MurphyA/hacker-news huggingface dataset:
by gcr | 2025-09-08 22:18:07+00:00
Giving an author 90 minutes of lead time before public negative press doesn’t count as responsible disclosure.

Especially when that press doesn’t mention the specific security vulnerabilities you’re reporting to them. Here is a link to the blog post which accompanied the OP’s text: https://micahflee.com/unfortunately-the-iceblock-app-is-acti...

Is it reasonable to expect a maintainer to assume in good faith when the report is this unactionable?
by twixfel | 2025-09-08 22:18:07+00:00
Where did I say everyone who disagrees with me is a fascist? You are just attacking a strawman, it's much easier to assume that I am some lunatic who thinks anyone even 1cm to the right of me is literally Hitler, than that I'm just a normal person who thinks Twitter is shit and full of some of the worst people on the planet and owned by one of the worst Americans in history (judging by death toll from cuts to USAID).

But yes Twitter is full of the utter scum of the Earth and no I don't want to have to block them all. Thanks, no thanks.
by codethief | 2025-09-08 22:18:16+00:00
Couldn't you re-register your old phone temporarily, just for the purpose of taking the backup¹, and later re-register your current phone? (In fact, once your old phone is registered, turn on airplane mode, and you should be able to re-register your current phone right away without affecting your old phone and the backup you're making there.)

Alternatively, would it be an option to get a throwaway number you could register your old phone under?

Finally, once you have the backup, use something like https://github.com/bepaald/signalbackup-tools to merge your old phone's backup with your current phone's backup, and then reinstall Signal on your current phone from that merged backup. (Disclaimer: I have never actually done this before but signalbackup-tools has been around for a long time and the developer seems to be very responsive.)

¹) I'm talking about the traditional way of backing up Signal conversation data to an encrypted archive here, not the feature discussed in the OP.
by sfpotter | 2025-09-08 22:18:34+00:00
The purpose of floating point numbers it to provide a reliable, accurate, and precise implementation of fixed-precision arithmetic that is useful for scientific calculations and which has a large dynamic range, which is also capable of handling exceptional states (1/0, 0/0, overflow/underflow, etc) in a logical and predictable manner. In this sense, IEEE754 provides a careful and precise specification which has been implemented consistently on virtually every personal computer in use today.

LLMs are machine learning models used to encode and decode text or other-like data such that it is possible to efficiently do statistical estimation of long sequences of tokens in response to queries or other input. It is obvious that the behavior of LLMs is neither consistent nor standardized (and it's unclear whether this is even desirable---in the case of floating-point arithmetic, it certainly is). Because of the statistical nature of machine learning in general, it's also unclear to what extent any sort of guarantee could be made on the likelihoods of certain responses. So I am not sure it is possible to standardize and specify them along the lines of IEEE754.

The fact that a forward pass on a neural network is "just deterministic matmul" is not really relevant.
by jackthetab | 2025-09-08 22:18:40+00:00
Thirteen minutes is an "exceedingly long video"?! Man, I thought I was jaded complaining about 20 minute videos! :-)

I want to know is what are the connected to? A laptop? A AS400? An old Cray they have lying around? I'd think doing the demo while walking would have been de riguer.

Anyway, tres cool!
by toast0 | 2025-09-08 22:18:42+00:00
It's not impossible, but it'd be a pain in the butt. If you occasionally use some avx-512 infrequently, no big deal (but also not a big deal to just not use it). But if you use it a lot, all of a sudden your core count shrinks; you might rather run on all cores with avx2. You might even prefer to run avx-512 for cores that can and avx2 for those that can't ... but you need to be able to gather information on what cores support what, and pin your threads so they don't move. If you pull in a library, who knows what they do... lots of libraries assume they can call cpuid at load time and adjust... but now you need that per-thread.

