MurphyA/hacker-news huggingface dataset:
by jchw | 2025-09-15 22:19:49+00:00
It's really hard to keep up with Apple's support for open codecs: it's always bad, and it always improves one minor step per year at best. Evidently, I'm behind on it, because I've mostly given up on trying to make software I work on work well with Apple devices by this point. (I can't tell you exactly what's wrong, but I've noticed I still can't get most WebMs to load in Safari on my M1-based iPad... some of them do, some of them do not.)

Apple is hopefully noticing that while major publishers can be swayed by this sort of behavior, lack of support for open codecs and open formats is going to make the iPhone and iPad web experience much worse for people who veer outside of the mainstream for a bit.
by grishka | 2025-09-15 22:20:06+00:00
As someone still building websites mostly like it's 2010, it's funny to look at these discussions. "How do we abstract away browser APIs" — but what if you just do not? What if you use them directly? What if you don't do client-side rendering unless absolutely necessary?

The two most modern tools I use in my web stack are TypeScript and PostCSS. But these are build tools that make my life easier. At runtime, I still have zero dependencies.
by strnisa | 2025-09-15 22:20:10+00:00
I misunderstood this comment originally. In principle, Small Transfers (ST) could let a content site bill AI agents per request. Each site (acting as an ST merchant) would expose a simple "content" endpoint. The AI agent (as an ST customer) would perform a headless OAuth flow, after which the content site could charge for access. We currently don't support headless OAuth, but if anyone is interested in exploring this use case, please get in touch.
by caug37 | 2025-09-15 22:21:05+00:00
npcsh is a command-line toolkit that provides simple and practical ways to use AI tools wherever you work. npcsh lets you easily tweak agent personas, tools, and context. It comes with several agents that you can work with: 1. guac: a python coding agent that executes code that you can inspect and work with. Likewise, guac can build on the code you write within the session and works by way of managing a python package to help you go from experimentation to automation more quickly

2. corca: a tool-calling agent that can hook up to an mcp server. By default, corca uses the mcp server we ship with npcsh, but we've used it with other mcp servers as well.

3. alicanto: a deep research agent that runs experiments and then writes a paper in a latex document, and, if equipped with something like a semantic scholar api key, alicanto can even find citations and incorporate them into the work

Additionally, users can take advantage of helpful macros like '/ots' for screenshot -> LLM, '/sample' to get a one-off answer that has no prior context, '/vixynt' to generate or edit images.

with npcsh, we are building not just helpful agents, but the toolkit with which you as a user can continually improve your own agent teams.
by scarface_74 | 2025-09-15 22:21:55+00:00
I know more about AWS, but GCP from what I read is similar, best practice is that you have a web page that you authenticate to via SSO and get temporary access keys that you assign to environment variables. The SDK automatically knows how to read from the environment variables locally.

When you run your code on the cloud platform, you attach privileges to the run time environment (VM, Lambda, docker runtime, etc) that are properly scoped for least privilege. The SDK also knows how to get your permissions from it automatically. You never need to worry about your code getting the proper access keys.

I’ve done most of my CI/CD using AWS native services that you also attach the role to the runtime. For instance CodeBuild is really just a Linux or Windows Docker runtime that you can run anything in and you attach permissions to your CodeBuild project. Of course your AWS access is controlled ideally via your SSO or 2FA.

I have done some work with Azure DevOps - which doesn’t have anything to do with Azure. You can also use it to deploy your AWS and you store your access keys in an Azure controlled vault and your pipeline gives AWS permissions to your scripts. I think the same thing works with GitHub Actions.
by pupatlas | 2025-09-15 22:22:25+00:00
Here you go:

> Apple App Review Guidelines: 2.5.1 Apps may only use public APIs and must run on the currently shipping OS.

https://developer.apple.com/app-store/review/guidelines/

And here's the (private) field that needs to be enabled on your webview to enable the CSS property. Otherwise (according to the author) it's just ignored: https://github.com/WebKit/WebKit/blob/613c42873c56e2b2073f91...
by OkayPhysicist | 2025-09-15 22:22:28+00:00
It's not exactly a wild list. You can make your own mint vape liquid at home by combining 1 part vegetable glycerin with 1 part glycol, dissolving nicotine salt to the desired concentration (most dangerous part due to nicotine's toxicity, suggest getting it pre-dissolved in either one or both of the above), then dissolving menthol in to taste.

