MurphyA/hacker-news huggingface dataset:
by IlikeKitties | 2025-08-23 17:47:28+00:00
Nah, fuck that noise. If the company reacts to a responsible disclosure notice that's nice but no one is under any obligation to help out mega corps to secure their shit. And the users aren't put at risk by the people finding the vulnerability but by the company not fixing it.

Fuck Responsible disclosure, companies should have to bid on 0 days like everyone else.
by schiffern | 2025-08-23 17:47:48+00:00
"The same pixel-filled rectangle could contain the work of someone who spent time and energy and had the courage to perform publicly, or of someone who sits in bed typing prompts and splicing clips in order to make a few bucks."

One can imagine much the same sentence being written 100+ years ago, about the honest hard-working landscape painters we all know and love, vs the newfangled corner-cutting opportunists with their (questionably moral) "photography."

Fraud is bad, and people should know what they're consuming. Artists should control what they're producing, as in this case with Youtube. That said, the underlying moral panic betrayed by the quoted sentence is completely over-the-top.

Full disclosure: I don't create AI art, and I don't know anyone who does.
by Balgair | 2025-08-23 17:47:49+00:00
Keep the chin up!

It took me ~4 years before I finally got my act together. I had found an exercise routine I tolerated well enough (Deck of Pain), but it wasn't until I did a (frankly horrible) calorie focused diet that I started weight loss in earnest. 1k calories/day of dieting was awful for a year, but it did work.

It is very much worth it though. I have more energy for the family now and my friends too. I finally got the weight off and, like I said, that's when I finally felt the good feelings about exercise. I was pretty surprised by it too, felt that I was somehow genetically doomed to just hate exercise. Nope, the MDs are right here, being overweight is really bad for you. I just didn't think that it was a mental thing too, but in retrospect, it makes a lot of sense.

You got this, keep it up
by XzAeRosho | 2025-08-23 17:48:45+00:00
It really depends on the driver lottery. Do you have good driver support? Good, you'll have a mostly flawless experience. Generic drivers? You either get weird cpu usage patterns, or perfectly normal behavior. Maybe an update will break everything. Welcome to the Linux Driver Lottery.

It's really good nowadays, but the issues remain the same sadly, and it's not Linux devs fault either, it's just the manufacturer lack of support.
by unethical_ban | 2025-08-23 17:49:12+00:00
Yes they are that good, and "lasting five years" might not mean physically functioning vs not. It could be "meets my computing needs". Yes it could also mean "before the nonservicable battery dies".

I have a 2008 Acer, a 2018 Thinkpad, a 2019 HP, a 2024 framework, and a 2024 MacBook.

I can't stand 1080p for personal use anymore, and never in my life on Windows or Linux have I gotten more than 4 hours out of a battery.

Framework competes on repairability, price and OS choice. Pound for pound, MacBook is a much better piece of hardware.
by MandieD | 2025-08-23 17:49:52+00:00
It was also revoked for American women who married foreign citizens until the early 20th century - in fact, an awful lot of my parents' friends for some reason still assume that I lost mine and automatically became a German citizen when I married my husband.

Ha. Getting German citizenship has become easier, but it's still far from automatic, and at least the way things have been the past 100 years or so, I (native-born to native-born US citizens in the US, white) would have to jump through a lot of hoops to get rid of my US citizenship.
by bko | 2025-08-23 17:49:58+00:00
> Kennedy also criticized the fact that the authors did not compare vaccinated and unvaccinated children to determine whether any aluminium exposure causes harm, even though they had some data on unvaccinated children.

I'm not a scientist, but if you were to tell me "this trial shows that substance X is not harmful", I would think ideally it would give substance X to one group and a placebo to the other group. If not possible, it would look after the fact to see group A that received substance X compared to group B that didn't, large enough sample so it would be relatively controlled for extraneous variables. Seems like you would def want to compare the two groups, so what did this study actually do?