That seems like a lot of change for OS, application, etc. If you run commercial applications, maybe they don't update unless you pay them for an upgrade, and that's a pain, etc.
by taylodl | 2025-09-08 22:18:49+00:00
My colleague disagrees with me on that point too! It's a good chat to have from time-to-time over a beer. To your point, not all of this is handled in architecture, nor should it be. I think we need to elevate our game for AI to be truly beneficial:

- SysML: formally capture requirements

- BPMN: formally capture and model business processes

- ArchiMate: formally capture and model architecture

- UML: formally capture and model design

AI can help with the above tasks, of course, but the point is that once you have these things and you've ensured your requirements have been captured in these models, again AI can help, then you hand the whole thing over to an AI code generator which now has enough informational context to generate good code.

Admittedly this is a pipe dream at the moment, and I seriously doubt we'll get there over the next 5 years, but the next ten years? Fifteen? Things can really start changing. Meanwhile, I see AI getting better and better at generating these models. Heck, we could start low tech with modeling wizards - like we've had for the past 30 years for code and be way ahead of where we are now.
by freejazz | 2025-09-08 22:19:10+00:00
1. That presupposes the problem is bad faith referrals or that pedos aren't sufficiently aware they can get popped on FB. I don't think either are likely true.

2. I don't think the scalability issues are related to the size of the social network, so I don't think this is ever a relevant question, at least from my perspective. My point is that it would not be commercially reasonable for Meta to actually employ the number of people required to run down, verify and then forward reports.
by jansper39 | 2025-09-08 22:19:36+00:00
For the most part, cars are being designed to meet the required safety regulations in a way that constrains what they are able to build. Gone are more angular designs because sharp angles are all points which people get caught/trapped by - definitely no flip up headlights either for the same reason. Larger A pillar supports to provide roll over protection and door frame rigidity. Larger fronts to provide better small overlap collision deference.

All together it results in all cars kind of looking the same. Shame in a way because my favourite looking car of all time is the Golf Mk2, very angular and boxy but it wouldn't have been made now.
by elzbardico | 2025-09-08 22:19:44+00:00
Frankly, Israel extremist religious-right immoral actions are detrimental to all the Jewish people. I am sad to see so many of my Jewish friend falling in the trap built by those crazy fanatics.

This is not what you are, my friends! You don't owe allegiance to those monsters, we stand with you, but you need to find your courage to dissociate yourself from those killers!
by biosboiii | 2025-09-08 22:20:27+00:00
The most interesting takeaway from this project and the Mac touchpad actually measuring it's pressure in grams[1] is how Apple seems to prioritise it's ability to deliver new features in later software releases rather than their BOM.

I work in the automotive industry, and for volume products the price-cutting is really brutal. If you can save a cent somewhere you will, because that cent multiplied by 8 million cars a year is a sizeable amount of money.

This seems to be generally true for most OEMs of hardware products, but not for Apple. Apple could have cut costs by just using a magnet and a reed switch/hall effect sensor, because it is not using the exact angle of the screen anyway (afaik?), but they chose not to.

They could have implemented their "3d Touch" by using a simpler circuit which just indicates if the press was really hard or soft. But again they chose not too.

And they sell over 20 million Macs per year, so they really sacrifice a sizeable amount of profit

[1] https://news.ycombinator.com/item?id=44635808
by newpavlov | 2025-09-08 22:20:49+00:00
For absolute jumps you don't need extra logic, since CPUs could declare the last page always unmapped, so such jumps would always result in a page fault (similarly to the null page on most systems).

For relative non-immediate jumps the added logic is extremely simple (hardware exception on NaN) and should not (AFAIK) hinder performance of jumps in any way.
by icameron | 2025-09-08 22:21:26+00:00
"According to data from Nielsen, Fox News — from the period spanning June 20 through Sept. 1 — finished as the no. 1 network in all of broadcast television during the primetime hours of 8-11 PM. During those hours, Fox News averaged 2.43 million total nightly viewers in primetime — topping ABC at 2.38 million, NBC at 2.21 million, and CBS at 2.03 million. It is the second time in the network’s history they accomplished that feat — with the other coming in the summer of 2020."

