MurphyA/hacker-news huggingface dataset:
by catigula | 2025-08-19 19:00:00+00:00
It seems like the evidence falsifies this idea, though.

Just based on what I'm reading it's very likely that your idea of how people are railed or de-railed from life success might not comport entirely with reality, i.e. there aren't really small financial problems that people ride the razor's edge to insolvency.

My understanding of financial problems is that they can only be resolved through huge cash infusions (likely about enough to buy a home outright) or through long-term cash infusions (i.e. a guaranteed well-paying job).

We don't have any mechanisms to provide these things to people, the costs of living are too extreme. I can't suggest anything better, I'm just pointing out the issue.
by eranation | 2025-08-19 19:00:01+00:00
This is very similar to a CVE I discovered in cdxgen (CVE-2024-50611), which is similar to another CVE in Snyk's plugin (CVE-2022-24441). tl;dr if you run a scanner on untrusted code, ensure it doesn't have a way of executing that code.

Some ways to prevent this from happening:

1. Don't let spawned processes have access to your env, there are ways to allowlist a set of env vars that are needed for a sub process in all major languages

2. Don't store secrets in env vars, use a good secrets vault (with a cache)

3. Tenant isolation as much as you can

4. And most obviously - don't run processes that can execute the code they are scanning, especially if that code is not your code (harder to tell, but always be paranoid)
by DiabloD3 | 2025-08-19 19:00:04+00:00
You seem to not understand how to manage long lived VMs.

Why are your VMs unpatched? Why do you not have a policy to synchronize package versions and configurations across VMs? Why do you not have a full policy on how to build the VM from scratch?

Sysadmins were orchestrating VMs using a plethora of popular tools before Linux failed to adopt containers correctly to get the job done. Docker just inherited all the bad practices without building a culture around the good practices.

Quite literally: everything you can say sysadmins did wrong back in the day is what Docker users typically to today. That right there underpins my entire view of Docker. Docker can be used correctly, but most don't, and I don't want to be in that blast radius when it inevitably goes off.
by bigstrat2003 | 2025-08-19 19:00:06+00:00
You aren't trying very hard to understand what's going on if you just blithely write it off as "people vote for whomever screws them". A much more plausible explanation is that there's a contingent of Latinos who take pride in being legal citizens, resent people who are here illegally, and Trump's gains were with said contingent. That's just a theory on my part which may not be true - but it is at least plausible, unlike the idea that people are actively trying to hurt themselves.
by wuhhh | 2025-08-19 19:00:18+00:00
I've been trying All The Browsers lately and Arc is definitely still my favourite; I actually had no idea that development had stopped on it, that's a shame. Zen looks good, but they are off the charts on this graph! https://sizeof.cat/post/web-browser-telemetry-2025-edition/ What is going on there?

Their Privacy Policy says no telemetry, but then they have a section on those connections made at startup which apparently are "necessary for the proper functioning of the browser and are not used for tracking or profiling purposes"... they then go on to say "can be disabled through the browser flags (about:config)"

Does that mean the browser will no longer function correctly?

Among the connections made (according to the report) are x.com, google.com (plus a bunch of other google domains). reddit.com and notion.com, discordapp.com, cloudflareinsights.com
by simoncion | 2025-08-19 19:00:55+00:00
> systemd, the project, isn't a binary. Its dozens of binaries. It can't have scope creep because that's impossible - they're literally dozens of separate things.

I suppose you don't understand (or are pretending not to understand) what "scope creep" means. Oh well.

> I also don't consider a dependency on dbus "scope creep".

I also don't consider a dependency on DBus scope creep. I consider making PID 1 crash whenever DBus needs to restart because of a upgrade/security fix/etc. in DBus or one of the libraries it links against to be a fantastically poor design decision.

> And sure, maybe OpenRC is just as simple as systemd...

It's far simpler. It concerns itself with bringing up and supervising services. It doesn't contain a DNS resolver, a (subtly buggy) Cron, a syslog daemon, and the many other things SystemD has decided to (whether correctly or incorrectly) reimplement.
by abnercoimbre | 2025-08-19 19:01:12+00:00
Self-plug: Still in early days, but I've positioned myself as the indie alternative. Terminal Click [0] is a 100% offline binary for Windows, Mac and Linux. I'm also blurring the lines between plain text and rich graphics. Zero AI is involved.

