MurphyA/hacker-news huggingface dataset:
by jama211 | 2025-07-28 07:26:31+00:00
It’s an interesting point, but doesn’t that open up an easy defense so black hat hackers can hack anything they want in advance and as long as they say they were just “looking for an opening” they’d be legally safe under this scenario? They could plausibly claim they just never found a vulnerability to report, but they could note down anything they notice and then attack who or when they feel like it - or pretend they’re white hat their while career but secretly sell the methods to someone who will. Under the current system, they’re discouraged from doing that.
by motwanimo | 2025-07-28 07:26:33+00:00
I'm working on a reading app. It integrates llms with your content. I know that the current llm providers already help you upload and ask qs about the docuemnt.

But I'm focused on building a good reading experience overall - which helps you learn and understand the content more easily. Imagine Macos preview integrated with llms. Currently, the web app uses the llm apis but eventually will add support for local llms as well.

I'm aware of other apps that have done something similar, but want to see this through for myself.
by mschuster91 | 2025-07-28 07:27:42+00:00
The problem is, you almost always end up with a massive amount of overproduction. That either ends up diverted into fuel production, which raises ethical concerns on one side and prolongs the use of fossil fuels because it's "effectively free" and so stops people from switching over to electric mobility on the other side.

And on top of that, many Western countries routinely dump their overproduction on Africa, where as a result of all that free aid, local food production industry has all but vanished. Up until the '00s, Simbabwe was known as "Africa's corn chamber" - that is long gone now.
by waste_monk | 2025-07-28 07:28:01+00:00
How does medical care factor in to your plans? Do those places have equivalent access to care if you stay in or around the main cities?

Even something like living in the countryside domestically would worry me (that is, longer times between calling for help and it arriving, then time to be transported to a medical centre or hospital, and then probably getting transported to the city anyway for access to advanced medical care).
by Aachen | 2025-07-28 07:28:50+00:00
Can you clarify what fraud you're thinking the "secure boot" (which I take to mean: being denied the access to control your own device) would prevent? Since the identity documents you already have, have this chip that works the same as your bank card, you really don't need a relaying party (your phone, your ISP, etc.) to be trusted for the receiving website to be able to verify the cryptographic signature on the data
by nradov | 2025-07-28 07:28:54+00:00
There's really no way to know so it's silly to ask for a source. The only crime statistic that's fairly reliable (at least in developed countries) is murder because it's hard to hide a body. Lesser crimes are heavily under reported but no one knows by how much, and the reporting rates vary widely by location and time. In many places the police actively discourage victims from reporting minor crimes because it creates more work for them and looks bad in their statistics.
by linker3000 | 2025-07-28 07:29:58+00:00
That's how I do it. I have a smart plug on the washer dryer and the power consumption gets sent via MQTT to Node-RED where some simple monitoring and trigger conditions update a dashboard and send an email to myself when the washing machine starts and when it stops. That's good enough for our needs.

The machine does have an app and Bluetooth, but I can't see the point of spending the time reverse engineering the protocol, and the app is never going to be activated on my phone because it wants access to camera, sound, phone and my contacts list.

Edit: It seems some integration work has been done for HA: https://github.com/home-assistant-HomeWhiz/home-assistant-Ho...
by readthenotes1 | 2025-07-28 07:32:45+00:00
it made me look. a private jet emits 4,900 g of c02 per mile (how the author's mind didn't explode mixing the measurement systems is beyond me) vs 1 prompt emitting 1.14 g.

https://flybitlux.com/what-is-the-carbon-footprint-of-a-priv...
by 1718627440 | 2025-07-28 07:32:52+00:00
Hopefully no real pacemaker manufacturer is allowed to do that. Creating radiation in the middle of a body near a critical organ without a medical reason sounds like a really dumb idea.

Also you want the pacemaker to be as air-gapped and simple as possible, because it needs 100% uptime.

