MurphyA/hacker-news huggingface dataset:
by sans_souse | 2025-08-16 00:56:15+00:00
How have we not solved the issue of getting everyones baggage off the plane in a timely manner. We've been using these conveyor belt-carousels for over 50 years and the same process for loading and unloading, but people shouldnt have to plan on waiting 45+ minutes after they deplane for their personal belongings in 2025. Lost luggage? The whole system seems archaic to me.
by jchw | 2025-08-16 00:56:56+00:00
Intel SGX/remote attestation for verifying that servers are running the code they say they are running is very interesting, I believe Signal talked about doing something similar for contact discovery, but at a base level it requires a lot of trust. How do I verify that the attestation I receive back is the one of the machine I am contacting? Can I know for sure that this isn't a compromised SGX configuration, since the system has been broken in the past? Furthermore, can I really be sure that I can trust SGX attestations if I can't actually verify SGX itself? Even if the code running under SGX is verifiable, as an ordinary user it's basically impossible to tell if there are bugs that would make it possible to compromise.

Personally I like the direction Mullvad went instead. I get that it means we really can't verify Mullvad's claims, but even in the event they're lying, at least we got some cool Coreboot ports out of it.

If you're really paranoid, neither this service nor Mullvad offers that much assurance. I like the idea of verifiability, but I believe the type of people who want it are looking to satisfy deeper paranoia than can be answered with just trusting Intel... Still, more VPN options that try to take privacy claims seriously is nothing to complain about.
by MagicalTux | 2025-08-16 00:58:05+00:00
As far as I know SGX has no 0-day exploits live today. sgx.fail was the largest collection of attacks and have all been resolved.

What this tells me however is there are a lot of people trying to attack SGX still today, and Intel has improved their response a lot.

The main issue with SGX was that its initial designed use for client-side DRM was flawed by the fact you can't expect normal people to update their BIOS (meaning downloading update, putting it on a storage device, rebooting, going into BIOS, updating, etc) each time an update is pushed (and adoption wasn't good enough for that), it is however having a lot of use server-side for finance, auto industry and others.

We are also planning to support other TEE in the future, SGX is the most well known and battle tested today, with a lot of support by software like openenclave, making it a good initial target.

If you do know of any 0-day exploit currently live on SGX, please give me more details, and if it's something not yet published please contact us directly at security@vp.net
by mertleee | 2025-08-16 00:58:26+00:00
I couldn't agree more! Canada has massive potential, albeit also large issues with their immigration system being gamed.

In my opinion, outsourcing is a larger evil. The money used to pay the salaries of outsourced engineers should be taxed at-least at 20% (along with remittances to India) akin to what we currently penalize foreign countries for maliciously suppressing the cost of physical goods. This is called Countervailing Duty or Anti Dumping Duty penalties.

I've reached my limit with the entitlement of these people in the united states. Especially systematically excluding americans or non-indians once they reach a hiring level / role.
by zbentley | 2025-08-16 00:58:27+00:00
There are several!

Some focus on generating content that can be served to waste crawler time: crates.io/crates/iocaine/2.1.0

Some focus on generating linked pages: https://hackaday.com/2025/01/23/trap-naughty-web-crawlers-in...

Some of them play the long game and try to poison models' data: https://codeberg.org/konterfai/konterfai

There are lots more as well; those are just a few of the ones that recently made the rounds.

I suspect that combining approaches will be a tractable way to waste time:

- Anubis-esque systems to defeat or delay easily-deterred or cut-rate crawlers,

- CloudFlare or similar for more invasive-to-real-humans crawler deterrence (perhaps only served to a fraction of traffic or traffic that crosses a suspicion threshold?),

- Junk content rings like Nepenthes as honeypots or "A/B tests" for whether a particular traffic type is an AI or not (if it keeps following nonsense-content links endlessly, it's not a human; if it gives up pretty quickly, it might be--this costs/pisses off users but can be used as a test to better train traffic-analysis rules that trigger the other approaches on this list in response to detected likely-crawler traffic).

- Model poisoners out of sheer pettiness, if it brings you joy.

