MurphyA/hacker-news huggingface dataset:
by agent327 | 2025-08-07 07:27:21+00:00
Can't say that I really have one. Presumably there is some sort of hideous thing they are doing that would outrage me if I knew about it. I'll let you fill me in on that.

I'm not a particularly big fan of massive companies in general; it's a concentration of power that I think is dangerous. At the same time, who do we have to blame? Who ordered absolutely everything of Amazon, who took all those Uber rides, who slept in those airbnb rooms? If we, as consumers, had the good sense to spread our money around a little, we wouldn't end up with companies like that.

I'm not opposed to the ultra-rich, assuming of course that they stayed within the boundaries of the law while becoming so. They worked hard, they made smart choices, and they profited from it. And so did we - otherwise, why give them all that money? What I am opposed to is the outsized power they wield thanks to their fortune, and if that power gets misapplied, I have no problem with breaking those companies up into multiple smaller entities.
by geocar | 2025-08-07 07:28:17+00:00
> think this is mostly solved, or at least greatly mitigated, by using a Slack-style magic sign-in link instead of a code that you have the user manually enter into the trusted UI.

Magic links are better than codes, but they don't work well for cross-device sign-in. What Nintendo does is pretty great: If I buy something on my switch, it shows me a QR code I take a picture of with my phone and complete the purchase there.

I agree it is "mostly solved" in that there are good examples out there, but this is a long way from the solution being "best practices" that users can expect the website/company to take security seriously.

> a. This is already the case as long as you have an email-based password reset flow

I hard-disagree:

If I get an email saying "Hi you are resetting your password, follow these directions to continue" and I didn't try to reset my password I will ignore that email.

If I have to type in random numbers from my email every few days, I'm probably going to do that on autopilot.

These things are not the same.

> anyone who possesses and is logged into the user's phone or laptop (the usual prerequisites for a possession-based second factor) can also get their password.

I do not know what kind of mickey-mouse devices you are using, but this is just not true on any device in my house.

Accessing the saved-password list on my computer or phone requires an authentication step, even if I am logged-in.

I also require second-authentication for mail and a most other things (like banking, facebook, chats, etc) since I do like to let my friends just "use my phone" to change something on spotify or look up an address in maps.

> Most websites should not be in the business of trying to use knowledge-based authentication on their users, because they can't know whether the secret really came from the user's memory or was instead stored somewhere

They can't know that anyway, and pretending they do puts people at risk of sophisticated attackers (who can recover the passkey) and unsophisticated incompetence on behalf of the website (who just send reset links without checking).

> Websites should instead authenticate only the device, and delegate to the device's own authentication system

I disagree: Websites have no hope of authenticating the device and are foolishly naive to try.
by tomhow | 2025-08-07 07:28:18+00:00
The phrase "disregarding basic hygiene measures" is also a rhetorical interpretation that indicates you're more interested in battle than curious conversation.

And just because somebody doesn't complain about you digging up old comments, it doesn't make it OK to do. We can't know in advance how it will make someone feel, nor how they actually feel about it, even if they haven't complained about it.

The central issue is still that you seem to be using HN primarily for ideological battle, which is not what it is for.
by mattgreenrocks | 2025-08-07 07:29:38+00:00
Yes, I think many aren’t realizing this. It is much easier to be lazy, much faster to get something plausible, and not culturally looked down upon. It is also easier to say, “I’ll ask ChatGPT to help me with my main points,” and fall into having it write the essay for you. Changing the defaults (as they were) changes the system, given enough time.

Perhaps the worst aspect of LLMs is they can support us in our “productivity,” when we’re actually trying to avoid the hard work of thinking. This sort of technology-assisted self-delusion feels very similar to social media: “I’m not hiding from life and people, I’m talking to them on Twitter!”
Ask HN: How important is tone in the YC founder video?
by debrajpal | 2025-08-07 07:30:21+00:00
I applied to YC a day before the deadline and shot the founder video (I'm a single founder) - but have been told that I looked slightly robotic in the video by some friends - not as expressive or lively as I normally am or could have been. I guess this also comes in lieu of some YC videos been done really well like a carol singing group (no shade, this is just a close comparison).

