MurphyA/hacker-news huggingface dataset:
by const_cast | 2025-08-26 12:53:30+00:00
The problem isn't play protect or whatever the fuck, because 80% of the play store is malware, adware, and spyware anyway.

The problem is actually Google and other big tech.

Let's consider: why are users installing so many apps?

Because, on desktop, this doesn't happen. We don't ask people to download and run an EXE to look at their friends funny cat photos. No, we open the web browser.

The reason we have so many apps on mobile is because we require the malware. Google requires the malware. We need to be able to run privileged and unsandboxed code on users devices and this is the world that Apple and Google have created.

Users shouldn't be fucking downloading apps for 90% of the stuff they do anyway - including the non malicious apps! But they do, because they have no choice.

Think about it. Provide a web interface and miss out on juicy spyware? Or install executables on your customers systems? Apps are far too enticing for big tech.
by aurareturn | 2025-08-26 12:53:31+00:00
The reason why I keep reposting this table is because people post incorrect statements about AMD/Apple so often, often with zero data backing.

For Blender numbers, M4 Pro numbers came from Max Tech's review.[0] I don't remember where I got the Strix Halo numbers from. Could have been from another Youtube video or some old Notebookcheck article.

Anyway, Blender has official GPU benchmark numbers now:

M4 Pro: 2497 [1]

Strix Halo: 1304 [2]

So M4 Pro is roughly 90% faster in the latest Blender. The most likely reason for why Blender's official numbers favors M4 Pro even more is because of more recent optimizations.

Sources:

[0]https://youtu.be/0aLg_a9yrZk?si=NKcx3cl0NVdn4bwk&t=325

[1] https://opendata.blender.org/devices/Apple%20M4%20Pro%20(GPU...

[2] https://opendata.blender.org/devices/AMD%20Radeon%208060S%20...
by Intermernet | 2025-08-26 12:53:43+00:00
To install 3rd party APKs on Android involves deliberately removing some guard rails. You need to allow it in settings, you need to enable developer mode, you need to agree to each individual source as a trusted source. If people are still blaming malware on this, when malware exists in the actual Play store, then they're delusional.

Right now, the average Joe can't click a link and install a 3rd party app. Meanwhile, you can install malware from the actual authorised sources, or even just come across a vulnerablity in chrome.

Keeping your devices up to date with security patches will save orders of magnitude more people from malicious software than stopping 3rd party app installation.

I occasionally develop Android apps for myself (mostly out of curiosity and experimentation, but sometimes out of a need for some particular functionality). I'm not going to apply for some developer permit and verification just to do this. I may as well buy a damn iPhone.
by Cthulhu_ | 2025-08-26 12:54:39+00:00
I'd love to work in a datacenter at that scale sometime, it sounds like it's like working in a warehouse where you get a list of orders, servers to remove and pick up, but at the scales of the Googles et al, that's hundreds of server replacements a day, and production lines of new servers being built and existing ones being repaired or decommissioned.

It's a fascinating industry, but only in my head as the only info you get about it is carefully polished articles and the occasional anecdote on HN, which is also carefully polished due to NDAs.
by i80and | 2025-08-26 12:54:48+00:00
I actually went out of my way to watch The Hobbit at theaters with the 48fps copy because I thought it was incredible despite the wrerched 3D it was paired with. 24fps has always seemed choppy and confusing to me with any kind of action, and The Hobbit was a breath of fresh air

I consider it a genuine shame there's no way to release the 48fps cut on home media.
by wkat4242 | 2025-08-26 12:55:07+00:00
On the other hand, it's not really up to the bank. It's my money, not theirs.

I really wish I wouldn't need to have my money managed by some corporate drones in suits but it's really hard these days to do without a bank account.

