MurphyA/hacker-news huggingface dataset:
by tomhow | 2025-08-26 13:22:35+00:00
The TTY Demystified (2008) - https://news.ycombinator.com/item?id=31146862 - April 2022 (22 comments)

The TTY Demystified (2008) - https://news.ycombinator.com/item?id=26803109 - April 2021 (35 comments)

The TTY demystified (2008) - https://news.ycombinator.com/item?id=17765683 - Aug 2018 (12 comments)

The TTY demystified (2008) - https://news.ycombinator.com/item?id=13571055 - Feb 2017 (43 comments)

The TTY demystified (2008) - https://news.ycombinator.com/item?id=10631513 - Nov 2015 (40 comments)

The TTY demystified (2008) - https://news.ycombinator.com/item?id=10064657 - Aug 2015 (31 comments)

The TTY Demystified (2008) - https://news.ycombinator.com/item?id=4544318 - Sept 2012 (46 comments)

The TTY demystified (2008) - https://news.ycombinator.com/item?id=4062981 - June 2012 (17 comments)

The TTY demystified - https://news.ycombinator.com/item?id=658155 - June 2009 (13 comments)
by steve_adams_86 | 2025-08-26 13:22:45+00:00
I didn't mean to imply that Windows offers more privacy at all. I think it's mostly a disaster of an operating system, but it does have a lot of useful software that I'd like to have access to. For example, programming the PLCs I use for automation absolutely requires Windows.

As far as privacy goes, I'd depend on Linux. As for nice user interfaces, cohesion, consistency, any kind of unification: I just have to leave it behind.

But I think I can eventually develop and find something 'good enough' that isn't dependent on Apple to maintain and improve. No mandatory regressions.
by connorbrinton | 2025-08-26 13:22:55+00:00
On my Framework (16), I've found that switching to GNOME's "Power Saver" mode strikes the right balance between thermals, battery usage and performance. I would recommend trying it. If you're not using GNOME, manually modifying `amd_pstate` and `amd_pstate_epp` (either via kernel boot parameters or runtime sysfs parameters) might help out.

I agree that it's unfortunate that the power usage isn't better tuned out of the box. An especially annoying aspect of GNOME's "Power Saver" mode is that it disables automatic software updates, so you can't have both automatic updates and efficient power usage at the same time (AFAIK)
by commakozzi | 2025-08-26 13:23:26+00:00
Completely agreed. The null hypothesis on that has always fallen on extraterrestrials, assuming we know everything about every single cubic meter on earth, which is anthropomorphically flawed. I never really speculate on what it was, exactly, because i don't have enough data. My first assumption is man-made, not extra-terrestrial or otherwise. It could have been ball lightning or some deception system for false radar return as someone mentioned earlier, but this thing had size to it. it wasn't a reflection. I've seen (vary rare video) examples of ball lightning also, but they don't move like what i saw.
by lotsofpulp | 2025-08-26 13:23:48+00:00
I know. Per your definition, anyone who desires a vacation to a tropical island is greedy. Or eating at restaurants. Playing video games, renting a movie, eating dessert, etc. How about living on the California coast? People who want to earn more so they can move there are greedy? Or do they simply desire it?

One of my cousins' parents immigrated to the Bay Area, but mine went to the midwest. Am I greedy for desiring to earn income more than a couple standard deviations above the mean so that I could buy land in the Bay Area? Is my cousin not greedy because they were born there?

>Context and our norms is what determines it.

Exactly, which is the problem with trying to distinguish "desire" and "greed". "We" don't have norms. I was lambasted growing up by my grandparents for wanting things that any 1990s kid had in the US, but they didn't have in their poorer country from 1920 to 1940.
by zipityzi | 2025-08-26 13:23:57+00:00
This seems mostly misinformed.

1) Apple Silicon outperforms all laptop CPUs in the same power envelope on 1T on industry-standard tests: it's not predominantly due to "optimizing their software stack". SPECint, SPECfp, Geekbench, Cinebench, etc. all show major improvements.

2) x86 also heavily relies on micro-ops to greatly improve performance. This is not a "penalty" in any sense.

3) x86 is now six-wide, eight-wide, or nine-wide (with asterisks) for decode width on all major Intel & AMD cores. The myth of x86 being stuck on four-wide has been long disproven.

