MurphyA/hacker-news huggingface dataset:
by abrookewood | 2025-09-17 00:30:43+00:00
The article explicitly mentions a way to do this:

Use NPM Package Cooldown Check

The NPM Cooldown check automatically fails a pull request if it introduces an npm package version that was released within the organization’s configured cooldown period (default: 2 days). Once the cooldown period has passed, the check will clear automatically with no action required. The rationale is simple - most supply chain attacks are detected within the first 24 hours of a malicious package release, and the projects that get compromised are often the ones that rushed to adopt the version immediately. By introducing a short waiting period before allowing new dependencies, teams can reduce their exposure to fresh attacks while still keeping their dependencies up to date.
by cycomanic | 2025-09-17 00:32:53+00:00
If we use kilometers driven with drive assist as a metric then nearly car manufacturers will have robotaxis by the end of the year.

If we talk about anecdotal evidence then I know people who are deeply familiar with the topic (working of self driving technology at other manufacturers) and they say fully self driving is still many years away for all manufacturers. Moreover the general industry sentiment is that Tesla is behind now and that more sensors then just cameras are needed.

But instead I should believe the Tesla fan boys who just like Musk have been raving about the amazing progress and telling me that FSD is just around the corner for years.
by proc0 | 2025-09-17 00:32:59+00:00
Something old Blizzard did that I don't see many other game companies doing, is invest in the art for the game, from visuals to the background music, they had very talented artists from the very start of the project.

Of course most games have descent art, but it has to be elevated to the next level. Starcraft had a unique style with unique music, on top of the good gameplay... but initially the gameplay wasn't anything special. It was the art that kept players hooked and that gave Blizzard time to improve on everything else. I think this is where modern games are failing.
by SpicyUme | 2025-09-17 00:33:37+00:00
The privacy concern is real and not something I'd want to think about too hard myself. One night I heard sirens and checked one of the local scanner type sites. I could hear enough about the call, and that combined with a record of previous calls to that address made me wonder if I really wanted that information. Maybe some obfuscation of the previous codes to the address would have been enough to reduce the feeling of knowing too much.

None of that is to say it isn't a good idea. I appreciate the ability to see roughly what is going on when I hear sirens. Even if the sites aren't always able to show the calls. I think highway patrol doesn't show up for me.
by II2II | 2025-09-17 00:33:39+00:00
I have the fun of making outbound calls to offer people a public service and collect payment if people desire it. Most people gladly hand over their credit card details. A few years ago, someone wisely asked why they should trust me. (It only happened once in a decade!) I said they don't have to. They could look up our phone number at an easily verifiable government website, then call back; they could call any facility operated by the department; or they could visit any facility. Said individual provided their credit card details right then and there. Virtually noone cares about security.
by bix6 | 2025-09-17 00:34:28+00:00
> what is the moat? Is it brand, speed of innovation, marketing, or something else?

You could try and develop a brand and market it but I don’t think that would go well for something like this. Best case maybe you can game the rankings to stay number one but you’re probably up against professional app copiers.

So your moat is speed of innovation. Your basic app is copied. What new feature will enable you to stay ahead and drive sales? Or perhaps no feature can do that as the crowd grows so it’s on to the next app that doesn’t yet exist. What’s your new pain point?
by Waterluvian | 2025-09-17 00:34:33+00:00
I guess it’s probably clear to reasonable people but the implicit context to this whole article is “…in America.” Not that these problems don’t exist elsewhere. I definitely sense similar threats in Canada. But compared to America it’s day and night… for now.

My one hope is that by lagging behind America’s decline, maybe we’ll witness the consequences of this path and manage to turn away from it in time.
by akerl_ | 2025-09-17 00:34:37+00:00
There's not really a great framework for GUI apps on Mac/Windows to generically interact with a shared library. DirectX and friends are sort of an anomaly here.

