MurphyA/hacker-news huggingface dataset:
by dogman144 | 2025-08-14 22:24:28+00:00
It delivered two things, and the easy response to your fair point is tactical tools — a rifle, great software — don’t win wars on their own.

1) Palantir was the first breath of fresh air that brought actually good tech with modern tech support practices to the warfighter, and by extension put the big defense contractors on notice. I personally believe this impact was tremendously important as there were real safety connotations involved, and anyone with a family member downrange could appreciate this.

2) Palantir was great targeting software that worked like modern tech vs a custom Linux distro with a GUI from 1970 and required 5 months of finagling to get vendor support for.

So Palantir just brought standard 2010’s tech to soldiers betting their safety on it. This was incredible although ordinary.
by marak830 | 2025-08-14 22:25:01+00:00
Subtitles is a big one for me. I can stream something in Japan, that I have seen other places has english subs, but due to licensing I cannot see them.

I know I could vpn around this, but why should I pay even more just for subtitles?

In the end I'm paying for Netflix, Disney and Amazon. My son uses those as he is bilingual, I just pirate what I want to watch personally.
by torginus | 2025-08-14 22:25:06+00:00
The GDPR is a fucking joke even on the best of days.

If other laws were like it, they would be like: You're not allowed to steal (unless you really need to), but if you do, take as little as you can (as determined by you), and you have to give it back as soon as you can (again, according to you), and if the person you stole from wants it back, you have to (unless you have a good reason not to)
by at-fates-hands | 2025-08-14 22:25:12+00:00
In the beginning, Netflix was great. Then they became a media company and suddenly EVERYTHING they push on you is THEIR stuff. Gone are the days where you could remember a cool movie and pull it up on Netflix like Fandango or Corvette Summer. I remember going back and watching several seasons of the original Miami Vice back when nobody knew who Michael Mann was.

Not its exactly as you say, you want to watch something but its not on any of the streaming services you're already paying for. I've started to just think of a movie I want to watch, go out to Pirate Bay, download it and then stream it. When I'm done? Delete it.

Its good to know I'm not the only one who has gone back to downloading movies.
by petsfed | 2025-08-14 22:26:35+00:00
I think "innocent" and "guileless" also bracket the sense you're going for, but they don't quite fit either.

Like, he doesn't see the malice in other people, but its not because he's innocent/naive of such intents, nor does he lack the skills to look for it (guileless), but because (as you say) he doesn't care if people take advantage of him, up to a limit.

Properly calibrated, that's really admirable.
by varispeed | 2025-08-14 22:26:47+00:00
> because its battery lasts 30 days you can use as an alarm clock that doesn't wake your wife.

That would give me too much anxiety. What if I am on 31st day and I forgot to check. Now I am late.

> Because you're wearing it at night and can control its light

That could potentially be useful, but I am used to grabbing my phone.

> Because its screen is reflexive you can store barcodes from the library and gym cards on the watch and use it to authenticate on those places.

I used phone for that without issue.

> Reading and replying messages while driving, control music from your phone and making phone calls while driving and not getting a ticket for distracted driving.

I don't do these things. I have a playlist that I never skip or put on certain radio station if I feel adventurous. I don't change anything when I drive. I don't take calls or do messages. I sometimes take a glance at missed calls when stopped and take a break if something is important.

I use step counter on my phone. I think what could sell it to me is heart rate monitor. Having this data over 30 days sounds tempting.

I also like the design, could work as an accessory.
by jread | 2025-08-14 22:27:11+00:00
For data and control plane I can determine the issue from the API request/response logs (i.e., network timeout, 5xx, etc.). Network tests are trickier and we don't have a great way to validate failure cause each of those events (i.e., we don't capture a traceroute on failure), other than to evaluate results from multiple endpoint combinations (e.g., AWS us-east-1 to us-west-1 fails while us-east-2 to us-west-1 succeeds).
by tptacek | 2025-08-14 22:27:24+00:00
I'm going to pick a fight on this one; I think you know I'm a fan, so take this in the spirit I intend†.

