MurphyA/hacker-news huggingface dataset:
by nunez | 2025-09-08 16:18:14+00:00
I made a blog post some years ago about how to create your own VMs with Lima: https://blog.carlosnunez.me/post/docker-desktop-alternative-...

You can also use this to create a VM for Podman that runs on Fedora, rootful by default: https://github.com/carlosonunez/bash-dotfiles/blob/main/lima...

If you go the Lima approach, use `podman system connection add` to add rootful and rootless VMs, then use the `--connection` flag to specify which you want to use. You can alias them to make that easier; for instance, use `alias podman=podman` for rootless stuff (assuming the rootless VM is your default) nad `alias rpodman=podman --connection rootful` for rootful stuff. I'll write a post describing how to set all of that up soon!
by dragonwriter | 2025-09-08 16:19:06+00:00
> It’s often been assumed that accuracy and ‘correctness’ would be easy to implement on computers because they operate on logic, in some sense. It’s originality and creativity that would be hard, or impossible because it’s not logical.

It is easy, comparatively. Accuracy and correctness is what computers have been doing for decades, except when people have deliberately compromised that for performance or other priorities (or used underlying tools where someone else had done that, perhaps unwittingly.)

> Yet here we are, the actual problem is inventing new heavy enough training sticks to beat our AIs out of constantly making stuff up and lying about it.

LLMs and related AI technologies are very much an instance of extreme deliberate compromise of accuracy, correctness, and controllability to get some useful performance in areas where we have no idea how to analytically model the expected behavior but have lots of more or less accurate examples.
by swed420 | 2025-09-08 16:19:06+00:00
You're absolutely right. The wrong whack-o-mole focus is ingrained in most people under capitalism. We've come to see endless rotating villains to be acceptable while clinging to an illusory concept of choice.

Expecting a company, public or private, to behave morally and with a long-term human vision is setting yourself up for endless disappointment.

As in addiction treatment, the first step is admitting the problem.

Can we just admit once and for all that it's going to be the norm under capitalism to not have Nice Things?

When they declared corporations to be people, I wish they would have specified it to be sociopathic people.
by hunter2_ | 2025-09-08 16:19:15+00:00
I agree, and this is arguably the best reason to use a password manager (with the next being lack of reuse which automatically occurs if you use generated passwords, and then the next being strength if you use generated passwords).

I generally recommend Google's to any Android users, since it suggests your saved password not only based on domain in Chrome browser, but also based on registered appID for native apps, to extend your point. I'm not sure if third party password managers do this, although perhaps it's possible for anti-monopoly reasons?
by nromiun | 2025-09-08 16:19:15+00:00
I have nothing to do with this but still I am getting second hand embarrassment. Here is an example, is-arrayish package, 73.8 MILLION downloads per week. The code? 3 lines to check if an object can be used like an array.

I am sorry, but this is not due to not having a good standard library, this is just bad programming. Just pure laziness. At this point just blacklist every package starting with is-.
by simonmysun | 2025-09-08 16:19:44+00:00
Nice. Searching on Google I only got interactive maps requiring annoying registration.

A small tip: It's a bit complicated to hide a specific icon on the map. It would be better if users could uncheck them when exploring the map instead of having to find them on the left panel. Besides, an export / import functionality for what you stored in LocalStorage would also be helpful.

And there's some extra lessons from the Elden Ring map from Chinese communities: They allow users to contribute by leaving comments with coordinates. The comments are categorized into "tips", "lore", "roast", etc and can be liked or disliked, which can be filtered by the viewers. In the end it became a very useful map for all kind of players.
by jonnylegs | 2025-09-08 16:19:52+00:00
You’re right... it’s absolutely possible to build time-step models in spreadsheets. The distinction I’m trying to make is that in spreadsheets, time is something the modeler has to impose and maintain. It’s not native to the system. Every dependency and assumption is hard-coded into formulas that only the creator fully understands. That makes the model powerful, but also fragile and hard to scale.

