MurphyA/hacker-news huggingface dataset:
by wrymslaier | 2025-08-27 18:30:52+00:00
Your explanation of the differences is excellent and eye-opening. It should be posted on the FSF/GNU website.

I imagine a future where users will be able to tell a local AI to modify their software or make the comptuer do what they want. At first it seems like the final conclusion of extending device freedom to all users, but I suppose even LLMs would count as non-free software since they're basically blobs of unintelligible parameters...

Anyway, thanks for writing this.
by baq | 2025-08-27 18:31:45+00:00
Melting so much ice in such a short time without some kind of a dam made of not-ice is physically unimaginable. Water has soooo much heat capacity it'd take hundreds of years unless we're talking about a yellowstone or deccan traps eruption under the south pole or something (haven't done the math, but I'm not sure if it'd be enough).
by murderfs | 2025-08-27 18:31:48+00:00
It isn't too strict. Releasing a pthread_mutex has the semantics of being a release memory barrier, which means that any writes on that thread will be visible by other threads that issue a subsequent acquire memory barrier (e.g. by acquiring the mutex).

If you want this behavior, it's relatively simple to implement your own mutex on top of futex, but no one is going to expect the behavior it provides.
by topspin | 2025-08-27 18:31:55+00:00
As there is ongoing drama with Zen 5 and power issues, there are people with the instruments and the motivation to investigate this. You should consider contacting Gamers Nexus, and help them to get your test suite running. They can measure power draw and do a thermal analysis of this CPU, and they'd likely be eager to do it, given the possibility of making a bunch of dramatic YouTube content about design flaws in widely used hardware. That's pretty much their whole schtick in recent years.

> Modern CPUs measure their temperature and clock down if they get too hot, don't they?

Yes. It's rather complex now and it involves the motherboard vendor's firmware. When (not if) they get that wrong CPUs burn up. You're going to need some expertise to analyze this.
by estebank | 2025-08-27 18:32:29+00:00
The only issue with it is that Rust's aversion to half-baked code means that you can't have "partially working code" during the refactor: you either finish it or bail on it, without the possibility to have inconsistent codebase state. This is particularly annoying for exploratory code.

On the other hand, that strictness is precisely what leads people to end up with generally reasonable code.
by stetrain | 2025-08-27 18:32:53+00:00
As far as I know all of the known Artemis mission profiles only use the lunar lander to shuttle from NRHO (lunar orbit / gateway station location) to the lunar surface and back. All crew return is planned to be done with Orion for now.

NASA has optioned an additional lander from Blue Origin but that would be taking the same role as SpaceX's lander, shuttling from lunar orbit to the surface and back to lunar orbit.
by lstodd | 2025-08-27 18:33:06+00:00
actually if you can get a late-1990-ish 90-100cc 2T japanese scooter like Honda Lead 90 or Suzuki Address 100, or even later Yamaha Neos / MBK Ovetto 100cc of 2005-ish vintage this whole discussion about ranges and fuel consumptions becomes pointless.

because those have had fuel consumption of like 2-3L per 100km. with fuel tanks of about 6L you had all the range for errands you could possibly need.

and they were capable of moving two persons around _and_ moving a ton of grocery, or something like an ironing board.

hell, in 2000s we were doing 700km trips on them.
by ryao | 2025-08-27 18:33:23+00:00
Member function pointers and member functions in C++ are two different things. Member function pointers are not OOP. They are data abstraction.

The entire point of OOP is to make contracts with the compiler that forcibly tie certain things together that are not tied together with data abstraction. Member functions are subject to inheritance and polymorphism. Member function pointers are not. Changing the type of your class will never magically change the contents of a member function pointer, but it will change the constants of a non-virtual member function. A member function will have a this pointer to refer to the class. A member function pointer does not unless you explicitly add one (named something other than this in C++).
by itvision | 2025-08-27 18:33:32+00:00
> Suicidality is multi-faceted.

I agree with this, yet most of this thread blames OpenAI *alone*.

