MurphyA/hacker-news huggingface dataset:
by AlotOfReading | 2025-09-25 16:37:21+00:00
If it violates Apple's views on acceptable privacy practices, why are they approving the app? They already have guidelines against identifying information or collecting more data than absolutely required. The developer data use page is quite frank about the expectations:

Apps on the app store are held to a high standard for privacy, security, and content because nothing is more important than maintaining users' trust.

This is a rhetorical question, obviously. Apple is happy to stand on principle when it benefits them, and more than willing to soften or bend those principles when it'd be too difficult.
by komali2 | 2025-09-25 16:37:24+00:00
There is no justification for Israel's occupation and apartheid of Palestine. The attacks on civilians are unjustifiable as well but the trigger for them wasn't random - Hamas never would have come to power if Israel didn't occupy Palestine, let alone fund Hamas with the explicit stayed goal by Benjamin Netanyahu to divide Palestinian politics.

Look to Israel, the source of decades of suffering for everyone in the region, including its own citizens whom it exposes to retaliatory violence in response to the violence it delivers to its neighbors.
by wtp1saac | 2025-09-25 16:37:40+00:00
I suppose I should add, I largely fear more and more regulation around software, especially at the level of "commercial vs. not" - one, much commercial software uses open source; two, I am extraordinarily wary that we may lose pretty much all digital freedom to increasingly authoritarian societies - I sort of expect such licensing requirements to keep pushing that along and breaking any possibility of making modern technology less bad, instead burdening the field such that only major corporations may effectively contribute, and cutting off all funding to independent developers. It's already grim in that respect to be sure. Licensure feels like it is on the path to whitewash intense restrictions on computation in the language of protection and security.

Many big technology companies have zero ethics or desire for it. I only have faith in smaller groups and independent developers, and I don't want to stifle them if they have some path to come back and compete.

Hell, at this point my main computer is Linux, with a mixture of open source and donation-driven (this could be considered commercial!) software. My desktop environment is made by someone in a bedroom in Poland and it's better than anything Apple or god forbid Microsoft can ship. I would prefer to not have some licensing body to come and make it illegal for me to use that desktop and send this developer money so he can pay his rent.
by keeda | 2025-09-25 16:37:44+00:00
I feel like this is a good use of standups rather than just status updates. "I have started working on X" should ideally be accompanied by "I am planning on doing this using Y and Z" if there is any chance that it could be contentious. There should ideally be no contentions, but the moment any questions come up, they should be tabled for a post-standup huddle amongst the relevant stakeholders.

If you don't do standups, just do the same thing ad-hoc on the team chat channel.

Larger tasks and discussions are probably the purview of RFCs.
by ssl-3 | 2025-09-25 16:38:12+00:00
But tt's not just the buttons -- it's also the motorized knob, sensors, and control logic.

A board with model-specific software and some garden-variety relays is cheaper to copy than model-specific motorized knobs are.

And it's not the singular key to profit, and I don't think that anyone ever said that it is. It's just a part that we can see, and touch.

There's other things that modernization helps with, too.

For instance: Variable-speed motor drives, with a computer brain to drive them (which we already have in the BOM once we abandon the motorized knob).

These can improve electrical efficiency (reducing motor size and cost), and deliver power more smoothly (reducing transmission size and cost).

That's real copper and real iron that is saved by using electronic controls.

(I can do washing machines all week.)
by Imustaskforhelp | 2025-09-25 16:38:27+00:00
Lets just hope that EU doesn't add that age verification thing or those Cert based things which is controlled by the govt.

My opinion is simple, age verification won't work unless they block VPN (something which UK wants to do/ is doing) and that sets a really really bad precedent and I doubt if its entirely possible without breaking some aspects of internet or complete internet privacy.

EU in aggregate is net positive but it still has some things which are kinda flawed regulations that are a bad precedent, but germany kinda blocked the verification thing iirc so there is still a lot of hope and EU does look like its trying its best but I think that it can do just a bit better if they don't think of age verification or some other stuff but that's just my 2 cents.

This was why I added "maybe" tbh. They are one of the best options but even they aren't thaat good. Like its questionable I think and needs a much bigger debate
by jerf | 2025-09-25 16:38:58+00:00
The other major use case that leaps to mind is "observability"; I want to be able to poke a metric without the function becoming impure, since it is not uncommon for something deep down the call stack to poke a metric and I don't want it to propagate up the stack. You can also make a case for logging that isn't just debug logging. Propagating up a new effect just because some deep function needs to push a log is not very friendly or useful.

Perhaps there is two or three more, but I do think this is a finite set that we can write a language around and just sort of consider them "ambient effects". While metrics and logging are nominally impure, in that they are certainly mutations, if you can't read the logs or the metrics without an effect, you still retain the really important aspect of purity, which is that the pure code can't cause a change that is observable by that or other code, with the very specific exception of the logging stream and metrics.