I also wonder if serving taboo traffic (e.g. legal but beyond-the-pale for most commercial applications porn/erotica) would deter some AI crawlers. There might be front-side content filters that either blacklist or de-prioritize sites whose main content appears (to the crawler) to be at some intersection of inappropriate, prohibited, and not widely-enough related to model output as to be in demand.
by gpt5 | 2025-08-16 00:58:36+00:00
>The US are trying to alter the deal

I don't understand why people claim that. Here are the actual facts/timeline:

Nov 2021: Switzerland agreed contract terms with the U.S. government for 36 F-35A and budgeted CHF 6.035 bn. Under U.S. FMS (Foreign military sales) rules, LOA (letter of offer) values are estimates and the buyer owes actual full cost, so this was not an enforceable CHF-fixed total.

May 2022: The Swiss Federal Audit Office warned of legal uncertainty around any fixed price, but the warning was ignored internally.

Sep 2022: Parliament authorized; LOA signed Sep 19, 2022.

Jun 2025: Switzerland announced the U.S. disputes a binding fixed price and sought a diplomatic solution. U.S. officials pointed to inflation/raw-material/energy costs that have changed.

Aug 2025: Switzerland announced it cannot legally enforce a fixed price and is estimating additional costs (+CHF 650 m–1.3 bn).
by speakfreely | 2025-08-16 00:58:46+00:00
"Jobs going away due to AI" really tracks two different outcomes:

- The type of job is eliminated due to AI

- The amount of people doing a type of job is substantially reduced because AI increases the productivity of people in that role and companies can do the same amount of that work with less people

I think the former is extremely limited so far, but the latter is pretty substantial. I didn't downvote you, but I imagine the people that did probably did so to reject the former argument.
by SilverElfin | 2025-08-16 00:58:49+00:00
Gaza has been independent for a while though. Israel left in 2005 or so and Hamas came into power soon after, voted in by the residents of Gaza willfully. And there has been a long history of rocket attacks and other terrorism since then.

Anyways, the US, UK, and EU aren’t any different. Snowden revealed all the warrantless surveillance going on against their own people.
by 1659447091 | 2025-08-16 00:58:54+00:00
That story was much more common than ever hearing about anyone in school that got run over crossing a street.

Pearl clutching story incoming.

My elementary school was located on an "island", so you always had to cross a street to get to it walking. We also had a "Safety Patrol" program. 5th graders (10-11 y/o), and soon to be 5th graders, could take a street Safety/rules test and scoring a 100 got you in the program as a "trainee". The trainees would go through a before school program to learn all the things to do to cross a street, plus other walking road rules (when/how etc). We also did things like putting the flag up on the main flag pole and taking it down/folding it each day and some other duties (mostly by sergeants, who were also subs for corner crossing). We had to be at school about 2 hours before it started and ~2 hours after ended.

Once we got through training we were assigned to one of the schools 4 street corners where there was 2-3 other 5th grade safety patrolers (maybe a 4th/5th grade trainee) and a 5th grader lieutenant who was the main one responsible for proper safety on that one corner. As in, our job was to help other kids walking to school cross the street properly, they were to wait until we walked out across the street and escorted them across. Which they did or were reported and got in trouble. There are no adults anywhere at this point except for the occasional drive by check from the adult in charge of the program. The main supervisor was a 5th grader Safety Patrol Captain that made the rounds between the 4 corners making sure all was well.

I ended the year as a lieutenant. There was not a single child run over by a car; seeing a parent that walked their kid to the corner where we picked them up to escort across was a rare sight.
by radio879 | 2025-08-16 01:00:05+00:00
Honestly there just isn't any alternative - the quality I get from this method is just better.. and often times, less than that level of quality just sucks too much and in the long run takes up more time.

But I am trying some of the new CLI agent tools lately and some of them seem pretty good so far... It will take me time to really compare it though.
by rezonant | 2025-08-16 01:00:14+00:00
So that would be this Finance committee right?

> The Senate Finance Committee roster for the 118th Congress includes 14 Democrats and 13 Republicans, with three new GOP members recently appointed.

> https://tax.thomsonreuters.com/news/senate-finance-finalizes...

