MurphyA/hacker-news huggingface dataset:
by jychang | 2025-09-12 09:02:29+00:00
Speculative decoding! It makes inference a LOT faster.

Instead of generating tokens one at a time, you generate the second one as well, and then use speculative decoding on that second token (instead of having it be produced by a draft model like Qwen 0.6b). If the token is checked and is correct, then the 2nd token gets generated MUCH faster.

If it's wrong, you have to generate it again the normal way (a lot slower than just checking it). Usually, it's correct, so inference is a lot faster.
by rmunn | 2025-09-12 09:02:40+00:00
Certainly torrenting the same tracks you'd paid for through whatever no-downloads-allowed store, if you can find those tracks, would be fewer steps, and whoever put those up would likely have tagged them already. But if you have obscure tastes in music and nobody is offering those tracks in a torrent, Audacity can rescue you from vendor lock-in.

The legality of torrenting music tracks you've already paid for elsewhere, which would be breaking the letter of copyright law but not (IMHO) its spirit, I will leave to others to debate.
by UmGuys | 2025-09-12 09:03:07+00:00
First, I didn't mention anything. I read the well crafted comment you replied to and was repulsed to learn about Kirk's hateful beliefs, then equally shocked by the lack of compassion in a reply. It seems the context is now missing. The comparison is Kirk dehumanizing anyone he disagrees with. And being super racist and bigoted in the process. The isolated statements I've read indicate a resentment for non-heterosexual, not white people. This is inherently a violent worldview. Just like Nazism and just like Nazism, it can't be tolerated. It's quite a paradox.
by tirant | 2025-09-12 09:03:18+00:00
Are you expecting that all debates reach the level of a Chomsky-Foucault debate and to discard anyone below it?

Are you even able to meet that level yourself? This is non-sense. Obviously we all would love to reach that level of knowledge, introspection and speaking capability of Chomsky/Foucault, but it is absurd to expect it at all times.
by librasteve | 2025-09-12 09:03:34+00:00
for general computation, I think Rationals (https://raku.org) are a good choice - and Raku has big Int as standard also

nevertheless, us Weitek guys made 32-bit FPUs to do 3D graphics (pipeline, 1 instruction per clock) P754, IBM, DEC standards to power SGI, Sun etc

this is still the best format to get graphics throughout per transistor (although the architectures have got a bit more parallel)

then 64-bit became popular for CAD (32-bit means the wallpaper in your aircraft carrier might sometimes be under the surface of your wall)
by codeulike | 2025-09-12 09:05:46+00:00
Its likely the S25 did well because it knows what the moon looks like so it fakes the details.

Since the Galaxy S21 series, Scene Optimiser has had the capacity to recognise the moon as an object. This means that the detail enhancement engine, a key feature of Scene Optimiser, is applied to photos of the moon.

When you take a photo of the moon with your Galaxy device, the camera system uses deep learning-based AI, along with multi-frame processing, to enhance details.

https://www.samsung.com/uk/support/mobile-devices/how-galaxy...

The OP has not said anything about turning the relevant options off.
by zahlman | 2025-09-12 09:05:55+00:00
How and where, in principle, do you suppose it should (be able to) do so, given the functionality? It's just localizing timestamps, and the result might bubble through multiple layers of software before being presented to anyone. It's not as if C APIs get designed up front to return structures with a boolean "btw you called this in a nonstandard way that might fuck up in the future" flag (or, say, a pointer to a deprecation-warning structure; and then that interface has to be rock-solid stable to be of use) for every call. And if they did, nobody would ever write code that checks it.
by dsamarin | 2025-09-12 09:05:59+00:00
To want to cleanse references to "Indigenous motifs or symbolism" as a community value brings about a touch of shame in me. It mostly weakens cultural memory and the ability of later generations to stay connected to the worldviews that these motifs carry. Taking away the symbols is like taking away the memory-keeping. Without them, it's much easier to forget the culture.
by sjiabq | 2025-09-12 09:06:57+00:00
What are they supposed to do about it?

They didn't want user data to be sent to third-parties without consent, so they created a law that made it mandatory for web pages to ask for consent to send the data. Most web pages need to send data to third-parties to be profitable, so they need to ask for consent.