By the way, I've attempted to commit suicide multiple times over the last five years. Some people even saw me do it. I've talked to ChatGPT extensively about it, and it has tried its best to dissuade me but it didn't convince me at all.

Let me tell you something else: Half of my friends know about it. Has anyone done anything to stop me? No.

Yet here on YC: "BURN OPENAI WITH FIRE, HE'S JUST A KID!"

Anything can become a tool for self-destruction if misused, including ChatGPT.
by arwalk | 2025-08-27 18:33:34+00:00
`FileError.AccessDenied` is a unique value in a unique error set. `error.AccessDenid` has not been defined anywhere and hence is just given an integer value at some point by the compiler.

As I stated before, this error wouldn't even exist in the first place in no codebase ever: look how the method that fails returns a `FileError` and not an `anyerror`

It could be rightly argued that it still shouldn't compile though.
by bediger4000 | 2025-08-27 18:34:10+00:00
> I can’t hand it to a normal person and let them use it because it’s not obvious how to use it.

I'm not sure that means anything. Every time I have to help my kids or wife with a Windows problem, I'm perpetually plagued by how weird it is.

The only people who find Windows easy or obvious are already Windows users. And yes, the same can be said of Linux environments.
by 0cf8612b2e1e | 2025-08-27 18:34:31+00:00
I would love if some experts could comment on the security profile of this. It sounds like it should be fine, but there are so many gotchas with everything that I use full VMs for development.

One immediate stumbling block- the IDE would be running in my host, which has access to everything. A malicious IDE plugin is a too real potential vector.
by fxtentacle | 2025-08-27 18:34:34+00:00
"We suspect that GMP's extremely tight loops around MULX make the Zen 5 cores use much more power than specified, making cooling solutions inadequate."

I feel like if this was heat related, the overall CPU temperature should still somewhat slowly creep up, thereby giving everything enough time for thermal throttling. But their discoloration sure looks like a thermal issue, so I wonder why the safety features of the CPU didn't catch this...
by tux3 | 2025-08-27 18:35:13+00:00
The room temperature or precise way the paste was applied should not matter. Modern CPUs have very advanced dynamic voltage and frequency scaling (DVFS), which accounts for several sensors, including temperature.

These big x86 CPUs in stock configuration can throttle down to speeds where they can function with entirely passive cooling, so even if the cooler was improperly mounted, they'd only throttle.

All that to say, if GMP is causing the CPU to fry itself, something went very wrong, and it is not user error or the room being too hot.
by habinero | 2025-08-27 18:35:30+00:00
> We clearly are replicating at least some significant aspects of human intelligence via LLMs

That's a very load-bearing "clearly". I don't think it's clear at all lol.

Again, you are vastly underestimating the scale here.

Heavier-than-air flight is (relatively) straightforward and it's easy for humans to build models. Also, you know when you're flying.

Building a star is theoretically also relatively straightforward -- just collect a lot of gas and dust in one area and wait for gravity to do its thing.

Actually doing that is left as an exercise to the reader.
by Sohcahtoa82 | 2025-08-27 18:35:38+00:00
> What's your favorite answer to the Fermi Paradox?

A combination of things: intelligence is exceedingly rare, space is huge, and FTL travel is not actually possible. There's also the strong possibility that civilizations are likely to end up destroying themselves before becoming interplanetary.

Consider the fact that despite how long life has existed on Earth, that we're the only intelligent species. Sure, some other animals seem to be able to understand cause-and-effect, can solve some puzzles, and even use tools, but none have evolved a true language beyond basic signals (ie, "predator here", "food there"), which is basically a necessity to begin a scientific method of discovery.

On a cosmic scale, humans have only existed for the blink of an eye. We only began transmitting radio signals less than a 150 years ago, and in the next 150 years, there's a chance we end up killing ourselves, whether by destroying our atmosphere by climate change, or someone truly psychotic gets put in charge of enough nuclear weaponry.

If a planet only has radio-transmitting life for a few hundred years, then the likelihood of us being here to receive the transmissions of another civilization are statistically zero.
by bob1029 | 2025-08-27 18:36:35+00:00
Could be the power supply and load profile?

