MurphyA/hacker-news huggingface dataset:
by gruez | 2025-09-07 18:32:04+00:00
>Mainly because it is, and you can go Q.E.D. all you like, but there doesn't need to be a bunch of mustachioed villains explicitly making evil plans when everyone's ultimate aims align. They're going to get theirs, and the rest will just be a long for the ride while those people in a position of power continue to weave a collective path through the space of "conspicuously unimplemented features".

Like it or not, TPM was meant to increase security by deterring evil maid attacks. If you can't stop this sort of attack, your device doesn't offer serious security, and a feature phone with wifi/bluetooth/cellular data turned off probably has similar security. Moreover TPMs were introduced over a decade ago and there's still no DRM that's based on it. People did forget about SGX though, which came and went but had actual DRM built for it. I've also never heard a peep about HDCP which is specifically for DRM purposes and is built into every GPU/monitor.
by pavel_lishin | 2025-09-07 18:32:10+00:00
I haven't done the math, but if we had significantly powerful lasers, shooting from the vacuum, isn't it very possible that we could actually deliver more acceleration to a far-away probe in 20 years than we could from Earth-based (or even orbit-based) lasers right now?

I have no idea what the best-case scenario for laser acceleration is.
by ttul | 2025-09-07 18:32:12+00:00
Even the best optical fiber transceivers and glass are limited (practically) to about 100km; repeaters are typically placed every 60-70km. The technology for delivering power to the repeaters is fascinating. They inject 5,000-10,000VDC at one end and each repeater shunts off a tiny amount of current to power the amplifier. All of this is embedded in the cable itself before being loaded onto the cable ship.
by leptons | 2025-09-07 18:32:17+00:00
A "Server" is typically a single machine that has a specific OS and runs layers of various software that allows your business logic to be accessed by other computers (by your users). For a "Server" you typically have to choose an OS to run, install all the support software (server monitoring, etc), update the software, and if the server fails you have to fix it or rebuild it.

With "Serverless", your code is in a "function as a service" model where all you have to worry about is the business logic (your code). You don't have to set up the server, you don't have to install the server OS, or any basic server software that is needed to support the business logic code (http server, etc). You don't have to update the server or the underlying server software. You don't have to perform any maintenance to keep the server running smoothly. You never (typically) have to worry about your server going down. All you have to do is upload your business logic function "somewhere" and then your code runs when called. Essentially you do not have to deal with any of the hassle that comes with setting up and maintaining your own "server", all you have to do is write the code that is your business logic.

That's why it's called "Serverless" because you don't have to deal with any of the hassle that comes with running an actual "server".
by dave333 | 2025-09-07 18:32:36+00:00
I need to measure temperature at multiple points and humidity in my experimental garden shed with a skytherm roof [ http://www.solarmirror.com/fom/fom-serve/cache/30.html ] for passive heating and cooling. Thinking your thermostat code might be 90% of what I need however I don't yet know python. I guess it's easy to understand and modify the code with the help of AI.
by bicx | 2025-09-07 18:33:09+00:00
I adopted a couple practices (using dev containers and worktrees) just to make life a little easier. I also built my own shell script “framework” to help manage the worktrees and create project files. However, that took me just a couple days to do on my own (also using CC), and it didn’t lock me into a specific tool.

I do agree that context poisoning is a real thing to watch out for. Coincidentally, I’d noticed MCP endpoint definitions had started taking a substantial block of context for me (~20k tokens), and that’s now something I consider when adopting any MCP.
by Guvante | 2025-09-07 18:33:09+00:00
Unless you are comparing a generic to a name brand in a situation where the insurance company forces the name brand that shouldn't be the case.

For better or worse in your hypothetical the uninsured price legally has to be $1,000 for medicine. They can write off part of that but no one would write off 99.8% as the insurance company would sue their pants off.
by osigurdson | 2025-09-07 18:34:36+00:00
If LLMs are perfect there seems to be little point in any kind of software other than what humans want to use directly. There is no need for B2B SaaS as AI should just automat all of that - i.e. HR payroll, accounting, etc. there is just no need for any of that. People like video games however so that will still exist.

