MurphyA/hacker-news huggingface dataset:
by jimt1234 | 2025-09-09 16:46:45+00:00
> The majority of the public school system has devolved into day-care, not education.

I resisted that narrative for years, thinking it was just a media-hyped scare tactic to get clicks. However, my niece started high school a few weeks ago (in mid-August, which is weird to me); her experience blew my mind.

Her new high school is considered one of the better public high schools in the area. When I asked her how it was going, did she like being a high-schooler, I was expecting her to complain about the course load or something like that. However, she told me that after 2 weeks, they haven't spent one minute on actual education. She said they've been going over rules and policies for 2 weeks. Things like no bullying, inclusiveness, fire safety, bring your own water bottle, how to pray (they have a room dedicated to prayer), etc. Best/worst of all, they did an entire day on active shooter drills - the windows are now bullet-proof!

So yeah, unfortunately, I'm fully onboard with this narrative now. While kids in Taiwan and Japan are learning calc, kids in the US are doing active shooter drills and staring at the Ten Commandments. USA! USA! USA!
by cycomanic | 2025-09-09 16:46:48+00:00
That fact that people can't even agree on what SMRs even are tells you everything. You advocate that they are essentially the same thing as a regular power plant, others say they are small boxes that can be put at any neighborhood corner.

But everything because they are going to scale magically. Nobody ever explained how that scalability is supposed to happen. A large portion of any nuclear reactor is still a steam turbine, we have built lots of these without seeing prices fall exponentially (like solar) why should adding a couple (really a miniscule) number of SMRs suddenly fundamentally change the way their price scaling?
by mapt | 2025-09-09 16:46:51+00:00
This is just totally untrue about how China deals with foreign nationals. They're tracked, they have significant disadvantages in civil courts, there are a bunch of other restrictions on their presence... but just disappearing Americans or South Koreans is not the sort of issue China has. They have an intense bureaucracy and foreign workers are comparatively rare & their existence geopolitically sensitive; Court cases involving foreigners are expedited and jail stays are short before deportation.

Outside of very specific campaigns (eg Xinjiang) or internal Party processes, it's generally not even a problem that China has with Chinese nationals; Most people who cross over the line into something the government cannot stomach get a scary visit, or get obvious monitoring, or get a couple weeks confinement for investigation. Dissident status can have significant consequences for one's career. On the off chance it leads to adjudication (there are far lower rates of use of the justice system than the US, and arguably far lower crime rates, but we could say that about most countries), there is a public facing justice system just like we have.

The people "disappearing" into a shadow justice system are those who voluntarily sign up for Party membership, a selective process more like enlisting in the military than listing your affiliation on a voter card. Turning against the Party in a significant way after joining the Party, typically ends up with some limited term of "rehabilitation", but a lot more earnest use of that terminology than our justice system uses.

The fact is that the American system in 2025 is far more brutal, deliberately so. We literally stole children from families over immigration violations, and then "lost" them. We're setting up internment camps. We have court dates for legitimate immigration processes like asylum that are years or decades out.
by saghm | 2025-09-09 16:47:02+00:00
OTOH, doesn't ICANN already sometimes restrict who has access to a given TLD? Would it really be that crazy for them to say "maybe we shouldn't let registrars sell npm.<TLD> regardless of the TLD", and likewise for a couple dozen of the most obvious targets (google., amazon., etc.)? No one needs to pay for these domains if no one is selling them in the first place. I don't love the idea of special treatment for giant companies in terms of domains, but we're already kind of there with the whole process they did when initially allowing companies to compete for exclusive access to TLDs, so we might as well use that process for something actually useful (unlike, say, letting companies apply for exclusive ownership of ".music" and have a whole legal process to determine that maybe that isn't actually beneficial for the internet as whole: https://en.wikipedia.org/wiki/.music)
by MrDrDr | 2025-09-09 16:47:12+00:00
Was not aware of these - thank you for sharing. But I’d be concerned that such organisations will not stand the test of time, from say a sustained period of governmental (on in this case institutional) incompetence. I’d like to see some mechanism (competition perhaps) that would allow the system to self correct - when the group responsible fail for a sustained period of time. Not saying I have any answers.
by 3036e4 | 2025-09-09 16:47:26+00:00
Also this older clone: VGA Paint 386 (https://www.bttr-software.de/products/vp386/)

