MurphyA/hacker-news huggingface dataset:
by alabhyajindal | 2025-09-30 07:59:00+00:00
Love the idea. From the FAQ section on the website:

> Organizers can keep a portion of sign-up or event fees

Isn't this a given? Don't event organisers expect to keep the entire sign-up fee for themselves when they host an event? The website banner reads:

> Build an IRL community. Get paid for it.

I was under the impression that onthe.town will pay the organisers from their own pocket for organising the event, but that does not seem to be true.
by somenameforme | 2025-09-30 07:59:58+00:00
Absolutely, although by then electricity, radio, urbanization, and other such things had already radically reshaped the overall character of society to be something much closer to today than of Jefferson's time.

Jefferson, in modern parlance, would probably be a 'pragmatic libertarian.' He envisioned independent self-reliant people, and in fact (like many of the Founding Fathers) was somewhat opposed to 'economically dependent' people, including wage laborers, voting - for fear that their vote could be coerced too easily, and that they might otherwise be irresponsible. That's where things like property ownership came from as a voting requirement.

And a major part of self reliance is an education that is both broad and fundamental which is where the 'pragmatic' part comes in, as I think fundamental libertarianism would view education as exclusively a thing of the private market, whereas Jefferson supported broad and public education precisely as part of this formula to independence.
by trueismywork | 2025-09-30 08:00:03+00:00
No, there's a difference. BSD, MIT and Apache (permissive licenses) are generally used when the provider doesnt care how the end result is used. So, even if other people relicense their code containing Apache licensed part, it doesnt change the business model of that code.

In contrast, affero style copyleft licenses are used often specifically to support a business model which allows contributors to take changes from other people back into their code. And an uncaring party can take EUPL code, relicense it under AGPL and now, the original party cannot use the AGPL code.

Linus made the same argument for not having GPL 2.0 or later for linux kernel.
by Jensson | 2025-09-30 08:00:19+00:00
> I sometimes wish companies were more open to accepting these roles, instead of the up or out model.

But companies live or die by talent / passion density. If you try to only hire talented / passionate people, then many of them will still just be fit for grunt work so grunt work still gets done. If you on the other hand hire for grunt work you wont find much talent at all so company fails after a while.
by unwind | 2025-09-30 08:00:24+00:00
It took them the entire first section to not mention that it is a _software license_.

In the context of EU regulating stuff, "a license" (at least to me) is not automatically assumed to be with regards to software distribution rights. I get that the naming makes it look similar to the (L)GPL and so on, but that could just be marketing and/or someone trying to associate with known things.

The first paragraph after the main title would have been better if it had a second sentence:

What is the EUPL? EUPL is an acronym for "European Union Public Licence". It is a software distribution license.

That would (to me) have made it so much more clear, and avoided having to build up confusion while reading until the purpose was revealed.
by Eisenstein | 2025-09-30 08:00:27+00:00
I made this as a first step in the process of organizing large amounts of images. Once you have the keywords and descriptions in the metadata, it should be possible to have a more powerful text only LLM come up with an organizing scheme and enact it by giving it file or scripting access via MCP. Thanks for reminding me that I need to work on that step now since local LLMs are powerful enough.

* https://github.com/jabberjabberjabber/ImageIndexer
by port11 | 2025-09-30 08:01:05+00:00
That's a very good approach.

What I've been trying to do is have the critical apps on the iPhone, which stays home; then take the Graphene around as much as possible. It's making me use the phone less as well, since my Pixel isn't very interesting.

Now to convince more family members to connect via a VPN… hmm. No wonder we lost the war on privacy.

Maybe check that your partner has Advanced Data Protection on. iCloud without it is what got us all these iCloud leaks in the past.

And thank you for the kind words :)
by kakacik | 2025-09-30 08:02:55+00:00
That's trivial to solve and you are attacking the problem from wrong direction. Simple answer is: long term punishment for bad behavior. Company, executives, and indirectly but intensively shareholders. Make it an example, and make it fucking loud example for everybody.

Anybody wanting a stable long term cash flows will align, and do their best to fix this. This is how banks were put in line after 2008, very effectively. No western bank knowingly circumvents new related regulations, punishments would be absolutely crushing and never worth the risk. Those people up there are not stupid, this is how calculus for criminals works.
by geokon | 2025-09-30 08:03:16+00:00
Where can you find a good description..?