So you'd need somebody to build the tooling for that kind of resource-sharing and convince people to use it (think about similar prior waves where various toolchains became common practice for things like update-checking, installers, etc). And they'd basically have to be doing it out of love-of-the-game, because there's not really any money in it and any time it breaks people would be pissed.
by ux266478 | 2025-09-17 00:34:51+00:00
> the irrigation and suitability for farmland of central California

The unsustainable irrigation that's draining aquifers during droughts and causing permanent damage[1] to groundwater retention? The irrigation that's causing changes in land topography[2]?

> the lack of frequent flooding of the Mississippi river

You mean the system which is a well known ecological disaster?[3][4][5]

And no frequent flooding? Since 2017, the Mississippi River Corridor Critical Area (which covers only a small portion of the watershed) has seen the USDA pay out $11.4 billion[6] to cover damages from flooding. I live in the watershed and for most of the summer I get flood alerts every time it rains. Damages are on the news constantly. In 2008, a tributary river flooded so badly it destroyed two mid-sized cities in Iowa[7]. Then you have the the 2011 flooding[8] of the Mississippi which was the most disastrous since before most modifications had been made to the river. Lack of frequent flooding? Just because you don't hear about it doesn't mean it's not happening.

Like what are we talking about here? Even reaching for what you assume to be innocuous examples, empirically observable negative consequences hang off of them like fruiting bodies. Who knows what the consequences will look like in 100-200 years when they've had time to iteratively feed back into themselves.

[1] - https://pubmed.ncbi.nlm.nih.gov/30197456/

[2] - https://www.usgs.gov/centers/land-subsidence-in-california

[3] - https://repository.lsu.edu/geo_pubs/2126/

[4] - https://repository.lsu.edu/geo_pubs/1614/

[5] - https://www.sciencedaily.com/releases/2023/03/230306143336.h...

[6] - https://www.ewg.org/research/usda-policies-fall-short-helpin...

[7] - https://en.wikipedia.org/wiki/Iowa_flood_of_2008

[8] - https://en.wikipedia.org/wiki/2011_Mississippi_River_floods
by strken | 2025-09-17 00:36:24+00:00
Blog posts are aimed at an audience, HN is an audience, and in both cases the audience in question is a technical one with an above-average number of well-paid professionals. The whole framing that the blog post "reeks of privilege" to "most people" is a bit strange. If I were to read a Yachting Monthly article about The Five Most Attention-Grabbing Mega Yachts For The Conspicuous Consumer Billionaire it would probably reek of privilege to me, too, but that's an entirely self inflicted problem: nobody is making me read a specific article from a yacht magazine.
by Terr_ | 2025-09-17 00:36:36+00:00
> If (optimistically) we can pressurize the helium to 2 atmospheres

It's been a long time since my physics classes, but wouldn't the require 4864 megajoules of energy [0] while raising the temperature of the gas from something like 20C -> 113C?

Spreading that energy-use over 15 minutes, maybe 5 megawatts dedicated to compression.

[0] https://www.omnicalculator.com/physics/thermodynamic-process...
by gitfan86 | 2025-09-17 00:36:39+00:00
Waymo cannot scale. So for most people it's irrelevant.

Tesla FSD makes driving 90% less taxing mentally. It does 99.9% of the driving perfectly. And its getting better. We are quickly approaching a situation where people who don't drive Teslas are like people who cut their grass with Sickle as compared to people who have driving lawn mowers
by motorest | 2025-09-17 00:37:53+00:00
> The problem that React originally aimed to solve was creating reactive user interfaces in facebook's monorepo monolith where 1,000+ software engineers are constantly churning code.

Nonsense. React's selling points have nothing to do with repo structure or the number of engineers working on a project.

If you ever used React at all, you would understand that updating the entire state of the appocation after receiving any input is a non-trivial feature that React turned into a trivially solved problem.

On top of that, React adds modularity and composability.

I wonder if you're criticizing something you have absolutely no experience in.
by epcoa | 2025-09-17 00:38:13+00:00
> and you can (and doubtless will) argue

Why so much aggression? I’ll accept those results as presented. I’ll concede a lot of the reviews are junk.

There’s also no argument against aggressive eradication efforts for HPV.

