MurphyA/hacker-news huggingface dataset:
by dathinab | 2025-09-09 16:28:06+00:00
But what the author really mixes up is that lang item is in now way the same as "a core part of rust".

lang item is only a way to tag things to be special known to the compiler, which sometimes is related to implementation details of the compiler which have little to do with the language design

which also means the following statement

> The purpose is to demystify what can be built purely in library code.

is not fully right.

E.g. at least all of Ordering, Option, Result, Clone can be build just fine in library, the lang item is mainly there for optimization hints (and in case of Option FFI layout reasons), but it's an implementation detail which doesn't really needs them to be lang items it was just more convenient to do so when implementing the compiler. A compiler could just give similar properties to anything which "looks like" them. There are subtle fiddly reasons why you maybe don't want to do that for now but technically an implementation detail anyway.

And lot of the things which technically can be implemented in a library (e.g. Display) practically kinda can't, as this would cause major interoperability issues.

Oh also some special macros you can't implement in a library are missing, but that just seems like a minor oversight of the otherwise quite complete list.

But most importantly this is not the conceptual core of the language (but a overlap with it) which would include stuff which has no need to be lang tagged but is a fundamental core design aspect of rust (e.g. Waker for async rust).

For a technical aspect of what needs special handling Ordering, Result and some other parts do not, it's just conveniently makes certain things mostly related to optimizations easier to implement.

From a high level POV especially in context of teaching rust it contains too many low level parts for niche extension functionality (e.g. panic stuff, termination trait) or too advanced to belong in a high level overview IMHO. And misses a lot of things you would include in a teaching the core of rust for people which learn rust overview.

I mean without question the author put a lot of work into it and it's not useless, but IMHO badly named as a listing of lang items just isn't exactly core of rust language design, or core of how you use it.

It it an important listing for changing the rust compiler or writing your own lib-core, tho.

But that means the the thing its effectively most useful for is an advanced topic, so I wouldn't use it for teaching rust. Too many parts which are core of teaching rust missing (e.g. Debug) while exposing students to too many advanced topics in a way where they look as relevant as relevant parts.
by d4mi3n | 2025-09-09 16:28:08+00:00
It's definitely not a product for an individual user. Controls like this are useful in certain arenas where you need total visibility of corporate devices. As with any highly privileged tool or service, compromise of it can be a big problem. That said, the goal with tools like this is to usually lock down and keep a close eye on company issued laptops and the like so you know when one gets stolen, hit by some malware, or somebody does things with it they aren't allowed to be doing (e.g. exfiltrating corp data, watching porn at work, running unauthorized executable, connecting to problematic networks, etc.).

As an example, if you're at a FedRAMP High certified service provider, the DoD wants to know that the devices your engineers are using to maintain the service they pay for aren't running a rootkit and that you can prove that said employee using that device isn't mishandling sensitive information.
by feross | 2025-09-09 16:28:52+00:00
It was a relay. The fake site forwarded actions to the real npm, so the legit 2FA challenge was triggered by npm and the victim entered the code into the phishing page. The attacker captured it and completed the session, then added an API token and pushed malware. Passkeys or FIDO2 would have failed here because the credential is bound to the real domain and will not sign for npmjs.help.
by ashleyn | 2025-09-09 16:28:53+00:00
If inflation is lower than the rate the federal reserve hikes rates to, you can ride out stagflation in money market funds and other types of income-generating investments. The real pain is when it doesn't. Stocks decline, cash declines, and there really is nowhere to hide. TIPS? I-bonds? Both are indexed to the CPI, which policymakers have loudly signaled they are okay gaming and manipulating for political favour.
by cataflam | 2025-09-09 16:28:59+00:00
Besides the ecosystem issues, for the phishing part, I'll repost what I responded somewhere in the other related post, for awareness

---

I figure you aren't about to get fooled by phishing anytime soon, but based on some of your remarks and remarks of others, a PSA:

TRUSTING YOUR OWN SENSES to "check" that a domain is right, or an email is right, or the wording has some urgency or whatever is BOUND TO FAIL often enough.