But I do want to know how much this matters in the application. I understand one can still resubmit/update the video, so I want to know if it really is a major thing.
by GoblinSlayer | 2025-08-07 07:30:37+00:00
I use paint, because it starts fast so I don't waste my time. When I want complex edit, I use paint.net - because it does everything yet starts million times faster than Krita/Gimp/Photoshop. In fact paint.net 3 already had all the features in 2008, after that it was vapid churn, it's literally impossible to notice the difference.
by nelox | 2025-08-07 07:32:20+00:00
Engadget frames Israel’s surveillance of Palestinian telecommunications as extraordinary, but such practices are common in national security contexts. The U.S. National Security Agency, for example, collects vast amounts of metadata and content under laws like FISA and EO 12333. Surveillance of hostile entities is standard policy in many democracies. See: https://www.washingtonpost.com/world/national-security/nsa-f...

Israel faces real and ongoing threats from groups such as Hamas, which has a record of carrying out attacks on civilians and is officially designated a terrorist organisation by the U.S., EU and others (https://home.treasury.gov/policy-issues/terrorism-and-illici...). Monitoring communications within the territories controlled by such entities is a rational, defensive measure.

As for storage on Microsoft servers, Israel, like many governments, uses U.S.-based cloud services with strict contracts and data protections. The U.S. government itself stores classified data on Microsoft Azure through its government cloud services (https://azure.microsoft.com/en-us/solutions/government/). The implication that Microsoft’s involvement is unusual or illicit is misleading.

Criticism of Israeli policy should account for its security context. The article omits this.
by regandersong | 2025-08-07 07:32:30+00:00
After living in Finland a few years we got a dog, so I was often holding a big bone in my hand and saying the Finnish word for it, "luu". Something felt so correct and ancient about it, like luu is - and could only ever have been - the word that means the concept of a bone. I looked it up and luu is Proto-Finno-Ugric, and one of the oldest words to stick around in the Finnish language.

I have great respect for that first person to shake mammoth bone in another person's face saying "luu". They nailed it.
by 20after4 | 2025-08-07 07:33:33+00:00
The most important pieces, IMO: Asus or Gigabyte motherboards, integrated video (because GPU drivers are usually unstable), Intel Ethernet (avoid realtek), Intel K series unlocked processors - not overclocked, if anything I run them underclocked for cool, quiet and efficient operation. And use quality RAM, that's pretty important. Debian Stable.
by JumpCrisscross | 2025-08-07 07:33:39+00:00
Oh, nobody managed Covid well. The question was capacity to sacrifice for the common good.

New York is a bad example to call out since it was one of the first places to get hit, locked down hard after a delay, and yet came out with lower per-capita deaths and a stronger economy than most red states. (Speaking as someone who lives in one of the reddest states in the union.)

> jailed journalists and destroyed evidence

Not sure we can call anyone out on this anymore.
by artdigital | 2025-08-07 07:36:12+00:00
I tried Jules multiple times during the preview. Almost every week once, and it’s pretty terrible. Out of all the cloud coding assistants, it’s the worst. I honestly thought it was just an experiment that got abandoned and never expected it to actually become a real product, similar to how GH Copilot Spaces was an experiment and turned into Copilot agent.

It does what it wants, often just “finishes” a task preemptively and asking follow ups does nothing besides it rambling for a bit, the env sometimes doesn’t persist and stuff just stops working. For a while it just failed completely instantly because the model was dead or something

Out of the dozen times I tried it, I think I merged maybe one of its PRs. The rest I trashed and reassigned to a different agent.

My ranking

- Claude Code (through gh action), no surprise there

- ChatGPT Codex

- GitHub Copilot Agent

- Jules

I will try it again today to see if the full release changed anything (they give 3 months free trial for previous testers) but if it’s the same, I wouldn’t use or pay for Jules. Just use Codex or GitHub agent. Sorry for the harsh words
by altairprime | 2025-08-07 07:36:29+00:00
I was born with -4, +2 left and right eyes respectively (inherited), and as I get older towards reading glasses age, we have indeed found I get better corrective results from lenses when we tilt my right eye slightly better at distance and let my left eye pick up slightly more of reading.