I've heard some really wild noises coming out of my zen4 machine when I've had all cores loaded up with what is best described as "choppy" workloads where we are repeatedly doing something like a parallel.foreach into a single threaded hot path of equal or less duration as fast as possible. I've never had the machine survive this kind of workload for more than 48 hours without some kind of BSOD. I've not actually killed a cpu yet though.
by rozab | 2025-08-27 18:36:43+00:00
The thing is, there is no demand to get that much stuff into space.

Falcon 9 has massively brought down the cost per orbit, and even with the whole world as a captive market, every university in every country putting up cubesats, they still don't have nearly enough payloads to make the economies of scale kick in. Hence Starlink. The majority of SpaceX payload mass has been Starlink, something nobody was even asking for. 300+ launches.

And the idea to reach the economies of scale for Starship is... Even more Starlink. How much Starlink could we possibly need? When will humanity come up with another use for this glut of payload capacity?

Even with the Artemis deadline looming large, SpaceX are still pushing this Starlink angle for Starship, it's nuts
by teja08 | 2025-08-27 18:36:47+00:00
Entro8 is a platform that helps founders find co-founders, early teammates, and interns to start their startups. Most startups fail because they can’t build the right team, and Entro8 fixes that with skill- and goal-based matching. Unlike LinkedIn or random WhatsApp groups, it is focused only on zero-to-one startup founders. As more people use it, Entro8 becomes a global network of builders and the place where every startup begins. In the future, it can also connect founders with investors, accelerators, and talent, making it the default starting point for startups.
by ben_w | 2025-08-27 18:37:09+00:00
If only it was so simple.

I could also say that the neuroscientists I follow don't seem particularly impressed with the research coming out of Neuralink (unlike the rocket people who are all impressed with SpaceX), and also the man himself seems to be using his wealth and sales skills to try to radically shift the Overton Window in several countries including both where I live now and where I grew up, so less benefit than the headline suggests for a higher cost than letting a man-child be a man-child.
by 1718627440 | 2025-08-27 18:37:10+00:00
What I really like about C is that it supports these sophisticated concepts without having explicit support for them. It just naturally emerges from the core concepts. This is what makes it feel like it just doesn't restrict the programmer much.

Maybe it's a bit due to its evolution. It started with a language that should have all features every possible, that was to complicated to be implemented at the time. Then it was dumbed down to a really simple language. And then it evolved along side a project adding the features, that are truly useful.
by toast0 | 2025-08-27 18:37:31+00:00
PHEVs were quoting 20+ miles on electric last decade, I think 25-35 is common now?

Actual distance depends on elevation changes and speed/driving, but 15-20 is quite acheivable, as long as you don't make it to highway speeds. And if you go a bit farther and use a splash of gas, no big deal, that's why it has a tank.
by edude03 | 2025-08-27 18:38:28+00:00
Not sure why I got downvoted - literally the first result (for me) says the best result[0] is 11t/s at Q3. Everything else is single digits, like 2-8t/s. Also considering that its not supported anymore[1] (It's Compute Capability is 6.1, not supported by cuda anymore) and it's power draw, I'd highly recommend anyone interested in ML stay far away from it - even if its all you can afford.

While the memory bandwidth is decent, you do actually need to do matmuls and other compute operations for LLMs, which again its pretty slow at

[0]: https://old.reddit.com/r/LocalLLaMA/comments/1dcdit2/p40_ben... [1]: https://developer.nvidia.com/cuda-gpus
by freedomben | 2025-08-27 18:38:34+00:00
> A supply chain attack can be used to deliver RCE enabling payloads such as a reverse shell, but in itself, it is not considered RCE.

Yes, as I tried to make clear above, these are orthogonal. The supply chain attack is NOT an RCE, it's a delivery mechanism. The RCE is the execution of the attacker's code, regardless how it got there.

> RCE implies ability to remotely execute arbitrary code on an affected system at will.