This is why I was really into crypto at the beginning; it envisioned giving us control abck over what's ours. But all the KYC crap and the wishes of the speculators for more oversight basically made crypto the same nasty deal as the public banking sector.
by smcleod | 2025-08-26 12:55:08+00:00
Had a chuckle at "classic Linux-first development", it's every OS except Windows - Windows is the outlier here, and I know plenty of engineers (myself included) which have no interest in trying to make things work in the Windows ecosystem. So I guess in the same way that roads are "classic wheel-first infrastructure", you don't try to pave a swamp.
by blincoln | 2025-08-26 12:55:09+00:00
FWIW, the traditional engineering argument in this case is:

By selling the same hardware with multiple tiers of functionality artificially locked behind increased prices, it becomes profitable to develop and manufacture products that would otherwise not make economic sense. This occurs when there aren't enough potential buyers of the full-featured version at a price that makes the full-featured version on its own profitable, but the sum of all customers at all price/functionality tiers is profitable. i.e. this model results in products that would otherwise not exist.

I have mixed feelings about that argument. The main one being that it's not much of a stretch to go from that to "the full-featured version sold at price X would be profitable, but because most customers are willing do do without the higher tiers of functionality, we can make even more money by selling a reduced-functionality version at price X, and charge a premium for the extra features", and it sure seems like that's what a lot of American businesses do. But I assume at least some of the time, it really is the former and not the latter.
by Aurornis | 2025-08-26 12:55:21+00:00
If you’re allergic to external dependencies then one of the batteries-included languages is better for you.

In practice, there are a lot of well known and well maintained Rust crates for core functionality. It has also inspired some good competition among different crates to serve different purposes, such as the different command line arg parsing libraries.

I don’t find it to be a problem at all, but I know some people get triggered when they install a package and see it download different dependencies.
by pona-a | 2025-08-26 12:55:25+00:00
How does device attestation reduce bruteforce? Does the backend not enforce the attempt limits per account? If so, that's would be considered a critical vulnerability. If not, then attestation doesn't serve that purpose.

As for compromised devices, assuming you mean an evil maid, Android already implements secure boot, forcing a complete data wipe when breaking the chain of trust. I think the number of scary warnings is already more than enough to deter a clueless "average user" and there are easier ways to fish the user.
by potato3732842 | 2025-08-26 12:55:32+00:00
On the other hand, there's the people who make a big song and dance ritual over putting their eye and ear pro on just to impact off one bolt that'll be maybe a couple clacks of the hammer. It's not realistic to do that for every single transient noise or tap on something, the safety is just performative at that point.

I have no problem letting those people and behaviors be ridiculed.
by CRConrad | 2025-08-26 12:56:15+00:00
> I've found that certain posting times lead to more upvotes for what feel like the same type of stories.

So was that post a while[1] ago about how some times get much more interaction on HN posts by you?

IIRC the result was that you get most interaction to posts in the middle of the day (US time, can't remember which coast; West feels likely), or slightly before, on Tuesday to Friday. No guarantee about the C, though.

___

[1]: Say, two years (plus-minus... one?) ago.
by subw00f | 2025-08-26 12:56:20+00:00
Big tech serves exactly three purposes (real, not stated):

- The precarization of work by wage compression and anti-worker rights lobbying (Uber)

- The overexploitation of attention for financial (ads) and political gains (tolerance and reach for the ultraliberal, protofascist, neonazi groups and narratives) through American state-sponsored algorithmic manipulation (Instagram, Facebook, Twitter)

- Assimilationism, erasure of local culture, traditions, identities, to achieve cultural hegemony (Netflix)
by antonkochubey | 2025-08-26 12:56:37+00:00
Yeah, if you don't need the HATs. Otherwise, being x86 is a huge advantage in terms of OS availability. I own a Radxa X4 (N100) and a RPi 5, the N100 in X4 is ~30% faster in single-thread and ~60% faster in multi-thread (in benchmarks that I have managed to run on both) - and it cost me few euros less (both are 16GB).
Show HN: Titan Breach – AI-driven cybersecurity platform
by tb-admin | 2025-08-26 12:56:43+00:00
Hi HN,

I built Titan Breach (https://platform.titanbreach.com) to solve the pain of juggling multiple tools for cybersecurity intelligence. It’s an AI-powered toolkit that unifies URL phishing detection, IP infrastructure mapping, typo-domain/DNS monitoring, ransomware insights, and website availability checks.

Why I built this: As a security researcher, I was frustrated by switching between disjointed tools to track emerging threats. I wanted a single platform that delivers fast, cohesive intel using AI.