What would the next steps be like? The purpose of the law is to give users the power to consent or not consent. In other words, I can pay for the contents of a web page with my data. Removing that option from me doesn't give me power to do whatever I want with my data: it takes that power away from me instead. That would be bad.
by inigoalonso | 2025-09-12 09:07:10+00:00
The “no transaction cost” claim is doing a lot of heavy lifting here. Cash may feel free to the person handing over a coin, but only because the costs are hidden upstream. Someone has to produce those notes and coins, swap out designs to keep ahead of counterfeiters, move them around in armored vans, count and recount them in tills, reconcile them at the bank, and insure against theft along the way. None of that is costless.

In fact, many retailers will tell you that cash is more expensive to handle than card, because every deposit requires staff time and often explicit bank fees. Society also pays indirectly through tax evasion and black-market activity, which cash enables far more easily than digital systems.

You’re right that cash is robust in a blackout, and there’s something elegant about a technology that works offline, peer-to-peer, and without needing servers to stay up. But the idea that it has no transaction costs is not realistic.
by ChocolateGod | 2025-09-12 09:07:18+00:00
> Android security patches are almost entirely quarterly instead of monthly to make it easier for OEMs. They're giving OEMs 3-4 months of early access which we know for a fact is being widely leaked including to attackers.

Android is is over 15 years old and Google still hasn't fixed the update mess. Google should be in charge and ship security updates, not OEMs. You don't see Dell responsible for Windows security updates.
by mytailorisrich | 2025-09-12 09:07:31+00:00
Actually, those who remember the 90s and, before that, the Cold War see and understand that Europe is much safer now that it was then. The USSR was much stronger relative to Western Europe then. Now Russia is probably at its weakest relative to NATO (it might have been weaker in the early 90s but NATO had also not expanded to its current footprint).

Rememeber also that there was a hot war in the middle of Europe (former Yugoslavia) during the 90s with the US even carrying airstrikes on an European capital (Belgrade).

Obviously this does not mean that European countries should have weak militaries or not show strength. But the threat of Russia is overblown and used to manufacture consent in public opinion for more spending and more EU integration at a time when people already suffer economically and are already squeezed, and growing disatisfied with the EU.

IMHO, the highest risk of violent instability in Western Europe now and in the coming years is not Russia but mass immigration and islamist terrorism at large. And perhaps that's also partly why governments are trying to deflect attention...

> it seems crazy that Russia might start dropping bombs, say, on Copenhagen or London.

Yes, that is totally crazy.
by burnt-resistor | 2025-09-12 09:07:51+00:00
Russ Allbery left over bureaucracy and systemd. It sounds like it's chocked full of people who want power and an excuse to patch downstream to create a cottage industry of quirks, busywork, and codependency.

I prefer real choice and light patches that try to upstream as much as possible, or workaround upstream obstinacy rather than create incompatible idiosyncrasies. One area that isn't well represented in barely a/no distro is init freedom neither married to nor completely divorced from the sprawling octopus.
by gyomu | 2025-09-12 09:08:19+00:00
Yep, a very common story. Or someone whose parents pass away, they take a few months to put affairs in order and start selling the house, only to find out the house is now being squatted and they have a nightmare to deal with.

But somehow people much prefer the “bohemian squatters sticking it to greedy capitalistic landlords who don’t use their property” narrative.
by rickdeckard | 2025-09-12 09:08:43+00:00
No, forget APIs. Apple was found to have created a burden in the OS for all their competitors in the Accessory-market, by introducing elements only available to their own brand, and are now required to remove those again.

A duelist was found to arrive with a gun to a knife-fight and is asked to either allow everyone a gun or use a knife.

Now we're arguing that it's a burden to him because bringing a gun is his innovative approach to win knife-fights, and making it a gunfight or keeping it a knife-fight is hindering the innovation he brings.

Apple OWNS the terms for this fight. If they believe that their fights should evolve to be gun-fights then all players should have guns.

It was decided that they can't continue restricting guns while shooting all knife-duelists, at least not in the EU.
by aeonfox | 2025-09-12 09:09:05+00:00
> Most of the people detained were South Korean nationals with the wrong kind of visas.

https://www.economist.com/united-states/2025/09/10/the-ice-r...

