MurphyA/hacker-news huggingface dataset:
by deivid | 2025-09-16 17:45:47+00:00
I had this old patchset: https://github.com/DavidVentura/scrcpy/tree/dev

Which added vnc support directly onto scrcpy, so I could leave a tablet plugged in to my headless server and access the tablet remotely via VNC

The alternative was to use X11vnc but it was janky and had some issues, plus higher cpu usage
by gomangogo | 2025-09-16 17:45:51+00:00
I’ve been on teams where “vibe coding” was fun at first, but eventually the codebase becomes unmanageable. Onboarding new devs is painful, small changes break things, and productivity tanks.

I just came across a tool that’s about to launch called VibeCleaner, which focuses specifically on tidying up messy vibecoded software. The pitch is simple: make your code clean and scalable so your team can stop fighting chaos.

They’re opening a waitlist, and early sign-ups get 50% off the first month. Could be worth it if you’re staring down a vibecode mess.

https://vibecleaner.uwu.ai/
by kens | 2025-09-16 17:46:58+00:00
I was wondering if they would let a total slug run the marathon for money. It turns out that they expect you to run it in under 6 hours (which is a slow "recreational" pace). You're also expected to raise an average of $15,000, but it may be more depending on the charity. More details here: https://www.charityteams.com/boston-faqs
by loloquwowndueo | 2025-09-16 17:47:05+00:00
No it wouldn’t have.

OP said the coin base account was drained within “minutes”. Server thief bait can take up to 24h to notify you when someone takes the bait.

> We'll put a tiny amount of cryptocurrency in a wallet, but probably still enough to attract the attention of automated scripts. We notify you when it's taken within 24 hours.
by uncircle | 2025-09-16 17:47:35+00:00
Thankfully, I do not live in Canada nor in USA, and I do not wish to live anywhere expensive. I just have very modest requirements and acceptance that I will not be able to afford anything better than a fixer-upper.

I have been saving from less than a year of work; I previously ran through 10 years of savings taking a long break after burnout. The type of burnout that turns you off completely from a career path, to the point that carrying bricks sounds more fun.
by toomuchtodo | 2025-09-16 17:47:40+00:00
This is inevitable.

The Steep Curve to Peak Urban - https://news.ycombinator.com/item?id=45265342 - September 2025

> Cities are engines of productivity, trade, innovation and prosperity. We’ve built, re-built and expanded in cities because they bring us closer, offer us greater access to jobs, services, ideas, opportunities and experiences. They make us overall wealthier and healthier, as long as we invest in addressing the side effects and unintended consequences of urbanization.

https://population.un.org/wpp/
by incomingpain | 2025-09-16 17:47:52+00:00
Ive failed at every single one of my startups.

I had a problem at the office pre-covid. I didnt have a coathook and not allowed to mount one. I designed in CAD and 3d printed my own coathook. Several people came by and complimented it saying they'd like it as well.

I 3d printed some more, it cost like 25 cents each, I sold them for $1. Literally sold 0. They all expected to get them for free. One person chewed me out because how dare I not donate the profits to charity. I literally didnt sell one. Then slowly but surely they disappeared as people stole them while i wasnt there.

Current failed startup: https://mapleintel.ca/

Literally nobody ever signed up.

So then I got off my butt, published a bunch of my books onto kindle select, free to read on kindle unlimited. Literally nobody has read a page.

I suck at the startup thing.
by OkayPhysicist | 2025-09-16 17:48:14+00:00
To be fair, Waymo claims to not record or transmit audio without you either manually engaging such (by requesting support), or a very unambiguous announcement (presumably when the car gets into some sort of emergency situation). And lying about that claim would probably run afoul of California's 2 party consent law. So still a step up in privacy versus having someone in the car listening in on your conversation.

