MurphyA/hacker-news huggingface dataset:
by memsom | 2025-08-26 13:16:37+00:00
Ah - you are conflating Germanic for German. Germanic is not equivalent to German. German (deutsch) is a national language, Germanic is a language family. German belongs to this family, but it is not the root of all Germanic languages. English and German sit in the West Germanic branch, the East Germanic was mostly Gothic (dead) and the North Germanic languages are Swedish/Danish/Norwegian/Icelandic/Faroese and various other non national languages. English is a West Germanic language, but it was massively influenced by Old Norse (North Germanic) and various Frenches (and Latin/Greek in technical terms) as well as probably the native British languages somewhat in grammar (the present continuous tense in English also happens in Welsh, and is not very Germanic.)

So - Window is Germanic. It comes from Old Norse 'vindauga', and the modern Norwegian Bokmal version is 'vindu'[1].

The German word for Window comes from Latin [2].

[1] https://en.wiktionary.org/wiki/vindu

[2] https://en.wiktionary.org/wiki/fenster
by xnorswap | 2025-08-26 13:16:38+00:00
I think the author has missed the point of the 47 day expiry.

It is short enough to force teams to automate the process.

You're not supposed to be human-actioning something every month.

But yes, it'll be a huge headache for teams that stick their head in the sand and think, "We don't need to automate this, it's just 6 months".

As the window decreases to 3 months it'll be even more frustrating, and then will come a breaking point when it finally rests at 47 days.

But the schedule is well advertised. The time to get automation into your certificate renewal is now.

In the real world however, this will be a LOT of teams. I think the organisations defining this has missed just how much legacy and manual processes are out there, and the impact that this has on them.

I don't think this post makes that argument well enough, instead trying to argue the technical aspect of ACME not being good enough.

ACME is irrelevant in the face of organisations not even trying, and wondering why they have a pain every 6 weeks.
by ChrisMarshallNY | 2025-08-26 13:16:49+00:00
Unfortunately, this is pretty much exactly the view of many pros. Time is money, and they will shave off things that may cost time (sometimes, that's Quality).

I mentioned that they removed the safety guards, but I never said it was good. Myself, I would not do that. I enjoy having some of the safety features that modern languages offer. I can work very quickly, indeed. I probably work faster (and safer) than I ever did, because of this.

A big danger of seasoned pros, is that they get casual with extremely dangerous things, and remove the safety stops, in order to accelerate their workflow.

One day, they are too casual, and you end up with a smoking pair of shoes on the floor.
by m000 | 2025-08-26 13:16:50+00:00
Realpolitik would be for Europe to understand that geography isn't going to change. Russia will always be your next-door neighbour. USA will always be an ocean away. Also, Putin is not immortal.

So, your long game should be to forge amicable relations with your next-door neighbour, rather betting everything in your relationship with your manipulative friend on the other side of the pond. In the meantime, you should also become self-dependent.
by quesera | 2025-08-26 13:16:52+00:00
> What I didn't consider is that "being extra careful" can change in an instant. One little bump in balance, one little fleeting distraction, one little change of thought as you are mid-task and don't immediately stop to re-evaluate and you blow right on out of your after envelope.

This is a great summary.

Your best-laid plans (with power tools, motor vehicles, gravity, etc) can be completely invalidated with a single twitch (possibly not even your own). If you're operating at the margins of safety, there is no room for that.

And it takes experience to know where you are on the safety spectrum! But even that is sometimes inadequate.

For example, I love my radial arm saw. It's my favorite tool for cross-cutting wood. It's an old Craftsman, from the 1970s or so. I bought it from a furniture manufacturer who used it as an infrequently-used backup tool for ad hoc manual fixups, since new (they had big industrial machines for ordinary manufacturing operations). It was very close to new spec when I bought it, but I've tuned it back to perfect. All of the safety guards (the minimal ones that existed in the 1970s) except the dust hood were removed before I bought it.

Anyway, I love it. But they don't really sell RAS's at the consumer level any more, because people hurt themselves with them too frequently. Table saws are also quite dangerous, apparently. Circular saws are supposed to be the safest option, even more so than miter saws.