Don't get me wrong: it's not good for you, but it's a lot less bad for you than cigarettes, and it's not some great mystery as to what's in it.
by GuinansEyebrows | 2025-09-15 22:22:40+00:00
> Most people are not the Hacker News types who know this.

many "Hacker News types" happily work for FAANGs, see little to nothing wrong with the social ills their labor causes, and benefit handsomely from it... and would benefit little from acknowledging that or working to change those conditions (or their employment situation).
by ricardobeat | 2025-09-15 22:23:54+00:00
> if the cost is an extra few milliseconds of render time and few extra hours of dev time

That is very optimistic. Most React projects never get to the optimization stage, and end up with seconds of rendering and transition delays that significantly harm UX. And the amount of time spent battling hooks, re-renders, compatibility issues, etc amounts to hundreds of hours over the course of a medium-sized project, thousands for larger companies.
by back2dafucha | 2025-09-15 22:23:54+00:00
As far as the "killing innovation" thing. Thats incorrect. Browser manufacturers and HTML/CSS/JS have killed innovation.

Screen layout was a solved problem 40 years ago.

Also search has killed innovation by turning sites into content factories instead of building things that matter.

Google was and is a very bad steward of the web and is rightly dethroned by even fake AI.
by samtheDamned | 2025-09-15 22:24:09+00:00
This is my experience too, I distrohopped for about 2-3 years, and then when I found fedora it just clicked. I've been using it exclusively ever since. It was my first experience with vanilla GNOME and like you I wanted to meet the OS in the middle. The stability while still having reasonably up-to-date packages is so pleasant and everything felt like it was part of a whole in a way that my prior experimentation with arch and its derivatives and the different ubuntu skins didn't fully achive.
by sunshowers | 2025-09-15 22:25:06+00:00
I believe a lot of them were on B-1/B-2 business visas (or equivalent ESTA), which are typically intended for "business meetings", not for "work". However, because the US immigration system is completely broken. getting a real work visa such as an H-1B or an L-1 is a time consuming process. The historical equilibrium has been that some kinds of things classified as "work" are permissible on B-1/B-2 visas.

A similar activity that technically flouts the rules is responding to your work email while on a business trip. Or for software people, reviewing PRs on GitHub. Neither of those activities are business meetings, but both are generally tolerated.

Chesterton's fence is kind of important! The overall problem is that the world has become globalized but immigration policy just hasn't kept up.

None of this is to defend in any way the appalling conditions the workers were subjected to. But also, note that these conditions are not out of the ordinary. People get stuck in immigration detention for years.
by quickthrowman | 2025-09-15 22:25:57+00:00
Plastic bags are made of polypropylene, and are garbage.

Plastic for the most part is basically garbage, there are so many types that it’s hard to recycle it. PET and HDPE can be recycled fairly easily if they’re sorted, the rest aren’t really worth it (polypropylene, low density polyethylene, PVC).

The only thing that is almost always economically worth recycling is metal, which is separated from the paper/glass/plastic if you have single stream recycling. Plastic should be burned in a cement kiln or buried in a modern landfill, unless it’s well sorted HDPE or PET.
by tkiolp4 | 2025-09-15 22:26:11+00:00
Talking about hardcoded api keys, what’s the usual approach when dealing with a mobile app that talks to an api? Users don’t need auth to use the app (they do login via an alphanumeric code they get via marketing). I only know how to do this properly via auth flows (user inputs username + passwd, then app calls the api for a user jwt, the app then uses the jwt in subsequent calls). I don’t think using this flow makes sense when the user “logins” via a simple alphanumeric code (which is of length 5 and anyone could guess)
by ricardobeat | 2025-09-15 22:26:15+00:00
Websites were much more varied and creative in the jQuery era, and even more so in the Flash era that came before. Different interaction paradigms, wild animations, full-screen effects, etc etc. Not necessarily "better", but React didn't really enable anything we couldn't have before - even today when real performance is required you will resort to canvas/webgl, alternative rendering approaches and skipping react's render cycle.

