MurphyA/hacker-news huggingface dataset:
by Cthulhu_ | 2025-08-28 12:11:30+00:00
Of note is that meditation isn't about not thinking per se, more about allowing your thoughts to flow freely.

Which is a weird thing that happened to me or that I became aware of a few years ago, late at night or when I lie down for a nap I can get into that state, it's like dreaming while being awake. Of course, as soon as I'm aware of that I snap out of it, it's like "hey I want to keep following that train of thought" but it doesn't work when it's active.

Of course, if I don't snap out of it like that I will invariably fall asleep, lol.
by muhammetarda | 2025-08-28 12:11:48+00:00
You’re right — iOS doesn’t allow full background auto-cleaning, but within the app links are cleaned automatically as soon as you paste them, and in the share extension the link is also cleaned instantly when you pick Linkfy (no extra button press). On pricing, fair point — $100 lifetime is probably too high, and I’ll rethink it based on feedback like yours. My goal was just to keep it ad-free and fully on-device, but I don’t want the price to scare people away. Thanks for the honest input
by ajd555 | 2025-08-28 12:11:58+00:00
I use a few bitnami charts, and I'm now going to have to migrate them. For everyone here surprised that anyone would use them, here's some context from my perspective: as a small startup, having a pre-configured Kafka chart was a lifesaver, where I only needed to tweak the parameters I was interested in, which took me a lot less time than setting up a whole Kafka environment from scratch. It was relatively quick to setup, and felt like the right move to put something like Kafka in production (and not have to pay for Confluent when everything else is self hosted)
by isege | 2025-08-28 12:13:09+00:00
I think it's a very shallow response to "The desktop metaphor must die" and doesn't address the core questions that it raises.

> The desktop metaphor is still unmatched when it comes to productivity

Well, duh? Of course it dominates productivity when we've spent fifty years building every tool, workflow, and interface around it. It's better than anything else, because there isn't anything else! It's like saying horses were the best transportation in 1800 because all the roads were designed for them.

The article also sets up a false tablet vs. desktop dichotomy and overlooks that tablet OSs inherit the same PARC-era WIMP assumptions.

For a more thorough critique of the desktop paradigm, I'd recommend the Liber Indigo (https://youtu.be/As_SiWqC5tc?si=_rKuZQN22ZkbqGvW) video series on youtube, which does a stellar job highlighting these foundational problems.
by oellenbogen | 2025-08-28 12:14:15+00:00
Sharing a proposal for a secure authentication and data encryption protocol for AI agents, merchants and merchant vendors. It combines:

- JWT with digital signatures for request authentication (RSA or EC) - JSON Web Encryption (JWE) for sensitive data protection - JSON Web Key Sets (JWKS) for key distribution

Taking inspiration from ideas like Cloudflare’s essential Web Bot Auth, we've mapped out a comprehensive standard that captures the key use cases to enable safe, secure agentic commerce – from capturing intent, consent and user preferences, to handling cart items, payment details, and order statuses.
by Mallowram | 2025-08-28 12:14:52+00:00
This is an idealized fantasy of language. Language is primarily about patriarchal dominance, control, status, mate-selection, topophilia, and secondarily about communicating ideas. The dark matter of language is expressed in mythological ideas like states, property, law, etc. People are starting to notice we can't solve very simple problems like climate extinction. How the primary forms in language are status oriented.
by wtbdbrrr | 2025-08-28 12:15:38+00:00
Considering the all too pervasive paradox of creative people “who are wonderfully talented and full of energy and initiative [but] who never produce any original work and almost never write anything,” Cajal divides them into six classes according to the “diseases of the will” afflicting them — contemplators, bibliophiles and polyglots, megalomaniacs, instrument addicts, misfits, and theorists.
Show HN: Now we have systems vulnerable to social engineering
by pablo-chacon | 2025-08-28 12:15:45+00:00
I wrote an AI-Agent Vulnerability and Risk Report. It’s a technical writeup covering the new attack surface AI-agents and LLMs introduce. The report is objective and focused on security, legal, and regulatory risks, not speculation.

