MurphyA/hacker-news huggingface dataset:
by mihaaly | 2025-09-16 21:35:04+00:00
In my experience organizations providing services to me for money nowadays ususally just send mail instructing me calling a central number where I can be in the 15th place of the call queue. In case they call they do whenever they please, which is the most inopportune occasion in most cases (in the loo, in transit, in a conversation, basically busy with life!). In best case leaving a message mumbling quickly in a sound quality sounding like sitting in a bucket in ungoverned Afghanistan, with the suspected sense of calling them back on the central number (incomprehensible).

Getting a procative call for my benefit would make me very suspicious about the authenticity of that call!
by paxys | 2025-09-16 21:35:31+00:00
Compare it to devices with similar form factors or use cases sold by competitors:

- Snapchat - has been trying for a decade and has sold ~220K Spectacles.

- Amazon Echo Frames - Reuters estimated less than 10,000 units sold.

- Humane AI Pin - the less said about it the better.

- Google Glass - neat but way ahead of its time, and barely made it to consumers before being quickly discontinued.

- Hololens/Magic Leap - both duds.

- Lengthy list of startups with smart glasses and other wearables that have gained no traction.

Meta glasses are noteworthy because there's finally a company making an AR wearable catch on among a mainstream audience.
by boxerab | 2025-09-16 21:35:35+00:00
> Sure. This one hasn’t.

That is exactly why we need to apply the precautionary principle for new drugs like this one.

> That said, I frankly think people should be free to vaccinate as they please

Never said they shouldn't be. Just need to be skeptical of organizations like GAVI and their PR, as they have a huge conflict of interest in promoting and profiting from these drugs.
by toyg | 2025-09-16 21:35:49+00:00
I think Jonathan was disappointed because he honestly thought he was among like-minded friends, people he'd known and worked with for so long; he clearly didn't expect to be rebuffed so hard.

I've been in similar situations, and it's hard to stay professional in those cases. The feeling of personal betrayal is significant. Add to this that most old-school Linux hackers like him are often motivated by striving for social justice, and somewhat expect everyone who works with them to fundamentally wish the same things. Discovering that long-term collaborators actually wish to be regular techbros, must sting.
by tptacek | 2025-09-16 21:36:52+00:00
That is a problem, but beyond the philosophical problem (which I care a lot about) and the cryptographic problems (which I care a lot about), most of the reason DANE isn't taken seriously (is, in fact, a dead letter with the browsers, meaning it's a dead letter everywhere) are practical issues deploying it. Stipulate, very unrealistically, that a sizable portion of the most popular zones were signed (the opposite is true). Then:

You still have the problem where a substantial cohort of Internet users can't resolve DANE records. They're on Internet paths that include middleboxes that freak out when they see anything but simple UDP DNS records. You can't define that problem away.

So now you need to design a fallback for those users. Whatever that fallback is, you have to assume attackers will target it; that's the whole point of the exercise. What you end up with a system that decays to the natural security level of the WebPKI. From a threat model perspective, what you've really done is just add another CA to the system. Not better!

DANE advocates tried for years to work around this problem by factoring out the DNS from DANE, and stapling DANE records to TLS handshakes. Then someone asked, "well, what happens when attackers just strip that out of the handshake". These records are used to authenticate the handshake, so you can't just set "the handshake will be secure" as an axiom. Nobody had a good answer! The DANE advocates were left saying we'd be doing something like HPKP, where browsers would remember DANE-stapled hosts after first contact. The browser vendors said "lol no".

That's where things stand. The stapling thing was so bad that Geoff Huston --- a DNS/DNSSEC éminence grise --- wrote a long blog post asking (and more or less conceding) that it was time to stick a fork in the whole thing.
by davidscoville | 2025-09-16 21:37:22+00:00
I lost the original email—the attacker deleted all evidence and then cleared my trash (and yes I tried using the Google tool to find deleted emails, but the attacker cleared that too). The reason I have this email is because I forwarded this email on to phishing@google.com, before the attacker deleted everything. When I got control of my account, and removed the scammer recovery methods (he added a windows device—I don’t use windows, and a Brazil phone number), the email bounced back from phishing@google.com (apparently Google doesn’t accept that address). So what I have is the bounced-back copy.
by Fricken | 2025-09-16 21:37:29+00:00
Probably not.

