MurphyA/hacker-news huggingface dataset:
by handfuloflight | 2025-07-09 18:54:10+00:00
Are you really going to be pedantic now and accuse me of deception? OP said: "Developer doesn't seem keen on changing things." Which I can rightly interpret as the developer didn't respond meaningfully or at all. Knowing the nature of OP, he would have surely published the developer's responses if he did. And if he did respond, what I said is semantically valid in that OP did not receive the response he or we would expect: the developer actually doing something about these vulnerabilities.

Apple absolutely should be contacted here: they have App Store Review Guidelines that this app clearly violates. Apps in the kids category and apps intended for kids cannot include third-party advertising or analytics software and may not transmit data to third parties. This app is transmitting children's location data to third parties through unsecured APIs, which directly violates Apple's kids category guidelines.

But you're completely ignoring the main point: by publishing this detailed technical writeup instead of escalating to Apple, the author has now made these children MORE vulnerable.
by igouy | 2025-07-09 18:54:12+00:00
*iirc* pretty much all of the Smalltalks (that was CUIS).

~

"Creating blocks in Smalltalk has always been a potential source of performance problems. … In Resilient, we have restricted blocks to be last in-first-out (LIFO)…"

https://blog.bracha.org/resilient-paper.pdf

~

"Digitalk’s Team/V unobtrusively introduced a non-reflective syntax…"

https://wirfs-brock.com/allen/posts/914
by mk_stjames | 2025-07-09 18:55:45+00:00
Stargate, where Daniel Jackson (James Spader) explains to the military officers how he's found that the symbols on the cartouche aren't hieroglyphs, they are star constellations, and that they represent a course from an origin to a position in space, and then following that, he gets shown the gate, where it is explained to him what they think it is and what they are trying to do with it.

It's double sided exposition where the audience gets to just bask in it, and it is brilliantly portrayed.
by retooth | 2025-07-09 18:55:58+00:00
1. Thanks for the link. I am reading a bit of your code right now :) Also nice to see that it is GPL licensed too. In regards to intervals: What still confuses me in the design process is that in certain uneven tunings, (e.g. Pythagorean) there seems to be two approaches to naming intervals. One would be an "absolute" approach, where intervals that do not form a 5/4 ratio would not be considered a major third, and one "functional" approach, where the exact frequency ratio does not matter and the interval name is simply deduced from the note names (D to F# is a major third even tough the ratio is 81/64)

2. I'm not sure what you exactly mean by sub-scales. Imho the best approach in xenharmlib to define maqams from ajnas would be to define ajnas as interval sequences in 24-EDO and then concatenate them with + to a maqam interval sequences. Then you can use the result to define maqams on any note.

3. Thanks for the links. I will add something soon ;) I also tried my luck on the MEI Slack channel but did not receive any response. I think MusicXML might be a good format for exporting xenharmonic data, but importing from it is tricky. In certain temperaments the cent values have so many digits after the point that importing would be forced to apply heuristics for rounding errors :/

4. Option a) is currently the one I use, but I am somewhat unhappy about it, because it requires a "tacit" understanding between two programs of how exactly the 128 notes are redefined (also 128 is not plenty, just think of turkish makam that has 53 notes per octave. That is barely 2 octaves in this system). My hopes are currently on MIDI 2.
by qazxcvbnmlp | 2025-07-09 18:56:32+00:00
This is a good move - we are moving towards a world where browsers are locked down and non mainstream browsers will be locked out of browsing the web (right now by anti-scraping measures but in the future by cryptographically based attestation).

If OpenAI can get enough users on their browser, they can keep control of the user experience and not default to the scraps Google/Apple give them.
by leptons | 2025-07-09 18:57:15+00:00
The dot-com bubble burst of 2000 was 25 years ago, and that did ruin the whole internet for years, and it was caused by the stupidity of VC investment - more or less the same as the AI bubble is now. I have no doubt that the AI bubble will crash too, it's currently being propped up by the same magical thinking.
by FirmwareBurner | 2025-07-09 18:57:37+00:00
>Yes but opportunities are random.

Not random, but always in the places where the big and easy to get money is. You're not gonna get much VC funding in Botswana or Bangladesh no matter how good your idea is and how smart you are.

