MurphyA/hacker-news huggingface dataset:
by Karrot_Kream | 2025-08-19 20:22:00+00:00
I don't meh. This site has had a huge change now that it's become a sort of GenXer geek culture icon. I had originally come to this site to escape the stupid Natalie Portman sliding my bowl of grits Weird Al worship that was on Slashdot but it came back here and everyone who was into that culture joined this place too. A particularly uncharitable part of me wonders why folks who are so displeased with the state of greater social media are willing to override norms of other sites just to chase their particular idea of social media but of course that is the basis behind Eternal September.
by jitl | 2025-08-19 20:22:12+00:00
The article you posted doesn't mention "offline" at all. We use SQLite as a cache in the browser when available and in iOS/Android/desktop apps, but we didn't have any guarantee that a page you want offline is actually available offline.

It would "mostly work" offline before, but you could have cases where some blocks in a page aged out of the LRU, or they changed online in a way that invalidated the page but new content wasn't downloaded. When that happens we show a "go online to view" error instead of risking you viewing/editing a known-incorrect local snapshot of the page.

With "available offline", we now proactively download and keep up-to-date the content you want available offline. It will either work, or show an explicit error if things go wrong in the sync process. No more guesswork.
by the_gastropod | 2025-08-19 20:22:34+00:00
While rent controlled apartments can increase the rent, it's extremely limited, usually based on the landlord's expenses and not market conditions.

Rent stabilization is roughly based on the inflation rate, so, while tenants who've lived in one place for a while might be getting something approximately considered a "sweet deal", it's not the ridiculous scenario rent control can produce. One other relevant distinction, rent controlled units can be passed down to family, keeping the same rent rate. Rent stabilized apartments can also be passed down, but it's the same as if a new tenant was taking over—the price can be reset back to market rate.
by tsimionescu | 2025-08-19 20:22:34+00:00
The web has grown a thousand fold over those decades, in spite of no support for XSLT. No browser has failed (or gained market traction) by missing support for (or adding more support for) XSLT. It's an irrelevancy, even if you did like it once.

Lots of content was lost when Flash was removed as well - much, much more than the amount of content that will be lost if XSLT is removed. And yet the web continued.
by wrigby | 2025-08-19 20:22:39+00:00
I enjoyed looking at this one too - playing around for a minute on paper with it was fun.

The numbers in each row (when cols is set to 6) are of the form:

6n+1, 6n+2, 6n+3, 6n+4, 6n+5, and 6n+6

Only 6n+1 and 6n+5 can't be trivially factored:

6n+1, 2(3n+1), 3(2n+1), 2(3n+2), 6n+5, 6(n+1)

So it follows that for any n >= 1, numbers in columns 2, 3, 4, and 6 can never be prime. Fun!
by nickpsecurity | 2025-08-19 20:22:46+00:00
You're talking about one person. All the politicians I've seen are wicked. I said plenty often that they should be replaced with people pf godly character. Until then, working with who is in the race (eg Harris vs Trump), have to vote for nobody by that standard. If voting for policy, we look at policies rather than the politician.

Progressives have been, at an institutional level, censoring the Gospel as hate speech or harassment, mocking God in media, promoting idolatry/universalism, pushing fornication, promoting child murder (abortion) even financially, pushing LGBT even in elementary school, and recently systematic discrimination against entire groups. They also defend Palestine over Israel when they have to pick a side. They also export sexual immorality to other countries via media and political deals which is exactly what Revelation warns about in Rev. 17:2.