Does it have the equivalent "anti-Tivoization" requirement of GPLv3?

I found Linus Torvalds' arguments for GPLv2 (vs v3) very compelling, but the SaaS loophole to contributing back seems sort of absurd. Torvalds doesn't get his code changes either.. so I feel he's likely also not thrilled. I'd love to find something that's effectively AGPLv2 (and not v3)

EDIT:

Here:

Nevermind .. it seems to have bizarre relicensing loopholes..

https://www.gnu.org/licenses/license-list.en.html#EUPL-1.2

Seems a bit insane - esp the two step relicense :

> The EUPL allows relicensing to GPLv2 only and GPLv3 only

So I guess you just relicense to GPLv2 and then do whatever you want
by GeertJohan | 2025-09-30 08:03:36+00:00
I believe there is a problem/conflict with the networked-software clause and the EUPL's compatibility clause. It allows anyone to fork a project under the GPL license. When someone makes a fork of an EUPL project under the GPL license, they are then bypassing the extra conditions set out in the AGPL. I believe this to be a mistake/loophole in the EUPL. But I am not a lawyer so I really hope an actual legal expert can weigh in on this.
by adev_ | 2025-09-30 08:04:14+00:00
That does not seem to be the case

> If the Licensee Distributes or Communicates Derivative Works or copies thereof based upon both the Work and another work licensed under a Compatible Licence, this Distribution or Communication can be done under the terms of this Compatible Licence.

They do mention explicitly "Derivative works", meaning you can not just convert an EUPL software component to GPL and call it a day.

To my understanding: If you do include an EUPL component inside a GPLv3 project and it is allowed. But the component itself stay under EUPL.

(I would appreciate the confirmation of a lawyer from EU, I am not one).
by b3kart | 2025-09-30 08:04:49+00:00
Sounds like you’re describing how things are, while the author is describing how things are ought to be. It’s fine to be obsessed and sacrifice the rest of your life for a job if that’s your choice. If that’s the only option to succeed, however, you severely limit the pool of people who are willing to make that sacrifice, and (I believe) slow down the inflow of ideas and creativity that push science forward.
by graemep | 2025-09-30 08:04:50+00:00
> t clarifies a lot of things that for example the GPL leaves unsaid, due to the different legal framework

Such as what?

> And it is good that it explicitly calls out the legal jurisdiction it sits under (EU).

Offputting if you are not in the EU.

> It's good that it has been written in multiple languages to aid acceptance across the EU.

Yes, but it looks like its designed primarily for use by the EU itself. It says:

> The main objective of the European Commission is to distribute widely and promote the use of software owned by itself and other European Institutions under an Free/Open Source Licence conform to European law requirements.

Its great that the EU commission is committing to open source, but only EU institutions rather than a broader push for FOSS in the EU.

> Would be nice to see reciprocation so the new software could also be published under the EUPL

Unlikely, because no one other than an EU agency would want some of the clauses. The click to agree thing in particular.
Show HN: Piles – zero-interaction web clipping
by lakrizz | 2025-09-30 08:06:02+00:00
I built Piles, a simple browser extension that lets you save highlighted text instantly as notes.

No tags, no categories, no formatting — just highlight your text → save in piles → keep reading.

Setup takes less than a minute: enter your email, click the link, install the extension, done.

Would love to hear your feedback, ideas, or critique.
by jcjgraf | 2025-09-30 08:06:08+00:00
Author of the VMScape paper here.

It's great to see an article highlighting the impact of VMScape on Xen, especially since our paper [1] does not discuss Xen in detail (we only briefly mention it in the blog post [2]).

That said, the article unfortunately lacks technical precision. Some statements are vague, and "our quote" ("According to the ETH team") is misleading, as those are not our words. To be clear: VMScape is not a cross-VM attack. So please treat such summaries with caution.