That's why so many sacrifice everything to go live in the bay area even if it's an overpriced shithole full of homeless, drug addicts and feces.
by mixedbit | 2025-07-09 18:57:56+00:00
From the article: 'The phrase “not being driven by hypertext” in Roy Fielding’s criticism refers to the absence of Hypermedia as the Engine of Application State (HATEOAS) in many APIs that claim to be RESTful. HATEOAS is a fundamental principle of REST, requiring that the client dynamically discover actions and interactions through hypermedia links embedded in server responses, rather than relying on out-of-band knowledge (e.g., API documentation).'
by gia_ferrari | 2025-07-09 18:58:01+00:00
Separately from the software itself, I'm left with questions about the context in which this tool is provided.

- Is this a passion project? Commercial? Is it free? Will it always be free? What's the pricing model? - How do I get in contact? - Is there a company behind this? - If I start using this, can I hold on to/export the data in usable form?
by philipkglass | 2025-07-09 18:58:06+00:00
Recycling plutonium from spent power reactor fuel into mixed-oxide (MOX) nuclear fuel has been economically unattractive everywhere it has been implemented. Natural uranium isn't very expensive and separating the plutonium from spent fuel doesn't save much on waste disposal costs either. The US canceled a new MOX plant just 7 years ago due to cost and schedule problems:

https://world-nuclear-news.org/Articles/US-MOX-facility-cont...

Work started on the MOX Fuel Fabrication Facility (MFFF) in 2007, with a 2016 start-up envisaged. Although based on France's Melox MOX facility, the US project has presented many first-of-a-kind challenges and in 2012 the US Government Accountability Office suggested it would likely not start up before 2019 and cost at least USD7.7 billion, far above original estimate of USD4.9 billion.

The most interesting "recycling" effort right now is the laser enrichment process of Silex/Global Laser Enrichment:

https://www.wkms.org/energy/2025-07-02/company-developing-pa...

The company plans to re-enrich old depleted uranium tails from the obsolete gas diffusion enrichment process back up to natural uranium levels of 0.7% U-235. That uranium in turn would be processed by existing commercial centrifuge enrichment to upgrade it to power reactor fuel.
by nicolaslecomte | 2025-07-09 18:58:16+00:00
Blaxel & E2B use microVMs which is usually the standard for this kind of worloads. E2B feels more ephemeral while Blaxel feels more stateful, depends on what you're looking for. Daytona uses containers, less secure than VMs.

I heard Vercel & Cloudflare launched a sandboxes offering too. Haven't tried it yet but i'm naturally wary of the marketing fluff around their annoucements
by dmos62 | 2025-07-09 18:58:30+00:00
Sovereign debtors also knew that them being part of the Eurozone gave them better borrowing rates because creditors perceived Eurozone as low risk. Both the creditors and the debtors believed that they won't chaotically default because of the Eurozone, because that would endanger the Eurozone. If that were all, the creditor and the debtor would be equally at fault. But, when you add the underreporting by the debtor, that's different. Now, I don't see how you can make a case for equal responsibility, and the creditor being more at fault doesn't make any sense to me.
by JoGoulart | 2025-07-09 18:59:03+00:00
Organic traffic is down. Click-through rates are collapsing. But visibility in AI-generated answers is rising fast.

The problem? Most SEO teams aren’t tracking it.

ChatGPT, Perplexity, Google AI Overviews and Gemini are reshaping search — and deciding which brands show up as the final answer.

At First Answer, we’re building a platform to monitor brand visibility across LLMs and generate a tailored Action Plan to optimize for AI search.

If you're still only reporting on rankings and traffic, you're missing the real story.

Free to try. Curious to hear how others are dealing with this shift.
by vavooom | 2025-07-09 18:59:13+00:00
"The company will separate out valuable isotopes such as Strontium-90, which has fuel applications in marine and aerospace engineering, and use neutrons to transmute the rest into shorter-lived isotopes"

From Wikipedia, it looks like Strontium-90 can be used in "treatment of bone cancer, and to treat coronary restenosis via vascular brachytherapy". Pretty cool.

https://en.wikipedia.org/wiki/Strontium-90
by sheepscreek | 2025-07-09 18:59:54+00:00
> irrespective of the ground truth, simply referring to the optics of it

I thought I was being clear when I said that. My comment was referring to the general perception among masses.

