MurphyA/hacker-news huggingface dataset:
by rfwhyte | 2025-08-20 21:25:22+00:00
They are far less interested in stopping crime than they are in ensuring the wheels of the capitalist world-eating machine remain sufficiently greased.

The primary role of the police after all is to protect capital, not people.

Shutting down a port would cost the billionaires (who donate to the politicians who are in charge of the police) money, so its much preferable to the police and those in positions of power over them to let the crime run rampant so long as the ports keep operating so that the billionaires profits can flow unimpeded.
by nialv7 | 2025-08-20 21:26:14+00:00
> Fuck AI scrapers, and fuck all this copyright infringement at scale.

Yes, fuck them. Problem is Anubis here is not doing the job. As the article already explains, currently Anubis is not adding a single cent to the AI scrappers' costs. For Anubis to become effective against scrappers, it will necessarily have to become quite annoying for legitimate users.
by soulofmischief | 2025-08-20 21:26:31+00:00
Yes, and then we can avoid the entire issue. It's patronizing for people to assume users wouldn't notice a 10x or 50x slowdown. You can tell those who think that way are not web developers, as we know that every millisecond has a real, nonlinear fiscal cost.

Of course, then the issue becomes "what is the latency and cost incurred by a scraper to maintain and load balance across a large list of IPs". If it turns out that this is easily addressed by scrapers then we need another solution. Perhaps, the user's browser computes tokens in the background and then serves them to sites alongside a certificate or hash (to prevent people from just buying and selling these tokens).

We solve the latency issue by moving it off-line, and just accept the tradeoff that a user is going to have to spend compute periodically in order to identify themselves in an increasingly automated world.
by JumpCrisscross | 2025-08-20 21:26:35+00:00
> thought continents are a geographical term divided by tectonic plates and such

Common misconception, but incorrect. Here is a map of major tectonic plates [1]. They sort of map to our continents. But only loosely. European countries often fissure Eurasia, same way many Spanish-language countries unify the North American, South American, Caribbean, Cocos, Nazca, Scotia and Juan de Fuca plates into an Americas. (Or include the Arabias and India in Asia, et cetera.)

> seams to be weird to single out a single country to assign the name of a continent

New Zealand doesn’t like the Australian plate, Trump doesn’t like the Gulf of Mexico, Riyadh the Persian Gulf, et cetera. At the end of the day, you have to decide if you’re having a substantive or semantic discussion. I personally tend to find the latter boring and repetitive unless actually digging into the meat of the issue (versus the usual “I like to say it this way QED”.)

[1] https://www.usgs.gov/media/images/tectonic-plates-earth
by magicalhippo | 2025-08-20 21:26:36+00:00
For comparison, here's what I got from the 27B variant:

gemma3:27b-it-qat Rochechouart (French: Rochechouart) is a town and commune in France, in the Nouvelle-Aquitaine region, Department of Haute-Vienne. The population is 3,637 (2022)[1]. The commune is located approximately 360 km south of Paris, 34 km west of Limoges. gemma3:27b-it-qat The Ministry of Industry and Trade proposes supporting households installing rooftop solar power systems, with a maximum support of 2-3 million VND for systems including energy storage. This support would also include interest rate subsidies on loans for a maximum of three years. This content was presented by the Ministry of Industry and Trade in the third draft of a Decision by the Prime Minister regarding support policies for households installing self-generated, self-consumed rooftop solar power systems and energy storage systems.
by iLemming | 2025-08-20 21:27:09+00:00
> I'm not sure I agree that non-emacs things are not extensible

Anything that runs on a computer is a program; by definition it is a "programmable" entity. It's only a matter of the degree of intentional programmability - exposed interfaces, APIs, scripting languages, or configuration systems that make modification practical and supported.

From my perspective as an Emacs user, where I can extend virtually any part of my running system by simply evaling some code in a buffer, without having to save, lint, link, compile, publish or restart - an extreme degree of intentional, designed programmability.

From that perspective, VSCode in comparison pales into looking rather constrained and bureaucratic, making it, personally for me, virtually not extendable - I have close to zero incentive to even try. Don't get me wrong, I would use it for certain tasks; it is an excellent tool, but I don't think it ever would become my main instrument - it will just annoy me to death to deal with it on daily basis. Joyride looks promising for making the experience smoother; still, it feels more like a band-aid.

So, yes, once you truly experience the genuine extensibility of the malleable nature of a Lisp-based system, you would completely rethink your entire understanding of programmability of things. I write code, my main instrument must be easily extendable through Turing complete coding mechanisms, not through structured data in json or xml; nor through clicking buttons or dragging boxes around.
by perching_aix | 2025-08-20 21:28:02+00:00
Do you have any easy automations in mind that would be broadly appealing and one really needs to go out of their way to implement on Windows / is impossible to do so?