Here are some clarifications:

The core issue lies in the hardware. On all AMD Zen CPUs, the branch prediction unit cannot natively distinguish between host user, guest-1 user, and guest-2 user domains (newer Intel CPUs can do to some extend). Supervisor domains (host or guest kernel) are protected by the CPU effectively disabling speculative execution in those domains. But because user domains share branch predictor state, execution in one can control speculation in another - the fundamental root of Spectre-BTI. To enforce isolation, predictors must be flushed (IBPB) whenever transitioning between such domains.

On Linux KVM, an IBPB is issued on guest-1 to guest-2 switches and on process switches. However, because a guest runs in the same process as its userspace hypervisor (e.g. QEMU, firecracker, etc), there is no isolation mechanism in place for this transition. VMScape exploits exactly this gap. The mitigation is to add an IBPB on guest to host userspace transitions.

Xen, while also running on the same flawed hardware, is not vulnerable to VMScape. But the reason is not (just) asynchronism. Asynchronism makes exploitation only harder. Instead, the key reason is that the equivalent of Linux's userspace hypervisor runs inside Dom0 on Xen, which is itself "treated like a guest". Because Xen already issues IBPBs between guest transitions, Dom0 is protected from DomU.

Assigning responsibility for vulnerabilities at the hardware–software boundary is inherently challenging and often depends on implicit assumptions about the threat model. VMScape introduces a novel threat model that had not been considered before. Consequently, the responsible entities concluded that the lack of host/guest branch predictor state isolation does not qualify as a hardware issue, since adequate mitigations, such as IBPB, are readily available, but insufficiently used by software.

[1] https://comsec-files.ethz.ch/papers/vmscape_sp26.pdf [2] https://comsec.ethz.ch/research/microarch/vmscape-exposing-a...
by magicalhippo | 2025-09-30 08:06:48+00:00
I guess in theory there is nothing stopping the system from providing yet other files, like say "/proc/123/ctl/description" which provides a human-readable description of what "/proc/123/ctl" does, and "/proc/123/ctl/schema" which provides a standardized schema for interacting with the parent, akin to a XSD or JSON Schema.
by lynx97 | 2025-09-30 08:09:15+00:00
I always wonder about the heroin comparison. I just doesn't check out for me. Feels inappropriate. Heroin has pretty pronounced withdrawal symptoms, which are (AIUI) mostly physical withdrawal. At least from personal experience, nicotine withdrawal doesn't do anything to me. I just recently spent a day in an ICU, and had no craving at all. Same for longer smoking breaks, like a week or two. No craving. However, I sometimes miss the socialisation / being occupied thing, which is plain mental addiction. Maybe I am special in this regard, but I doubt it. Most "nervious" smokers I met were, IMO, "protesting" against the fact that they are currently not free to do what they wanted. You can hype yourself up a lot without actual physical reasons.
by ajdlinux | 2025-09-30 08:10:28+00:00
Yeah, you're wrong - a court simply isn't going to consider a lawnmower's translation of throttle input to motor power as "inference". The principles of statutory interpretation require courts to consider the context and purpose of the legislation, and everyone knows this is about GPT-5, not lawnmowers.

In any case, that definition is only used to further define "foundation model": "an artificial intelligence model that is all of the following: (1) Trained on a broad data set. (2) Designed for generality of output. (3) Adaptable to a wide range of distinctive tasks." This legislation is very clearly not supposed to cover your average ML classifier.
by brunorro | 2025-09-30 08:10:39+00:00
About doing one thing and doing it well, the best (anti) example is systemd. I think that having a DNS resolver and mounting your partitions should be two totally separated things. Fortunately nobody uses syste... Oh, wait!

About the code should be understandable and the efficiency, I'm thinking of the old times java. I've seen people in systems department having to profile java stuff because they were OOMing their tomcats. Eventually we had to ask for the code, debug it and send it patched with just some '=null' because the GC wasn't doing its job in the best way. In the early 2000 the philosophy already was "Good hardware is cheaper than expert developers" :(
by bell-cot | 2025-09-30 08:10:50+00:00
> The telephone system's address plan embedded a certain amount of physical location information in the fixed line network, and a full E.164 telephone number indicated your location in terms of your country, and your area within that country.

vs. modern reality

https://xkcd.com/1129/

(And who hasn't experienced a Customer Support phone number that is answered in different parts of the world, based on the time of day?)
by ThrownOffGame | 2025-09-30 08:11:15+00:00
Sure, I could order plain "insecure" checks, but those aren't the one I'm depositing by image. My checks are written to others and I've got no idea how they deposit them.

