MurphyA/hacker-news huggingface dataset:
by AtlasBarfed | 2025-08-13 17:05:12+00:00
The core thing to know about floating point numbers in comp langs is they aren't floating point numbers.

They are approximations of floating point numbers, and even if your current approximation of a floating point number to represent a value seems to be accurate as an integer vale...

There is no guarantee if you take two of those floating point number approximations that appear completely accurate that the resulting operation between them will also be completely accurate.
by perihelions | 2025-08-13 17:05:17+00:00
> "This is the case in all other industries as well,"

No; it really isn't. There's no industry on the planet where "must accept" regulations are set by the world's most sensitive physics experiments.

Do we set acoustic noise regulations by what a LIGO interferometer can measure? Of course not. We'd have to outlaw the mechanical engine were it so. Regress to a medieval society of horse people (very small horses with noise-absorbing horseshoes).

Do we regulate nuclear power by what astrophysical neutrino detectors perceive? Also, no. Even though they see fission reactors on the other side of the planet, and it is noise to them.

The prior art is we that set noise regulations by what interferes with actual humans in their actual day-to-day functioning; and we set RF regulations by what interferes with the functioning of other circuits useful to humans. Not exotic physics experiments. This is a new thing to ask; and it is bold.
by Jordan-117 | 2025-08-13 17:05:30+00:00
I had a custom instruction to answer concisely (a sentence or two) when the question is preceded by "Question:" or "Q:", but noticed last month that this started getting applied to all responses in voice mode, with it explicitly referencing the instruction when asked.

AVM already seems to use a different, more conversational model than text chat -- really wish there were a reliable way to customize it better.
by Cheetah26 | 2025-08-13 17:06:09+00:00
I actually think that llms could be good for human-focused websites.

When the average user is only going to AI for their information, it frees the rest of the web from worrying about SSO, advertisements, etc. The only people writing websites will be those who truly want to create a website (such as the author, based on the clear effort put into this site), and not those with alternate incentives (namely making money from page views).
by emilfihlman | 2025-08-13 17:06:25+00:00
You know there is a difference between being polite and friendly, and kissing ass, right?

We are also talking about a tool here. I don't want fluff from a tool, I want the thing I'm seeking from the tool, and in this case it's info. Adding fluff just annoys me because it takes more mental power to skip all the irrelevant parts.
by filleokus | 2025-08-13 17:06:35+00:00
Spivak is saying that the DNS method is superior (i.e you are agreeing - and I do too).

One reason I can think of for HTTP-01 / TLS-ALPN-01 is on-demand issuance, issuing the certificate when you get the request. Which might seem insane (and kinda is), but can be useful for e.g crazy web-migration projects. If you have an enormous, deeply levelled, domain sprawl that are almost never used but you need it up for some reason it can be quite handy.

(Another reason, soon, is that HTTP-01 will be able to issue certs for IP addresses: https://letsencrypt.org/2025/07/01/issuing-our-first-ip-addr...)
by 0x457 | 2025-08-13 17:06:47+00:00
Because while Nginx always has access to .well-known, thing that validates on issuer side might not. I use DNS challenge to issue certificates for domains that resolve to IPs in my overlay network.

The issue is that supporting dns-01 is just supporting dns-01 it's providing a common interface to interact with different providers that implement dns-01.
by xscott | 2025-08-13 17:07:49+00:00
> Ad hominem attack - great.

No, it was not. You moved the goal posts from artists deserving a livelihood to copyright issues, and I called you out for that.

> Note also that the kid didn't steal the books he learnt from.....

I should note this? I explicitly stated it as part of the hypothetical.

As I said above, there are already laws about copying. If you're sure they broke those laws, maybe you should criticize the powers that be for not enforcing them.

> The question is what's happening fair and good for society

I think this is a good question.

Personally, I think the benefit from having automated tutors that are attentive and patient and can answer questions about almost any topic known to man dwarfs the benefit from defending intellectual property. I hope they get cheap enough to be accessible to every person who can't afford a traditional education and accurate enough that we trust them more than typical teachers (not a high bar, unfortunately).