I have a few things here and there, but it's more a scheduled script or two than anything more elaborate, and I don't think they were difficult to make and deploy.

> you can switch out your audio stack

Why would I want that? Isn't this more for someone doing live audio production (e.g. due to latency concerns)?

In general, the customizability angle is also another that doesn't resonate with me much. It's less that I want to customize my stuff, and more that I want my stuff to be to my liking from the get-go.
by altairprime | 2025-08-20 21:28:14+00:00
Don’t forget signed attestations from “user probably has skin in the game” cloud providers like iCloud (already live in Safari and accepted by Cloudflare, iirc?) — not because they identify you but because abusive behavior will trigger attestation provider rate limiting and termination of services (which, in Apple’s case, includes potentially a console kill for the associated hardware). It’s not very popular to discuss at HN but I bet Anubis could add support for it regardless :)

https://datatracker.ietf.org/wg/privacypass/about/

https://www.w3.org/TR/vc-overview/
by Arnavion | 2025-08-20 21:28:42+00:00
The string I use in my extension is "anubis is crap". I took it from a different FF extension that had been posted in a /g/ thread about Anubis, which is where I got the idea from in the first place. I don't use other people's extensions if I can help it (because of the obvious risk), but I figured I'd use the same string in my own extension so as to be combined with users of that extension for the sake of user-agent statistics.
by StopDisinfo910 | 2025-08-20 21:29:51+00:00
Could anyone here waxing lyrically about Apple so called privacy stand explain to me what that actually is apart from a marketing point Apple keeps repeating?

Because from where I stand they do load everything into their cloud. They insist on having you pay for iCloud through obnoxious means. They have you go through their store for everything. They even have an ad platform.

What supposedly so good about it? Their track record seems awful to me.
by goyagoji | 2025-08-20 21:29:55+00:00
The high resolution is a waste of money. The camera is a waste of money. The number of buttons is small. The issues like a hinge are non existant. The ability to pop out the battery is the kind of complicated thing I would expect from someone competent like a laptop maker.. The lack of Ram slots and now other slots is simplifying.

Really Apple made the game field very simple and its no problem making a perfectly good $50 phone. Google and Qualcomm have made sure that you will pay more via preventing reasonable update systems. Basically forcing you to buy a "middle level" phone that has all the pointless features only a teenager has time/eyes for to get the minimum security updates.
by dt3ft | 2025-08-20 21:30:21+00:00
The keyboard pops up, but is not responsive right away. This very thing happened today on my work phone (which has a bunch of MS defender/enterprise policies and apps managed by the company, forced background app updates etc, which could explain this) but I recall it also being a regular thing with all Samsung flagships I've had over the years. It's the feeling of a very slight delay (it could be a matter of as low as 200 ms) for important components which are operating-system controlled, such as the on-screen keyboard. It feels laggy, as if an app or a background process impacts the responsiveness of low level OS features.

On iOS, this was never something I had to experience. Slow apps are killed, iOS is brutal in this regard, but it protects the core OS-level components such as the keyboard. Try it out, load a few apps and try switching between them, where one of them had the keyboard uplled up. This is something regular users will likely never feel, but if you've been around since amiga 500, you'll definitelly feel it.
by quesera | 2025-08-20 21:30:45+00:00
Well OK, astonished then!

I think there has to be some dramatic oversimplification in the description though. Telecom signaling is still a network level event, even in mobile networks. The receiving network does not typically provide audio to the caller until the call is complete.

But hey, what a terrible idea! I'm glad to have been old enough in that period (2004-2008) that no one I knew would foist such a thing on a caller.
by maratc | 2025-08-20 21:31:48+00:00
You must be very lucky to be in a position where you know what needs to be done before the run begins. Not everyone is in that position.

At my place, we have ~400 wall hours of testing, and my run begins by figuring out what tests should be running and what can be skipped. This depends on many factors, and the calculation of the plan already involves talking to many external systems. Once we have figured out a plan for the tests, we can understand the plan for the build. Only then we can build, and test afterwards. I haven't been able to express all of that in "a bit of yaml" so far.
Do You Like Vibe Retrieval (RAG)?
by mingtianzhang | 2025-08-20 21:31:56+00:00
Vibe coding has now become a popular term. I feel like vector-based semantic similarity search should be called ‘Vibe Retrieval’ — it retrieves things with similar semantics, but not necessarily what you actually want. This is a big problem for domain-specific documents like finance or legal documents, since their documents all share the same vibe lol.

Do you think ‘Vibe Retrieval’ is a positive term?
by devnull3 | 2025-08-20 21:32:13+00:00
There was a time when my main aim of a choosing a certain ringtone was to appear edgy and cool ... and how annoying and wrong was I!

A sample of bad ringtone (auto-tuned baby crying) which was trending back then (2007-2008) was [1]. Thankfully I never used it.