Google's reputation is further tainted by a certain sneakiness. Like being caught using private data for AI training - despite people opting out of it. All because of cleverly worded legal language that allowed other Google subsidiaries unfettered access.[1]

[1]: Google Can Train Search AI With Web Content After AI Opt-Out https://www.bloomberg.com/news/articles/2025-05-03/google-ca...
by arp242 | 2025-07-09 18:59:55+00:00
> The sender can look at their DNS logs to see if you’ve read your email, and the IP address of your DNS resolver at that time, which may indicate your location. [..] An attacker could look at the SNI header during the TLS negotiation

I suppose, but AFAIK no one is really doing that. So in that sense it's a "if a tree falls in the forest, but no one is around to hear it"-type issue.

And the response seems reasonable by the way; they set the correct flag. WebkitGTK has a bug and it doesn't work. It's not great, but you can't expect people to fix everything, especially for fairly minor issues like this.
by janpot | 2025-07-09 19:00:02+00:00
was quite impressed after building my label maker application [1] and stylex playground [2]. Had some real world needs and both were built in bolt with 99% of edits made through prompts. My tips would mostly center around:

- don't try to fix mistakes, revert and try with an updated prompt. the context seems to get polluted otherwise.

- don't treat it as a black box, inspect the generated code and prompt to write specific abstractions. don't just tell it what to build, but also how. this is where experienced programmers will get way more mileage.

[1] https://courageous-toffee-e5dd6f.netlify.app/

[2] https://venerable-melomakarona-255f96.netlify.app/
by lukas099 | 2025-07-09 19:00:20+00:00
He said he would reinstate freedom of speech, but did he actually? [1][2][3][4]

[1] https://www.newsweek.com/elon-musk-promised-free-speech-twit...

[2] https://www.theguardian.com/commentisfree/2024/jan/15/elon-m...

[3] https://www.thefire.org/news/twitter-no-free-speech-haven-un...

[4] https://gizmodo.com/10-times-elon-musk-censored-twitter-user...
by vinhatson | 2025-07-09 19:01:03+00:00
This is my first public article on security. I have several reports certified by MSRC as unpatchable vulnerabilities. However, from a legal standpoint, I'm not yet clear on the reasonable limits of technical detail for publishing these reports. Therefore, I'm just testing the waters first. I will find a way to gradually publish them from an academic perspective but am currently considering how to avoid legal consequences.
by grumpyprole | 2025-07-09 19:01:05+00:00
I would argue that not sanitising strings is analogous to a form of memory unsafety. You take as an input, an opaque blob of bytes that you then pass on to a myriad of other libraries and pieces of code. Nothing is captured in the types other than "String". Mainstream programming languages need to make it easier to define new types and parse strings into them. Rust is very promising in this area, as it features algebraic data types.
by conductr | 2025-07-09 19:01:24+00:00
The question is really just how big of a market does this serve? You've made it to the point where anyone entering the FIRE market will likely stumble upon your product as a top recommended tool (just judging by the praise here). Maybe it can tap into the larger, but more generic, financial/retirement planning market. To me, it seems well on it's path to be a YNAB which has a high amount of word of mouth recommendations, but perhaps covers a larger market.
by Jeaye | 2025-07-09 19:01:45+00:00
Hey folks. I'm the creator of jank. I didn't expect to be on HN today, but I appreciate the interest.

In short, jank is Clojure, but it's on LLVM and has seamless C++ interop. You still get full nREPL capabilities, can redefine anything on the fly, and we can actually JIT compile C++ code alongside your Clojure. The seamless C++ interop is first of its kind, for a lisp, and is done by JIT compiling C++ alongside the LLVM IR we generate for jank and then stitching them together into one IR module.

Note, jank isn't released yet. I'm targeting the end of this year for the first alpha release. I put out monthly development updates on the jank blog, with the next one coming out this week.
by SpicyLemonZest | 2025-07-09 19:02:16+00:00
I'm just not sure her complete lack of power to stand up to Musk is a defense. If a controversial rich guy offers you a CEO job that consists entirely of laundering his reputation by pretending his decisions are your own, you have a social responsibility not to take it. I'd be more sympathetic if she were some random person who couldn't otherwise dream of an executive level pay package, but she was the head of ads at NBC.
by ethbr1 | 2025-07-09 19:02:21+00:00
Indeed. The unspoken requirement behind (too) smart interpreters is 'I don't want to spend time segregating permissions and want a do-anything machine.'

