MurphyA/hacker-news huggingface dataset:
by cesarb | 2025-09-16 14:55:10+00:00
> If an attacker rug-pulls of course there is nothing that can be done about that other than security scanning.

As another subthread mentioned (https://news.ycombinator.com/item?id=45261303), there is something which can be done: auditing of new packages or versions, by a third party, before they're used. Even doing a simple diff between the previous version and the current version before running anything within the package would already help.
by michaelcampbell | 2025-09-16 14:55:21+00:00
If you also have experience using JSX in a React app, I'd love to hear any opinions/experiences you have with doing the JSX style vs createElement() style coding.

I understand how they map to each other but I've only done JSX. That said, I'm old so calling functions all over the place is in my wheelhouse, and I'd love to hear from folks who have done both.
by bsenftner | 2025-09-16 14:55:23+00:00
I often do, just use HTML, when working on a completely solo project. If anyone else is going to touch the project, I find they can't do HTML - they do not know it, and on top they have a brainwashing that makes them unable to work in HTML. It's really amazing, they will literally stand behind social pressures as why they cannot. Then the users and the finished project: if it does not look like it was made using React, those same social pressures prevent them from using the project. They will use fashion arguments why they cannot. Seriously.
by sxp | 2025-09-16 14:55:44+00:00
> Put simply, intelligence is all about doing things, while consciousness is about being or feeling.

Unless one believes in p-zombies or a magical soul, robots & LLMs can "be" and "feel". We can distinguish LLMs which "are" from random noise which "isn't". And multimodal LLMs & robots have sensory inputs.

One can always make up some untestable notion of "consciousness" and then say that LLMs don't have it without being able to define which humans (i.e, what level of functioning brain between adult, child, fetus, zygote, corpse, etc) are conscious vs which are not. If one arbitrarily draws a line somewhere, then it's just as valid to arbitrarily draw the line somewhere else.
by perlgeek | 2025-09-16 14:55:56+00:00
> This isn't a JavaScript problem. What, structurally, stops the same thing happening to PyPI? Or the Rust ecosystem? Or Lisp via QuickLisp? Or CPAN?

For one, NPM has a really sprawling ecosystem where it's normal to have many dependencies.

I remember that I once tried to get started with angular, and I did an "init" for an empty project and "compile", and suddenly had half a gigabyte of code lying in my directory.

This means that there is a high number of dependencies that are potential targets for a supply chain attack.

I just took a look at our biggest JS/Typescript project at work, it comes in at > 1k (recursive) NPM dependencies. Our biggest Python project has 78 recursive dependencies. They are of comparable size in terms of lines of code and total development time.

Why? Differences in culture, as well as python coming with more "batteries included", so there's less need for small dependencies.
by mstade | 2025-09-16 14:56:00+00:00
I'm probably just nostalgic, but to me this hardware is a piece of history that's mostly forgotten or overlooked by anyone who wasn't working in IT at the time. That's why I've been trying to get museums to take it, because my hope would be they'd do something educational with the hardware. Alas, selling is indeed probably my only recourse if I don't want these things to end up on the heap (right away.)
by MontyCarloHall | 2025-09-16 14:56:07+00:00
>I met many programmers during the boom years of software that straight out refused to develop any type of soft or managerial skills. [If you’ve been] working only on the comfortable stuff like developing tech skills, you should have seen this coming. It's very, very, very hard to maintain sharp coding skills decade after decade.

It’s funny you say this. I’ve observed the opposite: even basic coding skills can atrophy extremely quickly in previously sharp developers who quit coding to go onto a management track. The devs who never quit coding are the ones who stay sharp into old age; the ones who have problems getting hired in their 50s are the managers who quit coding in their 30s, worked the same middle-management position for 15+ years, and as a result have a skill/knowledge set that’s 15+ years out of date and can't answer FizzBuzz-level questions in first-round pulse-check interviews.
by simiones | 2025-09-16 14:56:16+00:00
That's not the problem. There is a cultural (and partly technical) aversion in JavaScript to large libraries - this is where the issue comes from. So, instead of having something like org.apache.commons in Java or Boost in C++ or Posix in C, larger libraries that curate a bunch of utilities missing from the standard library, you get an uncountable number of small standalone libraries.