In contrast, (and the whole thesis of the software we've built) simulation and event-based approaches treat time as a first-class citizen. The engine itself steps through each day, week, or month, checking which events are active and applying their effects. Instead of hand-building those mechanics each time, you snap together reusable logic blocks. For the modeler, it’s less about “can we do this?” (because spreadsheets can do almost anything) and more about “should we keep reinventing the wheel, or use a framework that makes time and dependencies explicit by design?”
by ashishbijlani | 2025-09-08 16:19:53+00:00
Packj [1] detects malicious PyPI/NPM/Ruby/PHP/etc. dependencies using behavioral analysis. It uses static+dynamic code analysis to scan for indicators of compromise (e.g., spawning of shell, use of SSH keys, network communication, use of decode+eval, etc). It also checks for several metadata attributes to detect bad actors (e.g., typo squatting).

1. https://github.com/ossillate-inc/packj
by PaulHoule | 2025-09-08 16:19:54+00:00
You are talking about this sort of thing?

https://datatracker.ietf.org/doc/html/rfc5005

Http might be better in 2025 than it used to be but historically the cache is as much a problem as it is a solution. That is, when you have heisenbugs the answers are frequently "clear the cache" [1] and "don't use the cache" [2] and it's often a better strategy to "rip and archive the whole site right now and come back in six months and make a fresh rip" if you're working on a large scale and can tolerate being up to six months out of date.

In general database-backed sites struggle to implement if-modified-since since a fully correct implementation has to traverse the graph of all database objects that are looked up in the request which costs about as much as… the request. Your cache needs a cache and you can make it work at the system level if you have a modified date cache and always invalidate it properly. If you are doing that you might as well materialize a static web site fronting your site the way the Wordpress supercache works —- then you’ll find your site crashing a lot less!

I’ll admit ActivityPub is complex but http caching is complex in a particularly poisonous way in that there are so many alternate paths. An ActivityPub system (client+server) could be 100% correct but an http-based system might not have a clear line around it and might never be quite right. A stateless system could run for 10 years without trouble, it might take you 10 years to realize a stateful system was feeding you corrupted data.

[1] fix it... for now

[2] ... and they're no longer part of your life
by bgwalter | 2025-09-08 16:20:10+00:00
People investing in startups that sell Adderall without prescription or other telemedicine schemes are welcome in this administration, too.

The odd thing is that Trump always uses drugs as a pretext to intimidate other countries. He used fentanyl as an excuse for Canada sanctions and Cocaine from Venezuela as an excuse to drone a "drug boat" carrying 11 people. Neither Canada nor Venezuela are anywhere near the prime exporters of drugs to the US.

So the question is whether "crypto" is just used for self enrichment of the elites or if there are larger plans to make it the primary means of slush funds for various South American rebels. The fact that regulations are basically mostly ignored [1] in a bipartisan manner would fit both theories.

[1] Occasional efforts by Sen. Warren are noted.
by bronlund | 2025-09-08 16:20:13+00:00
Why the downvotes? This is the correct answer to the first question raised: "...how many dimensions does a line have?".

You can track a point to create a line, you can shift the line to make a plane, you can move the plane to create a space, you can change the space to create time, you can observe time to create bliss, you can reflect on bliss to create thought, you can use thought to create an idea and you can use that idea to make a thingy.

You can create as many dimensions you like, all perpendicular to each other - one way or another. But I promise you this; even though the line is needed for the thingy, the line is blissfully unaware of this fact.
by lupusreal | 2025-09-08 16:20:48+00:00
You're wack. Do you think a locked down laptop lid sensor will stop them from spiking your tea with polonium, or shooting you with a ricin BB, or breaking into your home when you're asleep and jabbing a needle into your neck while holding a pillow over your face, or kidnapping you and breaking your bones with a sledge hammer until they've gotten their rocks off?

This laptop lid threat is fantasy. Get fucking real.
by craftkiller | 2025-09-08 16:20:52+00:00
> You can pretend like this is unique to JS ecosystem, but xz was compromised for 3 years.