Consider subscribing to the RSS feed [1] at the very least :)

[0] https://terminal.click

[1] https://terminal.click/index.xml
by coldpie | 2025-08-19 19:01:13+00:00
> The solution is not easy. But it is known.

It's definitely not easy, but it's not even particularly hard, either. The solutions are there and ready to go. Everything we need to do to solve it has been done before[1]. We have done and continue to do many more difficult things than solve climate change.

The only difference between the hard things we are doing, and solving climate change, is the latter would make the ludicrously-wealthy very slightly less wealthy, instead of very slightly more. That's it. That's the whole debate. That's what we're burning the planet for.

[1] With the exception of carbon capture, which is only necessary now because we wasted so long doing nothing.
by krapp | 2025-08-19 19:01:28+00:00
The narrative is necessary because governments advocating for the safety of children are almost always doing so with an ulterior motive, and because people with legitimate concerns are often useful idiots for what turns out to be just another way to ratchet up surveillance and censorship and harass undesirables riding another fever wave of social panic and Christian moralizing.

And large swaths of the general population are nefarious liars who don't actually care about children. If building coalitions requires ignoring that fact, then we're not going to build coalitions. The real world isn't HN, where you're expected to assume good faith at all times, regardless of evidence to the contrary.
by jlokier | 2025-08-19 19:01:29+00:00
DeepMind was founded in London, UK and still headquartered there, and is one of the leaders in the field..

Notable well-known things from DeepMind are AlphaGo (the first time a computer beat a world champion at Go), AlphaFold (resulting in a Nobel prize). Gemini (LLM, a variant of which is used in Google search results) and Gemma (open-weights LLMs).

They were acquired by Google, so you could argue they aren't centred in the UK any more, but I still think they qualify as international leadership in AI coming from the UK.
by fwip | 2025-08-19 19:02:09+00:00
I feel like if you're modifying the signature after they sign it and approve it - that could be a problem. As long as the modifications are applied in real-time (or with explicit user confirmation after modification), I think it is morally okay (and probably legally, but I'm not a lawyer).

You may find users who get mad if your settings are too aggressive though, and if they're unable to get a signature that they approve of.
by iTokio | 2025-08-19 19:02:12+00:00
That’s why I’m worried about the growing centralization of things such as Chrome, Gmail, AWS, Cloudflare…

It’s very efficient to delegate something to one major actor but we are introducing single points of failure and are less resilient to vulnerabilities.

Critical systems should have defenses in depth, decentralized architectures and avoid trusting new providers with too many moving parts.
by cmrdporcupine | 2025-08-19 19:02:56+00:00
Unity of key bindings is one reason. Consistency of interface. Relative ease of using elisp to write some of these things.

Emacs users typically have a whole pile of customizations, macros, and workflow automations they've written up over the years.

And for things that are text oriented, the ability to work the buffers emacs-style between emacs windows is a joy.

There's a lot of advantages to keeping everything inside emacs.
by agentultra | 2025-08-19 19:03:57+00:00
There's some truth to the aphorism, "Emacs is a great operating system... if only it had a decent text editor."

I think Emacs is basically an elisp runtime that happens to have primitives like buffers, windows, etc upon which a text editor happened to be implemented.

It's more like a programming environment than a text editor. Sort of like Pharo Smalltalk, for example.

You can implement an HTTP server in elisp. You can render SVG, HTML, PDF. All kinds of things.
by teaearlgraycold | 2025-08-19 19:04:04+00:00
To be fair many people who were still employed and making decent money for their area received stimulus checks. At that point why not treat it as fun money? After all, you’re trying to stimulate the economy. That includes luxury stores.

Others were making more on unemployment than they did while employed. They got checks on a regular basis that meaningfully increased their income level. I’m not surprised or offended if they try to temporarily increase their standard of living in frivolous ways.
by ArchOversight | 2025-08-19 19:04:13+00:00
That assumes the server has a lot of additional CPU power to serve the content as HTML (and thus do the templating server side), whereas with XSLT I can serve XML and the XSLT and the client side can render the page according to the XSLT.