What it does: - Detects phishing via URL scoring and social-engineering pattern analysis. - Maps infrastructure with port scans, fingerprinting, and visualizations. - Tracks typo-squatted domains and suspicious DNS registrations. - Monitors DNS for anomalies and takeover risks. - Aggregates ransomware intel from public leaks and threat group trends. - Verifies website availability with multi-technique checks.

Tech stack: Built with Next.js for server-side rendering, Python for backend logic, Elasticsearch for indexing, MongoDB for storage, and LLMs for analyzing patterns (e.g., phishing intent from URL structures).

Caveats: - It’s an MVP—some features are limited, but the free tier requires no signup. - Stable for now, but heavy traffic might stress it. I’m ready to scale if needed.

I’d love help with: - UX: Is the dashboard intuitive? Any clunky workflows? - Features: What needs more polish—phishing detection, visualizations, or something else? - Bugs: Notice any glitches or inconsistencies? Just let me know.

Thanks for checking it out.

Happy to answer questions or hear what you'd like to see next!
by olddustytrail | 2025-08-26 12:56:57+00:00
The spec says

"There is a single base directory relative to which user-specific data files should be written. This directory is defined by the environment variable $XDG_DATA_HOME"

Where are you seeing "read-only"?

And why would it not be safe? What kind of user specific documentation did you think should go there and even if you did, why would you think it could be randomly removed by something else?
by spwa4 | 2025-08-26 12:57:19+00:00
You don't understand. The situation in Europe is: the left has failed, and broken into pieces that are currently mostly still in a few parties, but those are ready to shatter into 100, at which point ... the extreme right has 35% of the vote, and the center parties has all but broken down.

That means the moderate right (think laissez-faire pro-immigration pro-business, the only remaining other voting bloc) and extreme right (hate based parties) control, easily, 50% of the vote. They are not currently allied but the problem is that a shattered left is not something the right (or anyone) can work with. If the left fully shatters, the right will be forced to join the extreme right.

So right now, it takes essentially EVERY small insignificant party cooperating not to hand EU countries to the extreme right (yes, in Germany there's more margin, in the Netherlands less, France is on the brink, ...)

That makes your "dumb" not dumb but a serious catch-22. Any compromise that makes ANY party that has 5% of the vote walk out is a total non-starter, because one vote of non-confidence and "hitler gets elected again" so to speak.
by cma | 2025-08-26 12:57:37+00:00
The prompt injection would come when Claude code searches the web. What it then slips in the code would get there when you approve the edit without carefully looking at it, it can be in one line that fetches a payload somewhere else. The execution would come when you run the program you are building or its unit tests or even when you do a build if it is slipped into a make file.
by weirdpickles | 2025-08-26 12:57:43+00:00
Interesting choice to cherrypick and then straw man one part of one example. They didn't say the government should get to decide where someone drives; it was the OEM, BMW in their example. That is basically what Google is doing here by locking down a previously open-ish platform.

Having a license doesn't mean you are restricted in where you can go unless we start considering the fringes like provisional (learners') permits complete with curfew. Therefore, your example doesn't fit. But OP's does, because it is equivalent to asking "do you think your refrigerator should refuse to cool items manufactured by an entity it doesn't like... to Keep You Safe(tm)?" Maybe you buy from non-verified cottage industry workers at the local farmers market. People who maybe didn't upload their PII and licenses to the refrigerator manufacturer, so it refuses to operate until you remove the offending item. Out of the utmost respect for your safety, of course.

Imagine if Charter Communications/Spectrum decided to block you from using their service and modem/routers from accessing any media created by Universal (owned by their rival, Comcast). It doesn't really have anything to do with safety, but they could pearl clutch and blame it on some risqué content that Universal releases via its imprints.
by hollowturtle | 2025-08-26 12:58:11+00:00
We will then build LLMs hooks for letting the AI output a rich version of the summary data, aka an html table first and... here we go again ;) It could build his own table but it won't be what the x customer wants/needs. Anyways I don't believe the prediction in the first place because LLMs are lossy compressors(even RAG), form masks over structured data are loss less.
by codeforafrica | 2025-08-26 12:58:13+00:00
Thank you. Suggesting that people never used the the term black would imply that I can overhear every conversation. So obviously I can't rule out that the term is used. I just haven't heard it. or, to be fair, I don't remember having heard it. The fact that English is not the majority language in most places is obviously also a factor. And maybe I just haven't been talking to people enough yet.
by Y_Y | 2025-08-26 12:58:48+00:00
This is already happening. It would be nice to have a purpose-built "clean"/”lame" device that not only did networking for you, but let you run whatever super special shit that garbage banking app needs attestation for while serving it over vnc or similar to your "dirty"/"cool" device. Then the lame device could be quite small, maybe even stuck on to the cool device as a dongle something.
by Aurornis | 2025-08-26 12:59:22+00:00
> But stop pestering maintainers with demands.

