MurphyA/hacker-news huggingface dataset:
by ezst | 2025-09-01 10:44:04+00:00
Some time ago I realised how vulnerable I was keeping all my TOTPs in Authenticator __only__, in the event of losing/breaking my device (and no, there is no way I would sync them to Google cloud). This taught me few things:

- there isn't much to Authenticator and TOTPs in general, it's just a secret, which can be shared across multiple TOTP managers and devices. I had solved the "single point of failure" concern

- that opened a new need for "safe TOTP replication with offline access", and that's how I ended-up running my own vaultwarden instance and using the bitwarden clients across devices.

I'm glad I did, and I can't recommend it more. IIRC, this¹ helped tremendously along the way.

¹: https://github.com/scito/extract_otp_secrets
by blitzar | 2025-09-01 10:44:15+00:00
> However I have yet to see Battery storage feature in the charts for UK energy usage yet.

There are also four pumped-storage hydroelectric power stations providing a further 2.8 GW of installed electrical generating capacity, and contributing up to 4,075 GWh of peak demand electricity annually.

https://en.wikipedia.org/wiki/Hydroelectricity_in_the_United...
by Yizahi | 2025-09-01 10:44:19+00:00
If I had to guess - "political bubble (bursts)" is when an extremely incompetent and/or radical politician suddenly is elected to one of the top posts in a country. So it's like a closed off boiling pot - incompetent radical has 5% of the electoral base and nothing happens, then 10%, then 20%, 30%, 40%, still nothing, and then one day he "suddenly" crosses 50% threshold and bubble bursts, he is now in charge for real.

For example in France their own Le-Trump aka Marine Le Pen had 41% votes last election cycle, so nothing really happened and system centrists won again, politics remained moderate and predictable. But if she or her ideological successor even takes 50%... hooboy, EU will see some Orbanification just like USA does today.
by Aeolun | 2025-09-01 10:44:28+00:00
The moment I sign up for a PaaS the bill hurts. I can never get over the fact I can get 1000x more compute for the same price, never mind that I never use it and have to set everything up myself. I’ll just never pay to lock myself in to something so restricted. My dedicated server allows me to do anything I want or need.
by benrutter | 2025-09-01 10:44:49+00:00
I think a big reason for net-zero policies getting bad press, is that these kind of things are difficult to quantify. Energy is largely set by gas price, so having more non-gas assets on the grid probably means you do have cheaper energy (or, at least will have much cheaper energy in the future when gas ceases to dictate the energy price)

I guess what we can't do is step into the alternative world where there's less batteries and renewables, and complain about paying $0.6 per kwh.
Seeking benchmarking program, for math library functions
by newbie-02 | 2025-09-01 10:45:38+00:00
hi, I'm working in benchmarking and need to compare math library functions between different datatypes. E.g. pow( x, y ) in doubles vs. long doubles, want to cover also decimal datatypes. Think that's somewhere between "FLOPS" and "application". Actually I'm working with a homebrew iterating loop and timing with rdtscp(), it works quite good, for "throughput", however I'm curious if similar is available as standardized solution to gain comparability to other results, and get a standardized split in "throughput" vs. "latency". TIA for any help.
by rsynnott | 2025-09-01 10:45:52+00:00
Maybe you know some of the people who've already started and just got re-orged _for the fourth time in six months_ (per the article)?

I mean, if it was me, and I had a bit of a buffer (which, y'know, you'd assume most people in this position do), there'd be a temptation to say "screw that, life's too short", and take a few months off before looking for a job somewhere less silly.
by mrweasel | 2025-09-01 10:46:34+00:00
Learned that the hard way, never ever add ANYTHING to the Microsoft Authenticator app if you can avoid it. It is impossible to migrate to something else.

I had a client where I got a new phone and forgot about the Microsoft Authenticator. Three months later I had to go on site with the client to reset my Authenticator as signups could only be done from their network.
Show HN: Blueprint: Fast, Nunjucks-like templating engine for Java 8 and beyond
by freakynit | 2025-09-01 10:46:44+00:00
I love the simplicity, expressibility and extendibility of Nunjucks.

But I was not able to find something with similar for Java, especially with the same syntax.