> I'm not particularly sympathetic to Hyundai here, and it wouldn't be surprising if they subcontracted a sublegal operation to cut costs

Often Visa systems are overly complex and it's just a matter of bureaucracy making things impossible within a particular timeline. My cynical lens on this is that someone with a vested interest (like a competing company or a lobbyist from a competing industry) that has the ear of the administration has made this happen.

All the same, I imagine this only worsens the risk assessment for the US as a place of investment and business.
Show HN: Valkyrie – A community-powered security scanner for your CI/CD
by Einswilli | 2025-09-12 09:09:05+00:00
Hi HN,

I'm building Valkyrie, an open-source (AGPLv3) security scanner that acts as a gatekeeper for your pull requests. It scans code for secrets (API keys, tokens), vulnerable dependencies (SBOM), and risky IAM configs before they get merged. The key difference? It's built on crowd-sourced rules. The community can create and share detection patterns for any cloud provider (AWS, GCP, Azure), SaaS tool, or obscure framework. The value is in the collective rulebook.

Tech Stack: Strongly-typed Python, async, clean architecture, with native GitHub Actions/GitLab CI integrations. It's designed to be fast, flexible, and built for developers.

Why I'm building this: I was tired of expensive, generic, and slow scanners. I wanted something open, specialized, and that could leverage the knowledge of the community to protect everyone.

The core is open-source, and we'll offer a commercial license for enterprises that need it ($1/user/month).

It's still in active development, but the core scanner engine and plugin system are taking shape. I'd love for you to:

- Star the repo if you like the concept. - Contribute a rule for your favorite service. - Tell me what's wrong with the architecture or idea.

Looking forward to your brutal and honest feedback.
Ask HN: Why is enrolling in Apple's Developer Program so difficult in 2025?
by thomas_witt | 2025-09-12 09:09:24+00:00
I recently attempted to enroll a small 1-person company in the Apple Developer Program, and the process turned into a surprisingly terrible journey. I expected a quick online sign-up and a $99 payment – instead I got weeks of identity checks and problem after problem.

Frustratingly, the whole thing started because I wanted to use Sign in with Apple. Apple forces you into the developer program just to enable it, and charges €99/year for the privilege. Google and Amazon both offer their equivalent login services for free, set up in minutes. I can’t see how this policy benefits Apple’s ecosystem.

So I needed:

- D-U-N-S verification: Apple required a D-U-N-S Number for the company – very uncommon in the EU. Applying took several days and even a manual phone confirmation with an outsourced D&B subsidiary.

- Document uploads: Apple support then asked me to upload multiple documents: government ID, employment verification (odd when it’s just me), and business registration papers. I ended up uploading these three separate times, via the app and a special link. Different support reps (always friendly, but sending template replies) didn’t seem to see the same history. When I rated a feedback survey low, I got a standardized response that didn’t engage with my points at all.

- Website scrutiny: After identity checks, Apple also reviewed my project website. They said it had “minimal content” and needed a proper support contact page before apps could be distributed. But I do have an issue tracker and contact info. What if you haven’t even launched yet?

- Region mismatch: The system couldn’t handle that my personal Apple ID is in one EU country while the company is in another. To pay Apple €99, I was told to switch my iPad’s region to match the developer account — which would break my Apple One subscription amongst other things. I wouldn't even use the iPad for development, so I thought I'll just switch to my MacBook.

- Device lock-in: I tried to continue on my MacBook with the developer Apple ID, but the system forces you to finish enrollment on the same device you started with. On the MacBook, I’d have to start from scratch and re-upload all documents. That’s not just bad UX, it’s inexplicable – especially for Apple.

3 weeks later, and I am still not enrolled.

I’m posting this because the experience felt utterly broken. I didn’t expect smooth sailing, but this was far beyond normal friction.

Questions:

- Have others run into the same issues with Apple’s developer enrollment, especially cross-region?

- Do you think these hurdles discourage indie developers?