That said, even if they were listening to you, there's a lot of things that are completely inconsequential from a perspective of an anonymous call center employee far away listening in on, that I probably wouldn't want to talk about in front of a taxi driver.
by yonran | 2025-09-16 17:48:16+00:00
What’s special about the airport is that the City of San Francisco owns and regulates it (as opposed to the streets that are regulated by the state CPUC), and the Board of Supervisors previously were regulatory captured by taxi medallion owners and Teamsters union (https://missionlocal.org/2024/12/waymo-rolls-toward-san-fran...). Specifically, Aaron Peskin (BoS supervisor from 2001–2009, 2015–2025, and board president for the last 2 years) said, “Their entire M.O. is, ‘The state regulates us; we don’t have to work with you, we don’t have to partner with you.’ My response is: There are things we do control. Including where you charge your cars. And the airport. What I intend to do, is condition their deployment and use of the airport property on their meeting a number of conditions around meeting this city’s minimum standards for public safety and transit.” https://missionlocal.org/2023/11/waymo-rebuffed-by-sfo-sf-gu...
by BeetleB | 2025-09-16 17:48:46+00:00
Yes. I used to be on local BBS's, which was way better than anything I've experienced on the web. More of a community feel and fairly local.

Even the pre-Facebook phpBB boards were quite good.

But mostly, I think it was not having broadband. When I (and most others) did not have it, our online behavior was fairly different, and what we did was more intentional. Imagine you have a quota of only 1 HN comment per day. You probably will be a lot more careful on what you reply to.

But, you know, you'd just spend a lot more time in applications that are not your browser. Programming, producing art on the computer, playing games, etc. When doing any of these, you were not thinking "Hey, let me just switch tabs and check my Twitter feed".
by rconti | 2025-09-16 17:49:24+00:00
Yeah, doing it by flat time delta rather than percent delta seems fundamentally flawed, but of course it makes it easier for the average person to understand.

I also don't understand what the motives are behind how the age/gender buckets are calculated in the first place. I'm not sure if it's public or not.

Are they:

* Trying to calculate based on an nth percentile finishing time across each bucket?

* Trying to ensure roughly equal percentages of applicants from each bucket get accepted?

* Something else?
by nradov | 2025-09-16 17:49:31+00:00
Fossil fuel reserves are not a fixed number. When prices rise, energy companies expand exploration and find more. Many areas are still basically unexplored for deep minerals. There are undrilled shale basins across western Europe, and the Black Sea and Ionian Sea have barely been tapped. Technical innovations like fracking and horizontal drilling also expand the reserves that can be economically extracted.

There may be valid political and environmental reasons not to go this route but it's silly to claim that fossil fuel reserves are so limited when no one has really looked.
by opesorry | 2025-09-16 17:49:41+00:00
Assuming I follow what you want to know, the wikipedia page on email spoofing should provide the info you desire. https://en.m.wikipedia.org/wiki/Email_spoofing

I'm pretty surprised gmail didn't flag this at least. When I did it for a class in Uni, it always let me know that the FROM header didn't match the sender since that's a clear attack vector
by anonymars | 2025-09-16 17:49:47+00:00
"UTF-8 was first officially presented at the USENIX conference in San Diego, from January 25 to 29, 1993" (https://en.wikipedia.org/wiki/UTF-8)

Hey team, we're working to release an ambitious new operating system in about 6 months, but I've decided we should burn the midnight oil to rip out and redo all of the text handling we worked on to replace it with something that was just introduced at a conference..

Oh and all the folks building their software against the beta for the last few months, well they knew what they were getting themselves into, after all it is a beta (https://books.google.com/books?id=elEEAAAAMBAJ&pg=PA1#v=onep...)

As for Windows XP, so now we're going to add a third version of the A/W APIs?

More background: https://devblogs.microsoft.com/oldnewthing/20190830-00/?p=10...
by traceroute66 | 2025-09-16 17:50:38+00:00
> The risk of not syncing — when you lose/reset your phone, so does your OTP app. If you don't have backup codes saved, you're cooked.

Most clued-up places enable you to register a Yubikey as 2FA.

So then it doesn't matter if you loose your OTP app and your backup codes because you've still got a Yubikey.

(And those that don't allow Yubikey, almost certainly will have SMS as a secondary option).
by ghurtado | 2025-09-16 17:50:41+00:00
> I encourage you to make a product even if something similar exists.

This is very good advice: we often give up on "great ideas" once we find that they have already been done.