The XSLT can also be served once, and then cached for a very long time period, and the XML can be very small.
by dogman144 | 2025-08-19 19:04:23+00:00
The counterinsurgency lessonz of note from a doctrinal standpoint have little to do with how you framed it and I recall it. So before we go in on Total War is the Best War, your framing feels convenient vs actually thought out.

How to do counterinsurgency, as I ran into it from the “what works” angle in the formal setting to learn these things.

- the Malaya/British example. Notably Britain doesn’t run Malaya anymore and that country doesn’t exist. This is the direction you’re arguing works fwiw

- COIN and Patraeus (sp), assuming conditions were correct across the board and you could get a unit commander and all related stakeholders to try it. Notably we didn’t “win the insurgency” in Afghanistan

So there are both well established COIN case studies, one heavy and one light, both didn’t work, and no overlap with what you’re arguing.
by jerlam | 2025-08-19 19:04:25+00:00
Not just true for EVs, even the Toyota Prius which no one pretends is a cool car has larger wheels on its mid and high end trims. Those trims drop the gas mileage almost 10%. Pickup trucks also have bigger wheels on their higher end trims even though they make the truck less capable offroad, but those are probably not being sold to people who do most work anyway.

Car trims and packages seem well-tuned to ensure the manufacturer and dealer make more money selling things the buyer doesn't want because they're included in things the buyer actually wants.
by RadiozRadioz | 2025-08-19 19:04:40+00:00
> It works just the same as it always has for users

No it doesn't. An HTML page constructed with XSLT written 10 years ago will suddenly break when browsers remove XSLT. The webmaster needs to add the polyfill themselves. If the webmaster doesn't do that, then the page breaks.

From a user perspective, it only remains the same as before if the webmaster adopts the polyfill. From the web developer perspective, this is a breaking change that requires action. "shipping the polyfill" requires changes on many many sites - some of which have not needed to change in many years.

It may also be difficult to do. I'm not sure what their proposed solution is, but often these are static XML files that include an XSLT stylesheet - difficult to put JS in there.
by bpcrd | 2025-08-19 19:04:57+00:00
I completely agree! Please see the bottom of our post where we offer free access in two ways:

1) Email up to 50 files to yc@realitydefender.com, we’ll scan them for you, no setup required

2) 1-click add to Zoom/Teams (via Appstore) to try detection live in your own calls immediately
by beklein | 2025-08-19 19:05:28+00:00
I’m not saying this is better than a GUI, but instead let me give you an example.

Sometimes I have movie clips A, B, and C. I want to trim part of A at the beginning and end, then stitch clip B to it while speeding it up by 2x, and finally add clip C at the end, also trimmed a bit. After that, I want to add some text at specific times for a specific duration. In the end, I’ll export everything in 1080p.

I know all of this can be done with Final Cut or any other video editing app using a GUI, or the cool Emacs tool above...

But for me this would mean (GUI example) downloading the app and watching YouTube tutorials just to learn what to click.

For simple video editing (and other tasks), I sometimes need to get the job done quickly without wanting to learn a whole new tool.

I found out that I can achieve sufficiently advanced video edits with FFmpeg commands produced step by step from a LLM.

If you think this is awful, ok. I thought it was neat and wanted to share the idea.
by tristanho | 2025-08-19 19:06:14+00:00
Doesn't this does seem like a bit of an... exact rip off of turbopuffer?

Down to the style of the webpages and the details of the pricing?

Here's the pricing calculator, for example:

https://share.cleanshot.com/JddPvNj3 https://share.cleanshot.com/9zqx5ypp

As a happy turbopuffer user, not sure why I'd want to use Chroma.
by alixanderwang | 2025-08-19 19:06:29+00:00
Hello fellow devs. Just wanted to share a new feature we added this morning, though it's very alpha stage (already someone's filed a github issue for it hah)

If you want to skip the blog post and poke around directly: https://play.d2lang.com/?script=qlDQtVOotFLIyFTwSEzOTi1S8Est...