Of course there all kinds of discrete points between the current situation and "perfect LLMs / AI".
by throw310822 | 2025-09-07 18:34:43+00:00
Interesting! Claude responds similarly (unicode icons are not visible in hn):

"Yes, there is a seahorse emoji! It's Wait, I apologize - that's actually an octopus. The seahorse emoji is Actually, let me correct myself again - that's a unicorn. I don't believe there is a dedicated seahorse emoji in the standard Unicode emoji set. The closest ocean-related emojis would be things like (tropical fish), (blowfish), or (shark), but no specific seahorse emoji exists."
by bootsmann | 2025-09-07 18:34:44+00:00
Norway and Botswana are good counterpoints here. I think its more about the fact that resource-rich countries naturally have a way for elites to stay in power longer than those without simply because they have enough money to go around to appease the populace they control. (An interesting test of this thesis would be how long Putin can stay in power now that they have to partially ration fuel due to Ukrainian refinery strikes)
by MeetingsBrowser | 2025-09-07 18:34:45+00:00
I’ve been checking in since the paid beta thing before the “official” beta.

It feels pretty generic and empty.

It’s early days, but so far there are no unique features, niche communities, or any other reason for me to go there.

Just few popular links cross posted from other social media sites, people posting about new features they want, and comments about how happy they are to be on something other than Reddit.

I tried to check in again just now but it looks like they dropped support for mobile browsers and push you to download an app instead.
by moelf | 2025-09-07 18:35:05+00:00
> operator overloading, while it can make for cute-to-read code, isn't really a good idea for code readability and maintenance

so should we write `add_int_int(1,1)` and `add_int_double(1, 1.0)` and `add_double_double(1.0, 1.0)`?...
by Guvante | 2025-09-07 18:35:27+00:00
As long as it is a legitimate discount (which it legally always is) they aren't lying perse.

After all the discount getting inflated by charging non-insured people ludicrous prices is the real issue but not one you can meaningfully complain about as an insured.

And unfortunately if you ask for pricing they will give you the inflated pricing meaning it isn't necessarily deceptive there.
by viceconsole | 2025-09-07 18:35:29+00:00
If you want a real answer, a big part of it has to do with consular non-reviewability. Basically, there is far less ability for an applicant to make legal challenges to visa decisions made by a US visa officer outside the US.

Another reason is, what happens if you apply for a renewal or different visa type while you're in the US, and your visa is denied? Now we're relying on you to leave the country, whereas if you already had to leave the country to apply and you're denied, you're not still in the US.

There actually was a pilot program for domestic revalidation of H-1Bs. Applicants liked it (no need for a trip outside the US), and those of us working in India liked it (less workload for us). However I doubt this administration will support expansion.

In my experience most renewing H-1Bs planned their visa interviews (or often "dropbox" cases where they didn't even need to come in person) to coincide during a few weeks trip home. They were not generally coming to India, then applying and waiting several months.

The cases that take months are those with some problem - missing some documentation, evidence of petitioner fraud, national security concerns with the applicant, etc. And yes, in those cases people (and sometimes their families) end up getting "stuck" outside the US, kids miss the start of the school year, people can't get back to their apartments and houses and pets. It sucks, but we have vetting for good reasons.
by bhouston | 2025-09-07 18:37:01+00:00
FYI the poster this story links to says that this title is incorrect:

https://x.com/grapheneos/status/1964757878910136346?s=46

They say this:

Our reply here was linked on Hacker News with an inaccurate title ("Delayed Security Patches for AOSP"). Security patch backports were pushed to AOSP on September 2nd for Android 13, 14 and 15 as expected.

More information is available at x.com/GrapheneOS/sta… explaining the situation with security patches. It would be better to have a thread linking to that instead. We have early access to the security patches, but we can't break the embargo. We can only release the sources once source release is allowed. We could make a security preview branch but the system simply doesn't make sense.

