MurphyA/hacker-news huggingface dataset:
by pjmlp | 2025-08-07 09:32:15+00:00
It was great for its time, having been there I think the recreations hardly make the point of what meant being able to use an Amiga during the 1980's hardware landscape of home computers.

Hence why I find funny the discussion about the US point of view, educated playing games in consoles, about the raise of PC gaming.

In Europe, gaming and indie development (back then bedroom coders), was all about 8 and 16 bit home computers, our consoles were arcade machines, and wanting to code at home games that in our dreams would get close enough to them.

Amiga was one of the best options at that.
by Fargren | 2025-08-07 09:33:10+00:00
I don't see how that's worse than user-password authentication. For password without 2FA the attack pattern is

1) User goes to BAD website and signs up (with their user and password). BAD website captures the user and password

2) BAD website shows a fake authentication error, and redirects to GOOD website. Users is not very likely to notice.

3) BAD uses user and password to login to GOOD’s website as the user. BAD now has full access to the user’s GOOD account.

OK, with a password manager the user is more likely to notice they are in BAD website. Is that the advantage?
by cthalupa | 2025-08-07 09:33:27+00:00
For more than half of my life, I was quite skinny. I was not exhibiting any particularly strong willpower or self control. I never had to put forth any effort in not being fat. It was not a struggle, it was not a challenge, and it was not because I lacked a behavioral problem. Well into my 20s I had zero issue controlling my weight - though saying controlling my weight here is kind of a misnomer, since I put no thought or effort into it. If anything, when I was trying to get into powerlifting, I struggled to eat enough - I constantly felt sick trying to reach my calorie and protein targets.

Then circumstances changed. I swapped to an overnight job for more money. I started cooking less because of the hours, and eating more fast food. I stopped lifting weights because powerlifting was less interesting to me. My weight crept up little by little for years and years until I was overweight. And I realized my relationship with food had changed - ignoring physical hunger was still easy, but I was still constantly thinking about food. Slightly bored? Let's eat something. Work stressing me out? Grab some more food. Have a few minutes respite from everything? Eating sounds good. Eventually I was past overweight and into obese.

I managed to lose 30lb or so a few times, close to 50lb once. I could maintain it for a bit. But I was having to expend huge amounts of mental energy to do it - something I had never had to do before I had gotten fat in the first place. The second I had to prioritize other things in my life, for whatever reason, I no longer had the energy to spend so much time trying to push down all of the noise in my mind about food.

vs. just a decade prior, never really thinking about food at all. Is it possible for anyone to lose weight? Sure. Bodies aren't magic. Energy has to come from somewhere, and lower your calories a sufficient amount and you will lose weight. But for many people the amount of willpower and effort required is just massively different. The years of skinny me would not have lasted nearly as long as they did if I had the same level of food noise then that I do now.
by nicce | 2025-08-07 09:33:33+00:00
> Passkeys is the way to go. Password manager support for passkeys is getting really good. And I assure you, all passkeys being lost when a user loses their phone is far, far better than what’s been happening with passwords. I’d rather granny needs to visit the bank to get access to her account again, than someone phishes her and steals all her money.

I am waiting for the era when using passkeys is not depending from some big tech company.
by b112 | 2025-08-07 09:33:41+00:00
On the A1000 there was a 'sidecar' you could buy. It was an XT equiv, and also the only way to get a hard drive at that time.

You'd add the sidecar, add an MFM controller, MFM drive, and you could use it from the Amiga.

You had to boot off floppy for kickstart, and another to get access to the sidecar, but just awesome it was.
by nusl | 2025-08-07 09:34:21+00:00
Via the chat prompt mostly, and sometimes via Copilot. It was quoting me sources and links that didn't exist, and when I told it the links were wrong it doubled down forever, no matter how hard I tried to tell it otherwise. Even sent screenshots, etc.

Kinda just got stuck in a self-confident loop that time. Other times the output is just far worse than Claude for similar use cases, where a couple months back it was stronger, at least in my subjective experience.
by nullc | 2025-08-07 09:35:00+00:00
The ID could be site unique.

