MurphyA/hacker-news huggingface dataset:
by shirro | 2025-09-17 02:29:04+00:00
Good stuff. Australia has a target for eliminating cervical cancer by 2035 and ofcourse HPV is responsible for a large proportion of penile, mouth, throat and anal cancers as well. All my kids got free vaccinations at school.

It is shocking that there are still places in the world where this is controversial. You can tell a lot about the qualities of a society by the way they care for their own.
by jitix | 2025-09-17 02:30:09+00:00
It IS unreasonable to trust individual humans across the globe in 100+ different jurisdictions pushing code that gets bundled into my application.

How can you guarantee a long trusted developer doesn't have a gun pointed to their head by their authoritarian govt?

In our B2B shop we recently implemented a process where developers cannot add packages from third party sources - only first party like meta, google, spring, etc are allowed. All other boilerplate must be written by developers, and on the rare occasion that a third party dependency is needed it's copied in source form, audited and re-hosted on our internal infrastructure with an internal name.

To justify it to business folks, we presented a simple math where I added the man-hours required to plug the vulnerabilities with the recurring cost of devsecops consultants and found that it's cheaper to reduce development velocity by 20-25%.

Also devsecops should never be offshored due to the scenario I presented in my second statement.
by outcoldman | 2025-09-17 02:30:45+00:00
I have seen this post a few hours ago on Reddit. Now I see it here at HN… Now I assume it is just a way for somebody to bring a lot of attention to their app. Nothing else. OP has a great way to promote, upvote their posts.

Just to explain, their app can be written in 24 hours, maybe in 4 hours with some vibe coding. This app does not provide more information than System Information app on macOS. And we are talking about it on HN. So yes, this is clearly to bring attention to the app, and get more installs.

I am surprised this submission has not been flagged.
by esafak | 2025-09-17 02:31:05+00:00
> One thing I was thinking of was sort of a "delayed" mode to updating my own dependencies.

You can do it:

https://github.blog/changelog/2025-07-01-dependabot-supports...

https://docs.renovatebot.com/configuration-options/#minimumr...

https://www.stepsecurity.io/blog/introducing-the-npm-package...
by ryao | 2025-09-17 02:31:19+00:00
I feel like C++ is a bunch of long chains of solutions creating problems that require new solutions, that start from claiming that it can do things better than C.

Problem 1: You might fail to initialize an object in memory correctly.

Solution 1: Constructors.

Problem 2: Now you cannot preallocate memory as in SLAB allocation since the constructor does an allocator call.

Solution 2: Placement new

Problem 3: Now the type system has led the compiler to assume your preallocated memory cannot change since you declared it const.

Solution 3: std::launder()

If it is not clear what I mean about placement new and const needing std::lauder(), see this:

https://miyuki.github.io/2016/10/21/std-launder.html

C has a very simple solution that avoids this chain. Use structured programming to initialize your objects correctly. You are not going to escape the need to do this with C++, but you are guaranteed to have to consider a great many things in C++ that would not have needed consideration in C since C avoided the slippery slope of syntactic sugar that C++ took.
by calmbonsai | 2025-09-17 02:31:36+00:00
CAR! Not bus. Apples vs Oranges.

Also, that "efficiency" measurement is not overall Pout/Pin. It's merely measure of charging speed and they do touch on that mentioning the lack of a "break-out box" etc. to determine the actual numbers.

One can absolutely achieve the same charging speed with induction charging, but with a much higher power input and at a greatly reduced vehicle efficiency due to the much higher on-vehicle mass dedicated to charging the battery.

This is also a bit of rigged game as they're using the oldest wired-charging infrastructure against the latest wireless. They do touch on that. The older wired standard has a much lower power-factor duty-cycle.

That said, it, otherwise, was a good test as they also took into consideration ambient temperature and battery heater.
by nradov | 2025-09-17 02:32:06+00:00
Alphabet has $95B of cash and short-term investments on hand. I don't think lack of capital is the obstacle to scaling here.

https://abc.xyz/investor/sec-filings/quarterly-filings/2025/

Tesla still has no autonomous vehicle that customers can actually buy, let alone rent back for taxi service. So any "strategy" remains entirely hypothetical.
by gus_massa | 2025-09-17 02:32:37+00:00
I don't mind if someone is afraid of worms, but I really expected a flesh eating monster tha lay eggs inside you and then eclosionarte like in the alien movie and go to the nearest glaciar or ice rink and sleep for centuries until someone comes nearby ...