My contention is that "lethal trifecta" is the AI equivalent of self-XSS. It's not apparent yet, because all this stuff is just months old, but a year from now we'll be floored by the fact that people just aimed Cursor or Claude Code at a prod database.

To my lights, the core security issue with tool/function calling in agents isn't MCP; it's context hygiene. Because people aren't writing their own agents, they're convinced that the single-visible-context-window idiom of tools like Cursor are just how these systems work. But a context is just a list of strings. You can have as any of them in an agent as you want.

Once you've got untrusted data hitting one context window, and sensitive tool calls isolated in another context window, the problem of securing the system isn't much different than it is with a traditional web application; some deterministic code that a human reviewed and pentested mediates between those contexts, transforming untrusted inputs into trustable commands for the sensitive context.

That's not a trivial task, but it's the same task as we do now when, for instance, we need to generate a PDF invoice in an invoicing application. Pentesters find vulnerabilities in those apps! But it's not a news story when it happens, so much.

† More a note for other people who might thing I'm being irritable. :)
by BeauNer | 2025-08-14 22:27:53+00:00
If you run Plex Media Server, it’s time to drop everything and update. The company has quietly patched a security issue that affects recent versions of its software, and users are being told to upgrade as soon as possible.

According to an email Plex sent to affected customers, versions 1.41.7.x through 1.42.0.x are vulnerable. The newly released build, 1.42.1.10060 or later, contains the fix. Plex says the flaw was found through its bug bounty program, but sadly, it has not publicly shared details about how severe the issue is or whether it could be exploited remotely.

Plex isn’t saying whether this vulnerability could be used to run code on a server or gain unauthorized access, but its urgency in contacting users directly suggests it’s not something to ignore. If your Plex instance is exposed to the internet for remote streaming, the risk could be even greater.

Updating is straightforward: you can do it through the server’s management page or by downloading the installer from Plex’s official site. If you self-host, it’s also a good moment to review your setup, disable outside access if you don’t need it, and check your logs for anything suspicious.

Plex has had its share of security incidents in the past, including a 2022 breach that forced a password reset for all users. While there’s no evidence this latest issue has been exploited in the wild, the best move is to patch now and ask questions later.

The update is available today, and if you haven’t installed it yet, you should make it your next click.
by bsimpson | 2025-08-14 22:28:01+00:00
Stealing is when you take something from him, and he no longer has the thing you took.

Piracy is when you see something for free that everyone else paid money for. You watching doesn't prevent anyone else from watching.

Piracy isn't stealing: piracy only deals in intangibles. Stealing is for finite goods.

There's a whole "how do we pay to make stuff if people can watch for free" problem around piracy, but it's fundamentally a different thing than stealing.
by pornel | 2025-08-14 22:28:33+00:00
You're looking at this from the perspective of what would make sense for the model to produce. Unfortunately, what really dictates the design of the models is what we can train the models with (efficiently, at scale). The output is then roughly just the reverse of the training. We don't even want AI to be an "autocomplete", but we've got tons of text, and a relatively efficient method of training on all prefixes of a sentence at the same time.

There have been experiments with preserving embedding vectors of the tokens exactly without loss caused by round-tripping through text, but the results were "meh", presumably because it wasn't the input format the model was trained on.

It's conceivable that models trained on some vector "neuralese" that is completely separate from text would work better, but it's a catch 22 for training: the internal representations don't exist in a useful sense until the model is trained, so we don't have anything to feed into the models to make them use them. The internal representations also don't stay stable when the model is trained further.
by rvrb | 2025-08-14 22:28:38+00:00
I haven't worked with GTK, but what you are describing here sounds reminiscent of what we have been dealing with trying to build Godot bindings in Zig with a nice API. the project is in mid-flight, but Godot:

- has tons of OOP concepts: classes, virtual methods, properties, signals, etc - a C API to work with all of those concepts, define your own objects, properties, and so on - manages the lifetimes of any engine objects (you can attach userdata to any of them) - a whole tree of reference counted objects

it's a huge headache trying to figure out how to tie it into Zig idioms in a way that is an optimal API (specifically, dealing with lifetimes). we've come pretty far, but I am wondering if you have any additional insights or code snippets I should look at.