- Do people at Apple consider this a great experience? Is this just bureaucracy, or is there a deeper rationale? Sometimes I wonder if the (often equally clumsy) EU regulations are actually a useful medicine here.
by 3np | 2025-09-12 09:10:32+00:00
I'm usually on the other side of these things but here I think most of the actual (some might be artificial...) outrage and concern come from a misunderstanding of the product and services Huntress are selling and how their EDR product is packaged and sold.

As presented I see no ethical concerns with the incident and their response. Someone hacks you and then installs your rootkit, I say you can leverage that to hack back and look all you want while it's running (as long as you can be confident it's really the attacker obv). I appreciate that Huntress shared their insights with the community and hope that they and others won't be discouraged from the unfortunate flaming.
by Tepix | 2025-09-12 09:11:06+00:00
Pro tip: Use the command

timedatectl list-timezones

to get a list of all timezones your debian based OS recognises.

For your convenience, here is a list for a Debian 13 box with 628 entries:

https://pastes.io/output-of-timedatectl-list-timezones-on-de...
by petercooper | 2025-09-12 09:11:33+00:00
Did/do you offer annual plans too? In my business, we're put off paying small amounts per month for things because of the bookkeeping work (we have someone who manages our books but we still have to find and create a PDF of every receipt every single month which is boring) so for longer term things we tend to find options with annual plans. It also means we're "locked in" for longer which is good for the seller.

As a consumer, $10/mo is great. As a business, $10/mo is as much headache as $100/mo.
by eastbound | 2025-09-12 09:11:52+00:00
I do. Never been to US since the Patriot act, a have a several-million dollars small startup and would love to see Colorado and California, why not move there, but I’m just afraid of TSA.

On the other hand, I envy USA for enforcing their visas. Europe follows American criminality stats by 10 years, so when we used to mock USA for George Floyd, we’re now in it; for Korean shop owners, we’re now in it; For random knives in busses, we’re in it, and with school shootings, it’s just a matter of time until it happens.

And European people are much farther away from reaching the conclusion that law must be enforced in multicultural nations.
by aredox | 2025-09-12 09:12:17+00:00
And it is not the only case. The French people went to war in 1914 "la fleur au fusil"[0]. Jean Jaurès is assassinated for his pacifism and (his assassin would be found not guilty - despite being totally guilty - in 1919).

[0]: a more nuanced take that is illuminating can be read here: https://www.france24.com/fr/20140730-grande-guerre-poilus-vr...
by zahlman | 2025-09-12 09:12:35+00:00
(I'm ignoring how blatantly AI-written the OP is and assuming good faith that the text accurately represents the actual situation.)

> Here’s the thing: for us, it’s hard to stay motivated supporting free users—especially if you’re bootstrapped.

> Paying customers energize you. Free users don’t.

> Today the project have 500 paying customers, and we’re happy to support them.

1 in 60 seems like a pretty good conversion rate to me from other stories I've heard. And who knows if you actually would have reached 500 paying users if you'd charged from the beginning. After all, your free round produced targeted advertising to an audience of 30,000.
by aredox | 2025-09-12 09:12:42+00:00
“You will never live in a society when you have an armed citizenry and you won’t have a single gun death,” Kirk said a week after three children and three adults were killed at the Christian Covenant School in Nashville in 2023. “That is nonsense. It’s drivel. But I am — I think it’s worth it. I think it’s worth (it) to have a cost of, unfortunately, some gun deaths every single year so that we can have the Second Amendment to protect our other God-given rights. That is a prudent deal. It is rational. Nobody talks like this. They live in a complete alternate universe.”
by aredox | 2025-09-12 09:13:11+00:00
>It basically sounds something like “drug companies couldn’t show their vaccines were safe enough like other drugs

Can you point exactly where in the given link there is something that could be summarized or interpreted as such?

“drug companies couldn’t show their vaccines were safe enough" is nowhere to be found. What I can see is this:

"A 1982 TV news report entitled Vaccine Roulette suggested that the whole-cell pertussis vaccine was the cause of permanent brain injury. Subsequent studies indicated that while the whole-cell vaccine was associated with febrile seizures, it was not associated with long-term brain damage. However, those studies took at least 10 years to exonerate the vaccine."

