MurphyA/hacker-news huggingface dataset:
by throwawayqqq11 | 2025-09-17 06:47:36+00:00
This attack was only targeting user environments.

Having secrets in a different security context, like root/secretsuser-owned secret files only accessible by the user for certain actions (the simplest way would be eg. sudoers file white listing a precise command like git push), which would prevent arbitrary reads of secrets.

The other part of this attack, creating new github actions, is also a privilege, normal users dont need to exercise that often or unconstrained. There are certainly ways to prevent/restrict that too.

All this "was a supply chain attack" fuzz here is IMO missing the forest for the trees. Changing the security context for these two actions is easier to implement than supply chain analysis and this basic approach is more reliable than trusting the community to find a backdoor before you apply the update. Its security 101. Sure, there are post-install scripts that can attack the system but that is a whole different game.
by leakycap | 2025-09-17 06:48:20+00:00
If the matching happens automatically, how is it like Tinder? I think there is a very strong correlation between "swiping" and self-matching when saying you're "Tinder for _____"

GoDaddy seemed to realize that tech and romance themed marketing rarely work out, so maybe there's just a better angle entirely when sharing this with an audience for the first time.
by jumploops | 2025-09-17 06:48:34+00:00
Everyone is looking down on LLM-assisted dev here, but I think it's a great fit.

I also don't believe it can be one-shotted (there's too many deltas between Notion's API and Obsidian).

With that said, LLMs are great for enumerating edge-cases, and this feels like the perfect task for Codex/Claude Code.

I'd implore the obsidian team/maintainers to take a stab at building this with LLMs. Based on personal experience, the cost is likely within the same magnitude ($100-$1k in API cost + dev time), but the additional context (tests, docs, etc.) will be invaluable to future changes to either API surface.
by toast0 | 2025-09-17 06:48:45+00:00
I had a mac at work for 8 years. Overall things mostly worked ok, but I had two big issues.

a) one time charging stopped working... thankfully I had a pretty full charge when I noticed and was able to migrate my data to a spare machine and not have to deal with it... removable storage would have been super handy.

b) for a whole year, there was about a 25% chance of loud static instead of music when I started playing a stream in iTunes; pause and play again would fix it most of the time. It started when I installed a named OS revision, and it stopped when I installed the next version. Did not have issues with sounds from other apps. Of course, there was no information to be found anywhere about this, because 'macs just work'

Less big, but if Outlook was running when I put the laptop to sleep, there was a good chance it would continue to eat battery and generate heat in my bag. Outlook is a travesty, but when the corp runs Exchange, Outlook is less effort to make work compared to fighting to make auth work with anything else and then still having to use Outlook from time to time.
by Twisell | 2025-09-17 06:49:38+00:00
Well your experience is maybe more based on your friend behavior than on an absolute rule.

This is the same for absolutely every manufactured goods. The same durable car model will be kept for over a decade by some people while some other opt for a leasing plan that guarantee a new car every two years. But the intrinsic quality of the car remain unaffected.

To ponder this you must consider what become of the phone they replace : did they trash it or did they have a second life with a less edgy owner?
by avidiax | 2025-09-17 06:50:40+00:00
Yes, especially do not google the number that you were given on the phone. That is completely certain to turn up the scammer's official looking page and "confirm" the phone number.

I have seen Microsoft support forum articles that list the "Facebook official phone number". The fact that it's not from Facebook doesn't make it less authoritative in a panicked person's mind.

Google, Meta, Microsoft, and Apple really must start publishing an "official phone number". It is perfectly OK that this phone number just plays a repeating message saying that the user should browse google.com/phone. That website can explain that there is no phone support offered, and provide a bunch of links for common scamming hooks that leads to anti-phishing material.
by phil21 | 2025-09-17 06:51:27+00:00
This is just another way to say you are in favor of western hemisphere degrowth.

Without industry you don’t have an economy in the long run. Replace hyperscaler with aluminum smelter or manufacturing line if you prefer. If you can’t operate those capital assets 24x7 they simply will not be built in your country.