4) Large buffers, L1, L2, L3, caches, etc. are not exclusive to any CPU microarchitecture. Anyone can increase them—the question is, how much does your core benefit from larger cache features?

5) Ryzen AI Max 300 (Strix Halo) gets nowhere near Apple on 1T perf / W and still loses on 1T perf. Strix Halo uses slower CPUs versus the beastly 9950X below:

Fanless iPad M4 P-core SPEC2017 int, fp, geomean: 10.61, 15.58, 12.85 AMD 9950X (Zen5) SPEC2017 int, fp, geomean: 10.14, 15.18, 12.41 Intel 285K (Lion Cove) SPEC2017 int, fp, geomean: 9.81, 12.44, 11.05

Source: https://youtu.be/2jEdpCMD5E8?t=185, https://youtu.be/ymoiWv9BF7Q?t=670

The 9950X & 285K eat 20W+ per core for that 1T perf; the M4 uses ~7W. Apple has a node advantage, but no node on Earth gives you 50% less power.

There is no contest.
by dfawcus | 2025-08-26 13:24:15+00:00
In 1988 I worked for around a year for a company which used NAPLPS for various Data Broadcast advertising devices.

It actually had quite impressive graphics capabilities, although the vector graphics took some time to draw (using NEC V30 CPUs), and an additional graphics processor chip (made my Intel if I recall).

Data Broadcast being a commercial use of the UK TV channel for various things, i.e. essentially a commercialization of the data channel over which Teletext was sent, Teletext had some of the flyback lines, DB had some others.
by ocdtrekkie | 2025-08-26 13:24:18+00:00
Out of about three dozen places I need a certificate, I believe one recently added support for ACME. Tell me you aren't in enterprise IT without telling me you aren't in enterprise IT. ;)

It may help you to understand that it is not an assumption any given product even supports HTTPS well in the first place, and a lot of vendors look at you weird when you express that you intend to enable it. One piece of software requires rerunning the installer to change the certificate.

Yeah, there are also some very expensive vendors out there to manage this for big companies with big dollars.
by AnimalMuppet | 2025-08-26 13:24:20+00:00
No, I have the urge to burn it because America - the America I love - is dead, or at least dying.

I love an America that has free speech, including burning the flag. That America is dead, assassinated by the President.

I love an America that has rule of law, not rule by executive order. That America is dead, killed by Congressional incompetence and pettiness.

I love an America where the President has limits on his power. That America is dead, killed by judicial inaction.

I have the urge to burn a flag to say: This? This thing that you are turning the country into? This is not America.
by Sayrus | 2025-08-26 13:24:32+00:00
And those apps use MEETS_DEVICE_INTEGRITY rather than MEETS_STRONG_INTEGRITY so a compromised device can absolutely be used to access critical services. (Usually because strong integrity is unsupported on old devices)

This reminds me of providers like Xiaomi making it harder to unlock the bootloader due to phones being sold as new but flashed with a compromised image.
by ktosobcy | 2025-08-26 13:24:36+00:00
This is the problem - many apps refusing to run on non-blesses platform.

Years ago I loved tinkering with the devices but then I wasn't able to use my bank and it was getting more and more annoying so at one point I just stopped...

The biggest problem are: 1) lack of drivers (so creating custom roms/OS for the devices is problematic), 2) locked bootloaders and 3) many apps requiring PlayServices and other stuff (mostly banks).

There is postmarketOS, it looks awesome but - device support is very lacking and there is no way to have bank and PopularApps (whatsapp/instagram/etc) running on it so it's popularity is microscopic…

Maybe another European Citizen Initiative to force makers to provide those things (bootloader and drivers)?
by mike_hearn | 2025-08-26 13:24:39+00:00
I developed this stuff at Google (JS puzzles that "attest" web browsers), back in 2010 when nobody was working on it at all and the whole idea was viewed as obviously non-workable. But it did work.