The report covers:

The attack surface of AI-agents and LLMs.

Exploitation pathways such as prompt injection, privilege misuse, and workflow manipulation.

The legal and technical difference between prompt injection and SQL injection.

Regulatory exposure (e.g. GDPR liability) when data leaks occur.

Mitigation strategies to reduce risk, including backend immune layers.

Full report: https://github.com/pablo-chacon/AI-Agent-Vulnerability-and-R...

Would love to hear feedback, especially from those working in AI security, infrastructure, or compliance.
by Cthulhu_ | 2025-08-28 12:16:21+00:00
I don't think people are all that different east / west, we just did different things like sit in saunas and go to church. Going to church is IMO a form of meditation too, you sit still ish for an hour (depending on church), go through repeated rituals, specific kinds of evocative music and speaking, prayer often involves closed eyes and intentional clearing of mind and / or focusing on specific subjects mentally, but most importantly, it's an intentional break from your regular programming.
by radarsat1 | 2025-08-28 12:17:08+00:00
I don't know what this is but isn't git enough? Incidentally I'm not convinced in my day-to-day for "jujitsu" (jj) but from what I understand about how it works, I've been wanting to give it a try for agent-based coding, based on the way it defaults to saving everything and letting you sort it out after. I do like how Aider commits everything so you can easily roll back, although it ends up with a few too many commits imho.

I've been wanting to experiment also with getting an agent to go back and rebase history, rewrite commits etc in the context of where the project ended up, to make a more legible history, but I don't know if that's doable, or even all that useful.
by arunabha | 2025-08-28 12:17:08+00:00
In the Aadhaar issue, the supreme court has at least clarified that aadhaar cannot be mandatory for most things. However, it upheld the requirement for linking PAN numbers to aadhaar.

PAN card is required for pretty much any major financial transaction so it does open up a major loophole. However it *is* possible to do a lot of things without Aadhaar, it just takes significantly longer and involves a lot of back and forth. The trick is to get past the frontline folks and talk to someone with real authority. Mentioning the Supreme court judgement or better still the relevant ombudsman does wonders in making the previously 'mandatory' aadhaar non mandatory.

I am not very optimistic about the situation improving anytime soon. I'm regularly shocked at how little people care about privacy are offer up detailed personal information on demand.
by ath3nd | 2025-08-28 12:17:13+00:00
I agree with the spirit of the petition and I will sign it but I think it's better to be a petition to the EU to force google to stop their adversarial interoperabilty.

EU have done it with Apple and their trash lightning cable, forcing them to adopt the USB c standard. EU fined Meta and Google for mishandling our personal data (like all the time), and forced (kinda) both Google and Apple to allow alternative stores. This bs will not fly in the EU.

I will not tell you to stop using Google products and Android, since you are most likely a dev or FOSS on the Android ecosystem. But yeah, Google are pretty evil.

- sent from my Android - /s
by ulrikrasmussen | 2025-08-28 12:17:26+00:00
By TOTP I mean a hardware token using the TOTP algorithm to generate a nonce, like the second option on this page: https://www.mitid.dk/en-gb/get-started-with-mitid/how-to-use...

I thought that was what you meant too? If you mean TOTP via a QR code exposing the secret, then of course I agree, no banks allow that. But your comment read as a claim that all TOTP solutions were inherently deemed insecure and wouldn't work, and that smartphone based solutions were the only viable alternative outside the US. The code display is of course vulnerable to man-in-the-middle attacks where you trick users into authorizing transactions via fake web pages, but it is not a threat that is deemed serious enough to prevent our whole country from basing our digital infrastructure on code displays.

I think people get hung up on your point about banks not accepting browsers because you don't formulate your point very clearly, and it reads like you claim that they don't accept browsers at all when what you mean is just a browser and nothing else. Most European banks do in fact allow you to do business using a browser - you just have to prove your identity via other means as well. And there are no good security arguments why those means must be in the form of a smartphone app whose security requirements have the side effect of locking you into a business relationship with one of two American tech giants. As you can see, a whole country of almost six million people authenticates everything from bank transactions to naming their kids and buying houses using a system which allows you to use just a code display.