Since time immemorial, that turns out to be a very bad idea.

It was with computing hardware. With OSs. With networks. With the web. With the cloud. And now with LLMs.

>> (from parent) Sometimes [routing different data to agents with more narrowly defined scopes and access rights] will work, but then it will work by relying on a sufficiently primitive interpreter to separate the data streams before it reaches the smart ones.

This is and always will be the solution.

If you have security-critical actions, then you must minimize the attack surface against them. This inherently means (a) identifying security-critical actions, (b) limiting functionality with them to well-defined micro-actions with well-defined and specific authorizations, and (c) solving UX challenges around requesting specific authorizations.

The peril of LLM-on-LLM as a solution to this is that it's the security equivalent of a Rorschach inkblot: dev teams stare at it long enough and convince themselves they see the guarantees they want.

But they're hallucinating.

As was quipped elsewhere in this discussion, there is no 99% secure for known vulnerabilities. If something is 1% insecure, that 1% can (and will) be targeted by 100% of attacks.
by bob1029 | 2025-07-09 19:02:38+00:00
> Do we assume a spherical bounds and just eat the cost?

We pick the bounding volume that is most suitable to the use case. The cost of non-spherical bounding volumes is often not that severe when compared to purely spherical ones.

https://docs.bepuphysics.com/PerformanceTips.html#shape-opti...

Edit: I just noticed the doc references this issue:

https://github.com/bepu/bepuphysics2/issues/63

Seems related to the article.
by msingh_5 | 2025-07-09 19:02:57+00:00
hey - great question i used whoops journalling feature for several montths.

what I found was that it often throws 5+ variables into one “correlation”, creating a lot of noise where it ends up suggesting X impacting your sleep, when it could have actually been Y.

Pulse is built for n=1 experiments: you isolate a habit (like less screen time, consistent wake up time, caffeine impact), test it, and see if it actually helps your sleep better or not. think self-controlled studies
Ask HN: How to show kindness to wild animals
by apolloartemis | 2025-07-09 19:03:32+00:00
Here are some ideas from My AI to kick off the brainstorming:

Hey Jon! Showing kindness to wild animals involves respecting their space and needs. Here are a few ideas:

* Provide Water: In dry areas, leave out a shallow dish of fresh water. * Plant Native Species: Grow plants that offer food and shelter. * Avoid Feeding Directly: Direct feeding can disrupt natural behaviors and create dependency. * Respect Their Space: Keep a respectful distance from nests and young animals. * Support Conservation: Donate to or volunteer with wildlife conservation organizations.
by cityofdelusion | 2025-07-09 19:03:35+00:00
What should happen? Probably what happened here — disclose and when the developer chooses to ignore it, bring in the shaming and pressure campaign. Someone’s right to tinker and learn doesn’t trump the rights of the victims they are exposing. Releasing code for public consumption has responsibilities and no one is entitled to make money at the expense of others. If I started selling dodgey go karts made from scrap metal to kids it would be the same principle. I am entitled to mess around and even ride it myself, but bringing other people into your orbit of incompetence is another thing.
Show HN: I built a tool to generate charts from text
by kristoff200512 | 2025-07-09 19:03:44+00:00
I built ChartFromText.com to solve a simple but recurring annoyance of mine. I often need a quick chart for a README file, a Slack message, or a simple presentation, and firing up Google Sheets or Excel always felt like overkill. The goal was to create the absolute fastest path from raw data to a usable chart. You just paste text like Apples: 50, Bananas: 80, and the chart appears instantly. What it does: Parses simple key-value text (colons, commas, or newlines). Instantly generates Pie, Bar, and Line charts. Renders data labels directly on the chart for readability. Lets you download the chart as a PNG with a clean, white background, ready for use anywhere. The Tech Stack: I intentionally kept it as simple as possible. It's a single HTML file with: Vanilla JavaScript for all the logic. No frameworks. Chart.js and the chartjs-plugin-datalabels for the heavy lifting on the charting side. They are fantastic libraries. TailwindCSS via the CDN for styling. It allowed me to build a clean UI very quickly without a build step. The entire thing is client-side, so your data never leaves your browser, which was a key principle for me. I've tried to build a tool that I would love to use: fast, free, private, and does one thing well. I would genuinely love to get your feedback. Is the UI intuitive? Are there any obvious features missing that you'd expect? Does it render correctly on your device? Thanks for checking it out!
by bruce511 | 2025-07-09 19:03:58+00:00
Luck plays a huge part.

