MurphyA/hacker-news huggingface dataset:
by enneantic | 2025-08-23 14:06:46+00:00
This is a great illustration of the dangers of lost context.

This excerpt is a bit of the dialogue where Socrates is quoting some legend that takes place in Egypt.

On other parts of the dialogue, when speaking directly, Plato says that anyone can plainly see that writing in itself is not negative.

There is also a great bit where he warns that relying on texts solely to learn without guidance of other learned people opens oneself to misinterpreting the text and learning all the wrong things from it.

Much like you did.
Show HN: Munchlog – Casually track calories with voice
by divyanthj | 2025-08-23 14:07:59+00:00
I had always found meal tracking too boring. Healthify had huge forms that are boring to fill after each meal. Then it let you take pictures but then I always forget it to take them before eating.

Meal tracking was such a pain, so I built an app where you can simply say what you ate and it will break it down into macros immediately. Now I'm that annoying guy who talks to his phone every time he ate.
by giantrobot | 2025-08-23 14:08:14+00:00
Can confirm the first time networking two computers felt like magic. Even at 10mbps (limited by the cheap hub I had) my first LAN was amazing. I networked my computer, the family computer, and an old PC as a Linux server and used diald to share the dial-up networking between everyone. It was a real honest network and was amazing at the time.
by belter | 2025-08-23 14:08:32+00:00
With less fluff, a report on the economics of Palantir by Citron Research:

https://citronresearch.com/wp-content/uploads/2025/08/OpenAI...

Read so as not to be a fool, soon parted with it's money.

Note some current PE values...

NVIDIA PE: 57,33

Apple PE: 34,62

Microsoft PE: 37,18

Palantir PE: 527,52

The rest of letter, is a kind of anti-woke stance, billionaire victim complex so frequently seen now. Just positioning to align with current US political trends and secure government contracts, especially given Palantir heavy reliance on defense spending.
Show HN: Hexora – detection and analysis of malicious Python scripts
by rushter | 2025-08-23 14:08:34+00:00
I made a new library to detect malicious and harmful behaviour in Python scripts. It uses static analysis with semantic modeling. Even when the code is pretty obfuscated, it can still detect it.

For example, it can infer that

getattr(sys.modules["built"+"ins"], "".join(reversed(["al","ev"])))("1+1")

Is basically:

eval("1+1").

Currently, I'm testing it on public files where some of them implement malicious behavior, as well as past malicious packages on PyPI.

You can see some of the detection examples here: https://github.com/rushter/hexora/blob/main/docs/examples.md

I'd love to hear your feedback and ideas on how to improve this and identify missing rules.
by lapcat | 2025-08-23 14:08:39+00:00
The OP was talking about monetary wealth. Here you're redefining "expensive" to mean something other than wealth, i.e., time.

Also, the whole point of the submitted article is that the investment of time into exercise is totally worth it.

Yes, there's a learning curve to tennis, as with any sport. You could just go jogging/running by yourself, but the advantage of sports, including tennis, is that they're usually a more fun and less boring form of exercise than jogging/running by yourself. If exercise is fun, then you're more likely to stick to it rather than skipping it.
by brookst | 2025-08-23 14:08:50+00:00
I have the best luck with RFC speak. “You MUST validate that the documentation validates existing code before implementation. You MAY update documentation to correct any mismatches.”

But I also use more casual style when investigating. “See what you think about the existing inheritance model, propose any improvements that will make it easier to maintain. I was thinking that creating a new base class for tree and flower to inherit from might make sense, but maybe that’s over complicating things”

(Expressing uncertainty seems to help avoid the model latching on to every idea with “you’re absolutely right!”)
My take: Myers-Briggs is a useful tool with evidence behind it
by cm2012 | 2025-08-23 14:09:09+00:00
Its kind of a common thing to say Myers-Briggs typing is useless because its pseudo-science.

This is not supported by the data.

For one, many studies of identical twins raised in separate households show they have the same personality type at a much higher rate than chance.

Two, there are incredibly strong correlations in the data. In different surveys of 100k+ people, the highest earning type has twice the salary of the lowest type. This is basically impossible by chance.