Brute force attacks on passwords generally cannot be stopped by any kind of server-side logic anymore, and that became the case more than 15 years ago. Sophisticated server-side rate limiting is necessary in a modern login system but it's not sufficient. The reason is that there are attackers who come pre-armed with lists of hacked or phished passwords and botnets of >1M nodes. So from the server side an attack looks like this: an IP that doesn't appear anywhere in your logs suddenly submits two or three login attempts, against unique accounts that log in from the same region as that IP is in, and the password is correct maybe 25%-75% of the time. Then the IP goes dormant and you never hear from it again. You can't block such behavior without unworkable numbers of false positives, yet in aggregate the botnet can work through maybe a million accounts per day, every day, without end.

What does work is investigating the app doing the logging in. Attackers are often CPU and RAM constrained because the botnet is just a set of tiny HTTP proxies running on hacked IoT devices. The actual compute is happening elsewhere. The ideal situation from an attacker's perspective is a site that is only using server side rate limiting. They write a nice async bot that can have tens of thousands of HTTP requests in flight simultaneously on the developer's desktop which just POSTs some strings to the server to get what they want (money, sending emails, whatever).

Step up the level of device attestation and now it gets much, much harder for them. In the limit they cannot beat the remote attestation scheme, and are forced to buy and rack large numbers of genuine devices and program robotic fingers to poke the screens. As you can see, the step-up from "hacking a script in your apartment in Belarus" to "build a warehouse full of robots" is very large. And because they are using devices controlled by their adversaries at that point, there's lots of new signals available to catch them that they might not be able to fix or know about.

The browser sandbox means you can't push it that far on the web, which is why high value targets like banks require the web app to be paired with a mobile app to log in. But you can still do a lot. Google's websites generate millions of random encrypted programs per second that run inside a little virtual machine implemented in Javascript, which force attackers to use a browser and then look for signs of browser automation. I don't know how well it works these days, but they still use it, and back when I introduced it (20% time project) it worked very well because spammers had never seen anything like it. They didn't know how to beat it and mostly just went off to harass competitors instead.
by watsonmusic | 2025-08-26 13:24:42+00:00
VibeVoice is a novel framework designed for generating expressive, long-form, multi-speaker conversational audio, such as podcasts, from text. It addresses significant challenges in traditional Text-to-Speech (TTS) systems, particularly in scalability, speaker consistency, and natural turn-taking. A core innovation of VibeVoice is its use of continuous speech tokenizers (Acoustic and Semantic) operating at an ultra-low frame rate of 7.5 Hz. These tokenizers efficiently preserve audio fidelity while significantly boosting computational efficiency for processing long sequences. VibeVoice employs a next-token diffusion framework, leveraging a Large Language Model (LLM) to understand textual context and dialogue flow, and a diffusion head to generate high-fidelity acoustic details. The model can synthesize speech up to 90 minutes long with up to 4 distinct speakers, surpassing the typical 1-2 speaker limits of many prior models.
by whitehexagon | 2025-08-26 13:25:25+00:00
I like your take, we see too many easy-to-write outrage articles on here these days, and rarely do we see a discussion or concrete list of actions that can be taken. eg. send a physical letter to this address, or boycot this or that service for 24hrs on such a date etc.

Personally I de-googled last year, but those numbers never get counted by the bean-counters, so it is not much of a protest.

In this case I dont think much can be done via legislation, since the governments work less and less for-the-people. This is just the next logical step on the KYC road, but for developers, GitHub is heading the same way, along with EU chat controls, UK age controls, Digital Euro, and the rest.

The EU right-to-privacy may as well be torched, and freedoms that were hard won, will continue to be surrendered for an easier swipe of a gadget.
by lucideer | 2025-08-26 13:25:49+00:00
> Why would macOS get bundled in with Linux? Because it's a unix? That's silly.

I'm somewhat on the fence about this topic in general & I think you've hit upon why. This isn't silly. At all.

Linux & Mac environments are by no means compatible but for anyone who cares about the location of their dotfiles, the two systems have demonstrably been "compatible enough". To the point that having coordinated standards on some aspects of (at the very least cli) applications would invariably be a net positive for users of both systems.

I run a Linux desktop & a Mac laptop between which I sync dotfiles & personal scripts. The scripts I sync work seamlessly on Linux & BSD systems because the incompatibilities are eminently manageable, so the topic of this post is definitely an inconvenience for me. I'm sure I'm not the only one.