It runs in DOSBox, making it a bit easier (imo) to get running on most computers (and Android devices) than old Amiga software (even if I have FS-UAE and Amiga Forever installed as well on my desktop computer).
by erpderp | 2025-09-09 16:47:32+00:00
According to the OP, in this specific case, the malware was mostly just intercepting legitimate fetch(), etc calls. With CSP `connect-src`, I don't think that would be possible unless the new fetch targets are themselves on allow-listed domains (which is a totally separate issue).

For example, consider a CSP of: `Content-Security-Policy: connect-src 'self' https://api.example.com;`: This policy would allow fetch() requests only to the same origin ('self') and to https://api.example.com, blocking any attempts to connect to other domains (typically with a corresponding warning/error in the browser dev console).

That said, in fairness, CSP is of course only applicable to frontend code (not to backend JS, where anecdotally I've seen a lot more usage of `chalk` and some of the other pwned packags), but frontend code and the `window` object is what the OP used in their examples and seems like they're targeting w/ webpack, hence my mentioning CSP.
by AlotOfReading | 2025-09-09 16:47:32+00:00
Can we refrain from strawmen? I haven't made any of the points you're harpooning and vehemently disagree with all of them.

What I said was that panics aren't always appropriate and the context to determine this doesn't exist at the language level.

I didn't say managing UB was easy and in fact I've argued diagnosing it is impossible directly with members of both language committees. I didn't say panics are never appropriate. They usually are appropriate. I didn't say I don't use rust because X, Y, Z. I write rust. Etc.

There is no meaningful difference between a correctness bug and a panic triggering condition with the exception that the panic forces you to acknowledge the error during development, meaning it is more likely that the correctness bug gets caught in the first place.

More likely, but not guaranteed. I don't want to engage more with you, but there was a specific incident I was thinking of when I wrote the prior post that involved an assert improperly placed in a real time control loop that burnt out a very expensive motor.
by unyttigfjelltol | 2025-09-09 16:47:43+00:00
This time won’t be like the last. The point of such episodes is to destroy capital. A rational response would be to de-lever before everyone else. Focus on the meaningful and the productive in the near-term, disregard promises about the future.

If you’re aggressive, issue long-term, fixed rate debt and buy whatever you think everyone else will view as personally meaningful or currently-productive, provided someone didn’t beat you to it.

Arguably we’re 40 years into the “cash is trash” trade so everyone is in a little bit of suspense what happens next.
by hungmung | 2025-09-09 16:47:45+00:00
This goes back to 2016, when Dems decided it was better to nominate one of the least popular American politicians in living memory than the alternative candidate who had broad working class appeal. Not to mention they juiced up Trump's campaign because that was the only candidate Mi Abuela was projected to win against. Yeah Trump may be the Antichrist but we wouldn't be here without him being able to run against some of the most comically weak candidates.
by sebstefan | 2025-09-09 16:47:57+00:00
Dodged a bullet indeed

I find it insane that someone would get access to a package like this, then just push a shitty crypto stealer.

You're a criminal with a one-in-a-million opportunity. Wouldn't you invest an extra week pushing a more fledged out exploit?

You can exfiltrate API keys, add your SSH public key to the server then exfiltrate the server's IP address so you can snoop in there manually, if you're on a dev's machine maybe the browser's profiles, the session tokens common sales websites? My personal desktop has all my cards saved on Amazon. My work laptop, depending on the period of my life, you could have had access to stuff you wouldn't believe either.

You don't even need to do anything with those, there's forums to sell that stuff.