I wouldn't be quite ready to put all my chips on this, but I think "the inability to create changes that can be witnessed" is actually the true goal, not "the inability to create changes" with no qualifications. Pure code already necessarily creates changes in a system, the key is that while the CPU registers may change and other parts of the system may mutate, the code can't witness those changes and conditionalize future execution on it. All effects-based systems have already agreed that there are things that are mutations in something real in the physical world they aren't going to consider effects, adding a couple more categories is not going from 0 to 1 but 12 to 15. It's not a strict purity question but a cost/benefits question.

It occurs to me as I type this that a really ambitious language with a strong enough type system might even be able to turn this into a completely safe proposition, allowing users to declare effects with some sort of very safe "sink" associated with them that the type system checks can not escape out into the rest of the code in any visible way and constraining the visibility somewhere that is contained in the conventional effects system. All these things I'm talking about here and in the blog post are taking the form of values that simply disappear into the ether from the point of view of the creating function. I'd like the language to make it easy to query a function for which ambient effects it uses (as a development-time operation, not a run-time one), and I think that would clean up most of the rest of the practical problems.
by LocalPCGuy | 2025-09-25 16:39:09+00:00
This was my question also, I think "even better if it can record and analyze the entire multi-monitor desktop surface" would be the best option. I don't know what the impact of that would be on both recording size and AI processing time, but just because one monitor is focused doesn't always mean what's happening on another is ignored. Some examples: an ongoing meeting or watching a video on one screen while taking notes on another; or coding on one screen and a browser/app auto-refreshing on another.
by status_quo69 | 2025-09-25 16:39:27+00:00
You can and should break that up because I'm probably going to want to see screenshots to ensure that the branding changes make sense in context and everything looks consistent.

How would you do this? You'd either

1. Create N pull requests then merge all of them together into a big PR that would get merged into mainline at once 2. Do the same thing but do a bit of octopus merging since git merge can take multiple branches as arguments. Since most source control strategies are locked down, this isn't usually something that I can tell my juniors to do

The point of breaking things down like this is to minimize reviewer context. With bigger PRs there's a human tendency to try and hold the whole thing in your head at once, even if parts of the pull request are independent from others.
by skinkestek | 2025-09-25 16:39:32+00:00
So, do we owe Germany an apology after we obliterated it to stop the nazis?

Or is it kind of logical that when you vote actual genocidal maniacs into power and cheer for them as they return from murder and rape, you hide the hostages they took and refuse to do anything to stop them, then maybe you aren't completely innocent?
by eagleislandsong | 2025-09-25 16:39:54+00:00
> It would lower the cost of acquiring the data for China and Russia

Yes, it would lower such barriers for countries that are commonly seen today as Europe's adversaries. But in this case, the U.S. (or rather, U.S. organisations and corporations) might be the primary bad actor pushing for ChatControl. See e.g.:

Thorn (organization) - https://en.wikipedia.org/wiki/Thorn_(organization)

"Thorn works with a group of technology partners who serve the organization as members of the Technology Task Force. The goal of the program includes developing technological barriers and initiatives to ensure the safety of children online and deter sexual predators on the Internet. Various corporate members of the task force include Facebook, Google, Irdeto, Microsoft, Mozilla, Palantir, Salesforce Foundation, Symantec, and Twitter.[7] ... Netzpolitik.org and the investigative platform Follow the Money criticize that "Thorn has blurred the line between advocacy for children’s rights and its own interest as a vendor of scanning software."[11][12] The possible conflict of interest has also been picked up by Balkan Insight,[13] Le Monde,[14] and El Diario.[15] A documentary by the German public-service television broadcaster ZDF criticizes Thorn’s influence on the legislative process of the European Union for a law from which Thorn would profit financially.[16][17] A move of a former member of Europol to Thorn has been found to be maladministration by the European Ombudsman Emily O'Reilly.[18][19]"

Additionally, it would not surprise me at all if Palantir is lobbying for this either. Many EU countries, like Germany and Denmark, have already integrated Palantir's software into the intelligence, defence, and policing arms of their governments.

But at the end of the day, while it is convenient to blame external actors like U.S. corporations, ultimately the blame lies solely on the shoulders of European politicians. People in positions of power will tend to seek more, and I'm sure European politicians are more than happy to wield these tools for their own gain regardless of whether Palantir or Thorn is lobbying them.
by glenstein | 2025-09-25 16:40:01+00:00
I think you actually, without intending to, raise the reason why this is an exceptionally powerful point. Given the diversity of academic opinion on so many fundamental subjects, consensus on any topic is extraordinary.