Vaccine manufacturers demonstrated their product was safe before being put to the market (that's the reason for the different "phases"). A concern was raised by a TV news report. The vaccine manufacturers proved - after a long study - that it wasn't the case, their product was demonstrably safe.

Where have you found elements to support your assertion the linked references show “drug companies couldn’t show their vaccines were safe"?
by roelschroeven | 2025-09-12 09:13:20+00:00
I always thought:

- com, example.com, foo.example.com are all domains - com is a TLD - subdomain is a relative term, not an absolute one: . example.com is a subdomain of com . foo.example.com is a subdomain of example.com . bar.foo.example.com is a subdomain of foo.example.com
by Joel_Mckay | 2025-09-12 09:13:33+00:00
In general, SELinux profiles use Mandatory Access Control, and not Discretionary Access Control. However, most desktop users find it difficult to understand, and often have bigger problems from reading silly posts off the web.

An outdated old package library relies on people understanding/tracking the complete OS scope of dependencies, and that is infeasible for a small team.

If someone wants in... they will get in eventually... but faster on a NERF'd Arch install. =3
by inglor_cz | 2025-09-12 09:14:26+00:00
You are making too many assumptions. Some squatters are the homeless, some are young-ish adherents of the far left, for whom this is a lifestyle choice.

The most famous Prague squat, Klinika in Žižkov, was full of blue-haired nepo babies whose parents were well connected politicians or businesspeople. That is also why it was tolerated for a fairly long time, and it was always able to summon a crowd of friendly journalists whenever someone tried to empty the building.

(Note that this is something that actual poor people rarely are able to - but lifestyle squatters who studied the same faculty before dropping out can do easily, as they still have the phone numbers of their graduated friends).

The common feature is freewheeling attitudes to drinking and drugs. Most homeless shelters or cheaper landlords won't tolerate too much consumption on the premises, or even have a dry policy. In a squat, anything goes.
by arunabha | 2025-09-12 09:14:44+00:00
A lot of countries have learnt from this and maintain a govt mandated /supported standard for digital payments.

In India, the universal payments interface (UPI) has been hugely successful in providing instant, commission less payments for a vast majority of the population.

Similarly, RuPay is the common standard for credit and debit cards.

It's eye opening to see just how effective and impactful these two have been, particularly UPI. The smallest seller in the remotest village will likely accept UPI payments.

What's mind blowing is that all of this came about in the short span of just under a decade.
by dns_snek | 2025-09-12 09:15:02+00:00
Some of my other favorite bits from where that came from [1]

> In its notice of compliance and at the May 2024 hearing, Apple claimed that restrictions on link placement protect against “security risks.” Again, Apple attempted to mislead. Mr. Schiller asserted that having an external link appear on the same page as IAP can increase the risk of a user’s exposure to fraudulent conduct. [...] Given the lack of any document identifying this alleged concern, the Court finds these justifications pretextual; said differently, the proffered rationales are nothing more than after-the-fact litigation posturing or outright misrepresentations to the Court.

> At the end of the day, Apple’s internal documents reflect the underlying motivation to stifle competition by cabining developers’ ability to attract users to alternate payment methods: “How much can we limit what devs do with the text and links?

> In other words, to stifle competition, Apple was modeling the tipping point where external links would cease to be advantageous for developers due to friction in the purchase flow

> Apple willfully chose not to comply with this Court’s Injunction. It did so with the express intent to create new anticompetitive barriers which would, by design and in effect, maintain a valued revenue stream; a revenue stream previously found to be anticompetitive. That it thought this Court would tolerate such insubordination was a gross miscalculation. As always, the cover- up made it worse. For this Court, there is no second bite at the apple.

[1] https://storage.courtlistener.com/recap/gov.uscourts.cand.36...
by ilsubyeega | 2025-09-12 09:15:27+00:00
disclaimer: i'm native korean (living in south korea also)

> whether any of these hundreds of people were actually working without an appropriate visa

IIRC It appears that many of those arrested entered the country using ESTA which is tourism purposes only. They are likely subcontractors of this company.

> It's quite hard to imagine none of them have cases even worth hearing

I think it's due to the related investigation was conducted quickly, as most of them entered the country for the same purpose.