MurphyA/hacker-news huggingface dataset:
by 9x39 | 2025-09-26 21:39:39+00:00
When a credential is stolen, its validity across multiple unrelated services is often checked by credential stuffing. That's just one type of simple attack.

Has cybercrime been rendered obsolete with a government credential? Why is this master account immune to theft? On the contrary, it appears to be a credential that once stolen, could be more impactful than having your primary email account and phone compromised.

It's reasonable to be concerned even just from an infosec perspective.
by steveklabnik | 2025-09-26 21:40:00+00:00
> How does blacklisting / moderation etc. work here.

Anyone can run a moderation service. Users subscribe to the services they want. When you flag a post or account for moderation, you choose which service you send the report to.

> How does blocking work?

Blocking works by publishing a "hey I've blocked this person" record in your database. Applications then can use this to enforce that.

> How do people make sure to distance themselves from political enemies?

I'm not sure what this means.

> Do the aggregator cache servers block certain user domains?

They could, and this is also a property that's not really about blocking, that is, you could choose to cache only part of the network if you choose, which could be useful for various reasons.

> How do you ensure that the aggregator returns valid and non-forged comments and likes?

Cryptography, basically.
by thaumasiotes | 2025-09-26 21:40:02+00:00
That's more accurate. Shifu is just intended to translate the English "master".†

Note that it isn't the Chinese word for "teacher", which is 老师 laoshi. (Same "shi".) Shifu is a different title.

ABC provides these glosses:

-----

师傅 shīfu

1. master worker

2. tutor of a king/emperor

3. [PRC] general term of address in the late 70s and 80s

4. [courteous] term of address for service workers [such as a carpenter]

-----

The Tuttle Learner's Dictionary provides this note:

> 师傅 shīfu is [] a polite form of address to a worker. For example, an electrician or a mechanic can be addressed as 师傅, or, if his family name is 李, 李师傅.

It is how martial arts instructors are addressed, but not how teachers are addressed. Teachers are white-collar.

† In the movie, it's pronounced with the FLEECE vowel, as if it were the English words "she foo", for no reason that I can understand. To an English speaker, the Mandarin word will sound like "shiffoo", using KIT and not FLEECE in the first syllable.
by theologic | 2025-09-26 21:40:16+00:00
Another variation of this are GLP 1 drugs.

Obesity costs USA $1.75T (https://milkeninstitute.org/content-hub/news-releases/econom..., grossed up for inflation)

Number of people that are obese: 100M

Annual economic impact from obesity per person: $17,500 per year

GLP-1 "For All": $6,000 per year (assuming multiple vendors, and some will be over vs under)

Savings: $11,500 per year per person.

Economic impact: Around $1T

This should free up around 3% of GDP for better uses of money rather than just fixing up people.

Obviously, the devil is in the details, but the potential impact is so massive that it should be deeply studied.
by Terr_ | 2025-09-26 21:40:58+00:00
That's actually comparing two collectives:

1. A collective where there is a belief (however slow or stodgy) in the consistent application of known rules.

2. A collective where the only real rule is to make the cult leader happy even if it means a forest of contradictions and rewriting history.

While (2) can easily change on a whim... it's not your whim.

Which leads us to the practical question: Which collective do you think you and your community could best fight against when it starts hurting you? I think a majority of the time I'd rather be opposed to (1).
by abnercoimbre | 2025-09-26 21:41:04+00:00
I'm gradually switching our in-person community to Revolt [0] because we want to self-host and own the data. (Discord offers extreme convenience, but it's a black-box for-profit platform.)

We don't want casual discourse to be indexed to the public. Instead we'll host a wiki system soon that bubbles up technical chatter into worthy articles.

Is that a reasonable compromise?

[0] https://revolt.handmadecities.com
by lblume | 2025-09-26 21:41:22+00:00
> It's not something that happens randomly, people choose to.