The letters (like ENTJ) correlate highly to the variables of Big 5, the personality system used by scientists. Its just that it's bucketed into 16 categories vs being 5 sliding scales.

Scientific studies are looking for variables that can be tracked over time reliably, so Big 5 is a better measure for that.

But for personal or organizational use, the category approach is a feature, not a bug. It is much more help as a mental toolkit than just getting a personality score on each of the 5 categories.
by o11c | 2025-08-23 14:09:24+00:00
I have had real-world programs broken by blind assumption of "does not deliberately contain controls" (form feed is particularly common for things intended to be paginated, escape is common for things designed for a terminal, etc.) and even "is fully UTF-8" (there are lots of old data files and logs that are never going away).

If you aren't doing something useful with the text, you're best off passing a byte-sequence through unchanged. Unfortunately, Microsoft Windows exists, so sometimes you have to pass `char16_t` sequences through instead.

The worst part about UTF-16 is that invalid UTF-16 is fundamentally different than invalid UTF-8. When translating between them (really: when transforming external data into an internal form for processing), the former can use WTF-8 whereas the latter can use Python-style surrogateescape, but you can't mix these.
by enneantic | 2025-08-23 14:09:35+00:00
This is a great illustration.

The bit of the dialogue you quote is Plato telling a story.

On another bit he says directly: anyone can plainly see there is nothing detrimental about writing itself.

And further down the line he warns against relying on text solely to learn and not other learned people because you might lose context and internalize the wrong interpretation.

Much like you did.
by integralid | 2025-08-23 14:10:41+00:00
I'm not certain... On one hand I agree that some characters are problematic (or invalid) - like unpaired surrogates. But the worst case scenario is imo when people designing data structures and protocols start to feel the need to disallow arbitrary classes of characters, even properly escaped.

In the example, username validation is a job of another layer. For example I want to make sure username is shorter than 60 characters, has no emojis or zalgo text, and yes, no null bytes, and return a proper error from the API. I don't want my JSON parsing to fail on completely different layer pre-validation.

And for username some classes are obviously bad - like explained. But what if I send text files that actually use those weird tabs. I expect things that work in my language utf8 "string" type to be encodable. Even more importantly, I see plenty of use cases for null byte, and it is in fact often seen in JSON in the wild.

On the other hand, if we have to use a restricted set of "normal" Unicode characters, having a standard feels useful - better than everyone creating their own mini standard. So I think I like the idea, just don't buy the argumentation or examples in the blog post.
by crispyambulance | 2025-08-23 14:10:45+00:00
> Nothing he says sounds obscure or hard to decipher in my reading,

My dude, the guy shows up on Joe Rogan and Lex (multiple times) and talks a fire-hose of jargon to a general public audience. Indecipherable even to physicists. And what do you mean "compact"? The Rogan/Lex interviews are like 2-3 hours in length.

THAT ALONE is a clear signal he is some kind of fraud.

Capable scientists who insert themselves into public discourse are able to discuss their work at any level of detail, without jargon, and actually explain what they getting at. EW uses "Gish Gallop" tactics, I guess, to make himself seem smart. Aside from that he goes on bizarre detours where he mixes in his "geometric unity" theory with grievances about higher-ed, side-bars about Jeffery Epstein, his insane brother, and "DISC" (an acronym he coined and uses like it's now common knowledge).
by rjzzleep | 2025-08-23 14:11:00+00:00
It's not really Linux' fault. Most It's Microsoft that forced this, and most vendors don't know how to deal with this and work proper firmware. I think Framework and Valve fixed theirs. I have a GPD and just found out that the reason I kept getting it wake from sleep was some MS related option triggering an ACPI IRQ 9 sleep wake.

On another note, I actually think that the most important things that work better on the Apple devices is the mic and camera, the rest is somewhat unimportant on the go if you work at a desk.
by Terretta | 2025-08-23 14:11:04+00:00
Define heavy... There's a band where the max subscription makes most sense. Thread here talks $1000/month, the plan beats that. But there's a larger area beyond that where you're back to having to use API or buy credits.

