MurphyA/hacker-news huggingface dataset:
by JKCalhoun | 2025-08-19 22:42:17+00:00
Had to go to the comments in the linked post to find the reference to the soda jerk. And "jerking" was apparently pulling on the (seltzer) tap.

I suppose if "soda jerk" was thought to be a menial job (reminded of one of the threads in the film, "The Best Years of Our Lives" (1946)) ... then the original meaning of "jerk" as a loser might have come from that.
by Atlas667 | 2025-08-19 22:42:22+00:00
Marxist theories arent just floating in space they are grounded studies.

Marx's Capital is actually a very well written piece of research, fully cited with notes for each citation. The dude was a proffessor. Lenins books are research pieces, not vague posturing. They are cited and founded in real phenomenon. In fact Lenin was persecuted because of the things he researched. He has books studying the rise of banking in Russia and Europe and how corruption arised from the simple business practices of finance capital and how that turned into imperialism through profit seeking of raw materials in foreign lands.

You would know that if you actually engaged with it instead of forming your opinions from vague notions passed down to you or read on social media.

Their theories arent unfounded.

> only actually ‘doable’ through authoritarianism

Nah. The central point of Socialism/Communism is the DEMOCRATIZATION of production. Calling it authoritarianism is a lie by billionaires to keep people hating it.

See, If peoples courts decide that wallstreet hedge funds and the military industrial complex deserved life sentences in jail they call it authoritarianism.

But when bourgeois judges systematically put poor people in jail its "just the legal system" and "hey it aint perfect, but nothing is".

Your ideas on Marxism are very western. The Khmer Rouge was backed by the CIA and the brits. Pol Pot was the only Marxist who said hes never read Marx, imagine that. Its almost as if they werent Marxists. He also adored Hitler, which is antithetical to Marxism.

Remember and recognize that a peoples state will always be called authoritarian by the rich.

Marxism is about making the people their own state. Make society FOR itself by eliminating the capitalists who create the imbalance of power.
by wkat4242 | 2025-08-19 22:42:24+00:00
Most of the big players like Microsoft charge enterprise customers for support on top of everything else. And this "premium support" still sucks. Microsoft outsources to Accenture who then outsource again to some random dopey small companies in the middle East so you get calls in the middle of the night from Qatar by someone who has no more knowledge than what the docs say. Which you've already read yourself otherwise you wouldn't have gone through the hassle of logging a ticket. Because outsourcing causes barriers between the people who built the thing and the people who support it.

In most of these cases we either give up because the support is so useless, or someone high up calls Microsoft and gets the case escalated away from Accenture to someone in Microsoft who actually knows something.

Personally if I were a CIO I would really be pissed at having to pay for this kind of "support". But yeah these guys rub shoulders with Microsoft all the time who tell them it's all amazing.
by LargoLasskhyfv | 2025-08-19 22:42:57+00:00
Similar. Just not one :-) From 11 years old, going on and on, with about same age girls(and their mothers!(at the same time!)), most slightly older though, or really grown up, extremely fit female joggers in the forest(exactly 13tienth bday), a bunch of NUNS, female teachers, a bunch of(bi-sexual)nurses(exactly 16tienth bday), ...

All without much exposure to porn, which I've found to be ugly, from the little I've seen. Because it isn't real, and staged.

Whereas I effortlessly gave them ultimate bliss, without hurting them in any way, enjoying the glory of their moments very much.
by morgante | 2025-08-19 22:43:26+00:00
Yikes, this is a pretty bad vulnerability. It's good that they fixed it, but damning that it was ever a problem in the first place.

Rule #1 of building any cloud platform analyzing user code is that you must run analyzers in isolated environments. Even beyond analysis tools frequently allowing direct code injection through plugins, linters/analyzers/compiler are complex software artifacts with large surface areas for bugs. You should ~never assume it's safe to run a tool against arbitrary repos in a shared environment.

I also ran a code analysis platform, where we ran our own analyzer[1] against customer repos. Even though we developed the analyzer ourself, and didn't include any access to environment variables or network requests, I still architected it so executions ran in a sandbox. It's the only safe way to analyze code.