So for example, your ID card could have [Name, Pubkey, DOB] signed by the issuer, where pubkey is a pubkey for the ID card holder that supports unique signatures. The card has contains the private key and can sign with it.

Then to gain access to AdultsOnly.com you sign "AdultsOnly.com" and hash the result. This value is your site-identity.

You hand the site the site identity and a zero knowledge proof that you know a [Name, Pubkey, DOB] and valid issuer signature with DOB<=DATE and pubkey matching the signature that went into the hash.

Now they know you have an ID by that issuer with an acceptable DOB, and they know that one ID == one account (so no leaked/cracked ID being used to let everyone in). But they cannot link IDs between different sites or with names... if the private keys are not possessed by the state (e.g. generated by you when you get your ID) not even the state could help convert ID to names or link IDs between different sites.
by pjc50 | 2025-08-07 09:35:34+00:00
But that's what the voting public wants! They demand to be lied to. The feedback loop is problem announced on Fox news / Truth social -> presidential announcement -> positive coverage on Fox/Truth. It's not like the factory actually has to exist for them to be happy. And if they didn't want to be lied to they wouldn't seek out news sources which lie to them and leave them on in their homes constantly.
by DanielHB | 2025-08-07 09:35:48+00:00
I was just thinking of the projects I worked in and none of them would be a clean migration to not transpile typescript anymore in development mode.

My main problem would be the typescript class/field modifiers, like you said I use readonly extensively. I didn't know about the "erasableSyntaxOnly" compiler option, I will make sure to turn it on for newer codebases.
by Findecanor | 2025-08-07 09:35:51+00:00
> I am not certain I believe it is very likely, because (a) I think "sign-in partner" is obvious bullshit, and (b) I don't understand why I would never enter a code into the wrong website. I believe it can be possible, but...

You and I think they are bullshit, but ... the problem is that bullshit is sometimes genuine.

I have got tired of how many times in recent years I have seen things that looked like phishing or had obvious UX-security flaws and reported them only to have got a reply from customer service that the emails and sites were genuine and that they have no intention of improving.

If janky patterns is the norm, then regular users will not be able to recognise the good-but-janky from the scams.
by 9dev | 2025-08-07 09:36:47+00:00
Indeed it did. Thirty years ago, when the world wasn't utterly dominated by giant tech companies like it is now. Back then Microsoft wasn't capable of buying a country if they so desired; they couldn't hold most world governments hostage, didn't have a product portfolio that covers almost any organisation globally, and didn't have a trove of petabytes (more?) of data to train artificial intelligence with.

The world is a different place now, and old rules don't apply anymore.
by shakna | 2025-08-07 09:37:22+00:00
Bogard's example for a poor fit for VSA, in the famous blogpost, was specifically controllers.

> Sometimes these are still required by our tools (like controllers or ORM units-of-work) but we keep our cross-slice logic sharing to a minimum.

That's exactly where you shouldn't be using it! Relying on it as dogma will result in chaos.
by smallerfish | 2025-08-07 09:37:36+00:00
But you could replace #2 with "Enter your password from GOOD, as they are our sign-in partner". I'm not in favor of emailing 6 digit codes either, but your scenario presupposes that users will be willing to trust that two services have intermingled their auth, and in that case their password can be wrangled from them too.
by konart | 2025-08-07 09:37:40+00:00
>and you likely didn't either

First of all this is weird statement that I almost exclusively see in english speaking community. I wonder why this pattern ("and neither do you") is so disgustingly popular even in press.

Second: most things ever created by men (not to mention created by nature) were never asked for by anyone.

I never asked for a computer. Or even a pencil. Not until one was introduced into my life.
by raxxorraxor | 2025-08-07 09:37:43+00:00
I like capability URLs. I know an URL isn't a secret, but it works in practice and it works well.

A bad practice is the shorten the code validity to a few minutes. This cannot really be justified and puts users under stress, which lessens security.