(maybe I missed the implied /s)
by voiturepaschere | 2025-07-28 07:32:53+00:00
While tech companies pour billions into premium electric vehicles, there's a fascinating parallel universe of sub-€2000 cars dominating European roads. From 20-year-old diesel Citroëns that refuse to die to Eastern European imports that cost less than a MacBook Pro, this market represents something Silicon Valley often misses: appropriate technology for real-world constraints. What's particularly interesting from a tech perspective:

These cars often have better repairability than modern vehicles (no proprietary diagnostics, standard parts) They represent "good enough" engineering that prioritizes function over features The secondary market creates its own ecosystem of knowledge sharing and DIY solutions

Is there something we can learn from this approach? While we debate autonomous driving and connected car platforms, millions of people are getting reliable transportation for the price of a few monthly SaaS subscriptions. Has anyone here navigated this market? What parallels do you see with other "appropriate technology" vs "high-tech" solutions in software?
by pasxizeis | 2025-07-28 07:34:25+00:00
A CLI tool to make reasoning about Postgres locks a bit easier.

Given a database[1] and a set of DDL statements/migrations you want to check, pglockanalyze will open a transaction, execute the statements, read the pg_locks view to analyze the locks they acquire and rollback (or commit, depending on the flags you passed) the transaction. Then, it will output the results for each statement.

I think there's merit in this idea, that said it's very much an experiment so there could be flaws and/or corner cases that this strategy won't work well for.

It's meant to act as a complement, not a replacement, to things like static analysis and the official Postgres docs.

https://github.com/agis/pglockanalyze

[1] typically an ephemeral database spawned by your CI pipeline
by rklaehn | 2025-07-28 07:34:35+00:00
We do use DNS, but we also have an option for node discovery that uses pkarr.org, which is using the bittorrent mainline DHT and therefore is fully decentralised.

And, as somebody else remarked, the ticket contains the direct IP addresses for the case where the two nodes are either in the same private subnet or publicly reachable. It also contains the relay URL of the listener, so as long as the listener remains in the same geographic region, dumbpipe won't have to use node discovery at all even if the listener ip changes or is behind a NAT.
by scaramanga | 2025-07-28 07:35:05+00:00
It's explained in the article. People aren't going to starve to fill their gas tank so you need to grow more corn to offset that used for biofuel. To do that can require destroying other carbon sinks (wetlands are the example given, sometimes dried and then burned) to turn them into fields.

But in any case, carbon from the ground is used to fertilize the fields to grow the corn. For every unit of energy produced by corn using carbon sequestered from the air, it matters how much carbon from oil buried underground is released in the atmosphere to produce that unit of energy. If it's greater than or equal to the amount offset by not burning gasoline, it's a net loss.

All of these factors have to be included in lifecycle assessments, which are the tool to use for deciding if a proposed policy is going to lead to lower atmospheric carbon in the future, rather than simplistic models. Selling someone a simplistic model instead of an LCA is basically lying.
by grumbel | 2025-07-28 07:35:16+00:00
> there is more freedom of speech in most EU countries than in the USA

A quick look at Steam says otherwise. All the games that credit cards companies pressured to get removed from Steam, were already long gone in Germany. Because that's the level of government censorship that is completely normal in Germany.

The only reason why one might get the idea that Germany ain't so bad is because Germany doesn't do (much) Internet censorship, so we have access to the much less censored outside world. If German law would apply worldwide half the Internet would be wiped out.
by bentocorp | 2025-07-28 07:35:30+00:00
I use Jekyll for my company website [1] and managed to get a lot of speed optimisations simply by using a post-processing tool on the statically generated output.

The tool I use is Jampack and I'd highly recommend it: https://jampack.divriots.com

For my product website, it reduced the overall size by 590MB or approximately 59% in size, along with changing the HTML/CSS to make the optimisations that this article notes.

