MurphyA/hacker-news huggingface dataset:
by savolai | 2025-07-13 05:03:03+00:00
the idea that microplastics are “mostly inert” is starting to break down. they can bind with environmental toxins like PCBs, heavy metals, and flame retardants. they hitch a ride into the body and potentially leach out. the plastics themselves often contain additives like BPA and phthalates that mess with hormone systems.

the comparison to choking makes sense on a surface level. once you look at nanoplastics it changes. they are small enough to pass through gut walls, enter the bloodstream, and even reach the brain.

” Still, fish exposed to virgin- and marine-plastic treatments show signs of stress in their livers, including glycogen depletion, fatty vacuolation and single cell necrosis. Severe glycogen depletion was seen in 74% of fish from the marine-plastic treatment (n = 19 fish), 46% of fish from the virgin-plastic treatment (n = 24 fish) and 0% of fish from the control treatment (n = 24 fish). Fatty vacuolation was seen in 47% of fish from the marine-plastic treatment, 29% of fish from the virgin-plastic treatment and 21% of fish from the control treatment. Single cell necrosis was seen in 11% of fish from the marine-plastic treatment and in 0% of fish from the control and virgin-plastic treatment. An eosinophilic focus of cellular alteration, a precursor to a tumor, was seen in one fish from the virgin-plastic treatment (Figure 4b) and a tumor, a hepatocellular adenoma (comprising 25% of the liver), was seen in one fish from the marine- plastic treatment (Figure 4c).”

https://www.nature.com/articles/srep03263

that is way beyond mechanical damage. it’s more like chronic low-grade poisoning with poorly understood long-term effects.

microplastics are also now found in basically every environment. arctic ice, rainwater, human placentas, fish, honey. the exposure is constant and increasing.

climate change is still the more immediate and catastrophic risk, no doubt. microplastics are more like a slow, persistent systems rot. over time they could undermine ecosystems from the bottom up. if plankton or filter feeders start collapsing from plastic toxicity, food chains could unravel. that would affect humans too.

so it’s not one or the other. these problems compound each other. ocean warming stresses marine life, and plastic pollution just piles on more stress. both are outputs of the same extractive system built on burning carbon and dumping waste into shared environments.

climate change is more urgent. but microplastics are not trivial. just more quiet.
by adinisom | 2025-07-13 05:04:30+00:00
My favorite trick in C is a light-weight Protothreads implemented in-place without dependencies. Looks something like this for a hypothetical blinky coroutine:

typedef struct blinky_state { size_t pc; uint64_t timer; ... variables that need to live across YIELDs ... } blinky_state_t; blinky_state_t blinky_state; #define YIELD() s->pc = __LINE__; return; case __LINE__:; void blinky(void) { blinky_state_t *s = &blinky_state; uint64_t now = get_ticks(); switch(s->pc) { while(true) { turn_on_LED(); s->timer = now; while( now - s->timer < 1000 ) { YIELD(); } turn_off_LED(); s->timer = now; while( now - s->timer < 1000 ) { YIELD(); } } } } #undef YIELD

Can, of course, abstract the delay code into it's own coroutine.

Your company is probably using hardware containing code I've written like this.

What's especially nice that I miss in other languages with async/await is ability to mix declarative and procedural code. Code you write before the switch(s->pc) statement gets run on every call to the function. Can put code you want to be declarative, like updating "now" in the code above, or if I have streaming code it's a great place to copy data.
by user_7832 | 2025-07-13 05:04:36+00:00
I'm of the personal opinion that it's quite reasonable for the creators to want attribution in case you manage to build a "successful product" off their work. The fact that it's a new or different license is a much smaller thing.

A lot of open source, copyleft things already have attribution clauses. You're allowed commerical use of someone else's work already, regardless of scale. Attribution is a very benign ask.
by scotty79 | 2025-07-13 05:04:39+00:00
I switched away from Chrome years ago. Not because of their weird anit-adblock moves. Just because the quality of their software dropped. Because of various UI bugs of their tabs that didn't get fixed with updates. I remembers that when Chrome came out it was rock solid and fast so it's a huge disappointment.

