MurphyA/hacker-news huggingface dataset:
by orthoxerox | 2025-08-29 08:01:34+00:00
Pushing certs to end user devices is simple. First you create your own national CA. Then you make all government services use TLS certificates signed by the national CA. Then you make phone vendors preinstall the root cert of the national CA into the trust store if they want to sell them in your country. Then you make your ISPs buy and install MITM appliances.
by ramesh31 | 2025-08-29 08:02:22+00:00
>The tradeoff of higher velocity for less enjoyment may feel less welcome when it becomes the new baseline and the expectation of employers / customers.

This is precisely the question that scares me now. It is always so satisfying when a revolution occurs to hold hands and hug each other in the streets and shout "death to the old order". But what happens the next morning? Will we capture this monumental gain for labor or will we cede it to capital? My money is on the latter. Why wouldn't it be? Did they let us go home early when the punch card looms weaved months worth of hand work in a day? No, they made us work twice as hard for half the pay.
by sim7c00 | 2025-08-29 08:02:46+00:00
well, i dont use it for code. i tried, really did, but it keeps getting into infinite loops, or crashing itself trying to get out of kernel-level errors by typecasing an error_code to a datastructure it expects -_- (wtf??)

also, last week i had to sit through 8 hours code auditing of 2 parsers... i mean. 2 parsers that should of taken like 20 minutes to review... it was a complete and utter shitshow. functionally worked, for that one test-case -_-. the 2 parsers had a nice 'framework' around it or whatever. a webserver to run them, because why not make a webserver if you can... -_- and each parser as a module in the framework, but they both were architected differently :S and had special handling in the framework for each as a result.. rather than cleaning up the interface for the module -_-.

clearly just LLM trying to do the 1000 monkeys approach to a passed test... i swear i might have been quicker just to re-write the entire thing, but u know, wanted to see if it was even possible to decypher the mess it produced. well, it was. and now i want to live in a hole in the ground somewhere away from civilization.
by nness | 2025-08-29 08:03:44+00:00
It's a real shame too, I had purchased a DS723+ before the announcement and its a great little machine. The I can see why the Synology experience was such a draw for so long in the consumer space.

The recent HDD drama is death for Synology's consumer appeal, but I imagine they'll shape-out a mid-market/small-business segment for themselves.
by mulholio | 2025-08-29 08:03:48+00:00
It’s certainly been my experience that page sizes should be bigger than you initially expect. Paginated endpoints are typically iterated all the way through meaning you’re going to return that data anyway. May as well save the additional overhead from multiple requests.

Not implementing pagination at the outset can be problematic, however. If you later want to paginate data (e.g. if the size of your data grows) then it’s going to be a breaking change to implement that later. Big page sizes but with pagination can be a reasonable balance.
by omnimus | 2025-08-29 08:04:01+00:00
Perpetual vacation? Wow that would be great that is surely aim of every society. Unfortunately afaik majority people in europe are employed (75.8% of population) and thus have maybe 5 weeks (4 weeks minimum) of vacation. In USA the employment ratio is 59.6% so you could say that there are less people working in USA. But we all know its probably just misleading statistics because every company in US is trying not employ people but have them on some zero hour contract.

This fantasy of people not working just doesn't work. Who do you think stocks your supermarket, delivers your packages, bakes your bread, fixes your car? Are you saying it's bad that these people still manage have some social life and some fun? Should they be closed in their tiny increasingly overpriced flats so they don't polute the streets?

You have to be living in different tier of society but around me everybody taking second/odd jobs because their salaries froze 5 years ago didn't even keep up with inflation. Only people i know that are doing well are over 45 who became landlords by buying flats when it was possible.
by drawfloat | 2025-08-29 08:04:23+00:00
They do, but unlike what the OP claims, you do not need to age verify your site just because you added a social element. If the purpose is not to distribute pornography/other age restricted materials and you are able to moderate the site (ie: are not facebook scale), this is not required.

The law sucks but the misinformation around it is getting out of hand.
by orwin | 2025-08-29 08:04:52+00:00
Yes, the flight to Varenne was the first crack between Louis XVI and the national assembly, but constitutional monarchy with him at the head was still the preference amongst most of the assembly (the first constitution confirm that).

