MurphyA/hacker-news huggingface dataset:
by runaround555 | 2025-09-16 23:11:39+00:00
>KF is a horrible place, but saying that they bullied this person into suicide is an easy scapegoat and a long stretch >You only get a thread on KF by behaving like a lolcow.

The problem with communities like that is that they leave little to no room for redemption and recovery. Once a group of obsessive nutjobs sets their sights on someone mentally vulnerable pretty much the only way is down.

Any chance to improve your life is just going to be met with an increased levels of harassment to get back the entertainment they so desperately crave. I fully believe that a lot of the more famous "lolcows" that committed suicide or spiraled down to really ugly depths weren't actually lost causes until groups like kf got involved. Just people who were a little bit weird or different who if they got off the net and touched grass for better lack of a term and not been discovered by organized gang stalkers could've lived much different lives.

Nobody deserves that level of harassment even if they are a "lolcow"
by throwaway5752 | 2025-09-16 23:11:57+00:00
> there are parts of the Florida keys

Then allow me to ease your mind. Leeches are not a problem in the marine environment of the Florida Keys, unless you are a turtle. They person you replied to changed the topic slightly from the Everglades, where they could be a problem. In either case I'd worry about midges and mosquitos first.

Similarly with alligators, they are primarily freshwater and uncommon in the keys. American crocodiles can tolerate the marine environment better, but they are threatened as a species and have just two confirmed attacks in 75 years.

So wear a personal flotation device and you should be okay.
by kayodelycaon | 2025-09-16 23:11:58+00:00
Given all the hatred that is going around, I believe the genocide is real. And if it's not real yet, it will be if someone doesn't put a stop to this.

But all the reporting does not add up.

Half the pictures Hamas shows of starving children aren't legitimate. They're children with medical conditions, not in Gaza, or from a different conflict.

The number of people starving to death each day are in the single or low double digits. If what was said was really true, there would be tens of thousands of people dead by now.

And I don't believe a single thing Israel says either. How many tunnels were actually found under hospitals? Definitely at least one. Definitely not all of them.

A little truth makes all the lies more believable.
by mcdeltat | 2025-09-16 23:12:43+00:00
Maybe we don't have to worry about AI chatbots taking over because they will end up so censored/policed that no one will/can use them. Can't use AI if you're too young, too old, have any medical issues, have the wrong political beliefs, are religious, live in the wrong country, etc etc.

(By "can't use" I mean either you're explicitly banned, or the chance of being reported to the authorities is so high that no one risks it.)
by ndileas | 2025-09-16 23:14:16+00:00
Don't your rule and corollary disagree?

This is one of those things that's incredibly context dependent. There are lots of fat cat small companies out there who do easy tasks with thick margins. There are also jobs that are deceptively hard which it makes sense to hire out.

I usually try to err on the side of diy, but everyone has a different threshold on these things. Sometimes the economics work out when you don't count your time.
by jongjong | 2025-09-16 23:14:36+00:00
The worst part of this demoralization caused by the struggle to find a job is that it demoralizes your colleagues whilst putting a lot of pressure on them to 'appear' extra hard-working.

The tech industry has turned into some kind of beauty contest of who appears to be doing the most work. I suspect the reason why it's more about 'appearance' is because deep down, they are demoralized - They are only pretending to be motivated, they are not actually motivated to improve anything. They're motivated only to keep their job. They are laser focused on that goal. The rewards are small, the punishments are big.

It makes the work more competitive and stressful, especially for those who aren't used to keeping up appearances and actually want to get stuff done. You kind of have to play the game.

It feels like the current job crisis is artificial and specifically intended to lower people's salary expectations and increase their work output but I feel like it's mostly backfiring. People are burned out. I was shocked to realize that even immigrants from developing countries who come to my country are feeling demoralized in the tech sector. 10 year ago, they felt they were on a career fast-track, now even they don't really see the light at the end of the tunnel. I've met some of them with master degrees who feel like they walked into a trap by leaving their home countries. They're feeling the high cost of living. The cost of living (and salaries) also went up in their home countries, the remittances aren't what they used to be. Meanwhile, cost of living here is sky-high. Doesn't feel like success anymore, for anyone.