Whlie it sounds accurate that maybe 1-2% of the population watches it live, it is also the most highly rated and influencing "news" outlet in the US. Their reach is far deeper than 1-2%. It gets retweeted, talked about, and trickles down. It sure seems like at least 1/3rd of the population has a FOX brainworm infection. I've seen in on 24/7 in hotels and some sport bars or restaurants too.
Ask HN: Has Claude Code quality gotten worse?
by just_human | 2025-09-08 22:21:38+00:00
I'm a daily user of Claude Code and love it. However, the quality of responses (using Opus 4.1) seems to have noticeably degraded over the last week.

Unfortunately, I don't have a good way to objectively measure quality aside from "it just feels like it's gotten worse" so thought I'd ask HN if others have noticed a change.
by sfn42 | 2025-09-08 22:21:39+00:00
> Falling into lava seventeen times because you keep missing the same jump is not an experience of smooth movement with player affordances.

I would describe that as a skill issue. And I think Silksong feels great. I'm enjoying the crap out of it. Regarding coyote time I haven't noticed it myself but what you describe just seems like the margins are thin. You wish they were wider ie you wish the game was easier but there's lots of people who enjoy it for what it is.

To me it's an amazing game, absolutely incredible.
by kypro | 2025-09-08 22:21:54+00:00
> The UK has a lower tax regime than most equivalent nations. If we wanted a better NHS we could just collect similar tax rates to that of Germany or other western nations.

This is largely untrue today since the Conservatives have significantly increased taxes over the last decade. As it stands I think Germany only taxes around 1-2% more of GDP than us.

The primary difference between Germany and the UK in terms of public service funding is that the UK funds most of it's healthcare via taxation where as Germany operates a duel model which means healthcare isn't funded so much from taxation, meaning they have more money for other things.

Additionally, Germany has a much higher per-capita GDP which means they can afford significantly better public services even if they tax an equivalent share of GDP.

Finally what Germany funds with additional taxation the UK more than makes up for by running much larger deficits. The issue isn't that the UK government isn't spending enough as a share of GDP.
by lenkite | 2025-09-08 22:22:11+00:00
> but if you, literally anyone reading this, can stop using Google search on every device you own in the next 5 minutes,

No you can't do this in 5 mins across all your devices. Not unless you are running some software program to achieve this which will override a tonne of defaults and hidden settings. And some devices will always use Google search.

Maybe if your only device is a barebones Linux PC.
by bananaboy | 2025-09-08 22:22:12+00:00
I run openwrt on an ancient Netgear WNDR3700 which is probably 15 years old by now. I can get around 900Mbps on my gigabit connection (wired). We only have two adults in our home using the Internet (for now until our two kids are older!) and it’s been totally fine for us. openwrt is a great way breath extra life into older routers. A lot of homes don’t really need anything fancy or recent.
by homefree | 2025-09-08 22:22:17+00:00
The configurator is interesting and something I haven't heard of before!

It's a double edged sword because the amount of time I spend online (X) has been directly responsible for the most valuable opportunities and generally knowing enough of what's going on to leverage that for big financial and career returns. It was pretty easy to drop all non-X social media though (all meta) and just avoid short term video generally.

I've been tempted to try the lightphone 3 though - theory being if I have a separate hardware device that might be enough to help because I can leave the iPhone at home. In theory the Apple Watch could do this, but in practice it hasn't.

Another thing I think can work is committing to avoid using it for one day a week - you get a lot of the benefits, it's more doable, and the downside is minimized.
by tester756 | 2025-09-08 22:22:35+00:00
and yet there's more Java in HFT than C#

And don't get me wrong, I'm C# fanboi that'd never touch Java, but JVM itself is impressive as hell,

so even despite not having (yet) value types/structs, Java is still very strong due to JVM (the implementation). Valhalla should push it even further.
by cousin_it | 2025-09-08 22:22:42+00:00
I think Hollow Knight and Silksong are mostly special for their art style, the movement feel is pretty average.

Among 2D platformers in general, I think the medal for best movement feel goes to the Fancy Pants Adventure series. (You can still play it online on sites that have Flash replacements, start with the 4th game because it has everything.) But that's a deliberately easy game, you just run through the levels and have fun.