Another criticism:

> Among Kennedy’s criticisms of the Danish study are that the analysis excluded children who had died before the age of two. According to Kennedy, this means that the children “most likely to reveal injuries” associated with aluminum exposure were excluded.

From the opinion piece:

> The architects of this study meticulously designed it not to find harm. From the outset, Andersson et al. excluded the very children most likely to reveal injuries associated with high exposures to aluminum adjuvants in childhood vaccines. The exclusion included all children who died before age two, those diagnosed early with respiratory conditions, and an astonishing 34,547 children — 2.8% of the study population — whose vaccination records showed the highest aluminum exposure levels.

I remember looking at some Lending Club loan statistics and their stated yields by Lending Club. I thought it was pretty good at the time. But then I noticed in fine print that from the historical yield calculations, they exclude any loans that defaulted within the first X months. That was not something I expected.

I could see why Lending Club excluded these, but what's the rationale, if true, of excluding some populations from the vaccine trial results?
by k310 | 2025-08-23 17:50:26+00:00
My need is simpler yet. I have a well pump some distance away from the home. It's out of wifi range, so a dumb camera that will interface to a TV transmitter board (I recall having one in my parts bin) will do nicely.

I only need to monitor two indicator lights on pump protection boxes. Green is fine. Anything else, I make the trip down there to check stuff. Reason is that in addition to the protection boxes and breakers, there are (ta-da) slow-blow fuses in the mix. Once, the fuse on the submersible pump blew, but since the tank is 2000 gallons, I didn't notice it until it went empty. Restarting was easy. Replace the fuse. Pump. But I had to re-prime the lines, and the city boy in me failed.

Alternatives:

check once a month or so. I do that.

a photocell on each green indicator with relay to a light in the line of sight.

a water depth gauge, duhhh. [0]

a mirror so that I can actually see the indicators with binoculars. They are inconveniently 90 degrees to my line of sight, behind the tank. But adjusting the mirror will require two people, and it's just me and myself up here.

Any outage of the booster pump is immediately obvious. No need to monitor.

[0] Some of the mechanical designs are quite interesting. I just don't plan to climb to the top of the tank to install stuff. (using a ladder, of course)
by Animats | 2025-08-23 17:51:08+00:00
This is huge. There's been so little progress on manipulation over the years. The 1960s Stanford AI lab videos don't look much worse than current work.

Part of the trick here seems to be using Gaussian splatting as an intermediate form for vision data. That's a new idea. Gaussian splatting is a brute-force process that doesn't try to generate a full 3D model reconstruction or object recognition. It can be applied to any visual scene where at least two viewpoints are available.

This just might get robotic manipulation unstuck. Good target for VC funding.
by willwade | 2025-08-23 17:51:23+00:00
Their opentext API is actually largely marketing - infact so much it worked - Im going to make some Monster cakes https://opentextapi.monsterenergy.com/opentext/images/ecde50... - https://opentextapi.monsterenergy.com/opentext/images/a1e8b8... Yum! Thanks! Count this the first time in history has sold me something
by zahlman | 2025-08-23 17:52:35+00:00
> do you have a script you'd like me to run against python3? Just toss me a pastebin link, and ideally the version of python3 to run

Here's a diff:

diff --git a/ibmfilter b/ibmfilter index 245d32c..2633335 100755 --- a/ibmfilter +++ b/ibmfilter @@ -1,6 +1,5 @@ -#!/usr/bin/python2 -tt -# vim:set fileencoding=utf-8 - +#!/usr/bin/python3 + from subprocess import * import sys import os, select @@ -10,8 +9,8 @@ special = { } if len(sys.argv) < 2: - print "usage: ibmfilter [command]" - print "Runs command in a subshell and translates its output from ibm473 codepage to UTF-8." + print("usage: ibmfilter [command]") + print("Runs command in a subshell and translates its output from ibm473 codepage to UTF-8.") sys.exit(0) handle = Popen(sys.argv[1:], stdout=PIPE, bufsize=1) @@ -26,8 +25,10 @@ while buf != '': os.kill(handle.pid) os.system('reset') raise Exception("Timed out while waiting for stdout to be writeable...") - sys.stdout.write(out.encode("UTF-8")) - + sys.stdout.buffer.write(out.encode("UTF-8")) + sys.stdout.flush() + buf = handle.stdout.read(1) handle.wait()