The Old Testament shows these same traits... especially idolatry, child murder, and ditching Biblical marriage for perversion... being common threads for the destruction of nations. That Progressives promote these on a policy level, but mock and fight God's design and the Gospel, means we have a clear choice. One party, who is merely pandering, will at least let us share Christ, protect babies from murder, and reverse other damaging trends. Those trends are happening now but didn't under Biden/Harris or Obama.
by lyricaljoke | 2025-08-19 20:22:52+00:00
I actually found that particular response to be quite disappointing. It should give pause to those advocating removal of XSLT that these three totally disparate use cases could already be gracefully handled by a single technology which is:

* side effect free (a pure data to data transformation)

* stable, from a spec perspective, for decades

* completely client-side

Isn't this basically an A+ report card for any attempt at making a powerful general tool? The fact that the suggested solution in the absence of XSLT is to toil away at implementing application-specific solutions forever really feels like working toward the wrong direction.
by Rendello | 2025-08-19 20:22:59+00:00
Wikipedia has a section in this, which I found interesting:

> The standard pluralised form of octopus in English is octopuses; the Ancient Greek plural ὀκτώποδες, octopodes, has also been used historically. The alternative plural octopi is usually considered etymologically incorrect because it wrongly assumes that octopus is a Latin second-declension -us noun or adjective when, in either Greek or Latin, it is a third-declension noun.

https://en.wikipedia.org/wiki/Octopus#Etymology_and_pluralis...
by dc396 | 2025-08-19 20:23:23+00:00
> Too many domains which are incorrectly configured leading to non-existing domain errors.

That's an interesting and somewhat surprising data point given the use of DNSSEC validation at public resolvers (e.g., 1.1.1.1, 8.8.8.8, etc.). Might be something that would be useful to track by those following DNSSEC deployment.

For selectively disabling DNSSEC validation, I gather PiHole+dnsmasq doesn't support Reverse Trust Anchors (RTA). Unfortunate.
by zzo38computer | 2025-08-19 20:23:35+00:00
Yes, it would be better to work on alternatives, and I have done some of these things (and so have some other people). However, that won't fix WWW (or Chrome or Google), it just means it is an alternative (which is still a good thing to have, though). However, sometimes they even try to (or sometimes just does as a consequence of existing specifications, rather than deliberatley trying to) prevent any alternative that is actually good.
by const_cast | 2025-08-19 20:23:36+00:00
A lot of very old SPA like heavy applications use XSLT. Basically, enterprise web applications (not websites) that predate fetch, rest, and targeted or still target Internet Explorer 5/6.

There was a time where the standard way to build a highly interactive SPA was using SOAP services on the backend combined with iframes on the front end that executed XSLT in the background to update the DOM.

Obviously such an approach is extremely out of date and you won't find it on any websites you use. But, a lot of critical enterprise software was built this way and is kind of stuck like this.
by yashasolutions | 2025-08-19 20:23:53+00:00
Pretty neat. I use Emacs a lot, and also do quite a bit of video trimming. For people wondering "why Emacs?", here’s the use case: trimming video is mostly about writing down start/end times, sometimes with a note. That’s all text.

If you can turn that text directly into clips without switching to a separate video editor, it’s surprisingly efficient. Of course, this only makes sense if you already live in Emacs, then it reduces context switching, helps to keep the flow. If you don’t, it just looks odd. But it’s not about making a meme out of "doing everything in Emacs" - it is just a small tool that fits the workflow of people who are already in that environment.
by cutlilacs | 2025-08-19 20:24:07+00:00
I would couple the Experiment and the theory together, and treat them both deserving of the prize, but not sure how it works in practice. As for the general technique of ML, sure, it's important but it seems to me that it's a tool that can be used in Physics, and the specific implementation/use-case is the actual thing that's noteworthy, not the general tool. I wouldn't consider a new mathematical theorem by itself to be physics and deserving of a physics prize, I view general ML the same way.
by stackskipton | 2025-08-19 20:24:13+00:00
Yep, I used to deal with this at $LastJob and amount of support burden was terrible.

Azure AD/Entra ID (Microsoft IDP) was most common and amount of IT folks who don't have a clue about it is staggering.

Companies kicking over issues to us when it's their problem. "Hey, we have a ticket saying MFA Required but account shows as Entra ID." "Send it back with contact their IT team." "Their IT team opened the ticket" rage screaming

Companies not following setup instructions. I used to provide Terraform, Powershell and Graphical setup. I can count on one hand how many people used Terraform/Powershell. This was always dicey because I got familiar with the error messages and would be "Yep, this was not setup right on their end." I had 4 phone calls with $CustomerIT swearing it was setup properly and stopped attending after that. Finally they got someone with a brain to review and finished setup.