I donated to Wikipedia for years specifically because of its educational value while being freely available. Watching people I know learn from LLMs, and do useful interesting things with what they learned, I think the potential is much higher.
by mooreds | 2025-08-13 17:08:04+00:00
And yet people (devs) keep signing up for free plans.

And companies keep offering them.

The ones that don't make waves because of how unusual they are (see Planetscale and this discussion: https://scalingdevtools.com/podcast/episodes/sam-lambert-ceo... )

I don't know about you, but I make many choices every day that are sub-optimal when viewed globally (or even across my life) but "make sense" or that I want to do in the moment. I suspect that is the cause.
by lcall | 2025-08-13 17:08:05+00:00
Life has many stresses, but things can actually be OK with each of us, despite commotion and problems. In my church of 17.5 million members in most countries, we have made promises with God to help each other and we try to help others in need, in many nations ($1.5 billion last year and growing). That is far from the total level of need, but God has also promised to help us and guide us as individuals and families if we really strive to keep our promises and do our part; He has promised peace in this life and eternal life in the world to come. And there are programs for developing and serving in employment, education, resilience, service to community, etc. And very local congregation has a bishop (unpaid) with access to resources to help meet needs and achieve self-reliance.

More at my site (in profile; no sales and low stylistic ambition), if you click on "Things I want to say" (about 1/2-way down), then "On peace amid commotion" (also about 1/2-way down), then skim that page and click at least the last link. Then read the entire page and click the links that seem most interesting.). We really can be OK despite things. (Thoughtful comments appreciated with any downvotes.)
by WalterBright | 2025-08-13 17:08:09+00:00
Every large organization does indeed accumulate bloat/overhead sooner or later. For a profit making company, this means it loses its competitiveness and then falls. For government, this means it gets a bigger budget.

The leaded gasoline example is also a disaster. That does not generalize to every regulation being good. For example, regulations prevent victims of the Palisades fire from rebuilding. For another example, rent control.

Reading the article, the bit about Lasik eye surgery resulting in major reductions in cost is pretty illustrative.

Some years back, Frontline did an episode on dental care fraud. It seems the government set up a program to pay dentists to do major dental operations on poor people. Clinics then set up solely to do major dental operations on poor people, and raked in the government money. The trouble was, those people did not need dental operations. Frontline's "solution" was to propose heavy regulation. That won't work, either, because medical fraud to get government money is rampant and pervasive.

You might also consider the software business, which has pretty much zero regulation. It is also a gigantic engine of prosperity in the US, despite having driven costs down to literally zero. There have been many proposals to regulate it, but fortunately none have managed to do so.
by dathinab | 2025-08-13 17:08:26+00:00
Well there had been system with very high rates of false positives for certain ethnicities which if wide scale deployed would in effect be like systematic harassment of this people.

So it is a thing people which in general are okay with mass surveillance might worried about.

And convincing the people you have a chance to convince is much more useful the pointlessly trying to convince the people which anyway won't like what you do no matter what you say.
by root_axis | 2025-08-13 17:08:33+00:00
They are, but without cookies nearly all of the value disappears because there is no way to correlate sessions across domains. If commercesite.com and socialmediasite.com both host a tracking script from analytics.com that sets data in localstorage, there is no way to correlate a user visiting both sites with just the localstorage data alone - they need cookies to establish the connection between what appears to be two distinct users.
by Ericson2314 | 2025-08-13 17:08:49+00:00
> and I will refrain from flippant attacks like "do you pay my mortgage"

Well to start with, have you heard of the Mortgage Interest Tax Deduction? I quite arguably do contribute to your mortgage!

The actual answer is far more complex. https://www.strongtowns.org/ has some info, though some of their stuff is debatable.
by stego-tech | 2025-08-13 17:10:19+00:00
The IT Roller Coaster in two reactions:

> Nginx Introduces Native Support for Acme Protocol

IT: “It’s about fucking time!”