Okay, but you're not suggesting that a compression algorithm is the same scale as "is-arrayish". I don't think everyone should need to reimplement LZMA but installing a library to determine if a value is an array is bordering on satire.
by gobdovan | 2025-09-08 16:21:09+00:00
Causes do matter, but getting them right is extremely tricky. The article assumes that layering more events automatically improves accuracy, but in practice most businesses end up modelling the wrong ones. That creates false precision, fragile models, and misplaced confidence. The more events and layers you pile on, the more error compounds.

At the end of the day, if your model predicts a profit loss that never shows up on the P&L, your events were wrong, and the odds of consistently getting them right are thin.
by sugarpimpdorsey | 2025-09-08 16:21:11+00:00
> The domain name was `npmjs dot help` which obviously should have caught my eye, and would have if I was a bit more awake.

It's a good thing the WebPKI cartel mostly did away with EV certs.... these days any old cert where only the SAN matches the domain and your browser gives a warm fuzzy "you're secure!"
by genezeta | 2025-09-08 16:21:12+00:00
If you mean this [ https://news.ycombinator.com/item?id=45168644 ], then your main problem is that you don't even bother to bring any points to the discussion.

You just throw your random question, regardless of any possible merits or validity, without really making any argument at all. How can you expect to engage anyone's attention at all if you fail to make any effort yourself?

And that's not even mentioning what bell-cot's link points out.
by atonse | 2025-09-08 16:22:00+00:00
I actually would riff on this idea more like "Even though corporations are made of of people, don't expect them to have the same attributes of a human being, like empathy or the concept of doing the right thing. Expect that their actions are better explained through abstract concepts like group actions towards a larger goal that's separate from human well-being, like profits and self-survival of the organization at any cost."

So even though there exist people at Facebook that have human attributes of empathy and "let's not fuck up half of society" – as a company, they don't behave that way, since it affects more abstract non-human concepts like the survival of the organization, or profit motives that are detached from individuals (like an employee's stock price or yearly bonuses).
by gmuslera | 2025-09-08 16:22:07+00:00
Copy/Paste like any other text won't make you magically "learn" it. Reading gives you some insight, but you having some thoughts, actions, questions or elaboration on that gets you forward.

Talk with yourself on it, relate that with other things you know, search or question some IA about the doubts you have, even do the effort of categorize correctly the information in Obsidian is doing some work around it.

And that on pure intellectual information, if you can put it in practice, do something based on that, test your own understanding, not what is literally written there, helps even more.
by binary132 | 2025-09-08 16:22:44+00:00
that’s like saying DuPont and 3M weren’t the problem for hiding their knowledge about the dangers and wide prevalence of PFAS contamination from the public instead of handling it (because that might be bad for their Teflon product lines). would you also argue that they had no social obligation or responsibility for failing to do the right thing? how about the radium girls, same deal?

have you ever considered the possibility that maybe the widespread total abandonment of ethical and moral norms and standards is the actual problem, and figuring out how to adequately punish the mass violation of ethics is downstream of that?

Meta is the problem. Tolerating Meta is equally the problem, but it doesn’t make Meta not the problem.
by SoftTalker | 2025-09-08 16:22:51+00:00
Right, and even "that guy" might not need Excel but the second he opens up Libreoffice or Google Sheets and something doesn't work the way he's used to, he will say it's broken. He's not interested in learning how LibreOffice or Google does it, he's just trying to close a $5m deal. And he's not wrong.
by skizm | 2025-09-08 16:23:24+00:00
You don't need to trust them. They're all very predictable. They will always do whatever makes them the most money in the long term while nominally being able to defend all their actions in court. There is a theoretical dial with "ignore all laws" on one end, and "follow the letter and spirit of every law" on the other. Every big company wiggles the dial around in the middle until it finds a place where they're confident they won't lose more money than they make from lawsuits.
by unleaded | 2025-09-08 16:23:28+00:00
I know you can't really cause a change in an online community by complaining about it in a hacker news comment but i do think if someone savvy with the amiga wrote a guide in that style (with things like "We press build, open the rom, and wow! We have a bouncing box on the screen!") it might start the ball rolling. Would love to see it either way.

