MurphyA/hacker-news huggingface dataset:
by rich_sasha | 2025-09-16 16:46:28+00:00
UK law runs on the "reasonable" adjective. The court would ask itself if it is "reasonable" in their own opinion that you don't have the info.

Typically it's applied to cases where the information is clearly available, like a drug dealer not remembering his daily driver laptop password, or refusing biometrics unlock. Not, we found this thumb drive within a mile of your house, decrypt it or else.

But of course the standard of "reasonableness" is murky, and you'll find plenty of cases that revolve on such contested judgment.
by debazel | 2025-09-16 16:46:49+00:00
> This severely reduces the attack radius compared to NPM's default, where I would get the latest (patch) version of my dependency every day.

By default npm will create a lock file and give you the exact same version every time unless you manually initiate an upgrade. Additionally you could even remove the package-lock.json and do a new npm install and it still wouldn't upgrade the package if it already exists in your node_modules directory.

Only time this would be true is if you manually bump the version to something that is incompatible, or remove both the package-lock.json and your node_modules folder.
by miki123211 | 2025-09-16 16:46:50+00:00
Honestly, Java is one of those technologies I would never worry about in this way.

It is used everywhere. Just among the faang companies, Apple, Amazon, Netflix and Google definitely use it at scale, and they're just the tip of the iceberg. Taking away JVM updates would almost be a company-ending event for them, and they definitely have the resources to keep it alive if Oracle ever dies.
by DannyBee | 2025-09-16 16:46:52+00:00
The appeals court did not seem very impressed.

The oral argument is here: https://www.ca4.uscourts.gov/OAarchive/mp3/23-4451-20250912....

The first question they asked is "why didn't you ask for a bill of particulars?".

Overall, they seemed very confused as to the argument made here - why is the indictment actually insufficient, and what words did you want them to use instead.

I don't think this will be a successful appeal at all - they seem to all agree this is not stuff that goes in an indictment, and to the degree that there was ambiguity, the correct answer was to request a bill of particulars.

At around 10 minutes, one of the judges asks counsel for the best case he has that says he's right, and he can't come up with one at all.

Which is probably the point at which he lost this appeal. :)

To be fair, i don't blame the lawyer, and i expect why the judges are being not too hard on him, is because he's doing his best to argue a losing case because of choices made at the district court level.
by ben7799 | 2025-09-16 16:47:22+00:00
The writer seems to be one of the older crowd that made being a Mac user a huge part of their identity in the 80s and 90s. In the 80s that was tied in with the Mac being a pretty superior computer only accessible to the wealthy. In the 90s the Mac became a bit of a disaster as the decade went on and these guy stayed in utter and complete denial about it.

Then when OSX (-> Mac OS) started becoming really great in the 2000s I think they complained about stuff changing but then felt recognized when developers started flocking over to the Mac. But then you've got all these average people jumping on buying iPhones and iPads and Watches and AirPods and now they don't feel special.

It is pretty hard for me to get worked up about it. Some of the glory days were nowhere near as great as they remember, it's just they were a special club back in the day and now they're not really. The rest of us will just keep getting our jobs done using Macs.

One other aspect is a lot of these people were not particularly technical and as such were pretty inflexible in their thinking. They often seem to have built up extremely rigid and complicated ways of wanting to organize everything on their system because they are the kind of people who are used to following an exact set of steps to do everything on the computer, and they perhaps learned that at great pain. So they become extremely sensitive to UI changes as they perceive any change they have to get used to as wrecking their perfectly tuned productivity.

As an example they get super upset about the finder. They seem to have frequently built up some really complicated way of using the finder and then will get really upset, whereas an even more technical user will just go update their script/macros/whatever in 5 minutes if something changes and not get up particularly bent out of shape. The guy (and I've only ever met guys in this camp) who gets upset is probably not building a script that would have saved 100x more time over the years.
by worldsavior | 2025-09-16 16:48:42+00:00
It's evident for example that this thin child that was put on the front page of NYT was actually suffering from a genetic disorder. It's also evident that the pictures of Gaza citizens starving with their bowls out asking for food, was actually a complete lie (you can find pictures from the side, and not only from the front). Yet you still see those images on TikTok.
by firefax | 2025-09-16 16:48:48+00:00
What a loss. Sneakers inspired me to pursue my dream of being a penetration tester.