> The current preview implementation supports HTTP-01 challenges to verify the client’s domain ownership.

IT: “FUCK. Alright, domain registrar, mint me a new wildcard please, one of the leading web infrastructure providers still can’t do a basic LE DNS-01 pull in 2025.”

Seriously. PKI in IT is a PITA and I want someone to SOLVE IT without requiring AD CAs or Yet Another Hyperspecific Appliance (YAHA). If your load balancer, proxy server, web server, or router appliance can’t mint me a basic Acme certificate via DNS-01 challenges, then you officially suck and I will throw your product out for something like Caddy the first chance I get.

While we’re at it, can we also allow DNS-01 certs to be issued for intermediate authorities, allowing internally-signed certificates to be valid via said Intermediary? That’d solve like, 99% of my PKI needs in any org, ever, forever.
by moritzwarhier | 2025-08-13 17:10:21+00:00
This has to be either the worst or the best baity headline if read in a while.

I guess, it's an example for a key in the KV.

edit: oh, it's probably a technical glitch. The letter sequence is not in the article. Is it a cuid? A typo? Would be great if this would be a blog post with a meaningful headline...

If it's intentional: this headline/og:title goes too far in click bait for a corporate post IMO. I'd see it differently if it was a personal blog post getting straight to the point.

But such a headline and theb such a boring introduction, on a cloudflare post about KV storages: ctrl-w for me, maybe there'll be a summary elsewhere if it's interesting.
by beowulfey | 2025-08-13 17:10:31+00:00
1) Why would companies pay for basic research? They used to get that research for free.

2) Very few schools have endowments that are large enough to support current faculty research costs; even Harvard can only support all research off their endowment for about a year.

3) Endowments are now taxed, so they will have even less available for research.
by andrewmcwatters | 2025-08-13 17:10:34+00:00
It seems like if you commit your NGINX config with these updates, you can have one less process to your deployment if you're doing something like:

# https://certbot.eff.org/instructions?ws=other&os=ubuntufocal sudo apt-get -y install certbot # sudo certbot certonly --standalone ... # https://certbot.eff.org/docs/using.html#where-are-my-certificates # sudo chmod -R 0755 /etc/letsencrypt/{live,archive}

So, unfortunately, this support still seems more involved than using certbot, but at least one less manual step is required.

Example from https://github.com/andrewmcwattersandco/bootstrap-express
by anonfordays | 2025-08-13 17:10:53+00:00
Hacker culture is and has always been anti-Marxist and anti-Communist by nature, at least the version that grew in the west. It was an offshoot of hippie culture in the 60s, grew in the 80s phreaking scene, and highly entangled with libertarian open source in the early to mid 90s.
by tracker1 | 2025-08-13 17:11:28+00:00
Nice to see what people put together... I'm hoping to do some custom desk builds etc in the next year or so myself.

My biggest change for my home setup has been moving away from a KVM with work and personal computers on a single desk to multiple desks where I'm physically moved. I prefer to have my feet on the ground, so don't like the drafting chair or barstool foot rests. I've also moved to 45" (U)WQHD displays (3440x1440) for my work spots. I have two Xeneon Flex and another display of the same size that's by LG.

It's kind of like 2x large 3:4 aspect displays glued together mostly pinning apps to half the screen on one side or the other. My vision is pretty bad, so having the larger pixels helps a lot for my visibility and being able to function. It's also worth noting that I didn't pay full retail for any of the screens. The Xeneon goes on sale for about half price every couple months on Corsair's site, and I picked up the LG as a return from BestBuy for about $550, which was a pretty good deal for what it is.

I also tend to prefer physical switch keyboards, currently backlit Das keyboards with Cherry-MX Brown switches. My mouse is a Logitech with a weighted scroll wheel. I do like the Unicomp keyboards more, but they're a bit more noisy so I settle with the browns.
by gizmo686 | 2025-08-13 17:11:48+00:00
It is far more common for HOAs to be under priced and neglected.

