MurphyA/hacker-news huggingface dataset:
by throw0101a | 2025-08-26 14:07:24+00:00
> The decreasing validity time pushes for the process to be automated, and automation reduces the possible human errors.

There are environments and devices where automation is not possible: not everything that needs a cert is a Linux server, or a system where you can run your own code. (I initially got ACME/LE working on a previous job's F5s because it was RH underneath and so could get Dehydrate working (only needs bash, cURL, OpenSSL); not all appliances even allow that).

I'm afraid that with the 47-day mandate we'll see the return of self-signed certs, and folks will be trained to "just accept it the first time".
by kjksf | 2025-08-26 14:07:39+00:00
It could be because the role of courts is to interpret the laws enacted by congress.

To my knowledge there is no law enacted by congress that dictates how SSN data is stored. Congress created the social security apparatus but day to day operations of said apparatus are in executive branch and executive branch ultimately carries the wishes of the president. So if president directs part of executive branch (DOGE) to audit another part of executive branch (social security) it's legal and works exactly as the constitution prescribed.
by 9dev | 2025-08-26 14:07:43+00:00
Your perspective may be just as narrow, albeit from the other end of the spectrum. Huge heaps of things do work just fine with ACME now, or support being fronted by a reverse proxy which does.

Plus, how would you ever get enterprise tool vendors to add support if not for customers pestering them with support requests because manual certificate renewal has gotten too painful?

> I do not think PKI will survive the 47 day change. […] In our case, we'll be spending the next couple years reducing our use of PKI certificates to the bare functional minimum.

Maybe PKI will die… or you will. Progress doesn't treat dinosaurs too well usually.
by spacephysics | 2025-08-26 14:07:44+00:00
I mean both sides are guilty. ‘08 saw us bail out banks and now the likes of Fannie Mae and Freddie Mac are GSE’s.

The difference with Intel vs the banks, is Intel has assets that take decade plus to procure (foundries), and not something easily replaceable.

I think the US messed up big time in terms of national defense by not having some Gov program that does semiconductor manufacturing owned 100% from the start by the DoD. Now we need to do some grey area purchase of a failing company.
by aurareturn | 2025-08-26 14:07:51+00:00
M4 Max doesn't even disclose TFLOPS so no clue where that website got the numbers from.

TFLOPS can't be measured the same between generations. For example, Nvidia often quotes sparsity TFLOPS which doubles the dense TFLOPS previously reported. I think AMD probably does the same for consumer GPUs.

Another example is Radeon RX Vega 64 which had 12.7 TFLOPS FP32. Yet, Radeon RX 5700 XT with just 9.8 TFLOPS FP32 absolutely destroyed it in gaming.
by r0ckarong | 2025-08-26 14:08:04+00:00
You can use Android Studio (or other virtualization / emulation) to set up an older version of Android and then you use one of the various sites that "archive" games:

https://developer.android.com/studio/releases/past-releases/... https://www.mobygames.com/game/54420/putter-king-adventure-g...

I've used Bluestacks to play the entire somewhat recent Monkey Island game on PC because I could not be bothered to play it on my phone but I have no idea how far back their versions go.
by kangs | 2025-08-26 14:08:16+00:00
it mainly means control these days. ive made SSL then later TLS requirements for web browsers and we had fights on this sort of stuff.

yeah encryption is needed. but then you need authentication. and then, if authentication is controlled by corporations you're f'd.

instead youd want identities to be distributed and owned by everyone. many trust models have been developed and other than raw UI problems (hi gpg/pgp) its really not a terrible UX.
by nathan_compton | 2025-08-26 14:08:29+00:00
All I can say about this as a dude with a doctorate in physics and an interest in foundations is: I guess, dude, if this is how you want to live your life.

It isn't that I agree with the person who wrote Asimov the letter (in fact, based on his description, I frankly wonder if the letter writer wasn't my father). Its just that there is something subtly wrong with Asimov's view of the progress of scientific knowledge.