I would bet that you'll find a third party `leftpad` implementation in org.apache.commons or in Spring or in some other collection of utils in Java. The difference isn't the need for 3rd party software to fix gaps in the standard library - it's the preference for hundreds of small dependencies instead of one or two larger ones.
by pizzathyme | 2025-09-16 14:56:39+00:00
Unless you are a hermit, everyone has a network, even if it's small. Everyone has a few friends, a brother/sister/dad/mom/cousin, a few people in their town they know. All of those people know someone else, and that's your initial pool of job opportunities to look at.

This might not get you into your dream company. But it can get you a next job to grow from.

For one of my jobs I had no contacts in the industry so I emailed someone at the company who went to my school, mentioned we both went there, and could they meet for coffee. I then drove 2 hours to meet him. We discussed what was happening at his company, are there opportunities, and he referred me.
by bbatha | 2025-09-16 14:56:58+00:00
I wrote a longer post a few months ago.[1] The tl;dr is a) computer aided design and manufacturing b) aspherical elements c) fluorite glass d) retro focus wide angle designs and e) improved coatings. Mirrorless lenses also beat slr lenses because they are much closer to the film plane — of course rangefinders and other classic designs never had this problem to begin with. 1: https://news.ycombinator.com/item?id=42962652

Edit: this is just for prosumer style cameras. If you look at phone sized optics that’s a whole other ballgame.
by JadeNB | 2025-09-16 14:57:24+00:00
> > his overturned conviction only for wrong jurisdiction

> What are you getting at?

> If an appeals court says “wrong jurisdiction”, that’s an “rm -rf” on the whole entire case. There’s nothing left to argue about.

I think your parent comment meant something like "the case wasn't overturned on the basis of deficiencies in the legal theory of the crime."
by omnicognate | 2025-09-16 14:57:40+00:00
So the solution continues to be more AI, for guess^H^H^H^H^Hdetermining user age, escalating rand^H^H^H^Hdangerous situations to human staff, etc.

Is it true that the only psychiatrist they've hired is a forensic one, i.e. an expert in psychiatry as it relates to law? That's the impression I get from a quick search. I don't see any psychiatry, psychology or ethics roles on their openings page.
by PyWoody | 2025-09-16 14:58:10+00:00
> It's always been through (somehow) tracking down a person to speak to over phone or coffee, and get a referral.

Just be careful contacting recruiters directly. I know of at least one F100 that will blacklist you for pestering their recruiters. If you think ai-generated resumes are overwhelming recruiters, you should see their LinkedIn inboxes.
by thworp | 2025-09-16 14:58:19+00:00
Imo OLED has completely eclipsed CRT by now.

I don't know enough to say where CRTs could be today if they had gotten the development $ that went into other tech. But to be as good as OLEDs they would have had to find something else than phosphor as the inner coating.

For response times, CRT will always remain the king of dark-to-light response times, but afterglow for bright-to-dark would always be a factor unless a different coating was developed. OLEDs have no such issues. Subjectively, the claimed < 0.1 ms response times are real and there are zero artifacts, no afterglow, no ghosts, just extremely sharp and defined motion.
by ux266478 | 2025-09-16 14:58:35+00:00
Personally I'm skeptical it wasn't just a product of context. The Xerox document model was logical, in a world that still heavily relied on paper. Having an abstraction that seamlessly interoperated with the century of information storage that preceded it is a no-brainer. In today's world where paper is becoming increasingly rarer, and much work has been done in digitizing that mountain of documents? I'm not so sure. And I think Engelbart was focused on that future, rather than the 30-year transition period that would end up happening.