They are run by elected volunteers (from member homeowners); and approximately no one wants to volunteer. What everyone does want is lower dues. When combined with the minimal effort that goes into running most HOAs, this tends to cause them to reduce dues by neglecting maintenance and emergency reserves. Then, when the bill comes due, they need to issue a large special assessment to cover the cost.
by skulk | 2025-08-13 17:11:48+00:00
FWIW, SBCL is pretty good at optimizing away dynamic type checks if you help it out.

Here are some examples under:

(declaim (optimize (speed 2)))

First example is a generic multiplication. x and y could be _any_ type at all.

(defun fn (x y) (* x y))

If we disassemble this function, we get the following:

; disassembly for FN ; Size: 34 bytes. Origin: #x1001868692 ; FN ; 92: 488975F8 MOV [RBP-8], RSI ; 96: 4C8945F0 MOV [RBP-16], R8 ; 9A: 498BD0 MOV RDX, R8 ; 9D: 488BFE MOV RDI, RSI ; A0: FF142540061050 CALL [#x50100640] ; SB-VM::GENERIC-* ; A7: 4C8B45F0 MOV R8, [RBP-16] ; AB: 488B75F8 MOV RSI, [RBP-8] ; AF: C9 LEAVE ; B0: F8 CLC ; B1: C3 RET ; B2: CC0F INT3 15 ; Invalid argument count trap

Note that it calls `GENERIC-*` which probably checks a lot of things and has a decent overhead.

Now, if we tell it that x and y are bytes, it's going to give us much simpler code.

(declaim (ftype (function ((unsigned-byte 8) (unsigned-byte 8)) (unsigned-byte 16)) fn-t)) (defun fn-t (x y) (* x y))

The resulting code uses the imul instruction.

; disassembly for FN-T ; Size: 15 bytes. Origin: #x1001868726 ; FN-T ; 26: 498BD0 MOV RDX, R8 ; 29: 48D1FA SAR RDX, 1 ; 2C: 480FAFD7 IMUL RDX, RDI ; 30: C9 LEAVE ; 31: F8 CLC ; 32: C3 RET ; 33: CC0F INT3 15 ; Invalid argument count trap*
by Vinnl | 2025-08-13 17:12:17+00:00
> Telesign, a company that advertises fraud-prevention services for businesses, offers a simple form for “Data Deletion” and “Opt Out / Do Not Sell”. But that form is hidden from search engines and other automated systems, and isn’t linked on its homepage. > > Instead, consumers must search about 7,000 words into a privacy policy filled with legalese to find a link to the page.

In fact, while they do have a robots.txt [1], their form [2] isn't actually listed there. Instead, the page itself has a meta tag:

<meta name="robots" content="noindex, nofollow">

The reason is probably something mundane like this being easiest to do via the Wordpress UI, but putting on my conspiratorial hat, they just want to make it even hard to find out that they did this.

(Disclosure: I work on Mozilla Monitor, where we try to help people send these data deletion requests.)

[1] https://www.telesign.com/robots.txt

[2] https://www.telesign.com/privacy-requests
by jboggan | 2025-08-13 17:12:30+00:00
If you are a California resident you can request a deletion via the state's new DROP platform which is launching next year. That will send the deletion request to every registered data broker in the state who will then have 45 days to comply. Part of that compliance is sending deletion notifications to everyone downstream that they have shared or sold your data to in the past. The penalty for not responding to a DROP request is going to be $200 a day, per request.

Starting in 2028 CA registered data brokers will have to undergo audits to ensure that they have been complying with deletion requests to the fullest extent of the law. Now, maybe only 20% of actual data brokers are registered in California like they are supposed to be, but it's a start.