Though it does seem like in some parts of the world the incidence of truly HPV independent adenocarcinoma like GAS is substantially higher than global averages.
by noodletheworld | 2025-09-17 00:38:33+00:00
Hey, Im a fan. Fail fast. Build things.

Most very rich people just sit and roll in their money in the finance markets like scrooge mcduck.

But… I think the performance in the whitehouse was performative nonesense.

What a waste of everyone’s time for the sake of appearances.

More building things, less dancing please Elon.
by cycomanic | 2025-09-17 00:38:37+00:00
I actually agree in the context of user software people often want the latest and that Windows and OS don't have proper package management is an issue.

However we are talking in the context of NPM packages which by the vast majority would be running inside a container on some server. So how could that software not use a stable Debian base for example.

And arguing that package management is to complicated is a bit ridiculous considering how many workloads are running in docker containers which I'd argue are significantly more complex
by hedora | 2025-09-17 00:39:05+00:00
Another trick is to get earbuds with passive noise isolation. The Sennheisers are a hybrid. They are solid ear plugs even with the power turned off, but support active cancellation too.

With the big over ear hearing protectors that works much better than either in isolation.

Sadly, you usually have to find third party tests to find out what the passive noise isolation rating is for different brands. Manufacturers are terrible at marketing it.
by metadat | 2025-09-17 00:39:44+00:00
Yes, explaining the "why / how did the SAT solver produce this answer?" can be more challenging than explaining some machine learning model outputs.

You can literally watch as the excitement and faith of the execs happens when the issue of explainability arises, as blaming the solver is not sufficient to save their own hides. I've seen it hit a dead end at multiple $bigcos this way.
by boneitis | 2025-09-17 00:40:59+00:00
for anyone reading this actually interested, just FYI an improved model "HackRF Pro" is due for release in the next month or so, is backwards-compatible, and is what will come in at that $400 price tag.

years ago, there used to be a very abundant market for used or chinese clone HackRF One units, but i haven't been able to find any these days.
by ThrowMeAway1618 | 2025-09-17 00:41:09+00:00
>Well, blaming the voter for abstention still conveniently sidesteps blame towards the Dem party for trying to platform Biden again.

Non-sequitur much?

>And now we have you yelling at other people in your party, sewing more division, alienating even more people from your coalition. "How is that working out for you now?"

My party? Which party are you talking about? Don't be shy.

Just pointing out second order consequences.

As for you, what exactly are you trying to say? It's not clear to me what you hope to contribute to the discussion other than satisfying your imagined superiority to other Americans. Or is just those with an excess of melanin?
by DaveZale | 2025-09-17 00:41:17+00:00
Great, I'll copy/paste your notes into an email to myself.

Have you ever looked at a microscopy stains catalog? The most beautiful images you can't imagine. Just a different world.

At the moment, I'm mostly concerned about a bindweed mite experiment we're conducting locally. They are elusive but we're seeing signs of predation.

https://xeriscape.neocities.org/bindweedmites
by belorn | 2025-09-17 00:41:21+00:00
It would be interesting to know how articles like this compared to the average article. How are the ratios of downvotes to upvotes, flagged to non-flagged, and comments to views? Are people who comment here positively or negative correlating to creating non-flaged/downvoted comments on other articles?

To phrase it a bit differently, does this kind of articles create a positive or negative engagement for HN?
by saratogacx | 2025-09-17 00:41:44+00:00
7 used rather small border radius and on was done through the added window border/non client area, not chopped out of the window like today's UX. It was also trivially easy to adjust that to make it as tight as XP's 2-3px so if you really didn't care for it they would go away. For buttons in dialogs the radius was the same size as the embossed effect in earlier windows version.

Vista and 7 rounded things out but they sacrificed very little usable area in the application and could be adjusted to taste. Both Apple and MSFT took the stance that this was too much user control.
Ask HN: Is it racist and elitist to criticize people for using AI to write?
by amichail | 2025-09-17 00:42:32+00:00
Connecting the dots:

* People who don’t have flawless grammar are more likely to use AI to write on social media.