My depth cohesion barely functions to begin with as a result of one eye being a legally-blind blur past three feet until I was 18, but I can confirm that once you have depth perception, it isn’t going to fail you just for a slight shift in focal efforts.
by OtomotO | 2025-08-07 07:36:36+00:00
All the talk about passkeys boils down to:

A passphrase is basically like a password in the sense that I can lose it, but it's not like a password in the sense that I can actually memorise it. (Or rather, all of them)

I prefer my passwordstore workflow.

I remember two passwords, the rest is kept save for me and unlocked when I need them.

It's not perfect, but it's by far the least worse solution of them all.
Show HN: PECU 3.0 – GPU passthrough and one-command VM templates for Proxmox 9
by Danilop95 | 2025-08-07 07:37:09+00:00
PECU is a single-shell utility that automates GPU passthrough on Proxmox VE 9 and lets you roll back safely.

New in 3.0 • Release Selector script – choose any Stable/Beta/Nightly build • YAML templates to spin up Windows-gaming or Linux-workstation VMs in one command • Full NVIDIA / AMD / Intel support with auto-detect and rollback

## Quick demo – try the Release Selector ``` bash <(curl -sL https://raw.githubusercontent.com/Danilop95/Proxmox-Enhanced...) ``` Pick option 3) v2025.08.06 (Stable) and PECU will self-update and launch.

The core stays GPL-3; a Premium tier (advanced monitoring & cloud integration) is planned for 2026.
by sudohalt | 2025-08-07 07:37:11+00:00
The vast majority of people go to school to be "employable" (or because it's what your "supposed to do"), not to learn. The only thing that matters is your grade, therefore people will optimize for that. With grades being the only thing that matters and time pressure (you must graduate by this time) it's no surprise that students offload their work to ChatGPT. They don't care about learning they care about what is actually valued: their grade and graduating. If those things didn't matter people wouldn't use ChatGPT because their incentive would be to learn. You see this with older people who go back to college or take community college classes, they aren't cheating because there is no incentive to cheat.
by littlestymaar | 2025-08-07 07:37:35+00:00
> In only 5 million years

When economics will be able to give meaningful forecasts just 5 weeks in advance that would be a very massive step forward though.

> since the prediction is invalidated when it itself is released since people change their behavior chaotically in response.

That's exactly the problem the study of all dynamic systems face, including the n-body problem you mentioned above! Yet with proper models you can get very good approximation as you acknowledge yourself.
by nielsbot | 2025-08-07 07:38:15+00:00
> Engadget frames Israel’s surveillance of Palestinian telecommunications as extraordinary, but such practices are common in national security contexts

It's still bad

> Israel faces real and ongoing threats from groups such as Hamas

Israel helped put Hamas in power, FWIW. Maybe instead of stealing Palestians' land, Israel should give them citizenship and voting rights. It's the moral thing to do.

> Criticism of Israeli policy should account for its security context

Criticism of Israeli policy should account for their colonialism and war crimes. It's a moral issue. The rest be damned.
by burnt-resistor | 2025-08-07 07:38:57+00:00
At Stanford in a non-academic IT department, not long after this was published, we had to beg for departmental firewalls to protect laptops, desktops, and "servers" (but not so much for proper servers). Every machine was essentially on the upper-cased then Internet with a globally-routable IPv4 with almost no Layer 2 IP ACLs. That didn't work so well with negligently-vulnerable Microsoft OS and software. The plus side was that Cisco gear was the standard networking stuff and relatively low cost for hardware and feature packs. Curiously, the housing draw (lottery) was run on a BSD box. About half of the department ran on top of FileMaker Pro (FMP), which ran on Xserves. It was the Windows 2000 and XP/2003 Server machines that were the biggest pains.
by aryonoco | 2025-08-07 07:39:18+00:00
Maybe I wasn’t clear.

Yes Linux has had FDE on for a long time, but with traditional FDE using LUKS etc, you cannot use accessories such as a thunderbolt keyboard during the boot process to enter the password to unlock the disk.