[1] https://github.com/getgrit/gritql
by crinkly | 2025-08-19 22:43:35+00:00
I will say that most of the consumers of SaaS SSO solutions in our experience are the lowest bidding MSPs the customer can find or some oursourced operation. They usually employ the lowest paid fuckwits who play pass the blame around as long as possible and expect the supplier to prove every issue isn’t them.

Of course we’re happy to charge them to deal with that shit.

If we don’t then they go to twitter and the trade press to shit on our product.
by firefax | 2025-08-19 22:43:40+00:00
As one might guess from my username, I run Firefox. I love it -- I have it customized just the way I like it.

I think if they focused on memory issues rather than wizbang new features, paired with getting android and iOS versions up to snuff, they could catch up, paired with a marketing campaign.

What is our goal here anyway? Does everyone need to use firefox? A year of "Firefox on the desktop?"

Some tools are niche -- used by craftmen. What are sysadmins and engineers but, at heart, craftsmen?

Anyways, in closing I think it's a good browser.
by socalgal2 | 2025-08-19 22:44:25+00:00
they are doing completely different things.

shadertoy: given a pixel coordinate, write a function to return a color.

geotoy: write a function to return vertices

In shadertoy, to draw cube on a 1280x720 screen requires your function to be called 921k times. To draw a cube in geotoy requires your function to be called 36 times. That's over simplifying but saying one is fast and one is a slow is comparing atoms to balls. Shadertoy = describe every atom, geotoy = describe the shape. again, bad analogy I suppose, but the orders of magnitude difference are somewhat help explain why one is fast and one is slow (yes though, you can generate a geotoy that will be slow and a shadertoy that will be fast). Similarly describing every atom means you can describe fog or god rays or caustics etc. Describing the shape won't do that.

PS: I think geotoy is cool. nothing above is meant to detract from that. Just to explain, probably poorly
by jjulius | 2025-08-19 22:45:05+00:00
Right? "How Zuckerberg will be looked back on" involves far more than just business/fiscal metrics, especially when "he's not a likable guy, and neither are his products". He may be hailed as a significant success as a CEO, but there's also the impact to individual privacy, the emphasis to get users addicted in an effort to maximize "engagement", the impact that social media (of which it's being argued here that he is king) on youth/society and political discourse writ large, the brutal impact to our attention spans, so on and so forth.

If I'm a magic eight ball, I'm going to go with "Outlook not good" on how history's going to view him. Being a CEO that is "performing better" than all the others is but a single piece of the puzzle.
by yieldcrv | 2025-08-19 22:46:02+00:00
You cash out in your personal account by launching a memecoin and buying a tiny bit on launch (or minting extra for yourself)

the baked xmr funds are once again swapped into virgin addresses that all buy your memecoin, with your clean funds you sell your position into the liquidity pool of the pumped coin

it looks the same as any other launch. are they bots, are they retail degens? who knows, pay capital gains tax and move on.

you can modify this by having the virgin addresses with dirty funds launch and pump the coin too, as long as your clean address buys near the beginning and sells into liquidity

this can all be scripted and done with unlimited amounts, a “bundler” can manage many virgin addresses with a nice GUI now, specifically to be multiple buyers and sellers of a launch

you can unlink your clean funds in less (or equally) restrictive ways for other reasons and privacy, but its clean enough to pay taxes on and be free and clear
by duxup | 2025-08-19 22:46:35+00:00
The absolute bizarre level of ... NO SECURITY here makes me surprised they got any offer.

Yes it is severe, but someone(s) at that company already know that, and anyone who doesn't likely doesn't care.

I would expect larger organization with real bug bounty programs to pay more, if only because they have shown they care. That other company, they do not care.
by techcode | 2025-08-19 22:48:14+00:00
Nomads and even more permanent expats use less of the infrastructure and amenities.

Not just for periods before and after they are living there - also during their stay.

For example. If they (nomads) lose their (remote) job - they won't get social benefits payments like the "locals".

They (nomads) also don't accrue retirement/pension which is usually part of income taxes.

And of course they pay all the other "taxes".

If they rent/buy anything - there's VAT. If they drive around in their car - they pay registration, insurance, road tax, highway tolls.