Cruise was nixed by GM execs, whom I believe were looking for whatever excuse they could find to shut the operation down. They simply couldn't afford to stay in the game for the long haul. Cruise was under pressure to appear more capable than they were, and they took risks.

Waymo is distinguished in that it doesn't need to pander to nervous investors to keep getting money. The company is Sergei and Larry's baby. Google's founders will ensure that Waymo is patronized until it can stand on it's own.
by toast0 | 2025-09-16 21:38:01+00:00
> I'm afraid the latest spate of "recognizing the state of Palestine" is not, in fact, a sign of coming relief for the people there, but rather a spigot to relieve domestic pressure to engage in substantive actions (sanctions, pressuring the US and other suppliers of arms to engage in sanctions, let alone sending peacekeepers or no-fly zones).

I don't think recognition as a State would really change anything. If at least one of the permanent members of the UN Security Council will veto everything that comes up, the UN won't effectively intervene in the situation. Military intervention in such a case is unlikely, unless at least one permanent member is willing to join an intervention coalition. Looking at conflicts the US has been involved in, it usually lines up around the lines with US maybe with their usual friends vs Locals or Locals and Russia and friends. The only one I found where the pattern was when France started sending arms to Nicaragua while the US was supporting the other side [1]. Unless Russia or China wants to support the Palestinians militarily, or the US decides not to no longer support Israel militarily, there's not much chance of outside intervention here.

Given the outside countries can't effectively intervene, recognizing the state of Palestine at least sends a message, that maybe hopefully influences the US?

[1] https://www.csmonitor.com/1982/0715/071566.html
by thegrim33 | 2025-09-16 21:38:14+00:00
Looking at the official HN guidelines, it states that "Most stories about politics" is off-topic, and "If they'd cover it on TV news, it's probably off-topic".

Is the Isreal/Gaza debate not political, and not mainstream news? How does a story like this not directly violate those guidelines?

Furthermore, the guidelines state that stories should be what "good hackers" find "intellectually satisfying". A political debate thread about Isreal is what "good hackers" would find intellectually satisfying?

I just can not understand how a story such as this in any way remotely meets the established, official guidelines for what belongs here.

Considering these threads also, universally, just devolve in political flamewars / hate spreading. There's nothing constructive here. There's no debate. There's no opposing ideas/opinions allowed.
by IncreasePosts | 2025-09-16 21:38:25+00:00
Why shouldn't Hamas leadership be bombed wherever they may be? They're the leaders of a terrorist organization. The US takes out terrorists wherever they may be (or, works with local authorities to get them first). But, when local authorities are siding with the terrorists, we go in there and do it ourselves. October 7th was Israel's 9/11 - we went and got bin Laden in Pakistan, without dealing with the Pakistani government. Why shouldn't Israel do the same thing? I say - kill all the Hamas leadership, and leave the random Palestinian citizens alone.
by jedimind | 2025-09-16 21:38:39+00:00
so after trying to mislead people with outright lies and historical revisionism based on zionist fantasies, you are trying to "both sides" a livestream genocide and about a century of brutal zionist colonialism. That's your strategy.

>How can you try to swat away historical facts

The cognitive dissonance of Zionists needs to be studied in Universities across the world. You are straight up lying into people's faces and in the same breath projecting your own behavior on others "trying to 'swat away historical facts'". It's truly astonishing.
by neilv | 2025-09-16 21:39:02+00:00
> I have personally walked into places I was interested in working at and asked for an engineering manager. About 50% of the time, a manager comes out to meet me.

This is surprising to me. Unless you last tried this long enough ago that the manager said, "I like the cut of your jib, young man, you've got grit" in a transatlantic accent.
by flyinglizard | 2025-09-16 21:39:03+00:00
Does it seem plausible to you that during the years of the Syrian civil war, Russia's invasion of Ukraine, the Tigray war in Ethiopia, the war in South Sudan and countless others (conflicts which, in total, claimed the lives of millions), Israel would commit war crimes at a ratio of 2:1 against the entire world, combined?