Surely there's an explanation, or is it that all the good cybercriminals have stable high paying jobs in tech, and this is what's left for us?
by tomasphan | 2025-09-09 16:48:34+00:00
The problem here is that a single dev account can make updates to a prod codebase, or in the case of NX a single CI/CD token. Something with 5 Million downloads per week should not be controlled by one token if it takes me 3 approvals to get my $20 lunch reimbursement. At the very least have an LLM review every PR to prod.
by chainhire | 2025-09-09 16:48:49+00:00
We spotted ChainHire, a neutral hub aiming to fix discovery in Web3. The pitch: founders can find trending projects, vetted service providers, tools, and (eventually) capital, then request warm introductions so conversations start with context instead of cold DMs.

What it does

Searchable directory (projects / services / tools) with clear categories and proof points.

A human-routed warm-intro flow (opt-in) to match specific needs (e.g., market making, tokenomics, PR/growth, audits, infra, analytics, listings).

Builder/Founder spotlights and themed shortlists to surface credible teams.

Why it might matter Discovery/matching is expensive in time and money; ChainHire focuses on fit and outcomes rather than blasts. Labels (“Listed,” “Featured,” “Partner,” “Integration”) are disclosed; “listing ≠ endorsement.”

What’s shipped (beta) Directory with multi-select filters & URL-synced search, profile structure (overview, services, highlights, PoC), ranking that favors recency/fit, and a Typeform-based submit flow (free during beta). Warm intros are routed
by tuatoru | 2025-09-09 16:49:03+00:00
The authors themselves use the analogy of electric motors, which changed factories. But also gave us washing machines, refigerators, and vacuum cleaners, changing society. And skyscrapers, because elevators, changing cities.

Ai may be more like electricity than just electric motors. It gave us Hollywood and air travel. (Before electricity, aluminum as as expensive as platinum.)

As economists they are wedded to the idea that human wants are infinite, so as they things we do now are taken over, we will find other things to do: maybe wardrobe consultant, or interior designer, or lifestyle coach - things which only th rich can afford now, and which require a human touch. Maybe.
by rubenbe | 2025-09-09 16:50:10+00:00
Nice idea!

I do notice quite some people focus the autodiscovery part where for me that's less of an issue (I do agree it would be VERY nice). The OpenWISP configuration on each AP is limited to: set IP address of controller & shared secret and click OK. The rest is all magically done for you by the controller.

I do like the 304 idea, in practice it uses the same conceptual idea as the OpenWISP system: check if the MD5 (instead of SHA1) for the current config and the controller config are still identical and download and apply if not.

An important reason I why chose the OpenWISP is that they "just work", are well tested and included in the OpenWRT package list. My main goal is to keep the OpenSOHO project as small as possible ;)
by sugarpimpdorsey | 2025-09-09 16:50:10+00:00
> Suppose that the plant made special workers do non-special work, the hammer does not fall on the workers. It falls on the plant. Yet ICE was brought in to hammer the workers. This is a big screw up in the legal procedures department.

So if hookers are working the streets, the hammer does not fall on them and will fall on their pimp instead? The cops will just let them go?

The law does not work the way you think it does.
by mmargenot | 2025-09-09 16:50:30+00:00
I do agree that there's a lot of garbage and navel-gazing that is directly downstream from the creation of LLMs. Because it's easier to task and evaluate an LLM [or network of LLMs] with generation of code, most of these products end up directly related to the production of software. The professional production of software has definitely changed, but sticky impact outside of the tech sector is still brewing.

I think there is a lot of potential, outside of the direct generation of software but still maybe software-adjacent, for products that make use of AI agents. It's hard to "generate" real world impact or expertise in an AI system, but if you can encapsulate that into a function that an AI can use, there's a lot of room to run. It's hard to get the feedback loop to verify this and most of these early products will likely die out, but as I mentioned, agents are still new on the timeline.