working on this problem produced this library, which I am not proud of: https://github.com/gdzig/oopz

here's a snippet that kind of demonstrates the state of the API at the moment: https://github.com/gdzig/gdzig/blob/master/example/src/Signa...

also.. now I want to attempt to write a Ghostty frontend as a Godot extension
by mitchellh | 2025-08-14 22:28:55+00:00
Hi @schmichael ;) Rust would've prevented one. The rest Rust wouldn't have prevented since as you already noticed, it was in the boundary layer and semantics of a C API. It would've only been as safe as the Rust wrapper. One argument is that the richer, more proven ecosystem of wrapper libraries may have prevented it versus my DIY wrappers.

The one Rust would've prevented was a simple undefined memory access: https://github.com/ghostty-org/ghostty/pull/7982 (At least, I'm pretty sure Rust would've caught this). In practice, it meant that we were copying garbage memory on the first rendered frame, but that memory wasn't used or sent anywhere so in practice it was mostly safe. Still, its not correct!
by zamadatix | 2025-08-14 22:29:14+00:00
This mirrors my experience as well. I used to pirate everything, it was relatively inconvenient to get the exact thing you wanted on physical media. Then streaming, Steam, and app stores came about. I pivoted 100%, it was sooo much more convenient than trying to find legitimate and quality copies of content and managing a set up to do so.

Then the streaming side started to fragment a bit, but I just grabbed all of the subscriptions (HBO, Hulu, YouTube, Netflix, etc). It was getting a bit iffy on value, but at least it was still convenient. Now it's just ridiculously _in_convenient. Search around to see which service might have the thing you're actually trying to watch and use this device with this app to get a decent quality version of the content delivered, all while hoping it doesn't force automatic quality "for your benefit". With Steam it's a bit less severe, but it did reach the "and the games you want are split across 5 services in exclusivity" and "DRM is getting to be an extreme pain on some of these" stages.
by Kim_Bruning | 2025-08-14 22:29:25+00:00
Taking things apart to see how they tick is called reduction, but (re)assembling the parts is emergence.

When you reduce something to its components, you lose information on how the components work together. Emergence 'finds' that information back.

Compare differentiation and integration, which lose and gain terms respectively.

In some cases, I can imagine differentiating and integrating certain functions actually would even be a direct demonstration of reduction and emergence.
by Waterluvian | 2025-08-14 22:29:29+00:00
Now more than ever before, for me, it’s exclusively because of UX and not price.

The most recent example: every Star Trek (TNG, Voyager, etc) on Netflix simply doesn’t work on my Chromecast.

After a minute the video goes all screwy, split 1/3 across the screen and loses half its colour. But this doesn’t happen with Plex.
by perching_aix | 2025-08-14 22:29:32+00:00
I'd day this ship has sailed when he became a celebrity.

Comment on him positively, you're now contributing to elevating his identity into something beyond human (etc.).

Comment on him negatively, and now you're just using him as a scapegoat (etc.).

It would seem like the real devil is in the asymmetry of significance, not in the people in question, or even the traits.
by tim333 | 2025-08-14 22:30:01+00:00
>Others say they can estimate your age by using AI to analyze a picture of your face. This is a stupid idea for many reasons, not least of which is that biometric age estimation is notoriously unreliable when it comes to distinguishing, say, 16 or 17 year olds from 18 year olds.

It doesn't matter it's unreliable telling 17 year olds from 18 year olds. This thing is to reduce the amount of porn kids are exposed to. It's not like issuing a passport or something. As long as it sort of has some positive effect.

I actually did the face picture thing for Reddit. Seemed to work ok, although I'm 61 so not too near the cutoff.
by area51org | 2025-08-14 22:30:02+00:00
The aggravating part about this: that was not the intention of the copyright clause. "To promote the Progress of Science and useful Arts, by securing for limited Times to Authors and Inventors the exclusive Right to their respective Writings and Discoveries."

