MurphyA/hacker-news huggingface dataset:
by twoodfin | 2025-09-11 18:06:51+00:00
Specifically, it leaks a kernel address inside a security-sensitive structure, which is supposed to be unpredictable / unknowable because the layout of kernel memory is randomized.

If you have another exploit that will write bytes under the attacker’s control to an attacker-supplied kernel address, you will be able to do the Windows equivalent of escalate to root.
by tengwar2 | 2025-09-11 18:06:56+00:00
Sort of. That used to be the case, and it's still what they teach on those courses. However there are now "20mph zones". These are signed on entry, but do not have the repeated small 20 signs of a normal 20mph limit. This means that you can no longer tell whether you are in a 30 or a 20. I have once seen something marked as a "40mph zone" but I suspect that this was a local aberration and did not have a similar rule.
by corimaith | 2025-09-11 18:07:15+00:00
According to https://www.ox.ac.uk/news/2024-04-10-world-first-cybercrime-..., Russia (58), Ukraine (36), China (27) and then USA (25) top the list, with Israel (2.51) at a measly rank 16.

So no, and I'm not sure why OP decided to single out Israel here given it is a order of magnitude less than the others and there are so many other nations, unless if they have a specific agenda to push here.
by altairprime | 2025-09-11 18:07:16+00:00
For those first discovering the PSL, a brief review.

There are ~90 prior comments concentrated mostly in two prior submissions from 2016 and 2021 so far: https://news.ycombinator.com/from?site=publicsuffix.org

This is the top comment on the 2021 discussion:

> Before you begin to make use of the PSL, consider some of its problems: https://github.com/sleevi/psl-problems

There are another couple dozen comments on a few submissions of that: https://news.ycombinator.com/from?site=github.com/sleevi

HN frequently suggests that DNS should be used to solve this; sleevi replied a few years back with:

> This has been a common suggestion since before the Publix Suffix List existed, as you can see from the linked issues in the text (and the references to the IETF DBOUND WG). Like most things, on first glance, it seems like it does make sense. Except it has a lot of issues, which you can see have been discussed for 15 years without resolution, even though yes, it would scale better.
by MattPalmer1086 | 2025-09-11 18:07:16+00:00
We should not downvote a post just because we may disagree with it. That doesn't foster curiosity and discussion.

It's clear that continual inflation makes us poorer (unless we can also obtain pay rises). To me it's also clear that having no inflation (or indeed, deflation) would disincentivise investment. So I'm in favour of targeting a minimal inflation rate.

If there are other economic systems that would give both growth and better distribution of the proceeds of it, I'm all ears. I couldn't really understand the social credit link that was posted or how that might work.
by ivarojha | 2025-09-11 18:07:36+00:00
Notion does solve this upto an extent. I think the problem I face with it is that it tries to be an "everything" app for teams. They've designed it in a generic fashion.

We have so much documentation in Notion for different parts of work: i.e. internal finance, support, marketing, sales, ad-hoc ideas docs. And then when dev and several parts of dev lifecycle are added to it, it looks like a clusterf*ck (excuse my language). Everything is in your face and navigation seems clunky when you organise things one under the other. And for some reason, editing docs feels like I'm typing on a remote server with 300ms delay (on my linux device, works smoothly on Mac).

This is a reason why I like Linear. An opinionated planning product.
by mgh2 | 2025-09-11 18:07:37+00:00
We don't, but can extrapolate:

[1] Reviewer comparison: https://news.ycombinator.com/item?id=45209164

[2] Specs: iPhone Air: 5.64mm, 165g vs. Samsung Edge: 5.8mm, 163g, 200MP camera, stereo, larger battery

https://www.facebook.com/theapplehubofficial/posts/galaxy-s2...

[3] Demand by young man: https://news.ycombinator.com/item?id=44678489
by jerf | 2025-09-11 18:07:56+00:00
This list sees a lot more updates than you'd probably think: https://github.com/publicsuffix/list/commits/main/

I was looking at this in terms of trying to keep an app up-to-date, and there was a lot more churn than I expected. If you have a security reason to be reading this, you may need to put some effort into maintaining this... at least, technically. I doubt there's hardly an app out there "properly" keeping up with this and the world seems to largely hold together even so.
Ask HN: Any learnings from launching on Product Hunt?
by mightymosquito | 2025-09-11 18:08:04+00:00
Hey folks! I’ve started a small blog+directory that focuses on early stage founders and their stories about getting traction and validation.