Shameless plug: I'm building a platform to help the data brokers actually delete the data they are supposed to, provide full auditing and accounting for that process, and automate privacy request handling: forgetmenaut.com
by llm_nerd | 2025-08-13 17:12:50+00:00
"Boomer C-Suites who fancy themselves Enterprise Tech executives and are happy to throw humans at any problem were happy buying off the Gartner catalog and then hitting the golf course. Today, millennial CEOs and CTOs get their analysis and news sources from X, /r/LocalLlama, the All In Podcast, Semianalysis Substacks, any number of YouTubes and Podcasts."

This reads like parody. I see another post in here talking about "Boomer catch phrasing" (in a word salad comment) which is simply hilarious.

While this millennial thought guru seems to think their age defines them, I think the rest of us realize that there are gullible rubes in every age group. There are fresh new recruits citing the gartner magic quadrant or whatever nonsense makes their world feel more orderly. I mean, LinkedIn is absolutely full of hilarious nonsense from people at every age trying to show that they Ordered The World because of some list or source they subscribe to.
by thaumaturgy | 2025-08-13 17:13:18+00:00
Good to see this. For those that weren't aware, there's been a low-effort solution with https://github.com/dehydrated-io/dehydrated, combined with a pretty simple couple of lines in your vhost config:

location ^~ /.well-known/acme-challenge/ { alias <path-to-your-acme-challenge-directory>; }

Dehydrated has been around for a while and is a great low-overhead option for http-01 renewal automation.
by jcranmer | 2025-08-13 17:13:37+00:00
The differences are almost certainly not in how the two OSes rounded floats--the IEEE rounding modes are standard, and almost no one actually bothers to even change the rounding mode from the default.

For cross-OS issues, the most likely culprit is that Windows and Linux are using different libm implementations, which means that the results of functions like sin or atan2 are going to be slightly different.
by _wire_ | 2025-08-13 17:13:43+00:00
List of distinctions without differences and vagaries.

Key Linux takeaways based on list:

Unstable, user-unfriendly.

Package mgmt and drivers are a nightmare.

Vague distinctions between personal and enterprise usage, individuals will be maddened by complexity and enterprises will be end-run by simplicity.

Cutting edge is bleeding edge.

Every release walks the edge of a pit of despair.

If you need support, you pay for it, just like the rest of industry.

But hey, everything is great for everybody, pick your poison!

—

PC tech is maddening, but if your concerns are at the level of questions like which browser you will be allowed to use, Apple offers by far the most comprehensive, comprehensible, sustainable and cost effective experience.

//User-friendly interface with macOS-like aesthetics//

What's good about Mac is far beyond aesthetics. Want a Mac-like experience, cheapest best way to get there is a Mac.
by curiousguy | 2025-08-13 17:13:46+00:00
The lack of devs that understand the domain knowledge and the codebase will be the main issue.

I would say that the current capabilities of genAI is like a junior dev, sometimes even a mid-level. But one main difference is that a dev is slowly learning and improving and at some point will become a senior dev and also domain specialist.

If there is a codebase created by genAI, then it’s equivalent as if all devs left the company, so no one knows why some piece of code was created in a certain way, if it was part of the business logic or some implementation detail
by quibono | 2025-08-13 17:13:47+00:00
> You can't make an arrest on the basis of refusal to verify identity, unless a specific law is in play, or the Police officer has proof you are lying

> If the police have probable cause to suspect you've committed an actual crime, then you have to ID yourself, you are entitled to know what crime you are suspected of

It's always been my impression that this kind of ambiguous phrasing combined with the power imbalance gives the public absolutely no protection whatsoever. Let's say you don't want to provide ID: the copper could come up with some vague excuse for why they stopped you / want your ID. Good luck arguing with that
by mindslight | 2025-08-13 17:13:53+00:00
TenKeyLess / 87% refers to keyboards missing the numpad, but otherwise full size. For example, I'm typing this from a Coolmaster Novatouch. The gap between Backspace/Insert and F12/PrintScr might be a little narrower on this particular model? But otherwise it's a standard size keyboard, just missing the numpad. And If anything, the lack of the numpad makes PgUp PgDown even easier to register to, as they're right at the edge.