So, built one. And it's pretty fast too.

https://github.com/freakynit/Blueprint
by tremon | 2025-09-01 10:46:52+00:00
the password and the "2FA" seed token are both the same type of secret string

This is a category error. The 2FA seed token may be a string of bytes just like the password, but the seed is never communicated outside your device. That makes them different types of secrets: a capture of the transmitted login codes will not compromise the 2FA seed. Even if you auto-generate the password in the same way, it's the actual valuable secret that needs to leave your device -- by design.

I don't know if a website database breach compromises both keys. Is the 2FA seed a pre-shared key, or is the algorithm asymmetric? I seriously hope it's the latter, but I don't know for sure.
by martin-t | 2025-09-01 10:47:00+00:00
Or they could "deplatform" anyone they don't like. Sure, you can live without google/meta/reddit/... but you will miss out on both business and social opportunities, especially if they do it without warning.

It will disadvantage you in life in ways which are hard to quantify for a single person (you don't know what you don't know) but will be measurable in aggregate.
by florieger | 2025-09-01 10:47:27+00:00
> If you want to play Playstation games on your PS5 you must suffer Sony’s restrictions, but if you want to convert your PS5 into an emulator running Linux that should be possible.

This is what Sony did with the PS3, but afaik Linux was then used as a backdoor to jailbreak the "PS3 OS" and sideload games.

I guess, this is why Sony abandoned the idea of allowing Linux on their consoles. Kind of sad, but understandable.
by brongondwana | 2025-09-01 10:47:42+00:00
This is why I trigger a segfault which dumps core at the spot where I had the printf when the conditions aren't what I want, so I can then open the debugger on the core (obviously: not if I have a copy of the input which can recreate it, if so then a debugger with a conditional breakpoint at the same spot is even better)
by BinaryIgor | 2025-09-01 10:48:36+00:00
The point of the test was to test a SYSTEM on the same machine, not just the app - db and app are on the same machine by design, not mistake.

Tests on the other hand were executed on multiple different machines - it's all described in the article. Sleep works properly, because there's an unbounded thread pool that makes http request - each request has its own virtual thread.
by funwares | 2025-09-01 10:48:44+00:00
Both his Instagram [0] and YouTube pages [1] are still up. He had a habit of uploading screen recordings of his chats with ChatGPT.

It looks like fairly standard incomprehensible psychosis messages but it seems notable to me that ChatGPT responds as if they are normal (profound, even) messages.

The 'In Search of AI Psychosis' article and discussions on HN [2] from a few days ago are very relevant here too.

[0] https://www.instagram.com/eriktheviking1987

[1] https://youtube.com/@steinsoelberg2617

[2] https://news.ycombinator.com/item?id=45027072
by SirHumphrey | 2025-09-01 10:48:45+00:00
One should not forget the reason for this growth though - the issues with privacy and users' control of devices on windows go back at least a decade, but most of this time nobody cared. It was only when Microsoft locked a lot of old computers out of Windows 11, Windows 11 proved a buggy slow mess, the google search results went down the toilet and the amount of adds on YouTube increased several times did people start to talk about "de-googling" and moving to Linux.

People are switching to Linux now because it works better. The privacy is still a nice-to-have bonus.
by AlecSchueler | 2025-09-01 10:48:59+00:00
> We actually have good evidence that the effects of heavy cognitive load are detrimental to both the brain and mental health. We know that overwork and stress are extremely damaging to both.

I don't think this is fair either, you're comparing "overwork and stress" to "work." It's like saying we have evidence that extreme physical stress is detrimental ergo it's "unambiguously" healthier to drive than to walk.

Maybe you could share your good evidence so we can see if normal coding tasks would fall under the umbrella of overwork and stress?
by rsynnott | 2025-09-01 10:49:05+00:00
I feel like it's kind of counterproductive; it comes across as "what you are saying is true, but we are not happy about, and also how very dare you say it", in a way that the more conventional "[blah] declined to comment", or a simple denial, does not.