But the vast majority of people we consider successful did not invent anything completely new, they just made a better kind of XYZ, sometimes not even that dramatically different. If you think about it, it's a much more logical path to success than expecting to be the next DaVinci.
by akhisud | 2025-09-16 17:50:48+00:00
From our experience, n8n is great for linear workflows and connecting APIs through flowcharts. Rowboat is aimed at building agentic systems (multiple orchestration patterns, autonomous agents coordinating, non-linear decision making).

Those are much harder and time-taking to express and maintain in a flowchart model. Our goal with Rowboat was to make it simple and quick to build and maintain multi-agent assistants. Hence, the copilot is equipped with tools and state-of-art orchestration patterns [1], which allow it to build ready-to-go assistants in minutes from high-level requirements.

[1] https://cdn.openai.com/business-guides-and-resources/a-pract...
by toast0 | 2025-09-16 17:50:55+00:00
> But I mostly got stuck in privacy concerns. I'm not sure it's a valuable public service to let people know that, for example, someone had a heart attack a few blocks over.

In the moment, notifying people who know CPR and may be nearby and able to get to a nearby location and start CPR before emergency services arrives is the base of PulsePoint [1], which seems like a useful public service.

As a digest, yeah, I don't think any usefulness outweighs the invasion of privacy. Maybe just a count of health emergencies responded to for observing trends.

[1] https://www.pulsepoint.org/
by exesiv | 2025-09-16 17:50:55+00:00
I wish it were that simple too.. except React Compiler is yet another disappointment. Other frameworks got it right from the start, React is now following suit but not without a ton of caveats and more React rules.

How about simple proposition: I want to spend time on MY application logic not on "React code" aka hooks, resolvers, providers, etc etc etc?
by wmwragg | 2025-09-16 17:51:13+00:00
Note that the previous Java LTS release license reverts to the OTN license one year after the new Java LTS version is published, making it no longer free, assuming you keep up with the security updates. See the license note on the Java 21 LTS version[1].

[1] https://www.oracle.com/uk/java/technologies/downloads/#java2...
by Der_Einzige | 2025-09-16 17:51:56+00:00
Seems not to if you're working at an AI image generation company.

https://cyber.fsi.stanford.edu/news/investigation-finds-ai-i...

https://www.techpolicy.press/laion5b-stable-diffusion-and-th...

Someone somehow downloaded the images in LAION 5B to do the actual training, and we know that thousands of these images contained illegal content.

Where's the strict liability? Everyone who ever downloaded and ran Stable Diffusion 1.5, or even Lora's from it, could in some way be held "strictly liable" for the fact that you are simply one prompt away...
by rconti | 2025-09-16 17:52:05+00:00
It's not about _qualified_ runners, it's about the size of the total field accepted.

Boston allows "roughly" 25k participants, but that number fluctuates somewhat every year. If they allow 30k, the cutoff delta goes down. If they allowed an unlimited field, the cutoff delta would be 0, and you'd only have to worry about your published qualifying time.
by golan | 2025-09-16 17:52:23+00:00
As of late, I have one rule: Any unknown number I'm not expecting I let it go to voicemail, where I have a message along the lines of: leave your message and your number, and if it's important I'll call you back. The only time I pick up is when I am expecting, say, a delivery, or a doctor's call, etc, and in those cases I'm only expecting to hear about a delivery or a doctor's call, etc. Hoping that can filter and help on this front.
by mrandish | 2025-09-16 17:52:40+00:00
> I find this dubious

I agree. In both cases a continuously varying voltage is driving speaker cone deflection. If the voltages of two different signals vary in precisely the same way, the cone will deflect to exactly the same degree and the resulting pressure wave will generate the same resonant response from any surface it encounters. When properly implemented, today's high-end, esoteric ADC and DAC converters have insane bandwidth, frequency response and fidelity far exceeding these requirements.

Some of the confusion comes from the fact that back when consumer audio transitioned to digital and these production workflows were new, some early digital recordings were incorrectly engineered or mastered creating artifacts such as aliasing which critical listeners could hear. Some people assumed the artifacts they heard were innate to all digital audio instead of just incorrect implementation of a new technology. Even today, it's possible to screw up the fidelity of a digital master but it's rarely an issue because workflows are standardized and modern tooling has default presets based on well-validated audio science (for example: https://en.wikipedia.org/wiki/Noise_shaping#Dithering). But even in the analog era it was always a truism in audio and video engineering that "there are infinite ways to screw up a signal but only a few ways to preserve it." And it remains true today. To me, one of the best things about modern digital tooling is it's much easier to verify correctness in the signal chain.
by d1sxeyes | 2025-09-16 17:52:58+00:00
Telegraphic style is not grammatically incorrect, it’s a feature of instructional English.