[1] https://www.magiclasso.co/
by mft_ | 2025-07-28 07:35:33+00:00
This view (“the Bourgeois’, etc.) seems to imply there’s a group of very clever manipulators somewhere, overtly planning and executing this (presumably in a dark room with armchairs and cigars). But I just can’t imagine this, in the UK’s example.

What I see instead is the other side of Hanlon’s razor —incompetence— coupled with a political class riven with pockets of self-interest, and very few seemingly with an intellectual hypothesis to explain the UK’s current predicament, or to chart a path out of it.
by pjmlp | 2025-07-28 07:35:44+00:00
> A long long time ago, SOM, IBM’s answer to Microsoft’s COM, did this in C with alloca instead of VLAs, but that’s the same thing.

Was kind of the other way around, given the whole OS/2 versus Windows history, and that COM started as the evolution of OLE and VBX technologies, Windows 9X and Windows NT weren't as COM heavy as OS/2 was with SOM.

There was no COM to worry about on Windows 3.x back in 1991.

https://www.edm2.com/index.php/SOM_%26_DSOM_-_An_Introductio...

Also SOM was so much better, bettwen C++, Smalltalk and C, with support for meta-classes and proper inheritance implementation across such disparate languages.
by ashoeafoot | 2025-07-28 07:37:10+00:00
The social cultural analysis people really left us hanging when it came to finding out what is it with middle eastern culture that makes it unable to build working states and socities. Anti imperialist and anti colonial babblepprotecting the status quo of a patriarchaical, imperialist and colonisl culture that just gets constantly defeated because its handicapped by itself. Like a doctor declaring your disease a lovely character trait instead of helping. The o so solidaric allies are the worst enemies you can get. Chances are when your ideology is bad at managing economies, it's even worser at managing societies .

Its a special kind of evil to deny billions of people hope and participation in the worlds society so one can get high on ones own ideological supply. Bush at least tried . In this he and whatever the Israelis do to prevent the region blowing itself up is the lesser evil.
by tallanvor | 2025-07-28 07:37:12+00:00
Many people in Europe don't even have a dryer, so they're often not doing more than one load a day. And really, unless you have a really large family, you probably don't have to do laundry every day anyway.

In Norway they also structure your electricity fees to discourage running multiple appliances at once. --For example, to keep my flat delivery rate as low as possible I have to keep my peak usage under 2KWh. That is, for each day of the month they take the hour when you used the most electricity and average the 3 top values. Yes, it's annoying to think about if I want to wash and dry at the same time, and whether or not I'm going to use the oven or something else while doing laundry.
by simianwords | 2025-07-28 07:37:15+00:00
I believe this is the framework vs library debate but in a different context. HUD is like me using a library of AI enabled tools. The human agency is given more importance here - they decide how to use the tools to suit their purpose.

Copilot is more like a framework where an AI system exists which tells me what to do (a bit like the inverse of a library).
by sapphicsnail | 2025-07-28 07:37:34+00:00
I don't want to ban porn or anything but the problem has definitely become worse than when I was growing up. I have a zoomer roommate that had unfettered access to the Internet and has some trauma she's still working through. I think the intense age verification laws popping up are going to be a big net negative but I think something needs to he done. I just don't know what that is. Maybe educating parents and children?
by calgoo | 2025-07-28 07:39:59+00:00
It depends: if you are part of the party and things are going good then yes. However, if you are from a group of people that you government has decided is trouble, then you tend to disappear in the night. Like my mother in law who says things where so safe when there was police on every corner in Spain during the dictatorship but my father in law was hiding "reds" under the floorboards as they where Jewish and being procecuted. One does not take away from the other, instead of criminals threatening you it's the government goons.
by muragekibicho | 2025-07-28 07:40:21+00:00
I'm editing my 3B1B summer of math exposition video: Elliptic curves for programmers

It's a motivated video introduction to Elliptic curve arithmetic where in 10 minutes we write (in the C language) a legal bitcoin wallet bruteforcer.