Anyway, if someone hates worms (and doesn't care if they are annelids or nematodes) I suggest to donate to the Guinea Worm eradication campaign. They are pretty close https://en.wikipedia.org/wiki/Eradication_of_dracunculiasis
by rgovostes | 2025-09-17 02:33:22+00:00
I am out of date on the latest from the jailbreak scene, but checkra1n supports the device up to iOS 14. If you updated to iOS 15, there may not be a full jailbreak, but not all is lost.

The latest release of Xcode, Xcode 26, still allows you to build apps for iOS 15. At some point you will have the secondary problem of needing an older Xcode which only runs on an older macOS, though Apple has been doing the minimum to make it possible to acquire both of these.

With a free Apple Developer account, you can sign and side load your apps, but they expire every 7 days, and you wouldn't be able to add any restricted entitlements. But the TrollStore exploit (https://github.com/opa334/TrollStore), which I cannot vouch for, seems to work around these limits.

So: It seems like if you are the kind of person who keeps disposable vapes to reprogram the microcontrollers, the iPhone 6S should actually be an attractive device worth keeping:

- Runs an operating system released in September 2021 and received regular bug fixes and security updates through July 2024. Still receives occasional security updates as of September 2025. Not completely end-of-life.

- Supported by the latest developer tools, probably through June 2026, with older downloads available (https://xcodereleases.com/).

- Known jailbreaks and exploits to maximize utility.

It's not surprising that the trade-in value for a 10-year-old device is nil, but on the secondary market they fetch about $60 (https://swappa.com/prices/apple-iphone-6s) which is not bad if you consider the device capabilities compared to most hobbyist devkits.
by lukaslalinsky | 2025-09-17 02:34:33+00:00
I'd argue it's more of a culture thing, not technical thing.

In both JavaScript and Rust, it's normal/encouraged to just add a tiny dependency to the package manager. The communities even pride themselves, that they have such good package managers to allow this.

It's this "yeah, there is a crate for this tiny function I need, let's just include it" mentality that makes the ecosystem vulnerable.

People need to be responsible for whatever they include, either pay the price by checking all versions up front, or pay it by risking shipping a vulnerable program that it's much harder to retract than a JavaScript frontend.
by neandrake | 2025-09-17 02:35:39+00:00
The article presumes the reader is familiar with "malicious inbox rules" and doesn't elaborate or link to further info on it. From what I can find online it seems to be a scenario where an email account has already been compromised somehow and the malicious actor sets up inbox rules to e.g. auto-forward emails to another attacker-controlled email. I assume the intent is to effectively gain access to emails like 2FA and password recovery in the event the target changes their email account password.
by bri3d | 2025-09-17 02:35:45+00:00
Yes, this means it was exploited in a spyware campaign in the wild.

The full exploit chain seems to target WhatsApp directly using a second bug in WhatsApp; although this vulnerability is definitely present anywhere this kind of image is processed using Apple’s native image support, it would usually be aggressively sandboxed (in iMessage by BlastDoor and in Safari by the web content sandbox), so you’d need a lot more vulnerabilities than those that are currently disclosed to make it useful in those places. A bug in WhatsApp itself is particularly bad in terms of spyware actors, since it leaves one of their most popular targets, WhatsApp, vulnerable without a significantly more complex kernel escalation and sandbox bypass.

https://www.whatsapp.com/security/advisories/2025/
by braincat31415 | 2025-09-17 02:36:12+00:00
I agree. Pfizer settled more than a few cases. When talking about a low probability but catastrophic event, the burden lies on the side of the vaccine manufacturer and a mandating agency (and not on the side of the consumer) to prove beyond any doubt that the treatment is safe. I doubt Pfizer has met that bar.

Edit: To all the pro-Pfizer downvoters, feel free to take some Zantac. You have learned nothing.
by scorpioxy | 2025-09-17 02:36:45+00:00
I'm guessing it is due to the advice that getting a job is a "numbers game".