I tried out Firefox again and nowadays it is as fast and as solid as Chrome used to be. Never looked back. I still keep Chrome for cases when somebody YOLOed their website, but I use it the way I used to use IE, briefly and with distaste. With the next upgrade I might just start using builtin Edge for that and not bother to install Chrome at all.
by wongarsu | 2025-07-13 05:05:48+00:00
Once the legitimate adblock extensions have made the tech news cycle by switching to an executable, all the sketchy adblock extensions will follow, and after them the downright malicious but heavily advertised adblock extensions. Before long Google will have plenty of examples to point to of adblockers shipping malware, allowing them to scare off all the tech-illiterate people (who are the vast majority of users)
by thcipriani | 2025-07-13 05:06:46+00:00
I am a subscriber to Hearing Things, so I knew the context going in. But I thought the second sentence made it clear they were music journalists and not artists.

Hearing Things publishes playlists as music reviews—text, that is. And the playlists are available on all music streaming platforms.

But this blog announced that their playlists will no longer be on Spotify due to Spotify's continuing enshitification—I found no reductive moralism, only an interesting bad review.
by fakedang | 2025-07-13 05:08:10+00:00
I agree about YouTube being a platform for discovering new content, and even great content. I've even bought Premium for my parents and brother just so they wouldn't need to go through all sorts of ads on YouTube.

I would have bought the argument of the commenter if they talked about buying Premium to support the platform. But buying Premium to support the content creators? That's a bunch of horse manure.
by shadowfacts | 2025-07-13 05:09:45+00:00
> The Constitution of the United States was a layman's document, not a lawyer's contract. https://www.presidency.ucsb.edu/documents/address-constituti...

The Supreme Court is not the ultimate decider of what the layman's document means. It was wrong when it decided, for instance, Plessy v. Ferguson. The law that the Court upheld patently violated the Fourteenth Amendment and was unconstitutional. The Supreme Court was simply wrong.
by CoolCold | 2025-07-13 05:10:47+00:00
I'm not quite sure what's your question here? Very much similar to any other system which needs to reboot and you getting ready to these reboots in advance.

To some extent, of course things like vSphere/Virtuozzo and even LXD/Incus, and even simple Qemu/Virsh systems can do live migration of VMs, so you may care less on preparing things inside VMs to be fault taulerant, but to some extent.

I.e. if your team do run PostgreSQL, your run it in cluster with Patroni and VIPs and all that lovely industry standard magic and tell dev teams to use that VIP as entry point (in reality things bit more complicated with Haproxy/Pgbouncer on top, but enough to express the idea).
by volkandkaya | 2025-07-13 05:10:47+00:00
Example:

You have google docs and CMS open in 2 tabs

1. Ask to take your google doc and add it to the CMS

2. MCP tool takes the data from Google docs

3. MCP tool to convert text to CMS item

4. MCP tool to insert that CMS item

With the above you can view unique UIs for each stage as well, such as generating a table with CMS fields before accepting.
by zippyman55 | 2025-07-13 05:12:59+00:00
I had the automatic insurance and got a flat ten miles outside of anchorage. Before cell phones. No way was I getting out of the car as it was dark and I was worried about things like a large moose. I drove the car back with a very smoking rim and happily turned the car in.

Then 20 yrs later, I rented from hertz a car with balding tires with the steel belts showing thru the worn tires. I did not catch that, as the garage I reviewed the car was DARK. Unfortunately, my destination did not have a nearby Hertz location. My mother in law entered the picture and after several “may I speak to your supervisor” we escalated pretty high and the next day, a flatbed truck showed up with a car for me and they took the other away.
by dqv | 2025-07-13 05:13:37+00:00
When at least 34 states call for a constitutional convention. Potentially as early as this year if at least 15 of the 21 states with proposed legislation enact the laws which call for a convention (currently 19 states have enacted laws which call for a convention). Thirty-eight states would need to ratify any proposed amendments.

https://en.wikipedia.org/wiki/Convention_to_propose_amendmen...
by zajio1am | 2025-07-13 05:13:58+00:00
This is ignoring difference between individual distancing from such person and cancel culture campaigns, whose characteristic pattern is transitivity (boycotting third persons just because they do not participate themselves in boycott). Amplifying effect of such transitivity creates a social coercion in the form that Mill warned against in chapter 1. That is why he mentioned "though not to parade the avoidance" - to not induce society-wide coordination leading to social coercion.