Android 16 QPR1 is a new major release, not a security patch release. Our reply is talking about 2 different issues. Android 16 QPR1 is what was delayed for AOSP and we don't currently know why. It's possible it was a mistake and it will be pushed on Monday.
by BoredPositron | 2025-09-07 18:37:24+00:00
N8N's influencer driven marketing has so thoroughly distorted the narrative that it's impossible to understand what's really going on with the platform. Every piece of content seems to be either "5,000 N8N workflows that made me millions" or "1 million workflows that earned me $5K each" - it's all hyperbolic noise drowning out any genuine information. Nice to read something more substantial.
by ttul | 2025-09-07 18:37:27+00:00
It’s not free at all. Most of the voltage drop along the cable is caused by conversion of electrical energy into photons within the erbium-doped fiber amplifiers. A relatively small fraction of the voltage drop is caused by losses in the copper cable that carries the current along the route. The high supply voltage allows a relatively small amount of current to carry thousands of kilowatts of power to the amplifiers without causing much loss in the copper.
by sabrina_ramonov | 2025-09-07 18:38:45+00:00
Blotato | https://blotato.com | Principal Software Engineer | REMOTE (Europe)

Salary: 10,000 euros per month

Blotato helps entrepreneurs build their audience: https://www.blotato.com

Preferences: vim, emacs, fullstack, no hypechase js

Tech stack: nextjs, fastify, typescript, supabase, heroku, aws

This is a fulltime permanen position. Mostly backend working in Fastify, a little frontend. You should still be very proficient fullstack.

Interview process is 3 steps: 1. Takehome interview question 2. Video call technical interview 3. Non-technical / culture fit interview

Apply here: https://forms.gle/s2AaZ3AxER63CEzn8
by FluGameAce007 | 2025-09-07 18:39:22+00:00
This isn't just a bug... it's a hardware-level oversight that can cause iPhones to silently fail during boot, leaving no logs, no recovery mode, and no forensic trace.

The flaw is triggered by abrupt power loss (e.g. during brownouts or unstable charging), preventing the secure world and logging subsystems from initializing. Confirmed it on real A17 Pro device.

Curious if others can reproduce this, or if similar behavior exists in M-series chips.
by kragen | 2025-09-07 18:40:10+00:00
Typically I've found that stack-based bytecode uses about twice as many instructions as register-based bytecode but significantly less space. (I'm sorry that's kind of handwavy; I'd be delighted to see a more rigorous study of the question.) For Wasm I don't think the number of instructions was a concern, since that only affects the time to "load" it by compiling to native code, but size seems to have been a primary concern.

I agree about the general approach to taking advantage of the zero page, but I don't have the 6502 competency to comment on your proposed instruction sequences.
by strcat | 2025-09-07 18:40:30+00:00
This is an official response from GrapheneOS:

The title of this post linking our reply is inaccurate and is not what we said ("Delayed Security Patches for AOSP"). It should really be changed from "for AOSP" to "for Android". Security patch backports were pushed to AOSP on September 2nd for Android 13, 14 and 15 as expected. The issue isn't the security patches being delayed for AOSP. We didn't say patches are being delayed for AOSP.

Security patches for Android are being delayed as a whole. The delays aren't specific to AOSP. They're moving to quarterly security updates with 4 months of early OEM access instead of monthly security updates with 1 month of early OEM access. They realize that the patches distributed to OEMs are hardly secret once they're so broadly distributed. Therefore, they've relaxed the rules of the embargo and permitted releases of patches under certain rules without being allowed to providing a description or the sources for the patch. This is ridiculous because it's easy to reverse the patches from binary-only releases.

Google trying to cover for OEMs not keeping up with patches by making it seem as if the patches are now quarterly and largely being delivered on time while actually broadly disclosing them 4 months early and permitting quietly fixing them early.