Cheap, plentiful, and reliable energy is the foundation of wealth. Nuclear fission was likely humanities transition technology but we fumbled the ball 40 years ago so here we are.
by cyberax | 2025-09-17 06:51:33+00:00
You can buy real PS/2 to USB adapters. E.g. this one from StarTech: https://www.amazon.com/dp/B00028OP2Y

I bought a used slideable rack-mounted LCD last year for my home server rack, and its keyboard with touchpad use PS/2. That's how I found that out.
by codr7 | 2025-09-17 06:51:47+00:00
4th, after basic, assembly & pascal. For a long, long time; it was my default language for personal projects.

But just keeping track of all the features and the exotic ways they interact is a full time job. There are people who have dedicated entire lives to understanding even a tiny corner of the language, and they still don't manage.

Not worth the effort for me, there are other languages.
by nicholasbraker | 2025-09-17 06:52:08+00:00
The reason why we had something like the Delta works was due to a 12 Bft storm hitting our shores in 1953. This infrastructure is built to withstand these kind of storms and protect the land from flooding. The protections in place (movable doors in storm surge barriers etc.) are used a few times the last decades when storms did hit our shores. I don't know if this is useable in the Florida context. It's easy to say whenever a big hurricane hits the Florida shore: "Yeah, just ask the Dutch to fix this.." And I am sure some smart guys from our tech universities can pull it off, but you need money and political will. And it literally takes decades to built it.
by cluckindan | 2025-09-17 06:52:14+00:00
SimCity CD-ROM edition was the greatest. It needed sound card drivers, mouse drivers, CD-ROM drivers and MSCDEX, and it required 605kB of free conventional memory.

Oh, and only some hard drives were standard like that. For others, you needed to set sectors, tracks and landing zone manually. Happy fun times if your CMOS battery ran out.
by CrossVR | 2025-09-17 06:52:23+00:00
This flaw only happens in Ultimate mode, when the user explicitly tells the mux to switch to the discrete GPU. This is an extra feature only users who primarily use the laptop for gaming with an external display care about.

The laptop works fine in Optimus mode even with external displays, you just lost a bit of performance and you're missing out on some display features like G-Sync. So it is highly likely that most users always use the laptop in Optimus mode. If you primarily use the laptop as a laptop you probably wouldn't even know the mux feature existed.

The problem is Asus shipping extra features in their hardware that are not properly QA tested. It looks like they only thoroughly tested the golden path.
Show HN: STT –> LLM –> TTS pipeline in C
by RhinoDevel | 2025-09-17 06:52:24+00:00
For speech-to-text, large-language-model inference and text-to-speech I created three wrapper libraries in C/C++ (using Whisper.cpp, Llama.cpp and Piper).

Follow the URL to see an example that shows how to use these libraries for a speech-to-text, LLM inference, text-to-speech pipeline.

Windows and Linux are supported.
by leakycap | 2025-09-17 06:53:31+00:00
I'm having a hard time buying it... "We still sift through an ever-growing list of emails that generally have very low information density." followed by a mock up screenshot with extremely low information density, much much worse than email.

Worse, by stripping email of everything familiar, whatever benefit is introduced by this new system of parsing my email has to be so great/unfathomably grand that I am willing to give up decades of muscle/brain memory, familiarity and trust with how an email system works, compatibility with all other services, ... I could go on.

There's obviously a very difficult problem with email being overwhelming, but I don't see a great difference between the mockup/info on the site and what big companies are doing right now (inbox categorization). If someone wants something different than email, there's always hey.com which is run by a company that has a long reputation for not shutting down services people are using (they still support Basecamp 1.0 and I know people using it, they still support BackPackIt from the early 2000s...)
by 3RTB297 | 2025-09-17 06:53:38+00:00
WhatsApp and Signal are considered "social media" technically, though plenty of people are still on FB telling the world about their trips and what they ate for breakfast.