Documentation would fall out of date because of some UI change and I'd spend a day reviewing it and updating it.
by nomel | 2025-08-19 20:25:02+00:00
Now I'm more confused. An infinitely efficient system would saturate the network. An infinitely inefficient system would saturate the CPU. " The implementation saturates CPU before reaching I/O limits." is true infinitely inefficient system, but false for an infinitely efficient system. That means it's an undesirable.

The metric that actually matters is efficiency of the task, given a hardware constraint. In this context, that's entirely network throughput (streaming ability/hardware, with hardware being constant, you can just compare streaming ability directly).

For a litmus test of the concept, if you rewrote this in C or Rust, would the CPU bottleneck earlier or later? Would the network throughput be closer or further from its bottleneck?
by yieldcrv | 2025-08-19 20:25:10+00:00
free bank accounts for money laundering

(new account online, new coinbase account online, stuff new account with cash, transfer to coinbase, transfer onchain, swap to monero, wait, access all with new mac address, new wifi, new browser session, or Tor if the services allow)

daily reminder that KYC is a joke, the institutions and enforcement agencies that think it works, don’t know when its not working as long as a real id and ssn and address is used
by 0cf8612b2e1e | 2025-08-19 20:25:17+00:00
Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to Website Planet about an unencrypted and non-password-protected database that contained 957,434 records. The database belongs to an Ohio-based organization that helps individuals obtain physician‑certified medical marijuana cards. The database held PII, drivers licenses, medical records, documents containing SSNs, and other internal potentially sensitive information.

So, the absolute bare minimum was not followed. Just wide open database containing medical information.
by godelski | 2025-08-19 20:25:19+00:00
> people actually want to use

I think this is an incorrect assumption.

Just because people use it doesn't mean they want to use it. We're in a bubble here and most people are pretty tech illiterate. Most people don't even know there are other options.

Besides, it also misses a lot. Like how there's a lot of people that use Google Docs. Probably the only alternative an average person is aware of. But in the scientific/academic community nearly everyone uses LaTeX. They might bemoan and complain but there's a reason they're using it over Word and TeX isn't 2.5GB...
by neilv | 2025-08-19 20:26:06+00:00
> Single sign-on (SSO) is a mechanism for outsourcing the authentication for your website (or other product) to a third party identity provider, such as Google, Okta, Entra ID (Azure AD), PingFederate, etc.

Or the IdP is administered by the enterprise's own IT operation.

The outsourcing of your security to (and also consequently leaking information to) a third party IdP is a fairly new phenomenon in 'security'.

Someone must have paid a lot of money to promote that idea.
by jjcm | 2025-08-19 20:26:11+00:00
I agree with the sentiment in theory but disagree in practice.

The way I typically look to segment and price things is by billing based on organizational complexity rather than gating end-user features whenever possible. If something is a specific need for a large org, it should be a higher tier, since those organizations typically have a larger ability to pay. If it's something that a single seat user would want if they were an expert, I'd rather not tier on that - it basically would be shitting on your largest segment of superusers / fans / influencers for most B2C apps.

Put a different way, if I were subscribing to MS Paint, I'd rather have to pay more for SAML/SCIM provisioning than to pay for the number of particles the spray paint tool can output at once. One limits orgs, the other limits users. You should never limit users without reason.
by Terr_ | 2025-08-19 20:26:34+00:00
The main factor is the quantity of goods which need to be inspected, and that tends to scale with the population which is buying the goods.

> your number of entry points should scale like your perimeter

Is that really true? An entry-point is generally something the people choose to create to satisfy the pre-existing need to transport goods, by building roads, rail, harbor-piers, etc.

Border-checkpoint facilities don't spontaneously generate in trackless wilderness or barren coastlines, like some fantasy-dungeon that the Adventurers' Guild must periodically raid in to avert a stampede of monsters.
by sugarpimpdorsey | 2025-08-19 20:27:12+00:00
So Microsoft cucked by Google and Mozilla being a puppet regime of Google at this point.

Seems like a rigged game to me.