Among difficult precision platformers, I'd say the N/N+/N++ series has the best movement. (The first game is also still playable online.) Be careful, this one is like a drug, it has a huge number of levels and it's really hard to stop playing.
by lycopodiopsida | 2025-09-08 22:22:49+00:00
There are at least two of us :) I like exploration and I like bloodborne, elden ring, dark souls 3, demon’s souls, dark souls - in that order. Thus, I don’t mind difficult bosses and obscure storytelling.

I’ve clocked 10h in HK but I can’t get over these fuzzy hitboxes (I say it as souls veteran!), shallow fighting system and difficult platforming.

It is ok, just not a game for me.
by ChadNauseam | 2025-09-08 22:22:51+00:00
Same. The first thing I thought was "wait a second, that isn't dependency hell".

The second thing is that their version of dependency hell - having lots of dependencies introducing lots of bugs that you would not have written - is not my experience. 99% of the time, my bugs are in my own code, lol. Maybe once you become a much better programmer than me, you stop writing bugs in your own code and instead start having to deal with bugs in the PNG parsing library you depend on or something, and at that point writing your own PNG parsing library becomes a good use of your time. But I'm certainly not at that point.

I've had to fix bugs in dependencies of course. Here is one I fixed yesterday [0]. But it's much closer to the exception than the rule.

[0]: https://github.com/sanity/pav.rs/pull/4
by johnnyanmac | 2025-09-08 22:22:56+00:00
> going from "Ugh, sales people are all snakeoil salesmen" to "I can't believe what they do is even possible, much less regularly done" over about 20 years.

I mean, it still sounds like snake oil salesmen. It's just that that's what it takes these days to even get noticed (let alone make a pitch). rubbing hands trumps a quality product 99% of the time.
by allenrb | 2025-09-08 22:23:05+00:00
It’s this. Even when an effort fails, there are no consequences for the politicians behind it. Nobody gets voted out of office. Nobody loses power. All they need to do is wait a year or two or five and try again. Eventual success is almost guaranteed.

Trust only software and systems you control and even then, approach with a hefty amount of side-eye.
by avianlyric | 2025-09-08 22:23:08+00:00
> What, you mean in case the parts of two machines accidentally fall out and fall back in to the other machine on the production line or during shipping?

No, in case the wrong parts end up in the final machine during assembly. A machines exact components are determined ahead of time, possibly before the individual parts even arrive at the assembly line. Cryptographically binding them together makes it impossible for tampering or mistakes during assembly process to result in unexpected parts ending up in a machine.

How do think a company like Apple protects their supply chain against malicious external actors, or just suppliers taking shortcuts to make a quick buck hoping nobody will notice that what they provided and what they promised they would provide don’t actually line up?

> Of course it's to prevent unauthorised repairs. There's no feasible way for the parts to be physically swapped other than someone intentionally doing a repair.

You don’t honestly think that a company like Apple simply trusts their suppliers and assembly contractors, and doesn’t take steps to make sure every individual component in their devices is exactly the component they specified, and absolutely nothing else?
by latexr | 2025-09-08 22:23:08+00:00
> The point is that we should seek more robust systemic change than petitioning business owners to be better people against their best interests (finance, power).

No, that is not the point being raised by the majority of the “fiduciary duty” defenders. But even if we concede that’s what some are arguing for, that is such a bizarre stance to take: “we want the same thing, and but I’ll criticise you and shill in defense of the CEO because the way you’re doing it isn’t extreme enough”. That is absurd and it makes no sense to think the person criticising the CEO doesn’t also realise that more robust systemic change is desired and necessary. But you can’t do that all at once.
by fluoridation | 2025-09-08 22:23:12+00:00
I'm not ignoring it, I simply don't care. I recognize that misinformation is going to be spread and act accordingly, by fact-checking and suspending judgement. What you want is for a government entity to decide for you which statements are "true" and which are "false" and to be shown only the "true" ones. It's idiotic. Even if the government has your best interest in mind (which it doesn't; at any given time the ruling party is self-interested), outsourcing your critical thinking faculties is not something you should want.
by wpollock | 2025-09-08 22:23:22+00:00
The Boost library went the audit route, but AFAIK, few other repositories (or libraries) have done that. I believe it's a cost and lack of manpower that prevents that.