In contrast, the number of deaths from both Israeli and Palestinian sides in the same time period was several hundreds.
by LorenPechtel | 2025-09-16 21:39:38+00:00
Immigration has nothing to do with it.

Measles is highly infectious, you need a very high percentage of the population immune in order to maintain herd immunity. So long as you have herd immunity the only source of infection is travel--but note that this works both ways. It's much more likely to be Americans catching it while traveling than immigrants bringing it. They at least used to trace the original case in such outbreaks, it was normally someone who had been abroad.

We saw the same thing with Covid--quarantine against Chinese people, while ignoring Americans returning from the very same places even when they said they had symptoms. (And irrelevant besides, the strain from Europe quickly dominated.)
by bluGill | 2025-09-16 21:39:51+00:00
CMake is not a great language, but great effort has been put into cleaning up how things should be done. However you can't just upgrade, someone needs to go through the effort of using all that new stuff. In almost all projects the build system is an after thought that developers touch as little as possible to make things work and so it builds cruft constantly.

You can do much better in CMake if you put some effort into cleaning it up - I have little hope anyone will do this though. We have a hard time getting developers to clean up messes in production code and that gets a lot more care and love.
by 8note | 2025-09-16 21:40:01+00:00
Russia is not at war with Europe, its at war with Ukraine.

Both the US and Russia are currently trying to influence the EU to do things that aren't what EU citizens want.

per the drunk signal text leak, Europe's shipping is being negatively impacted by the American Israel/Gaza stance, to the extent that the US has made up for it by bombing the Houthis.

...which says both that the US is an ongoing problem for europe, but that the relationship isnt nearly so shaky as it seems. Trump is getting US strategic goals in Europe, to make Europe pay for anti-Russia preparedness, while the US focuses on anti-China.
by DaveExeter | 2025-09-16 21:40:17+00:00
"To dismiss a source because it is Israeli ironically gives fuel to the antisemitism charge."

We agree it is an Israeli source.

All the unwatch site does is accuse Israel's critics of being antisemites. When you can't respond to the message, attack the messenger. Accuse them of being antisemitic and being funded by Hamas.

The Israelis have taken it to the point of farce!

https://www.theguardian.com/us-news/2025/apr/09/stop-antisem...
by kelnos | 2025-09-16 21:40:33+00:00
Sure, and I do that whenever I can. But I'm not going to write my own react, or even my own react-hook-form. I'm not going to rewrite stripe-js. Looking through my 16 direct dependencies -- that pull in a total of 653 packages, jesus christ -- there's only one of them that I'd consider writing myself (js-cookie) in order to reduce my dependency count. The rest would be a maintenance burden that I shouldn't have to take on.
by ViewTrick1002 | 2025-09-16 21:40:46+00:00
We should not call a genocide a genocide because you personally have been impacted by the latest trigger of a long conflict?

I can never understand your pain but for me this reads like bloodlust coming from revenge. That is a path that will never lead to an end of bloodshed.

Given the actions of the Netanyahu government continuously siding with actions prolonging the genocide despite whatever action Hamas takes what do you propose?

What do you think of the colonialists/settlers/occupiers on the West Bank stealing Palestinian land and forcing people from their homes?
by Night_Thastus | 2025-09-16 21:41:15+00:00
Did you read what they wrote? Their point is that doing a fresh rewrite of old code in any language will often inherently fix some old issues - including memory safety ones.

Because it's a re-write, you already know all the requirements. You know what works and what doesn't. You know what kind of data should be laid out and how to do it.

Because of that, a fresh re-write will often erase bugs (including memory ones) that were present originally.
Show HN: Ghostpipe – Connect files in your codebase to user interfaces
by adriaanmulder | 2025-09-16 21:41:32+00:00
Hey HN!

I built Ghostpipe because:

1. I like to keep data about my software in the codebase and under version control.

2. I don’t like always working in raw text files with domain specific languages (eg Terraform, Openapi, er diagrams).

Ghostpipe is an open source tool that creates a bridge between files in your codebase and applications using webrtc. This lets developers work with user interfaces where appropriate, while still having access to the underlying raw text files.