A full day of Opus 4.1 or GPT 5 high reasoning doing pair programming or guided code review across multiple issues or PRs in parallel will burn the max monthly limits and then stop you or cost $1500 in top up credits for a 15 hour day. Wait, WTF, that's $300k/year! OK, while true, misses that that's accomplishing 6 - 8 in parallel, all day, with no drop in efficacy.

At enterprise procurement cost rates, hiring a {{specific_tech}} expert can run $240/hr or $3500/day and is (a) less knowledgable on the 3+ year old tech the enterprise is using, (b) wants to advise instead of type.

So the question then isn't what it costs, it's what's the cost of being blocked and in turn blocking committers waiting for reviews? Similarly, what's the cost of a Max for a dev that doesn't believe in using it?

TL;DR: At the team level, for guided experts and disbelievers, API likely ends up cheaper again.
by p_ing | 2025-08-23 14:11:14+00:00
Reread my comment. Yes, macOS (or ARM, here) wastes memory. For every 1KiB page you have, you're wasting 15KiB of memory.

That's just how this works. It's a performance vs. efficiency tradeoff.

And there's nothing special about your workload. It's small in comparison to many others that many other OSes on many other ISAs, including Windows & x86 w/ AWE, have been running for quite some time with no issue.
by alfiedotwtf | 2025-08-23 14:12:15+00:00
> What does explicitly writing out the heap-ness of a variable ultimately provide, that Rust's existing type system with its many heap-allocated types (Box, Rc, Arc, Vec, HashMap, etc.) doesn't already provide?

To be honest, I was thinking more in terms of cognitive overload i.e. is all that Box boilerplate even needed if we were to treat all `heap my_heap = …” as box underneath? In other words, couldn’t we elide all that away:

let foo = Box::new(MyFoo::default ());

Becomes:

heap foo = MyFoo::default();

Must nicer!
by zzzeek | 2025-08-23 14:12:36+00:00
I just had to purchase a cloudflare account to protect two of my sites used for CI that run Jenkins and Gerrit servers. These are resource-hungry java VMs which I have running on a minimally powered server as they are intended to be accessed only by a few people, yet crawlers located in eastern Europe and Asia eventually found it and would regularly drive my CPU up to 500% and make the server unavailable (it should go without saying I have always had a robots.txt on these sites that prohibit all crawling. Such files are a quaint relic of a simpler time). For a couple of years I'd block the various offending IPs, but this past month the crawling resumed again this time intentionally swarmed across hundreds of IP numbers so that I could not easily block them. Cloudflare was able to show me within minutes the entirety of the IP numbers came from a single ASN owned by a very large and well known Chinese company and I blocked the entire ASN. While I could figure out these ASNs manually and get blocklists to add to apache config, Cloudflare makes it super easy showing you the whole thing happening in realtime. You can even tailor the 403 response to send them a custom message, in my case, "ALL of the data you are crawling is on github! Get off these servers and go get it there!" (again sure I could write out httpd config for all of that but who wants to bother). They are definitely providing a really critical service.
by hombre_fatal | 2025-08-23 14:12:43+00:00
I don't really get what this article is talking about nor the distinctions that it's trying to draw between server and client. It brings up multiple different things from captcha to actual client performance so it's not clear what "problems" means in the title nor TFA.

The author needs to open with a paragraph that establishes better context. They open with a link to another post where they talk about anti-LLM defenses but it doesn't clarify what they are talking about when they compare server problems with client-side problems.
by 827a | 2025-08-23 14:13:14+00:00
I have a friend who, when you bring up exercise in any capacity, how good it is for you, anything about it, even if its just how I did it, he has to find some way to twist it so it can't be good. This thread is so reminiscent of conversations with him.

"Tennis is great for you" "there's probably a correlation with being rich" "Also unhealthy people don't regularly play tennis so there's survivors bias". "But there's free courts" "Nope they turned those into pickleball courts" "Wake up at 4:30am and go for a run" "Bro if youre waking up at 4:30 when are you going to bed" etc

People will find any reason they can to be unhealthy. Its better to just not engage with them.
by wseqyrku | 2025-08-23 14:14:17+00:00
I second doing intermittent chores, but rather the literal actual household chores, helps you to relax while being productive and putting your mind at ease from the main task you are focusing on otherwise.