Mill distinguishes between natural penalties (which are just results of others distancing from the person) and artificial punishment:

"It makes a vast difference both in our feelings and in our conduct towards him, whether he displeases us in things in which we think we have a right to control him, or in things in which we know that we have not. If he displeases us, we may express our distaste, and we may stand aloof from a person as well as from a thing that displeases us; but we shall not therefore feel called on to make his life uncomfortable."

I think it is clear that actions like urging an employer to fire such person are more on level "make his life uncomfortable" than "we may express our distaste and we distance".
by snackbroken | 2025-07-13 05:14:34+00:00
User-agent discrimination is tolerable when it's Joe Webmaster doing it out of ignorance. It is not acceptable if it is being used by a company leveraging their dominant position in one market to gain an advantage over its competitors in another market. It's not acceptable even if it's not said company's expressed intent to do so but merely a "happy accident" that is getting "overlooked".

Indeed, even for those who require a round of mental gymnastics before they concede that monopolies are, like, "bad" or whatever, GP points out precisely how this would constitute "consumer harm".
by circularfoyers | 2025-07-13 05:15:16+00:00
> These relationships were robust after adjusting for established risk factors for cardiovascular health, including physical activity, smoking, alcohol, diet, sleep duration, socioeconomic status, and polygenic risk.

There's more details further in the article[1].

[1] https://www.medrxiv.org/content/10.1101/2025.06.20.25329961v...
by muzani | 2025-07-13 05:15:19+00:00
There's plenty of stories like this: https://www.cnbc.com/2025/03/15/y-combinator-startups-are-fa...

The target for a great startup was 7% growth week-on-week, and now it's 10%. It means back then if you were making $1k/week in Jan 1, 2024, you'd expect to make $33k/week a year later. But thanks to AI, the standard is closer to $142k/week.

Back then, it was normal to raise $75k or so to build a prototype, now you can build a prototype in a couple of weekends. Back then, you would polish your pitch to get VC funding. Now you build, get the customers, then show what the customers are buying and why, and ask for funding to get 1000x the number of customers.

A lot of the risk factors have been removed. Building a legacy app no longer take multiple sync calls and weeks, they can be resolved in hours and maybe one sync call. Yes, I have a story of AI migrating a whole DB table when I asked it to move a button to another page. But it gets the tables right about 7 out of 10 times if you give it the right instructions. I dislike ORMs; they're practically a code smell. And AI works around that layer.
by pianoben | 2025-07-13 05:15:48+00:00
The trouble I have with this approach (which, conceptually, I agree with) is that it's damned hard to do anything with the parse results. Want to print that email_t? Then you're right back to char*, unless you somehow write your own I/O system that knows about your opaque conventions.

So you say, okay, I'll make an `email_to_string` function. Does it return a copy or a reference? Who frees it? etc, etc, and you're back to square one again. The idea is to keep char* and friends at "the edge", but I've never found a way to really achieve that.

Could just be my limitations as a C programmer, in which case I'd be thrilled to learn better.
by qwertox | 2025-07-13 05:16:03+00:00
What I don't understand is why Google doesn't offer users the ability to add some extension ids into some whitelist to allow them using very sensitive permissions.

Force those extensions to have an prominent icon on the UI with a clear tooltip asking "did you install this yourself [No]" for easy removal, in case someone else did install it without you knowing.

There are so many ways to make this work, but they have zero interest in it.
by tgma | 2025-07-13 05:16:46+00:00
> I wasn't getting paid to fix their code, I have no interest in helping Google for free, and don't want to help Google.