I don't understand how most of the anti-phishing advice focuses on that, it's useless to borderline counter-productive.

What really helps against phishing :

1. NEVER EVER login from an email link. EVER. There are enough legit and phishing emails asking you to do this that it's basically impossible to tell one from the other. The only way to win is to not try.

2. U2F/Webauthn key as second factor is phishing-proof. TOTP is not.

That is all there is. Any other method, any other "indicator" helps but is error-prone, which means someone somewhere will get phished eventually. Particularly if stressed, tired, or in a hurry. It just happened to be you this time.
by SilverElfin | 2025-09-09 16:29:26+00:00
> If you're only caring for your own kids, you are providing significantly less to society than those caring for many kids.

I disagree with this. Perhaps caring for your own kids produces much better kids (and eventually, adults). And that may be more of a benefit to society than a large number of people being incentivized to create large number of kids whose care is just outsourced to childcare centers where they receive less attention.

> You want to focus on raising your own kids, that's fine, but do it on your dime.

Is this really an argument for anything? One could just say “if you want to raise kids you can’t afford, do it on your own dime” and undermine your perspective.
by feross | 2025-09-09 16:29:35+00:00
Disclosure: I’m the founder of https://socket.dev

Strongly agree on artifact signing, but it has to be real end-to-end. If the attacker can trigger your CI to sign with a hot key, you still lose. What helps: 1) require offline or HSM-backed keys with human approval for release signing, 2) enforce that published npm artifacts match a signed Git tag from approved maintainers, 3) block publishes after auth changes until a second maintainer re-authorizes keys. In today’s incident the account was phished and a new token was used to publish a browser-side wallet-drainer. Proper signing plus release approvals would have raised several hard gates.
by leoc | 2025-09-09 16:29:36+00:00
> Even then, that wouldn't really stand out to me because I've seen companies use new generic top level domains to separate out things like the blog at .blog or the docs at .guide, not to mention the .new stack.

This is very much a 'can we please not' situation, isn't it? (Obviously it's not something that the email recipients can (usually) control, so it's not a criticism of them.) It also has to meaningfully increase the chance that someone will eventually forget to renew a domain, too.
by PaulHoule | 2025-09-09 16:29:54+00:00
This has so many dimensions.

An authentication environment which has gotten so complex we expect to be harassed by messages say "your Plex password might be compromised", "your 2FA is all fucked up", etc.

And the crypto thing. Xe's sanguine about the impact, I mean, it just the web3 degens [1] that are victimized, good innocent decent people like us aren't hurt. From the viewpoint of the attacker it is all about the Benjamins and the question is: "does an attack like this make enough money to justify the effort?" If the answer is yes than we'll see more attacks like this.

There are just all of these things that contribute to the bad environment: the urgent emails from services you barely use, the web3 degens, etc.

[1] if it's an insult it is one the web3 community slings https://www.webopedia.com/crypto/learn/degen-meaning/
by jkyrlach | 2025-09-09 16:29:54+00:00
This dataset is definitely a treasure, and I love visualizing data. That said, i think what's missed when this is used as an argument for visual analysis is the idea of quantitatively identified outliers. If you take the descriptive statistics of p99, they most definitely will not be the same across these four sets. Visual analysis is a valuable dimension for data exploration, but it's a bit of a strawman to infer that "quantitative analysis could go no further, only visual analysis could figure this out"
by barbazoo | 2025-09-09 16:30:00+00:00
As someone with difficulties early on in life and thus showing behavioral issues (what you describe as bullies and underachievers), I went through a system like this and I despised it. N=1 but segregating children at early age based on the behavior they're showing, i.e. the difficulties they're having, felt kinda cruel. It worked academically I guess, I ended up ok, but for many it just meant they just simmered in an environment of mediocrity and rarely made it out.
by feross | 2025-09-09 16:30:05+00:00
Disclosure: I’m the founder of https://socket.dev

npm stats lag. We observed installs while the malicious versions were live for hours before removal. Affected releases we saw: duckdb@1.3.3, @duckdb/duckdb-wasm@1.29.2, @duckdb/node-api@1.3.3, @duckdb/node-bindings@1.3.3. Same payload as yesterday’s Qix compromise. Recommend pinning and avoiding those versions, reviewing diffs, and considering a temporary policy not to auto-adopt fresh patch releases on critical packages until they age.
by hypeatei | 2025-09-09 16:30:11+00:00
> Literally none of the doom and gloom and TDS rhetoric has materialized