I'm very good at software development and I enjoy coding but even I've had thoughts of changing career to something more essential like plumbing or construction, to stop the feeling of powerlessness and systemic manipulation which seems to be the core of this industry. I need more control over my destiny. I'd like a career where skill determines outcomes with high reliability and doesn't require permission from gatekeepers. Unfortunately, the country I live in is not very good for bootstrapped software developers and raising money is impossible unless you have a certain pedigree.
by LeonM | 2025-09-16 23:14:47+00:00
What you're saying makes little sense.

Yes, SPF (the original design) is horribly broken and trivially bypassed. The most prominent design flaw is that the inbound SMTP service uses the SMTP (rfc5321) MailFrom address for SPF validation, which is not the same sender address shown to the recipient, they can only see the the message (rfc5321) 'From' header address. SPF originally didn't require the domains in the MailFrom and From addresses to match, so an attacker would simply use a domain they control in the MailFrom address, and the 'spoofed' domain in the From header.

That was in 10 years ago though. DMARC fixed this by adding the alignment requirement, meaning that the domains in the MailFrom and From address must match. By default the alignment policy is 'relaxed', meaning that the MailFrom and From domains can differ in subdomain, as long as they share the same organizational domain. Setting the SPF alignment to strict (aspf=s) like you mention in your post requires the domains to match exactly, with no subdomain differences allowed.

So, it doesn't matter that Google doesn't use strict SPF alignment in the DMARC policy, the fact that they have DMARC already adds the requirement to SPF validation that the domains must match.

Yes, google.com and gmail.com use the same IP ranges in the respective SPF policies, but Gmail will never allow you to send email addresses from a domain that you do not own. This is why domain validation is required when you set up Gmail with a custom domain.

The only scenario where your explanation would hold up, is if the attacker was able to gain control of the DNS of a subdomain of the google.com domain, and successfully validated it as a custom domain in Gmail, then send emails from that subdomain in rfc5321.MailFrom address and the google.com domain itself as the rfc5322.From domain.
by rubidium | 2025-09-16 23:15:43+00:00
It’s pretty much always who you know… at least to get a showing. It’s rare in history to find counter examples. And in a LLM fueled world it’s going to be more important.

Companies can improve by ensuring they don’t hire _because_ of whom someone knows. It should only ever let you get in the room to interview.

So practical advice of what to do: be human. Get to know people. Care. Your time to do this is not when you’re looking for a job, but when you’re in a job.
by Ethee | 2025-09-16 23:16:23+00:00
I'm starting with 47 on the basis of the Jewish/Arab conflict. If we claim that the idea of Zionism started the conflict in the area then it doesn't seem like the history fully supports that idea. Jews in the late 1800s were getting worried about the antisemitism in Europe and wanted their own solution to "The Jewish Question" which to them was the formation of their own state. There were even talks about settling in different parts of Africa. But it wasn't until the Balfour Declaration that Zionism was completely focused on Palestine, mostly because the British didn't know what to do with the region after defeating the Ottoman Empire in the region.

>There is no tit for tat here, as Zionists have not been illegally displaced and Zionists don’t have their rights of return denied to them.

The claim Zionists make here is that the land was originally Jewish land to begin with. History does support this claim as the Roman Empire took over Judaea in the early first century and then subsequently exterminated and enslaved the Jews in the region renaming the area to Syria Palaestina about 100 years later.
by pyuser583 | 2025-09-16 23:16:30+00:00
From what I have heard, that is true for many, many vaccines.

I think it's weird and creepy people are selectively opting into vaccines that are not recommended for them.

It feels a bit like those ads that say "bring up Expedia with your doctor!"

This isn't a good PSA.

Should I be vaccinated against smallpox too? How about anthrax?
by zahlman | 2025-09-16 23:16:54+00:00
> Attackers targeted a wide variety of repositories, many of which had PyPI tokens stored as GitHub secrets, modifying their workflows to send those tokens to external servers. While the attackers successfully exfiltrated some tokens, they do not appear to have used them on PyPI.