Extraordinary claims need extraordinary evidence. Software can be buggy, for sure, but as you yourself acknowledge, gRPC is widely deployed at many companies that do offer bug bounties. I won't be surprised if folks can occasionally find exploits in it, but if as you suggest it is so easily exploitable to get remote code execution, you in fact should be able to collect many $$$ from not just Google, but Apple, Microsoft, and many more companies who deploy gRPC services at scale. Hard to find a nicer attack target than a network facing library that you have a zero-day RCE for. (Protobuf is an even more popular target and used by virtually all Google services.)

https://bughunters.google.com

> No. This [0] repo I used to reproduce a stack smash issue before `main()`. I reported the issue here [1]. I don't get paid to fix Google's things and found a workaround for the purposes I needed.

As you have figured out yourself in the repo referred, the bug (not sure if exploitable or not) is from protobuf, a distinct library from gRPC, and appeared under certain compiler configurations. gRPC library does not even have a dependency on `libprotobuf`. It just happens to be the most popular format used jointly with gRPC. (It could be argued to be a bug in compiler conditions where abseil substitution of absl::string_view to std::string_view happens and is not fully compatible.)

Google also specifically pays for some open source project vulnerability reports (specifically covering Protobuf as an important target), so repeated claims of I am not getting paid otherwise I had dozens of exploits should be taken with a grain of salt and considered FUD: https://bughunters.google.com/about/rules/open-source/652133...

> Fuzzers are cool, but they don't cover the whole codebase.

You just went from the claim "they have no fuzzers or static analysis" to "fuzzers don't cover X". Of course, you cannot prove correctness by testing and fuzzing. Testing is not verification. Tests can only prove the existence of bugs, not their non-existence.

In any case, I would be really interested to see a comparable RPC stack that is close or more well-tested than gRPC...
by Abishek_Muthian | 2025-07-13 05:17:40+00:00
I use a laptop with 4090 16GB VRAM, core i9 and 96GB RAM for low latency work and Mac mini M4 for tasks which doesn’t require low latency.

I had written a blog on how I run LLM locally a while back[1] I’ll update the information on models & Mac mini soon.

[1] https://abishekmuthian.com/how-i-run-llms-locally/
by cloverich | 2025-07-13 05:18:24+00:00
They can require a selfie to compare against, multiple documents, a video, etc. IMHO best bet is to consolidate the validation to a small set of reputable companies, delegate validation to them, then improve regulations around access. Eg non-reputable site needs to know you are 18 (etc) but not see your actual id if they can have a third party do it in a blind-to-them fashion.
by toofy | 2025-07-13 05:18:41+00:00
like most solutions to complex societal/economic issues:

it’s almost certainly going to take both of your ideas, more diversity in the browser space and political actions. and then other actions as well.

the collective We have fallen into a trap where we consistently talk down other important ideas because we think ours is important too (and it is.) i definitely catch myself doing this far too often.

i just hope We can get back to a place where We recognize that different ideas from our own are also important and will need to be used in our effort to solve some of our issues. because so many of these cracks we’re facing will require many many many levers being pushed and pulled, not one magic silver bullet.
by o11c | 2025-07-13 05:19:58+00:00
`_t` should not be used for custom types since it's reserved for future standard types (and/or types declared in a header you might include someday). This does cause real-world problems (`key_t` anyone?).

Gratuitous allocations are gratuitous.

The whole "prevent double free" claim is completely bogus. Setting a variable to `NULL` only works for cases where there is one, obvious, owner, which is not the circumstance under which double free is prone to happening in the first place. Actually preventing double free requires determining ownership of every object, and C sucks at that.
by Retric | 2025-07-13 05:22:52+00:00
I assume you buy some non US products and many .com address are hosted outside the US by non US companies.