Pretty sure they also need to purchase some sort of health insurance.
by mgmobrien | 2025-08-19 22:49:12+00:00
For some kinds of data processing having your files in a local folder is a prereq. Every day I have my Obsidian vault open in Zed, and I interact with files via the tool-calling agent panel and via terminal.

I haven't tried Notion AI, maybe it's great. But I can't imagine going back to a world where all my knowledge lives in Notion's house. Notion CEO Ivan Zhao recently said: "If you think about applications, each application is kind of like a mini-prison of computing". (https://www.theverge.com/decoder-podcast-with-nilay-patel/75...) I think he's right. I don't want to be in Notion's prison even if it's big and nice.
by thejazzman | 2025-08-19 22:49:24+00:00
i think d2 looks sick , and i'm not op, but i do love just describing my system and telling the LLM to draw it. so having it "draw" d2 seems like a great new step?

when you want to make changes, you update your docs/design and repeat. think system design interview but you skip drawing it yourself at all and then sanity check your own work by interpreting the resulting graph etc
by afavour | 2025-08-19 22:49:40+00:00
> go all in on mobile. At the time, people thought he had way too much power due to the stock structure and many people thought his bet on mobile would come crashing down

That feels like real revisionist history to me. He was late to mobile. Buying Instagram was the Hail Mary. and yes, it paid off. But a tech company with the resources of Facebook could have been where Google is today with Android if they’d acted at the right moment.

The Instagram purchase was in 2012. Who was still expecting mobile to come crashing down in the iPhone 5 era?
by iLemming | 2025-08-19 22:49:52+00:00
Well, in the context of the discussion, you can "teach" Emacs to play Pacman. Imagine sending left/right/up/down commands to a Pac-Man emulator or whatever. The emulator itself may not "understand" these commands in pure text, accepting some digital form of them, but whatever format it accepts, it probably can be reduced to sequences of alphanumerical characters.

Similarly, when the emulator broadcasts current coordinates for pieces, or sprites of them - they still can be reduced to plain text.

As a matter of fact, if you want to play Pacman in Emacs... you can just play Pacman in Emacs: https://github.com/emacsmirror/pacmacs
by LarMachinarum | 2025-08-19 22:50:48+00:00
all with you about the fact that it's even more funny just in German (i.e. without subtitles)…

but well, given that people understanding German are likely a minority here, I felt it was probably necessary to link to a version with subtitles so that it would be accessible to everyone here.

Anyways, here's the link to the vid without subtitles for those who understand German: https://www.youtube.com/watch?v=4lSBwF8ojVw
by ericmay | 2025-08-19 22:50:55+00:00
So after all the legal mess and crusading and white knighting about the Apple App Store what we got in return is now buy the same product as I did before for the same price in dollars, but I can get 20% of my purchase price back in what is the equivalent of carnival tokens if I use Epic’s proprietary payment system?

Do you wholeheartedly believe that this counts as lowering prices or providing improvements? Are the Vbucks still $8 or no?
by jacobegold | 2025-08-19 22:51:03+00:00
(views expressed in this comment are my own, not those of graphite)

we have a number of large customers that feel the same way and are fully opted out of anything AI-related.

in my experience, our foremost goal is bring graphite to more people. i have seen many cases where folks get us in the door with diamond and then begin championing stacking which leads to a ton of organic spread that it otherwise may not get.

we have seen a ton more signal that ai is the easier way to get more committed folks in the door than signal that we are losing potential customers over having it as an option. if that were not true, we probably would not have gone in this direction.

i would love for graphite-lovers to make more noise about stacking as well and see no reason it can't happen in parallel - every month i see more and more conversations about stacking happening in the wild, and more and more of them reference us directly!
by TheFreim | 2025-08-19 22:52:18+00:00
> Others can just run a distro for people who believe in open source software.