As an example of something that I mean that is software-adjacent, have a look at Square AI, specifically the "ask anything" parts: https://squareup.com/us/en/ai

I worked on this and I think that it's genuinely a good product. An arbitrary seller on the Square platform _can_ do aggregation, dashboarding, and analytics for their business, but that takes time and energy, and if you're running a business it can be hard to find that time. Putting an agent system in the backend that has access to your data, can aggregate and build modular plotting widgets for you, and can execute whenever you ask it a question is something that objectively saves a seller's time. You could have made such a thing without modern LLMs, but it would be substantially more expensive in terms of engineering research, time, and effort to put together a POC and bring it production, making it a non-starter before [let's say] two years ago.

AI here is fundamental to the product functioning, but the outcome is a human being saving time while making decisions about their business. It is a useful product that uses AI as a means to a productive end, which, to me, should be the goal of such technologies.
by chongli | 2025-09-09 16:50:33+00:00
Sure, if the place paid everyone a lot and had much higher staff:child ratios then everything would be great. Except it would cost an absolute fortune for parents thus even less viable under a government program.

Government programs almost universally have higher overhead and more waste than private businesses. There is no incentive for government employees to improve efficiency, reduce budgets, or cut costs.
by yepitwas | 2025-09-09 16:50:42+00:00
We've got one locked-down shared phone for our kids, for scheduling stuff with friends and calling & texting relatives or whatever. We almost have a teen so we'll see how long we can keep that up, but we only relented that much within the last year and a half, zero phones before that (which seems like it should be normal, but there are a lot of e.g. 4th grade classrooms out there where most of the kids have phones, seems super popular especially among the Fussellian middle class, I think in part for status reasons, like, "well if my kid doesn't have a phone people will think it's because we can't afford it!" which of course Fussell's upper-middle and higher don't give a shit about, so there's less child phone-ownership among them)
by titzer | 2025-09-09 16:50:42+00:00
So let's get this straight. You admitted you make money off ad revenue which is 100% a business of using a platform for one thing (the thing people want) to instead allow random people with money to force information on other people to get them to think and do things (when said target people would, almost by definition, prefer not to think or do those things), selling people's attention and interrupting their lives on the regular, subtly coercing them using whatever deceptive tactics work best (the kinds of psychological and neurological vulnerabilities that exploit unconscious mammalian behavior), and seem to think that nothing in the social contract constrains you from vetting what garbage lies people put in the ecosystem, as long as you are making money.

Hard disagree on that being "moral". You let people put ideas into other people's heads because they pay you. And we're not talking "good" ideas like education and facts, but usually vapid consumerism crap at best and viral lies and propaganda at worst.
by vjvjvjvjghv | 2025-09-09 16:50:52+00:00
New Mexico is a very strange beast. It wants to be progressive and green, but is basically an oil state. There is a widespread poverty mindset of low expectations which prevents change because people are used to the way things are and don't want change. Crime is high, education is bad, health care is bad. Stupid drivers. Lots of corruption.

But you can have a pretty nice, affordable living in places like Taos, Santa Fe, Los Alamos and parts of Las Cruces and Albuquerque.
by DrillShopper | 2025-09-09 16:51:16+00:00
Nobody wants it to be, but wanting something to not be about racism doesn't make it not about racism.

Jim Crow "ended" (it's what we tell ourselves) in the south in 1965 with the Civil Rights Act of 1964 and Voting Rights Act of 1965. Our last two presidents were adults when that happened, and it's not like racism was solved when those laws were passed.

The US still has a lot of work to do here - it's absurd to me to hear US Conservatives talking about how slavery ended in the 1860s so we should end protections for African Americans because it's been "so long". It hasn't, and they know that.
by josefresco | 2025-09-09 16:51:44+00:00
Additional context: https://san.com/cc/exclusive-evidence-of-cell-phone-surveill...

>At 8:58 a.m., just before the protest began, SAN began monitoring eight LTE bands present in the area and found no anomalous behavior. At 9:06 a.m., however, a burst of 57 IMSI-exposing commands was detected.

>Other bursts, present on four of the LTE frequency bands, appeared roughly every 10 minutes over the next hour, causing Marlin to issue numerous real-time alerts. A post-scan analysis confirmed the detection of 574 IMSI-exposing messages.