But it's not the only part. All the luck in the world won't win me an Olympic medal. Yes, luck plays a part. But it also takes the right work, learning the correct skills, having the discipline and so on.

Working on the right thing, at the right time, in the right way are all crucial ingredients. All the luck in the world though can't help you if you're playing the wrong game.
by LegionMammal978 | 2025-07-09 19:04:03+00:00
Fielding's idea of REST does seem pretty pointless. "Did you know that human-facing websites are made out of hyperlinked pages? This is so crazy that it needs its own name for everyone to parrot!" But a web application isn't going to be doing much beyond basic CRUD when every individual change in state is supposed to be human-driven. And if it's not human-driven, then it's protocol-driven, and therefore not REST.
by petersellers | 2025-07-09 19:04:15+00:00
> Twitter/X is the reason DJT became President.

I really don't think so, at least not in isolation. It probably contributed a small part but the right wing media machine is multi-faceted. There were a lot of podcasters (i.e. Joe Rogan), comedians and youtubers all publicly in support of a second DJT presidency and I think that had a much bigger factor overall than Twitter.
by Aloisius | 2025-07-09 19:05:26+00:00
Show me a peer reviewed paper about these mummies.

It is hard not to be skeptical when all the evidence appears to come from the person who "discovered" them and who has a long documented history of hoaxes from a skinned monkey that was claimed to be an alien to epoxied bat remains with eyes painted with phosphorescent paint which was claimed to be a "demon fairy."
by lawlessone | 2025-07-09 19:05:47+00:00
The man literally got punched out of the whitehouse for substance abuse lol

His children break contact with him moment they become adults. If it wasn't for the money he would have been forbidden to see them long ago.

Everyone hates him on the left and the right.

If you consider a rich 50 year old creep doing drugs and going around impregnating young women and paying them to go away as successful? Then yes he is ..
by ralfj | 2025-07-09 19:06:07+00:00
I would say it is perfectly accurate to call Rust's type system affine. At its core, "affine" means that the type system has exchange and weakening but not contraction, and that exactly characterizes Rust's type system. See <https://math.stackexchange.com/questions/3356302/substructur...> for an explanation of what those terms mean (that's in the context of a logic, but it's the same for type systems via the Curry-Howard correspondence).

This is often explained via the "do not use more than once rule", but that's not the actual definition, and as your example shows, following that simplified explanation to the letter can cause confusion.

> because the callee is always free to create a reference from its argument and pass that reference to multiple functions..

Passing a reference is not the same thing as passing the actual value, so this does not contradict affinity.
by ImJamal | 2025-07-09 19:06:24+00:00
> Yes, these things mutate over time. Their historical roots are interesting but have no bearing on their common usage today.

I agree. I was just commenting on how the historical understanding is not more accurate for today's understanding and how his definition of historical was quite modern still.

> A similar story for those who claim left-wing politicians in the USA are really "European centrists" -- possibly true, but pedantic and irrelevant in the context of American left-right discussions.

I also agree, but I think that it is hard to know what politicians actually believe. I'm sure there are a number of communists in congress, they just aren't open about it and support more moderate legislation to not look radical. For all we know many of the left wing US politicians are further left than European ones.

Just looking at what they say and vote is not true to their beliefs.
by oneshtein | 2025-07-09 19:06:53+00:00
I was very surprised when I saw ancient cement kiln in Peru, very similar in size and technique to freshly built one (20 years ago) near to my parents town, but labeled as «a religious structure fit with stones».

As I see here[0], cement stucko on top of natural stone was pretty popular technique back then.

[0]: https://odysee.com/@hiddenincatours:3/megalithic-saqsaywaman...