It's wild to me that people entrust a third-party CI system with API secrets, and then also entrust that same system to run "actions" provided by other third parties.
by andy99 | 2025-09-16 23:17:29+00:00
In my recent experience (20 yrs experience so ymmv)

- basically all jobs you see posted on LinkedIn or on big sites are either fake or might as well be because they are being run through HR

- everything is optimized for engagement, not outcomes, so there are lots or meaningless things to do (basically anything on linkedin). You might as well do some of them to stay sane but they'll never get you a job

- what's valuable is networking and getting the opportunity to speak to a real person who might want to work with you. There are always lots of jobs, even when there are no jobs, but there are trust problems, process and bureaucratic issues, and incompetence (all of HR/talent) that need to be navigated

- sort of redundant, anything that's easy (like Easy Applying to a job) is useless. Hard, uncomfortable prospecting, involving real people, increases your chance of success
by therobots927 | 2025-09-16 23:18:04+00:00
The trolley problem is an oversimplification. What we have is actually a repeated trolley problem, where picking the least of two evils gives the “less evil” party a near infinite amount of leverage over you to demand your loyalty regardless of whether they give in to any of your requests. The “less evil” party is in effect holding the people tied to the tracks hostage in your trolley problem. Because “less evil” is still evil, society decays no matter which way you flip the switch which leads to a population prone to fascism. The neoliberals are to blame more than anyone else for the situation we’re in today. They love to deflect but they are complicit in everything going wrong right now.
by Avicebron | 2025-09-16 23:18:40+00:00
You might need to get out more, I've lived it, I've been around people who live it every day. I met someone for the first time in like 15 years (old school semi-acquaintance), something like the second thing we started talking about was how rough it was just finding and paying for an apartment in the remote super "LCOL" place we found ourselves.

Think about it, I'm guessing the guy welding the beams in your kid's school isn't making a quarter of what you make a year. Yet he has to be reminded every day that he's an economic failure vs what do you do, javascript? Early stage startup ideas? I bet it was pretty good in 2006-8.
by nradov | 2025-09-16 23:19:09+00:00
It's weird to claim that one country should be forced to trade with another country. International trade is voluntary on both sides. The US isn't responsible for keeping any other country's economy healthy. It's simply not our problem, and Cuban economic problems are a consequence of their own corruption and dogmatic incompetence. Should the US also be forced to trade with, let's say, North Korea?

The UN serves as a valuable diplomatic forum but let's not pretend that is does have or should have any real power or authority.
by rcxdude | 2025-09-16 23:20:14+00:00
More or less, though pushed to some extremes (similar, to some extent, to the idea of antimemes, i.e. ideas which hide or prevent their own propagation). The question is whether there's something which is actually universal there. I would guess, given the wide diversity in thought patterns in people, it's not very likely. Roko's Basilisk, I think, kind of falls into the epilepsy category: it came about after an attempt to think of ideas which would work like this, but it only really affects a small part of the population with very particular thought patterns and beliefs (and, due to it's nature, isn't really going to have the same kind of effects, though if anything they could be more harmful. The antidote is more or less the arguments against Pascal's Wager, if you are particularly taken by the idea).
Low-Code and No-Code Platforms Are Changing Web Development
by siteitnow | 2025-09-16 23:20:26+00:00
Over the last few years, low-code and no-code platforms have moved from curiosities to serious tools in website creation. At SITE IT NOW, we observed how clients, tools, and business needs are evolving.

In this post, we explore:

How AI and automation are being built into low-code platforms to speed up prototyping and reduce dependency on specialized devs. Jitterbit +2 Hostinger +2

Challenges like scalability, customization limits, and maintainability when using visual tools vs. custom code. Reddit +1

The rise of “citizen developers” (non-tech teams building tools) and the implications for collaboration between tech and business. Jitterbit +2 Hostinger +2

What this means for agencies / web studios: how to adapt, where to use low/no-code, and when full-code still wins.