I guess part of the reason was that the consoles never had public development kits or manuals, so when the homebrew scene emerged they had to bootstrap themselves (and in the process usually created better manuals/tools than the OEMs), compared to all the home computers where of course they were always available and nobody felt a reason to rewrite them all.
by MengerSponge | 2025-09-08 16:23:31+00:00
Have you seen pictures of Amsterdam from the 60's? The Dutch were going gung-ho for cars, but they stopped and modernized their infrastructure instead.

https://www.dutchreach.org/car-child-murder-protests-safer-n...

Cars have some benefits, but they're not such an impossibly high utility that they can't be deprioritized. It's a policy choice.
by nine_k | 2025-09-08 16:24:21+00:00
Wielding a modern power tool that can cut stone 1000x faster than ancient hammer and chisel, you'd likely still have trouble to cut a pyramid block precisely. Modern precise-cutting machines are huge compared to the things they cut.

It's the ability to precisely measure and mark huge pieces of rock what looks like a miracle to me. Producing the exact shape is easy when you can always check how close to the desired shape you are, and it's the hard part.
by Ygg2 | 2025-09-08 16:24:47+00:00
Yeah, god forbid you use bolding to emphasize your phrase on this site. It's considered emotinal response, but yours is purely logical?

I'm glad you saw through me like a Superman through a lead book. Which is to say, not at all. I wasn't even thinking of Go. Where did this come from? I never mentioned Go. I don't use it or know how it does its packaging.

Are you projecting your feelings onto me as a sort of substitute for the HN gestalt? The discussion was about package managers being evil.

Now please return to the topic at hand.

Let's say you have NPM package manager. What prevents you a rational individual from saying:

{ "depedencies": {} }
by bitpush | 2025-09-08 16:24:48+00:00
I dont understand. I can browse the internet using a non-Google computer, use a non-Google browser, go to a non-Google website, use a non-Google programming language etc etc.

Nobody, including Google, is stopping you from doing that.

Note, this is different from actual monopoly of railways (I have to use Central Pacific Railroad) or ISP (My city only has Comcast) or electricity (If I want electricity, I have to use PG&E).

The barometer is whether there's meaningful alternative. Can I do X without the $company in question = not a monopoly.
by adev_ | 2025-09-08 16:25:18+00:00
> I don't know what industry you work in, who the regulatory body that certifies your code is, or what their procedures are, [..], I pray I never have to interact with your code.

You illustrate perfectly the attitude problem of the average "gamedev" here.

You do not know shit about the realities and the development practice of an entire domain (here the safety critical domain).

But still you brag confidently about how 'My dev practices are better' and affirm without any shame that everybody else in this field that disagree is an idiot.

Just to let you know: In the safety critical field, the responsibility of the final certification is on the integrator. That is why we do not want intermediate dependency to randomly vendor and bundle crap we do not have control of.

Additionally, it is often that the entire dependency tree (including proprietary third party components like AUTOSAR) are shipped as source available and compiled / assemblied from sources during the integration.

Thats why the usage of package manager like Yocto (or equivalent) is widespread in the domain: It allows to precisely track and version what is used an how for analysis and traceability back to the requirements.

Additionally again, when the usage of binary dependencies is the only solution available (like for Neutrino QNX and its associated compilers). Any serious certification organism (like the TUV) will mandate to have the exact checksum of each certified binary that you use in your application and a process to track them back to the certification document.

This is not something you do by dumping random fu**ng blob in a git repository like you are proposing. You generally do that, again, by using a proper set of processes and generally a package manager like Yocto or similar.

Finally, your comment on "v1.3.1 of libfoo" is completely moronic. You seem to have no idea of the consequence of duplicated symbols in multiples static libraries with vendored dependencies you do not control nor the consequences it can have on functional safety.
by abustamam | 2025-09-08 16:25:24+00:00
Agreed. I can't find it, but I remember seeing an article/blog post shared on HN about the importance of slack. Impossible to search for it given the name of a popular communication software :)

But essentially it was about a secretary who wasn't booked wall-to-wall with meetings and tasks. She had some meetings but otherwise just able to do whatever she needed to do.