It's not to say that the specific implementations Engelbart was working with were good. But I'd point to Plan 9 from Bell Labs as a kind of hybrid between Douglas Engelbart's vision and what Xerox produced. It's a little alien, but relatively easy to learn, and at least conceptually it shows that an unstructured UI made up of hypertext and windows can be quite nice to use. When that's integrated with the primary IPC mechanism of the operating system, which also happens to be the filesystem, you end up with an intense synergy that's hard not to be delighted by. I don't think it was possible to avoid computers becoming digital filing cabinets, but I also don't think we should write off moving beyond this era at some point. There is a large, underexplored dark wood. I am very interested in what lives inside. I think revisiting Engelbart's ideas of human augmentation with a prolog-based system like the Japanese Fifth Gen Computer project has extremely promising implications.
by quesera | 2025-09-16 14:58:59+00:00
You just spent far more time ranting about what Spotlight can index, than it would have taken to open the configuration and turn off the sources you do not want.

Cue "discovery" rant.

Defaults are chosen carefully, but they cannot meet every user's preferences. So, periodically spend a few minutes exploring the enormous software package that is your OS, and be happier for it.

I find this vastly more rewarding than complaining on the Interwebs. YMMV.
by jillesvangurp | 2025-09-16 14:59:04+00:00
At the relatively high cost US LNG gets imported, it creates a big incentive to start considering alternatives. A lot of the investment commitments will probably never be delivered. Fundamentally, a lot of states in the EU will have to sell this to their voters and tax payers and that's where this stuff will slowly die. Because it's a hard sell.

LNG imports will be demand driven, not supply driven. And demand is going to decrease over time; not increase. That calls into question the need for more infrastructure. On both sides. Germany already topped up its reserves for the coming winter; ahead of schedule. There is no shortage.

The US is building a big LNG bubble with investments that might end up under water. What happens if demand flattens and decreases mid to long term, as can reasonably be expected at this point? Can the US sustain high LNG prices when cheaper sources become available? What will high export prices do for domestic pricing for energy? How eager will investors be to make big multi decade investments in this (given all this)?

The existing terminals are underutilized already (below 50%). It's hard to see where all this extra demand to fill even more terminals is going to come from. There is no urgency for any of this on the EU side.

However there is quite a bit of urgency on lowering energy prices for industry and consumers. LNG is not the way to do that. I don't see that changing.
by cantor_S_drug | 2025-09-16 14:59:15+00:00
I don't understand economics that much or how money works. But is the following possible in a clandestine manner?

US and EU provide each other money through swaplines by printing freshly created respective currencies and exchanging them.

Then EU can use those dollars to buy US LNG.

Is this a far fetched idea? This is like undercover QE.
by pankaj28843 | 2025-09-16 14:59:30+00:00
I was able to fix the fan always running issue by changing the fan mode for both my Asus laptop and old macbook pro; I am using silent mode or equivalent and that seems to be fine. there are policy files for throttle_thermal_policy/fan_boost_mode, and you can use a systemd service to set to whatever is your preferred mode.
by marstall | 2025-09-16 14:59:48+00:00
So for an (employed) developer like me, who is dreading the next job search, what's a "hot" profession I could train myself on so my experience in the job market over the next 15 years could be like it was in the salad days of 1996-2022?

(I'm making a pass at "learning AI" but don't feel 100% certain that demand for that will be sustainable at a high level over the next decade ...)
by nusl | 2025-09-16 14:59:49+00:00
A VM would bypass monitoring software installed on devices the person uses. A VPN would obscure their traffic such that it is encrypted and not easily monitored. Even something like SSH is encrypted and not straight-forward to monitor, so a VPN isn't required to do this anyway.

A remote VM would combine both of these things, where the device/computer is in a location that isn't monitored and accessed by means aimed at bypassing controls in place. Activities carried out from the remote VM are then not monitored.

User + Devices -> VPN/other -> Remote VM -> Unmonitored Activities / Network Access

^ Monitoring is here, but may not capture the rest of the chain

Law enforcement would need to monitor the VM itself to monitor those activities, or I guess request logs from the provider if at all possible.

There's a limit to how much you can monitor someone and I assume there's a degree of good faith in cooperation with these controls. Failure to comply, seemingly, has severe consequences.
by simiones | 2025-09-16 15:00:04+00:00
You can't sandbox the code that is supposed to talk to your DB from your DB.

And even on client side, the sandboxing helps isolate any malicious webpage, even ones that are accidentally malicious, from other webpages and from the rest of your machine.