Gigabyte.com for example makes a great deal of computer parts like graphics cards and it’s hosted at 103.130.100.144 which geolocates to Taiwan, Province of China.

bmw.com 160.46.226.165 Germany

Now some of them will route US users to US servers to lower their ping, but that’s an added expense that not everyone pays for.
by CGamesPlay | 2025-07-13 05:23:07+00:00
If you are a VSCode hater (like me), you can achieve the same thing using the open-source, Microsoft-built, official devcontainer CLI [0], which is exactly what VSCode uses under the hood. You don't get automatic port forwarding with this tool, which includes SSH Agent forwarding, so you'll likely want to pair this with installing SSH into your devcontainers, or using some other tool that does the job. I built a tool [1] to do the port forwarding part, which I'd like to be more magic like VSCode's but haven't put the effort into doing, since it works for my purposes.

Using these, I can SSH into my devserver, use the devcontainer CLI to open a tmux session with iTerm2 Tmux integration, and it feels just like a local window. Combine that with Neovide and remote Neovim over the same channel, and I have a native-feeling dev environment running on a remote devcontainer in a nearby data center.

[0] https://github.com/devcontainers/cli

[1] https://gitlab.com/CGamesPlay/qtm
by mdaniel | 2025-07-13 05:27:12+00:00
I don't know if it's appropriate for your case, but devcontainer <https://devcontainer.community/awesome>, code-server, or Eclipse Theia are basically VSCode over http and will mimick the GitHub.dev experience. I'm guessing a lot of your heartburn was trying to get the graphical parts of Electron to operate inside docker but it's really not good at that

I did see the VSCode part, but it might interest you that the JetBrains products also have an rpc style development setup through Gateway, where the product runs effectively headless in the container and just sends the display commands to your local IDE to handle latency sensitive GUI operations
by sothatsit | 2025-07-13 05:28:41+00:00
I have enjoyed running Claude Code in a container. The biggest advantage for me isn't security though, it's how easy it becomes to spin off agents to work in the background.

I use a simple script that copies my working directory into a container, prompts Claude Code, and then either saves a planning document locally, or opens a pull request in GitHub for me to review.

I quite like this because it makes starting agents when I have ideas really frictionless, and then I can easily discard the results and try again if it went off the rails. The Max plan makes me not worry about the cost of this whole process as well.

I also set up containers initially out of caution, but honestly, I've never seen Claude Code do anything that git couldn't easily reverse, so I'm not that worried about that any more.
by begueradj | 2025-07-13 05:29:27+00:00
> "We know how to deal with malaria, so this isn't some story of Big Pharma hiding the truth. The disease used to be endemic in the US and in Europe"

Malaria is still a public health concern in Africa. And that's where Bill Gates does not want to see that plant exported to Africa because, unlike the Big Pharma products, it is a cheap solution.

I do not think we are talking about the same plant because "sweet wormwood" exists in Africa (a variant of it). Unfortunately I can't find the documentary I saw some years ago about this. It was done by few French investigation journalists.
by photonthug | 2025-07-13 05:31:49+00:00
Yes please, more containers-first thinking for all things AI. The fact that this has been largely absent from most discussions and demos regarding agents and vibe-coding seems like a big red flag to me. I mean if we're going to YOLO the code, perhaps we should at least pay some attention to the dev / test harness?

It's worth thinking about reproducibility even if you're not concerned about security. We would not have to argue so much about the effectiveness of something like vibe-coding if everyone could simply share process/tooling without tons of custom setup. And even if you're not worried about filesystem sandboxing and leaking secrets like ssh keys, even if versioning with git is enough of an undo button for you.. who wants to clutter their whole system with a ton of new language stacks and/or weird dependencies for every small experiment? Most experiments with the new hotness are going to fail, so we should expect to do a lot..
by john01dav | 2025-07-13 05:32:37+00:00
I'm concerned that such validation would need to be proprietary and locked down with some sort of user hostile TPM-like-thing in order to be effective. If this wasn't the case, then anyone could fork the foss tool and create a bypass. The average child won't do this, but a few will and some adults probably will over anti DRM principles and then it's published and widely available.