Which is a problem if you’re like me and want to just connect your Linux laptop to a thunderbolt dock and use the keyboard attached to it.

A problem which systemd-homed solves.
by geden | 2025-08-07 07:39:25+00:00
Passkeys work very smoothly with Safari and Apple Passwords.

Apple Passwords now sufficiently good to replace 1Password for me and I’m slowly transitioning.

I don’t mind subscription models per se but there was something about subscription for your own passwords that made me refuse to jump the fence when 1Password switched to that model.

Would be a bit faffy if you’re a Chrome user.
by arp242 | 2025-08-07 07:41:39+00:00
There's a "vouch" button on flagged comments and some flagged stories, which will unflag a story. I'm not entirely sure under which conditions it's available on flagged stories (it's almost always there for flagged comments). I think it probably gets disabled after it got flagged → vouched → flagged, or something? You need at least 500 (or more?) reputation points regardless.
by nuthje | 2025-08-07 07:41:57+00:00
Might be worthwile to have an actual conversation with your peers instead of just deleting and running over it. Maybe they thought your level of work was lower than that produced by GPT? Maybe they thought it useful to have filler draft instead of starting from a blank sheet? Maybe they have a sick parent at home and needed to fill it in just to move on? Complaining externally and not communicating is just a very tiny step up from what your classmates are doing.

Also having your entire semester spoiled by some incidents induced by random passersby? Come on, university is for growing up, start.
by 1a527dd5 | 2025-08-07 07:42:01+00:00
I happen to work in this world, and it is much much worse than this.

CAP codes are white space sensitive, they often have leading whitespaces. So you need to store " PINGPONG", but if you store "PINGPONG" then you are going to be a in world of hurt.

Then each manufacturer has their own code (e.g BMW has IVS, Stellantis has titre and so on).

Then there are mapping files between CAP and manufacturer specific code.

Then manufacturers often need to quickly react to new models being available so you get things like overrides, which is literally a string replace "OO" with "XX" and that makes it into a "electric diesel".

Then along side CAP codes, you other industry codes (e.g. Glasses, HPI).

And they _ALL_ need to interact with each other.

It sounds like a fun problem to solve, it isn't. You basically become a glorified data mangler.
by dontlaugh | 2025-08-07 07:42:19+00:00
They never look and feel exactly like native apps, even the ones that try a bit.

Some widget will be rendered wrong, they'll use the wrong font (or even hinting!), right click may not work as expected, they won't use multiple windows correctly, etc.

Even React Native gets some of this wrong, although few use that on desktop.

If you're a user that appreciates consistency on your OS, all of this will stick out and annoy you. And you'll end up using Apple's Mail.app over GMail's UI.
by woadwarrior01 | 2025-08-07 07:42:27+00:00
̶L̶o̶o̶k̶s̶ ̶l̶i̶k̶e̶ ̶y̶o̶u̶’̶r̶e̶ ̶i̶n̶f̶r̶i̶n̶g̶i̶n̶g̶ ̶o̶n̶ ̶t̶h̶e̶ ̶S̶Q̶L̶i̶t̶e̶ ̶a̶u̶t̶h̶o̶r̶’̶s̶ ̶t̶r̶a̶d̶e̶m̶a̶r̶k̶.̶

Edit: Thanks for clarifying that. It'd be great if you can add it to your README, because the name looks very suspicious at first glance. If you have the rights to use it, explicitly mention it.
by rekenaut | 2025-08-07 07:43:04+00:00
The difference is much greater than this. It’s $20/month for a machine that can provide instant answers to any prompt in any topic hundreds of times a month vs $200/assignment that may take days to received and you have to edit yourself if you want a change made.

I think it’s quite clear that most students who are using AI now to generate assignments would not have bought.
by germandiago | 2025-08-07 07:44:19+00:00
How about Javascript? The packages break every couple of seconds, globals, this points to whatever depending on stuff in counterintuitive ways. The for loops are a guess-shitshow depending on what you are doing..

What I like from Python os that I can code fast and put something there that will work, at least for backend and with tools like Poetry.