[1] https://www.youtube.com/watch?v=SVvFRzMWdL8
by like_any_other | 2025-08-20 21:32:26+00:00
> Yet with its duty for adult content hosts to age verify users, the Act is one of Britain’s only attempts to protect children from the horrors of the murky ocean that is the internet.

Exactly, the first and only attempt. Instead of trying first with e.g. state-sponsored, default-included/enabled parental-control software, that would be fully in control of the device owner, and only moving on to more repressive options later, if the first attempts failed, they went directly for the option that most effectively kills both online anonymity and small platforms that can't afford to keep up with the large and vague new legal requirements.

The only possible conclusions are either that those "unintended side effects" were actually their goal, or that they are incompetent and have zero regard for their citizens' freedom.

> Surely stemming the tide of obscene material flowing into innocent eyes should be prioritised over liberal preoccupations like free speech.

"Surely". I guess the author is unaware of the high death tolls that follow allowing your country to slip into tyranny? Just entirely oblivious of 20th century history? And yet it's a common stance - pretending that giving up freedoms will carry no cost other than lacking those freedoms, that everything else will remain the same. Again history shows otherwise.
by bjackman | 2025-08-20 21:33:18+00:00
I recently discovered Pixel 7 (maybe older too, I dunno) is actually Qi compatible it just doesn't have the magnets to lock in place.

But if you have a case with those magnets in, it works great. And it turns out QuadLok cases (which I can generally recommend for cyclists) are compatible.

So now I just plonk my phone against the wall and it charges on an Apple MagSafe charger I mounted. This is actually really nice, turns out it's really convenient to have your phone in a fixed position, also not taking up any surface space!

Always thought wireless charging was a bit of a gimmick but with the magnets it's genuinely useful.
by Fuzzwah | 2025-08-20 21:33:47+00:00
This seems like a good place to randomly drop my thoughts on switching from a Samsung s20+ to a Pixel 9 Pro. The hardware is excellent in the hand. The display is great, battery life excellent, the UI is snappy, does all the basic things I expect from a quality device. Over all, no huge regrets..... but...

The scrolling in every app is just "different" from the Samsung, and in a "not as good" way. I moved to Pixel with the (as I now realise) very out dated idea that a Pixel phone would allow me MORE customisation and configurability than the Samsung/Galaxy environment. Oh boy, how wrong I was. Turns out there's a whole stack of Samsung bundled apps or ones available through their Galaxy store for free that I'd gotten so used to I thought it was default Android stuff.

I miss:

- per app volume control - nav bar customisation - lock screen config - many of the good lock apps - shake for torch - the samsung camera app - control of what apps CAN run in the background (the pixel murders everything) - subtle ways that Nova Launcher has problems

So yeah, next time I'm in the market for a phone I think I'm going back to Samsung.

I want Google to be better...
by asgraham | 2025-08-20 21:34:18+00:00
If you can write tests fast enough, you can specify those business rules on the fly. The ideal case is that tests always reflect current business rules. Usually that may be infeasible because of the speed at which those rules change, but I’ve had a similar experience of AI just getting tests right, and even better, getting tests verifiably right because the tests are so easy to read through myself. That makes it way easier to change tests rapidly.

This also is ignoring that ideally business logic is implemented as a combination of smaller, stabler components that can be independently unit tested.
by thegrim33 | 2025-08-20 21:35:06+00:00
"In the U.S., printed book sales totaled 782 million in 2024—a 23% increase over the past decade (source)

Not only is print still popular, but print sales also grew by nearly one-fourth from 2014 to 2024. This includes both paperback and hardcover, sold through brick-and-mortar retailers as well as online retailers like Amazon."

So .. there's more printed books being sold than ever before, and the amount sold continues to increase every year.

https://www.newprint.com/blog/book-sales-statistics
by thewebguyd | 2025-08-20 21:35:26+00:00
E2EE (advanced data protection) without having to use something like Proton, so can stay in the very convenient "ecosystem." With it turned on, keys are on your device, Apple doesn't have them and can't use them and it covers all the main stuff - photos, messages, notes, etc.

It's still a compromise, sure, but it's a better compromise than what Google offers.

Plus small things. Apple's tracking protection for example is opt in instead of opt out on Android. Google's core business is ads, they won't push features that can negatively impact that. Apple also has an ad division but it's not their main focus, hardware is. They can implement better privacy without impacting their bottom line. Apple's refusal to unlock phones at the request of the FBI, etc.

It's not that Apple is the be all end all for privacy, but they are far ahead of Google and are by far the most convenient option if you are within the walled garden.
by greycol | 2025-08-20 21:35:30+00:00
A lot of people buy clothes for their looks with minimal weighting towards functionality (or rather that is the functionality). If you've got a body in reasonable nick then tight pants can look good.