So I have a lot of experience with all of these tools, and with my RAS specifically. I think I know where I am on the safety spectrum, which I believe to be acceptably safe. But the statistics say otherwise, and one of us must be wrong. I don't think it's me, and my ten fingers attest to that belief.

Right? Or maybe wrong! I think about this every single time I use the RAS, which is probably a good thing. I guess we'll see.
by deaddodo | 2025-08-26 13:17:19+00:00
If x86 just officially said “we’re cutting off 32-bit legacy” one day (similar to how Apple did), they could toss out 95% of the crap that makes them power inefficient. Just think of the difference dropping A10 offered for memory efficiency.

“Modern Standby” could be made to actually work, ACPI states could be fixed, a functional wake-up state built anew, etc. Hell, while it would allow pared down CPUs, you could have a stop-gap where run mode was customized in firmware.

Too much credit is given to Apple for “owning the stack” and too little attention to legacy x86 cruft that allows you to run classic Doom and Commander Keen on modern machines.
by Rohansi | 2025-08-26 13:17:36+00:00
> It does, but if you look at the mainboard manuals of computers, usually it's 32 lanes of which 16 go to the GPU slot and 16 to the southbridge, so no storage directly attached to the CPU. Laptops are just as bad.

Why would the southbridge need a whole 16 lanes? That's 32 GB/s of bandwidth (or 64, if PCIe 5). My (AMD) motherboard has the GPU and two M.2 sockets connected directly to the CPU and it's one of the cheaper ones. No idea about my laptop but I expect it to be similar because it's also AMD. Intel is obviously different here because they're more stingy with PCIe lanes.

There should be no reason for a laptop with only an integrated GPU to dangle storage off the southbridge. They take at most 4 lanes and can work with less.

> Indeed, but the difference in performance between an 8GB Windows laptop and an 8GB M-series Apple laptop is noticeable, even if all it's running is the base OS and Chrome with a few dozen tabs.

Any Windows laptop that comes with 8GB of RAM is going to have a crappy SSD included because those are always built to be cheap, not performant. It could even be a SATA SSD (500MB/s bandwidth max). Most likely they'd come with a processor significantly slower and a decent chance the RAM would also be single channel, too.
by ocdtrekkie | 2025-08-26 13:17:40+00:00
It used to be only a large enough organization needed this, but smaller organizations could slap their PKI wildcard on everything. Between the 47 day lifetime and the removal of client authentication as a permitted key usage of PKI certs, everyone will need a private CA.

Active Directory Certificate Services is a fickle beast but it's about to get a lot more popular again.
by dale_glass | 2025-08-26 13:18:12+00:00
I believe the low maximum lifetimes are becoming a thing because revocation failed.

CRLs become gigantic and impractical at the sizes of the modern internet, and OCSP has privacy issues. And there's the issue of applications never checking for revocation at all.

So the obvious solution was just to make cert lifetimes really short. No gigantic CRLs, no reaching out to the registrar for every connection. All the required data is right there in the cert.

And if you thought 47 days was unreasonable, Let's Encrypt is trying 6 days. Which IMO on the whole is a great idea. Yearly, or even monthly intervals are long enough that you know a bunch of people will do it by hand, or have their renewal process break and not be noticed for months. 6 days is short enough that automation is basically a must and has to work reliably.
by account42 | 2025-08-26 13:18:47+00:00
> 1) The the microswitches go bad after a couple years. It's possible to replace them, but it's tedious and you run a very real risk of damaging the PCB (as I have already done).

I have the same problem (with a different mouse model/manufacturer). Sometimes you can even "repair" the switches without de-soldering them by opening up the case and bending the metal contact a bit. I put "repair" in quotes because the repaired switches don't seem to last as long as new ones but at least it's easy to do and doesn't need any tools besides a screw driver.
Show HN: SQLite Extensions Guide
by marcobambini | 2025-08-26 13:19:06+00:00
We’ve just released an open-source project called sqlite-extensions-guide (https://github.com/sqliteai/sqlite-extensions-guide), and we’re looking for contributors.