At least its extremely instrumentalist. If we think of knowledge as a sort of temporary mental state which lives between setting up a physical state and making a measurement, then, yes, knowledge has progressed in exactly the way that Asimov is saying. And that is nothing to sneeze at.

But like consider quantum mechanics. People still cannot make heads or tails of what the ontology of quantum mechanics is, despite some compelling stories. And that makes perfect sense since QM is not compatible with special or general relativity! So its dumb to try and make sense of what QM tells us about what is. So why not try to understand what the ontology of QFT is? This seems reasonable, since QFT is capable of making correct predictions (at least in the scattering regime) and is invariant. But no one on earth can write down a coherent mathematical theory of QFT, so interpretation is even more difficult than QM. And this is yet to even try to tackle with conceptual gap between GR and QM/QFT, where we genuinely are perplexed but at least have good reason to think that the final interpretation of QM or spacetime has to have something to do with the way that the two theories interact.

From this point of view as our ability to connect experiment with outcome has increased our ability to actually say what it is we are even talking about outside of the purely instrumental has decreased since the 19th Century. Back then we though we knew that there were atoms or electrons or whatever. Light waves or photons. Now, I would argue very strenuously, we genuinely have no understanding at all of what those things are outside of a set of purely instrumental definitions which leave a lot to be desired.

My personal understanding here is that really there are no electrons, photons, quantum fields, masses, gravity. There is just the single substance of the universe which we have learned to manipulate and predict with ever improving precision (in limited cases). Maybe that is knowledge? Doesn't always feel like it.
by pm215 | 2025-08-26 14:08:41+00:00
Correctly assessing the risk doesn't mean "I don't do anything that has an unlikely possibility of a horrible outcome", it can mean "I decide that I'm OK with that possibility and do it anyway, because I think the benefits outweigh the possible drawbacks". If you then do get unlucky and catch a nasty disease, that should not change your post-recovery decisions about going on holiday a second time: your risk/reward tradeoff should still be "I'm OK with the possibility of a bad outcome".

Re "It is a human nature to overreact (post-factum) to an unlikely event" -- yes, absolutely agreed. This is what I mean by saying that humans as a species are terrible at assessing low-probability risks. That most people change their view just means that most people both underestimate the likelihood of low probability events that haven't happened to anybody they know, and overestimate the likelihood of low probability events that have happened to somebody they know.
by D13Fd | 2025-08-26 14:08:48+00:00
I bought a computer with an OS. I don't need or want a note taking app from the OS vendor, or a document editing app, or a photo editing app. Their note taking app is just irrelevant to me - I want a computer and an OS from them. For a note taking app and many other programs, I'd rather use one of the various great (and sometimes open source) options.

I'm not expecting Apple to write a notes app that tops Obsidian, a photo management app that beats Lightroom, or a news reader that beats NetNewsWire, etc etc.

The point about writing code to export from Notes was to show that, if a person nonetheless chooses for whatever reason to use the free note taking app they ship with the OS, then they can still export things.
by TheCraiggers | 2025-08-26 14:09:02+00:00
Eh, that's a multi-faceted question. I personally am tired of Pine. They've made some questionable calls over the past couple years and their "make open hardware with almost nothing working software-wise and see what the community does" business plan has started feeling exploitative to me.

PPpro was mismanaged especially badly. Nothing against the amazing community- it's just there were some hardware/firmware decisions by pine that made it especially hard to develop for. Meanwhile, the non-pro version is handicapped by a very slow processor.

There's still some development happening, and the window managers like KDE are still improving stuff on the front end. But you're right, it has slowed down. That all said, this is still the only non-Google/Apple device you can get in the USA that actually kinda works. I used both the non-pro and pro versions for a few months a couple years ago as my daily driver. I could make calls, send texts, connect to matrix, etc. I wouldn't claim that "it just worked" but it did work.
by IAmBroom | 2025-08-26 14:09:15+00:00
Speech implies intended communication of a message.