Like, it's hard to see how it's a _good_ media relations strategy.
by zeta0134 | 2025-09-01 10:49:17+00:00
I use this, but recently ran into an issue: I only have one Android device. It's great to be able to back up my secrets, but frustrating to need to spin up an emulator on my computer to run an Android app just to use the backups, if my primary device is offline for whatever reason. Is there a way to use the vault directly?
by thw_9a83c | 2025-09-01 10:49:36+00:00
Perhaps we should stop viewing iOS/Android devices as true general-purpose computing devices. They are merely gadgets, like Walkmans, portable CD players, game consoles, blood pressure meters, car infotainment systems, etc. They contain CPUs with enough power and RAM to act as general-purpose computers, but Apple and Google did not design them for that purpose. However, Windows and macOS were designed as operating systems for general-purpose personal computers, and restrictions on the software you can run are also happening there. To me, this is more worrisome than the openness of mobile OSs.
by msgodel | 2025-09-01 10:49:39+00:00
Language matters. I actually really like what Stallman does. You need this kind of thing to counteract repeated exposure to marketing material. It's similar to the Dave Ramsey situation IMO. Dave Ramsey's advice is objectively bad but you need something to be repeated as an alternative to the credit ads people hear multiple times a day.

These simple repeated ideas slowly absorb into people's subconscious.
by jokoon | 2025-09-01 10:50:01+00:00
Easier said than done. The main reason companies don't allow it is sadly for security reasons, it's a cost/benefit.

If the government would enforce laws about computer security, tech companies would not have to restrict user freedom.

Obviously this situation benefits those tech companies, but honestly the solution is not as easy as it seems.

Of course it's a different story for the right to repair and DRM.
by dekken_ | 2025-09-01 10:50:21+00:00
> Why do you think discretisation/quantisation is necessary for the "physical"?

We are trying to explain, the physical reality we find outselves in, so, if the universe is fundamentally quantized, it must be discrete, as continuous math would reify infinities.

> What can I search for to find his comments on this subject?

You could check Curt Jaimungal's youtube, Hooft was on it recently.
by physicsguy | 2025-09-01 10:50:40+00:00
> Britain owes a debt to its colonies. The colonies owe nothing to it, except contempt.

There's pretty clearly a distinction between different individual colonies on this one. Something like the Falkland Islands which had no indigenous population is very very different from Jamaica which was a plantation colony full of slaves, which is yet again very different something like Aden (now part of Yemen) which had about 600 people living there at the time it was annexed and which has had a very very difficult post-independence story.
by danielvaughn | 2025-09-01 10:51:46+00:00
It completely depends on how you use AI. If you turn off your brain entirely and just coast as much as possible, then yeah your comment would apply.

But I think of work as essentially two things - creative activity and toil. I simply use AI for toil, and let my brain focus on creativity and problem solving.

Writing my 100,000th for loop is not going to preserve my brain.
by TrnsltLife | 2025-09-01 10:52:53+00:00
There's an interesting video I watched recently on how "manipulative reproductive suppression" may be an evolutionary tactic to ensure the success of one's own offspring at the expense of everyone else's. If true it's probably relevant to this question if not the only factor.

https://youtu.be/dPyD53BTEUY?si=8RRJtA40dS8jpSsp
by Aachen | 2025-09-01 10:54:11+00:00
> The second factor does not have to be a second device. Like everything security, it’s what you’re protecting against.

It doesn't matter if you store your 2FA seed on a billboard or as a tattoo where the sun doesn't shine: 2FA means two factors. The definition doesn't change when your home setup's threat model doesn't call for 2FA and you thus decide to store two secrets in the same place (making a compromise of one necessarily a compromise of the other, thus 1FA)
by pjmlp | 2025-09-01 10:54:28+00:00
No, we see many of Windows 11 nuisances as something to put up with, if we want to the freedom to drive to the local PC store to have any problem sorted out, while having aquariums (which I personally hate), to compete with game consoles in capabilities.

Some of us appreciate the NeXTSTEP heritage on macOS but don't want to put up with prices, or soldered components, killing any kind of expansion.

Also many of us do have decades experience with Linux, but decided to save the time spent with Linux tinkering during our youth, by using local VMs or cloud instances.
by rcxdude | 2025-09-01 10:54:28+00:00
And the rules demonstrably create situations where it's easy to introduce bugs or hard to fix them, because they prioritise stability and a consistent set of package versions over the version that the upstream developer has tested. Followed blindly (and without putting in the effort to test to the same level of rigor as upstream), this causes problems, and it's right to point those out. Debian's ways would involve the package maintainer putting in a lot more effort to marry their rules with a package that actually worked, and they were not up for that.