I first discovered his acting via a long forgotten torrent site.

I used to go onto Suprnova[0] and sort by "most seeded" and alongside a sea of pornography, up filtered gems like the 1992 cult classes we all know and love. (As well as, at the time, a lot of really got big beat electronic albums, but the uhn tiss tiss is a conversation for another thread.)

I had been a big gamer growing up, but found that folks weren't growing out of toxicity, and migrated to being a film/tv geek. More art galleries, less LAN parties, that sort of thing.

I guess he's jammin' revolvers into Russian dude's backs at the opera in heaven now...

I haven't found another film that captures the feeling of blowing past building security, the front desk, and the CEO's secretary to inform them if you were the guy who'd been threatening their NGO, they'd be dead -- and oh, by the way, here's a list of the systems I could own without setting foot in your building.

Nowadays, you're weird if you socialize offline and eschew social media, but back in the day being a hacker was not considered cool or interesting -- if anything, we were scary.

Truly a film before it's time, truly a loss.

[0] https://en.wikipedia.org/wiki/Suprnova.org
by uecker | 2025-09-16 16:48:59+00:00
I am physicist and like to look at data instead of the press and opinons. Let's summarize the facts:

* Renewables did not cause an increase of gas usage for electricity production in Germany. The data clearly shows that it stayed around 80 TWh for last two decades despite a massive increase of renewables. (1) * It is also clear that gas usage for electricity is a very small part of overall gas usage in Germany. For example, total gas usage was 844 TWh in 2024 (2) * It is also a hard fact, that Germany stopped importing gas from Russia quickly after start of the war. (3)

In light of these facts, I think you are misinformed and should learn to critically evaluate information you find online, instead of trying to collect random confirmation for what you want to believe to be true. Note than none of the above means that there was no dependency on Russian gas, just that it was not caused by the use of renewables. The last point is interesting because most countries importing nuclear fuel from Russia did not stop imports, which would indicate that the dependency on Russian nuclear fuel is actually more problematic that Germany's dependency on Russian gas (which does not exist anymore since 2022).

1. https://ag-energiebilanzen.de/wp-content/uploads/2025/02/STR... 2. https://www.bundesnetzagentur.de/SharedDocs/Pressemitteilung... 3. https://www.statista.com/statistics/1332783/german-gas-impor...
by pharrington | 2025-09-16 16:49:00+00:00
Sorry for the late reply. Earlier this year, I tried KDE Neon User Edition. It offers updates everytime any KDE software you've installed gets an official update, meaning you're shown updates practically everyday. That isn't stable. Again, the website copy undersells this, saying it "Featuring the latest officially released KDE software on a stable base (emphasis mine)."

edited for clarity
by atourgates | 2025-09-16 16:49:24+00:00
A few months ago when there was a lot of emergency services activity in my area and I didn't know why, I was reminded that no-one in my region is contributing a feed to Broadcastify.

I went down the tunnel of using SDR to recieve those transmissions, and share them online.

Then I went a bit further.

What if you could transcribe the broadcasts into something like a text feed? What if you could add location information somehow to monitor where things were going on in your region? Could you use AI to somehow organize the data into a more useful format?

What if this data was valuable? Maybe you could sell this as a service? Who would buy it? Public safety organizations? Hospitals? News organizations?

I spent a few days worth of freetime figuring out how you'd do someting like this, and got to a place where I figured it was conceptually possible.

Then somewhere in my googling, I stumbled across this site: http://citizen.com/ - and realized that someone had already turned my idea into what looks like a pretty mature product.

Ahh well. I'm sure my billion dollar idea will come later.