What about Flatpak is contrary to open source software as you seem imply? Flatpak itself is free software, so is most of the software packaged with it. There are quite a few good reasons to use Flatpak, especially for developers who want to make their software available on different distributions without wanting to worry about packaging separately themselves. There are valid criticisms of it, but being somehow against open source software or being somehow related to Microsoft is not one of them.
by maxwellg | 2025-08-19 22:52:54+00:00
Many "softer" forms of SSO have trickled down too. Google + Microsoft OAuth are ubiquitous today without any upchage. OAuth from a Google Workspace account managed by an IT admin has many of the same security guarantees as SAML or OIDC from a Google Workspace account, at least for a small player. There are some sketches like https://easie.dev/ that explore this further.
by bunderbunder | 2025-08-19 22:53:48+00:00
I fear that's just the reality we live in. The things that make Julia great tend to be more advanced programming language features that are exciting to software engineers.

For your average data scientist or data analyst, though, it tends to look like a solution in search of a problem at best, and possibly just straight-up inscrutable. e.g., forget multiple dispatch, most my colleagues are already grumpy if they see @singledispatch in my code.
by ck425 | 2025-08-19 22:53:57+00:00
I particularly hate UI changes. There seems to be a constant trend in phone software to "improve" UI while disregarding the value of consistency and familiarity. Sure UI can be improved but if it's not a massive improvement the negatives of relearning the UI and retraining muscles memory far outweigh the positives. Same applies to features too, though often due to the UI changes that come with those features (Android Chrome's bullshit tab groups pushed me to Firefox).
by tikhonj | 2025-08-19 22:54:19+00:00
If you enjoyed that, I have a blog post on generating mazes in Haskell (from over a decade ago!). The algorithm is very similar, but the code is written using "inductive graphs" and the post is really more of an intro to working with graphs in a purely functional style.

https://jelv.is/blog/Generating-Mazes-with-Inductive-Graphs
by platevoltage | 2025-08-19 22:54:40+00:00
I struggle to think of anything she could have said.

As much as this feels crazy to say, Biden was the most progressive president we've ever had in modern times.

She could have said that she would address some of the many boogie-men that the republicans created. I don't see how that would have helped. She was already running as a 90's republican to begin with.

She could have said she would push for universal healthcare, which she was not willing to do.

She could have said she would re-evaluate our relationship with Israel, that was not going to happen.

She would get student load forgiveness done. Hard to believe given all of the roadblocks there.

The only thing I can think of is saying she would get cannabis legalized. Definite missed opportunity there.
by echelon | 2025-08-19 22:56:58+00:00
Notion needs to fear all of the people using (and loving) Obsidian at home that want to use it for work.

Notion is going to have a very hard time turning corporate Notion users into at-home/personal Notion users. Obsidian has already won this use case with one of the most rock-solid products ever.

Now Obsidian gets to fight the battle for corporate on their terms. And their tool is already developer friendly.

There are a million Obsidian champions, and there's probably a dozen of them in your org. I think Notion should be shaking in their boots right about now.

If Obsidian can get their organization management and syncing/backup strategy right, and if they make their product interface well with distributed git automations, Obsidian is going to take over so many new workflows. Not just knowledge bases, but mdbook -> webpage workflows, documentation, customer-facing pages, everything.

Notion makes product managers smile. Obsidian makes developers and product managers smile.
by handsclean | 2025-08-19 22:57:06+00:00
I wonder if it used to be that people largely weren’t on the same page, and didn’t know it. It’s not like people consult dictionaries to learn what slang means, or even usually ask somebody, and the definitions are related enough that responses usually don’t distinguish them. I’ve noticed it’s not uncommon online that a post’s likes are split between opposing interpretations, like agreeing with its politics vs seeing it as satire of politics one disagrees with.
by kamranjon | 2025-08-19 22:57:14+00:00
wow that timeline is a bit of a roller coaster:

"In 2022, my project HowToCook became enormously popular on GitHub, causing me to spend significant time maintaining it.

Unfortunately, my relationship with Lily changed. Her arrogance and disrespect led to us breaking up. I learned that people change."

...

"After moving my account and files to Suzhou, I explored GPU computing, built a Boeing 737 simulator in Suzhou Center, and reignited my relationship with Lily, looking forward to our future together."
by impossiblefork | 2025-08-19 22:57:45+00:00
Surely we can say that we have artificial intelligence. Even now reasoning models are able to pattern match well enough to solve IQ tests that have been turned into text for them.