I'm always surprised at how HN folks are either unable or unwilling to admit that the fediverse exists beyond Bluesky or Mastodon. I far prefer lemmy to reddit, and Friendica is essentially that the author is describing. This stuff exists already, and it's the perverse incentives of social media such as walled gardens and a critical mass of people that are what keep them alive.
by DrStormyDaniels | 2025-09-17 06:54:00+00:00
I remember reading the 6th paragraph as a teenager, it’s still good: “First of all: what is work? Work is of two kinds: first, altering the position of matter at or near the earth’s surface relatively to other such matter; second, telling other people to do so. The first kind is unpleasant and ill paid; the second is pleasant and highly paid. The second kind is capable of indefinite extension: there are not only those who give orders but those who give advice as to what orders should be given. Usually two opposite kinds of advice are given simultaneously by two different bodies of men; this is called politics. The skill required for this kind of work is not knowledge of the subjects as to which advice is given, but knowledge of the art of persuasive speaking and writing, i.e. of advertising.”
by SCdF | 2025-09-17 06:54:04+00:00
A lot of it is just that it's at the local maximum of popularity and relative user inexperience, so it's the juiciest target.

But also, npm was very much (like js you could argue) vibed into existence in many ways, eg with the idea of a lock file (eg reproducible builds) _at all_ taking a very long time to take shape.
Show HN: Leapcell – Deploy 20 Python/JS/Go/Rust Projects for Free
by aljun_invictus | 2025-09-17 06:55:04+00:00
Hi HN,

This is Isaac, co-founder of Leapcell (https://leapcell.io/).

I used to shut down small hobby projects because cloud costs and maintenance were too high. They would just sit on GitHub, unused.

Leapcell lets you keep your ideas online without worrying about cost. You can deploy *up to 20 projects for free* using our serverless container architecture, so multiple projects can run simultaneously.

Switch between modes as your project grows: - *Serverless*: fast cold start (<250ms), resources scale with traffic, ideal for quickly validating ideas. - *Dedicated machines*: stable, predictable costs for more mature projects, to avoid unexpected serverless bills.

This way, you can deploy all your code online, and Leapcell helps you find the most cost-effective setup at any stage.

Leapcell also provides built-in PostgreSQL, Redis, logging, async tasks, and web analytics, so your projects just work.
by lstodd | 2025-09-17 06:55:08+00:00
Never ceases to amuse me how people tend to cling to a position unconsciosly, then try to rationalize this unconscios act.

US and west are all about some perceived genocide, while inside Israel, half want to surrender to Hamas or whoever because hostages, and the other half had had enough (of almost 80-year war) and just want to be done with it, and the third half wants to study Tora and do nothing, but be fed by the other two halves.

This is ridiculous and very bloody.

Can we please just be rational?
by jeroenhd | 2025-09-17 06:56:08+00:00
I won't lament the loss of giant, stretched-out consoles that flash by too fast to do anything useful with either, but on the other hand I don't see why "there should be a way to make the text bigger" is a problematic request.

There are all sorts of disabilities that might necessitate a console with large text, and setting a specific size (in this case 80x25 because it used to be a standard) isn't such an outrageous demand.

The author knows a solution: set a specific resolution and select a specific font. The problem is that they can't pick that resolution, even though they could before, because on UEFI and non-amd64 the common GPU configuration parameters don't work in Linux.

We should default to a modern system, but the kernel should have a standard way of configuring the boot console. For every person who wants 80x25 mode, there's someone with a weird device that outputs three pixel high fonts because the default resolution is bugged, and both need the same override to fix their issues.
by akomtu | 2025-09-17 06:56:39+00:00
Using Thiel's own words:

"Perhaps we should fear the Antichrist, perhaps we should fear the one-world totalitarian state more than Armageddon."

A prerequisite for antichrist is a world without boundaries: moral or territorial. The Thiel's totalitarian state. The nature of antichrist can be understood if we look at what Christianity and other major religions are all about: ungluing ourselves from things, desires and thoughts of this world and transcending to the kingdom of heaven. Anti-religions will teach the opposite: to glue ourselves to shiny things, to lose ourselves in desires and to marvel at the depths of demonic thought. Antichrist, if it comes, will be a living example of these three aspects: his body will be nearly indestructible, his desires will transcend our imagination and his brain will be a demonic mastermind, probably powered by some Al chip. Right now there are no technologies to create such a thing.