When I was hiring somewhat recently, I talked to a worryingly high number of people that didn't know what role they're applying to, had perfect resumes and were taking the fake-it-till-you-make-it attitude to its limit. I mean I get there's a sales aspect to an interview, in a way, but this was pushing it way too far. It was a very frustrating experience.

A lot of the recent advice has pretty much destroyed the hiring process, in my humble opinion. It swings from solving hard computer science problems to testing trivia to being a political round-table. I keep on wondering how much worse can it get before a reset is needed.
by phkahler | 2025-09-17 02:36:51+00:00
How many hours did you put into this app? How much money have you made from it?

If it really can be written in a couple days (with or without AI) I would say you're lucky to make what? A few thousand dollars? (I'm assuming a top 100 app that got talked about sold at least 1000 copies for at least a few dollars each)
by rapind | 2025-09-17 02:37:06+00:00
I'll give you an example. When the Bank calls me about something important, I tell them to give me their department / extension and I'll call them back. I then look up the bank's phone number on their website (it's actually in my phone already, and on my bank cards) and call them back.

This process doesn't care about them calling from a spoofed number. We've had big problems with spoofed number scams and the CRA (Canadian version of the IRS) recently.
by dang | 2025-09-17 02:37:19+00:00
Of course I believe you that they aren't bots, but it's against HN's rules to have friends show up to upvote and comment like this. It comes across as astroturfing, and HN's community (as you've no doubt noticed) is zealous in defending itself against this.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newsfaq.html
by BobbyTables2 | 2025-09-17 02:37:44+00:00
Been a couple of years since I last was an interviewer, but I’m always amazed at people who blatantly exaggerate in-depth experience while seeking a highly technical position.

Job Requirements: Senior Staff, Deep technical work in X, Y, Z

Resume: 10 years as tech lead in X, Y, Z

Reality: Once walked near someone with experience in X, Y, Z and heard them sneeze loudly. Can spell X correctly.

Why do they even bother?
by LexiMax | 2025-09-17 02:39:01+00:00
> Better idea: instead of bending the entire internet to "protect the children", how about we just ban minors from the internet completely?

"Think of the children" laws are a useful pretext for authoritarianism.

It's really that simple. It's the whole reason why the destructive thing is done, instead of anything that might actually protect children.

Trying to steelman their arguments and come up with alternatives that aren't as restrictive or do a better job of protecting children is falling for the okie-doke.
by to11mtm | 2025-09-17 02:39:18+00:00
Ehhhhh maybe in some spaces...

I would need to see Waymo be able to handle something like Southeast Michigan before I could even get comfortable with trusting it to get me ubered t/o from home for maintaining the vehicle I need to commute when I can take a remote day or two...

And then also delivering that for a good cost.

I put it that way because, I do tip Uber drivers well (unless they cray cray) and they would need to properly 'undercut' uber with whatever model they serve up in more complex areas.
Show HN: A PSX/DOS style 3D game written in Rust with a custom software renderer
by mvx64 | 2025-09-17 02:39:19+00:00
So, after years of abandoning Rust after the hello world stage, I finally decided to do something substantial. It started with simple line rendering, but I liked how it was progressing so I figured I could make a reasonably complete PSX style renderer and a game with it.

My only dependency is SDL2; I treat it as my "platform", so it handles windowing, input and audio. This means my Cargo.toml is as simple as:

[dependencies.sdl2] version = "0.35" default-features = false features = ["mixer"]

this pulls around 6-7 other dependencies.

I am doing actual true color 3D rendering (with Z buffer, transforming, lighting and rasterizing each triangle and so on, no special techniques or raycasting), the framebuffer is 320x180 (widescreen 320x240). SDL handles the hardware-accelerated final scaling to the display resolution (if available, for example in VMs it's sometimes not so it's pure software). I do my own physics, quaternion/matrix/vector math, TGA and OBJ loading.

Performance: I have not spent a lot of time on this really, but I am kind of satisfied: FPS ranges from [200-500] on a 2011 i5 Thinkpad to [70-80] on a 2005 Pentium laptop (this could barely run rustc...I had to jump through some hoops to make it work on 32 bit Linux), to [40-50] on a RaspberryPi 3B+. I don't have more modern hardware to test.

