-08.htm

https://github.com/mri4all

https://www.researchgate.net/publication/385920900_ezyMRI_Ho...

^^^^ Those actually aren't the ones I remembered, there was something in between that 'DIY' stuff, and the commercial thing a few years ago. ISTR also commercial, but slightly less bulky. But can't be bothered to search for that now. (Probably something related to https://duckduckgo.com/?q=rebco+mri )

There is also commercial mobile stuff for veterinary use.
by noduerme | 2025-07-19 06:57:01+00:00
They don't need to make an argument for anything. They tell Valve: "Hey, if 1% of your transactions are for smut and incur smut-level-chargebacks, we're going to just treat all your transactions as smut", and Valve says, "no problem, we'll pull those games." It's not like Valve stands to profit by holding the line for free speech here or something. Valve gives as little a shit about an indie porn game as it does about anything else. Honestly, why should they pay the extra percentage across the board to defend it anyway? This is why I'm saying a separate X-rated platform would get a lot of traction.
by dragonwriter | 2025-07-19 06:58:28+00:00
> Did all the OIDC implementations in existence change to follow the new errata update (which didn't update the version number)?

I mean, both the old and new version (at least, the parts quoted upthread) are exclusively SHOULD and MAY with no MUST, so (assuming, for the SHOULDs, the implementer had what they felt was sufficiently good reason) literally any behavior is possible while following the spec.
by seec | 2025-07-19 07:00:02+00:00
I believe autism is stigmatized and presented as something wrong because most people do not want to engage in honest/candid conversation because it might hurt their feelings.

People are always looking for plausible deniability and weaponized vagueness in order to get away with things. They don't like it when others don't behave that way because it puts them in situations where they would have to assume the risks of their behaviors.

As far as I'm concerned, it's not the so-called autists that are in the wrong but everyone else that is basically engaged in deceptive behavior. I think this behavior is the most prevalent because of evolutionary pressure, in order to avoid conflict and potentially bad outcomes.

It makes sense in a violent world were looking at someone wrong may get you killed but is very unproductive in a society that is supposed to be orderly and high trust.

That being said it seems like the world is becoming much more low trust and autistic behavior can indeed become risky/problematic.
by ReddBird | 2025-07-19 07:00:28+00:00
I built this site for those software projects you have been working on and want the world to see. It’s also geared towards finding collaborators in an early stage. It is catered towards open sourced projects (in line with finding collaborators).

I had a lot of fun building it, and would love to see what the community thinking of it. I put a heavy emphasis on making the UI beautiful on both mobile and desktop.

Any feedback? Areas in which the site can improve? I’d love to hear it!

Would love to see if any devs want to assist in its further development as well.
by TFYS | 2025-07-19 07:00:46+00:00
Sometimes you can't reverse the damage and societal change after the market has already been created and shaped. Look at fossil fuels, plastic, social media, etc. We're now dependent on things that cause us harm, the damage done is irreversible and regulation is no longer possible because these innovations are now embedded in the foundations of modern society.

Innovation is good, but there's no need to go as fast as possible. We can be careful about things and study the effects more deeply before unleashing life changing technologies into the world. Now we're seeing the internet get destroyed by LLMs because a few people decided it was ok to do so. The benefits of this are not even clear yet, but we're still doing it just because we can. It's like driving a car at full speed into a corner just to see what's behind it.
by ggm | 2025-07-19 07:01:25+00:00
It has been said of all the senses, scent, a sense of smell is amongst the last to go, possibly because it's amongst the first to make bindings in the brain, with a remarkably direct path. Old people with aphasia and dementia can be brought into quite alert states with smells from their past like horse manure, or old perfumes.

https://pmc.ncbi.nlm.nih.gov/articles/PMC9243450/

Perfumiers change recipes because CITES don't allow use of some animal derived products, and because of price, and changing health concerns with chemicals.

https://ifrafragrance.org/initiatives-positions/innovation-s...

Primo Levi writes of post war searches for snake shit, which contains a urea concentrate which makes lipstick bind to the skin. Circus snake handlers laugh at him because it's sold on contract to the big perfume houses, not to random chemists.

The Periodic Table https://share.google/rOmXYeiScZwBPCE40
by carrodher | 2025-07-19 07:01:48+00:00
That's what Bitnami Secure Images comes to solve. Bitnami regularly updates its images with the latest system packages; however, certain CVEs may persist until they are patched in the OS (Debian 12) or the application itself. Additionally, some CVEs remain unfixed due to the absence of available patches. In vulnerability scanners like Trivy, you can use the `--ignore-unfixed` flag to ignore such CVEs.

In the case of Bitnami Secure Image, the underlying distro is PhotonOS, which is oriented to have zero CVEs.
by noduerme | 2025-07-19 07:02:20+00:00
Yes, and it's been tried before. LibertyCoin, I think.

Write a Steam knockoff platform that's trustworthy enough for people to download, and load it up with dirty games. Put the premium on the customers if they want to use credit card transactions, otherwise push them towards crypto payments. Maybe you won't be an oligarch, but you'll probably end up with a reasonably sized yacht.

[edit] hell, in a few years if the winds shift you might be DraftKings.