Consider “insert nut into bolt”, “slice onion thinly”, or “sprinkle vinegar over chips”.

I agree that your counter example does not work, but that’s due to the ambiguity introduced by having both an indirect and direct object. In a list of short instructions, “give apple to me” would not be ungrammatical.
by dlock17 | 2025-09-16 17:53:05+00:00
I felt the same way, and made my own package for adding slog attributes to an error for easier logging. It's usually all I need for my own custom errors.

https://github.com/Danlock/pkg/blob/main/errors/attr_test.go

I can understand why it's not in the stdlib though, it seems easy enough to run into key overwriting issues if a dependency returned custom errors with attributes.

I appreciate the built in support slog has for slog.GroupValue and the slog.LogValuer interface that enables everyone to build a solution best for their needs.
by tetromino_ | 2025-09-16 17:53:16+00:00
https://security.googleblog.com/2023/04/google-authenticator...

Google Authenticator can be local-only or synced to the cloud.

In local-only mode, the authenticator is bound to a specific device. You can manually sync it to additional devices, but if you lose access to all those devices, it's game over, you will get locked out of whatever accounts you secured with authenticator as the second factor.

In cloud-synced mode, it's synced to your google account, so if you lose your phone, you can restore authenticator state. But if your google account gets taken over, it's game over, the attacker has your authentication codes.
by tsimionescu | 2025-09-16 17:53:22+00:00
I mean that there is no Belgian nation - native Belgian citizens are mostly either Dutch-speaking Flemish people or French-speaking Wallons, and generally don't have any significant notion of a shared national identity.

Note that this doesn't mean that a state with multiple ethnicities/languages can't be a nation state. Indians, for example, generally have a clear national identity, despite being citizens of a huge federal republic with dozens if not hundreds of languages spoken, some of which don't even share a common language family. So, India is a nation state, unlike Belgium.
by fkskammerz | 2025-09-16 17:53:42+00:00
It was not legit from legal, I had the same attack on me two weeks ago. They were pretending to be from Google General Counsel responding to an estate request to my Google account being handed to another party who was supposedly the inheritor.

What clued me in was that he said he couldnt share the estate documents with me until I gave him my popup 2FA code.
by neuronflux | 2025-09-16 17:53:49+00:00
They probably sent it from gmail which would pass the SPF check (google.com and gmail.com have the same SPF). They wouldn't have it signed to pass DKIM, but google doesn't use strict alignment checking so to pass DMARC either SPF or DKIM are acceptable.

~ dig _dmarc.google.com txt +short "v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com"
by paleotrope | 2025-09-16 17:54:15+00:00
I have a 1-2 second rule. I pick up I say hello, if someone doesn't respond in 1-2 seconds, I hang up.

They have the scammers working off phone queues, it takes a little bit of time to get the call to the scammer, who has to start off with a script, so there's a delay.

Remember, the scammer, also likely not a native english speaker, also probably bored out of their mind, has to spin up, they have to read the name, understand how to say it and then say it out loud. Their is a mental startup time that a normal conversation doesn't have.

If someone calls you and isn't ready to immediately respond to "hello" it's a scammer.
by AnimalMuppet | 2025-09-16 17:54:32+00:00
While I generally agree with you, I have two specific issues with what you say here:

> People who call employers don't actually have power over those employers, never mind their employees. The employer gets to make the decision, and it's fair that employers should know if their employees are tarnishing the company's image.

Who do you think is doing the calling? If Vance is saying this, is it going to be the government doing the calling? Well, I work for a government contractor. That might be a bit more than just "more speech".

> Of course he acted alone. It was an assassination using a rifle from a distance. How could anyone else have possibly been involved, even in principle?

Someone could have supplied him the rifle, the position, and/or the idea/motivation. More than one finger could not pull the trigger, but that doesn't mean he was alone in planning it. It doesn't even mean that he was alone at the place where he fired the shot.