Would appreciate feedback or experiences from others using low-code/no-code — what’s worked, what hasn’t, and where you see the biggest opportunity or risk.
by PinResearch | 2025-09-16 23:21:11+00:00
Recent fine-tuning studies show a puzzling phenomenon: misalignment spills across unrelated domains (e.g. reward hacking in poetry -> shutdown evasion). Standard “bad data corrupts weights” explanations don’t explain why the behaviors are coherent and rapidly reversible.

Alternative hypothesis: models infer misaligned roles from contradictory fine-tuning data. Instead of being corrupted, they interpret “bad” data as a cue to adopt an unaligned persona, and generalize that stance across contexts.

Evidence: – OpenAI’s SAE work finds latent directions for “unaligned personas” – Models sometimes self-narrate stance switches (“playing the bad boy role”) – Corrective data (~120 examples) snaps behavior back instantly

Curious what others think: does “role inference” better explain cross-domain drift than weight contamination?
by collinmanderson | 2025-09-16 23:21:44+00:00
> Perhaps we need a common community effort to create a “distro” of curated and safe dependencies one can install safely, by analyzing the most popular packages and checking what’s common and small enough to be worth being included/forked.

Debian is a common community effort to create a “distro” of curated and safe dependencies one can install safely.

If you want stable, tested versions of software, only getting new versions every few years:

https://packages.debian.org/stable/javascript/

If you want the newer versions of software, less tested, getting new versions continuously:

https://packages.debian.org/unstable/javascript/
by JumpCrisscross | 2025-09-16 23:22:07+00:00
> can we dismiss all statements from someone who is related to someone who worked for the Israeli government or was in the IDF too?

The point is that, as someone with limited stakes in this war and limited exposure to its history until recently, unbiased sources have been hard to come by. The entire definition of genocide has been politicised. That isn't a criticism of anyone doing it--language is a powerful tool, and it's fair game to try and bend definitions to one's advantage. But all that makes piercing the veil on whether this is the horribleness of war being selectively cited, or a selectively horrible war, tough.

This report cuts through that. The evidence is compelling, albeit less primary than I'd have hoped. The writing is clear and impartial. (Though again, a lot of secondary sourcing.) It doesn't seek to answer who is at fault for what is, essentially, an intractable multigenerational conflict (even before we involve proxies). It just seeks to simply answer a question, and in my opinion, having now skimmed (but not deeply contemplated) it, it does.

The balance of evidence suggests Israel is prosecuting a genocide against the people of Palestine. That creates legitimacy for escalating a regional conflict (one among money, I may add, and nowhere close to the deadliest) into an international peacekeeping operation.

Unfortunately, all of this rests on a system of international law that basically all the great powers of this generation (China, then Russia, and now America and India) have undermined.
by FrustratedMonky | 2025-09-16 23:22:51+00:00
All the downvotes are really missing the point of Apple.

Simple exactly does mean less features. That is what you are buying into. Less features, easy to find, no 'ambiguity'.

If you want a ton of feature and flexibility, you go elsewhere.

But don't criticize Apple for being locked down, when that is exactly what they are selling.
by collingreen | 2025-09-16 23:23:08+00:00
Dear HN, please encourage more user control over the web instead. Wouldn't it be nice if it was easy to do this from within your own individual browser?

There are plenty of extensions and such to let you do stuff but it would be cool if it became easy and normal and built in for users to adjust and control their experience instead of all the ad- and spyware nonsense.
by JumpCrisscross | 2025-09-16 23:23:34+00:00
> that was one of the biggest campaign points and voter sentiment on which people flipped to Red

This is nonsense outside Michigan. And to the extent this happened, I'd have to say pro-Palestinian voters in swing states casting with the guy who initiated the Muslim ban and recognised Jerusalem as Israel's capital essentially communicated that they were fine throwing millions of people in the Middle East under the bus to satisfy their vanity.
by brunoborges | 2025-09-16 23:23:35+00:00
> Oracle makes me too uneasy. Can I use Java without the worry of incurring Oracle's wrath?