Video edit: https://leetarxiv.substack.com/p/a-programmers-introduction-... Bruteforce bitcoin puzzle wallet in C : https://leetarxiv.substack.com/p/hacking-dormant-bitcoin-wal...
by collectedparts | 2025-07-28 07:42:18+00:00
Just FYI OP (assuming OP is the author of the post) there's no margin on your blog. Text goes all the way to the edges.

As a related sidenote, I wonder how quickly ChatGPT replaces much of the customized tools here? ChatGPT is probably pretty proficient at being able to describe the contents of eg a screenshare, or a screenshot of a website.
by clarionbell | 2025-07-28 07:43:09+00:00
Regulation and lack of capital. Just read the report from Mario Draghi if you don't believe me.

We have EU regulations, those are much tighter than in US, on practically every front. Labor, finance, environment, data, AI, you name it, we have it regulated. And then you have the country level regulations on top. That's right, EU sets the floor, not the ceiling.

Suppose you have a start up in Poland, you have managed to get funding and you are offering services in your country. You want to do that in Germany? Get ready for complying with new set of regulations. And you better hope that individual German states don't have something extra on top of those.

All of those regulations have purpose, it is possible that they were designed by well meaning people and bring some benefit. But their compound effect is catastrophic. It is not that you can't push trough, you can, just look at Kiwi or Mikrotik. But it's an uphill battle and your competition from overseas has it so much easier, that they can end up outgrowing you, and eventually buying you out.
by rldjbpin | 2025-07-28 07:43:21+00:00
> But the downside is that it is a debit transaction; if you're scammed, there is usually no way to retrieve it unless a court orders so.

in a practical sense, UPI is primarily positioned to facilitate digital transactions in a cash-first economy. while it would be nice to have safeguards against scams, especially as qr codes become more ubiquitous by the day. however, paying with cash did not have any inherent safety features either, so it is equivalent in terms of risk imho.

although i do have a personal anecdote of getting a payment reversed when a pos double charged me. i did have receipts and had to wait a few weeks, but in theory it is possible in regular scenarios (i.e. when it is between an individual and a business).
by knuckleheads | 2025-07-28 07:43:50+00:00
https://www.threeemojis.com/ , a daily word game for learning foreign languages. It's been a lot of fun to work on, and it's almost something that I am very proud of. For now it's only playable in German, and someday I hope that it will include many more languages. Today's puzzle shows the challenges of making something like this because there are a lot of old ancient words in there (that I am working on filtering out).
by voiturepaschere | 2025-07-28 07:44:14+00:00
You can't trust your computer. Modern systems are opaque black boxes with countless attack vectors – firmware backdoors, CPU vulnerabilities, supply chain compromises, telemetry you can't disable, and software that updates itself without your consent.

Your OS vendor tracks everything. Your hardware manufacturer has backdoors. Your ISP logs your traffic. Three-letter agencies have zero-days. Even "secure" chips like TPMs have been compromised. The entire stack from silicon to application is fundamentally untrustworthy.

But it's possible to achieve reasonable trust through extreme measures: Full disk encryption, verified boot chains, network isolation, hardened Linux distributions, open-source everything, regular security audits, and controlling every component in your stack. You'll sacrifice convenience for security, but if you truly need trustworthy computing, that's the price.

Linux gives you the foundation – full source code visibility, no hidden telemetry, complete control over your system. Combined with proper OpSec and paranoid configuration, you can build something trustworthy. Most people won't do this because it's hard work, but for those who need real security, there's no alternative.
by sandeepkd | 2025-07-28 07:44:14+00:00
Making it easier to build simple web applications, host your static content with in built authentication functionality to make your content secure and dynamic. For enterprise customers, solving the tenancy for SAAS businesses when it comes to authentication.

https://weblegit.com

Bit of context, I have background building authentication systems and almost all the time its built as just another feature even though its THE FEATURE which gates all other features.
by Aachen | 2025-07-28 07:44:31+00:00
All of this assumes that the device, a relaying party for your identity document, needs to be secure in the first place. We don't attest the OS of the router and your ISP before being allowed to use them to relay this information to pornhub. Why does your phone need to be under a third party's control just to relay information that the government already signed onto your NFC-enabled identity documents?