We posted a much more detailed explanation at https://x.com/GrapheneOS/status/1964754118653952027. It would be better to link to our more detailed post.
by citizenpaul | 2025-09-07 18:40:53+00:00
I worked at a large bank HQ office. I was young and the wealth management departments "darling" of tech because I would enthusiastically help them with their odd issues. Even though it was really not my job. (Free food and drinks there!)

I assure you that banks do not have huge luxury lounges with expensive drinks(like 1k+ bottle)and such for the employees of rich people. True rich people have lots of time and they do occasionally drop in to make face appearance and "Show face" as I've heard it described. As well as the very rich bank c-suite that would regularly drop into the department. Though they had their own private area on the top three floors. (which I also scavenged from lol)

That said due to my helping them I often got to see private info about the people that came to visit specifically to exactly how much money they had with us(and they would always say umm you are really not supposed to see this ok?). Anyway my point is I've probably met more verified rich people than most people so for what my opinions are worth thats how I got them. Even a couple of billionaires whom's name would not show up on any list because its private wealth.
by lostlogin | 2025-09-07 18:40:55+00:00
> Where in the world do you live

I’m in New Zealand. I ride in the road in town and out in the hills at the weekend.

The way I use it is to look down, see if a car is behind, then look behind before pulling out. I don’t bother looking back if there is a car close (the range must be around 100-150m I think?).

It also yells louder if the car is approaching fast. The integrated light changes how it flashes when it sees a car.

In group ride with talking etc, it’s helpful too as it usually doesn’t pick up bikes (unless the guy behind is an absolute unit) and the squawk of an approaching car is helpful for the group.

Electric cars and busses no longer sneak up on me, it’s great use of tech on a bike.

https://www.garmin.com/en-US/p/698001/
by wavemode | 2025-09-07 18:41:30+00:00
When people talk about the "expression problem", what they're describing is the fact that, (in your example) if you add a new method to the trait, you have to go around and implement that new method on every type that implements the trait.

This is in contrast to if you had used an enum (sum type) instead, wherein adding a new operation is easy and can be done in a single place. But then in exchange, adding new variants requires going around and updating every existing pattern match to support the new variant.
by scarface_74 | 2025-09-07 18:41:43+00:00
So how is that a counter example? The client never asked for a credit. Since the startup I worked for, I have been working in AWS consulting - first directly at AWS (Professional Services) and now a third party consulting company.

While I have no love for AWS as an employer, I can tell you that everyone up and down the chain makes damn sure that customers don’t waste money on AWS. We were always incentivized to find the lowest cost option that met their needs. AWS definitely doesn’t want customers to have a bad experience or to get the reputation that it’s hard to get a refund when you make a mistake.

Of course AWS wanted more workloads on their system.

Semi related, AWS will gladly throw credits at customers to pay for the cost of migrations and for both inside and outside professional services firms to do proof of concepts.
by 1718627440 | 2025-09-07 18:42:14+00:00
I think microSD cards are a bit to small to be convenient. They easily get lost or broken. USB has a nice form factor for storing and transport but the UX for the player is worse, as the stick doesn't vanish in the player like a CD or a microSD card. I think the best UX, would be an SD card the size of a bank card, that can be put in a slot, but the marginal difference to a CD is really low.
by edverma2 | 2025-09-07 18:42:15+00:00
From GPT-5-Pro with Deep Research selected:

> FWIW Deep Research doesn’t run on whatever you pick in the model selector. It’s a separate agent that uses dedicated o‑series research models: full mode runs on o3; after you hit the full‑mode cap it auto‑switches to a lightweight o4‑mini version. The picker governs normal chat (and the pre‑research clarifying Qs), not the research engine itself.
by rallyfuel | 2025-09-07 18:42:16+00:00
Yes, that's a great way to think about it, but with a key difference: it's completely risk-free for the fan.

On Kickstarter, your pledge is often gone if the project fails. On our platform, the fan's contribution is held and only delivered if the athlete actually commits to that specific school. If they don't, the fan gets a full refund.