React was never [1] fast [2] - that is one of the biggest misconceptions in frontend development in the last decade.

[2] https://css-tricks.com/radeventlistener-a-tale-of-client-sid...

[1] https://www.zachleat.com/web/react-criticism/
by andy99 | 2025-09-15 22:26:50+00:00
If people find it useful but enterprise adoption is lagging, doesn't that indicate there's still a big upside?

On the other hand, I remember when BlackBerry had enterprise locked down and got wiped out by consumer focused Apple.

In any event, having big consumer growth doesn't seem like a bad thing.

It will be bad if it starts a race to the bottom for ad driven offering though.
by epolanski | 2025-09-15 22:26:58+00:00
> Being able to render 100k table line updates simultaneously instead of 10k or whatever isn't fundamentally going to make the difference for all of those other requirements.

React's performance are way more severe and ubiquitous and user impacting.

I'd really love to see the websites you're writing in React and lunch a lighthouse or to simulate how do they perform for somebody on a slightly slower connection or not being on the latest iPhone.

Because I know my users include bank clerks or post office cashiers on 10+ year old computers being used at work as much as people on vacation with very poor signal on the beach.

Of course, if you only experience your website from your MBP on cable you thing the issues are only at "10k rows" level.
by bri3d | 2025-09-15 22:26:58+00:00
> If it's true that 90% of fraud comes from mobile despite all of the restrictions

Statistics on mobile vs. desktop banking will really shock you; the mobile usage penetration is easily well upwards of 90% in many markets. There's also a skewed distribution for fraud-vulnerable users and scenarios.

> I think it would be reasonable to disable those specific features on mobile while leaving the rest of the app accessible.

I agree with you in an idealist sense; it would be awesome to be able to use GrapheneOS and have 80% app functionality instead of 0% app functionality. I also completely understand why nobody does it; supporting what's probably <0.001 (if not lower)% of legitimate users in exchange for development time and fraud risk isn't a particularly appealing tradeoff. If I were in a situation to advocate for such a trade-off, I probably would, but I don't think it's evidence of a sinister conspiracy that nobody does that.
by antonymoose | 2025-09-15 22:27:04+00:00
With all due respect, please provide respect of your own to me.

I’ve seen a dozen articles and discussions around this topic - none of which provide any facts, just vitriol such as yours. I genuinely want to hear the actual truth of the story. I’ve never heard of any plate watering stories or anything else. I’m not here making a case. I’m asking for facts I may have missed, facts that TFA lacks.
by rickcarlino | 2025-09-15 22:27:22+00:00
There are certainly good reasons to be concerned about a front end monoculture, and what follows is a curious observation rather than an attempt to discount the points being made here. Ten years ago, we had the opposite of a monoculture. We had new frameworks hitting the front pages of HN every week. We had the shitshow that was Angular 1.x -> 2.0. We had people inventing terms like JavaScript fatigue to express the pain of being a frontend dev at the time. The dust has finally settled and React has undeniably won. I am still kind of groggy from the whole thing and am going to avoid learning web components until it hurts my career to avoid it. I am not singing the praises of React (I don’t like hooks and my opinions really don’t matter), but I am at least happy that it is not 2015 any more and I can focus on building. It is interesting to me that enough time has passed and the sentiment is slowly changing.
by archagon | 2025-09-15 22:27:33+00:00
Meanwhile, Musk is busy on Twitter calling for white nationalist “remigration”[1] and advocating for political violence in the UK[2]. One can assume the board fully supports this deranged behavior.

I really hope he finds his way to prison someday.

[1]: https://bsky.app/profile/harikunzru.bsky.social/post/3lxrqzm...

[2]: https://www.theguardian.com/technology/2025/sep/13/elon-musk...
by solid_fuel | 2025-09-15 22:27:47+00:00
Regardless of the specifics of paperwork issues and letter of the law, people deserve to be treated with dignity and respect. It may be easy to turn a blind eye to the inhumane conditions in many immigration holding facilities when it feels like the victims are of a different class, or a different group of people. But if this doesn't rouse the empathy of other engineers I don't know what will.