We'll have to disagree on this one, unless one of us can cite a definition from a source we can agree on. Yes frequently RCE is something an attacker can push without requiring the user to do something, but I don't think that changes the nature of the fact that you are achieving remote code execution. Whether the user triggers the execution of your code by `npm install`ing your infected package or whether the attacker triggers it by sending an exploitative packet to a vulnerable network service isn't a big enough nuance in my opinion to make it not be RCE. From that perspective, the user had to start the vulnerable service in the first place, or even turn the computer on, so it still requires some user (not the attacker) action before it's vulnerable.
by AOE9 | 2025-08-27 18:38:37+00:00
Sorry maybe my last reply was a little harsh now I understand it isn't a priority IaC under the hood anymore.

I still have major reservations around dropping IaC and just working on a simulation of what is deployed, I don't see how this can work for more complex deployments such as multiple region/AZ deployments, blue/green deployments, cell based deployments etc etc. Seems like dropping IaC would only work for very simple environments.
by chuckadams | 2025-08-27 18:38:45+00:00
Naw, sarcasm totally works... ;)

I'd say it all depends -- there's that word again -- on what those 100 LOC are expressing. I suppose one could still copy/paste such a small amount of code, but I'd rather just check in some subset of vendored dependencies. Or maybe just pin the dependency to a commit hash (since we can't depend on version tags being immutable). Something actionable beyond peer pressure at any rate.
by SpaceManNabs | 2025-08-27 18:38:59+00:00
so the malware launches AI tools that have wider access than the app is loaded in?

I did not know AI tools could access sensitive directories.

Or is it that AI brute forces access to directories that the malware already had access to but the developer of the malware was not aware of?

Does the inventory.txt get uploaded? There seems to be an outbound connection but I did not see verification that it is the inventory.txt.
by trelane | 2025-08-27 18:39:09+00:00
At this point, I'm skeptical of any laptop that wasn't specifically designed for Linux.

I have very real doubts that any laptop can support both Linux and Windows well.

> specific hardware features are not supported yet, the rest works extremely well

I would not describe this as "working well," let alone the "smoothest Linux experience you can have today"

Especially compared to System76, which designs their laptops for Linux, customized the firmware for Linux, and ships with Linux already installed.
by jjk166 | 2025-08-27 18:39:11+00:00
> Either they can never get the heat shield to be reliable, or they can't get cost down below Falcon 9 (meaning, refurbishment costs are too high).

There are a lot of other potential technological problems (dozens of engines, stainless steel construction, the belly flop maneuver, etc). Ultimately if Starship would were to fail for technical reasons, it would only indicate the particulars of Starship's implementation don't work. Starship is not the only (or even in my opinion the best) way to achieve full reusability. And partial reusability, which just a few years ago was considered radical, has already been so firmly proven that just about everyone is doing, or trying to do it. The idea of "don't destroy this extremely expensive vehicle after only a single use" won't die for as long as people can see expenses on their books.

If anything, the alternative approach, making a low cost, mass producible rocket has been abandoned, possibly pre-maturely.
by terminalshort | 2025-08-27 18:40:35+00:00
> cutting things like USAID thats going to actively result in more unnecessary deaths

That's bad IMO, but not helping people isn't remotely the same as starting a war that kills them (different if they were US citizens, but in this case they aren't).

> personal vendetta against LBGT organizations in cutting those budgets

I don't even have anything against these organizations, but I would cut their budgets to zero if I were in charge because funding them is none of the government's business.

> cutting IRS funding which is going to end up costing more ironically as there isn't enough staffing to pursue all the people using tax avoidance

This is dumb, but hardly a moral issue.

> In comparison to GWB, Trump is going much worse (especially if you want to compare deficit spending)

I 100% agree, but so was Biden, and I don't blame everyone who supported him either.

Fundamentally I don't blame Elon (or anyone else) for anything that Trump (or whoever they supported) has done that he didn't have a direct hand in e.g. DOGE. It's the nature of politics that you have to swallow a lot of things you don't like when you choose a side to support.
by viridian | 2025-08-27 18:40:41+00:00
In my opinion, all energy industries should and probably do feel threatened by solar. Since 2022 or so, all metrics I have seen put its cost per kwh ahead of natural gas, and thus, significantly ahead of every other energy source. It's also incredibly decentralized and flexible, I don't see a way that it doesn't become dominant in the next decade.