What did him was that he declared an unjustified war on his in-laws, starting an Alliance game that put France alone against 6 countries and kept vetoing any mobilisation order. Les Tuileries got invaded by rogues elements, and letters that prove that the king was selling the army (describing future troop movement to the Austrians) were found. That treason basically started the Terror, and pushed the assembly to vote on declaring the republic (and in the end killing the king. It was a 60/40 vote if I remember correctly)
by lvnfg | 2025-08-29 08:05:01+00:00
Yes, work will expand to fill all your available hours due to unaligned incentives between who does the work (the SWE in this example) and who decide the quantity, timeline, and cost of work.

If the SWE can finish his work faster, 8x faster in this case, then backlogs will also be pushed to complete 8x faster by the project manager. If there are no backlogs, new features will be required at 8x faster / more by sales team / clients. If no new features are needed, pressures will be made until costs are 8x lower by finance. If there are no legal, moral, competitive, or physical constraints, the process should continue until either there’s only a single dev working on all his available time, or less time but for considerably less salary.
by mike_hearn | 2025-08-29 08:05:04+00:00
From digging in a bit, it sounds like originally MitID was meant to be app only and it was only after pressure from a lobbying group that they relented and allowed a TOTP token.

https://www.dr.dk/nyheder/seneste/mitid-kan-digitalt-udelukk...

So my guess is that this is not because they think TOTP is secure enough but rather due to the political aspects of it being centrally run by the government.

The security argument is pretty straightforward and I guess you know it already, because as you say, TOTP is vulnerable to phishing (unless you use some of the anti-bot tech I mentioned elsewhere but it's heuristic and not really robust over the long term). Whereas if you do stuff via an app, not only can malware not authorize transactions, but it can't view your financial details either - privacy being a major plank of financial security that can't be reliably offered via desktop browsers at all, but can via phones.

The alternative you propose is basically a secure hypervisor. Such schemes have been implemented in the past, but it's not ideal technically. For fast payment authorization via NFC, this is actually how it works, which is why when you touch a phone to a terminal to pay for something you don't see any details of the transaction on the display itself, just an animation. The OS doesn't get involved in the transaction at all, it's all handled by the embedded credit card smartcard which is hard-wired to the NFC radio. The OS gets notified and can send configuration messages, but that's about it.

For anything more complex the parallel world still needs to be a full OS that boots up, have display drivers, have touchscreen drivers, text rendering, a network stack, a way to update that software, etc. You end up with a second copy of Android and dual booting, which makes memory pressure intolerable and the devices more expensive. But it's hard to justify that when the base phone OS has become secure enough! It's already multi-tasking and isolating worlds from each other. There are no users outside of HN/Slashdot who would find this arrangement preferable. And as your concern is not fully technical, it's not clear why moving the hardware enforcement around a bit from kernel supervisor to hypervisor would make any difference. This isn't something that can be analyzed technically as it all seems to boil down to fear over the loss of ad blocking.
by hnarn | 2025-08-29 08:05:14+00:00
As far as I know, BBR3 is not in the mainline Linux kernel, so obviously it will not be in Debian by default.

From https://groups.google.com/g/bbr-dev/c/i-sZpfwPx-I/m/0jmNry0A... :

> To make sure we're all on the same page: currently the TCP BBR code in Linux is BBRv1. We are working on getting BBRv3 upstream into Linux TCP.

> BBRv1 is definitely not ready to be the default on any Linux distribution. Whether BBRv3 is ready to be a distribution default is arguable.
by okkdev | 2025-08-29 08:08:25+00:00
The reason it's not in the language tour is because it's not part of the language itself. There's no async specific syntax or feature in the language itself. They all depend on the target since gleam can compile to erlang or javascript. If you compile to erlang you can use gleam_erlang and gleam_otp to leverage OTP. If you compile to javascript you use gleam_javascript and have to work with promises. It's definitely not just an afterthought and gleam_otp recently had a big 1.0 update.
by jcattle | 2025-08-29 08:08:25+00:00
The US tends not to regulate what kind of services a bank has to offer to its customers. A bank doesn't need to offer any kind of transfer services to be a bank. As far as I know you can legally be a bank and only offer cash deposit and withdrawal.