For a bigger example: https://play.d2lang.com/?script=rJJBjtswDEX3OgWBrm2kzU4Feoru...
by lucb1e | 2025-08-19 19:07:11+00:00
Did you ever use a sitemap as a human? I've only ever seen it recommended for SEO, and search engines are perfectly capable of parsing sitemap.xml without needing it turned into some transformed format, or at least so was my understanding (been a while since I looked into sitemaps or SEO). It seems to only be linked in robots.txt, not to any humans: https://www.sitemaps.org/protocol.html#informing

Every (Wordpress) site with an SEO plugin should be fine, since the search engines can still read it and that's the goal of an SEO plugin
by begemotz | 2025-08-19 19:07:40+00:00
I figured this would show up on HN. I'm really puzzled why the WSJ would publish this as an 'editorial'. But here is my cynical take -- companies want you to buy into the hustle at 20 so they can exploit you until 30 and spit you out for the next generation of gullible workers.

"There’s no sugarcoating the mental-health struggles, the physical deterioration or the social isolation that came with this intensity...I plan to become a billionaire by age 30. Then I will have the time and resources to tackle problems close to my heart like climate change, species extinction and economic inequality."

I hope this doesn't come across as obnoxious, but *golly* -- the simple, unaware naivete of youth! First, the assumption that he will become a billionaire, second the assumption that he will live long enough to then turn to the things 'close to his heart'. This really does seem like he is trying to convince himself that all the struggles he outlines above is "worth it". In all honesty, I hope he makes it and I hope that, in 40 years, he writes another "editorial" that reads "It was worth it".
by ToucanLoucan | 2025-08-19 19:07:52+00:00
It is human caused. It simply is. We have decades of research all saying the exact same thing, some of which was funded directly by the energy industry trying desperately to prove it's not.

It is. This is not a debate anymore, if you disagree, you either don't understand or don't want to understand and neither of those is my or anyone else's problem to solve. You're wrong.
by achenet | 2025-08-19 19:08:15+00:00
The classic "tolerance of intolerance" thing (not sure if it fully counts as a paradox).

Basically this has been stuck in my mind ever since 2018 when I hear a friend of my aunt's teenage daughter answer the question "should we tolerate the intolerant" with "no, we should NOT tolerate intolerant" people.

I didn't think of this back then but, by definition, if you do not tolerate intolerant people, you are yourself intolerant, and therefore do not tolerate yourself, which I imagine could lead to some problems if your life goals are anything other than "self-loathing tortured artistic genius".

Related, the classic "I can tolerate everything except the outgroup" from Scott Alexander https://slatestarcodex.com/2014/09/30/i-can-tolerate-anythin...
by nutjob2 | 2025-08-19 19:08:18+00:00
The less rigorous and more vague some theory is, the easier it is to use it to make unfalsifiable claims. That's the essence of the current discussion around AGI. No one knows what it is or describe it concretely so it can do anything and everything and everyone's going to lose their jobs.

It's funny because of the irony of "prompt engineering" being as close to cargo culting as things get. No one knows what the model is or how it's structured in a higher level (non implementation) sense, people just try different things until something works, and try what they've seen other people do.

This article is at least interesting in that it takes a stab at explaining prompt efficacy with some sort of concrete basis, even if it lacks rigor.

It's actually a really important question about LLMs: how are they to be used to get the best results? All the work seems to be on the back end, but the front end is exceedingly important. Right now it's some version of Deep Thought spitting out the answer '42'.
by mattnewton | 2025-08-19 19:08:33+00:00
I think that this is actually separate classes of people. This article is using "silicon valley" to talk about a small (but very influential) group of very wealthy investor types, and "new york tech scene" to mostly talk about NYC founders and not investors. Plenty of finance guys in NYC are very upset about Mamdani's primary win.

I'm a silicon valley founder but definitely not investor and I'm quite optimistic about Mamdani's approach to measuring where problems are and then pitch complicated fixes in a way that can be understood by average voters. The "socialism" label doesn't bother me. I know a lot of people in silicon valley rank and file engineers and technical founders who think similarly privately.
by Nextgrid | 2025-08-19 19:08:50+00:00
If you actually have a business case for defense in depth (hint: nobody does - data breaches aren't actually an issue besides temporarily pissing off some nerds, as Equifax' and various companies stock prices demonstrate), what you'd do is have a proxy service who is entrusted with those keys and can do the operations on behalf of downstream services. It can be as simple as an HTTP proxy that just slaps the "Authorization" header on the requests (and ideally whitelists the URL so someone can't point it to https://httpbin.org/get and get the secret token echoed back).

