MurphyA/hacker-news huggingface dataset:
by pferde | 2025-09-02 10:57:19+00:00
What do you mean, "doesn't support Pixels with locked bootloader"? Yes, you need the bootloader unlocked to install GOS, but the last step during installation is locking the bootloader again. Having an unlocked bootloader is officially considered unfinished GOS installation. See https://grapheneos.org/install/cli#locking-the-bootloader

As for Pixels being more secure than non-Pixel phones, I would say they are more secure, due to existing hardware security features that most non-Pixel phones do not have, and just as importantly, due to still getting regular security updates from the vendor. Pixel 6 in particular is supported until late 2026, if I recall correctly.

This is the problem for most Android phones on the market - most of them stop getting security updates after a year or two, so your only option is hoping that one of the alternate Android OSes pick up the slack, e.g. Lineage or Calyx.

EDIT: That they modeled their security requirements based on the best device available at the time is simply how this works if the priority is security. They picked best of what was available, built features around that, and refuse to compromise for new device models if at all possible. And yes, no other Android phone has comparable security features for what they are doing. That's not how "it makes it sound", that's just reality.
by ameshkov | 2025-09-02 10:57:20+00:00
It's not the first time I've noticed you spreading this misinformation on HN, so let me respond.

Most of AdGuard's staff relocated in 2022, and I (CTO and co-founder of AdGuard) personally live in Limassol, Cyprus. We commented on that publicly, but it seems that random forum posts often regarded as more reliable sources of information.

I am totally fine with anyone not trusting AdGuard for any reason, but please keep your statements factually correct.

PS: Sorry for sticking a small promo in the comment, but this year we're organizing the annual summit (adfilteringdevsummit.com) for ad blockers' devs on our home turf in Limassol, a perfect opportunity to meet us, other ad blockers and even browsers' devs.
by skeezyboy | 2025-09-02 10:57:34+00:00
> If a small firm signs a non-compete and NDA with a competitor, it can cost a lot more than a single sale to chat.

this has nothing to do with not answering emails.

> People looking to fragment that market are seen as a problem even if they don't know they are a problem.

you mean customers?

> It is rude to "ghost" people, but it is unfortunately a modern pop-culture trend

no its not. ignoring people is as old as time.
by sigmoid10 | 2025-09-02 10:57:42+00:00
>we will solve this x, with AI

You usually see this from startup techbro CEOs understand neither x nor AI. Those people are already replacable by AI today. The kind of people who think they can query ChatGPT once with "How to create a cutting edge model" and make millions. But when you go in on the deep end, there are very few people who still have enough tech knowledge to compete with your average modern LLM. And even the Math Olympiad gold medalists high-flyers at DeepSeek are about to have a run for their money with the next generation. Current AI engineers will shift more and more towards senior architecture and PM roles, because those will be the only ones that matter. But PM and architecture is already something that you could replace today.
by robinhouston | 2025-09-02 10:58:01+00:00
No, it works like that on mine. How amazing that I never noticed!

The habit of using Enter has been so ingrained for so many years that I never tried pressing Return before now. Has that always worked? I suspect that it didn’t at some point in the past, though it may be you have to go back a long way. Or perhaps I've been mistaken about this for decades and never realised…
by benreesman | 2025-09-02 10:58:12+00:00
Human nature admits a spectrum of outcomes on this, and I'd argue that most humans are not in fact pathologically acquisitive and power obsessed. Most humans value high status, but healthy societies confer high status in ways de-coupled from counterproductive Putinism. The people who attended the fifth Solvay Conference (that famous photo), who ran the Manhattan Project, who put men on the moon (or went) all were fabulously high status for good reasons with incentives that served society rather than parisitizing it. Those people got to be admired and enjoy the privileges of high status without bankrupting the body politic for countless commas.

This Bezos-style hyperaquisition isn't new exactly but it's not the constant norm its currently made out to be: its a sociecal failure mode with clear precedent but by no means a constant and its not at all obvious that it's inevitable.
by ncphillips | 2025-09-02 10:58:54+00:00
> Half these issues stem from a relative misunderstanding of exactly where the code is running.