Then, when an emergency happened and she was needed right away to cancel a meeting or make a last minute adjustment, she was able to hop right onto it.

When a team is slammed with P1 tasks all day/week long, and every task is P1, then when an actual urgent matter happens then the team is unable to respond in an efficient manner.
by whitej125 | 2025-09-08 16:25:29+00:00
I learned of the lid angle sensor due to my MBP draining its battery. Whenever I flew across the country I'd always end up with a dead battery. Originally thought it was some process preventing sleep but was spinning circles hunting it down until one night, I closed the laptop... the screen turned off as it was closing and just as it shut.. you could see the faint glow of the screen turning back on again. If I cracked the lid open 1/8th of an inch it would turn off again.

I had thought that the MBP (an Intel one) had used magnets to detect lid closure but alas that's when I learned of the lid angle sensor and all the symptoms I was experiencing made sense. Basically the laptop would wake up when shut and the screen would stay on the entire time thus draining the battery.

Ended up getting the LAS replaced which was not DIY'able unfortunately... but was a relatively cheap fix (~$90).
by palmotea | 2025-09-08 16:25:32+00:00
> just that it seems this unethical behavior is the expected outcome giving the incentives, so maybe the incentives need to be reworked.

Also culture. I'm not saying things were perfect in the past, but introduction of the "Friedman doctrine" (https://en.wikipedia.org/wiki/Friedman_doctrine) to business culture probably made things much worse:

> The Friedman doctrine, also called shareholder theory, is a normative theory of business ethics advanced by economist Milton Friedman that holds that the social responsibility of business is to increase its profits.[1] This shareholder primacy approach views shareholders as the economic engine of the organization and the only group to which the firm is socially responsible.

> ...

> The Friedman doctrine has been very influential in the corporate world from the 1980s to the 2000s

> ...

> In Capitalism and Freedom, Friedman had argued that when companies concern themselves with the community rather than profit it leads to corporatism,[6] consistent with his statement in the first paragraph of the 1970 essay that "businessmen" with a social conscience "are unwitting puppets of the intellectual forces that have been undermining the basis of a free society".[2]

> ...

> Shareholder theory has had a significant impact in the corporate world.[8] In 2016, The Economist called shareholder theory "the biggest idea in business", stating "today shareholder value rules business".[9] In 2017, Harvard Business School professors Joseph L. Bower and Lynn S. Paine stated that maximizing shareholder value "is now pervasive in the financial community and much of the business world. It has led to a set of behaviors by many actors on a wide range of topics, from performance measurement and executive compensation to shareholder rights, the role of directors, and corporate responsibility."[7]

> ...

> The Friedman doctrine is controversial,[1] with critics variously saying it is wrong on financial, economic, legal, social, or moral grounds.[14][15]

> It has been criticized by proponents of the stakeholder theory, who believe the Friedman doctrine is inconsistent with the idea of corporate social responsibility to a variety of stakeholders.[16] They argue it is morally imperative that a business takes into account all of the people who are affected by its decisions.
by wtallis | 2025-09-08 16:26:05+00:00
In general: consumer cards with very bad FP64 performance have it fused off for product segmentation reasons, datacenter GPUs with bad FP64 performance have it removed from the chip layout to specialize for low precision. In either case, the main concern shouldn't be FLOPS/W but the fact that you're paying for so much silicon that doesn't do anything useful for HPC.
by imiric | 2025-09-08 16:26:15+00:00
To be fair, this is not a problem with the web itself, but with the Node ecosystem.

It's perfectly possible to build web apps without relying on npm at all, or by being very selective and conservative about the packages you choose as your direct and transitive dependencies. If not by reviewing every line of code, then certainly by vendoring them.

Yes, this is more inconvenient and labor intensive, but the alternative is far riskier and worse for users.

The problem is with web developers themselves, who are often lazy, and prioritize their own development experience over their users'.