For solo work, I've found a framework of four learning modes effective: reading, when you are exploring something new, sketching/speccing depending on the detail level you're aiming for, coding only when you might forget things you didn't bother writing down, and relaxing as the fallback state. The key is to be in only one mode at a time and to avoid getting stuck in any single one. Based on nature of the work, you might switch two or three times a day. And always know the next two immediate steps; if you don't, that's your signal to switch. Rinse and repeat.
by jchw | 2025-08-23 14:15:29+00:00
For old laptops it's significantly less bad, but definitely old. 5+ years old is usually a good start, though these days it may be better if it's even older.

The most significant issues:

- Peripherals simply don't work at all, as in, no touchpad or keyboard, or at least no touchscreen. This is definitely an issue with a variety of laptops including some Microsoft Surface and Dell laptops.

- Power management. Frequently, machines fail to sleep or resume reliably.

- Audio is low quality and quiet. This problem was publicized pretty well by the Asahi Linux project, but it is far from unique to MacBooks: a lot of laptops now require OS-level audio processing to have good audio quality. Even my Framework 16 partly has this issue, though it can be alleviated partly with a BIOS option. I believe this also impacts some System76 laptops.

- WiFi/Bluetooth instability. This issue is probably worst with some Realtek radios, but I've also seen it from time to time with Mediatek.

- Sometimes, issues booting at all. Yep. Sometimes it just won't boot, as sometimes the kernel will just break support, and maybe unbreak it later. That's the nature of just running random shit, though.

I think that illustrates enough so I'll stop there, but also don't forget the hurdles to even get started. Often times the very first thing you want to do is disable secure boot which differs a bit per system. This isn't always truly necessary, but even if you're using a Linux distribution that works with Secure Boot it's often a good idea, as there are a variety of things that you can't do easily with Secure Boot on Linux.

Older laptops are less of an issue since Linux tends to get a lot more mature with older hardware as time goes on, but it's still a little hit or miss, especially with vaguely recent laptop hardware that has weird stuff like Intel IPTS. But that having been said: Linux doesn't support old hardware literally forever, either. Old hardware sometimes stops working and gets pulled from the kernel, or moves out of mainline Mesa, and so forth. So even that isn't a 100% panacea.
by csande17 | 2025-08-23 14:15:52+00:00
Unicode really is an impossibly bottomless well of trivia and bad decisions. As another example, the article's RFC warns against allowing legacy ASCII control characters on the grounds that they can be confusing to display to humans, but says nothing about the Explicit Directional Overrides characters that https://www.unicode.org/reports/tr9/#Explicit_Directional_Ov... suggests should "be avoided wherever possible, because of security concerns".
by yorwba | 2025-08-23 14:16:06+00:00
Migrating might be more of an option than you think. If you can get a job offer in IT and have a university degree or significant work experience, EU countries typically make it relatively easy to get the corresponding work visa. E.g. information for Germany: https://www.make-it-in-germany.com/en/visa-residence/types/i... Even without a job offer, you might qualify for a job seeking visa or be able to enroll as a student.

The catch is of course the language barrier making everything a little bit inconvenient, and that the cost of living is likely to seem outrageously high compared to what you're used to (but still affordable if you can find at least a part-time student job.)
by zbentley | 2025-08-23 14:16:37+00:00
> I’m increasingly convinced that the mere existence of a package manager (for programs, not source code) is a sign of a failed platform design

> Steam does not have this problem. Download game, play game.

These statements seem contradictory. Steam is a package manager. So is the Apple App Store. Sure, they have different UX than, say, apt/dnf/brew/apk/chocolatey, but they're conceptually package managers.

Given that, I'm unclear what the gripe is (though I'm totally down to rip on Snap/Flatpak; I won't rant here, but I did elsewhere: https://news.ycombinator.com/item?id=44069483). Is the issue with OS/vendor-maintained package managers? Or is the issue with package installers that invoke really complicated build systems at install time (e.g. package managers that install from source)?
by Retr0id | 2025-08-23 14:17:01+00:00
Another implicit social contract is that you can tell whether a request is coming from a commercial or non-commercial source based on the originating ISP. This was always a heuristic but it was more reliable in the past.