I already have tested it and it works fine as far as I can tell on every version since at least 3.3 through 3.13 inclusive. There's really nothing version specific here, except the warning I mentioned which is introduced in 3.8. If you encounter a problem, some more sophisticated diagnostics would be needed, and honestly I'm not actually sure where to start with that. (Although I'm mildly impressed that you still have access to a 2.7 interpreter in /usr/bin without breaking anything else.)

If you want to add overrides, you must use bytes literals for the keys. That looks like:

b'\xff': 'X'

> (heck, pip even warns you not to try installing libs globally so everyone can use same set these days)

Some Python programs have mutually incompatible dependencies, and you can't really have two versions of the same dependency loaded in the same runtime. This has always been a problem; you're just looking at the current iteration of pip trying to cooperate with Linux distros to help you not break your system as a result.

"Using the same set" is not actually desirable for development.
by evan_ | 2025-08-23 17:52:44+00:00
Products like this don't just appear in gas station coolers by themselves, they would have started by identifying a demographic first and then building a product specifically targeted to that audience. They decided to target younger-skewing men, and so they made an energy drink that's neon green and called it "Monster". If they had decided to target over-60 women they would have designed the product much differently.

This isn't just a reactive profile of who they think is buying the product, it's the blueprint for the product.
by notacoward | 2025-08-23 17:52:44+00:00
First, network effects. Amazon was able to grow because there wasn't already an Amazon that they'd have to pry users (and sellers) away from. No replacement will have that luxury. Even harder to wean people off Google search, let alone Chrome, let alone Android. In social media, many people are unwilling to leave all their friends (and family) behind to go somewhere and be a stranger again.

Second, funding models. Because of that network effect, nobody will dump the ungodly amounts of cash on an Amazon or Google or Facebook replacement that they dumped on the originals. They can't grow, so they can't compete, so they can't grow, etc.

Third: regulatory capture. Meta is the clearest example of this, secretly funding PACs and lobbyists to get regulation that they are well able to comply with but no smaller competitor possibly could. It's an effective moat.

"If it was done once it can be done again" is just wishful thinking. It's not generally true, and especially not in internet-facing tech. The soil is already depleted, or even poisoned. Reining in the incumbents is a prerequisite to any alternatives getting on their feet.
by markasoftware | 2025-08-23 17:53:40+00:00
This isn't security research, it's unauthorized hacking. Monster has no vulnerability disclosure program. It's completely illegal to try and gain unauthorized access without a VDP, even if you attempt to responsibly disclose your findings after the fact. And frankly, you didn't /responsibly/ disclose your findings, because you are publishing this while some of the vulnerabilities are still present. I reckon you have a 5% chance of ending up in jail because of this post.
by Balgair | 2025-08-23 17:54:19+00:00
Yeah, I get this every time I talk about weight loss/exercise.

For reference, I've swum miles at once, run a marathon, played team sports, combat sports, pick up basketball, roughhousing with kiddos, etc. I've not done literally everything, but I feel like I've tried enough things to make a reasonable call.

Look, I just hate exercise. I don't feel energized or happy or fulfilled or whatever. I just feel exhausted and tired and sweaty and gross. There really isn't a second, throughout my life, where I've ever wanted to exercise for it's own sake.

I know, that seems like crazy talk to you probably. But, form what i know of myself and my life, it's just the way it is.

Like I said, when I was 'at weight' for my height and in a good BMI, then afterwards I would feel good and nice and that exercise was worth it. But when I am overweight, then exercise looses that feeling for me. I just feel bad.