In Bayesian analysis, probability does not refer to the long-term frequency but instead to the subjective credence given to the event. Otherwise the probability of any one-off event would be undefinable. Therefore it follows that you need to have a prior over possible hypothesis in order to update your beliefs systematically according to the laws of probability theory. If it were known that Hikaru had cheated in the past, but typically does not, we might use a different prior (e.g. a Laplacian prior in this case); if we knew cheating to be dependent on some other measurable variable (e.g. the emotional state of the player), we would incorporate this into our evidence.
by steveklabnik | 2025-09-26 21:41:37+00:00
You're welcome, yeah then that's a lot easier.

> Am I correct to assume then that we would not require our own app view?

Well, given that you have built a platform, and you then want to interact with the atproto eocsystem, that means you'd be making your platform an appview, in a sense. An appview is just a service that reads the underlying data from the network and does something useful with it.
by nenenejej | 2025-09-26 21:42:21+00:00
On many forums. Cough reddit. You can barely say anything slightly spicy without a warning/ban so people are constantly talking in riddles to say more sinister stuff especially if there is implication of encouraging direct action. This is like that. At 30khz it says "get your jammers out!"

To a dog the whistle is explicit. (Not using dog as a derogatory or complimentary term here... more the fact the dog can hear the high frequency)
by godshatter | 2025-09-26 21:43:33+00:00
These files are worth their weight in gold if they actually do have compromising data on many different people in power. Lists of people who flew on Epstein's plane is hardly incriminating from a legal perspective, it's only valuable for cancelling others. It's the suspected pictures and videos of the rich and powerful in compromising positions with underage girls that we'll never see, assuming they do exist. Unless someone doesn't play ball, that is.

Yes, I'm a cynic, but if there wasn't much there they wouldn't be playing so many games.
by steveklabnik | 2025-09-26 21:43:42+00:00
Depending on what exactly you mean, this isn't the case. For example, running your own PDS is very cheap.

If you want to fully run a full copy of everything yourself, it's going to be more expensive, sure, but those costs have gone down dramatically over time. The most expensive bit is running $34/month: https://whtwnd.com/bnewbold.net/3lo7a2a4qxg2l
by bruce343434 | 2025-09-26 21:43:59+00:00
Hard. You need reverse DNS, which means you need to have a machine with a stable ip, and convince the network operator to set up a PTR reverse DNS record for you. This part is fairly easy if you are renting a VPS with a fixed ipv4 address, just ask the rental company.

You also need to set up mx, dkim, dmarc, spf, and a bunch of other stupid DNS records related to dane/tlsa/mta-sts that aim to put bandaids on top of bandaids on top of what is the shitty unsecured and unencrypted email protocol.

Then you need to fight with a bunch of arcane 90s Unix programs to actually not be gaping security holes that will allow people to relay off of your MTA and get you blacklisted worldwide. You need to fight with a milter and acme client to finally get the TLS stuff right too. Then there's the need to set up a spam filter for your inbox (probably).
by glowcoil | 2025-09-26 21:44:14+00:00
I'm sorry, but even if I am maximally charitable and assume that everything you are saying is meaningful and makes sense, it still has essentially nothing to do with the original article. The original article is about imposing constraints on the weights of a neural network, during training, so that they lie on a particular manifold inside the overall weight space. The "modular" part is about being able to specify these constraints separately for individual layers or modules of a network and then compose them together into a meaningful constraint for the global network.

You are talking about latent space during inference, not weight space during training, and you are talking about interleaving tokens with random Gaussian tokens, not constraining values to lie on a manifold within a larger space. Whether or not the thing you are describing is meaningful or useful, it is basically unrelated to the original article, and you are not using the term "modular manifold" to refer to the same thing.
by int_19h | 2025-09-26 21:44:59+00:00
And yet they always knew that ad-supported business is going mean enshittification. Kagi website has this epic quote from the original Google paper to drive the point home:

"The goals of the advertising business model do not always correspond to providing quality search to users... advertising funded search engines will be inherently biased towards the advertisers and away from the needs of the consumers."

— The Anatomy of a Large-Scale Hypertextual Web Search Engine, Sergey Brin and Lawrence Page, 1998
by Sohcahtoa82 | 2025-09-26 21:45:11+00:00
Private sector knows how to keep costs down, but that's because the incentive is to enrich the people at the top. This eventually comes at the cost of quality.