I used to think Javascript everywhere was an advantage, and this is exactly why I now think it's a bad idea.

My company uses Inertia.js + Vue and it a significantly better experience. I still get all the power of modern frontend rendering but the overall architecture is so much simpler. The routing is 100% serverside and there's no need for a general API. (Note: Inertia works with React and Svelte too)

We tried Nuxt at first, but it was a shit show. You end up having _two_ servers instead of one: the actual backend server, and the server for your frontend. There was so much more complexity because we needed to figure out a bunch of craziness about where the code was actually being run.

Now it's dead simple. If it's PHP it's on the server. It's JS it's in the browser. Never needing to question that has been a huge boon for us.
by eadmund | 2025-09-02 10:59:01+00:00
> Unfortunately over the years there have been cases of people forking the project in the attempt to set up a competing service. And it hurts. It hurts to see something you've worked so hard on for so long get copied and distributed with only a few hours of modification. It hurts to have poured so much love into a piece of software to see it turned against you and threaten your livelihood. It hurts to believe in open-source and then be bitten by it.

The free solution to this is Affero GPL. The AGPL ensures that anyone who hosts a program must grant its users the same rights to use, examine, modify and share it that he received. The original author can just download that source and incorporate its changes.

That means that a fork doesn’t hide changes from the original author who ‘poured so much love’ into it.

We as a community have got to stop using the MIT or BSD licenses on our code. Use the AGPL for server code, the GPL for tools and the LGPL for libraries.
How do you handle JDK/JRE patch updates for Java apps on K8s?
by bgalek | 2025-09-02 10:59:57+00:00
I’m curious how people running Java workloads on Kubernetes handle JDK/JRE updates and security patches without rebuilding every app image.

Background: in Mesos (https://en.wikipedia.org/wiki/Apache_Mesos) times, we used to keep the JDK on the runner nodes. When a CVE or patch came out, we updated the host JDK, and all apps picked it up. That was convenient for fast security rollouts. On k8s, almost everyone I see bakes the JDK into the container image, which means: new JDK → rebuild base image → rebuild app images (or at least rebuild base) → push → roll out. That is reliable and reproducible, but it is impossible to update the JDK version for, for example, 2000 apps quickly.

Questions I have for people who run Java on k8s at scale:

Do you rebuild images for every JDK patch?

If so, how do you keep the pipeline fast/automated?

What approaches we talked about (still looking for something better):

- Rebuild images on every JDK patch (CI pipeline that automatically bumps base image + rebuilds): reproducible but heavy and slow.

- Host-provided JDK (like Mesos) via hostPath or a shared volume (every path version must be available): fast patches, but brittle (node drift, version chaos between k8s nodes, less reproducible, potential security/permission problems).

- Base, standard image for all java apps (alpine+java) that our platform updates and init container downloading user app on startup, so that we can update it in the background.

- Sidecar or init-container that places a JDK into a shared volume, and the app container uses that volume: mutable runtime without rebuilding images — how well does this work in practice?
by tonyhart7 | 2025-09-02 11:00:25+00:00
"the million-IP-strong residential botnets"

do you understand how much money to get this???? or are you implying cloudflare is failed to do its job since its not reaching 100% foolproof ????

this is crazy and you are free to use alternative that better than that

wait a minute there is none!!!, turns out a magic silver bullet software that offer 100% protection is NOT EXIST
by lucasluitjes | 2025-09-02 11:00:46+00:00
SEEKING WORK | REMOTE | Dev, DevOps, Security | Location: The Netherlands

Willing to relocate: no, but willing to travel/visit. I'm flexible with working hours, I usually work with clients from either Western Europe or the USA.

I do dev/devops/security, usually for startups or scale-ups or other small orgs with limited resources, and I've been doing that for 15+ years. So, if you:

* Have a slow web application that’s often down?

* Want to improve security and don’t know where to start?

* Have a legacy system that needs to be replaced?

* Are considering an acquisition but not sure about the technical side?

I can help with that. For example, in the past I have:

* Massively improved performance and reliability for a data visualization platform.