The EU has PSD (Payment Services Directive) and PSD2 which stipulate what kind of transfers have to be possible to customers.

Because of that the US just has a bunch of startups which offer services that unify the payment landscape. The alternatives at a bunch of banks is still that you need to write checks.
by articsputnik | 2025-08-29 08:09:11+00:00
I have one too, 2013 I guess. I just use it as storage (samba-drive I guess) connected to my mini-computer (hp800) that runs hp800. I do occasional backups via rsync. It works. I also store some images etc. that I don't use there. But I only run a RAID, so I don't have the NAS backuped as well. I still have them in my old macbook backups. But not sure how to properly solve that dilemma of backing up a very large multiple TBs NAS, as I can't afford many more disks and another server to run just for that. If you have any a simple solution, I'm all ear :)
by manmal | 2025-08-29 08:09:53+00:00
I mean you can stay in VSCode for most activities if you hate Xcode that much (I can relate btw). Plugins like Sweetpad make this possible. My approach now is to develop all logic in small Swift packages and run swift test in VSCode (or Claude Code), so I only absolutely need Xcode for debugging and building releases. Every once in a while I try SwiftUI previews, but those are usually broken anyways.
by JimDabell | 2025-08-29 08:10:06+00:00
Also see:

> Finding and exploiting 20-year-old bugs in web browsers

> Although XSLT in web browsers has been a known attack surface for some time, there are still plenty of bugs to be found in it, when viewing it through the lens of modern vulnerability discovery techniques. In this presentation, we will talk about how we found multiple vulnerabilities in XSLT implementations across all major web browsers. We will showcase vulnerabilities that remained undiscovered for 20+ years, difficult to fix bug classes with many variants as well as instances of less well-known bug classes that break memory safety in unexpected ways. We will show a working exploit against at least one web browser using these bugs.

— https://www.offensivecon.org/speakers/2025/ivan-fratric.html

— https://www.youtube.com/watch?v=U1kc7fcF5Ao
by hkpack | 2025-08-29 08:10:39+00:00
Yeah, that’s not what happened.

The Wikipedia’s article I linked in the previous comment has a good overview.

Also the list of famines worldwide [1] does’t confirm your statement with famine every 10 years. And especially there were very few famines with millions of dead from hunger before on the eastern eu territory - the one in 19xx was man-made in its entirety.

1. https://en.wikipedia.org/wiki/List_of_famines
by nikanj | 2025-08-29 08:10:50+00:00
It's the circle of life:

1) Established players are all overpriced and focus on value extraction, not customer service

2) By actually helping your customers and providing good solutions at an affordable price, you can quickly grow to be a big player in the space

3) Now that we are a big player, we could be making big bugs by squeezing the customers who can't easily switch away

4) Established players are all overpriced and focus on value extraction, not customer service
by freitzzz | 2025-08-29 08:11:52+00:00
Hi, author here

The issue isn't socially interacting with any of the users, I wish that was the major pain point. The issue is having to handle e-mails, issues, feature requests, code-reviewing, continuous development, acquiring new users (otherwise project will stale) - all of this after a long day of work and balancing other important issues "non work related".
by bryanrasmussen | 2025-08-29 08:11:55+00:00
What are you talking about? There are many maintained implementations of XSLT at various levels compliance and versions.

The problem is libxslt is built on top of libxml, and libxml is being used for a bunch of stuff through browsers etc. And that it is a C implementation which most others aren't, actually I say most but not sure if there is a C implementation other than libxslt.
by vrighter | 2025-08-29 08:12:44+00:00
The so-called "guardrails" used for LLM are very close to expert systems, imo.

Since the landscape of potentially malicious inputs in plain english is practically infinite, without any particular enforced structure for the queries you make of it, means that those "guardrails" are, in effect, an expert system. An ever growing pile of if-then statements. Didn't work then, won't work now.
by bayindirh | 2025-08-29 08:13:04+00:00
I'm looking for a NAS for a very long time (budget, size, network, etc.), but when I was ready to pull the trigger on a Synology, they did this, and I dodged a bullet.