Burning the flag in a box of discarded junk from Grandma's house is intentional, but without message. I could conceive of that being made illegal... but so incredibly rare as to be pointless.

Burning the flag as part of the solemn, prescribed way to burn a flag has intent and message, and is speech. So is burning the flag to protest the US involvement in whatever atrocity the government is currently involved in.
by ollybee | 2025-08-26 14:09:29+00:00
What is obnoxious is that certificate transparency logs mean that you now have to effectively centrally register any new domain you put online. That means you instantly see a whole load of traffic to your domain from bots, scrapers, beg bounty scanners etc. Any new site has to be designed to handle that baseline of traffic.

I understand the point of CTL's and it's necessary given that every browser and device is configured to trust CA's that you wouldn't actually trust. It's had awful side effects for people who want to host low traffic sites, or fly under the radar for whatever reason.
by umanwizard | 2025-08-26 14:09:41+00:00
Let me try to explain the proof in more detail. Assume the TM is sublinear. Then there exists some fixed N such that for every input of size n <= N, the number of steps the TM halts in is less than N.

Now consider any input I, and let I_N be the subset of I that fits in N characters (I.e. I_N is the same as I except with all characters past the Nth replaced by blanks).

Then by our earlier statement defining N, the TM must halt on I_N after fewer than N steps. But the TM’s behavior on I for the first N steps must be the same as its behavior on I_N, because it can’t possibly have read any different characters (since in N steps it can only have read at most the first N characters, and those two inputs are the same on that interval). Thus the machine must halt in less than N steps on I. But I was chosen arbitrarily, so we’ve shown that the machine halts in less than N steps on any input, and recall that N was a fixed constant.
by ameliaquining | 2025-08-26 14:10:02+00:00
Is there a different implementation timeline that you think would adequately address the legitimate concerns of orgs relying on legacy and manual processes? My model is that beyond a baseline of a couple years (which were already granted), adding more time doesn't help, because these orgs will always procrastinate until the last minute on anything that doesn't seem to management like an obvious immediate priority. I think the CA/B Forum does understand this and that they're significantly inconveniencing a lot of people, but it has to happen sometime, and part of the purpose of the push for automation is to ensure that the inevitable future tightenings of security requirements won't require most orgs to do anything.
by throw2432234 | 2025-08-26 14:10:03+00:00
>ntel making decisions for political rather than commercial considerations

> Intel’s board prioritizing government interests over their fiduciary duties

How about Disney, Mozilla and every major corporation? You must hire right people (including this lame CEO and board), or no loans and contract for you!!!

US government pushed really really hard their agenda onto ALL industries without any lube for past 40 years!

If US gov actually directly express what they want, and just buy 10% of strategic company on open market, it is super refreshing!!
by exitb | 2025-08-26 14:10:12+00:00
RSI is a combination of "repetitive" and "strain". My take on it is that ergonomic keyboards that limit the amount of finger movement make your typing more repetitive - hence you need to be sure as hell that there is as little strain as possible.

I also went with a minimal split keyboard and quickly started to feel pain. When I however looked at my desk/chair/screen, I found that they don't promote the correct posture. Once these were corrected, I got no pain at all.

I think the right lesson is that this is a journey, rather than a problem you can throw some money at once and have it solved.
by zikduruqe | 2025-08-26 14:10:22+00:00
Ha. Same here. My personal MBA M1/8GB just chugs along with whatever I need it to do. I have a T480 32GB linux machine at home that I love, but my M1 just does what I need it to do.

And at the shop we are doing technology refreshes for the whole dev team upgrading them to M4s. I was asked if I wanted to upgrade my M1 Pro to an M4, and I said no. Mainly because I don't want to have to move my tooling over to a new machine, but I am not bottlenecked by anything on my current M1.
by mc32 | 2025-08-26 14:10:32+00:00
I think that's an incorrect framing. A more proper framing is that some industries are key to ensuring a nation is not dependent on another for key products that ensure a dominant (not supplicant like say Ukraine) position with regard to defence and therefore independence.