The goal is simple: become the go-to documentation on how to load and use SQLite extensions across different languages, frameworks, and operating systems.

SQLite is everywhere, and extensions unlock a huge amount of power (custom functions, new data types, vector search, cryptography, etc.). But figuring out how to actually load them varies a lot depending on your environment — C, Python, Go, Node.js, iOS, Android, Linux, Windows, macOS, each has its own quirks.

We’ve already added working examples and OS-specific instructions, but there’s a long way to go. We’d love contributions from developers.
by BlackFly | 2025-08-26 13:19:07+00:00
Getting more than needed does not imply that something is needed at all. You can live your whole life without needing to eat a Lychee, but if you eat 1000 of those that is clearly more than needed. A person who never ate a lychee maybe cannot put it into perspective and might suggest that wanting a single lychee is greed, but most people wouldn't find it difficult to see that perspective as extreme. Change lychee for cocaine and you suddenly start getting a different balance.

Context and our norms is what determines it.
Show HN: I built Reddimon to track link conversions instantly
by Davidon4 | 2025-08-26 13:19:10+00:00
Hi Hacker News,

I’m David, and I built *Reddimon* because I kept wasting time guessing which marketing channels actually bring users.

Reddimon lets you create *custom links* for tweets, Reddit posts, or comments, then instantly see which ones bring visitors or signups. You can group links into collections (e.g., “Reddit posts” or “Twitter DMs”) to track performance across campaigns.

It’s lightweight, fast, and designed for solo founders or early-stage startups. I’d love to hear:

- Does this approach make sense for tracking early growth? - Are there features you’d find essential in this kind of tool?

Check it out here: [www.reddimon.com](https://www.reddimon.com)
by margalabargala | 2025-08-26 13:19:17+00:00
I think this is actually slightly incorrect.

> The bug was that "15 days" in (2) accidentally became 15 minutes

My understanding was that the 15 days became zero. If 15 days became 15 minutes, then depending on implementation it could run 30 minutes of first run? Or could be identical. Hard to know.

But, my reading is that the 15 day timer broke, allowing the other timer to take over, not that days became minutes.
by b112 | 2025-08-26 13:19:20+00:00
I've spent 15+ minutes searching, and the digicert (linked to in the article), and other cert providers all reference a vote on "Multi-Perspective Issuance Corroboration (MPIC)".

Everywhere I've read, one "must validate domain control using multiple independent network perspectives". EG, multiple points on the internet, for DNS validation.

Yet there is not one place I can find a very specific "this is what this means". What is a "network perspective", searching shows it means "geographical independent regions". What's a region? How big? How far apart from your existing infra qualifies? How is it calculated.

Anyone know? Because apparently none of the bodies know, or wish to tell.
by baggachipz | 2025-08-26 13:19:44+00:00
Thank you! Apple is just as evil as the next company. The difference is in how they make their money and what their incentives are.

Google has chosen the path of duping their customers by selling them to the highest bidder. That's their business model across the board.

Apple has chosen to sell devices at a significant markup with the inherent agreement that they won't sell their customer to the highest bidder. After building trust in that arena for years, it wouldn't take much to destroy that credibility. So far, they know this. I'm getting concerned about them starting to plug ads into their core applications, so only time will tell if they get MBA'd to shit.
by MykhailoZ | 2025-08-26 13:19:57+00:00
Hi HN,

I often found myself spending hours setting up the same AWS infrastructure whenever I wanted to test or launch a new Spring Boot project. It always felt repetitive:

- Wiring Terraform for DynamoDB, Lambda, API Gateway - Configuring IAM roles and permissions - Setting up GitHub Actions for CI/CD

So I built a small Starter Kit that automates this. With it, you can go from zero to working Spring Boot app on AWS in about 3 minutes.

I’d love your feedback:

Does this solve a real pain point for you? What would you add or change? Which AWS services would be most useful to integrate next?

Thanks! I’ll be here in the comments to answer questions
by abdrehman | 2025-08-26 13:20:03+00:00
Hi HN,

I just published a blog post about an idea I've been developing to solve a workflow problem I face as a developer juggling multiple clients.