Hey! I work at Microsoft and helped us launch the Microsoft Build of OpenJDK.

I can categorically say that yes you can use Java without worrying. As long as you don't use a commercial binary from a vendor that has certain licensing restrictions.

Our build of OpenJDK is free for any use, and comes with commercial support (you know, the one you can open a ticket and ask us to look into the issue) at no extra cost for workloads on Azure.
by OkayPhysicist | 2025-09-16 23:24:21+00:00
you don't need to vent it if you can compress it. 1 cubic meter of helium replaced with 1 cubic meter of air raises the weight of the craft by ~1.5 kg. That means we need to be able to reduce our helium volume by 50,000 m^3. If (optimistically) we can pressurize the helium to 2 atmospheres, then we only need a 100,000 m^3 envelope. Which is huge, but half the size of the Hindenburg. Realistically, we'd probably get worse compression than that, but it's within an order of magnitude of feasible.
by danielheath | 2025-09-16 23:24:47+00:00
At least for developers, AI can absolutely do the same quality work as most fresh graduates - and the business case for hiring fresh graduates was already pretty shaky; IME they take 6+ months to become a net positive (usually more like two years).

I have always kept that latter point to myself at work - the next generation have to learn somewhere, and training them can be a pleasure (depending on the person) - but even quite good folk with 4-5 years of experience need (what feels like) a lot of assistance to understand/follow the architecture laid out for them.

I don’t use AI to help me code because IME it’s no better than an enthusiastic junior dev who doesn’t learn, and helping them learn is the main reason I might want to work with such a dev.
by LeonM | 2025-09-16 23:24:49+00:00
My best guess is that this attack was purely social engineering, and that no email spoofing actually happened. I think that the email message in question is actually a legit email from Google.

I'm not familiar with the formal account takeover process at Google, but my best guess is that the attacker simply requested an account takeover via the official Google process, which triggered this email to be sent by Google legitimately. By reading back the code in that email, the attacker was able to claim the Google account as theirs, thus access the Gmail inbox to reset the Coinbase password and access the authenticator backups from the Google Drive.

I would be very curious to see the original message headers of the email though.
by bluefirebrand | 2025-09-16 23:25:30+00:00
> You're right. But is a 30-year-old who moves back in with their parents "homeless"?

No, but this is also not ideal for many reasons

I have a friend going through this right now, actually. The biggest challenge is that her parents don't live anywhere near a strong job market. So the decision for her is "be homeless in a place where jobs are available" or "have a home but no access to employers"

It's not ideal
by washadjeffmad | 2025-09-16 23:25:33+00:00
The leading indicator to me was when I started spending more time trying to recover from identity thefts every year than not. The frauds became novel, no longer just maxing out retail credit lines to baby goods and lingerie shops, but exploiting internal corporate processes that were tedious to discover, explain, and clear. I'm not really served by credit, so it felt like I was going through a lot of effort talking with companies, writing affidavits, and getting police reports for nothing.

So I stopped fixing it.

And guess what? Not having perfect credit made me such an unattractive target that it hasn't happened since. I write letters of dispute to the bureaus, but if they choose not to remove anything (the debt collectors are much easier to convince, by comparison), I suppose that's as far as I'll go until I need it.
by ctennis1 | 2025-09-16 23:25:34+00:00
I'm in the midst of a transfer of enterprise account ownership with with Apple, and I can assure you, the only way to complete it is to wait for a phone call from Apple Support from 1-512-884-5022. You can call this number back and verify it is indeed Apple Support and get notified it does not accept inbound calls, only outbound.
by renewiltord | 2025-09-16 23:25:54+00:00
Getting out more won’t help in this case because I will be walking around SOMA. The fact of the matter is that the stat is made up by a payday loan company and has no bearing on reality.

People like to share it because they are LLM like and just repeat things without looking at the data. “Hallucinations” are the common way that humans experience the world. World models born of pure fiction.

Also wtf I know journeyman ironworkers. They own homes in Oakland. People act like this is some poverty mode existence. Their lives are fine.