As for why Thiel is so bothered with this topic, I think it's because he's knowingly or unknowingly serving the powers that want this future to come true. His mental proximity to their headquarters is what gives him insights, in other words.
by lmm | 2025-09-17 06:56:44+00:00
I think the real answer is that distro packaging sucks; it tends to involve arcane distro-specific tools and introduce as many or more bugs than it fixes (with the added problem of playing hot potato with the bug reports), on top of delaying updates. Really, what do you gain by using distro packages? (I know the answer is supposedly that you get a set of well-tested versions of your applications that play nice with each other, but that's rarely been delivered in practice)
by rmnclmnt | 2025-09-17 06:56:55+00:00
> Today, AI types most of our code. We think, they type. Rather than diminishing our value, this shift amplifies it as thinkers — especially for those who love architecture

This way you get to experience the job of a senior principal solution architect: thinking about big ideas, and letting the engineering workforce build it and trying to make a square enter a hole…

Irony apart, been using on and off claude code for 3 months, tech is crazy already but… pretty sure there is no real acceleration (time spent dreaming and prompting count don’t get fooled), and the feeling of accomplishement to implement a feature is gone for me. So maybe i’d rather enjoy doing the tech myself and only use it as a very powerful stack overflow like q&a
by metalman | 2025-09-17 06:56:57+00:00
Greta Thunberg is a force to be reconed with, she has an exceptionaly articulate way of stateing exsactly what the establishment does not want to hear, stands up and does that and does not flinch. Speaking to the british parliment, 12min speach, bieng mocked with false clapping and laughter, 2019, she was 16.

https://m.youtube.com/watch?v=rYNM4rsnNFM

transcript

https://awpc.cattcenter.iastate.edu/2019/12/03/speech-to-the...

Again speaking to the European Parliment, simlar speach around the same time.

https://m.youtube.com/watch?v=4oyw4Wo6Kng

I think everyone knows just where she is right at this moment and how she is forceing an awareness of the conection between climate and human justice.
by ViewTrick1002 | 2025-09-17 06:57:37+00:00
In Californias batteries have in recent years decreased the fossil gas usage by ~40% and essentially removed the duck curve.

Demand side response is of course cheaper but there will always be people willing to buy it expensive electricity to fulfill a certain demand.

Take a BEV. The charging is generally optimized for when electricity is cheap and abundant, but when going on a roadtrip without flexibility in their charging people are willing to pay more.

Paying more opens the possibility for batteries and other solutions to fulfill the demand.
by userbinator | 2025-09-17 06:57:38+00:00
What's notable about the text modes is that they are fully done in hardware, so scrolling and writing lots of text is extremely fast and consumes very little CPU. Unfortunately on the hardware side, the allegedly-VGA-compatible part of newer GPUs is increasingly not as compatible as it should be. The "extended text modes" of earlier VGA cards supporting 132 columns or more have become nearly nonexistent, although even the original IBM VGA hardware API should be able to handle a 100 x 75 text mode, if not more, albeit with a reduced refresh rate. I remember almost 2 decades ago trying to get an Intel 900-series integrated GPU to display more than 80 columns in text mode, to challenge the datasheet claim that it was "not supported" (the original IBM VGA had an unofficial 90x60 mode at 720x480), and was unsuccessful; the hardware seemed to be deliberately restricting the settings, and triggered a hard lockup whenever I tried.
by IshKebab | 2025-09-17 06:57:56+00:00
I do find it funny that there are so many people on HN who work in a rapidly advancing cutting edge industry, but are also absolute stuck-in-the-mud curmudgeons who want everything to stay exactly as it was 4 decades ago.

Another example is dropping support for 32-bit x86. "But how will I run Linux on my PC from 2001?". Or the resistance to Rust in Linux because LLVM doesn't support the PDP-8 architecture.
Show HN: Coding AI Agent API for Developers
by Khemmapich | 2025-09-17 06:58:03+00:00
Hi Hacker News ! Today I have new product waitlist that will launch soon next week.

Workser is Coding AI Agent API for Developers to integrate into your product to deliver vibe coding for your business use cases.