The short version is that using full VMs for each client is resource-heavy and clunky (no notifications, hardware issues), but it provides great isolation.

My post outlines a concept for a "productivity-focused" OS inspired by Qubes, but built on lightweight LXC system containers. The goal is to get the strong isolation benefits without the performance overhead, using a custom desktop environment to handle things like unified notifications and managed hardware access.

I'd love to get this community's feedback. I'm particularly interested in your thoughts on these questions:

1. Does this problem resonate with other freelancers, consultants, or multi-project developers? 2. Is using LXC the right approach, or is there a better technology for this? 3. What's a must-have feature for you if a system like this existed?

Thanks for taking a look!
by cHaOs667 | 2025-08-26 13:20:04+00:00
It's not Ruby, it's your code... :D

class Mess

OUTPUTS = { 1 => ->(i) { i.odd? ? "odd" : "even" }, 2 => ->(_) { "trying" }, 3 => ->(_) { "other" } }.freeze def chaos(x) return puts "negative" unless x.positive? [1, 2, 3].each do |i| puts OUTPUTS[i]&.call(i) || "other" end end

end
by nnitiwe | 2025-08-26 13:20:13+00:00
This tutorial walks you through building a -- that transforms CSV data into insightful visualizations based on natural language queries.

You’ll learn how to leverage OpenAI’s structured outputs with Pydantic for consistent results, use the OpenAI Files API for seamless data uploads, employ Pandas for robust data analysis, and create stunning charts with Plotly.

Using the (, ), we’ll build an agent that answers questions like “ ?” by profiling data, recommending charts, and generating visualizations.
by terminalshort | 2025-08-26 13:20:35+00:00
This is happening in the US, but only in the case of US domestic politics. The relevant tech companies actually provide an incredibly free and politically uncensored service in most of the world simply because they don't give a damn about politics in country X and the politicians in those countries don't have the leverage over them to make them care like US politicians do. Censoring costs money, and these companies would rather not do it. Citizens of many other countries, like Brazil, are the beneficiaries of this situation.
by letaem77 | 2025-08-26 13:20:39+00:00
This is my way to do it:

1. Archive whole repository into single text file with Repopack: https://github.com/yamadashy/repomix

2. To reduce token, compress the file with LLMLingua-2: https://github.com/microsoft/LLMLingua

(fewer token = more context can be given to LLM = LLM better understands your repository)

3. Copy & Paste the compressed archive text contents as a context, into ChatGPT’s input field as-is, or local LLMs.

4. Ask the LLM for documentation generation. Like, “this is a repository source code. given context, generate a ‘table-of-content’.” Then you will get a ToC. If it looks good, you can ask for generating first chapter. And keeps going until you finish whole documentation.

If you are trying to document Typescript/Javascript codebase, You may use bundlers like esbuild for step 2, which will beneficial for token reducing.

If you interested in step 2’s LLMLingua-2, check out my Typescript port that can be ran without no installation at: https://atjsh.github.io/llmlingua-2-js/
by sgc | 2025-08-26 13:20:54+00:00
Amazon was hopeless even with the apps, because they had their hooks into things even worse than google. They are shameless. Most other tech companies large enough to even try would be as bad or worse.

All that type of money went to llms, who is going to spend that on a phone os now? Not who should, but who actually would? They gave up on browsers, they gave up on mobile oses. There is a real risk that the next step is the US gov takes X% of google instead of enforcing antitrust in a year or two.

Linux phones will never take off because banking and media/drm apps, and by extension social media apps, will just boycott them and kill it off. The tone has been set, this comment applies to any major player trying to break into the mobile market moving forward.

This is honestly very bleak news.
by j_w | 2025-08-26 13:21:04+00:00
I think the issue is how people view their operating system then. If you think an operating system (which for the sake of this I'll allow to mean the distro for linux) should just install and "work" with no configuration needed, then linux on abnormal hardware is not for you. Whether or not a small amount of effort to search for solutions to a problem or to learn more about system configuration being "worth the time" is up to the reader to decide.
by Jeslijar | 2025-08-26 13:21:07+00:00
Why is a month's expiration better than a year or two years?