Plenty of commenters are using Windows as a comparator stating "you wouldn't expect this in Windows" but in actual fact, I would like to have this in WSL2 (if I ever had a Windows machine). Powershell & CMD have never had anything resembling Unix compat so for those this is irrelevant, but Windows isn't a monolith.

In fact the more I read arguments against this in HN comments, the more I'm being persuaded to come off the fence & argue that XDG should be a *nix standard rather than a Linux one.

Though the flip side of my own subjective take here is that "home directory dotfile vomit" has just never seemed as big an issue to me as many make out.
by assbuttbuttass | 2025-08-26 13:26:06+00:00
I'm not sure where you got that XDG_DATA_HOME has to be read-only, I couldn't find anything like that

> $XDG_DATA_HOME defines the base directory relative to which user-specific data files should be stored.

And really, the difference between XDG_DATA_HOME and XDG_CONFIG_HOME is subjective anyway, each application will have its own requirements, so I'm not convinced it's even possible to define these completely precisely.

Personally, I would pick between XDG_DATA_HOME vs XDG_CONFIG_HOME based on whether the application manages the files, or whether the user is expected to manage the files themself. This isn't based on any wording in the standard, but just a pattern I've commonly seen
by rsynnott | 2025-08-26 13:26:15+00:00
> Most people either never make restaurant reservations, or do so infrequently for special occasions, in which case they probably already know where they want to go and how to book it.

And even if they don't know, they likely either live in a small place, in which case there's not going to be a huge amount of choice, or a big place, in which case there will be actual guides written by people whose actual job it is to review restaurants. It really seems like a solution in desperate need of a problem.
by nisegami | 2025-08-26 13:26:33+00:00
Every year is too infrequent to force automation, leading to admins forgetting to renew their certs. Every minute/day may be too demanding on ACME providers and clutters transparency logs. Dynamic certs just move the problem around because whatever is signing those certs just becomes the SSL cert in practice unless it happens over acme in which case see the point above.
by aurareturn | 2025-08-26 13:26:34+00:00
Weren't we comparing CPUs though? Those Blender benchmarks are for GPUs.

Yes, but I was asked about Blender GPU.

Blender CPU tasks are highly parallel. AMD's Ryzen Max 395 has great MT performance. It's generally 5-20% slower in CPU MT than the M4 Max depending on the application.
by bitshiftfaced | 2025-08-26 13:26:46+00:00
> Brazil’s supreme court has ruled that social media platforms can be held legally responsible for users’ posts, in a decision that tightens regulation on technology giants in the country.

> Companies such as Facebook, TikTok and X will have to act immediately to remove material such as hate speech, incitement to violence or “anti-democratic acts”, even without a prior judicial takedown order

https://www.ft.com/content/4a5235c5-acd0-4e81-9d44-2362a25c8...

Twitter was blocked immediately, without a public hearing or appeal process.

> In early May 2023, when the bill was about to be approved, Google and Telegram used their own platforms to express their opposition to the bill to their Brazilian users, and soon after were forced to back down by government institutions.

https://en.m.wikipedia.org/wiki/Brazilian_Congressional_Bill...

Brazil has a low "Freedom on the Net" rating, "partly free": https://freedomhouse.org/country/brazil/freedom-net/2024# .
by sombragris | 2025-08-26 13:26:50+00:00
I'm in a choir. We just performed Mendelssohn's Elijah (translated into Spanish). Last year we performed Brahms' Deutsches Requiem in its original language. Both were exhilarating experiences.

The article is a great set of talking points for discussion, although I might not agree with all of them. Some counterpoints which might be more or less effective in rebutting the article's assertions:

- Languages are different, but in our context, many choral pieces are in Latin which is very close to Spanish, and there's also the Roman Catholic liturgical tradition; Masses were said in Latin until not that long ago. Thus, for many works and in our particular context, the language gap is not as wide as one might think.

- About the context of the works themselves, a good set of program notes or a small, brief talk prior to performance could be quite helpful.

- Why something serious should have less appeal? There's a place for everything, and the serious stuff has a place under the sun, too.

- If we "go to church less", well. We should go more often to church, then.

- Several points attest to this general idea: the best way to enjoy a choral performance is by being a choir member and perform the work itself. The second best way is to attend a live choral performance in a suitable venue.