This is recognized by the current administration but is also a continuation of the previous administration's pivot toward undergirding and supporting key industries. I hope it's also recognized by any subsequent administration.

I think even neocons now recognize the "new world order" is not sustainable if some players don't play by the rules that they all agreed on.

No country with an ability to avoid it wants to be subject to being held by the neck.
by ComputerGuru | 2025-08-26 14:10:34+00:00
I actually don’t have a problem with the SSL changes as they specifically pertain to http servers – it’s largely a dived problem with automated solutions compatible with all the major players on most fronts.

But certs and every other context have become neigh impossible except in enterprise settings with your own CA and cert servers. From things like printers and network appliances to entirely non-http applications like VPN (StrongSwan and OpenVPN both have/support TLS with signed SSL certs, but place very different constraints on how those work in practice and what identities are supported, how or if wildcards work, etc).

Very little attention has been paid to non-general purpose and non-http contexts as things currently stand.
by darkwater | 2025-08-26 14:10:58+00:00
> How on earth would that make more sense than properly setting up ACME and forgetting about the problem for the next hundred years?? If your bespoke ERP system is really so hostile toward cert changes, put it behind a proper reverse proxy with modern TLS features and self-sign a certificate for a hundred years, and be done with it.

I completely agree with you but you would be astonished by how many companies, even small/medium companies that uses recent technologies and are otherwise pretty lean, still think that restarting/redeploying/renewing as less as possible is the best way to go instead of fixing the root issue that makes restarting/redeploying/renewing a pain in the ass.
by extraisland | 2025-08-26 14:11:09+00:00
> The two worse pieces of advice in the article are breaking the rules and making your own decisions on what to work on.

If you read some of his other pieces that are linked. There is other dubious advice and analysis on that blog.

> Even with a mandate that broad, I knew what rules couldn’t be broken or when I needed to ask for guidance from legal, finance, the CTO, etc.

Yes I agree. There are rules that cannot be broken in the organisation. It is highly dependant on industry and the size of the business.

I think there are times when you need to break the rules to get stuff done e.g. Self approving a PRs to get something working when someone else isn't around / available on a non-prod environment. I categorise that as a "bit naughty". I am assuming that is what they mean, but the haven't made that clear if that is the case.

> I didn’t get to “make my own decision about what to work on”. I had broad categories of objectives and I could choose how to prioritize and took some latitude about what to “delegate to the floor”. But anyone who needs to read his advice doesn’t have the experience or professional maturity to know that. I didn’t early in my career and I have the PIPs to prove it.

I have got hosed by acting like a maverick. You learn quickly you can't behave like that.

> If you have an idea that you think is good, first you sell it internally and get buy in - either via a proof of concept or at least a decent write up or conversation - then you implement it.

I work in a small org. I will at least talk to my superior if I am going to implement something that hasn't been agreed or take a significant detour.
by kldg | 2025-08-26 14:11:23+00:00
For what it's worth -- and I'm not familiar with the Framework 13 -- but I did recently review a marketed-for-AI-workloads laptop with Ryzen 260 CPU and Nvidia 5060 laptop GPU, which shipped with Windows, and was curious how graphical Ubuntu with GNOME would run from a fresh install on it. It ran hot on simple tasks, with severely worse battery performance (from 11h runtime playing a local video stream via Firefox to 3.5h) and moderately worse total work output relative to Windows.

It runs Debian headless now (I didn't have particular use for a laptop in the first place). Not sure just how unpopular this suggestion'd be, but I'd try booting Windows on the laptop to get an idea of how it's supposed to run.
by 4ggr0 | 2025-08-26 14:11:26+00:00
The actual infra-backend of the swiss Teletext is quite cute, just a single, Windows 2000 (if I remember correctly, maybe Server-edition) PC, running in a Datacenter-rack, on the floor of course, with about one dude who knows how it all works. Not sure how other countries do it, probably with similar, archaic setups.