I don’t see any “pestering” in the linked issues. They’re polite and well-written with supporting links.

This is how it’s supposed to be done. Suggestions for improvements or issues noticed go into issue requests for discussion. If the maintainer doesn’t want to do it, a polite and concise explanation is typical.

The refrain of “just fork it!” is a cop-out. Forking software so you can maintain a fork forever isn’t a trivial decision. It’s not helpful to the community to have to choose between a lot of different forks that have minor differences.

I agree that open source maintainers don’t owe anyone anything, but I think this mentality is being taken too far when with the “maintainer is always right” mentality combined with blaming the issue starter for the maintainer’s behavior.
by beacon294 | 2025-08-26 12:59:31+00:00
> There’s a big ego hit, in LARPing a highly-experienced engineer, when you’re not one, yourself.

There's a big ego hit in punching up, down, and sideways, and it's far too popular among engineers these days.

I wish that engineers overall were more humble with each other, but it's not going to change quickly. And regrettably it is the human condition. Humility is also unprofitable.
by loudmax | 2025-08-26 12:59:33+00:00
A few years ago I was playing around with upscaling options in ffmpeg. For my starting point, I used my DVD of The Road Warrior that I bought in 1999, and wasn't particularly well mastered. I applied some filters to remove film grain, and raised the frame rate to 120 fps by inserting artificial interstitial frames.

Firstly, the filter that removed grain from the film also removed grain from the road, the sand, and Mel Gibson's stubble, all of which there's a lot of in the Road Warrior. Everything looked quite a bit too clean.

But the super high frame rate gave the video a hyper-realistic quality. Not realistic in the sense that I'm watching actual post-apocalyptic survivors. Realistic in the sense that I'm looking at what are clearly actors wearing costumes, and it's hard not to imagine the camera and rigging crew standing just out of frame.

An interesting exercise, but not how I want to experience that movie. Having said that, this was my experience just playing around with ffmpeg on my desktop PC. I wouldn't rule out the possibility that a dedicated professional using the right tools (presumably also ffmpeg) could manage a set of adjustments and upscaling processes that really do create a better experience than the original film.
by zelphirkalt | 2025-08-26 12:59:33+00:00
> Do you really want to say, work on a project where somebody renamed "if" to "wenn" because they thought writing code in German would be neat?

Ha, no, I wouldn't. Because to me it is important, that anyone can read the code, not just me or a German speaking developer. Just like I wouldn't translate "if" to Chinese. The point is, that this translation serves no purpose. Or rather its benefit, if any, is not sufficient to justify it being done and deviating from the standard. Macros can be useful and justified. But these string substitution macros ... Meh, rather rarely, I guess. Maybe for when you don't have "true" and "false" or something.

Some useful examples of macros are: Threading/pipelining, timing, function contracts. Things where the order of evaluation needs to change. Things one cannot easily do with functions alone. Your example of "custom_if" is actually a good one, depending on what "custom_if" does. If it needs its arguments to not be evaluated, unless an earlier argument meets some criteria, it would be a good candidate for a macro. Those things are not done using string substitution macros.
by dijit | 2025-08-26 12:59:46+00:00
I’ve been in a similar situation.

We were promised that the PlayStation 4 and Xbox One generation of hardware would be significantly more powerful than it ended up being.

The amount of backlash we received because the quality of the final product we produced was lower than what we showed to the public was insane and continues to this day.

For context, I worked at Ubisoft on Tom Clancy’s The Division. this was the same period where watch dogs released.