Hardly an unbeatable majority for Democrats on this committee. Especially since research and development is one of the main reasons taxation on higher income classes is effective: The idea is you'll be taxed if you want to take it as profit, but if you advance the state of the art, innovate, or create new technology then you can deduct that. The high tax rates of the US post WWII up to Reagan worked so well because of this combination: It was incentivized for businesses to reinvest their profits into R&D, since they'd hopefully be able to scale their profits if the R&D was successful.

I think it's not as clear cut as "the Democrats" or "the Republicans" here-- especially since there would probably be a requirement that the shortfall be made up in some other way in order to balance the effects on revenue.
by jakkos | 2025-08-16 01:00:18+00:00
> ADHD is kind of a weakly differentiated diagnosis that could apply to most people

I don't think this hypothesis would survive a look through the literature on google scholar. ADHD is associated with huge increases in risks of suicide, substance abuse, homelessness, accidents, crime, autoimmune disease, etc etc etc. It's not just "damn I find it hard to focus sometimes".
by freeopinion | 2025-08-16 01:00:42+00:00
If you are Boeing or Northrup Grumman, etc. most of your focus is on the coming decades. A huge part of your budget is getting governments to sign procurement deals that are 20 years out. They know that will guarantee revenues 40 years out.

Boeing's string of disasters over the last couple of years isn't so much a concern for its short-term health as it is for Boeing's ability to land any long-term payouts. They hire people today to deliver a product twelve years from now. If there is no prospect for twelve years from now they start caving in today. You just don't see the dust cloud for a few years.
by seangrogg | 2025-08-16 01:00:46+00:00
They actually did NOT repeal the portion relevant to software development being considered research - it was actually made permanent and is pretty trivial to find by searching for "software development" against the text of the bill. What did change was an additional section to how research is capitalized, with domestic research being able to deduct immediately while other (i.e. foreign) research is subject to the amortization rules.
by slwvx | 2025-08-16 01:00:57+00:00
The original link above [1] says "This document is being processed or is not available." A quick search yields [2], which links to the PDF [3].

Figure 1 shows lotsa interesting data, including higher intergenerational mobility in Canada than in the US.

[1] https://documents.worldbank.org/en/publication/documents-rep...

[2] https://documents.worldbank.org/en/publication/documents-rep...

[3] https://documents1.worldbank.org/curated/en/0991495070725194...
by underlipton | 2025-08-16 01:01:14+00:00
>"well, if Herr Daddy says he fixed it, we can all say it's fixed, in fact it'd be damaging not to" territory.

Worked for Biden. Which is not me, as a progressive, saying that Trump is any better, or that the two are even close to comparable on a number of important (mostly social) issues. However, common across admins and parties is an absolute terror of even the suggestion that we've entered a recession. That's because we're in a massive bubble, completely dislocated from fundamentals; in fact, the only thing keeping sentiment and performance afloat is... sentiment.

I think the tacit plan may be to inflate their way out of debt (personal, corporate, national...) while strong-arming the rest of the world into keeping the dollar the reserve currency, which allows us to continue "exporting" a portion of that inflation. It's obviously supervillain shit that will never work, but I suppose that they consider it the superior choice to letting the "bust" part of the "boom-bust cycle" actually take place.
by eclipticplane | 2025-08-16 01:01:17+00:00
I should be entitled to the same amount of space, carry-on space and under seat space, as every other passenger paying for the same class of ticket.

If I chose to not bring two items (or three, or four, as many passengers do because there is no enforcement of rules), I should get to place it in the overhead bins and not have to cramp my feet.
by do_not_redeem | 2025-08-16 01:01:27+00:00
> Build the code we published, get the fingerprint it produces, ask a VP.NET server for the fingerprint it reports, and compare the two. If they match, the server is running the exact code you inspected. No trust required.