Still, thank you for the encouragement and ideas, I do appreciate it.
by techpineapple | 2025-08-23 17:55:01+00:00
This was interesting, because I guess I would have thought that the problem was that social media was cannibalizing the audience for theater comedies, and it seems like maybe the answer is more complicated.

I think the cracker barrel fiasco this week is really sort of an example of this endemic modernity that there are some fucked up incentives fucking everything up, and we have really poor language (It was wokeness!) to describe it. It really shows that there are sort of two definitions to capitalism. The colloquial definition that I think most people defend, anyone can make stuff and anyone can buy it and markets are an efficient way to connect buyers to sellers. If you make something people like you should get rich and if you don't you should fail and your company should die, and no matter how liberal and social justice-y I feel, I generally speaking support this pattern existing in society.

...and the more structured definition that involves the specific macroeconomic factors that impact the incentives people have. Like, there are people who want to make comedies and people who want to consume comedies, but the incentives aren't there for executives to green light them. The wall street / stock market dominates the consumer market. We're actually losing that colloquial definition of capitalism. And that creates a pretty fucked world.
by darth_avocado | 2025-08-23 17:55:05+00:00
It is common practice to give the company sufficient time and communicate, and then release the details once the vulnerability is patched. But it’s also common in practice to disclose the vulnerability after a set period of time if the company does not engage in any form of communication and refuses to patch the vulnerability. In this case they didn’t engage in any form of communication and then partially patched the problems. Nothing out of the ordinary here.
by dustractor | 2025-08-23 17:55:08+00:00
Completely irrelevant to the article, but next time you come across one of those internet crazies who think the Monster logo is satanic, you can troll them by pointing out that it is really just an Ugaritic L -- 𐎍 -- and that one of the original names for the Hebrew god was EL so really Monster is a godly drink, not satanic.
by TranquilMarmot | 2025-08-23 17:55:20+00:00
As I said, I was uncomfortable having my entire digital life "owned" by Google.

If you're unfamiliar with the concept of "monoculture" in agriculture:

https://en.wikipedia.org/wiki/Monoculture

> Monocultures increase ease and efficiency in planting, managing, and harvesting crops short-term, often with the help of machinery. However, monocultures are more susceptible to diseases or pest outbreaks long-term due to localized reductions in biodiversity and nutrient depletion

This was how I felt - it was easy and efficient to "just use Google" but long term it felt a bit like "nutrient depletion". A lot of the services I moved onto are better than Google in a lot of ways and have different ideas about how things should work. Sticking with Google, you will only get the Google way of doing things and services you may rely on can be killed off on a whim by some C-suite executive (https://killedbygoogle.com/)

There are also a lot of political reasons behind why I'm doing this but I don't want to get into that too much here on HN. Tech oligarchy is ruling the United States and I don't want to be complicit in that. I was also tired of being a serf of "technofeudalism" (https://www.penguinrandomhouse.com/books/751443/technofeudal...) and am seeking ways to avoid that.
by armchairhacker | 2025-08-23 17:55:40+00:00
Ironically, I overcome developer's block on new features with AI. I ask Claude Code to implement the feature, figuring out some details but leaving others for Claude to decide.

"Ironically" because I usually rewrite almost everything it generates (sans the file and class names, sometimes). But when I describe the idea enough to give Claude some chance of implementing it, I refine it and start planning the high-level implementation. Then the file of LLM slop, even though I have to rewrite most of it, is much less overwhelming than a blank file.
by usefulcat | 2025-08-23 17:55:55+00:00
> everything is more expensive

In 1995, a decent entry level computer was probably at least $2k (in 1995 dollars).

Now double that to $4k in 2025 dollars to account for inflation.

Now consider that in the 90s, hardware advances were coming so quickly that such a computer would be noticeably dated within 1-2 years, very out of date in 5, and borderline useless after only 7-8 years.