I am thinking of launching it on Product hunt in the coming week. This is my first time doing this so trying to wing it!!

do you folks have any advice or tips that were useful to you and think I could benefit from?

Thanks!!
by jqpabc123 | 2025-09-11 18:08:07+00:00
"With its proprietary on-route wireless solution now deployed throughout North America and Europe"

Yes, as expected and described above.

They are charging wirelessly at bus stops --- aka "on-route". This allows them to use smaller batteries with less weight for better *overall* efficiency.

This is obviously not applicable to CyberTruck and does not speak to the efficiency of the wireless charging process itself.
by simoncion | 2025-09-11 18:08:37+00:00
> What would that have to do with anything I just said?

It's a direct answer to the question you posed, which was email-quoted in the first line of the comment.

It relates the point of view of someone who's substantially tech-ignorant and -in part because they simply don't have time or energy to think much on the topic- entirely unaware of how the intelligence and infosec world works. People like that make up a somewhat-surprising fraction of the US population. Sometimes folks who work in computers are a member of this subset of the population!
by CuriouslyC | 2025-09-11 18:08:40+00:00
You're right, reviews aren't the way forward. We don't do code reviews on compiler output (unless you're writing a compiler). The way forward is strong static and analytic guardrails and stochastic error correction (multiple solutions proposed with LLM as a judge before implementation, multiple code review agents with different personas that have been prompted to be strict/adversarial but not nit-pick) with robust test suites that have also been through multiple passes of audits and red-teaming by agents. You should rarely have to look at the code, it should be a significant escalation event like when you need to coordinate with Apple due to XCode bugs.
by tmyklebu | 2025-09-11 18:09:52+00:00
Seems like the author is missing a trick?

You can use a simple hash table without probing to classify each number as either (1) first instance of a number in the table, (2) known duplicate of a number in the table, or (3) didn't fit in the table.

If you use a hash table with n buckets and one item per bucket and the input is random, then at least 63% of the distinct numbers in the input will fall into cases 1 or 2 in expectation. Increasing table size or bucket size improves this part of the math.

On really big inputs, it's probably still healthy to do a pass or two of radix sort so that the hash table accesses are cheap.
by d1sxeyes | 2025-09-11 18:10:01+00:00
More likely the second than the first. It’s already the case that you technically “record” the audio at one end and then transmit it to the other. I can also forward a caller to voicemail where their message is transcribed in real time, which is fundamentally the same mechanics.

Or even more likely, as others have suggested, it’s Apple being petty and withholding features from EU users to put pressure on the EU.
by AbstractH24 | 2025-09-11 18:10:06+00:00
But advocating for the struggles of one group and not another shouldn’t make one bad.

The whole idea of intersectionality makes it hard to build coalitions and turns everything into a problem that’s impossibly complex to solve and difficult to build a coalition around.

It’s the basic reason many leaders who the majority of a country dislike rise to power. Because that majority can’t put their differences aside.
by Karrot_Kream | 2025-09-11 18:10:31+00:00
I'm very sympathetic to this as well but I'm curious if you know any leads on research investigating this area as I hesitate to draw a conclusion with a feeling. I participate in a lot of hobbies that have autistic folks in it and I watched the same anger spread into those communities along with the predictable good-vs-evil rhetoric that autistic folks tend to fall into.
by pornel | 2025-09-11 18:10:45+00:00
GDPR is about collection and processing of personally identifiable information. These are specific legal terms that depend on the context in which the data is collected and used, not just broadly any data anywhere that might have something to do with a person.