If malicious actors could get gmail.com to run their malicious JS on the client side through this type of supply-chain attack, they could very very easily steal all of your emails. The browser sandbox doesn't offer any protection from 1st party javascript.
by alsetmusic | 2025-09-16 15:00:09+00:00
I was cleaning out my downloads over the weekend and came across this app for downloading versions of MacOS installers. It doesn't make a bootable volume, but that shouldn't be too difficult (I say this as a Mac user; I don't know about Linux and Windows). I'm not affiliated with the project.

https://github.com/ninxsoft/Mist
by sltkr | 2025-09-16 15:00:10+00:00
I find this advice overly simplistic to the point of being completely misguided.

Let's take the table example. Sure, you can fetch an HTML snippet and insert it directly in the DOM tree with innerHTML. But then, how do you handle:

1. Formatting based on client-side preferences (e.g., formatting dates based on the client's time zone) 2. Changing the sort order (e.g., by clicking a column header) 3. Filtering rows (e.g., by typing in a search box)

These are all super common features of tables, especially larger ones, and all of this functionality is way easier to implement client-side than server-side.

And yes, if you really want you can make the server generate custom tables by passing query parameters of the form: ?sort=price&tz=Europe/Berlin&query=foo, but that has several downsides:

1. You're now sending potentially privacy-sensitive information to the server. 2. You have to make a roundtrip for every change in any of the parameters, which is slow and wastes bandwidth and server resources. 3. Arguably the worst: your presentation logic is now spread between the frontend and backend, instead of being concentrated in the frontend, where it belongs.

For these reasons, it's much preferable to have the server return just the data (often in JSON format) and let the client sort, filter and format it.

I can think of two rebuttals. One: what about the simple case, though? Isn't client-side formatting overkill in that case? Yes, it is, but people use it anyway, because it's generic: it works well for simple and complex cases alike. It's easier to learn a small set of well-understood general solutions than a large set of niche solutions.

Two: what about performance? node.innerHTML = 'bla' is faster, isn't it? Yes, it probably is, but for small-to-medium-sized tables the difference won't be noticeable, and tables that are so large that the time it takes to render them begins to matter, it's probably a better idea to reduce the size of the rendered page anyway, e.g. by introducing pagination. So even if we don't need any fancy features, cases where the "fast" solution is clearly beneficial are rare.
by happymellon | 2025-09-16 15:00:23+00:00
The only people I see defending systemd is normally due to baseless claims.

My personal issue with it is that logs are stored in a database that (unless it's changed) the documentation is the implementation. There are a few places where people have reverse engineered the design to document it, but it would have been much better for them to use a documented format like sqlite.
by cjonas | 2025-09-16 15:00:28+00:00
> But you cannot really develop anything meaningful without adding frameworks.

You can develop extremely powerful web-apps using just React + Redux. Once you need to start dealing with SSR for SEO & server side caching, data preloading, hydration, etc... things get complex.

But honestly that's because those concepts are inherently complex and that complexity can only be reduced so far. Another problem is they get baked into these framework as the "default" and often over utilized when they aren't actually needed.
by mothballed | 2025-09-16 15:00:32+00:00
Yes there is, they can reargue the whole thing in another jurisdiction since he was never 'in jeopardy.'

Considering he was convicted in another jurisdiction, and they can retry him in the 'right' one, why wouldn't a reasonable person anticipate that might happen?

I don't think Weev is living in Ukraine/Transnistria to practice his Slavic languages.

And the reason why I brought up it was overturned, was because I knew someone would mention his case was vacated, and I wanted to make clear it wasn't vacated because there was something improper found about the legal question of the CFAA.
by graemep | 2025-09-16 15:00:35+00:00
> The more Apple talks and moves like other big tech companies, the less special it gets; the less special and distinctive it gets

Special and distinctive to whom?

Apple is a mass market consumer brand. They are half of the mobile phone duopoly.

Most consumers buy "oh shiny", they buy status symbols. They do not read HN. They do not think about UI. They do not really care about technological or design innovation. They stick with brands (especially in technology) rather than compare alternatives when they make a new purchase.