The discussion around passkeys, who is and isn't allowed to store them, almost killed them for me personally. I use them for very, very few services and I don't want to extend it.
by canucker2016 | 2025-08-07 09:38:17+00:00
You would have relegated Dell and Gateway 2000 to second tier-PC clone maker along with all the other PC clone makers, below Compaq, since their OEM version of MS-DOS wouldn't get the Compaq tweaks necessary to be 100% IBM PC compatible (unless Microsoft or these non-Compaq OEMs duplicated Compaq's compatibility work).
by topspin | 2025-08-07 09:39:16+00:00
Guess we should count our blessings that 7-bit bytes didn't become the de facto standard. Given that 7 bits is sufficient for ASCII and BCD, and the popularity of the IBM 1401 in the 1960's, that's not at all implausible. The alternate history might have had only 2^28 (268,435,456) unique IP4s. The cynic in me wants you to be sure to include the inevitable "We'd be better of with 10-bit bytes" headline in the 9-bit alternate history.

I've always taken it as a given that we ended up with 8-bits bytes because its the smallest power-of-two number of bits that accommodates ASCII and packed BCD. Back in the day, BCD mattered rather a lot. x86 has legacy BCD instructions, for example.
by pjmlp | 2025-08-07 09:39:21+00:00
It is kind of ironic that this is now the Zeitgeist, while in the 1990's my university used to teach C++ to first year students, and I learned it as high school student with Turbo C++ 1.0 for MS-DOS, about a year after it was made commercially available, later acquiring Turbo C++ 1.5 for Windows 3.1 with student discount.
by amarcheschi | 2025-08-07 09:39:55+00:00
A bit unrelated, but I did this because a few days ago I made a web search like "spirit free rum" or something similar, and in the tab slightly below the top with similar results and answers there was the first being "why rum is healthy" which said similar things to what I got with Ai overview. This is in italian though so ymmv in other languages
by Huppie | 2025-08-07 09:40:03+00:00
Somewhat, but imho the Microsoft MFA is also full of similar flaws.

As an example: I've disabled the email and sms MFA methods because I have two hardware keys registered.

However, as soon as my account is added to an azure admin group (e.g. through PIM) an admin policy in azure forces those to 'enabled'.

It took me a long time debugging why the hell these methods got re-enabled every so often, it boils down to "because the azure admin controls for 'require MFA for admins' don't know about TOTP/U2F yet"

Imho it's maddening how bad it is.
Show HN: Code Palettes – Free color theme generator for code and docs
by jakobhautop | 2025-08-07 09:40:17+00:00
I love palette generators like Coolors.co and Adobe Color Wheel. But they zoom in on the palette generation which can make it hard to judge “how would this look on code/docs?”. So I built a small playground to help myself on a different project. The tooling rn is premature to say the least but I am showing this to get some early feedback on the idea itself. Is this something you would use when deciding on colors/fonts for your docs or would you do something else?
by disgruntledphd2 | 2025-08-07 09:40:19+00:00
I don't really care about invention in this space, as electric cars have been invented multiple times over the last century.

What matters (from a climate perspective) is getting those cars into the hands of people to reduce the pointless burning of fossil fuels. And Musk, however you may feel about him (I have not been a fan since about 2015/16) did a great job there.

Your argument is pretty analogous to saying that Jobs had nothing to do with Apple's success.
by dpassens | 2025-08-07 09:40:46+00:00
What exactly is the argument here? Bigger numbers are bigger? But then we could also argue that by that logic, octets are better than 9-bit bytes because you need more bytes sooner and that gives you seven more bits over the additional one in 9-bit.

> Thank you to GPT 4o and o4 for discussions, research, and drafting.

That explains a lot.
by smallerfish | 2025-08-07 09:40:56+00:00
> Passkeys is the way to go. Password manager support for passkeys is getting really good.

I set up a passkey for github at some point, and apparently saved it in Chrome. When I try to "use passkey for auth" with github, I get a popup from Chrome asking me to enter my google password manager's pin. I don't know what that pin is. I have no way of resetting that pin - there's nothing about the pin in my google profile, password manager page, security settings, etc.
by canucker2016 | 2025-08-07 09:41:31+00:00
These other versions of MS-DOS were licensed by PC clone OEMs and bundled with the PC clones. Microsoft didn't sell MS-DOS directly to consumers until later.