* Led a large effort to improve security for a cybersecurity SaaS.

* Built a micropayments system for a prominent media startup.

* Rebuilt an aging e-learning platform from scratch for a GDPR compliance SaaS.

* Conducted technical due diligence for acquisitions.

For more information: https://www.luitjes.it

Favorite buzzwords: Ruby (including Ruby on Rails, Sinatra, and standalone applications), PostgreSQL, Ansible, Linux.

Other buzzwords: Elixir, C#, Java (Spring/Hibernate), JavaScript, HTML/CSS/XSLT/XPATH/XSLFO, Elasticsearch, MongoDB, MySQL, Redis, Solr/Lucene, Graphite, Kibana, Grafana, Logstash, Icinga, Jenkins, Varnish, HAProxy, Pound, Nginx, Apache, Passenger, Vagrant, Docker, DCOS, Kubernetes, SSH, OpenVPN, TCP/IP, tcpdump/strace/lsof/etc, AWS (EC2, ELB/ALB, S3, CloudFront, Lambda, Batch, VPC, etc.
by philipallstar | 2025-09-02 11:01:03+00:00
I agree that is a problem, but the main thing the eye-rolling posts seem to be about is CoC stuff, real or imaginary.

Example of eye-rolling post, above:

> Sadly, Kent responds to everything in an email except the key part that is being pointed out to him (usually his behavior). Or deflects by going on the attack. And generally refuses to apologise.

And there's an email thread linked somewhere here where a CoC member repeatedly replies to Kent's emails with demands for a formal apology. All of this soft, subtle stuff adds up to an impression in people's heads, even though the main output of these projects should be highly complex software, and not bike-shedding email mediation.
by kouteiheika | 2025-09-02 11:02:02+00:00
As a non-American this is something I don't understand, so maybe someone with more context can explain. Why is this app even needed/desired?

As far as I can see there are two possibilities here: 1) ICE is abusing their power and illegally detaining and deporting people who shouldn't be deported, or 2) ICE is deporting illegal immigrants which don't have permission to be in the country so they shouldn't be in the country. In case of (1) can't they be taken to court? In case of (2) aren't immigration laws there for a reason, and surely we don't want to normalize selective application of law like in so many corrupt countries around the world? Isn't the rule of law a thing in the US?
by jorisboris | 2025-09-02 11:02:37+00:00
At that time time they were still hunter gatherers. So they might have been aware of their surroundings, but I presume not as much if they would have been a sedentary community.

The first communities started to settle more or less after the ice age ended, the sea level had risen and the planet had a more pleasant climate around 10000 years ago (source: I'm not a professional on this topic, just summarising what chatgpt tells me)
by petercooper | 2025-09-02 11:02:42+00:00
The right book at the right time can often be transformative opening up your mind to new ideas/possibilities and leading to better knowledge and wisdom.

I agree. I'm a bit of a used book shop dweller and collector of oddities myself and I'm often struck with this sort of inspired feeling after reading the most random old thing that might otherwise have ended up being recycled. There's so much human experience packed into old books that simply isn't available online at all. Kudos to anyone who makes a serious effort to collect and archive even a slither of it (not me - anything I have will end up in the trash when I die).
by basisword | 2025-09-02 11:02:43+00:00
That's because DTS is for people who don't watch the sport. To get them interested. If you've watched the sport for any significant length of time DTS is basically hell on earth to watch. They even go as far as showing footage in the wrong order (turn 1, turn 12, turn 4) to fit their narrative.

There are great technical writers that do pretty in depth analysis (including drawings) of all upgrades teams bring to their cars. I don't know the names off hand but I've seen these as far back as the early 00's. Strategy is covered pretty well on the live broadcast too by ex-strategy engineers.
by Defletter | 2025-09-02 11:02:59+00:00
Yeah, Java's generic-type erasure makes result types difficult, though as you mention in your code example, this can be mitigated some using switch guards. But you could also go into another switch:

switch (result) { case Ok(var value) -> println(value); case Err(var ex) -> switch (ex) { case HttpException httpEx -> { // do something like a retry } default -> { // if not, do something else } } }
by arnorhs | 2025-09-02 11:03:16+00:00
First off, since the sentiment here is really negative, I'd like to say that next.js is actually really good for what it does. You've done a great job at building the software that powers millions of websites at this point.