All of this is single threaded, no SIMD, no inline asm. Also, implementing interlaced rendering provided a +50% perf boost (and a nice effect).

The Pentium laptop has an ATI (yes) chip which is, maybe not surprisingly, supported perfectly by SDL.

Regarding Rust: I've barely touched the language. I am using it more as a "C with vec!s, borrow checker, pattern matching, error propagation, and traits". I love the syntax of the subset that I use; it's crystal clear, readable, ergonomic. Things like matches/ifs returning values are extremely useful for concise and productive code. However, pro/idiomatic code that I see around, looks unreadable to me. I've written all of the code from scratch on my own terms, so this was not a problem, but still... In any case, the ecosystem and tooling are amazing. All in all, an amazing development experience. I am a bit afraid to switch back to C++ for my next project.

Also, rustup/cargo made things a walk in the park while creating a deployment script that automates the whole process: after a commit, it scans source files for used assets and packages only those, copies dependencies (DLLs for Win), sets up build dependencies depending on the target, builds all 3 targets (Win10_64, Linux32, Linux64), bundles everything into separate zips and uploads them to my local server. I am doing this from a 64bit Lubuntu 18.04 virtual machine.

You can try the game and read all info about it on the linked itch.io page: https://totenarctanz.itch.io/a-scavenging-trip

All assets (audio/images/fonts) where also made by me for this project (you could guess from the low quality).

Development tools: Geany (on Linux), notepad++ (on Windows), both vanilla with no plugins, Blender, Gimp, REAPER.
by thekevan | 2025-09-17 02:40:04+00:00
I don't see an issue with copying your app if they copy what your app does.

You didn't invent the need for this info, you were just the first one to put it on the app store.

Copying your story and (I assume) graphics is definitely a reason to be angry. Like others have said, look into the possibility of DCMA takedowns.
by joshstrange | 2025-09-17 02:40:10+00:00
I work for a POS company that uses iPads (along other clients) and I’ve not heard of anything like that. I assume it’s people of interest (journalists, or politicians).

Also my company, as well as at least 1 other I know of that uses iPads, don’t sell the iPads to the stores, they replace or buy their iPads directly from Apple. Smaller places handle it all themselves, larger might use MDM but they are buying them at-cost.

I’m not saying everyone does that, just that I’m not aware of it.
by apsurd | 2025-09-17 02:40:23+00:00
ignorance is not a defense.

It's true, unknown calls are 99% spam. That's on you if you'd want to believe otherwise; by your own admission, you don't know.

Yes, important companies you do business with you will come to store those in your contacts. You'll have specific account reps even. Services, apps, don't call you, for this very reason, they have in-app confirmation flows.
by Esophagus4 | 2025-09-17 02:42:08+00:00
First, I’ll say congratulations! Sounds like you made something people really like, which is exciting and rare. Think of all the apps on product hunt that never budge. That’s awesome.

The business cycle from idea->software product->competitors is only getting shorter.

With this sort of app, I see popularity as your “moat”…

If Reddit is the top of your marketing funnel, win there. When I install a Mac app, I generally go with the one that’s most popular on the Mac apps subreddit, and has the most reviews / downloads, and has the biggest community. If everybody is recommending it, that’s generally good enough for me to try it. In that sense, once you have the lead, the winners keep winning, and the competitors eventually move on and do other stuff.

Again, congrats. It’s so cool to have built something people like.
by wiredpancake | 2025-09-17 02:42:34+00:00
Assuming correct implementation of the NTP spec and adherence to the "eras" functions, NTP should be resistant to this failure in 2036.

The problem being so many micro-controllers, non-interfaceable or cheaply designed computers/devices/machines might not follow the standards and therefore be susceptible although your iPhone, Laptop and Fridge should all be fine.
by stevenicr | 2025-09-17 02:42:59+00:00
may be related: https://news.ycombinator.com/item?id=45221938 (Justice Department Announces Actions to Combat North Korean Remote IT Workers)

wish someone could recall the npr segment I mentioned in this thread: https://news.ycombinator.com/item?id=45058584 (Ask HN: What to do when you suspect your interview is with a state operative?)
by lansol | 2025-09-17 02:43:35+00:00
Apple does support their phones for some time. But note that 10 years is only if you bought the iPhone 6s when it was new and at its most expensive. The iPhone 7 (Plus) wasn't discontinued until 2019 and is on the same iOS version. So it got something like 3 years of OS upgrades (impacting app support) and 6 years of security upgrades in the worst scenario.
by 1123581321 | 2025-09-17 02:44:17+00:00
I’m not the OP but I see the connection as Google seeking growth and revenue by applying their general search know-how to areas outside of the Internet.