But even if you were to want user's phones to be roots of trust...

> as far as I know, they are the only Android OS publisher (and perhaps the only Linux publisher?) that bothered to implement hardware-to-app attestation chaining

GrapheneOS does that. They guarantee this more than Google because Google allows devices with known vulnerabilities: https://grapheneos.social/@GrapheneOS/114864326550572663 (rest of the thread is worth reading, too)

Using Google Play's instead of Android's attestation framework means that nobody else ever could enter this market indeed, no matter how secure the OS
by crazylogger | 2025-07-28 07:44:54+00:00
If payments are always approved by the payer with their PIN / FaceID, then the idea of a fraudulent charge is just undefined.

Like you hand cash to someone. The transaction is done at the moment money changes hand. You don't get to call someone to snatch the money back to you against the payee's will.

For online purchase, for example, buyer pays the marketplace (e.g. taobao.com) to temporarily hold the money -> seller ships the goods -> buyer confirms goods are received -> marketplace pays seller. If there is a question, you take it to the marketplace to sort things out according to marketplace & seller policy. Either way, the payment provider doesn't concern itself with any of this - it only routes money according to payer's request.
by vintermann | 2025-07-28 07:44:54+00:00
Those two are both owned by Ancestry, and as you know, Ancestry requires expensive subscriptions to be of much use. I understand you have already invested a lot in it, and that US genealogy is hard to do with only public sources, but people just getting into genealogy should really avoid getting locked into Ancestry and MyHeritage.

They sell access to what others have contributed freely, sometimes they even sell you your own information back to you. For instance, if you want to use the birth and death dates, sources etc. that you've laboriously entered into a MyHeritage tree in Geni, you need a Geni Pro account. (Geni is owned by MyHeritage).

I think that of the three big American options, FamilySearch is best. Yes, it's the Mormons, and they do have an ulterior motive in their "baptism of the dead" thing, but they don't charge, they have an excellent transcribed source repository, free text search of machine-learning OCRd source documents, and actually smart matching. I'm glad their tithes pay for a state of the art genealogy research platform, I can think of a lot worse things it could have gone to!

They're also, interestingly enough, the least Anglo-biased: they don't give a child their father's last name by default, for instance.

The main downside is that they don't have any DNA features.
by constantcrying | 2025-07-28 07:44:56+00:00
The article does not answer the question it asks in it headline.

It also tries to connect private equity to what is, very clearly a failure in maintenance, which is nonsensical.

I don't know about the US, but in Germany all fire trucks are based on generic truck models, so many spare parts are available outside the niche industry of fire vehicles. The blame clearly lies with the underfunding of fire departments, who can not afford proper maintenance.
by bluecalm | 2025-07-28 07:45:07+00:00
Yes, it's unrealistic because the plan is for people who already own property or land to extract rent from productive class, especially young people.

That's why nothing every changes. Ever increasing taxes on productivity to benefit the real estate/land owners is how EU operates. No wonder we have fewer and fewer children and there isn't many people willing to found new businesses.

It's a death spiral which will end with the youth rebelling or going extinct. The latter being more probable looking at current fertility rates.
by piva00 | 2025-07-28 07:45:16+00:00
I think this video from the Not Just Bikes channel shows quite well the major difference in approach between fire departments in the USA vs the Netherlands (which is quite similar to many other European countries): https://www.youtube.com/watch?v=j2dHFC31VtQ

Fire engines in Europe are as well equipped as the American/Canadian ones while not depending on these massive and expensive bespoke rigs.