Okay, maybe I'm being thick, but... when I get a response from your server, how do I know it's actually running inside the enclave, and not an ordinary process sending a hardcoded expected fingerprint?
by krapp | 2025-08-16 01:01:40+00:00
AI has already replaced thousands of jobs. Plenty of stories about that appear on HN. Plenty of anecdotes from people who have lost work or clients to AI. People here have stated their intention to fire their entire workforce and replace them with AI as soon as possible. AI companies have put up billboards saying "stop hiring humans." A single Google search would disabuse you of this notion.

I don't understand being this willfully naive, especially if you support AI, because using it to replace jobs is the entire selling point. No company wants AI for any other reason, and every company wants AI.
by gerdesj | 2025-08-16 01:02:18+00:00
"It's able to operate from airstrips that are no more than roads, with modest mobile ground equipment for support."

Nothing is really new. I used to live in West Germany in the '70s and '80s. The UK had an aircraft called Harrier - https://en.wikipedia.org/wiki/Harrier_jump_jet. At that time I think Sweden was deploying the Drakken (Dragon) and later the Vigen (Lightning). I made models of both as a child and I think both of them were superb in their own way.

Harrier was designed to work out of fields, let alone roads. Rather similar to an Apache. Minimal maint (ish) and so on.

I now live in Yeovil, Somerset and we have recently had several Italian rotary wing aircraft, such as The Seaking doing test flights around here. Presumably airframe testing and proving for VJ Day.
by MinimalAction | 2025-08-16 01:02:33+00:00
Air travel is a mixed bag. Inflight entertainment systems, free Wi-Fi (for at least messaging), better airports etc. try to reduce the hassle the system has introduced over the years. But also, the number of personal flights that are delayed by more than an hour was concerning in the recent days. The stipulated times were only a suggestion, and the real time depends pretty much on factors that almost nobody has any control on. The schedules for flights have become so tight that only a perfect world without inconsistencies can handle that dense a network. Throw in the climate change, and it is expected.
by scarface_74 | 2025-08-16 01:02:49+00:00
I fly frequently on average more than once a month and I really don’t see the benefit of first class for domestic flights. I am short though. I’m good with exit row seats.

We aren’t budget travelers and we have been on a plane for leisure 12+ times a year since 2021. We are both Platinum Medallion on Delta and get automatic C+ upgrades at time of booking and enjoy our lounge access (via credit cards).
by MagicalTux | 2025-08-16 01:02:59+00:00
The enclave fingerprint is generated as part of the attestation.

The way this works is the enclave on launch generates a ECDSA key (which only exists inside the enclave and is never stored or transmitted outside). It then passes it to SGX for attestation. SGX generates a payload (the attestation) which itself contains the enclave measured hash (MRENCLAVE) and other details about the CPU (microcode, BIOS, etc). The whole thing has a signature and a stamped certificate that is issued by Intel to the CPU (the CPU and Intel have an exchange at system startup and from times to times where Intel verifies the CPU security, ensures everything is up to date and gives the CPU a certificate).

Upon connection we extract the attestation from the TLS certificate and verify it (does MRENCLAVE match, is it signed by intel, is the certificate expired, etc) and also of course verify the TLS certificate itself matches the attested public key.