The people who were detained here are just like the average hacker news user - educated professionals traveling for business. Please imagine what it would be like to travel - in good faith - to Germany, Japan, or South Korea for work only to be detained, chained like cattle in poor conditions, and paraded in front of television cameras like a prize. How would you feel about continuing to work with that country?

Here is the call to action - if these actions by the administration upset you, call your senators and representatives and demand that the leaders of ICE and the DHS be held accountable for this raid and the conditions of these detention centers. We are perfectly capable of enforcing our laws without abusing people.
by hahaxdxd123 | 2025-09-15 22:28:03+00:00
For those of you asking what the Koreans did wrong (in good faith), that question is framed poorly.

There is simply no visa that allows skilled labor to come to the US, work a temporary job for a multinational that's paying them in their home country, and leave.

The closest thing apparently is the "B-1 in lieu of H-1B"[1] and guess what? Another commenter posted this FT article that accuses them of abusing this B-1 visa [2].

Traveling for work is a huge pain in the ass, doubly so for this sort of temporary work assignment, and triply so if it's to the USA.

I've always been told to use a tourist or family reunification visa. For example, if China cracked down on this, they could easily put 10,000+ Americans in jail for a similar "visa abuse". They obviously would not bite the hand of foreign direct investment like this though.

I think it's informative to interpret the law - especially in the age of Congressional gridlock - as 300 years of terrible legacy code papered over the Herculean efforts of ops teams (the government bureaucracy). When that ops team starts arbitrarily treating the oceans of gray zones to their whims, to reward friends and punish enemies, you start the long trek to serfdom...

[1] https://www.wsmimmigration.com/us-immigration/temporary-work...

[2] https://www.ft.com/content/c677b9aa-2e89-4feb-a56f-f3c8452b3...
by bigthymer | 2025-09-15 22:28:11+00:00
This is my understanding of the situation too from watching some news shows. During Biden's term, there was a need\interest in getting this factory running quickly. There wasn't a proper visa defined within our legal code. The US gov encouraged them to come with personal or tourist visas in order to expedite the process of getting the factory up and running. It seems like this understanding didn't quite transfer from Biden to Trump's administration and the deportation happened.
by dijit | 2025-09-15 22:28:55+00:00
vista was pretty nice looking tbh (or, it was to me, especially the black ultimate edition with the frosted glass).

It just chugged like madness, the UAC dialogs were slow to fade in (and numerous) and the widgets and moving wallpaper was about 10y too early.

I was distinctly not happy with the control panel changes, but hindsight tells me that I should have been.
by maplethorpe | 2025-09-15 22:28:58+00:00
A few sentences in, I was thinking that the article felt AI-generated, so I scrolled to the bottom of the page. There's no author listed, but there is this disclaimer:

"AI assists in refining our editorial process, ensuring that every article is engaging, clear and succinct."

One thing I hope we'll see in the future on these types of articles is the ability to view the original prompt. If your goal is to be succinct, you can't get much more succinct than that.
by whartung | 2025-09-15 22:29:29+00:00
I’ve tried to listen to a book on tape on a long drive twice. And each time I was lucky to not drive into an abutment. For whatever reason, the droning just knocks me unconscious.

Talk radio is ok, sports radio. I’ve listened to more radio plays with multiple speakers. Those are ok.

But books on tape, nope. Too dangerous for me.
by ku1ik | 2025-09-15 22:29:45+00:00
There’s few reasons for this. First, I don’t have infinite budget for this, in fact the budget is close to 0 (sponsorships and donations help). Second, the servers are sponsored by Brightbox, and I’ve been running asciinema.org there for over a decade because BB is reliable and they’re great chaps, but I don’t have infinite resources available there. Finally, I don’t want devops complexity in my side projects.
by maxdo | 2025-09-15 22:29:46+00:00
exactly, how do you fight if everyone except you know everything about even your citizen e.g. tiktok, and you know nothing ?