I actually don't agree with you that "legal definitions" are as hotly debated or that the existence of debate in general negates consensus on specific topics. And I do think one important point with genocide scholarship is regarding muddying the waters with tom-ay-to/to-mah-to approach to definitions. Treating definitions as inherently transient is an important instrument in normalizing cultural acceptance of genocides when they're unfolding in real time, which is why that tactic is targeted by so much scholarly criticism.
by swiftcoder | 2025-09-25 16:40:06+00:00
> I opened it and my first thought was wow, it's packed up there

I mean, it is also pretty packed up there. Considering that a rocket launch has to give every object up there a decently wide berth, it's still a shit ton of moving obstacles that have to be constantly taken into account - the relative size of the gaps between them doesn't really change that equation much.
by kypro | 2025-09-25 16:40:26+00:00
I've commented this elsewhere, but rights in the US are generally much more absolute than here in Europe.

For example, in the EU you technically have the right to freedom of expression, but you can also be arrested if you say something that could offend someone.

Similarly rights to privacy are often ignored whenever a justification can be made that it's appropriate to do so.

I don't know about elsewhere in the world, but here in the UK you don't even have a right to remain silent because the government added a loophole so that if you're arrested in a UK airport they can arbitrarily force you to answer their questions and provide passwords for any private devices. For this reason you often here reports of people being randomly arrested in UK airports, and the government does this deliberately so they can violate your rights.
by DoingIsLearning | 2025-09-25 16:40:34+00:00
Plenty of EU states already have a constitution in which this proposal would be de facto unconstitutional.

The issue is what is the European Commission willing to do in order to guarantee that fat contract check goes to Palantir or Thorn or whoever has the best quid pro quo of the day.

This is not Stasi this is Tech billionaires playing kings and buying the EC and Europol for pennies on the dollar and with it the privacy of virtually every citizen of zero interest for law enforcement or agencies.
by KittenInABox | 2025-09-25 16:41:00+00:00
Dude, you're the one who used your subjective negative experiences and made them so broad as to encompass a woman with cancer. Someone might've given you a bad experience but you're the one who took that and decided to broaden the category as everyone who uses an emergency room. This reads like maybe you had a traumatized experience and are acting extremely traumatized about it (like if a man punched me in the face and I declared all men to be face-punchers. My nose is broken but not all men broke it.).
by jonotime | 2025-09-25 16:41:18+00:00
My experience has been quite the opposite. Like OP, I am a middle aged developer. I have decades of experience in the industry and with open source/side projects. I think there is so much good new software being developed by single developers (https://opensourcesecurity.io/2025/08-oss-one-person/). When there is one person its an itch to scratch, not a business plan.

I do think the type of projects have indeed changed however, so maybe OP is looking in the wrong place, or has become steeped in the corporate world (see Middle Aged).

Look at app stores, f-droid, vscode plugins, github repos, frontend frameworks, distributed databases, Linux desktops, TUI apps, text editors. There are more projects than ever. They may not be as low level or as widely used as system kernels or programming languages, but there is so much code being written for personal needs.

I actually think the fact that these are not widely used is important. Higher level constructs and AI have made programming much more accessible. Non-devs are making one off apps just for their family. Or using LLMs to quickly churn out scripts to automate home assistant or common desktop tasks.

I personally have built several projects from my long-running ideas list that I never would have had time to do before without the help of AI. Savr is one (https://github.com/jonocodes/savr). For someone like me who has built that same CRUD interface for every company, AI has been an amazing motivator to work on new interesting things and less repetitive drudgery.
by lubujackson | 2025-09-25 16:41:38+00:00
Great job on the launch. This is fills an exact need my company has, and your UI is fantastic. One nit, it would be nice to be able to manually edit the schema instead of only interacting with the LLM.

I am concerned about your pricing, as "unlimited" anything seems to be fading away from most LLM providers. Also, I don't think it makes sense for B2B clients who have no problem paying per usage. You are going to find customers that want to use this to poll for updates daily, for example.

Are you using proxies for your text-based browser? I am curious how you are circumventing web crawling blocking.
by jdietrich | 2025-09-25 16:41:45+00:00
>An eye for an eye and a tooth for a tooth leaves the whole world blind and toothless.

The entire point of reciprocal justice was to prevent tit-for-tat blood feuds; "an eye for an eye" set an upper limit on vengeance, precisely to prevent the whole world from going blind.

The available evidence suggests that modern western societies have vastly lower rates of violent deaths than any indigenous pre-state societies, even factoring in deaths due to war.

The myth of the noble savage is precisely that - a myth.

https://ourworldindata.org/ethnographic-and-archaeological-e...
by ygjb | 2025-09-25 16:41:52+00:00
This is pretty interesting!

I am curious - who are you, and why should I (or other Canadian information security professionals) trust this data over other threat intelligence sources?