But I agree with you in general. If there was a conspiracy, it was a small one. It wasn't the Democratic Party, or the DNC, or the Utah Democratic Party, or anything of that scale. All the more reason why a broad crackdown is inappropriate. To the degree that Vance is serious, he's barking up the wrong tree.
by Kon5ole | 2025-09-16 17:54:33+00:00
I honestly think Apple was interesting because of Steve Jobs.

Whatever you think of him he was clearly an strong leader who was able to make a bunch of otherwise unruly geniuses cooperate towards a common goal. He also overruled any other ego in the hierarchy so the goals that were worked on actually shipped.

This is rare, and made Apple different from other corporations, for a while.

Without a person like that at the top, corporations are money-making machines that will gravitate towards bland and predictable. Egos will battle for resources for no purpose other than being the boss of the most resources, geniuses will be increasingly bored and disillusioned and whatever special sauce there was will go stale.

Corporations can exist in that state for a long time and sometimes still make nice products of course.
by cbeach | 2025-09-16 17:54:45+00:00
Ah, so if a Tesla feature is bad it must have been designed by Musk.

And if Tesla does something good it was "obviously not from only one person"

> I have posted similar strong compliments/defenses of Musk in the past, including on here.

As have many people, who curiously seemed to change their treatment of Musk around the time of the 2024 election. Funny, that.
by narrator | 2025-09-16 17:56:06+00:00
I got scammed because somebody put a fake bank location into Google Maps and so the Google voice caller ID said it was my bank. Luckily, I realized I got scammed and called the bank up right away and they got the charges reversed, which is why I still use that bank. Moral of the story: never trust inbound calls. They are the easiest vector for scammers to spoof.
by cess11 | 2025-09-16 17:56:08+00:00
A kid twenty years younger than me is in their early twenties and they would have to be some kind of Wunderkind to have spent decades learning operating systems, networking, programming languages, business and law to the degree I have.

When I'm sixty I'll have transitioned from software on commodity hardware and clusters to electronic things but I expect people in their forties to still come to me for advice.
by Katzenmann | 2025-09-16 17:56:44+00:00
Hi. I have a Google Pixel 3a running PostmarketOS https://postmarketos.org/ and it holds up pretty well. My phone lost 20% today with light usage and will maybe lose 60% if I scroll social media a lot.

I was actually surprised it is this good. I reinstalled recently and before the reinstall I had much worse battery life (Maybe 8 hours with normal usage). I think it was because of Syncthing running in the background.

It is also possible to use s2idle suspend which will improve the battery life even more but you will not be able to receive calls during suspend (though that may also be fixed in the future)
by Terretta | 2025-09-16 17:56:51+00:00
As of 17 hours after post, 510 comments, there are no top level comments about the "root cause" he blames, Apple's "integration" decreasing:

“This widening gap between their hardware and software … is going to be really damaging if the course isn’t corrected. The tight integration between hardware and software has always been what made Apple platforms stand out.”

This alignment with the user, offering a well integrated experience as "the product", is the very thing Apple's competitors are funding lobbyists to get regulator help to tear down, and Apple is indeed having to make compromises to accommodate.

Living in Spain, the author should write to EU governance if the author cares about this.
by xonery | 2025-09-16 17:56:53+00:00
Moley Expose your local apps to the world—securely, instantly, and with zero hassle.

Moley is the easiest way to share your local development services using Cloudflare Tunnels and your own custom domains. Moley automates everything for you, so you can focus on building, not configuring.

Why Choose Moley? Zero Infra: No reverse proxies, load balancers, or additional services needed Instant Setup: Get your local app online in minutes with a single command Custom Domains: Use your own domain names for a professional presentation Secure by Default: Uses Cloudflare's enterprise-grade security and DDoS protection Automatic Recovery: Robust state management with crash recovery and cleanup
by 101008 | 2025-09-16 17:56:54+00:00
I want to create something that every X hours (could be 6 hours, 8 hours, 12 hours) check if there are news about a certain topic, and if there are and are interesting enough, generate an image, a text, and post it to Instagram.

The second part is done (generating it and posting it), but finding the news is the hardest part, even if I share some RSS feed. Would this help me with my use case or is something completely different?