I think we did the right thing, not because we chose to and that we were being an altruistic; but because we were forced to- by the first party console manufacturers as part of certification requirements.

If you release something that you know will perform poorly, that’s on you. It doesn’t matter if you’re Intel in this situation or if your Microsoft in this situation they are both equally guilty of allowing it to happen.

How do you assign blame in that situation? You don’t. they both should’ve done better.

as soon as Microsoft realised that Windows Vista would perform poorly on current generation hardware that the majority of the population had they should’ve worked to downgrade the visual elements and optimise the bloat away even at the cost of features.

When Intel realised that the 98% desktop market leader was going to release something that had graphical intensity requirements, they should have put more emphasis and effort into producing higher quality graphics processing capabilities- it’s not like Windows Vista had a short time it was in development for many many years
by sleepyguy | 2025-08-26 13:01:20+00:00
The only time I have ever purchased a brand new vehicle was in 1987 (Mustang GT), 2000 (4Runner). Still have both and drive the 4Runner regularly. Every other vehicle (2007 Avalon, 2010 Venza, 2006 Lexus IS350) was purchased used and all are daily drivers. Since the 4Runner, my family only drives Toyota and that is a big part of why I can keep a vehicle for 350-500k. Most of the driving is highway miles, so that also helps.

I service my own vehicles and do a lot of preventative maintenance and inspect the condition of my vehicles regularly, it's become a hobby since I enjoy working on them. I adhere to a strict schedule of maintenance and inspection. Just flushing and filling fluids (Brake System, Transmission, Power steering, Rear Differential, Coolant and Oil) can greatly extend the life of the power train. I have never had a break down where I needed to call a tow truck, Each vehicle has a small jump pack in the trunk, alternators, batteries can be tested for signs of degradation, why wait until they fail, replacing worn parts before they cause further damage. I always try to rebuild the OEM part since it is of higher quality then the replacements, like an alternator or starter. If I do need to get a replacement, Rockauto carries many OEM parts. I just replaced the original water pump on the Avalon, it had 160k miles on it. The 4Runner has approx 350k miles on it and many of the parts (alternator, starter, etc are original.
by cx42net | 2025-08-26 13:01:34+00:00
I've already spent quite some time looking up keyboards.

I think I've narrowed down to the following:

- Glove80

- Microsoft Ergonomic Desktop

- Perixx : PERIDUO-505

- Mobility Lab : Clavier Sans Fil Ergo K30W

- Kinesis MWave (It's QWERTY and I need an AZERTY but I believe I can move the keys around).
by tsuyoshi_k | 2025-08-26 13:02:06+00:00
Balancing Development Speed and Readability

Vue offers a low learning curve with intuitive template syntax and flexible component architecture. For solo developers, this makes it easy to iterate quickly from implementation to maintenance.

For example, I’ve been using Vue to build OS Yamato, a full-featured solo project that includes journaling, chat, media, and internationalization. With Vue’s modularity, it’s been possible to scale and maintain diverse features without losing clarity or velocity.

⸻

Excellent Support for Internationalization (i18n)

The Vue ecosystem includes vue-i18n, which makes it easy to implement multilingual support. In OS Yamato, I’ve been able to support 6 languages with minimal friction — something that would’ve been a major engineering burden in other frameworks. Vue’s seamless localization workflow is a big win for global outreach.
by petralithic | 2025-08-26 13:02:13+00:00
Are collages creative? What and is ones "own manner?" Does it require using one's bare hands, or do computers count? Does Photoshop count? There is nothing fundamentally different, 20 years ago people were harping over the Adobe suite too.

The way people are using gen AI is way more creative than typing in a prompt, and it is no different than electronic music producers, it's an arrangement of discrete elements they do not necessarily produce themselves.
by pjmlp | 2025-08-26 13:02:19+00:00
Microsoft was stupid, in EU they were slowly reaching 10% when they decided to kill WP, it was getting momentum as the alternative for those that didn't want Android and weren't going to spend Apple money for a phone device.

And actually the development experience was much better than Android to this day.

But that isn't coming back, especially after they killed all developer good will on Windows OS for everyone that invested into WinRT as platform.