I followed search appliance closely when they announced it. It was interesting technically and looked cool, but seemed like a dead end similar to desktop as applications were largely moving off of racks/desktops. I was right about that, but I expected Google to offer a web-based search appliance and they never did beyond custom searches. Algolia fills that opportunity nicely now.
by eviks | 2025-09-17 02:44:50+00:00
> Yes, C++ can be unsafe if you don’t know what you’re doing.

It is even if if you do

> But here’s the thing: all programming languages are unsafe if you don’t know what you’re doing.

But here's the thing, that's not a good argument because...

> will just make it a lot harder to have memory leaks or safety issues.

... in reality it's not "just". "Just makes it better" means it's better
by sashank_1509 | 2025-09-17 02:45:38+00:00
Uber making 50B, probably means Uber is paying drivers around 200B or higher. So that is Waymo’s potential revenue in the long term as it releases in most ride share markets. I think it’s under 1B revenue now, which just shows how much growth ahead is possible. Even if we think Uber will be at least 50% market share in the coming decade, at least 100X growth is left for Waymo. This also completely ignores Waymo creating latent demand, which is wholly possible. I would for example trust a Waymo to drop my kids everyday over an Uber.
by FireBeyond | 2025-09-17 02:45:54+00:00
Turn your electricity off for days on end when someone in your country does something that other country disagrees with.

Hell, turn your fresh water off too.

Bomb your only airport into non-functioning rubble, and tell you that if you try to rebuild it, the same thing will happen. Keep that up for 20 years.

Park destroyers in your harbors to ensure nothing gets in or out of the country without their say so. Keep that up for a few decades as well.

Keep your land border effectively locked down so you can't even leave that way.

Bulldoze your neighborhood and childhood home because a rocket was suspected to be launched from nearby.

When the other kids in your neighborhood throw rocks at the armored bulldozers, watch as they have rubber bullets shot at them by an army. When they throw rocks at the army, watch as those soldiers return fire with live ammunition.

No, I know nothing about you. But don't pretend that having that as the only existence you've known is not going to make you increasingly angry and willing to fight back in any way, shape, or form, against the boot on your throat.
by vorpalhex | 2025-09-17 02:46:44+00:00
Poor mans abstraction. Docker swarm makes a cheap node pool from random hardware. Compose makes all your apps and config live in git.

You don't _need_ docker, but if you are already set up for it then it's a boon. Adding an app for me to be very available across a fleet of hardware with ceph backed storage is a one-liner.
by hshdhdhj4444 | 2025-09-17 02:47:09+00:00
I agree with this but the problem is that a lot of the extra stuff dependencies do is indeed to protect from security issues.

If you’re gonna reimplement only thr code you need from a dependency, it’s hard to know of the stuff you’re leaving out how much is just extra stuff you don’t need and how much might be security fixes that may not be apparent to you but the dependency by virtue of being worked upon and used by many people has fixed.
by Gamemaster1379 | 2025-09-17 02:47:15+00:00
Can be more than timers too. There's a funny one in Paper Mario where a block technically can be hit so many times it'll reset and award items again. Hit enough times it'll eventually crash. Of course it'd take around 30 years for the first rollover and 400 or so for the crash. https://n64squid.com/paper-mario-reward-block-glitch/
by toast0 | 2025-09-17 02:48:13+00:00
No, the CDC says (at my previous link):

> A temperature of 100°F during the 15 days after vaccination was reported in 10% to 13% of HPV vaccine recipients. A similar proportion of placebo recipients reported an elevated temperature.

If you take some research subjects, do nothing to them, and then ask how they did 15 days after, I would be surprised if 10-13% reported a 100F fever during that time. But, that's a reasonable result from a saline or hpv injection.