Authors and inventors. Authors and inventors.

Not companies. Not entities, or even individuals, who purchased the "rights" and now "own" works. That has nothing to do with the intent here, which was to encourage actual authors and inventors to make more stuff. Walt Disney has been gone for more than half a century; he's not going to be able to come up with another Mickey Mouse.

"Intellectual property" is an oxymoron. Pray, tell me, which part of my brain does Disney own? Do they own the part that knows what Mickey Mouse looks like?
by crote | 2025-08-14 22:30:30+00:00
What is the mathematical formula for a valid court order? How does it look different from a court order signed by a judge held at gunpoint? How does it look different from a court order signed by a dictator's minion? How does it prevent someone from tricking a judge into signing an order to decrypt message 2421425241 instead of 2421475241? What is stopping the service from accepting invalid court orders? What is stopping the service from just decrypting everything for convenience?
by mxfh | 2025-08-14 22:31:00+00:00
That's not how streaming worked, ever. You had to deal with what Netflix had to offer and that was it. These were the happy monopoly days. It was simply the lack of choice and nobody felt left out at watercooler talks.

The paradox now, is that if you're FOMO inclined you feel the need to subscribe to multiple ones at all times to satify all needs in a household. You don't have to. You can keep baseline Disney if you really have to, but everything else can be easily rotated or just cought up on for a month or three on the usual discounted offers. The social pressure was not some invention of the streaming companies.

Also pirating has a hardware and energy cost, that's not trivial and mostly subsidized by parents. On a ROI basis of adults with disposable income "buying" (aka personal licenses, ideally shareable with some other accounts what some might call a family) 4-5 movies for like 5 dollars on platforms like Apple TV each a month is actually cheaper than pirating. Streaming is not everything. And don`t kid yourself that your DVD or Bluray collection is worth something or usable in 20+ years. That's a niche hobby. Go visit a flea market. People are that lazy when it comes to couch and home entertainment stuff.
by oinfoalgo | 2025-08-14 22:31:11+00:00
I think lack of social media makes me stand out.

I always say I am the type of person who would post too often so instead of having social media I just read non-fiction books.

So far no one has held being well read against me.

Often, it flips to a book recommendation actually. At that point good luck with your social media when I pick a book that fits perfectly in with the marketing of myself getting the job, create a whole interesting conversation in that direction, while they read some inane nonsense from the social media poster.
by taeric | 2025-08-14 22:31:14+00:00
Neat read that I think I will have to come back to.

I think it should be clear that religion clearly was not a historical road block to progress. If only because of how religious many of the names we can remember were.

I have grown to read a lot of modern criticisms of Christianity with difficulty. Too many people pushing the criticisms seem to take the view that the ills of the past were unique to Christianity. Which, again, we have plenty of evidence that people do bad things. In many contexts.

I would be interested to know what has given rise to some of the modern conflict with religions. To this day, I can't come up with a reason for people not directly studying it to care how old the earth is. And I'm always at a complete loss for people that don't believe in dinosaurs. Or the flat earth stuff. Just how is that spreading?
by interestica | 2025-08-14 22:31:41+00:00
This is like cable with extra steps ;)

I think we are already seeing some packaged stream services and we will probably see more. It’s a lot of overhead to maintain a separate service to do the exact same thing (with only a different library and branding).

I think the NHL uses the streaming backend developed by MLB Advanced Media (they adapted it in 2015, not sure if still the case).

https://www.sportsnet.ca/hockey/nhl/a-closer-look-at-nhls-pa...
by malshe | 2025-08-14 22:32:08+00:00
I have this experience working in academia too. Closer to paper submission, all the coauthors work longer days. Emails at midnight and sometimes even Zoom calls at ungodly hours are not unheard of. But once the paper is submitted, usually things slow down.

The people who don't slow down, usually end up burned out quickly. Their research suffers and it shows up in the quality of their work. Then the papers get rejected more often, which puts them more under pressure. It becomes a vicious cycle.
by schmichael | 2025-08-14 22:32:59+00:00
Hey Mitchell! Leave it to me to bait the comments. :)

Thanks for validating my assumption that once you introduce a big blob o' C all bets are off and you're back to Valgrind (or similar tooling).