GDPR is aimed at companies building user databases, not allowing them to completely ignore security, accuracy, user complaints, and sell anything to anybody while lying about it. It doesn't limit individual people's personal use of data.
by CuriouslyC | 2025-09-11 18:10:46+00:00
I have a static analysis and refactoring tool that does wonders to identify duplication and poor architecture patterns and provide a roadmap for agents to fix the issues. It's like magic, just point it at your codebase then tell the agent to grind away at the output (making sure to come up for air and rerun tests regularly) and it'll go for hours.
by cman1444 | 2025-09-11 18:11:02+00:00
- There were many weapons in fact, and there were vague plans, but not detailed ones. An insurrection is according to Webster's "an act or instance of revolting against civil authority or an established government".

https://www.reuters.com/fact-check/us-capitol-attack-rioters...

Even if there were no weapons, the events of the day still satisfy that.

- Just because something was deemed to be legal, does not mean it's okay and therefore not a threat to democracy.

- I never stated that gerrymandering was exclusive to Republicans. I know it happens on both sides, but it is a threat to democracy either way. My point about it being "increased" is because it is now being done mid-decade by Republicans rather than just when the census occurs.

- You frame this as if the second negates the first. Let me be clear, they are both threats to democracy. Thank you for providing me with another point of evidence towards my argument.
by krapp | 2025-09-11 18:11:17+00:00
Yes, this was a constant refrain by white moderates during the Civil Rights era, that black people should absolutely and under all circumstances refrain from violence and remain civil and respect the law.. all while they were being beaten, shot and lynched with regularity. MLK Jr. said such people were worse than the klan. The the feds shot him in the head.

It is an understandable argument but like "think of the children" it can also be used to normalize the violence of the state and de-legitimize dissent.

The entire country is flying flags flags at half staff in honor of Charlie Kirk. His murder is filling headlines across the country. It's being declared an act of domestic terrorism, and right-wingers are calling for civil war. Meanwhile the explicitly politically motivated murders of Melissa and Mark Holtman, the attacks on Nancy Pelosi and her husband, and the plot to kidnap Gretchen Whitmer go utterly unremarked upon.

We notice when the rhetoric about nonviolence implies that only one side should stand down.
by toomuchtodo | 2025-09-11 18:11:24+00:00
I am of two minds of this. I respect Bluesky's right to police their part of the ATProto, while also acknowledging this violates the free speech of its users and is a censorship choke point which should be refactored to defend against. A recent example are the most recent events in Nepal.

Nepal Prime Minister Resigns. Parliament / Ministires set on Fire. - https://news.ycombinator.com/item?id=45179679 - September 2025
by captn3m0 | 2025-09-11 18:11:27+00:00
> The M4 Max MacBook I'm using to write this would've ranked among the 50 fastest supercomputers on Earth in 2009.

I attempted to validate this: You'd need >75 TFlop/s to get into the top50 in the TOP500[0] rankings in 2009. M4 Max review says 18.4 TFlop/s at FP32, but TOP500 uses LINPACK, which uses FP64 precision.

An M2 benchmark gives a 1:4 ratio for double precision, so you'd get maybe 9 TFlop/s at FP64? That wouldn't make it to TOP500 in 2009.

[0]: https://top500.org/lists/top500/list/2009/06/
by dragonwriter | 2025-09-11 18:11:59+00:00
The guy who said “Jewish communities have been pushing the exact kind of hatred against whites that they claim to want people to stop using against them”? That Charlie Kirk?

> I’m not pretending Charlie Kirk was a saint or planning to livestream the funeral but it does puzzle me how people who share far more political DNA with the Nazis keep declaring that others are the "modern Nazis" or Goebbels equivalents.

Other than Fuentes and his farther-right faction that historically has attacked Kirk for being too wishy-washy and soft in his White nationalism, who do you think this “share far more political DNA with the Nazis” description concretely applies to?
by Sohcahtoa82 | 2025-09-11 18:12:05+00:00
Depends on what you're looking for.

I'm driving a Model 3 Performance right now. My wife drives a Honda CR-V, but is likely going to get a Hyundai Ioniq 5 N as her next car (Really, she wants the 5, but I'm going to pay the difference to get her into a 5 N). Meanwhile, my next car (And likely final car) will be whatever the first high-performance electric sports convertible is. Right now, none exist, though Porsche is working on a 718 EV, and Polestar is working on the 6. Tesla Roadster 2.0 is vaporware, as far as I'm concerned, and I don't want to buy another Tesla anyways.