At least that was the state about 10 years ago, maybe they upgraded the infra since then.
by nathan_compton | 2025-08-26 14:11:29+00:00
Well, let me ask you: when your joints crack do you think the process involves something other than physics at its most basic level?

You may take it from my posing the question that I think its obvious that joint cracking is determined by physics, and I do tend to think this, but I think a compelling argument can at least be made that joint cracking might not actually be fundamentally determined by physics.
by bee_rider | 2025-08-26 14:12:01+00:00
I disagree with the original poster about arborists, but I don’t think racing is a better example. Racing is a sport with rules (limitations) specifically designed to promote some type of fair competition. It is a game designed around wanting to drive cars really fast, it looks nothing like “getting a task done as fast/easily as possible.”

If the goal was just to get from point A to point B as fast as possible without and constraints, I guess they would launch the guy out of a cannon or something.

If the goal was to do something useful, like move a lot of people/stuff from one point to another, we’d end up looking at solutions that look nothing like a race car; public transit, stuff like that.
by georgeburdell | 2025-08-26 14:12:08+00:00
If I may add my view as a formerly high-achieving semiconductor worker that Intel would benefit greatly from having right now, a lot of us pivoted to software and machine learning to earn more money. My first 2 years as a software engineer earned me more RSUs than a decade in semiconductors. Semiconductors is not prestigious work in the U.S., despite the strategic importance. By contrast, it is highly respected and relatively well remunerated in the countries doing well in it.

From this lens, the silver lining of the software layoffs going on may be to stem the bleeding of semiconductor workers to the field. If Intel were really smart, they’d be hiring more right now the people they couldn’t get or retain 3-5 years ago
by adamsb6 | 2025-08-26 14:12:12+00:00
You should assume that the identifying details in this database are already leaked. The Equifax breach in 2017 exposed about half of all Americans. The National Public Data breach last year included 272 million Social Security numbers.

You can get an inconvenient approximation of challenge/response by freezing your reports with the bureaus and only unfreezing them briefly when applying for new credit.
by BariumBlue | 2025-08-26 14:12:27+00:00
Lack of types is one thing that turned me away from Elixir when I was trying to learn it.

I didn't know how to think about the types so I wanted some way to annotate them to help think through it, but went through it. And then the compiler complained at me I was passing in the wrong type to a function. I mean yes thanks? But also give me a way to figure that out BEFORE I try running the code.
by troad | 2025-08-26 14:12:33+00:00
> Yep, I agree with this. This is what I usually try in Python. Granted, Python is a way worse vehicle for FP than Elixir is, but I try to keep my procedures as pure functions as far as possible with not too big sacrifices in readability and performance. Most of the time a functional solution can be found, even in Python.

That's really interesting. The last time I wrote any serious Python was back in the Python 2 era, so it's been a hot minute, but that Python certainly didn't feel very amenable to FP. Nice to hear that it's turned a corner. I'll keep an eye out for any use case where I could give FP-flavoured Python a spin.

> And maybe I am a little bit delusional thinking this, but in my experience, when you think deeply and come up with strict FP solutions, and you know what you are doing, then a lot of type issues don't arise, or are obvious to avoid. The simple fact that one thing you initialize once doesn't change over the course of its lifetime, already avoids tons of mistakes. You simply don't get this "Oh, is at that point in time that member of object x already modified, to be value y?" shit.

I very much agree with this, and I wish more FP evangelism focused on the many wonderful emergent properties of FP systems in production, instead of cutesy maths cleverness that turns off more people than it attracts (and those that it attracts were always going to be functional programmers to begin with).
Show HN: I made AI Agent App that literally uses your phone
by ayush0000ayush | 2025-08-26 14:12:40+00:00
I am making this Open Source project which let you plug LLM to your android and let him take incharge of your phone.

All the repetitive tasks like sending greeting message to new connection on linkedin, or removing spam messages from the Gmail. All the automation just with your voice

Please leave a star if you like this

I am a single developer making this project, would love any kinda advice or collaboration!