I've received checks with watermarks, temp-sensitive ink, you name it, and I almost never walk into a branch anymore. As long as the mobile app works, the image is the negotiable instrument, and I can't change what others give me.
by keiferski | 2025-09-30 08:11:29+00:00
To me the key element is the addiction aspect. It’s one thing to ingest a substance which has good short term results but bad long term ones, but entirely another when the machinery of corporations is used to maximize that usage and make it as addictive as possible.

As a side note, the movie The Insider by Michael Mann with Al Pacino and Russell Crowe is the single most effective anti-smoking thing I’ve come across. It shows how evil those corporations are and what they did to a whistleblower.
by techpression | 2025-09-30 08:11:43+00:00
It took me one question to have it spit out a completely dreamt up codebase, complete with emojis, promises of solutions and fixing all my problems, and of course nothing of it worked. It was a very simple question about something very well documented (Oban timeouts).

I doubt LLM benchmarks more and more, what are they even testing?
by rimmontrieu | 2025-09-30 08:11:56+00:00
libGDX is not in the same spotlight as Godot or Unity but still popular within Java devs circle.

I'm not aware of any resources explaining the "why libGDX" but here are some differences, speaking from my own experiences:

- Code oriented development, no authoring tool, no drag and drop, just you and the API, which might attracts traditional devs who prefer a pure coding approach.

- Very thin abstraction over the platform graphics layer, it just adds a few more drawing APIs over the underlying graphics API (OpenGL and WebGL). You’re free to build your own abstractions on top of the core APIs.

- Java, while might be verbose, is very stable, easy to learn and has huge ecosystem. Or you can just use Kotlin.

- Once you learn the ins and outs of the framework, it actually has a greater sense of freedom compared to Unity, Godot, Unreal, etc because those engines always force you to do things in their own opinionated ways.
by za3faran | 2025-09-30 08:13:17+00:00
Islamic conquests - not Arab. It’s worth remembering that the longest-lasting Caliphate was the Ottoman Caliphate. As I’ve noted, Islam transcends race and ethnicity. Scholars have acknowledged that mistakes were made by some during these conquests, but such actions were contrary to the core teachings of Islam and have been openly recognized as such.

What is happening in occupied Palestine today—witnessed by the world and actively enabled by certain Western powers—is a tragic chapter in human history. History will judge it with the same moral clarity and horror as the atrocities committed by a certain German regime during and around the WWII era. Already, we are seeing a growing awareness among Western civilians, who are beginning to recognize and challenge what their governments are supporting.
by arthurofbabylon | 2025-09-30 08:13:52+00:00
This reads as rather naive. You think India’s governance is “no good”? It is literally the most culturally complex place on earth, so you might need to recalibrate your metrics and criteria.

Additionally, if you believe Nigeria has a near zero chance at good governance, then I suspect you have not read very much history or anthropology. Every instance of civilizational development looks pretty much impossible, and yet “good governance” emerges over and over again. The story of humanity is one of surprising social innovation, and I would never count Nigeria out.
by nsagent | 2025-09-30 08:13:55+00:00
I also used to submit to *ACL conferences exclusively, and was even a SAC, but got out of the academic game altogether. I'm still conducting research, but as an independent researcher for my own startup. The system seems to be more and more bananas over time and no one is willing to just force a change. It's really a tragedy of the commons.