I don't like the direction Tesla has gone with their designs. Eliminating the stalks, pushing the yoke (I know its now, and has been for a while, an optional feature), etc. I've gotten used to using a touch screen for everything my M3P, but having physical buttons for commonly-accessed things like climate controls would be nice to have again.
by amelius | 2025-09-11 18:12:11+00:00
I'm stuck on an nVidia Jetson system (which is Ubuntu based) and using Nix with the vendor supplied CUDA etc. is a disaster. Sadly, it is not possible to install other distributions either.

So while I'm happy for those who can run Nix, keep in mind that it is not a universally available path to nirvana (liberation from suffering).
by SilverElfin | 2025-09-11 18:12:35+00:00
> bsky staff only issued this warning begrudgingly, they were likely high-fiving each other for hours

That is certainly possible. Many tech companies have very powerful and organized internal activists that influenced their actions and culture for years, especially following the 2016 election. I do wonder if the management of these “events” is now done more by a small executive team and a PR or crisis team, rather than everyday employees. As in - there may be two distinct groups, one that acts maturely like with these statements, and the other doing the “high-fiving”.
by yathaid | 2025-09-11 18:13:02+00:00
>> Those are choices. If you want to do that, you need a process that can support it.

__need__ is doing a lot of work here. There is no forcing function to get OEMs to do this ASAP: 1) the market doesn't really care that much 2) there are no regulations around this (and even if they were, can you immediately recall a tech exec going to jail for breaking the law ... )
by bogwog | 2025-09-11 18:13:23+00:00
I use Bazzite, which ships with the homebrew package manager. Idk if wireshark is available on homebrew, but if it is then you'll be able to use it that way without having to deal with any issues related to containers. Nix is probably another option (you can use Nix as a package manager instead of a distro)

You could also build it from source, although that's definitely more work.
by tracker1 | 2025-09-11 18:14:16+00:00
I find that it's heavily dependent on the drive speed, so I've leaned into getting current generation, very fast drives as much as possible when I put together new computers and sometimes a mid-generation upgrade. Considering I often do consulting work across random projects, I pretty often am having to figure out and install things in one mono repo managed with pnpm, another with yarn, etc... so the pain is relatively real, that said, fastest drive matters as much or more, especially with build steps.

When handling merge/pull requests, I'll often do a clean step (removing node_modules, and temp files) before a full install and build to test everything works. I know not everyone else is this diligent, but this can happen several times a day... Automation (usually via docker) can help a lot with many things tested through a CI/CD environment, that said, I'm also not a fan of having to wait for too long for that process... it's too easy to get side-tracked and off-task. I tend to set alarms/timers throughout the day just so I don't miss meetings. I don't want to take a moment to look at HN, and next I know it's a few hours later. Yeah, that's my problem... but others share it.

So, again, if you can make something take less than 15s that typically takes much more, I'm in favor... I went from eslint to Rome/Biome for similar reasons... I will switch to faster tooling to reduce the risk of going off-task and not getting back.
by antisthenes | 2025-09-11 18:14:31+00:00
Even more reasons for insurance companies to not exist.

Not only does what you describe introduce additional middle-man costs that aren't being spent on actual care, but it also obscures the overall health of the public, by creating a number of private health pools that are administered separately.

If we had a single payer system, we'd have much better data on spend vs outcomes and would be able to direct the flow of care much better.
by toomuchtodo | 2025-09-11 18:14:59+00:00
Are we decentralized yet? - https://news.ycombinator.com/item?id=45077291 - August 2025

Blacksky grew to millions of users without spending a dollar - https://news.ycombinator.com/item?id=45018773 - August 2025

Introduction to AT Protocol - https://news.ycombinator.com/item?id=44965233 - August 2025

> In the early days of Bluesky, Black users felt they were being pushed off. Blacksky became a platform for Black users to feel heard and seen. To create Blacksky, we wrote our own implementation of AT Protocol (called “rsky” and pronounced “risky”). An underlying premise of Blacksky’s rsky is to not only “seize the means of production,” as well as the distribution, but to also act as a “dual power” structure.