Why wouldn't you go with a week or a day? isn't that better than a whole month?

Why isn't it instead just a minute? or a few seconds? Wouldn't that be better?

Why not have certificates dynamically generated constantly and have it so every single request is serviced by a new one and then destroyed after the session is over?

Maybe the problem isn't that certificates expire too soon, maybe the problem is that humans are lazy. Perhaps it's time to go with another method entirely.
by scott_w | 2025-08-26 13:21:11+00:00
> Historically they are rarely very good at being able to tell how the next war is going to be fought.

Is the fact they aren't good at knowing how the next war will be fought because they're bad at it or because that's a hard problem?

Put more specifically: if you were to fight that next war, do you think you'd do a better job than Admiral Sir Tony Radakin or General Randy George?
by jraph | 2025-08-26 13:21:16+00:00
The decreasing validity time pushes for the process to be automated, and automation reduces the possible human errors.

Many things need to be run and automated when running stuff, I don't understand what makes SSL certificates special in this.

For a hobbyist, setting up certbot or acme.sh is pretty much fire and forget. For more complex settings well… you already have this complexity to manage and therefore the people managing this complexity.

You'll need to pick a client and approve it, sure, but that's once, and that's true for any tool you already use. (edit: and nginx is getting ACME support, so you might already be using this tool)

It's not the first time I encounter them, but I really don't get the complaints. Sure, the setup may take longer. But the day to day operations are then easier.
by rsynnott | 2025-08-26 13:21:21+00:00
Yeah, it's a very odd proposition. Even if it were guaranteed not to screw it up (and of course in reality LLMs are experts in screwing stuff up), this still doesn't seem like an appealing idea.

I could see some charm to something to go through intentionally annoying and confusing checkout processes, booking a Ryanair flight, say. I'm fairly sure that an LLM would end up falling for their car hire/insurance/whatever upsells, tho. There's a reason that that checkout process is annoying.
by MarkusWandel | 2025-08-26 13:21:36+00:00
Might it simply be that people find the app for a use they have, right now? When it works great and solves your immediate problem, what's a few bucks?

Whereas if you have a full function trial period, it solves your immediate need for free and then you already have this mentality "this functionality should be free". Maybe even uninstall the app, erase all its data, and then register for a new trial period next time you need it etc.
by gwbas1c | 2025-08-26 13:21:48+00:00
With Azure-hosted sites, I find it's significantly easier to have Microsoft perform all certificate management for us. All we do is verify that we own the domain, and then they do all the certificate management for us.

When I saw the 47-day expiration period, it made me wonder if someone is trying to force everyone onto cloud solutions like what Azure provides.

The old geezer in me is disappointed that it's increasingly harder to host a site on a cable modem at home. (But I haven't done that in over two decades.)
by Avamander | 2025-08-26 13:22:01+00:00
There's two sides to this, if it's not a public service, why should it have a certificate from a public CA? If your risk assessment says that you do not need MPIC, then just don't do that, yourself.

The second side is that if it's so tedious to approve and install, use solutions that require neither. Surely you don't need to have some artisanal certificate installation process that involves a human if you already admit that stricter issuance reduces no risk of yours. Thus, simplify your processes.

There are automated solutions to pretty much all platforms both free and paid. Nginx has it, I just checked and Apache has a module for this as well. Could the author write a blog post about what's stopping them from adopting these solutions?

In the end I can think of *extremely* few and niche cases where any changes to a computer system are actually (human) time-consuming due to regulatory reasons that at the same time require public trust.
by realitydrift | 2025-08-26 13:22:29+00:00
That’s a fair point. Words themselves are arbitrary symbols, but meaning isn’t only in the symbols. It’s in the intent behind them and the use they’re put to.

For example, if I say “the meeting is at 3pm” and a model rewrites it as “planning sessions are important,” the words are fine, the grammar is fine, but the purpose (to coordinate time) has been lost. That’s the gap I’m calling fidelity: whether the output still serves the same function, even if the surface form changes.