A few side-benefits to this setup are:

1. AI agents are good at working with local text files, so we can keep using those.

2. Generally speaking, no signup or installation is needed to use Ghostpipe apps, because all relevant data is in the codebase.

I built a few demo apps with Ghostpipe support (Excalidraw & Swagger UI), and I hope this proof of concept spurs some interest in taking this idea further.

Thanks!
by foxfired | 2025-09-16 21:41:50+00:00
My problem is that, in the JS ecosystem, every single time you go through a CI/CD pipeline, you redownload everything. We should only download the first time and with the versions that are known to work. When we make a manual update to version, than only that should be downloaded once more.

I just checked one of our repos right now and it has a 981 packages. It's not even realistic to vet the packages or to know which one is compromised. 99% of them are dependencies of dependencies. Where do we even get started?
by ktpsns | 2025-09-16 21:41:54+00:00
As long as people write software (no pun intended), software will follow trends. For instance, in many scientific ecosystems, Matlab was successfully replaced by Scipy. Which happens to get replaced by Julia. Things don't neccessarily have to stay the same. Interestingly, such a generational trend currently happens with Rust, despite there has been numerous other popular languages such as D or Zig which didn't have the same traction.

Sure, there are still Fortran codes. But I can hardly imagine that Fortran still plays a big role in another 68 years from now on.
by homebrewer | 2025-09-16 21:41:56+00:00
Don't update your dependencies manually. Setup renovate to do it for you, with a delay of at least a couple of weeks, and enable vulnerability alerts so that it opens PRs for publicly known vulnerabilities without delay

https://docs.renovatebot.com/configuration-options/#minimumr...

https://docs.renovatebot.com/presets-default/#enablevulnerab...
by kelnos | 2025-09-16 21:42:25+00:00
Oh I'm well aware, and that's the problem. Unfortunately none of the available options hit anything close to the sweet spot that makes me comfortable.

I don't think this is a particularly unreasonable take; I'm a relative novice to the JS ecosystem, and I don't feel this uncomfortable taking on dependencies as I do in pretty much any other ecosystem I participate in, even those (like Rust) where the dependency counts can be high.
by lupusreal | 2025-09-16 21:42:38+00:00
They use America to sanction the participants: https://www.washingtonpost.com/world/2025/07/09/us-sanctions... Just one example of many.

Inb4 whining that it's just the American government being slavishly loyal to the Zionist cause and the Zionist government of Israel has nothing at all to do with this. I swear to god if I get any response like this I will literally go blind from my eyeballs doing full 360s in my skull.
by TuxSH | 2025-09-16 21:42:45+00:00
Capturing lambdas are no different from handwritten structures with operator() ("functors"), therefore it makes no sense castrating them.

Borrowing from stack is super useful when your lambda also lives in the stack; stack escaping is a problem, but it can be made harder by having templates take Fn& instead of const Fn& or Fn&&; that or just a plain function pointer.
by tomhow | 2025-09-16 21:42:45+00:00
From the guidelines:

On-Topic: Anything that good hackers would find interesting. That includes more than hacking and startups. If you had to reduce it to a sentence, the answer might be: anything that gratifies one's intellectual curiosity.

Off-Topic: Most stories about politics... unless they're evidence of some interesting new phenomenon.

https://news.ycombinator.com/newsguidelines.html
by xyzelement | 2025-09-16 21:42:47+00:00
"never under any circumstances attempt to suggest" anything contrary to what you believe is an unreasonable and weak proposition to an argument.

You are welcome to believe what you want to believe but plenty of people throughout History believed something as strongly and self righteously as you do and turned out dead wrong. To think you are immune to that and suggest that no voice to the contrary should be allowed is ridiculous.
by mattmanser | 2025-09-16 21:43:24+00:00
You mean the history where MS captured the OS, Applle/Google the phone, Google capture the entire search market for 20 years, Facebook the social web, Amazon shopping, NVidia/AMD, Netflix, Spotify, I could go on and on and on.