How can you say that so soon when PPI and CPI numbers come out this week? The latest PPI report from July showed a 0.9% increase which was surprising.

> massive inflow in capital into the coffers

a.k.a. higher taxes that US citizens are paying.
by amluto | 2025-09-09 16:30:17+00:00
> Also, all the new models have an auto shift functionality so you don’t even really have to use any buttons at all.

This seems utterly insane. It’s already annoying that tapping somewhere on a phone screen has a different effect depending on whether I win or lose the race against some UI update. I do not want my rather heavy vehicle to move in a different direction depending on which way the computer thinks I want it to move.
by npteljes | 2025-09-09 16:30:24+00:00
It all hinges the many interpretations of "time". For example, this comment takes 5 minutes from me, during a transition between two larger tasks. The gaming I described though is different. I don't even start a game if I don't have at least an hour or so.

Also, people often mean "energy" or "willpower" by "time". It's like a general, non-material cost of things. "I don't have the time for X" can many times be translated to "I can't imagine managing another context", "I don't want to commit to X", "I can't be assed to start doing X after everything I do in a day", etc. Time in these context is just a convenient scapegoat. This is also addressed by the idea “It’s not about “having” time. It’s about making time.”. For what they really want, people seem to "make time" for, even in the busiest schedules.
by toomuchtodo | 2025-09-09 16:30:26+00:00
Governance is hard. People are hard. I can show you examples across the world where policy works, and where it doesn't. Success is not assured, but if we're not willing to try, why even get up in the morning? If it sucks in Oregon, my apologies; states are where experiments can take place, and there are 49 other states we can give it a go in.
by sniffers | 2025-09-09 16:30:26+00:00
We have had capitalism since the late 1700s, or early 1800s. But I think you and I would agree it's not been a uniform experience across that time. Capitalism evolves and adopts new ideas, and experiences different opposition in different places. Since the early 70s in the US, there's been a very different regulatory and cultural environment for capitalism in the US.
by hiAndrewQuinn | 2025-09-09 16:30:26+00:00
Getting that laptop into your hands required one of the most sophisticated supply chains in human history to be built up. Tens of millions of people all had to work together at a distance, many of them doing things dozens of steps removed from the final product, in order to make it so that you could purchase that laptop. Money is the lifeblood of that entire system, the coordination mechanism that makes such things possible, and the instant you purchase that laptop you have injected more such blood into it to diffuse out.

That's an enormous impact even if all you did with the laptop immediately after purchasing it was throw it in a volcano. It's not wrong to realize that money is subject to diminishing returns like everything else, but it misses the most important thing about it, and that exists outside of you.
by ryoshu | 2025-09-09 16:30:29+00:00
Selection bias + perceptual adaptation is my experience. Selection bias happens when we play the probabilities of using an LLM and we only focus on the things it does really well, because it can be really amazing. When you use a model a lot you increasingly see when they don't work well your perception changes to focus on what doesn't work vs. the what does.

Living evals can solve for the quantitative issues with infra and model updates, but not sure how to deal with perceptual adaptation.
by torginus | 2025-09-09 16:30:36+00:00
There's no conclusion or root cause in the article. It just suggests that since the Canadians had cost overruns and delays, it's impossible to build reactors on time and budget.

Yet China has managed to build those plants exactly around those costs and budgets - I have seen this argument so many time, around high speed rail, where Americans failed at infrastructure and deemed it 'uneconomical', then when China succeeded they smeared them for building probably in 'an evil way' or what.