Unless TLS itself is broken or someone manages to exfiltrate the private key from the enclave (which should be impossible unless SGX is broken, but then Intel is supposed to not certify the CPU anymore) the connection is guaranteed to be with a host running the software in question.
by Aeolun | 2025-08-16 01:03:20+00:00
Claude kept aborting my requests for my space trading game because I kept asking it about the gene therapy.

``` Looking at the trade goods list, some that might be underutilized: - BIOCOMPOSITES - probably only used in a few high-tech items - POLYNUCLEOTIDES - used in medical/biological stuff - GENE_THERAPEUT ⎿ API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (https://www.anthropic.com/legal/aup). Please double press esc to edit your last message or start a new session for Claude Code to assist with a different task. ```
by compiler-guy | 2025-08-16 01:04:28+00:00
Got works fine and is solid and well enough known to be a reasonable choice for most people.

But I encourage everyone to try out a few alternatives (and adopt their workflows at least for a while). I have no idea if you have or not.

But fine has never used the alternatives, one doesn’t really know just how nice things can be. Or, even if you still find fit to be your preferred can, having an alternative experience can open you to other possibilities and ways of working.

Just like everyone should try a couple of different programming languages or editors or anything else for size. You may not end up choosing it, but seeing the possibilities and different ways of thinking is a very good thing.
by anonymars | 2025-08-16 01:04:37+00:00
He waited 9 months to listen to his doctors -- or anyone -- by all accounts instead trying to cure it with diets and spiritual fads.

Genentech CEO (and PhD in Biochemistry) Art Levinson: he "pleaded every day" with Jobs and found it "enormously frustrating that [he] just couldn't connect with him"

Andy Grove: "Steve talked to me when he was trying to cure himself by eating horseshit and horseshit roots, and I told him he was crazy"

--

Marc Andreessen: "Steve Jobs was 'one of the most disagreeable people in the history of humankind,' and that was part of his genius."

He was an obstinate man who thought he knew better than everyone else. Sometimes he did. This time he didn't.
by almostgotcaught | 2025-08-16 01:05:44+00:00
> of course not a language in the same way English or Spanish are languages, but certainly a language in the same way mathematical formula, Lisp, or Java are languages.

It is mostly certainly not - the defining feature of all languages (human, formal, mathematical, programming) is that you can define new words/concepts/primitives. Sheet music is notation.
by spyrja | 2025-08-16 01:05:44+00:00
Another approach. Require a hash(RESOURCE_ID, ITERATIONS, MEMORY_COST) for each and every resource request. Admittedly that might get a little tricky considering that you don't want to bog down actual users with sluggish page loads. But if carefully tuned to the highest tolerable level it might actually be sufficient. (Maybe.) It's a hard problem....
by Ferret7446 | 2025-08-16 01:07:11+00:00
This article treats LFS unfairly. It does not in any way lock you in to GitHub; the protocol is open. The downsides of LFS are unavoidable as a Git extension. Promisors are basically the same concept as LFS, except as it's built into Git it is able to provide a better UX than is possible as an extension.
by MagicalTux | 2025-08-16 01:07:12+00:00
Intel will not attest insecure configurations. Our client will automatically verify the attestation it receives to make sure the certificate isn't expired and has a proper signature under Intel's CA trust.

A lot of people have been attempting to attack SGX, and while there have been some successful attacks these have been addressed by Intel and resolved. Intel will not attest any insecure configuration as do other TEE vendors (AMD SEV, ARM Trustzone, etc).
by b8 | 2025-08-16 01:07:53+00:00
They claim to allow anonymous sign up and payments, but requires an email,an account, zip code and name for Crypto payments, but fake info could be used I guess. I tried ordering via Crypto, but it constantly gives me this error: "Unable to load order information. Try again".

Honestly, I feel more comfortable using Mullvad. This team has some folks with questionable backgrounds and I wouldn't trust Intel. Also VPN providers are usually in non-us countries due to things like the Lavabit, Yahoo incidents and the Snowden revelations.
by radio879 | 2025-08-16 01:08:38+00:00
What are you using GPT 4.1 with, anything? I find that it will follow your instructions REALLY well, so maybe whatever you are using it in, there is a problem with the prompt. Something might be telling it to do that. It really does do whatever you tell it (but you might not be able to see the full prompt if you are using GPT 4.1 with some kind of other tool/not raw).

Using it in Cline (free VS Code extension) it does exactly what it is told to do, I will have a bigger/smarter model figure out plans for it. It will edit files and just do stuff but its not really the model to think or plan etc.
by joshdavham | 2025-08-16 01:08:48+00:00
This is probably a better argument than my original comment (and much simpler!)

I actually can't write cursive at all, but I can usually read it fine. This is because I went to school when they stopped teaching cursive.

But alas, an article entitled "I used to know how to write in cursive" probably won't be very interesting to HN readers...
by fc417fc802 | 2025-08-16 01:08:52+00:00
The verb doesn't change the outcome but the description is nonetheless inaccurate. An accurate description of the difference is between an external content filter versus the model itself triggering a particular action. Both approaches qualify as content filtering though the implementation is materially different. Anthropomorphizing the latter actively clouds the discussion and is arguably a misrepresentation of what is really happening.