* Perhaps such people did not learn English as their first language and hence are more likely to belong to a minority group — so it’s racist to be upset about them using AI.

* Perhaps such people may not be as educated or as intelligent as someone with flawless grammar — so it’s elitist to be upset about them using AI.

People judge you based on your grammar all the time. AI removes this signal, which is why people get upset.
by stevage | 2025-09-17 00:43:36+00:00
It's a shame that sin and cos get lumped in with all the other trigonometry that you don't need to know, because the two basic formulas are incredibly useful and easy to learn:

x = distance * cos(angle)

y = distance * sin(angle)

Screw the rest. I learnt these as a kid writing a 2D computer game years before coming across them in high school maths.
by motorest | 2025-09-17 00:43:54+00:00
> This just reeks of bigotry or at they least of disingenuousness

...and yet, Russia today is overtly and unapologetically engaged in genocide and ethnic cleansing in it's invasion of Ukraine, not to mention what the regime has been doing in other regions such as Georgia.

If you seriously had a problem with whataboutism involving the US and Europe, you'd be seriously pissed at what Russia has been doing for over a decade. But here you are, making excuses to whitewash Russia.
by epistasis | 2025-09-17 00:44:21+00:00
Oh wow how the conspiracy theories change.

There used to be fears of "death panels" controlling access to medical care when Clinton tried to propose universal health care.

The CDC and FDA are about safety, not cost management. And they get significant complaints about how much they regulate pharma and are impediments to pharma for that!

Now the conspiracy theorists of the other side seem to be having their day in the public mind.
by PaulHoule | 2025-09-17 00:44:37+00:00
I don't believe it. People are leaving Detroit, not because anybody is trying to prevent them from coming. For that matter, Upstate NY is not particularly NIMBY but it does rain. On the other hand, people still want to seem to go to California but it's only a realistic plan if you're comfortable being unhoused.

One of my theories is that people in Arizona hate the government and New Yorkers don't because in New York you can drill a well and take care of yourself but in Arizona you have to plug into a tightly regulated network and live where they tell you you can live and how they tell you to live.
by colingauvin | 2025-09-17 00:45:21+00:00
A lot of replies that are mostly true, or somewhat true, or simply missing the real reasons.

There are two factors here:

1) Vaccine-derived immunity is a function of the individual's immune response, which in general, weakens significantly with age. It is not unrealistic for a vaccine to simply fail to elicit any response in someone old enough.

2) It is very, very difficult to recruit folks without HPV that are over 40 for a clinical trial. Most people of that age, who were never immunized, most likely have had it. This significantly convolutes the signal.

3) This is all especially confounded once something becomes "standard of care". Every year there are fewer and fewer people age 40+ with HPV.

For these reasons, the vaccine is currently officially ??? in people over 40. Most doctors will prescribe it anyways if you ask. It may or may not infer immunity. It almost certainly will not harm you.
by ezekiel68 | 2025-09-17 00:45:24+00:00
I've lived through the recessions of 1990-91 (in my 20s, not tech), the Dotcom bust and the Great Financial Crisis. I can tell you that it's always been this way when its' a "buyer's market" and the employers can afford to be picky. I can also tell you that this is not some game-changing phenomenon[0]. The jobs will return when it is once again a "seller's market" -- which it surely will be. This applies to non-tech job markets as well.

During the DotCom bust I ended up getting a taxi license in NYC and driving yellow taxicabs on 12-hour (standard) shifts for over 18 months. During the GFC, I got trained in HazMat handling and joined contracting companies as an employee cleaning the beaches after the BP oil spill for a year. In both cases, I re-entered the software engineering market as a high-demand candidate and made even more in base and total comp than I had previously.

I am over 50 now. I never transitioned to a management position. Still, I do plan to re-enter the software engineering market when the current winter ends and spring next arrives.