Today, there are plenty of computers that cost $1k-$2k new (2025 dollars) and are still perfectly usable 10+ years later. There's really no comparison.
by vanderZwan | 2025-08-23 17:56:02+00:00
As someone very naive on this topic, can you elaborate on where he pushed boundaries? I follow his YT channel and he obviously pushes boundaries from an activist perspective, and I'm a fan[0], but I'm not able to judge his scientific credentials.

[0] (love that one video where he shows how to get away with replacing poorly chosen non-native plants in public parks that will inevitably die out within a few years with native species that will thrive; basically, put on a yellow vest and dress like a gardener and nobody will bother you)
by SilverElfin | 2025-08-23 17:56:03+00:00
> The only right way to contest a scientific study is to provide a new scientific investigation that reaches different conclusions.

Why is this the “only way”? The issue is this study seems to have manipulated its procedure to arrive at a preset conclusion. There are a lot of seemingly valid problems pointed out with it. Shouldn’t that be enough to contest it without the burden or cost or time of an “opposing” study?
by Spivak | 2025-08-23 17:56:14+00:00
Hold it up for all to see as an example of bad science. Make your case, back it up by data, publish your findings.

Ya know, academic discourse. It's not like the man can't get funding for such a study. Realistically, if you're going to shout from the rooftops wouldn't you rather it be data that unequivocally proves you right than poking holes in studies that prove you wrong. The former is a victory.
by metalman | 2025-08-23 17:56:42+00:00
very relevant, as the govenment may be mixing up the perfect own goal hat trick, by undermining american competitiveness in tech, agriculture, and so called "essential" workers through depertations and closing of institutions, while trying to "tarrify" the world into submission, to the point that the US postal service is jamming and juddering from what must be the memo epocolypse. proof?, Xi is smiling again, after years of bieng kinda grim looking.
by elcritch | 2025-08-23 17:57:06+00:00
Basic understanding of a customer base could've avoided the BudLight fiasco too. Then again, I'm sure if you're an elite upper-middle-class executive from an Ivy League school the idea that you need to cater to lower class working men must be a bit rankling.

I could imagine similar subcurrents for Marvel executives wanting to appear sophisticated or avant garde but instead having to cater to "comic book nerds" must be challenging.

The post has similar undertones of elitism as well. After all most of us tech people skew towards similar habits as does probably most well paid white collar professions.
by danaris | 2025-08-23 17:57:07+00:00
Google didn't have to "deliberately sabotage search results" for them to be meaningfully culpable in that happening.

They are unquestionably the dominant player in the search market. They are the ones that all the SEO is aimed at gaming. They could have made it a top priority to ensure that search results were useful to the average person. Instead, they made it a top priority to ensure that search results were maximally profitable for them. This is what enabled the rise of SEO slop polluting search results.

And yes, I can absolutely blame them for that: the idea of "maximizing shareholder profit" as a primary goal of companies is a cancer on our society and needs to be destroyed utterly.
by scott_w | 2025-08-23 17:58:08+00:00
They definitely should have shown an example, or referenced something else that backs up their claim. I think it was you who made the good point that, when it comes to data usage, the mean may well give you more meaningful information because of the outliers!

I can see the median being useful for answering what the cost of one more server/agent/whatever would be, but that’s not what this paper is asking.
by alkyon | 2025-08-23 17:58:23+00:00
I moved to Spain 3 years ago and still think it's kind of nonsense in Central and Eastern Europe.

Today it was 19/10 degrees Celsius (68/50 F) in Warsaw. With these temperatures you could only use AC to warm your home.

I understand there are more hot days in Poland now, but it makes no economic sense to spend $1-2k on AC and only turn it on 15 times a year.
by jsheard | 2025-08-23 17:58:36+00:00
https://www.nvidia.com/en-us/data-center/rtx-pro-6000-blackw...

The workstation versions are fine if you're running one or maybe two cards with an airflow gap between them, but if you pack four of them right next to each other then you're going to have a bad time when the fans get going.