That said, why don't conferences work like journals: if you're rejected you cannot resubmit. Find a new conference. That gets rid of the queuing problem. Yes, you'll have some amazing papers that will not be accepted by a top conference. So what, it happens to everyone. Plenty of influential papers were not published in a top conference in ML/AI/NLP.
by sampaul058 | 2025-09-30 08:14:31+00:00
Wow, that’s really eye-opening. It’s one thing to know smoking harms your own health, but realizing it could affect your future children at a biological level adds a whole new layer. The idea that habits formed as a teenager can leave such a lasting legacy is honestly a bit scary. Just more reason we need to keep pushing awareness and prevention, especially for young people.
by jcjgraf | 2025-09-30 08:14:47+00:00
Indeed, victim (e.g. userspace hypervisor like QEMU, firecracker, etc) and attacker (e.g. malicious guest) need to run on the same core. But with VMScape this is always give, because a guest runs as the same process as its hypervisor. Before VMScape, developers only isolated different VMs, different processes and supervisor domains from malicious users. VMScape explits a novel threat model.
by aw1621107 | 2025-09-30 08:15:04+00:00
I don't think that's quite a 1-to-1 match for what's described in the article. Both C#'s Span<T> and your span type are type- and bounds-safe, but the former has additional restrictions placed on its usage thanks to the `ref` keyword that guarantee that it will be free of lifetime errors as well without needing to involve the runtime.
by arp242 | 2025-09-30 08:15:07+00:00
There's a few, but not too many. See e.g. some package repos:

https://github.com/search?q=repo%3Afreebsd%2Ffreebsd-ports+%...

https://github.com/search?q=repo%3Avoid-linux%2Fvoid-package...

https://github.com/search?q=repo%3ANixOS%2Fnixpkgs+%22EUPL12...

Most of the software from the EU and some governments are also under EUPL, but those tend to be "source dumps" that no one really builds.
by AnthonyMouse | 2025-09-30 08:16:52+00:00
Boeing is at the end stage of the feedback loop where regulatory failures lead to monopolies and vice versa.

The regulatory failures usually come first, either a failure of antitrust (they're allowed to buy up the competition) or a regulatory environment that itself puts the competition out of business. Then you have a consolidated market.

Monopolies are like cancer. They metastasize. If you didn't have regulations that keep upstart competitors out of the market before, the incumbents will welcome them if not actively lobby in favor of them. And then you're stuck with them. They're too big to fail. If you had 10 other domestic aircraft companies and one of them was screwing up, they'd not only have to contend with customers going somewhere else, the government could actually punish them. Whereas if there's only one, what are you going to do? Bankrupt the only domestic supplier? And they know it.

The only way out of it is to restore competition. But the longer you wait, the harder it gets to fix it.
by IshKebab | 2025-09-30 08:17:28+00:00
> Bring back the joy of shell scripting.

There was joy?

Seriously though, this actually doesn't look half bad. The problem is you can easily achieve the same thing in basically any standard scripting language (Typescript, Python, etc.) just by replacing backticks with a function call.

Actually in Typescript you can use tagged string so it could just be one extra character if you want:

let result = x`ls -l`;

Is saving that one character worth using a niche language?
by monkeydust | 2025-09-30 08:17:46+00:00
Been starting to wonder if this marks a step change in UX - moving away from pretty well designed screens where designers labor over positioning of artifacts like buttons, user input dialogs and color palettes to a CLI! I cant imagine CLI will work for everything but for a lot of things, when powered by LLM they are incredible and yea equally dangerous at the same time for many reasons.
by mnw21cam | 2025-09-30 08:18:10+00:00
I did some analysis on this recently with a load of simulations. If you ignore the sunlight bouncing back from the surface (and I suspect this might still be the case if you don't ignore it), then the best orientation that maximises winter generation is to have the panels pointing towards the equator and tilted to directly face the Sun at its lowest point at noon in winter. Pointing them lower down (like vertically) reduces the generation. If you're reasonably far from the equator then this is still fairly close to vertical, probably good enough for snow to slide off them.

If you're close to the equator, then vertical North-South panels will generate very little indeed.
by xandrius | 2025-09-30 08:19:35+00:00
Whenever something from the EU emerges on HN, whatever that is, a comment exactly like yours is made.

Today it's you, tomorrow someone else.

Always the same "points" and the poster always seems to feel obliged to bring their own misshapen view of history, forgetting that a lot of good changes in this so-called "free market" happened because of the EU.

Sure more tech became popular out of the US but let's not be blinded:

1. This tech isn't/wasn't the only innovative tech ever created

2. A lot of reasons for the popularity has to do with US position over the rest of the world

3. That this same tech has been kept at bay because of the US

I'm not saying the EU is perfect but I prefer its direction over the US, especially when it comes to making legislations which benefits the people rather than multinational corporations.