I think the strategy of remote attestation of the whole OS stack up to and including the window manager is a clunky and inelegant approach from an engineering perspective, and from a freedom perspective I think it is immoral and should be illegal. What I could accept would be an on-phone security module with locked down firmware which can simply take control of the whole screen regardless of what the OS is doing, with a clear indicator of when it is active. This allows you to authorize transactions and inspect their contents, and only needs remote attestation of the security module, not the whole OS.
by Atlas667 | 2025-08-28 12:18:06+00:00
I dont defend mass executions or even the mistakes of communism. Mismanagement and murder is inexcusable. But i do not see them as inherent to socialism, but as product of their times.

Conveniently you dont mention any of the mass executions caused by capitalism?

All the wars, all the covert operations, all the murderous and genocidal dictatorships, two world wars?

Knowing full well a sitting US president critiqued the military industrial complex as a capitalist threat.

Capital is even responsible for on going genocides.

You know well I do not advocate for mass murder.

I am advocating for mass democracy and the only way to acheive that permanently is through democratized production. I am advocating for progress and for an end of using base material needs for profits.
by gilbetron | 2025-08-28 12:18:28+00:00
That's been the mantra in the tech world for at least a decade now, and I've grown to really disagree. Managers should have 10 at minimum. Most should have 15-20. They should specialize in being a manager and shouldn't be solving problems except pure management problems. (Good) teachers easily manage classrooms of 10-30 kids, even in private schools. The low direct report count ends up creating managers that have too much power, too much say, and too much time to mess around.
by sieve | 2025-08-28 12:19:00+00:00
> Out of curiosity, what is it you don't like about the UK system given that you're saying that it's "eerily similar" to the US system?

I was comparing the Indian system to the UK and US ones. I will still take the US system, warts and all, over the Indian or UK one.

I used to be a free speech absolutist in the past. Not anymore, though I still prefer more free speech to less. The UK and India are terrible at protecting free speech. And the laws dealing with defamation/libel are bonkers based on what Simon Singh had to go through.

The second issue I have is with handling of violent crime in general and that by juveniles in particular. The Nirbhaya case is a great/famous example (and the special treatment continues to this day)[1]. Four were hanged. The fifth died in police custody. The sixth rapist-murderer was 17y6m old and was sent to a juvenile home. You have something similar in the UK. In the US, all of them would have faced severe consequences.

[1] https://en.wikipedia.org/wiki/2012_Delhi_gang_rape_and_murde...
by qwertox | 2025-08-28 12:19:39+00:00
I'm wondering if I should defer my full system backup on the 1st of September, as the resulting file is 300+ GB.

I had a BSOD last week, 0x0000012b (FAULTY_HARDWARE_CORRUPTED_PAGE), which I've never had, and was hoping it isn't related to this update.
by londons_explore | 2025-08-28 12:19:42+00:00
If you just close the bypass switch, a large current will flow out of the (dying) cell, making a lot of heat.

You could have a two-way bypass, disconnecting the original cell, but that would cost more. Remember the bypass switch is duplicated for every series cell group (hundreds) and must carry the whole battery current.

Or you could have some kind of slow drain resistor - but then you're back to the time issue.
by Cthulhu_ | 2025-08-28 12:19:44+00:00
> Physical posture during the day affects your anxiety?