It also functions as a full compliance and management tool on the backend for the athletes, helping them navigate complex NCAA rules.
by JKCalhoun | 2025-09-07 18:42:16+00:00
I suppose that's fine if that is your solution. It's easy for me to say "things should probably cost more" because I can afford it.

If I'm allowed to fret a bit for my fellow countrymen, I confess I am saddened that they will have to decide between food or rent in the coming months/years. When my single mom raised my sister and I she had to make that same choice at times.
by nostrebored | 2025-09-07 18:42:36+00:00
1. Put your stuff in a stack. Deploy it to your isolated developer account. Basically free staging environment.

2. Use the officially supported docker runtime for local testing.

3. Treat it like any other code and make unit tests

4. Use one of the tools like localstack to emulate your staging env on your machine.

There are so many options that I don’t know how you could walk away with your opinion.
by everdrive | 2025-09-07 18:42:43+00:00
I agree with you, and I think that helping people around you, volunteering, and generally just being a good neighbor are some of the biggest impacts individuals can make. I'm not sure that heavily engaging with the news really helps you here. We might just be speaking from different frames of reference. If I say "disengage from the news" and someone hears "put your head in the sand and give up," then I agree that's not a great move. On the other hand, if someone is glued to an outrage feed, and "disengagement" still means that they have a good general sense of what's going on, then I'd say that's a positive move.
by _wire_ | 2025-09-07 18:43:09+00:00
> we work with images up to 400MP daily

400M pix shot of a genetic banana replaced by a 400M pix synthetic shot of a reputed banana, multiplied by Youtube channel mansplaining the finer points of reputed banana synthesis.

The only thing missing is any interest whatsoever in actual bananas!

Take career notes kids, as the AI bandwagon is determined to exhaust the entire world and stuff its remains along with cases of Dom Pérignon down into bomb shelter made from an abandoned nuclear missile silo for the benefit of a VC and his "Tech Support" bros by reputing everything the same way it's reputed the banana.
Show HN: Simple markdown resume; fancy rendered HTML/PDF
by Leftium | 2025-09-07 18:43:58+00:00
- Plain-text markdown is easy to update and human/machine-readable

- Clever CSS styling and animated logo[1] make the HTML version stand out

- PDF version: simply generate by printing this page from the browser (optimized for printing)

- See how it was done: https://github.com/Leftium/leftium.com/tree/main/src/routes/...

[1]: https://logo.leftium.com
by overfeed | 2025-09-07 18:45:14+00:00
Lot's of small businesses dependent on imports are already shutting down. I know dropshippers are unpopular, but the policy flip-flops are affecting more than that. A lot of low-volume, custom-designed niche products[1] have disappeared, and won't come back when the tariff payment mechanisms are implemented

1. e.g. PCBs for vintage computers, and some potential kickstarter projects are now non-viable.
by strcat | 2025-09-07 18:45:15+00:00
Security patches aren't being delayed for AOSP specifically but rather Android as a whole including the stock Pixel OS. The title is misinterpreting our reply. We didn't say they're delaying patches to AOSP specifically. Stock Pixel OS has delayed patches too.

A more detailed explanation is at https://x.com/GrapheneOS/status/1964754118653952027.

GrapheneOS has an OEM partner and early access to the security patches so our complaint isn't about us not having access. Google has added an exception to the embargo where binary-only patches can be released which we could use for a special security update branch but that's a ridiculous exception and it should be allowed to release the sources. It can be reversed from the security patches anyway and is trivial for Java and Kotlin. We can't break the embargo ourselves but we CAN publish the security patches early under the rules of the embargo via a special branch and people could reverse the patches from there which could then be applied to the regular GrapheneOS branch. The system is ridiculous and our hope is these changes are undone.

The title should really be changed from "for AOSP" to "for Android". There's a binary-only exception in the embargo now but that's not really about AOSP and isn't being used in practice even for Pixels. They've really just delayed all patches 4 months instead of 1 while also destroying any semblance of there being a real embargo (which was already very weak).