Yes it's a wrapper but Microsoft represents a completely different market with individual needs/wants.

If it wasn't for Apple (who doesn't care about enterprise) butting in, the browser consortium would be reminiscent of the old Soviet Union in terms of voting.
by sema4hacker | 2025-08-19 20:27:17+00:00
> 2018: $4.75/day minimum wage, nearly 52 million people living below the poverty line, 9 million in extreme poverty, 20.1 million with no access to health services.

> 2024: $15/day minimum wage, 38.6 million living below the poverty line, 7 million in extreme poverty, 44 million with no access to health services.
by nradov | 2025-08-19 20:28:42+00:00
Your comment is a non sequitur. This is a policy issue, not something that clinical AI or monitoring thereof can solve. The Affordable Care Act (Obamacare) prevents health plans from charging more or denying coverage based on pre-existing conditions.

https://www.hhs.gov/healthcare/about-the-aca/pre-existing-co...

HIPAA also allows individuals to request amendments to their medical records if there are errors such as an incorrect diagnosis.

https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-...
by furgot | 2025-08-19 20:29:01+00:00
https://web.archive.org/web/20250720163940/https://www.veris...

There is a 15% drop like you describe, but as the other commenter said, it doesn't show usage falling for the past year (as you had implied).

I have no dog in this race, I don't care about DNSSEC. If you can't access the page, that's your business. But it bothers me that you would assert this data agrees with your point without even looking at it. That's pretty uncharitable.
by aspenmayer | 2025-08-19 20:30:01+00:00
It's kind of a chicken and egg problem. Let's say for the sake of the argument that you can check out all the data and metadata from all of the sites you want to. Now what? Where would you check it in?

"Build it and they will come" kinda falls flat when there's no there there to, you know, build it. It's like advocating for building a highway to the middle of nowhere because in our mind the field of dreams is inside all of us, so the center of the universe would be ideal, but there are already things built there and we want folks to appreciate the game and our collective love of it, so we had to build it way out here. Open standards are one part of "building it," but not the whole of it, so it might be a bit premature to be asking where everybody is. You have to draw the rest of the owl.

We're building sandcastles in the sky. What is the point of all these column inches if it doesn't lend itself to building the destinations that you wish to visit? The best defense is a good offense. Whining and complaining can help identify a problem and motivate others to share your view that the problem exists and is worth solving. Making new year's resolutions and telling folks about it isn't actually doing the work.

Community organizing is like step 0. Now comes the actually hard part, being the change you want to see in the world.
by teiferer | 2025-08-19 20:31:03+00:00
I liked the article.

But does this count as misleading title? I really expected an article about literal forklifts. Among all the AI craze these days, I was hoping for some real-world hands-on skill insights. The kind of thing hackers often can describe really well.

From that perspective, I got disppointed.

TL;DR: The article is about junior developers having a hard time in the current conditions shaped by remote work, AI and an abandoned Twitter.
by Karrot_Kream | 2025-08-19 20:32:09+00:00
I'm not really the type of person to do video editing or web browsing in Emacs, but I can still see the appeal.

A well-tuned emacs install is comfortable. I have my keybindings that do what I want them to do. I can visually organize my emacs frame (what is now called a GUI window) exactly how I want, with files taking up the parts of the screen that I want. I can be reading the README of some project I checked out and be curious about some terms, then just select it and send it off to my LLM. It's trivial to switch between Claude, OpenAI/ChatGPT, and Gemini depending on how much context I need to give.

It's like having personal space organized to your tastes. For some, their personal space can seem on the outside as a warzone of stuff, for others it's meticulously organized and labelled, but the key commonality is that it's personal space and that the owner of the space is comfortable in it. That's what emacs is. I don't need to learn a new set of keybindings or mouse clicks to unlock new functionality, I can just bring it into emacs.
by rhodeon | 2025-08-19 20:32:23+00:00
Sorry, I was mistaken about that aspect.

The option is available to move a vault from the app to the device storage, but not the other way around. At least not from within Obsidian.

But if you use a PC or a file manager that has full device access, you can manually copy the vault folder to the `/storage/emulated/0/Android/data/md.obsidian/files` directory.