Yes; one of the first things my therapist showed me after just talking about stuff was a breathing exercise, with the first thing being assuming a position that allows for easier breathing (lying down flat, relaxed, but feet propped up / knees in the air). "Relaxed" breathing is deep and slow breathing through the stomach, but you can't do that well if your posture is off and I can imagine this has long-term effects. Subtle, of course, and it's never one thing that causes anxiety etc.
by DebtDeflation | 2025-08-28 12:20:15+00:00
It's a great idea that they utterly gimped with the 273 GB/s memory bandwidth. You can buy a Macbook Pro M4 Max with 128GB that has TWICE the bandwidth. A 4090 has 4 TIMES the bandwidth. I get that they're terrified of doing anything that competes with their H100/B200 but there is an enormous gap between 273 GB/s and the >2TB/s of their data center products.
by JumpCrisscross | 2025-08-28 12:20:21+00:00
These online petitions are worse than useless. They don’t do anything because they fail to communicate either conviction to a cause or the relevance of the signers. And they may take someone who would otherwise do something useful, like call their elected or participate in public comment, and make them complacent.

An open letter from the lead developers and decision makers of top-rated apps in the Play Store would be useful. But that takes work, unlike an online petition.
by sambeau | 2025-08-28 12:20:23+00:00
The focus for these kind of alternatives should be on aviation—with the most difficult fuel to replace. Maybe we'd need this for classic cars, emergency generators and a few other smaller things, but even classic cars can get electric refits. Cars, motorbikes, trucks etc should be electric; shipping needs to embrace sail-electric hybrids; and bio-fuels/synthetic fuel should be aimed at aviation (and maybe as a stop-gap for shipping). My 10¢.
by klabb3 | 2025-08-28 12:20:42+00:00
Fair points. I agree the flat monochrome design of today have issues. The example you linked is atrocious.

> What's the point of not using words on the buttons that open menus, when the menu's contents are entirely words?

The truth is that real estate became incredibly constrained with mobile, and hover also disappeared. Imo the hamburgers and triple dots are close to how good you can get on mobile. There's little point in adding the word "menu" or "options". Basically any text you add on mobile would take full screen width to be safe in all languages. And thats pretty much what open menus look like - they take over the whole screen.

Due to mobile being the primary target, a lot of devs reuse those GUIs for much bigger screens, which is unfortunate.
by lazide | 2025-08-28 12:21:20+00:00
Senior engineer is usually focused on a single project, and knows it deeply. Usually directing and mentoring more junior engineers in the process.

Staff engineer typically is overseeing multiple projects, providing deep technical oversight and guidance on those projects, and mentoring Senior engineers. They start to influence technical culture. They are actively involved in ensuring business needs get met by the technical solutions their group is building.

Senior Staff Engineers will be overseeing a product function, and multiple Staff engineers. They build the correct technical culture. They ensure larger architectural issues get resolved. They are actively involved in ensuring the technical work being done is meeting business needs, and identifying business needs their technical org can be meeting - and working to make that happen.

Principal engineers are setting the tone for an entire large product (typically), and ensuring the Senior Staff engineers are doing the right things - and also often involved in driving strategic product direction.

Senior Staff and Principal tend to be increasingly political, but even Staff will get pulled into that type of thing somewhat regularly.
by kqr | 2025-08-28 12:21:22+00:00
> the only honest choice when all you know is mean and variance

This is said as if it were a realistic set of assumptions.

You almost always know more than that. Frequently you have at least a few samples from the distribution. Often you don't know the mean and variance with any certainty. The mean is relatively easily estimated with a fair number of samples, but variance is rather tricky to estimate with any precision.

Some processes don't even have a variance (or have infinite variance, depending on how you like to phrase it) but any set of samples from them will definitely have a variance. Are you going to shoehorn the normal distribution onto that process? I hope not.
by cl3misch | 2025-08-28 12:21:49+00:00
In the entropy implementation:

return -np.sum(p * np.log(p, where=p > 0))

Using `where` in ufuncs like log results in the output being uninitialized (undefined) at the locations where the condition is not met. Summing over that array will return incorrect results for sure.

Better would be e.g.

return -np.sum((p * np.log(p))[p > 0])

Also, the cross entropy code doesn't match the equation. And, as explained in the comment below the post, Ax+b is not a linear operation but affine (because of the +b).

Overall it seems like an imprecise post to me. Not bad, but not stringent enough to serve as a reference.
by jll29 | 2025-08-28 12:22:09+00:00
One of the problems is that large corporations have such complicated role structures, and another problem is that they are also different from all other large corporations. A third problem is that the compensation models are again vastly different. A fourth problem is that they change over time.