[0] I work with agentic AI on my own projects. Due to limited context windows, even the best models like Claude Opus or Alibaba's Qwen-coder require much more expert handholding than people let on. Even with good context engineering and memory tools.
by Krssst | 2025-09-17 00:46:20+00:00
Too bad the vote led to the current situation where women pointlessly die because of restrictive abortion policy, LGBT people get even more persecuted in the USA with no hope for improvement, protesting the genocide in Palestine is now ground for deportation for non-citizen residents and seems like it would make one an enemy of the state, so you lost all chances of being able to do something. Plus the ideology being force-fed into other countries with American politicians supporting far-right parties in Europe and attempting to strong-arm them into far-right policies (https://www.lemonde.fr/en/economy/article/2025/03/29/french-... ). I guess none of that ever mattered to abstentionists.

Well Europe was probably going to fell to the far-right anyway...
by A_D_E_P_T | 2025-09-17 00:46:43+00:00
Steel rifle plates are such a bad idea, though. Aside from the downsides mentioned in OP:

- They don't reliably stop high-velocity lead-core rounds. M193 from a 20" barrel is known to readily penetrate steel rifle plates, and lead-core .223/5.56mm like M193 is literally the most common rifle threat in America. Such plates will also fall to .270 Win, .22-250, and many other common hunting cartridges.

- They're extremely heavy. 8-9 pounds with coating, on average? That's heavier than most ceramic Level IV plates that will stop every threat you're likely to encounter, absolutely reliably.

What's interesting, given this is HN, is that the technology to make steel rifle plates -- exactly like today's -- has existed since roughly the 1910s. Nobody did it, in large part because it wasn't a good idea back then. (Rifle calibers tended to be heavier -- like the German 7.92×57mm -- and medical science wasn't as advanced, which further militate against steel rifle plates.) It's still not a good idea today, especially in light of superior alternatives.
by cannolicannon | 2025-09-17 00:48:25+00:00
This sounds like a classic account recovery scam where the scammer uses Google's account recovery feature to gain access to the account. Once they have the 2FA code, they're in. This time the scammer used an account takeover as the pretense for needing the code.

As for the email, this blog post ( https://sammitrovic.com/infosec/gmail-account-takeover-super... ) from about a year ago notes that somehow scammers were/are using Salesforce to spoof emails from Google that appear legitimate. Seems like something similar happened here, but there's no way to be sure without the headers which the scammer seemingly cleaned up.

The FTC reported that scam losses totaled 12.5 billion last year. These scams are elaborate and convincing even for folks who make a living in tech. ( https://www.ftc.gov/news-events/news/press-releases/2025/03/... )

At any rate, sorry this happened OP. Stay safe, folks.
by deanteegarden | 2025-09-17 00:48:33+00:00
You have no obligation to provide it, and every reason not to so as to remain anonymous online, but I don’t think that anyone should consider your testimony without supporting evidence (i.e. court documents.) The original post is part and parcel of the disconnect between the reality of our judicial system and the subjective experiences of those who naively interact with it.

I hope you’re doing well.
by pfdietz | 2025-09-17 00:48:52+00:00
Parts of Europe are close to the worst case for renewables (specifically, some parts away from coasts without a good wind resource). Even there, new nuclear might be only competitive with renewables.

This web site provides an optimization scheme for determining how expensive it would be to provide 365/24/7 steady power from wind/solar in various geographical areas, using historical weather data. Even in Europe it's not that bad. The 2030 cost figures may already be obsolete given the crash in battery prices.

https://model.energy/

Note that in this model it's essential to have something beyond batteries to use for long term storage (to smooth wind output, and to provide seasonal storage of solar output). The model uses hydrogen, but long term thermal storage may be even cheaper. Europe has ample geology for storage of hydrogen (salt formations).
by duxup | 2025-09-17 00:49:41+00:00
In my experience poor grammar is not often a problem.

I've worked in tech with large teams with people of all sorts of backgrounds, in English, often broken English, and nobody cared.

AI, when people think they see it adds an air of dishonestly. Is that person there to scam someone? Did they even choose those words carefully? I do not know.

It makes conversations difficult now that you are second guessing everything.

Broken grammar in my experience both seems more sincere, and is more accurate.