>It also flagged two “attach reject” messages, a type of cellular rejection sent when a cell phone tries to connect to a network. Attach rejects can occur for valid reasons, such as when a phone with an expired SIM card tries to connect to a network but such messages are rare on properly configured networks. IMSI catchers may use attach reject messages to block or downgrade connections and obtain an IMSI before it is encrypted. SAN observed the two suspicious messages at 9:55 a.m. and 10:04 a.m. at the height of the protest but did not encounter others before or after the demonstration ended.

>SAN conducted a follow-up scan during the same time period, the following day, when no protesters were present. Unlike the day prior, Marlin did not issue real-time alerts.
by CPLX | 2025-09-09 16:52:15+00:00
That’s not the full story at all. No argument that this administration is a disaster on hundreds of metrics but it’s not clear what’s going on here. At a glance it’s at least possible that this was a pro-US worker policy.

The Asian high tech companies have a history of falsely claiming US workers just aren’t smart enough to do the job when in fact what they really want is to have their own workers come in and work triple overtime at slave wages. It was a huge issue with the TSMC build in Arizona.

If they brought people in to do construction work on either tourist visas or B1 meeting type visas that’s illegal and should be and what happened here makes perfect sense.

Of course enforcing pro-labor laws against multinationals isn’t exactly what this admin is known for, so it’s probably a fuck up. But until we know the details we don’t know.
by pavlov | 2025-09-09 16:52:32+00:00
If only it were that simple.

An ESTA or B1 visa lets you attend business meetings. How do you draw the line between “work” and “meeting”?

A sibling comment to yours [1] describes a situation where moving office chairs from one meeting room to another was considered union work. How are Korean experts supposed to know you shouldn’t do that when attending a meeting or you risk being thrown in jail for violating your visa?

That’s an extreme case, but it illustrates that this isn’t some clear-cut case of knowingly doing work that wasn’t permitted.

- - [1] https://news.ycombinator.com/item?id=45184501
by vunderba | 2025-09-09 16:52:33+00:00
I grew up in the era of boss rush segments towards the end of a game to add filler and absolutely hated them.

FWIW, I'm also much bigger fan of difficult levels over difficult bosses.

I also think that the level of perceived difficulty depending on the player plays a large part in the enjoyment. When I play a video game, I'm also imagining that I'm actually that character so every death essentially means that I was defeated in that world for real.

I absolutely hate games where one of the win conditions is to be forced to die numerous times to discover an otherwise inscrutable pattern.
by nashashmi | 2025-09-09 16:52:51+00:00
That depends on the writing of the law. If the law forbids a person to sell an illegal service, then the seller is at fault. If the law forbids buying a service, then the buyer is at fault. It is easier to go after the seller/broker (pimp) then it is to go after the service worker, legally speaking, because the transfer of money is through the broker.

Same thing happened with Trump in the hush money scandal. The guy who transferred the money (the lawyer) was at fault. The only reason by which they came after trump was that the books did not record the transfer truthfully, and did so falsely.
by bccdee | 2025-09-09 16:53:21+00:00
A better analogy than music might be dance: The reward for dancing well is simply the feeling of dancing well. In a properly-designed game, the game feel of successfully completing the technical challenge is itself the reward. A dance that feels unpleasant probably won't be performed recreationally, and a game that doesn't feel fun to succeed at won't see much play.
by fragmede | 2025-09-09 16:53:32+00:00
That's incredibly shortsighted. Hyundai invested a shit ton of time and money and effort into making a plant in a shit hole of a state to make it less of a shit hole. Now, there's a group of South Koreans who have first hand experience of America being shit. They're gonna go home and tell everyone that will listen, that Americans are all shitheads, and fuck those people, and never come back. Why would Hyundai ever open another American plant if that's how their people get treated? Have you been arrested? It's humiliating. It's not that they broke the rules, it's how they're being enforced. That visa has always been fine for that. If we wanted to change how things work, a competent state department would have telegraphed changes coming down the pipeline months in advance, and spared everyone the humiliation of being abducted by ICE.