But we can certainly say that we don't have artificial intelligences. There's nothing with coherent, total beliefs, something able to have actual knowledge (as a pet example I like, if you ask an LLM about a situation in the abstract it might respond correctly, but in another context it fails to use what it 'knows' in another context). I actually think much can be done about this, but we don't have it.
Show HN: Hexora – static analysis tool for malicious Python scripts
by rushter | 2025-08-19 22:58:11+00:00
I made a new library to detect malicious and harmful behaviour in Python scripts.

There are alternative libraries, but they usually rely on regexes, which can be fragile and tricked. My library uses AST and tracks some of the obfuscation techniques, such as import/call reassignment.

Currently, I'm testing it on public files where some of them implement malicious behavior, as well as past malicious packages on PyPI.

You can see some of the detection examples here:

https://github.com/rushter/hexora/blob/main/docs/examples.md

I'd love to hear your feedback and ideas on how to improve this and identify missing rules.
by partdavid | 2025-08-19 22:58:47+00:00
Can you say more about which prior art you think overlaps here? We have a similar use case to Figma and are implementing a similar solution. I'm not particularly concerned whether the path we're following is novel but I am particularly concerned with whether there are gotchas along it that we should be watching out for, so if there are more mature solutions, we'd be interested.
by senderista | 2025-08-19 22:59:25+00:00
This is a really dumb question from someone unfamiliar with the kernel's futex implementation, so bear with me. In userspace locks (e.g. in parking_lot), wait queues can be threaded through nodes allocated on the stack of each waiting thread, so no static or dynamic allocation of wait queue nodes is necessary. Is it possible to allocate wait queue nodes on the kernel stacks of waiting threads as well?
by aaronmdjones | 2025-08-19 23:00:01+00:00
Not at the moment; to achieve this, you typically put it behind something like dnsproxy [1][2].

I have done this on my router, along with a couple firewall rules to prevent plaintext DNS queries leaking out of the WAN port. dnsmasq is configured to talk to dnsproxy, and dnsproxy is configured to use DNS over TLS with 1.1.1.1 [3]

[1] https://github.com/AdguardTeam/dnsproxy

[2] https://openwrt.org/docs/guide-user/services/dns/dot_dnsmasq...

[3] https://news.ycombinator.com/item?id=44429118
by appstorelottery | 2025-08-19 23:00:51+00:00
I appreciate your comment, it drove me down a rabbit hole :-)

You were right that under the old interpretation, my app had no case. But that rabbit hole led me to the news that the interpretation itself has just been successfully challenged.

Judge Mehta found Google liable. The court has officially validated that the 'free vs. free' self-preferencing that killed my app is, in fact, illegal monopoly maintenance.

Fascinating to see a legal system's 'unhandled exception' get patched in real time.

p.s. Respect for your public comments here :-)
by jp57 | 2025-08-19 23:00:53+00:00
Here’s the sort of spooky thing. It’s not just that there are multiple generations who’ve never known a “jerk” was once a simpleton or sap. It’s that some of the folks who used to use it that way don’t remember that they did. When I asked my mom to define the word this week, she used the modern meaning, with no apparent recollection of her former firm conviction that a jerk was a dope, dodo, or dimwit.

I am gen-X and I have no recollection of that former meaning at all. I was 10 or 11 years old when the movie The Jerk came out, and I recall being mildly confused about the fact that he didn't really seem like a jerk, and sort of thinking that he must be acting that way on purpose.
by bigiain | 2025-08-19 23:01:04+00:00
> > Why would one task run in a drastically different architectural situation

> Someone made a mistake. These things happen.

Some company didn't have appropriate processes in place.

For ISO27001 certification you at least need to pay lip service to having documents and policies about how you deploy secure platforms. (As annoying as ISO certification is, it does at least try to ensure you have thought about andedocumented stuff like this.)
by sdrothrock | 2025-08-19 23:01:12+00:00
The evolution of "jerk" makes me also think of "nimrod" and how it referred to the biblical hunter and meant someone with great skills in hunting, until it was used to refer to Elmer Fudd, at which point the meaning changed to mean a complete idiot.

https://thehabit.co/nimrod-hectoring-maudlin-eponymns-and-pe...