Most things in tech settle into monopolies or duopolies.

LLMs are more akin to the search market than the database market. They need to be updated constantly.

Selectively picking out the one technology that's basically no-one's primary business is an odd way to try and convince me. It must be over 20 years now since any large company consider a DB to be a significant product.

Open source winners like Linux and MySql/Postgre are the oddity, not the norm.
by pie_flavor | 2025-09-16 21:43:52+00:00
I don't think there could be any purer of an expression of the Blub Paradox.

> Just use whatever parts of the language you like without worrying about what's most performant!

It's not about performant. It's about understanding someone else's code six months after they've been fired, and thus restricting what they can possibly have done. And about not being pervasively unsafe.

> "I don’t think C++ is outdated by any stretch of the imagination", "matter of personal taste".

Except of course for header files, forward declarations, Make, the true hell of C++ dependency management (there's an explicit exhortation not to use libraries near the bottom), a thousand little things like string literals actually being byte pointers no matter how thoroughly they're almost compatible with std::string, etc. And of course the pervasive unsafety. Yes, it sure was last updated in 2023, the number of ways of doing the same thing has been expanded from four to five but the module system still doesn't work.

> You can write unsafe code in Python! Rewriting always makes the code more safe whether it's in Rust or not!

No. Nobody who has actually used Rust can reasonably arrive at this opinion. You can write C++ code that is sound; Rust-fluent people often do. The design does not come naturally just because of the process of rewriting, this is an entirely ridiculous thing to claim. You will make the same sorts of mistakes you made writing it fresh, because you are doing the same thing as you were when writing it fresh. The Rust compiler tells you things you were not thinking of, and Rust-fluent people write sound C++ code because they have long since internalized these rules.

And the crack about Python is just stupid. When people say 'unsafe' and Rust in the same sentence, they are obviously talking about UB, which is a class of problem a cut above other kinds of bugs in its pervasiveness, exploitability, and ability to remain hidden from code review. It's 'just' memory safety that you're controlling, which according to Microsoft is 70% of all security related bugs. 70% is a lot! (plus thread safety, if this was not mentioned you know they have not bothered using Rust)

In fact the entire narrative of 'you'll get it better the second time' is nonsense, the software being rewritten was usually written for the first time by totally different people, and the rewriters weren't around for it or most of the bugfixes. They're all starting fresh, the development process is nearly the same as the original blank slate was - if they get it right with Rust, then Rust is an active ingredient in getting it right!

> Just use smart pointers!

Yes, let me spam angle brackets on every single last function. 'Write it the way you want to write it' is the first point in the article, and here is the exact 'write it this way' that was critiquing. And you realistically won't do it on every function so it is just a matter of time until one of the functions you use regular references with creates a problem.
Full secure meeting platform (Granola proof)
by hgaddipa001 | 2025-09-16 21:44:13+00:00
I have a friend who made a completely secure meeting platform.

It changes the audio signal to audio drivers, so that granola and other "unseen" notetakers don't work.

He's just a privacy nut, but was curious if there's any enterprises who'd want it.

If there is any interest shoot him an email at penguinogry@gmail.com
by toast0 | 2025-09-16 21:44:29+00:00
There's also all of the service vehicles when you get closer to the gates. The likely damage from an incident during taxiing is much less than during take off or landing, but I think the risk of having an incident is higher and the situation is trickier to manage. And it's super doable to have a pilot come on to manage that, and drop off after the hard part; you couldn't reasonably have pilots do a takeoff and then jetpack over to an arriving plane to do the landing, but it wouldn't be unreasonable for ground moves... similar to canal pilots taking ships through canals.
by moffkalast | 2025-09-16 21:44:40+00:00
Not being able to focus clearly on something != Not being able to see something completely. Maybe my wording was a bit off there. They see something there, it's just very blurry to them. It's measurable directly from lens and eye dimensions, and from pupil reactions, the way opticians measure people for their prescription.

I know you're arguing in bad faith at this point, but just do an experiment, put your face 5cm close to a monitor, wave the mouse around. That's what your cat sees at 15cm away.