Apple is well aligned with them, that is why Apple is successful
by marginalia_nu | 2025-09-16 15:00:38+00:00
I have tried various forms of non-work (including unemployment while unqualified for government aid), and the by far most mentally devastating thing I've done was to take an extended sabbatical where I really just did nothing but sit on my ass, play video games, watch netflix, and scroll social media for 8 months. Took me years to get my brain sorted again.
by 3D30497420 | 2025-09-16 15:00:43+00:00
This is one of my main concerns. A lot of countries are talking about raising their retirement age, and I just think to myself, which tech company is going to hire a 68-year-old? Sure, I could transition into management, but my company just laid off a number of middle-managers and the ones left are expected to do more than just manage (code, design, etc.). So I'm not sure that's all that safe either.

I like learning new things, and I hope to continue that into my 60s (and beyond), but I have to imagine picking up new skills will get harder as I age.
by h2zizzle | 2025-09-16 15:01:02+00:00
America wasn't devastated by WWII. Our pre-war car infrastructure wasn't destroyed, and post-war prosperity meant that it was more economical than it might have been, in the short term, to put every American family into a car. Countries with populations temporarily too poor to afford vehicles, and gas, and roads, and pump stations, and gas lines, and so on, would have been more likely to build mass transit. Once wealth returned, American consultation (and aspiration to our relatively more affluent lifestyles) would have come into play.

It's a rare case where American Exceptionalism is a fact.
by nradov | 2025-09-16 15:01:05+00:00
You have no clue about the "facts". Diving to 80m+ is no big deal now. Hundreds of random amateur tech divers do that every weekend as a casual hobby. They typically own their own gear (not rental), which can purchased new for about $30K including training. The equipment such as a closed-circuit rebreather (CCR) and drysuit is somewhat specialized but widely available on the open market from numerous manufacturers. I know a number of divers living in that region who have done much more complex and challenging dives, although obtaining and using the explosives is a separate issue.
by prewett | 2025-09-16 15:01:06+00:00
> No form is going to extend a job offer autonomously.

Just wait... some time-pressed startup is going to find a killer LLM prompt that filters in exactly the people they want, and then post something on the benefits of "vibe hiring". Complete with large, well-spaced text, colored with one accent color, and several graphs of hiring spending vs. income or something.

You heard it here first!
by chamomeal | 2025-09-16 15:01:43+00:00
When I was learning JS/node/npm as a total programming newbie, a lot of the advice online was basically “if you write your own version of foobar when foobar is already available as an npm package, you’re stupid for wasting your time”.

I’d never worked in any other ecosystem, and I wish I realized that advice was specific to JS culture
by echelon | 2025-09-16 15:01:45+00:00
> "the guy was a criminal anyway"

He violated 6 or 7 criminal things.

I'm on the civil rights and free speech maxxing side, but this was clearly a criminal in the act of actively criminaling.

The danger here is in crying wolf when this isn't a case of rights being violated for a non-perpetrator. This guy was willfully breaking laws left and right.

Don't cry wolf. We need that energy elsewhere.
by epolanski | 2025-09-16 15:01:46+00:00
1. It's a solution meant for highly interactive app-like websites, not static-content driven websites like ecommerces. React in this context is just the wrong tool for the problem that will give you a huge array of performance, bugs and ux problems.

2. Extensive ecommerce experience including Disney, Carnival Cruises, Booking, TUI, and some of the European leaders in real estate and professional home building tools among the others.
by pclmulqdq | 2025-09-16 15:01:47+00:00
They actually dived pretty deep (most Scuba gear and divers are limited to 40 meters), the planning of the operation was meticulous in that pretty much nobody saw the divers, and the explosives had to be designed with a good knowledge of the pipeline and its concrete. Ukrainian operations during the war have demonstrated that their typical MO is a lot more "seat-of-the-pants" than this operation would suggest.
by bgwalter | 2025-09-16 15:01:57+00:00
West Germany had a very strong army and better social systems than now until 1990. It could easily have built nuclear weapons, but wasn't allowed to.

The dichotomy between social programs and weapons (a variation of the old butter vs. guns nonsense) is false, and I suspect is just used by some people here who want to slash social programs no matter what.