Still, there are very good choral recordings. For example, Carus is a label with outstanding recordings, such as Rilling and the Gächinger Kantorei rendition of Brahms' Deutsches Requiem.
by evanjrowley | 2025-08-26 13:26:51+00:00
See: Prusa CEO declares "open hardware desktop 3D printing is dead" - China blamed for causing the beginning of the end via TechRadar.

- State-backed rivals have made open source 3D printing nearly impossible - Chinese subsidies shift global competition in desktop 3D printer production - Cheap Chinese patents create obstacles far beyond Europe’s market borders

https://www.techradar.com/pro/prusa-ceo-declares-open-hardwa...
by fcpguru | 2025-08-26 13:26:52+00:00
The article doesn't mention a key details. The recent theater release was a "sign-a-long" which was the key details that made me get the kids into the car and go see a movie we have all already watched 4 times at home. It was that other kid interaction I craved for them. It was like going to a friends house where all the kids agreed to play the best game ever called sign loud and dance to the entire KPDM movie.
by mike_hearn | 2025-08-26 13:27:07+00:00
Banks have never accepted browsers. They don't need to because they can require the web app be paired with a mobile app or SMS code to log in. Before they used mobile apps they issued smartcard readers (at least they did everywhere I lived). The smartcard readers were also used to digitally sign transactions.

In other words, there aren't many banks that let you take sensitive actions with just a browser and that's been true since the start of online banking.

These days they also apply differential risk analysis based on the device used to submit a transaction and do things to push people towards mobile. For instance in Switzerland there's now a whole standard for encoding invoices in QR codes. To pay those you must use the mobile apps.

Edit: people are getting hung up on the "never accepted browsers" part. It means they only use the browser for unimportant interactions. For important stuff like login or tx auth, they expect the use of separate hardware that's more controlled like a SIM card/mobile radio, smartcard or smartphone app. Yes some banks are more lax than others but in large parts of the world this was always true since the start of online banking.
by yjftsjthsd-h | 2025-08-26 13:27:20+00:00
> Why wouldn't you go with a week or a day? isn't that better than a whole month?

There is in fact work on making this an option: https://letsencrypt.org/2025/02/20/first-short-lived-cert-is...

> Why isn't it instead just a minute? or a few seconds? Wouldn't that be better?

> Why not have certificates dynamically generated constantly and have it so every single request is serviced by a new one and then destroyed after the session is over?

Eventually the overhead actually does start to matter

> Maybe the problem isn't that certificates expire too soon, maybe the problem is that humans are lazy. Perhaps it's time to go with another method entirely.

Like what?
by 0points | 2025-08-26 13:27:41+00:00
> 1. There's this huge misconception that LLMs are literally just memorizing stuff and repeating patterns from their training data

So then, what are they doing?

I'm seeing people creating full apps with GPT-5-pro, but nothing is novel.

Just discussed the "impressiveness" of it creating a gameboy emulator from scratch.

(There's over 3500 gameboy emulators on github. I would be suprised if it failed to produce a solution with that much training data).

Where's the novel break-throughs?

As it stands today, I'm sure it can produce a new ssl implementation or whatever it has been trained on, but to what benefit???
by jannesblobel | 2025-08-26 13:27:51+00:00
> You know what I was not interested in? The git history.

Sure, that makes sense, if you’re just interested in the internals, the history doesn’t matter. I get that.

But what do you think about the idea of keeping two views of history? One that’s clean and human-readable, and another that preserves all the detailed commits. With the right filters, you could switch between the simple view and the full story.

EDIT: By the way, I just want to discuss a theory/some thoughts here. There are always pros and cons, and perhaps my text is a little too harshly worded.
by lelanthran | 2025-08-26 13:27:53+00:00
> Given that Markdown fully supports HTML I have built sites using just Markdown + web components but that's... just how it works.

Agreed. My blog is a single shell script that runs pandoc on all the files in a subdir, generates a new .md file for table of contents, and then uses pandoc to generate a ToC.html file.

That doesn't mean that my the site uses no Javascript - the magic of web components means that I can place `<some-custom-component> ...` in the middle of my .md content and have interactive components in the resulting html.

What would be really useful is decent tooling for this sort of authoring.