(Debian's rules aren't worthless, it's part of how they can make something that's pretty suitable for 'boring infrastructure' systems because they can keep a system with a known and stable set of behavior up to date with critical security fixes for a long time, but boy do they result in some dumb situations sometimes)
by r_lee | 2025-09-01 10:55:44+00:00
Your point about the drugs, that's not true unless you're chasing a high

It's not always possible for someone to just tell themselves to start obsessing over a perfect schedule and just do things perfectly

the whole problem is the inability to do those things.

Yes, you can do it to a degree, but a kind of "follow the instructions" rarely works for me in any way.

You saying you should only "try drugs" if this schedule doesn't work just makes no sense to me.

You can't treat ADHD with just a schedule
Ask HN: Polyglot Mirroring
by pheelicks | 2025-09-01 10:56:10+00:00
I've been working on a geospatial library, https://a5geo.org this year. Originally I wrote the code in TypeScript but have since ported to Python and Rust with the aid of Claude Code. The Rust port in particular required zero manual lines of code written by me to get working!

My strategy going forward is one of "Polyglot Mirroring", namely having the codebase in multiple languages in parallel where changes are mirrored using LLMs. I've brainstormed several ways to describe this, and the term I've come up for this is "Polyglot Mirroring". I'm wondering how that sounds to people?

Does anyone have experience with a similar pattern of development?

I've written more about the technique here: https://a5geo.org/docs/ecosystem/polyglot-mirroring

While it might not be for every project, with the cheap availability and quality of LLMs these days, I think it could be a viable technique going forward.
by styanax | 2025-09-01 10:56:28+00:00
Very interesting question, I have no experience here. What I do instead is scan my QR codes into two apps on different devices when I make them (I do not make them very frequently so it's not a chore). Because I'm sort of pessimistic after a lifetime working in tech - everything that uses electricity breaks and fails. I build redundancy into all my (things) and just expect one of them to fail. Goes for email providers, hard drives and OTP codes - if I could have a backup washing machine, I would. :)
by Sharlin | 2025-09-01 10:56:34+00:00
Sure, that’s an entirely valid execution. But this is about what exact pairs of values (x, y) are observable by each thread. Some are allowed, others are not, by the semantics of atomic loads and stores guaranteed by the CPU. The starting or joining order of the threads doesn’t matter, except insofar that thread starting and joining both synchronize-with the parent thread.

In general, in the presence of hardware parallelism (ie. always since 2007 or so) the very real corner cases are much more involved than "what if there’s an interrupt" and thinking in terms of single-threaded concurrency is not very fruitful in the presence of memory orderings less strict than seq_cst. It’s not about what order things can happen in (because there isn’t an order), it’s principally about how writes are propagated from the cache of one core to that of another.

x86 processors have sort of lulled many programmers of concurrent code into a false sense of safety because almost everything is either unordered or sequentially consistent. But the other now-common architectures aren’t as forgiving.
by motbus3 | 2025-09-01 10:56:41+00:00
My guess is just, well, a guess, but the real impact of tariffs will take some time to hit. For now it is a turbulence of the uncertainty, but as people understand how to work on this situation we'll see numbers getting more stable. My second guess is that inflation will grow as other markets will learn to deal with the situation. It is taking some time, but other economic blocks might make strong moves altogether causing at least a bruise in the metrics.

Also we need to remember that the guy responsible for the numbers was fired for allegedly political reason and that could have been political and no one will ever be sure. So how can one trust the numbers in that situation? It has been... Weird
by benrutter | 2025-09-01 10:56:46+00:00
> here you're making a left wing argument that individual bad actors must be regulated for the good of the collective. However, left politicians would look at the situation and see the opposite. They prioritize an authoritarian safety-first victim-first mindset, in which individual freedoms are sacrificed to help the weakest.

I think you're simplifying a few things here, mainly the amount of different views that are under the umbrella you're classing as "left-wing" (some of which will fit your categorisation, and some won't) and the amount of different issues under the umbrella of "running your own things".