According to https://en.wikipedia.org/wiki/Ms-dos, MS-DOS 3.20 was the first consumer retail version of MS-DOS (then MS-DOS 5.0 was next).
by nullc | 2025-08-07 09:42:49+00:00
I don't follow your agument.

Yes, you could use someone elses ID to access the porn.

That someone else could also sit next to you and press the button.

There is no solution that isn't 'proxyable' with the aid of the approved party. No solutions being considered are even particularly resistant to borrowing someone's ID or credit card, etc..

ZKP are no worse in this respect.

Adding treacherous computing doesn't improve any of them other than "approved software says its okay" is just a cheap (and fairly insecure!) way of implementing looksalike functionality to an actual cryptographic technique.
by shawabawa3 | 2025-08-07 09:43:04+00:00
> Moreover, if the reasoning above was correct, observing a queue of 22,849 cars would be essentially impossible!

One of the cars in the 100,000 cars is going to be the slowest car, and when that car appears every car behind it will join that queue

So on average wouldn't you expect there to be one large queue of 50,000 cars at the back?
by WJW | 2025-08-07 09:46:29+00:00
If I were to summarize:

- Europe chooses to fight a war it wants to fight;

- with the weapons it has decided are the best choice available at the moment (even though many of those are not yet produced domestically and so need to be imported);

- while hugely increasing its own weapons manufacturing;

- paid for by its own money. (aka the factories built and new weapon systems introduced will not be controlled by the US)

You seem to argue (but correct me if I'm wrong) that this is somehow a huge win for the USA and proves the European states have barely any sovereignty as in your previous post. But the more logical result of all this would be that the European countries come out of this war with a significantly larger defense-industrial base. In addition this bigger DIB will be used to shift away the composition of EU armed forces away from American systems and towards domestically produced systems. Like you mention the USA will not pay for anything anymore, but as the saying goes "the one who pays is the one who gets to decide". Pulling support also means you no longer get a say in decision making. Finally, the USA not helping in Ukraine makes it much easier for politicians to say "no thank you" when the US wants help in a future Taiwan conflict. None of these things improve US influence over Europe.

Tariffs are completely separate and are mainly a US thing being paid for by US importers to the US government. Natural gas imports are Trump overstating his dealmaking skills: countries do not buy gas but companies do, and the global energy companies are not bound to this trade deal.

Finally this:

> Trump has never once opposed Europe continuing to fund Ukraine however long they want.

Yes he did. He proposed a peace deal to Putin in which Ukraine would basically surrender, then tried to pressure Zelensky and the EU leaders into going along with this. This very much included Ukraine giving up the fight and EU halting support. Obviously, this didn't happen and now Trump tries to pretend he meant this occur all along.
by lutusp | 2025-08-07 09:46:52+00:00
> The idea behind a generation ship is that the initial crew would live, reproduce, and die on the ship, with their descendants continuing the journey until reaching the destination.

What a shame -- their basic premise is grievously mistaken. When we have the means to launch interstellar pioneering craft, people will have figured out the most logical, sustainable approach -- launch a set of frozen embryos, not a set of arguing adults.

The craft would gain speed toward a suitable target, then drift for centuries, no need to waste resources on living, arguing human beings. When the destination is reached, the craft will land and spawn a human crew at the destination -- using artificial wombs and robots to guide the children into adulthood.

Someone might object to the idea of letting robots teach humans, but hey -- look around. It's already true.
by lm28469 | 2025-08-07 09:46:53+00:00
> It took something which reduces work and made it a bad thing.

It doesn't reduce work, it improves productivity, and virtually none of the productivity boost of the last 50 years benefited the worker. So you end up working the same hours, producing more and not being paid for the difference

https://economicsfromthetopdown.com/wp-content/uploads/2020/...
by nullc | 2025-08-07 09:47:25+00:00
With an anonymous credential.