Public sector sometimes acts like they have infinite money. They'll just print more and drive up inflation while paying lip service to voters and pretending to care during election season.

There's also the massive corruption in the public sector. All the work is actually done by the private sector, but the contract isn't decided on who will delivery the best quality at the lowest cost, no no no. You'd have to be naive to believe that. The actual decision is based on who will kick back the most money (labeled as "campaign contributions") to the people who are in charge of making the decision.

So really, both suck. Private sector will give you a shitty product at a great price. Public section will give you a terrible price with the quality being a complete gamble.
by ben_w | 2025-09-26 21:45:20+00:00
> You can't get a picture of a left hand writing or a clock showing something else then 10:10 from AI.

You as a human have a list of cognitive biases so long you'd get bored reading it.

I'd call current ML "stupid" for different reasons*, but not this kind of thing: We spot AI's failures easy enough, but only because their failures are different than our own failures.

Well, sometimes different. Loooooots of humans parrot lines from whatever culture surrounds them, don't seem to notice they're doing it.

And even then, you're limiting yourself to one subset of what it means to think; and AI demonstrably do produce novel results outside training set; and while I'm aware it may be a superficial similarity, what so-called "reasoning models" produce in their so-called "chain-of-thought transcripts" seems a lot like my own introspection, so you aren't going to convince anyone just by listing "introspection" as if that's an actual answer.

* training example inefficiency
by avar | 2025-09-26 21:45:33+00:00
Your site (if this is your YouTube video) indicates Bosch compatibility with gen 2 motors[A]. I'm curious as to:

1. It says "Protocol implemented = no", but "Powers bike = yes", you can power a Bosch gen 2 motor without implementing the protocol, presumably this is referring to the CAN wire on the battery.

2. Your battery kit is 316 EUR without cells, and your BMS spare part is 99 EUR. If you can talk to Bosch motors then presumably this is where that special sauce is.

I for one might be interested in just something that serves to talk with the Bosch motor, and allows one to provide any arbitrary 36v source, do you or anyone else make/sell such a thing?

E.g. for range extending a cargo bike I'd find the cost/weight ratio of a beefy ~1220 Wh AGM 12v car battery coupled with a boost converter much more appealing than something that emulates the form factor of a ~500 Wh Bosch battery with Li-Ion 18650 cells, the range more than makes up for the extra weight.

A. https://infinite-battery.com/pages/compatibility-guide-of-th...
by int_19h | 2025-09-26 21:47:49+00:00
I think the fact that Valve is still a private corp is a big part of it, yes. It allows for continued ownership by people who have meaningful beliefs of what it means to do something the Right Way and who run the business accordingly. This isn't to say that private corps are always "good" like that - the temptation to go for easy pickings and enshittify is always there. But some owners at least won't do that for various reasons, while a public company seems to always end up chasing short-term profits above everything else.
by barnir | 2025-09-26 21:47:58+00:00
When an exit survey's "Other" option lacks a textbox, it’s not a bug—it’s a feature designed to filter out inconvenient truths.

Companies do this to curate a narrative. They'll accept structured data like "It’s too expensive" because it fits a spreadsheet. "Other" is where you find the real, messy feedback: the ghosted support tickets, the persistent crashes. It’s the data they’d rather not have.

Blocking this input isn't lazy design; it’s a strategic choice to prioritize clean data over real data. It signals that the company only wants feedback fitting its script, which is all the justification needed to leave. If you’re too scared to hear why I'm done, you don’t deserve my business.

This is a symptom of a broken feedback loop—a strategy of hiding problems, not fixing them. If you build products, check your exit survey. If "Other" is a dead end, you’ve told your most insightful users their feedback is worthless. Don't be surprised when they agree.
by sshine | 2025-09-26 21:48:20+00:00
> rework their tools so they discard/add relevant context on the fly

That may be the foundation for an innovation step in model providers. But you can achieve a poor man’s simulation if you can determine, in retrospect, when a context was at peak for taking turns, and when it got too rigid, or too many tokens were spent, and then simply replay the context up until that point.