I just tried that and Obsidian recognised it.
by vector_spaces | 2025-08-19 20:33:10+00:00
The nice thing with emacs is that you can do as much or as little as you want with it. For me it started with basic text editing, then doing some git stuff with magit, then realizing emacs has wonderful capabilities around notetaking and to-do management in org-mode.

Like you, though, I work in orgs that are very Windows heavy, so I tend to use it more for my personal stuff rather than in my day job
by mmargenot | 2025-08-19 20:33:41+00:00
I like Obsidian a lot (especially for the ease of plugin development), but my impression is that most people don't use such comparatively heavy applications for managing their personal lives. It's more likely that they use a Google Keep or sticky notes just placed in random places. That leaves mostly enterprise use cases for such knowledge management tools, and Notion is much more full-featured for enterprise than Obsidian is.
by bee_rider | 2025-08-19 20:33:44+00:00
I don’t think you should have to pay extra for extra security in general. Making a product or service free of security defects ought to be considered a basic requirement of merchantability.

But we should also draw a distinction between, like, real security defects (RCEs, that sort of thing) and features that might make it easier to deploy a system securely (SSO).
by mikestorrent | 2025-08-19 20:34:00+00:00
To be fair, Entra is an abysmally bad user experience; their support barely knows anything about it. Provisioning is clunky and slow. Applications are split into two halves. Self-service password reset is a half-finished joke.

Tip of the iceberg: adding a custom field to a user record is possible, but you need to use the Graph API to do it; once you've added it, it is never visible on any UI, you can only get the data back out via API. So good luck making a custom field that your clerical staff can actually work with.

There's Terraform support to add applications to it, but you end up having to go in and click "grant admin consent"... no way to do the whole thing IaC without a bit of manual interaction. Maybe that's a good thing? Annoying anyway.
by SkyPuncher | 2025-08-19 20:34:12+00:00
At a past company, we had discussion about this exact topic. Despite wanting to offer SSO on a free/low-tier, we simply could not justify it.

SSO was by far our most expensive feature to support. It was the single largest bucket of support requests and a significant percentage of those requests required an engineer to get on a call with a customer (and their IT team).

We evaluated building better product/tooling to self-serve, but we realized that it likely wouldn’t solve the issue. SSO is security critical, so anytime things go wrong people throw their hands up and say “nope, I’m not the one that’s going to hurt my company”. They really just needed someone on our end to give them confidence.

Don’t get me wrong, we fixed many of the biggest issues - but there’s an endless supply of crap that can go wrong.
by Aurornis | 2025-08-19 20:34:15+00:00
> but remember that the big price-insensitive customers pay for the price-sensitive customers

The fallacy is thinking that the alternative is for everyone to pay the lower price and get the enterprise features.

In reality, without market segmentation a singular price for everyone would fall much closer to the enterprise price than the non-enterprise price.

You can call it an SSO tax, but it would be equally correct to refer to the lower price as the non-corporate discount.
by kva | 2025-08-19 20:34:31+00:00
UARS = upper airway resistance syndrome RERA = respiratory effort related arousal

UARS is effectively a "cousin" of sleep apnea which tends to occur in younger and fitter people - it is hard to diagnose but quite debilitating. RERAs are the primary sleep disturbing event for folks with UARS. Similar to how apneas are the primary event for folks with sleep apnea.
by mihaaly | 2025-08-19 20:35:05+00:00
Agreed.

Being a mere user of web or other apps developed using so clever and felxible and powerful services like this accidentally (due to sheer complexity) exposing all and everything I might consider dear makes me reconsider if I want to use any. When I am granted a real choice. Not so much as time progresses, not so much. Apps are there everywhere using other apps, mandated by organizations carrying out services outsourced by banks, governemnts, etc., granted third parties' access by me accepting T&C, probably catching trouble in the details, or probably not, cannot be sure.

A reassuring line like this >>This is not meant to shame any particular vendor; it happens to everyone<< may calm providers but scare the shit out of me as a user providing my sensitive data in exchange for something I need, or worst, must do.