I think a big part of the negative sentiment derives from the fact that detailed documentation and reference documentation almost non-existant. The documentation mostly tells you what exists, but not how to use them, how they get executed, common pitfalls and gotchas etc etc.

The documentation is written to be easy and friendly to newcomers, but is really missing the details and nuances of whatever execution context a given api is in and does not touch on derived complexities of using react in a server environment etc.

This is a trend across a lot of projects these days - often missing all the nuances and details - writing good documentation is really hard. Finding the balance between making things user friendly and detailed is hard.

Keep it up
by inglor_cz | 2025-09-02 11:03:20+00:00
Rescue workers do their job willingly. No one really forces them to (usual exceptions for North Korea et al. apply here). I know an old emergency doctor who once survived a helicopter crash. He still walks with a limp and still flies missions with a helo, even though he is pushing sixty.

It is a specific sort of mentality on their part and frankly my experience with them is that they neither need nor appreciate any white-knighting for their safety. If they wanted a safe job, they could easily switch to pushing papers around, there is no shortage of such jobs in the modern world.
by x187463 | 2025-09-02 11:03:35+00:00
You were going to falsely report ICE sightings to scare undocumented workers away from their jobsite? How is creating increased anxiety and taking money away from laborers not an obvious moral failure? And to do so, not because there are mythical hard-working Americans in line to do the work, but because the completely normal suburban noise of yard work on a weekend is bothersome to you. That's a wild statement.
by fsflover | 2025-09-02 11:03:47+00:00
This is another project that knows what you need better than yourself. People are constantly asking them to add support to other hardware, but the answer is "it's insecure". This is completely wrong and forces everybody without a(n expensive!) Pixel to abandon reasonable security. Even Qubes OS allows installing itself on hardware without VT-d, with respective warnings, and plans to enable GPU acceleration in VMs on demand. Their priority clearly isn't to make as many people as possible more secure but to force Google on you.

Are you calling the above a "character attack"?

I would love to use GrapheneOS on my Librem 5 and Pinephone. No proprietary drivers are required. Yes, some security features are lacking. Yet it would be a win for everybody.

I didn't say anything about CalyxOS: I don't care about this.
by mywacaday | 2025-09-02 11:04:29+00:00
I can see a valid use for a version of chat control where the communications of all elected officials are retained forever and audited on a regular basis for doing anything illegal, proposing anything illegal, actions not in the public interest, cronyism etc. All data should be released when they die, 10 years after they leave office or upon conviction of a crime related to political appointment.
by basisword | 2025-09-02 11:04:47+00:00
You're forgetting the offset from undercutting. The cars don't need to be within 1s on track for it to matter - you could be within 4s and that extra 0.5s in the pit stop costs you the position if you pit later. Un-lapped 'traffic' is also critical. If you're trying to find a gap to pit into and it's tight an extra second could put you behind a slow car and cost you 'real' positions later.
by delfinom | 2025-09-02 11:04:55+00:00
Eh? Big players still run AGPL licensed services. The concern is not about the access to source code.

The concern is livelihood. When a big player swoops in, they can completely decimate your business because of shear scale advantages, they can undercut you into bankruptcy. And while sharing the source under even GPL is noble, it's just also kneecapping your ability to make and grow a new business if it's a tool/service that has market traction. The OG author having access to that modified source code does absolutely nothing to help them.