I'm not advocating, I'm just asking a question. what is a tactic if we are really on a brink of a world war? It's subject of debate, but what if the goverment truly believe this way?
by nradov | 2025-09-15 22:30:03+00:00
Sometimes they won't get fired even if they put in less than the bare minimum. I know a number of people who have worked in the Detroit area auto industry and they tell stories of hourly workers who kept their jobs after being caught literally sleeping or drunk on the clock. Union leadership doesn't seem to understand that by defending those slackers they might get a temporary "win" and stick it to management, but ultimately it just encourages management to move production elsewhere.
by DenisM | 2025-09-15 22:30:53+00:00
Consumers have low friction on the way in and on the way out. Especially when media hype gets involved.

Business have higher friction - legal, integrations, access control, internal knowledge leaks (a document can be restricted access but result may leak into a more open query). Not to mention the typical general inertia. This friction works both ways.

Think capacitive vs induction electric circuits.
by JumpCrisscross | 2025-09-15 22:30:55+00:00
> That quote from Banks only tells us that The Culture is his personal utopia

Idk, post-scarcity immortal FTL-wielding techno-democracy with benevolent artificial superintelligence doesn’t strike me as some hell.

And the Culture isn’t a galactic monolith. If you want a more traditional existence, there are other societies you can fuck off to.
by mmargenot | 2025-09-15 22:31:26+00:00
`outlines` (https://github.com/dottxt-ai/outlines) is very good and supported by vLLM as a backend structured output provider (https://docs.vllm.ai/en/v0.8.2/features/structured_outputs.h...) for both local and remote LLMs. vLLM is probably the best open source tooling for the inference side right now.
by cyberax | 2025-09-15 22:31:58+00:00
> I believe a lot of them were on B-1/B-2 business visas (or equivalent ESTA), which are typically intended for "business meetings", not for "work".

B-1/B-2 does allow some work. Specifically setting up complex equipment and also training workers. Here's the CBP manual: https://www.cbp.gov/sites/default/files/documents/B-1%20perm...

> If the contract of sale specifically requires the seller to provide these services or training, and you possess specialized knowledge essential to the seller's contractual obligation to perform the services or training it may be permissible for you to perform these services. In addition, the machinery or equipment must have been manufactured at a location outside of the United States and you may not receive compensation from a U.S. source.

Now the catch is that people on B1/B2 visas have NO recourse if _any_ border official decides that they violate the visa rules. And the rules themselves are really unclear.
by jongjong | 2025-09-15 22:32:20+00:00
Agreed, Web Components don't require any framework and you can achieve everything you can achieve with React (including reactivity via attributeChangedCallback), the learning curve for Web Components is actually much less steep than React when you consider from the perspective of someone starting from scratch.

Furthermore, Web Components enforce good patterns; like the fact that you can only pass strings as attributes (by-value) is actually genius as it encourages simple, minimalist component interfaces and avoids pass-by-reference issues for which React community had to invent an entirely new paradigm to protect against (I.e. Redux state management with functional programming approach).

And the great irony is that a lot of the top people who are still pushing React are basically rich from Facebook shares and don't have to work anymore. In effect many of them are forcing this technology onto young people who have no choice in the matter whilst they themselves don't need to use it or do any coding anymore. Meanwhile I know a lot of developers who want to leave (or have left) the industry because of how bad it is and how few decisions they're allowed to make.

It's demoralizing to work with inferior tools when you know better tools exist because you use them in side projects... When you see this, you think to yourself "If the company forces me to be inefficient with my choice of tooling, this gives me a license to be inefficient in other ways."

Personally, I don't even code anymore (only on my side projects). It's a shame because one of my main talents is writing clean, minimalist code. In my day job, I'm using drag-and-drop UI platforms like n8n and Flowise (for AI). It's refreshing to be able to use vanilla JS inside the nodes, without a compile step and on a real-world project that actually pays. These UI platforms are actually much more predictable to work with than React. When I was using React (for almost a decade), I was constantly debugging weird glitches and state management issues; I never encountered those with Web Components or with platforms like n8n.