What I'm trying to say is that there's multiple arguments to be made along the lines of "large companies can and should be restricted from blocking out freedoms of smaller companies and individuals". There's a big economic argument to allowing competition, and I think that's something that unites a lot of thinkers you'd probably class as right wing, as well as the traditional left.
by Aachen | 2025-09-01 10:57:36+00:00
You're onto something even banks don't seem to understand! The industry standard for doing financial transactions calls for 2FA but then they make a mobile app that can self-approve transactions. Yes, using only one mobile device is 1FA, just like using one desktop only, but people generally consider mobile OSes safer because the permission model and process isolation is on a whole other level
by sgjennings | 2025-09-01 10:59:04+00:00
I’ll focus only on the syntax of the command. Why you might need it at all is important, of course, but it’s nuanced and specific to how some people work (I never need this command or anything like it, for example).

> jj bookmark move

Presumably, this part is reasonably clear. “I want to move a bookmark.”

> main

Which bookmark to move. I think this is probably clear from context?

> --to @-

And here’s the part that looks foreign to a non-jj user. This syntax is familiar to jj users because the same revset syntax is used across the whole CLI. `@` is the working copy commit (the commit you have “checked out” that you are currently editing), and `@-` specifies its parent.

Because it’s just a revset, you could specify that same command in a number of ways:

- If you know the parent’s commit ID or change ID, you could use that instead: `--to abc123`

- If there happens to be another bookmark already there, you can use its name: `--to other-feature`

- You probably wouldn’t type this in the terminal, but you could do exotic things like `--to 'mutable() & description("foobar2000")'` to assign the bookmark to the work-in-progress commit that has "foobar2000" in the commit message.

Revsets used pervasively are one of the things that make the DX lovely.
by perihelions | 2025-09-01 10:59:28+00:00
Seems to be owned by an ad-tech company, the same one that bought (but later divested from) the Waterfox browser.

https://en.wikipedia.org/wiki/System1 ("System1 is an American Internet advertising company")

https://news.ycombinator.com/item?id=25716158 ("Startpage.com: Privacy-oriented search engine (startpage.com)"—88 comments)

https://news.ycombinator.com/item?id=22338321 ("Waterfox sold to System1, an ad company that bought a majority of Startpage (reddit.com)"—92 comments)
by fsflover | 2025-09-01 10:59:44+00:00
> This is why it's so important to defend the real principles here not just the technical artefacts of them.

You're not wrong, but technical artefacts can be an important step in the right direction. I came to my bank, showed them my Librem 5 phone and asked where I can download an app for it. It was a much clearer message than "but Android isn't free!" (which is of course true). I do the same with governmental services. It also makes it much easier to explain to ordinary people that the choice must not be artificially restricted to just two megacorps.
by Arcanum-XIII | 2025-09-01 11:00:14+00:00
Your comment show a lack of understanding of the condition. With ADHD, we suffer from difficulties with executive functions, like adhering to a planning, being able to chose to work on something... I have obsession: I can't decide on what. I can work at length on complex subjects, again, probably not the one you expect.

It's not a choice.

Medication is not a silver bullet, but it allows, as explained in the parent article to do those things.
by sshine | 2025-09-01 11:00:33+00:00
> on average people are unable to match a dishwasher

I completely agree. Just letting the water run for any amount of time, and the dishwasher wins.

> The only thing I don’t run in the dishwasher are wooden items and the couple of non-stick items I still have left.

I don't machine wash: Wine glasses, sharp knives, wooden items, non-stick items, too big pots, and some plastics that deform at high temperature.

I also don't machine wash if there's few enough items.
by AdamN | 2025-09-01 11:01:21+00:00
Here's the deal for you young'ns. Richard Stallman (rms) had it right on this topic and alot of people had to fight to have the limited stack we have.

It's not enough though.

All we can do is make all the decisions possible to keep an open stack as viable as possible - even though what we have now is woefully incomplete. We need to push for this within our teams, within our companies, within our governments, in civil society, and everywhere else that we can because the corporate crowding out of a free technology stack will crowd out everything else if it's allowed to.