> Blacksky’s rsky guarantees our community a seat at the table, and ensures that we can leave and easily make our own table if we need to. That’s the true promise of decentralized social media. [My note: Most relevant part, the rest included for context]

> Clearly I think that decentralization is great, not only for the problems it prevents, but also the new possibilities it creates. But if everyone’s running their own servers, apps, and moderation teams, how do we do global social media? That’s where our vibrant open source developer community comes in.

> Blacksky runs our own global relay at https://atproto.africa, which we built from scratch. Every day, our relay stores its own copy of the hundreds of gigabytes of data of all known AT Protocol accounts — 36 million and counting. We also developed what we call our “moderation relay,” which lets us know about all of the moderation decisions ever made by all mod teams globally.

Think of Bluesky not as a Twitter equivalent platform, but a funded experiment and incubator for bootstrapping a protocol where multiple platforms can operate independently of each other. You can scale a community to tens of millions of users for under a few hundred dollars per month in tech spend (storage, compute, transfer). This is very accessible imho.

Broadly speaking, I understand that there might be speech out there that I find exceptionally distasteful, but that is the speech in many cases (but not all) I am willing to protect, because you don't know when the capability to censor will be weaponized. This remains in constant tension so long as humans are humans. There is no solution, only constant evolution.
by noboostforyou | 2025-09-11 18:15:53+00:00
I appreciate you sharing your viewpoint. And I should clarify that when I say "Israel" I'm referring to the state and its military, not individual Israeli citizens who probably have nothing to do with the killings.

> It is a really complex situation, that's all. No innocent deserves to die in either side.

Absolutely no innocent deserves to die on either side, 100% agreed. I still don't think the killing children part is complicated at all - there's zero justification for it. But the overall situation is definitely very complicated due to a long history of conflict on all fronts.

> They usually falsify the data also. So I am not sure how that data is but I acknowledge this is wild.

The death toll numbers I used are from a peer-reviewed UK publication that more or less corroborates the numbers reported by Gaza itself.
by Night_Thastus | 2025-09-11 18:16:32+00:00
I'll be totally honest, I do not get the appeal of foldable phones, at least with the designs I've seen so far.

I guess you can unfold it to get a bigger 2-part screen? That's about it?

I'd imagine that having it be un-foldable compromises the battery life, overall thickness (when folded) and weight to at least some extent - plus it costs way more. Is the additional screen real-estate really worth that?
by didibus | 2025-09-11 18:16:42+00:00
I want to understand the distinction you're making against vibe coding.

In vibe coding, the developer specifies only functional requirements (what the software must do) and non-functional requirements (the qualities it must have, like performance, scalability, or security). The AI delivers a complete implementation, and the developer reviews it solely against those behaviors and qualities. Any corrections are given again only in terms of requirements, never code, and the cycle repeats until the software aligns.

But you're trying to coin a term for the following?

In ??? coding, the developer specifies code changes that must be made, such as adding a feature, modifying an existing function, or removing unused logic. The AI delivers the complete set of changes to the codebase, and the developer reviews it at the code level. Any corrections are given again as updates to the code, and the cycle repeats until the code aligns.

Did I understand it right?

If so, I've most seen the latter be called AI pair-programming or AI-assisted coding. And I'd agree with the other commenters, please DO NOT call it async programming (even if you add async AI it's too confusing).
by ACCount37 | 2025-09-11 18:16:58+00:00
The words you're looking for are: "transfer learning".

Currently, dedicated robotics datasets are pathetic - in both the raw size and domain diversity - compared to what we have for generative AIs in domains like text, sound, video or images. So adding any more data helps a lot.

If you trained a robot to fully strip down a specific e-scooter model - whether for repair, remanufacturing or recycling - that training data would then help with any similar tasks. As well as a variety of seemingly unrelated tasks that also require manual dexterity, manipulation and spatial reasoning.

Those "9999 specializations" all overlap in obvious and subtle ways - and they feed little bits of skills and adaptations to each other. Which is why a lot of the robotic companies are itching to start pushing the units out there as soon as they are able to perform some useful tasks. They want that real world training data.