Another different topic is packaging for other users. That is an entirely different story and way worse than just doing what I do.
by toast0 | 2025-08-07 07:44:25+00:00
Apple may be vertically integrated (depending on how you figure Foxconn and TSMC), but no other machines are.

CPU from Amd/Intel, board from someone else, ram from someone else, storage from another party, OS from yet another party.

Phones are similar, maybe Samsung uses a samsung cpu, a samsung lcd, samsung ram, and samsung storage, and a Samsung build of a Google OS. More integration than Apple. Everyone else though, is still putting parts together from many suppliers.
by rbanffy | 2025-08-07 07:46:00+00:00
The data diode one reminds me of a null-modem cable I once did where I forked the TX line to a second DB-25 so that a server could eavesdrop the data coming from the PABX to the call tracking box. The server would then push it to all stations connected to a socket, where a Java applet would display the proper greeting the support agent would use when the call came in.

I guess I’m dating myself quite a bit.
by Lukas_Skywalker | 2025-08-07 07:46:35+00:00
I have added what I think they call login alias to my account. This blocks logins using the normal account username (which is my public email address), and only allows them via the alias (which is not public and just a random string). Not a single foreign login attempt since I enabled the alias.

You can enable it on account.microsoft.com > Account Info > Sign-in preferences > Add email > Add Alias and make it primary. Then click Change Sign-in Preferences, and only enable the alias.
by growse | 2025-08-07 07:46:39+00:00
> very obviously once Passkeys are everywhere it'll become "we're requiring attestation from approved device bootloaders/enclaves"

This is far from very obvious, especially given that Apple have gone out of their way to not provide attestation data for keychain passkeys. Any service requiring attestation for passkeys will effectively lock out every iPhone user - not going to happen.
by devilzhong | 2025-08-07 07:46:43+00:00
Built in just two weeks, interm.ai is a cross-platform “Cluely-style” AI side-kick for interviews and sales calls.

Electron desktop app ships as one code-base for macOS, Windows and Linux. A tiny Swift CLI grabs lossless system audio + screenshots on macOS; Windows uses Chromium loopback.

Mic and speaker are captured as separate streams, so Google Speech-to-Text (Deepgram later) and GPT-4o can label the interviewer vs. the user in real-time.

UI suggestions arrive in < 500 ms.

Landing page lives on Bolt.new; demo videos were generated automatically with Claude Code.

Full build notes, diagrams and open-source snippets in the post.
by pavlov | 2025-08-07 07:46:59+00:00
The other “uu” words in Finnish feel ancient too. When Finnish children are asked to come up with rhymes, these are often the ones they suggest:

luu = bone

kuu = Moon

suu = mouth

muu = other

You can practically imagine the apes in the first act of the movie “2001” coming up with these words to describe their environment.

(The monolith could be a “muu muu”, the Other Other, to distinguish it from the basic “muu” of the other tribe.)
by burnt-resistor | 2025-08-07 07:48:00+00:00
> The point isn't to resolve user problems, it's to reduce the number of people taking up the time of support agents. Letting people vent in a pseudo-official channel accomplishes that. Whenever something gets resolved that was being fixed anyway, because the "industry partners", enterprise and high level customers wanted it, they can mark an issue as resolved, and generate the appearance of responsive service.

Yep. It's like Whitehouse "petitions". Time-wasting tarpits for the unaware.

> It's like standing up complex automated phone menus, you're going to frustrate a certain number of callers into giving up, and reduce the overall number of customers you have to interact with.

The point of pointless troubleshooting procedures, long forms, long wait times, denials, and inconvenience is to monetize misery and create a maximally-negative conversion funnel. Ask any UnitedHealth or airline CEO.
by JoelJacobson | 2025-08-07 07:48:55+00:00
I'll add comments to this thread with Github projects that I can find by searching for "postgres listen/notify" on Github.

https://github.com/graphile/worker

// Line 535 in src/main.ts client.query('LISTEN "jobs:insert"; LISTEN "worker:migrate";')

Every worker pool seems to listen on the same shared channels: jobs:insert - all workers get notified when new jobs are added worker:migrate - all workers get notified about database migrations