The traditional solution to poor pockets is a purse or bag. Phones are interesting in that they can demand attention and that they are probably the most used item that people carry around with them. Thus people compromise their lines/comfort to actually use the faster accessibility of pockets. Probably explains the popularity of ridge wallets and key wallets too.
by jonkoops | 2025-08-20 21:36:26+00:00
I have converted several large E2E test suites from Cypress to Playwright, and I can vouch that it is the better option. Cypress seems to work well at first, but it is extremely legacy heavy, its API is convoluted and unintuitive, and stacks a bunch of libraries/frameworks together. In comparison, Playwright's API is much more intuitive, yes you must 'await' a lot, but it is a lot easier to handle side effects (e.g. making API calls), it can all just be promises.

It is also just really easy to write a performant test suite with Playwright, it is easy to parallelize, which is terrible in Cypress, almost intentionally so to sell their cloud products, which you do not need. The way Playwright works just feels more intuitive and stable to me.
by ahazred8ta | 2025-08-20 21:36:28+00:00
Your lawyer will explain to you that what you wanted, and what your license terms actually mean, are two different things. There are noncommercial users who have downloaded your software and are using it under the terms of the MIT license. You already gave them permission. Now, they can give copies to commercial users, who can use it under the terms of the MIT license. Your lawyer will explain this to you.
by potato3732842 | 2025-08-20 21:36:58+00:00
I'm not agreeing with you any more than a middle-ish politician that gets endorsed by some hate group is agreeing with them.

Your opinion here is overly broad and reductive to the point of being stupid and wrong. The nations of the middle east have fucked with each other more than anyone has fucked with them in the past 50yr, though of course they all seek and sometimes get outside aid when doing so.

Bin Laden had a famous quote that translates to "the americans are bad and the shia are worse". I think that sums a typical local attitude up pretty well.
by dkarl | 2025-08-20 21:37:04+00:00
The same curse emacs suffers from. What is the best sweet spot an editor/IDE has achieved to date?

I remember the extremes of the utter unconstrained chaos of Emacs and the rigid ultra-high-boilerplate approach of the Eclipse IDE. Emacs was fun to hack on, but impractical to use as an IDE, because if you installed enough plugins to make it useful as an IDE, it was broken half the time (my experience, many years ago.) Eclipse had a robust architecture, but writing plugins for it was a dispiriting slog, even when I got paid for it (again, my experience, many years ago.)
by mappu | 2025-08-20 21:37:07+00:00
My understanding is some AWS products (e.g. RDS) need very fast disks with lots of IOPS. To get the IOPS, though, you have to buy +++X TB sized SSDs, far more storage space than RDS actually needs. This doesn't fully utilize the underlying hardware, you are left with lots of remaining storage space but no IOPS. It's perfect for Glacier.

The disks for Glacier cost $0 because you already have them.
by Analemma_ | 2025-08-20 21:37:07+00:00
Lugging an entire suitcase full of 1 kWh worth of batteries might not technically be against regulations, but I imagine you'd be signing yourself up for a long series of headaches at the security checkpoint anyway. To be honest, if I knew that security wouldn't stop me because "it's not technically against regulations", that's exactly what I would do if I wanted to bring down a plane.
by mdaniel | 2025-08-20 21:37:38+00:00
https://docs.aws.amazon.com/AmazonECR/latest/userguide/vpc-e...

~~I get the impression there are several others, too, but that one is of especial interest to me~~ Wowzers, they really are much better now:

aws --region us-east-1 ec2 describe-vpc-endpoint-services | jq '.ServiceNames|length' 459

If you're saying "other services should offer VPC Endpoints," I am 100% on-board. One should never have to traverse the Internet to contact any AWS control plane
by dmonroy | 2025-08-20 21:38:25+00:00
You're absolutely right about CVE inflation. I deal with the same Snyk/Trivy noise daily where a prototype pollution in some deep dependency gets marked CRITICAL.

Our distribution (71% High, 18% Critical) is definitely skewed compared to normal CVEs. Part of this is selection bias: nobody reports when AI generates boring secure code. But even accounting for that, the pattern is real: AI seems to either nail security or fail spectacularly. Very few "medium" mistakes.

The key difference from your Snyk alerts: these aren't dependency updates or theoretical vulnerabilities. They're actual logic flaws:

- Missing auth checks - SQL injections - hardcoded secrets

You know, The stuff that makes you go "how did this pass code review?"

This is ongoing research, and hopefully we'll be in a position to elaborate better conclusions soon.
by craftkiller | 2025-08-20 21:39:47+00:00
This isn't about demanding you let companies use your code. This is about what you are calling that license. It is not the MIT license and it is wrong to lie to people by calling it the MIT license. You should give it a name like "The bizcards license" or whatever.

IANAL but you also might want to consult a lawyer since your franken-license contradicts itself. It might be hard to challenge a company in court when they steal your code.