All of this means as an individual you suffer from extreme information asymmetry.

Even if you got two offers from two different FAANGs, it would perhaps be hard to figure out which one is better.

Has anyone defined any mapping tables between role names across Amazon, Meta, Alphabet etc. and figured out salary ranges for them in a public spreadsheet?

BTW, has anyone got a leaked (anonymized) copy of FAANG employment contracts so one can compare the various clauses across employers, and track changes of their standard templates over time? (I haven't seen this topic discussed much on here in the systematic way that it deserves.)

Given the developer community invented open source it is surprising that corporations have so far succeeded in keeping such obvious things relatively secret (compared to, say, the emails of Sarah Palin and Ehud Barak ;-).
by ChrisMarshallNY | 2025-08-28 12:22:55+00:00
Many of them don't live in Russia.

Some of the best engineers that I've worked with (in the US and Europe) are Russian. I've also been quite impressed with other former Iron Curtain developers. A lot of Chinese folks I've worked with have been good.

I know that some nations are known for threatening the relatives of expats, to get them to work on their behalf. Not very nice.

But state-sponsored Russian (or other nations, as well) is definitely something to be concerned about. I suspect a number of folks are concerned about the influence of American programmers. The CIA is known for using fairly innocuous employees of NPOs. My father was one.
by phrotoma | 2025-08-28 12:23:25+00:00
Sleepiness is a very common challenge. A common mitigation is to find a way to sit comfortably without a chair back, forcing you to stay upright. I find it uncomfortable to sit cross legged for long stretches so I usually kneel with a large cushion under me like, kinda like a saddle.

Try stuff, see what works for you. Once you find a relaxed but upright position you may find you can sit for quite a while without dozing off.
by marcyb5st | 2025-08-28 12:24:43+00:00
It is not fine. Research is mostly done by Universities that get money from the government.

Then the universities have to pay a 3rd party both to publish said research and to get access to research done by others in the same field.

Even though it is free for researches/students it costs universities (and therefore indirectly taxpayers) multiple millions $/year.

Fuck that. Also, after the scandals of predatory practices (e.g. https://top2percentscientists.com/peer-review-payment-scanda...) is there really a benefit in using the services these society leeches provide?
by carlosjobim | 2025-08-28 12:24:57+00:00
Two things that future people will consider completely insane, which everybody takes for granted:

1. That you should have a television in your home. I'm not some kind of hipster, but it is just completely crazy when you think about it. How come that for decades it has been the norm that people - families - have a machine in their middle of their house which spews out the lowest form of government propaganda, mixed with the most obnoxious advertisements, mixed with abhorrent degeneracy of violence, damaging sexuality and humiliation of people. And this machine has been worshipped much higher than any God by the generations which are now old people. Who then complain about the behaviour of younger generations, which have been raised to behave like that by their "God" the TV.

In a sane world, a person who put a television in their family house would be shunned as a freak by his or her community, loose their job, and be forced to move. But now it's been the norm - for decades.

2. That you're supposed to document everything you do and post it to Instagram. This is a recent insanity, but it's become a mind virus to most people and they are no longer capable of enjoying anything in life for what it is. Rather the purpose of uploading to Instagram takes priority. For what? Instagram pays zero for people to upload their photos and videos. Can't you tell your friends later what you did and show them the photos? I get the appeal, but does it have to be all the time for the rest of your life?
by mschuster91 | 2025-08-28 12:25:13+00:00
> Security is the main reason to keep current with updates.

It shouldn't be that way though. Especially the billion dollar corporations should not be excused for shipping insecure software - the sad reality though is that Microsoft seems to have lost most of its QA team and what remains of its dev team gets shifted to developing adware for that sweet sweet "recurring revenue" nectar. Apple doesn't have that problem at least, but their management also has massive problems, prioritizing shiny new gadgets over fixing the tons of bugs people have.