Long story short, I'll be buying an ASUSTOR AS6804T, and if I don't like the software, I'll just install TrueNAS on it. It's not only officially supported, they have a full length video showing the process. They don't provide tech support, but eh.

Icing on the cake? The eMMC storing the original firmware sits on its own USB port, so you disable that port, and both disable and protect the firmware from being overwritten.

If you want to return to original firmware, enable the port, remove the TrueNAS SSD, and viola!
by theshrike79 | 2025-08-29 08:15:40+00:00
A Jonsbo case and Unraid: https://nascompares.com/2023/09/01/jonsbo-n2-nas-build-with-...

The Jonsbo cases are pretty compact and QNAP/Synology-ish.

As for Unraid: You pay for it, so you're the customer and can expect some kind of support. It's also pretty damn stable and supports casual "I'll just add this drive to get more space" usage compared to ZFS stuff.
by mjg59 | 2025-08-29 08:15:53+00:00
Synology are bad at technical restrictions. That doesn't help most people, and it's not any sort of defense, but anything they strongly attempt to impose here is going to fail. It took me an evening to break the protection they imposed on another layer, and a chunk of that evening was me and a bottle of mezcal and just writing INSERT statements into sqlite, we are really not talking about extreme competence.

But! That doesn't matter, most users are never going to be able to do that themselves, and DMCA protections potentially prevent anyone sharing knowledge of how to do so without putting themselves at risk. The truth is that vendors can, under US law, threaten anyone who tells someone how to make the device they bought work properly with federal offences. Buy something else instead.
by wraptile | 2025-08-29 08:16:29+00:00
Really enjoyed this and Python is basically what saved my software career.

Education system in Lithuania had turbo pascal in high-school and mostly java and c/c++ in university and while I really loved pascal in high-school the switch to Java was so jarring - "people really enjoy this? maybe I should do something else" is what I thought during my first year of college. Luckily Python started to become really big online and was such a joy to use and be a part of the community it really cleared up this notion that programming sucks. To this day this experience has stuck to me when approaching any new activity - is there a Python here somewhere that would unsuck this?

I'm quite a polyglot these days and will write Java if needed but Python is still my daily driver and it just feels right. If I'm doing something 10 hours a day, I'd like to feel good while doing it and that's exactly what Python delivers.
by creesch | 2025-08-29 08:16:55+00:00
> The trick is not telling anyone you spent an hour to do 7 hours of work.

I wish that the hype crowd would do that. It would make a for a much more enjoyable and sane experience on platforms like this. It's extremely difficult to have actual conversations subjects when there are crowds of fans involved who don't want to hear anything negative.

Yes, I also do realize there are people completely on the other side as well. But to honest, I can see why they are annoyed by the fan crowd.
by foxrider | 2025-08-29 08:17:31+00:00
Call me selfish or old-fashioned, but my approach to open source software I make is just to "throw it out there". And what I mean by that is unless one of my projects is going to go big and have enough users to generate revenue either from sponsorships or something like Patreon - I'm making open source software for me, myself and I. So you can have my source code and some instructions about how to get it running, but don't expect me to also be your guide or tech support. My intention in throwing it out there is to help out people who have the same exact issue as I do and are willing to get it working, not to be a donor for all the help vampires around.
by shafyy | 2025-08-29 08:17:44+00:00
> I think the majority of coders out there write the same CRUD app over and over again in different flavors

In my experience, that's not entirely true. Sure, a lot of app are CRUD apps, but they are not the same. The spice lies in the business logic, not in programming the CRUD operations. And then of course, scaling, performance, security, organization, etc etc.
by renegat0x0 | 2025-08-29 08:18:05+00:00
I use my own RSS reader [0]. I found other to be lacking in some areas.

I use it also for:

- bookmarks

- web crawling

- simple search engine

I also created simple RSS reader/parser, and web crawling system [1].