If 1000 AWS boxes start hammering your API you might raise an eyebrow, but 1000 requests coming from residential ISPs around the world could be an organic surge in demand for your service.

Residential proxy services break this - which has been happening on some level for a long time, but the AI-training-set arms race has driven up demand and thus also supply.

It's quite easy to block all of AWS, for example, but it's less easy to figure out which residential IPs are part of a commercially-operated botnet.
by mirashii | 2025-08-23 14:17:19+00:00
> Maybe, or maybe the fact that Zig is a small independent project with limited resources has also something to do with it

Or, maybe it's this kind of redirection and evidence of a victim complex. Part of the reason that there's a patina of anti-Rust sentiment includes the dismissive attitude and swipes you, a the VP of Community at the Zig Software Foundation, take towards Rust and Rust developers by writing about topics you aren't involved in and don't have a solid grasp of.

https://kristoff.it/blog/raii-rust-linux/ https://lobste.rs/s/hxerht/raii_rust_linux_drama#c_gbn1q8

Or similarly, comments like this one in this thread: https://news.ycombinator.com/context?id=44994749
by marcusb | 2025-08-23 14:17:26+00:00
>So, what's the secret?

There isn't one. Its a trade-off. I get up between 4:15 and 4:45 (depending on the day) to exercise. I go to bed between 9 and 10 pm (usually 9:30.) I exercise with a group of people, and that ends up being most of my socializing time. 5 - 9 is family time.
by Grimburger | 2025-08-23 14:17:33+00:00
> https://thepostsa.au

Anyone can read that site and make up their minds about the scientific merit of it's claims.

I assume it's very intentional that it's right down the bottom in tiny text that's it state government owned media vehicle

> https://theconversation.com/we-looked-at-all-the-recent-evid...

"Our team screened 1,317 articles and reports as well as dissertations from masters and PhD students. We identified 22 studies that examined schools before and after phone bans."

"Our research found four studies that identified a slight improvement in academic achievement when phones were banned in schools. However, two of these studies found this improvement only applied to disadvantaged or low-achieving students."

"In a sign of just how little research there is on this topic, 12 of the studies we identified were done by masters and doctoral students. This means they are not peer-reviewed"

Do you really want to keep wasting people's times here because I'm more than happy to debate it with someone who actually cares.

Nothing in that article suggests it's of overwhelming benefit. I'm talking much bigger than teachers having an easier job too, education outcomes like this take decades to be seen.

> https://www.nsw.gov.au/media-releases/mobile-phone-ban-impro...

>gov.au/media-releases/

Mate you've spammed us all with the first things you've found on google. Correct?
by therobots927 | 2025-08-23 14:18:13+00:00
With a P/E of 530 its hard to imagine a better short opportunity in the market. As much as palantir likes to pretend its a software company it is a bespoke software company which has only slightly better scaling laws than a consulting company. Make no mistake I have the utmost respect (if fear is a form of respect) for their surveillance capabilities. But that doesn't justify the market cap.
by andsko | 2025-08-23 14:18:20+00:00
Hey, congratulations on the big release!

I was thinking why not make it a standalone full-screen app, desktop or web, but there's definitely something special when it's on your homescreen. You become attached to it, instantly. Like if this wallpaper has always been there. Maybe it's the process of installation, and some work required on your part to do, and then that little anticipation while it's getting installed. Haven't played desktop games for a long time but had the same feeling of excitement to finally see how it works. And it didn't disappoint!

I've been mostly chilling in the clouds since the installation. Look Ma! I can fly!
by open-meteo | 2025-08-23 14:18:27+00:00
You rang ;-) I’m in the middle of adding more ECMWF data that will be released as open data starting October 1st. At the moment, only a limited set of lower-resolution (0.25°) ECMWF forecasts can be shared open-data. That’s going to change in a big way, though I can’t share more details just yet.