I don’t know if evaluating when a context is worth duplicating is a thing; it’s not deterministic, and it depends on enforcing a certain workflow.
by jonahx | 2025-09-26 21:48:24+00:00
I don't know -- these are fair points.

I do know that when I was using GH regularly on a team where a number of people wrote clean history, the problems you mentioned didn't come up, not that I can recall. So for the 90% case, let's say, you can do clean history on GH and get the majority of its benefits. But yes, I'm sure it's flawed especially in workflows where those types of problem arise often.
by throwaway150 | 2025-09-26 21:48:26+00:00
All my immigrant friends are skilled workers who earn more than an average citizen, contribute more taxes and pay exorbitant fees for visa, health surcharge and NIC. I am sure there are immigrants in low paying jobs too. Perhaps we need to talk about different types of immigrants rather than clubbing them all into one "immigrant" category and reinforcing the same tired tropes about immigrants.
by Veserv | 2025-09-26 21:48:42+00:00
I think you are just agreeing with me?

You are basically saying: “It is slow because of all these system/protocol decisions that mismatch what you need to get high performance out of the primitives.”

Which is my point. They are leaving, by my estimation, 10-20x performance on the floor due to external factors. They might be “fast given that they are bottlenecked by low performance systems”, which is good as their piece is not the bottleneck, but they are not objectively “fast” as the primitives can be configured to solve a substantially similar problem dramatically faster if integrated correctly.
by viraptor | 2025-09-26 21:49:56+00:00
Because it's general and public. Then again, how would you tell the difference apart from the description? For example this https://www.npmjs.com/package/@celo/encrypted-backup is just a few lines away from a ransomware system. This https://www.npmjs.com/package/web-vuln-scanner can be both offensive and defensive. It's mostly how you use them, so there's little chance for any system to detect with certainty went no false positives.
by doctorpangloss | 2025-09-26 21:49:56+00:00
This is not meant as a criticism at all, I like Bevy. Are you familiar with the Mr. Beast PowerPoint that said:

> Your goal here is to make the best YOUTUBE videos possible. That’s the number one goal of this production company. It’s not to make the best produced videos. Not to make the funniest videos. Not to make the best looking videos. Not the highest quality videos.. It’s to make the best YOUTUBE videos possible.

When I glance at the Bevy discussion link you shared, my reaction is:

> Your goal here is to make the best GITHUB OPEN SOURCE game engine possible. It's not to make the most performant game engine. Not to make the game engine that powers the best games. Not to make the best looking graphics in a game engine. Not the highest quality game engine or game editing experience. It's to make the best GITHUB OPEN SOURCE game engine.
by int_19h | 2025-09-26 21:50:08+00:00
If shareholders didn't want it, then they wouldn't appoint (or keep in place) the top management that repeatedly and consistently makes those choices.

Look at the recent Microsoft layoffs. They purged the company of so much tech talent, and tanked morale for basically all the remaining workers. From any kind of long term perspective this is madness. Yet they were rewarded for it by the stock market.
by vintermann | 2025-09-26 21:50:57+00:00
I think what they feel is that they've had some experience, and they have an unshakeable feeling that it's deeply significant.

As Philip K. Dick said, of his own "laser pointer" incident: "If you were me, and had this happen to you, I'm sure you wouldn't be able to leave it alone."

Remember, that even for us healthy people, there's ultimately no objective answer to what's important or not. There may be more or less objective conditional answers (e.g. if it's important that I don't starve to death tomorrow, it's important that I eat), but those already assumes something is important. It has to bottom out in something that's important for its own sake, something whose importance can't be justified from something else's importance.

I think the "gangstalking" people have had experiences that their mind does not allow them to dismiss. They may be capable of accepting different explanations for why the experience mattered - but they can't accept that it isn't important, because it's somehow a root important thing for them.

In that very same Philip K. Dick essay, he more or less apologized for this, and listed up various different explanations that he'd tried. But he was lucky enough that his "ultimate importance" experience was basically pleasant. The genuinely paranoid people are not so lucky.
by bonoboTP | 2025-09-26 21:52:30+00:00
> I'm not sure what this means.