Let me turn your question back at you - if China is doing so well on renewables, why is it that they're still building tens of gigawatts of nuclear capacity with hundreds more planned?

Even the linked article admits that 'Solar GWh' is not comparable to nuclear GWh because if you add the wattage of panels together you get a meaninglessly big number.

If you are planning around a 24/7 available power source, you need to overbuild solar by 20x I estimate, and the article admits, their calculations do not take storage into account (which you simply would not need if you had an always available power source.

China leads on solar panels, equipment and batteries, yet they are the biggest investors into nuclear today, I think that says enough about solar (and wind) not being able to economically substitute for nuclear.
by qcnguy | 2025-09-09 16:30:45+00:00
Trump has certainly dragged his party towards the left economically speaking. With lots of squealing and resistance, but they went there in the end because it's popular with voters. They haven't managed to win people over on fiscal conservatism despite trying.

But US politics plays out in many ways, including at the local level. For water supply who the POTUS is doesn't matter that much, it's not handled at the federal level. American political outcomes vs the rest of world are the result of long term social trends beyond any one man.
by lubujackson | 2025-09-09 16:31:14+00:00
U.S. dollar loses value, property depreciates (no one can afford payments) and equities have their P/E ratios slammed (and we are at all-time historic highs...)

So the solution historically has been stable goods. Gold is the historic standard, but probably Bitcoin now as well. Possibly foreign stocks/currencies. But since everything is so interlinked now with pensions and 401ks that the financial world is far different place than the 70s. If you really want a safe bet, it's that there will be a fair bit of volatility and every asset class will have more risk with spikes up and down. All of this depends heavily on how the U.S. responds along the way.
by ekzhang | 2025-09-09 16:31:23+00:00
Hello! Thrilled to be sharing something I've worked on for the past 8 months at Modal — a cloud, GPU notebooks product.

We wanted to improve the Jupyter Notebook experience while offering high-performance, cloud compute. So we sought out to fix some of the problems in cloud offerings for notebooks, and we ended up rebuilding a lot of the interface ourselves. This means you can do things like:

- Within the same notebook, swap from CPU to GPU, and the kernel will restart in seconds while keeping your work.

- Use _lots_ of hardware: up to 8x H100/B200 GPUs, not just one.

- Automatic idle shutdown (configurable timeout) so you don't get a huge bill / forget to stop your notebook.

- Real-time collaborative editing.

- Integrations with Pyright and Ruff for a better IDE-like experience.

Unlike Google Colab, we are a full cloud offering, so you can integrate with the rest of the Modal platform — use custom images, attach persistent volumes and so on. We've heard these are the actual, boring but really important features you need to do experimental work in notebooks.

Happy to hear any feedback! Would love for you to try it out.
by sensanaty | 2025-09-09 16:31:37+00:00
Yes, surely the hyper efficient free market is much better here, not like we have decades of proof of the perverse incentives there. We should instead ensure every mother is crippled with life-long medical debt if their kid needs any help!

Also if we care so much about these inefficiencies, why is it that I still have to subsidize drivers? Why aren't we investing in better public transport infrastructure, rather than letting drivers take up 1000x the space on roads that I'm forced to pay for?
by const_cast | 2025-09-09 16:31:39+00:00
You're correct, the solution then is to just block ads all together.

The reality is that ads are the primary vehicle for malicious content, whether it be malware, scams, or deception, on the web.

Google, as well as Meta, has demonstrated they do not take adequate measure to block said malicious content. This can lead to tangible real effects, such as getting scammed and losing your life savings.

Therefore, every web user should use a strict ad blocker per FBI recommendations. This is no longer a business question or a free-speech question, it is a computer system security question.
by kevinrineer | 2025-09-09 16:31:41+00:00
`curl URL | sudo sh` doesn't have a means of verification of what the contents of the URL points to.

Sure a binary can be swapped in other places, but they generally can be verified with hashes and signatures. Also, a plaintext install script often has this problem in another layer of recursion (where the script usually pulls from URLs that the runner of the script cannot verify with this method)
by ericd | 2025-09-09 16:31:47+00:00
>Now you’re giving checks to parents who were already doing okay at home but also diminished the childcare benefit for those who needed it, which was the goal in the beginning.