The big players are literally seagulls waiting to steal your current and future customers.
by gchamonlive | 2025-09-02 11:05:08+00:00
> what sort of integration wouldn't aspire to be seamless

That doesn't make sense to me. Seamlessness isn't an essential feature of any integration, just those that would lend themselves to zero-config deployments. I think the vast majority would require some form of configuration, either sharing credentials, or configuring resource limitations, devices, files and folders...
by sigmoid10 | 2025-09-02 11:05:35+00:00
>Step one would be getting an someone independent, ideally with some journalistic integrity

That's already part of the problem. Who defines what integrity is? How do you measure it? And even if you come up with something, how do you convince everyone to agree on it? One person's most trusted source will always be just another bought spindoctor to the next. I don't think this problem is salvageable anymore. I think we need to consider the possibility that the internet will die as a source for any objective information.
by pjmlp | 2025-09-02 11:06:15+00:00
You're missing the point courts are useless with current administration, for all practical purposes they are turning into a authoritarian regime, and many still think there is going to exist some magical elections to turn this around.

I see all the signs of Portuguese dictorship that ended in 1974, and I as first generation being raised in freedom got to hear and learn plenty of stories on how everything used to be.

Sadly also back home people have forgotten what it meant to live under authoritarian regime.
by basisword | 2025-09-02 11:07:10+00:00
You might like this video[1]. The driver crashed on his way to the grid. The team had a very limited amount of time to fix the car, on the grid. The video includes radio communication between the various parts of the team and they organise equipment, analyse the issue, and make sure they comply with the various rules. Really fascinating to see how something like this is managed so calmly.

[1] https://www.youtube.com/watch?v=IGwm1QmwN9s
by tonyhart7 | 2025-09-02 11:07:51+00:00
this is not doomer view, are you understand that there are entire generation of people that don't use browser at all????

they use only smartphone in their life and mobile apps for everything, Yes they use social media like tiktok,instagram etc never bother to use "open web" that live in browser

You can disagree but there are tons of people live in this walled garden
by SomeoneOnTheWeb | 2025-09-02 11:08:17+00:00
For the same price you have the Minisforum UM760 Slim which should be 100% compatible and provide VASTLY superior performances. Or you can check cheaper models that would have the same level of performance as the A5.

Geekom make nice products but they are usually both very expensive and very noisy compared to competitors. Their selling point is mainly their top-notch design, but I find these to be function-over-form most of the time.
by eadmund | 2025-09-02 11:08:19+00:00
> People can license their software however they want, but it is worth reflecting on why almost all open source authors go with a permissive license like MIT: because it is basically a "buyer's market." When choosing a database, distributed queue, blogging platform, or whatever, companies usually have a choice of at least several high quality open source options.

> If one of those options places restrictions on the users, then those users are probably going to choose one of the other options.

First, if someone isn’t paying, he’s not buying. ‘Paying’ should be understood broadly, e.g. code as well as money counts. A company paying dollars really doesn’t care that much about the license — plenty of companies pay for proprietarily-licensed products (even ridiculously limited ones, with dongles and high seat prices). OTOH, a company ‘paying’ with code contributions should prefer the GPL, because it knows that its contributions will never be taken away from it.

Second, the GPL does not restrict users; it restricts developers from restricting users.

The GPL family is the right way for individuals and companies to form a software commons in which all can benefit.
by 1oooqooq | 2025-09-02 11:08:29+00:00
lol. the most disappointing game in the history of gaming disappointments.

this video finally explain the reason. origin cheapened on the devs, giving only 30k upfront and then making them work on a Madden football port. and to add insult the ceo later joined to do bad voice acting. can't make this up. how top down companies even survive is a miracle.
by ohdeargodno | 2025-09-02 11:09:21+00:00
I wish there were strong enough words to tell you about how few shits I give about the name of a branch.

> Not that it really matters either way

But you still decided to make it your personal battle to make a comment remind people that the evil inclusive people did a no no by forcing you to rename your branches from master to main, yes.

>pays to be accurate.

No, it doesn't. Source: you knew exactly what I was talking about when I said main. You also would have known what I was talking about had I said trunk, master, develop or latest.
by hellcow | 2025-09-02 11:09:23+00:00
One is altruistic, akin to charity. It deliberately maximizes users’ rights to do anything they want with the software (freedom 0). I’m only in the lucky position I’m in now because of open source, and I want to push for more of that in the world with my wallet and my time.

I’m not going out of my way to support a commercial license. There are a million commercial blog platforms to choose from.