This would make it so that even a compromised downstream service wouldn't actually be able to exfiltrate the authentication token, and all its misdeeds would be logged by the proxy service, making post-incident remediation easier (and being able to definitely prove whether anything bad has actually happened).
by beklein | 2025-08-19 19:09:09+00:00
In my common use case, I note down the timestamps of the cuts. No LLM needed here.

I know there are options for everything in FFmpeg, and I’m thankful to the community and maintainers for providing such a powerful and well-documented tool. I sometimes just want a quick video edit that doesn’t involve reading the man pages for minutes or hours.
by epcoa | 2025-08-19 19:09:22+00:00
Just to offer an alternate perspective.

While technically a PIC12 is a computer since it has I/O, tiny storage, a PC and an ALU - it’s hard to even think of it in the same category as what most think of as a computer. IMHO the takeaway is more what the bare minimum it takes to be a computer, which isn’t much. (In other terms, a PIC does not meet the DOOM threshold).

PICs are so old and rudimentary that they started out as peripheral controllers for “real” computers in the 70s. It turns out you can do some useful embedded stuff with a basic chip, but even the newest of these are on 30 year old semiconductor tech at this point.

That may sound jaded, on the other hand I do find mass production of modern level integration and speeds to still be marvelous.

And as an EE, the “white” LED in the candle is more interesting than the uC!
by vannevar | 2025-08-19 19:09:32+00:00
The centerpiece of the author's thesis, which is that "the media" exaggerates the impact of cash payments to the poor, is undercut by an egregiously sloppy reading of the results of the Denver Basic Income study: she criticizes the project's claim that there was significant improvement in housing for people receiving $1000/mo vs the control group receiving $50/mo, citing results that show 43% of the controls were in housing by the end of the study while 44% of the test group were. What she fails to mention is that 12% of the controls were already housed at the beginning of the study, vs only 6% of the test group.

She also fails to mention that the Baby's First Year study was unfortunately overlapped by the Covid epidemic, introducing an enormous confounding factor (made all the more significant since the study measured child welfare), not to mention the Covid payments that likely dwarfed the $333/mo study payments and would have been received by both control and test subjects.

https://www.denverbasicincomeproject.org/research

https://newrepublic.com/article/199070/government-cash-payme...
by lapcat | 2025-08-19 19:09:36+00:00
It's implicit that the submitter of an article thinks it's worth reading. It's not implicit that other HN users think it's worth reading. Again, HN receives a new submission every few minutes. Not every article is worth our time; there's not enough time even if they were.

Thus, the point of the summary is for the submitter to explain to other users why the article is worth reading. Moreover, HN submissions are on a very broad range of topics, so even if an article is worth reading on a specific topic, readers are not interested in every topic. Some article titles are so vague that you can't even discern the topic!
by SJC_Hacker | 2025-08-19 19:09:51+00:00
Its quite fascinating and defensive innovations drove alot of interesting architechture. For example machiolations were a response to sapping being used especially by Saracen armies (who seemed to favor sapping more than Europeans) against the Crusaders.

Also the movement from square towers to round ones, once again as a defense for sapping, and displacing the tower from the wall or keep in order to be able to flank assaulters attempting an escalade.

The mastery of stone fortifications made walls nearly impregnable to breaches until cannons were developed, and even by then it was a dodgy proposiiton. For instance at Constantinople in 1453 the Turks had huge cannon which could damage the walls, yet it was not the reason the city fell. The defenders were able to repair the walls before the cannon could reload for a second shot. The reason Constantinople fell was a side gate was left open (either intentionally or accidentally) which allowed the Turks to pour through. There were alot of incidents like this such as the defenders of the Krak de Chevaliers (in modern day Syria) being duped into believing their commander had ordered their surrender