Links:

[0] https://github.com/rumca-js/Django-link-archive

[1] https://github.com/rumca-js/crawler-buddy
by theshrike79 | 2025-08-29 08:18:05+00:00
I had a 918+ that just... died. It started and then stopped, didn't POST.

Panicked, built a full-ass Fractal 804 case + Unraid setup to replace it.

Was looking around for That Guy who mails around a Synology box so I could get my data out and stumbled on a forum post(!) that said the external PSU just fails subtly sometimes. It gives enough power to start booting and then fails.

Bought a 3rd party PSU from Amazon and the Synology boots up.

Now the 918+ lives as an off site backup at my parents' house =)
by zer00eyz | 2025-08-29 08:18:07+00:00
Do you know why I tell my loved ones to get apple products?

Because I don't want to support them.

Your telling me that Synology is giving out apple levels of support in trade for vendor lock in. It sounds like the sort of thing I recommend to others because it wont be my problem.

Go ask a "car guy" who has a civic or something that is LS swapped what car you should get. He's not going to recommend anything he is going to buy... he's gonna tell you to go get a bog standard Toyota so it isnt his problem. Meanwhile he has the fun, project car that does cool things but he's always fiddling with.

Synology isn't for you any more... They want to be Toyota or apple or something not for nerds!
by radicality | 2025-08-29 08:18:11+00:00
Have you already tried tinkering with the smb settings on both the local and nas config like here:

https://support.apple.com/en-us/102064 https://support.apple.com/en-us/101442 https://gist.github.com/jbfriedrich/49b186473486ac72c4fe194a...
by lagrange77 | 2025-08-29 08:18:15+00:00
Right, all models are inherently wrong. It's up to the user know about its limits / uncertainty.

But i think this 'being wrong' is kind of confusing when talking about LLMs (in contrast to systems/scientific modelling). In what they model (language), the current LLMs are really good and acurate, except for example the occasional chinese character in the middle of a sentence.

But what we mean by LLMs 'being wrong' most of the time is being factually wrong in answering a question, that is expressed as language. That's a layer on top of what the model is designed to model.

EDITS:

So saying 'the model is wrong' when it's factually wrong above the language level isn't fair.

I guess this is essentially the same thought as 'all they do is hallucinate'.
by guappa | 2025-08-29 08:18:15+00:00
Where I work there are like 2x as many front end developers as there is need for. They spend an insane amount of time doing meetings, they require approval of 2 different people for every simple CSS change.

Their job is to do meetings, and occasionally add a couple of items to the HTML, which has been mostly unchanged for the past 10 years, save for changing the CSS and updating the js framework they use.
by johnfn | 2025-08-29 08:18:17+00:00
The thing you are doing wrong is asking it to solve hard problems. Claude Code excels at solving fairly easy, but tedious stuff. Refactors that are brainless but take an hour. It will knock those out of the park. Fire up a git worktree and let it spin on your tedious API changes and stuff while you do the hard stuff. Unfortunately, you'll still need to use your brain for that.
by dragonwriter | 2025-08-29 08:18:19+00:00
> My former colleague Rebecca Parsons, has been saying for a long time that hallucinations aren’t a bug of LLMs, they are a feature. Indeed they are the feature. All an LLM does is produce hallucinations, it’s just that we find some of them useful.

This is an example of my least favorite style of feigned insight: redefining a term into meaninglessness just so you can say something that sounds different while not actually saying anything new.

Yes, if you redefine "hallucination" from "produce output containing detailed information despite that information not being grounded in external reality, in a manner distantly analogous to a human reporting sense data produced by a literal hallucination rather than the external inputs that are presumed normally to ground sense data" to "produce output", its true that all LLMs do is "hallucinate", and that "hallucinating" is not a undesirable behavior.

But you haven't said anything new about the thing that was called "hallucination" by everyone else, or about the thing--LLM output in general--that you have called "hallucination". Everyone already knew that producing output wasn't undesirable. You've just taken the label conventionally attached to a bad behavior, attached it to a broader category that includes all behavior, and used the power of equivocation to make something that sounds novel without saying anything new.