You may not have the time to audit dozens/hundreds of dependencies pulled into your projects, but there's still something you can do. For Rust/Cargo, you can run tools that check every dependency against a vulnerability list. As you have source of dependencies, you can also run static code analyzers/auditors to scan for code smells, lack of unit tests, etc.

For Java, I use the OWASP plug-in of Maven to check dependencies for security vulnerabilities. I bet other languages' package managers/build tools have similar plug-ins.

Some auditing is better than none at all. You shouldn't do no checking just because you can't full auditing!
by etothepii | 2025-09-08 22:23:24+00:00
I spent a lot of time last year replicating every valid Excel number format. I've really struggled to find good documentation on the excel format when you really get into the weeds.

The use of namespaces is also incredibly annoying in so far as I can tell in every xml library I can find they really aren't well supported for that "human" readable component.

When you crack open the file it feels like you are going to be able to find everything you need with an xpath like //w:t but none of the xml parsers I've found cope well with the namespaces.
by libraryofbabel | 2025-09-08 22:23:29+00:00
This is a review of Katabasis, R.F. Kuang's new book. I wonder if there are any fans of Kuang here who can convince me to give her another go; I did not much like Babel, and only got 20% of the way into it. (This despite being a recovering humanities scholar who still wears dark-academiaish tweed skirts to her programming job.) From what I remember, the characters were a bit flat, the plot didn't draw me in, and the writing style was a little formulaic. I can't help compare with Donna Tartt's The Secret History, which I absolutely adored.
by synapsomorphy | 2025-09-08 22:23:50+00:00
The accuracy is going to be the real make or break for this. In a paper from 2018 they reported 92% word accuracy [1]. That's a lifetime ago for ML but they were also using five facial electrodes where now it looks confined to around the ears. If the accuracy was great today they would report it. In actual use I can see even 99% being pretty annoying and 95% being almost unusable (for people who can speak normally).

[1] https://www.media.mit.edu/publications/alterego-IUI/
by sneak | 2025-09-08 22:23:51+00:00
If Signal is offering pay-for-media-storage, it would be nice to be able to pay to send full-resolution media. I’m a photographer and every image sent via Signal that isn’t zipped first is TOTALLY DESTROYED by silent recompression.

https://sneak.berlin/20210425/signal-is-wrecking-your-images...

Also, the donation spam in Signal doesn’t let me donate Mobilecoin from the wallet right inside Signal. What’s the point of having a payments feature if I can’t use it to pay you?

Please allow payments to Signal to be done in Signal’s native payment system.

I would love to subscribe to Signal in a privacy-preserving way.
by Joker_vD | 2025-09-08 22:23:59+00:00
sigh Just because it was not deliberately engineered to be prohitibively expensive to support does not mean that it can not be used to deliberately obstruct interoperability. It's really not that difficult a concept: if you want others to suffer, you can take a sad artifact of well-meant historical accidents, and say "welp, now it's a standard, you gotta support it!" There is nothing contradictory or conspirational.
by araes | 2025-09-08 22:24:11+00:00
Don't know what the author is talking about.

Assembly, Summer 2023: https://assembly.galleria.fi/kuvat/Assembly+Summer+2023/Perj...

Assembly, Summer 2024: https://assembly.galleria.fi/kuvat/ASSEMBLY+SUMMER+2024/PERJ...

Looks like plenty of attendance, lots of elementary through high school age attendees. Lots of families bringing their children. Site's got 1000's of pictures of evidence.

Maybe the scene has change in a way they don't especially want to attend over the years, yet it does not seem to be "dying". This post on LinkedIn claims Summer 2023 had 25,000 attendees. Seems healthy.

https://www.linkedin.com/posts/lassinummi_assembly-summer-20...

Minor edit: Also, still have all the results and competitions each year. Demo, 1k Intro, 4k Intro, Short Film, Dance Music, Freestyle Graphics, ect...

Results, Summer 2023: https://assembly.org/en/events/summer23/posts/assembly-summe...

Results, Summer 2024: https://assembly.org/en/articles/assembly-summer-2024-compet...