Imagine you have a private key whose public key is signed by a trusted issuer if and only if you're an adult.

Now you use this to get an account. What if you share your private key? Well you can only have one account per key and it's otherwise the same as just obtaining the porn for the improper users yourself (which is always possible).

Won't that ID just get linked between sites and used to track you? Yes. But you can use a somewhat more complicated version of this scheme where you can get access to a single unlinkable ID per site... so then you can't be tracked.
by ben_w | 2025-08-07 09:48:32+00:00
"Western" != "American": I grew up in a country where even the police are not, and do not wish to be, routinely armed.

Even then, there is an important difference between de-facto and de-jure rules. Fun fact: even North Korea has a constitutional guarantee of freedom of speech and the right vote*. They don't do these things as we would understand any of those words, but they have those things right there in the constitution.

So: does the USA, as it exists today, represent the values you want? Can you honestly say, hand on heart, that Alligator Alcatraz should be a thing your AI has been trained to support? Or that it's fine for Qatar to donate a 747 that becomes part of the library of the current president, not the office of the president, when his term in office comes to an end?

I won't list everything, this isn't the place for that, but even if we wind the clock back a few years, do you (/we) want an AI aligned with a political circus of kayfabe that distracts us from the real political machinations?

Of course, this is still USA-focused.

I'd say that what really made a difference to our quality of life wasn't even the American political system: there were massive improvements to human existence starting with the first industrial revolution in the UK in the 1760s, but the social and political nature of the world back then was so bleak that communism got invented a century later and introduced what was at the time controversial ideas like "women are not property" and "universal free education is good", and the USA's systems changed substantially several times since then (at a minimum Civil War, New Deal, and the Civil Rights movement).

The "meta system" that allows change can be considered good, but not uniquely so if you compare this to the Russian Revolution getting rid of the Tzars and a 40 years later they were in orbit (and this despite the Holodomor and WW2) and then threw off these shackles with Glasnost and the fall of the USSR (and note there that in Russia specifically, not all the former soviet countries but specifically Russia, the freedom gained failed to bring material improvements and the lives of those living through it were, in aggregate, made worse despite that freedom), and similar stories with the Chinese starting with dangerous incompetence (Four Pests campaign) and now in a position where "which is more powerful, them or the USA?" is a matter of which measure you use rather than it being obvious.

* https://en.wikipedia.org/wiki/Constitution_of_North_Korea#Ch...
by egorfine | 2025-08-07 09:48:47+00:00
Yeah I would love for Nvidia to introduce faster update cycle to their hardware, so that we'll have models like "H201", "H220", etc.

I think it will also make sense to replace "H" with a brand number, sort of like they already do for customer GPUs.

So then maybe one day we'll have a math coprocessor called "Nvidia 80287".
by tomhow | 2025-08-07 09:50:46+00:00
The comment you're replying to was definitely a bad one, but we need you to resist the urge to respond with a personal attack. Your comment would be fine without the last sentence.

We appreciate your many positive contributions to HN, and we just ask you keep in mind that HN can only be a good place to participate if enough people make the effort to keep it that way.
by trinix912 | 2025-08-07 09:54:10+00:00
I think one can also understand it as the attacker being the one to enter the email first.

> An attacker can simply send your email address to a legitimate service, and prompt for a 6-digit code. You can't know for sure if the code is supposed to be entered in the right place.

Replace "can simply send your email address" with "can simply input your email address". An attacked inputs your email at login.example.com, which sends a code to your email. The attacker then prompts you for that code (ex. via a phishing sms), so you pass them the code that lets them into the account.
by MagnumOpus | 2025-08-07 09:56:16+00:00
In my opinion that is a bug with the format of laws and legislation in the UK and especially the US though.

Laws in countries with codified Napoleonic legal tradition have no problems changing the text of the laws on the book. Yes, tracking the parliamentary debate and proposals would be messy, but tracking the changes in the articles of the law isn’t. This is a simple GitHub version of the German constitution for instance (picking an article that actually has been amended, here the one about the military draft and conscription):

https://github.com/c3e/grundgesetz/blame/master/012a.md