I'm trying to imagine how a situation analogous to Gab vs Mastodon may arise and play out here, or if the setup is different. Like would they just live side by side, with various frontend aggregators that present one or the other world to you?

> Cryptography, basically.

How do I, the user with a browser verify that? Do I need to use a different client program, or a browser extension? The aggregator site can show me a green checkmark or whatever, but that's just a claim by the aggregator. Am I expected to fire up a terminal window to compute signature validations to check if Alice really put a like on that comment?
by tpmoney | 2025-09-26 21:52:51+00:00
Sure it’s the same in that I’m telling you that you need to give up your existing lifestyle for a different one to get what you want.

But I would suggest that installing a new OS is vastly less complicated, less expensive, less disruptive and less fraught with life threatening peril than immigrating to an entirely new country and continent. And I’d wager you’re vastly more likely to get the results you want changing your OS than you are voting for a politician when you’re unhappy with the current state of things.
by dylan604 | 2025-09-26 21:52:58+00:00
Nah, tenants will sign just to move in, and forget about this clause. Just like any tenant that smokes weed disregards no drug clauses. Tenants are going to do what tenants do. Unless you're doing routine walk throughs looking at every single thing in the place that could use a battery, then you'll never know. It's a useless "regulation", and we have plenty of those in the world already.
by kypro | 2025-09-26 21:53:11+00:00
The British government advises me against any travel to Afghanistan because Afghans might try to kill me. This is a country that fought a civil war in the pursuit of suppressing women's rights after all.

> Also likely that the immigrants’ culture would differ from that of their native country.

https://www.politifact.com/factchecks/2016/jun/16/donald-tru...

I hope you're right and we're getting that 1% of moderate Afghans who just believe that homosexuality is wrong, not that it should be punishable by death.

Could you do me a favour and ask yourself if you would take your wife and children on holiday to Afghanistan? Is the answer yes or no? If it's no, please explain why I should therefore be okay with my government allow undocumented Afghan men live in the hotel by my family? At a minimum should we not be vetting these people?
by F3nd0 | 2025-09-26 21:54:10+00:00
I think it’s ultimately up to your instance whether it keeps your posts indefinitely or not. I think most do, but others might delete posts after a period of time, in which case they should mention this to their users (on their ‘About’ page, for example). Personally, I can’t say I’ve encountered this problem, but then again I’ve mostly used Pleroma (which is a different program implementing the ActivityPub protocol, like Mastodon).
by vel0city | 2025-09-26 21:54:23+00:00
A number of agentic coding tools do this. Upon an initial request for a larger set of actions, it will write a markdown file with its "thoughts" on its plan to do something, and keep notes as it goes. They'll then automatically compact their contexts and re-read their notes to keep "focused" while still having a bit of insight on what it did previously and what the original ask was.
by kajaktum | 2025-09-26 21:54:29+00:00
All this is true but mailing lists UI sucks. Please tell me how you navigate a tree of messages? It is not easy to tell who is this responding to and who responds to it. Yes, it can be figured out but why does the tree change as I navigate it? [0]

[0] https://lkml.org/lkml/2024/1/7/103
by gruez | 2025-09-26 21:54:38+00:00
Yeah, some parts of the code that obviously don't make any sense:

https://github.com/Lorenzo-Coslado/fingerprinter-js/blob/f34...

Why would the user agent of a javascript execution environment ever be curl?

https://github.com/Lorenzo-Coslado/fingerprinter-js/blob/f34...

self explanatory

https://github.com/Lorenzo-Coslado/fingerprinter-js/blob/f34...

variable declared but not used anywhere.
by observationist | 2025-09-26 21:56:21+00:00
https://github.com/GAIR-NLP/ASI-Arch

This is being done, with great results so far. As models get better, architecture search and creation and refinment improves, driving a reinforcement loop. At some point in the near future the big labs will likely start seeing significant returns from methods like this, translating into better and faster AI for consumers.