It's performance is actually a huge risk point as well, since it's so periodic.
by skydhash | 2025-08-27 18:40:52+00:00
> it's easier for developers to supply an OCI image, AppImage, or equivalent, with the exact versions of all dependencies baked in, than to support every possible package manager on every distro,

No developer is being asked to support every distro. You just need to provide the code and the requirement list. But some developer made the latter overly restrictive. And tailor the project to support only one release process.

> This is also much easier for the user, since they only need to download and run a single self-contained artifact, that was previously (hopefully) tested to be working as intended

`apt install` is way easier than the alternative and more secure.

> It's a burden that distro maintainers shouldn't have to worry about.

There's no burden because no one does it. You have dev version for libraries because you need them to build the software that is being packaged. No one packages library that is not being used by the software available in the distro. It's a software repository, not a library repository.
by morcus | 2025-08-27 18:41:18+00:00
Typescript also has ORMs.

The problem is not with TypeScript or even JavaScript but an odd Browser API where mutating some random value of an object results in a redirect on the page, but not synchronously.

Even if the language of the browser were Rust, there's nothing about the type system specifically that would have caught this bug (as far as I can tell, anyways. Presumably there's something in the background periodically reading the value of `href` and updating the page accordingly, but since that background job only would have needed read and not write access to the variable, I don't think the borrow checker would have helped here)
by bko | 2025-08-27 18:41:41+00:00
Sorry but allowing you to side load apps for a product like Apple makes it shittier. If helps companies that don't want to pay the Apple tax, but that's a bit funny considering that Apple essentially made this ecosystem and now they want to pretend it was just inevitable or always there.

I don't want to worry about giving my dad an iPhone and making sure he doesn't sideload some scammy app because that's essentially what you'll get. The same was the "third party sellers" on places like Amazon are pretty terrible.

I'm on an Android because I like the freedom. But again, Apple would not exist if you had this rule in place because it would immediately be en-shittified and no one would voluntarily pay the Apple tax that allows them to invest and invent this new ecosystem if they feel they can't control it.

If you don't want walled garden, don't use Apple. Plenty of people don't use Apple products. iOS is about 25% of European market, so what are we even talking about here?
by quickthrowman | 2025-08-27 18:41:43+00:00
Here’s the thing: all of those things you mentioned (dimming, occupancy sensing, focused beams, light shields to prevent light pollution on other properties) are options that can be added on during manufacturing, but an engineer needs to specify that those options are required or else someone will win the bid with a more basic light pole head without all those options.

The customer (municipality or state) often will compare the nice lights with all of the options you listed against a more basic light during the planning phase and opt to spend less money on the more basic lighting.
by imiric | 2025-08-27 18:41:56+00:00
There's no guarantee that software/library vX.Y.Z packaged by distro A will be identical in behavior to one packaged by distro B. Sure, distro maintainers have all sorts of guidelines, but in reality, mistakes happen, and there can be incompatibilities between the version a developer has been testing against, and one the end user is using.

Relying on feature flags is a pie in the sky solution, and realistically developers shouldn't have to be concerned with such environmental issues. Dependency declarations should be relied on to work 100% of the time, whether they're specified as version numbers or checksums. Since they're not reliable in practice, vendoring build and runtime dependencies is the only failproof method.

This isn't to say that larger teams shouldn't support specific distros directly, but my point is that smaller teams simply don't have the resources to do so.
by guptadeepak | 2025-08-27 18:42:21+00:00
This analysis dives into the recent surge of OAuth device flow attacks observed in 2024-2025, focusing on key protocol weaknesses and implementation gaps.

The critical issue stems from attacker exploitation of insufficient user code verification and token issuance processes, enabling device flow hijacking and abuse at scale. Notably, the challenge of securely binding device codes to legitimate users remains unresolved, especially in constrained input environments.

How are you addressing the trade-offs between user convenience and security in OAuth device flows?