I admit to only doing a casual, cursory check, but the website, github and linkedin account all appear to be configured to conceal who is behind the site, and the only third party credited is an American company.
by mehdibl | 2025-09-25 16:41:53+00:00
When you use docker you can have full control over the networking layer already. As you can bound it's networking to another container that will act as proxy/filter. How WASM offer that?

With reverse proxy you can log requests, or filter them if needed, restrict the allowed domains, do packet inspection if you want to go crazy mode.

And if an actor is able to tailor fit a prompt to escape docker, I think you have bigger issues in your supply chain.

I feel this wasm is bad solution. What it brings a VM or docker can't do?

And escaping a docker container is not that simple, require a lot of heavy lifting and not always possible.
by noident | 2025-09-25 16:41:54+00:00
Does this depend on sliding sync and their standalone authz server like Element X does?

I'd love to use Element X, but Element abandoned the form of SSO my community depends on, and I don't really have an appetite to spend 12 hours of my free time standing up sliding sync, a separate auth server, migrating my users to the separate auth server, spending hours explaining to everyone that their credentials live in some other place now, and then migrating my custom server admin software to use OpenID connect. Oh well.
by righthand | 2025-09-25 16:42:04+00:00
> did terminated the contract instead of ignoring it or doubling down

This was after they ignored it and doubled down for almost 3 years*. What was the total gain in profits and how many Palestinians died during that time? You’re going to ignore the full cost because they did the least they could do almost 3 years later?

* if the starting line is set to October 2022 attacks, if not how long were they making money off this contract?
by crazygringo | 2025-09-25 16:42:08+00:00
> harmed by their deceptive Prime enrollment practices

I'm still confused by this part.

I didn't use Prime for a long time. I remember lots of buttons inviting me to sign up, just like YouTube asks me weekly if I want to subscribe to premium.

But I don't remember anything seemingly deceptive, and none of the news articles seem to actually provide any details. So what precisely was deceptive?

And even the cancellation part, it's just two confirmation screens. It doesn't seem bad. It honestly seems about the same as any other website subscription I've ever had. You click to cancel, say yes I really don't want the benefits (this is the only extra step), and then click to confirm the cancellation.
by ajmurmann | 2025-09-25 16:42:19+00:00
Definitely true. However, it's not intrinsic to healthcare. We made it that way. You can go to https://surgerycenterok.com/ and see all-inclusive prices for surgeries right now. Some people fly there for procedures. They have higher success rates than competitors, surgeons take more money home and the procedures cost less. It's possible.
by zdragnar | 2025-09-25 16:42:22+00:00
There's also a bit of whitewashing of what it means to give someone to a victim's family. Without having looked deeper into it, it sounds rather like giving them someone to be a slave in recompense.

It's not like trading adult family members is in any way "restorative" emotionally; they certainly won't be pleased to have their lives uprooted. They'll be contributing labor to supplement the victim and that's about it.
by PaulHoule | 2025-09-25 16:42:34+00:00
The backdrop is that electronic prices aren’t dropping the way they used to so you just can’t expect progression like PS2 -> PS3 -> PS4 -> PS5. The game software industry did not expect this trend when it was developing games 5 years ago and wound up with a generation of new games that require more expensive hardware than the typical gamer has.

Meta can’t announce an MQ4 when the MQ3 consumer is cost-motivated and instead of an MQ4 they came out with a cost-reduced MQ3S which is the brains of an MQ3 (software compatible) in the body of an MQ2.

The story is that Meta is looking for some escape from oldster-dominant Facebook but when I started focusing on the social features I met a lot of retirees who play Beat Saber and like to go on cruises and post pano videos on YouTube. I don’t think it helps with their demographic problems.

I have a big backlog of VR games which are similar to conventional video games, these are fun and all but they compete with so many flat games like Hollow Knight: Silksong and Arknights and such.
by AnimalMuppet | 2025-09-25 16:42:36+00:00
My point is that, from the employee's point of view, the commute has to be factored into "total output". So if I've been getting $X for Y hours WFH, and now they want to give me $X for Y hours in the office, that's (Y+C) hours to me, and that's the same pay for more of my work - though part of the work doesn't benefit the company.
by quotemstr | 2025-09-25 16:42:42+00:00
> The accepted solution is to have a constitution that says otherwise.

Constitutions don't enforce themselves. The US constitution has a crystal clear right to bear arms but multiple jurisdictions ignore it and multiple supreme court rulings and make firearm ownership functionally impossible anyway. Free speech regulations have, thankfully, been more robust.

The only thing that stops bad things happening is a critical mass of people who believe in the values the constitution memorializes and who have enough veto power to stop attempts to erode these values.

The US has such a critical mass, the gun debate notwithstanding. Does the EU have enough people who still believe in freedom?