They're the ones who are basically paying the vast majority of the cost of this program, what's the problem with a small fraction of it coming back to them? Especially if it reduces the bureaucratic overhead of running it?
by gamerDude | 2025-09-09 16:31:54+00:00
In Poland, they have a "universal child benefit" that pays a stipend for every child you have.

They do pay for it and it is expensive, but apparently it made a large reduction in child poverty, so that's a win.

From my understanding, it also reduced women in the workforce and reduced investment in childcare infrastructure since more mothers were then taking care of children at home.

So this is possible, it just depends on what you want to incentivize.
by jsnk | 2025-09-09 16:32:02+00:00
I don't know much, but a little bit of critical thinking can easily help you understand what's really going on.

1. All these plant construction deals have due dates both on paper and off the paper. Build these by x date kind of deal in order to get x amount of support or tax cuts or regulation burden eased etc in these states. So these companies are trying to build these things ASAP.

2. Also these due dates are off the paper. When new leaders come in at federal, state or municipal, it always carries risk that some things will change and construction of it becomes difficult. Projects of this scale can be scrutinized and delayed to death because they are "illegal" because it can't fully satisfy million lines of legal clauses. It is possible because the political climate allows it. Even from Korea side, imagine new regime comes in from Korea side that tries to build ties with China, and they say we are reducing ties with US and you should ease development etc. These companies are then in negative by order of billions.

3. So time is of essence.

4. H1B would be the visa to get for these workers but it is gamed to death and these workers can't get them in time.

5. So both America side, and Korea side agree in an underhanded way to agree that these workers can come into work, build the plants and train the local workers ASAP.

6. Look at the recent interview by Trump where he even admits it is expected that workers need to come in fast to build these plants. So he's understanding of the situation. He's been a builder for his life. He know projects of these scale require a green light from the authority to work.

7. Trump is likely using this incident as a bargain chip for trade negotiations or ICE accidentally going pitbull on an unintended target
by blackbear_ | 2025-09-09 16:32:10+00:00
> dropped from 147,000 initially to just over 70,000

That is well within the confidence intervals published along with the numbers and entirely unsurprising to anybody who is really paying attention.

> reduction of approximately 52% from their data

And of 0.04% of the actual number of employed people. Seems to me way too thin of a margin to get so worked up.
by uyzstvqs | 2025-09-09 16:32:13+00:00
The file in question is now here: https://github.com/twitter/the-algorithm/blob/main/home-mixe...

author_is_elon, author_is_democrat, and author_is_republican are in fact gone. Now there is grok_politics_neutral, grok_politics_left, and grok_politics_right. This is in addition to a whole group of other categories, such as grok_category_sports and grok_category_music. All are based on annotations by Grok.

Importantly, this file is not used for recommendations. Everything in this file is only used for "metrics tracking purposes to measure how often we serve posts with various attributes." This would also have applied to author_is_elon.
by Theodores | 2025-09-09 16:32:19+00:00
It depends on where you live, however, I noted my 'ad free life' whilst in London. I went from the usual commute on trains and tubes with the odd bus thrown in for good measure to just riding my bicycle along the Thames. I went from seeing everything with adverts to seeing everything with herons, gulls, squirrels, trees and flowers. Rather than being tuned in to the latest junk to buy, I became tuned in to the ever changing seasons and what was in blossom.
by SilverElfin | 2025-09-09 16:32:29+00:00
> The kids absolutely loved daycare. It was a great place with excellent caretakers. Most of all, it was socialization with their friends.

People who stay at home and take care of their own kids aren’t skipping socialization. They still participate in various activities where there are other kids. But, the kids do get a lot higher quality care from stay at home parents than a daycare can afford. If you stay at the daycare and observe things, you’ll see how difficult it is for the workers to split attention.

Oh and you get a lot less illness if avoiding daycare. And that regained time, is development time and time to go do fun things.