You can custom branding with prebuilt UI to make it your own vibe coding ai agent.

Started with Custom web app by ai agent. But soon with more types of software development.

Tell me how you think or join waitlist when we launch next week.
by lillecarl | 2025-09-17 06:59:01+00:00
So any b2c thing where you're going to abuse your customers is American, what an achievement!

There's no denying America has done good in some industries, but when it comes at the cost of societies weak I can't help but think it doesn't matter.

SpaceX and Starklink aren't very important to me, I don't know who they're important for except Ukraine, boat and RV owners.

The report says we must invest in electricity infrastructure, well sure so the dude compares against China and USA at the same time? Crumbling infrastructure is the definition of USA 2025.

The cope is American Exceptionalism, we're doing just fine even though we're fighting a unprofitable proxy-war and missed all those b2c investments to leech off humanity.

There's no desktop OS from Finland, that's a kernel and yes he's now American as you guys usually were better at finding ways to turn good into profit.
by TranquilMarmot | 2025-09-17 06:59:10+00:00
Ah, got it, the actual app is under "Links" at literally the bottom of the README

If anybody responsible for this project is reading: nobody is going to scroll past supporters, roadmap, flow charts, etc to find a single link to actually try this out.

A link to https://opendaw.studio/ should be at the top and very prominent in many different spots.
by rusk | 2025-09-17 06:59:51+00:00
Means the same thing in Ireland too! My understanding is it derives from greek for “ordinary teaching” we also use the term heterodox for a cultural setting that encourages different types of thought.

The term Paradox is a challenging or somewhat contradictory idea.

We also use the term orthodox for a right handed boxer. “Southpaw” is non-orthodox left handed.
by alexisread | 2025-09-17 07:00:03+00:00
The points still stand and remain unaddressed, that are:

Conflation of Israelis and Jews and the false claim of antisemitism.

The lack of evidence of UNRWA-Hamas association, such that Israel's claims are deemed baseless by multiple countries and they restart funding. That is not a UN decision, it is by each country and serves as a good benchmark for baseless.

As to some posts to Hamas members, Israel have called reporters Hamas members simply for reporting with Hamas members, so as far as a few posts go, classification is the issue here, to the point where Reuters and other news agencies have stopped sending the IDF their locations, as the IDF label them Hamas supporters and deliberately target them. Actions are a much more clear signal. In Lebanon, the IDF saying there were Hamas tunnels under hospitals was debunked by numerous news organisations like the BBC, Sky etc. This is the IDF here misclassifying and outright lying, let alone an Internet site.

Lastly, given that both Trump and Netanyahu have openly and on TV advocated ethnic cleansing, and that these comments get next to zero blowback, the US and Israel appear to be the morally bankrupt ones. If an internet site takes precedence over open admission by presidents, multiple country's decisions, evidence presented from an acknowledged organisation (and confirmed from multiple sources), then I'd argue that there's something amiss here.
by CrossVR | 2025-09-17 07:00:15+00:00
My 2013 Macbook also had a display mux that switched the laptop display itself between the integrated and discrete GPU. In some cases it would fail to properly switch the display over causing it to remain permanently off until the next reboot. I was not the only Macbook user with the problem.

Apple is just as guilty for shipping laptops with hardware issues that you just have to work around. And unlike this Asus issue the Macbook mux was on by default. You had to turn it off in the settings if you wanted to entirely avoid the issue and then you would have no way of using the discrete GPU.
by NackerHughes | 2025-09-17 07:01:36+00:00
The designer wants huge amounts of screen space wasted on unnnecessary padding, massive Fisher-Price rounded corners, and fancy fading and sliding animations that get in the way and slow things down. (Moreover, the designer just happens to want to completely re-design everything a few months later.)

The customer “ooh”s and “aah”s at said fancy animations running on the salesman’s top of the line macbook pro and is lured in, only realising too late that they’ve been bitten in the ass by the enormous amount of bloat that makes it run like a potato on any computer that costs less than four thousand dollars.

And US/EU laws are written by clueless bureaucrats whose most recent experience with technology is not even an electric typewriter.

What’s your point?