> One argument is that the richer, more proven ecosystem of wrapper libraries may have prevented it

Yeah but where's the fun in that? ;)
by wrasee | 2025-08-14 22:33:09+00:00
Unpopular opinion here but I wonder how much of the justification for piracy in this thread, broadly around what is perceived to be unfair business practices (“if only the terms were fairer and I would pay”), would actually stand up if the terms were actually fairer but the prices higher.

Or how much is really just the simple rational economic idea that piracy is better value for money.
by leptons | 2025-08-14 22:33:16+00:00
The same noise was made about pair programming and it hasn't really caught on. Using LLMs to write code is one way of getting code written, but it isn't necessarily the best, and it seems kind of fad-ish honestly. Yes, I use "AI" in my coding workflow, but it's overall more annoying than it is helpful. If you're naturally 3x-4x times slower than I am, then congratulations, you're now getting up to speed. It's all pretty subjective I think.
by zeeZ | 2025-08-14 22:33:22+00:00
There are some steps missing.

The card communicates with an eID server via the app. This server is connected to the PKI and receives a new certificate daily-ish and also has a revocation list of blocked IDs. There's a ridiculous amount of regulation for hosting one yourself, so you get that service from one of the two or three who provide it as a service.

ID data this eID server received from the card is then sent to the eID service that initiated the session, which may either be the entity who needs it, or another service provider who wraps another set of regulation requirements and complex eID server API calls into an easy to use API for their customers.

ID data isn't actually shown to the user in the app unless it's a custom implementation that loops it all the way back from the service provider at the end.
by renewiltord | 2025-08-14 22:33:35+00:00
This is crazy. I could easily spend a billion dollars without even thinking. That doesn't even get you a novel drug. Like, if I made $100b I have a shit ton of things I could attack with that.

Even a trillion dollars I could probably spend. I like sailboats so a yacht sounds nice, but I cannot believe it even a fraction of the satisfaction of developing some research, or of having the fundamental research itself done.
by js8 | 2025-08-14 22:33:46+00:00
> I feel like anyone talking about the epistemology of AI should spend some time reading the basics

I agree, I think the problem with AI is we don't know or haven't formalized enough what epistemology should AGI systems have. Instead, people are looking for shortcuts, feeding huge amount of data into the models, hoping it will self-organize into something that humans actually want.
by reactordev | 2025-08-14 22:34:13+00:00
The Falcon 9 blew up a lot too. So do all the rockets until they are perfected. I know some SpaceX’ers and I wouldn’t classify them as average intelligence. On the contrary. I think a lot of people fail to realize how SpaceX works. Nothing musk can do will stop it. Sure, his antics have cause consumers to question his products but the United States government depends on SpaceX to function. The US Military needs SpaceX to function. While their public facing people may seem “average intelligence”, the vast majority of employees at SpaceX are high high IQ people.
by adiabatichottub | 2025-08-14 22:34:16+00:00
In many ways it seemed to be a very chaotic place, where money makes the rules, and most people get by however they can, some in the direst of circumstances. I can understand not wanting to live there long-term. But it's also a city of over 10 million people, so I can only image there's so much more to it. I'm just genuinely glad I had the opportunity to visit, because it made real to me the place and the people that I would otherwise only hear about on the news.
by churchill | 2025-08-14 22:34:42+00:00
I've been through your comment history and I can relate. If you're highly placed enough as an elite, you can form a counter-elite and stage a change of government.

But, in most cases, if you have portable, in-demand skills, it's more reasonable to decamp to a better team than try to fix a failing one. The ones with enough proximity to make any change are usually co-opted, driven into exile, threatened into compliance, or straight-up murdered.

Based on what I read about her and the Awami League, I think removing Hasina will be a net-positive for Bangladesh. Yunus is a dyed-in-the-wool capitalist and widely-respected, and if they can keep AL out of power, and pacify any extremists, I think Bangladesh will quickly continue growing.