In the meantime, I'd still like to mess with SDR at least so I can know what's going on around me next time there's a fire or other public safety incident, before it gets reported on.
by steveklabnik | 2025-09-16 16:49:24+00:00
You're welcome!

It is true that, if the change works on z < 3, you are expanding the possible set of versions a bit, so it's not useless; one could argue that you should only depend on z != 1 if there's a bug you want to make sure that you use the versions past when it works, otherwise, no reason to restrict yourself, but it's not a big deal either way :)
by Bender | 2025-09-16 16:49:40+00:00
The original code is linked somewhere under here [1] I think. There appears to be something wrong with PG's server. The changes in the live version are mostly operational related. I will keep looking. Either way I am certain this logic is all in Arc. HN is very self contained and running on one active and one standby BSD server.

[Edit] My bookmarks are failing me but here [2] is an older thread.

[1] - https://www.paulgraham.com/arc.html

[2] - https://news.ycombinator.com/item?id=28155134
by no-stegosaur | 2025-09-16 16:49:49+00:00
The immutable and atomic movement in Linuxland is very exciting. Cloud native distro building with docker/podman in CI pipelines is just insane: Building+testing+deployment with ci/cd can now not only be done with some python package, but a whole distribution. Also Wayland, Pipewire, Flatpak and Btrfs are great stuff. Of course they don't get developed in one release cycle, but in recent years they made large leaps and became default on many distros.
by zahlman | 2025-09-16 16:50:01+00:00
The FBI is not creating a narrative, never mind shifting it. They are trying to explain what currently best fits the evidence. Much of what they said was clearly premature. IIRC they even caught the wrong guy initially and then had to apologize.

By "the people involved" I mean those who would propose to make lists of leftist organizations and do whatever unspecified thing NYT is vaguely alluding to.
by Liskni_si | 2025-09-16 16:50:03+00:00
In the Rust ecosystem, you only publish lock files for binary crates. So yeah then you get churn like https://github.com/cargo-bins/cargo-binstall/releases/tag/v1... bumping transitive deps, but this churn/noise doesn't exist for library crates - because the lock file isn't published for them.
by justinyee17 | 2025-09-16 16:50:04+00:00
Develop and advertise the premise of a revolutionary tech product that claims to transform the world using NFTs, crypto, and AI. After obtaining funding for explosive growth within 2 years, rug pull your userbase, raking in millions of dollars in personal assets.

Discard your identity, go into hiding, and run from the FBI for 32 days, until a group of anonymous hackers uses OSINT to retrieve all your data and triangulate your position from your cell phone.

Then, proceed to engage in an 8-hour standoff with the authorities until they flashbang the room and take you into custody. Plead not guilty in your court hearing, even though you know you are, and constantly bring up how you're a good person and always enjoy playing mahjong with your many, many friends.

You get sentenced to 10 years in federal prison, while your words garner sympathy from a niche internet subgroup that claims you were wrongly convicted. Continue to serve your sentence until you're released in 2035, when the job market will finally pick up again.

Since no publicity is bad publicity, at least one CEO will be impressed, regardless of your moral reprehensibility, and reach out with a job offer. But now you don't need to work, because you already have $32 million, a megayacht, and a lifetime's supply of lemon lime soda.

Also, "It's your resume."
by PhotonHunter | 2025-09-16 16:50:31+00:00
If I were designing these newer style aerodynamic handles, I think it would be done such that the handles default to the open graspable state. Retract them when the car is in motion for aerodynamics (is it really that much of a benefit?) such that when the circuit is de-energized in a crash, the handles return to the default open graspable state.
by chuckadams | 2025-09-16 16:50:39+00:00
npm will use your lockfile if it’s present, otherwise yeah it’s pretty much whatever is tagged and latest at the time (and the version doesn’t even have to change). If npm respected every upstream lockfile, then it could never share a single version that satisfied all dependencies. The bigger issue here is that npm has such unrestricted and unsupervised access to the entire environment at all.
by qhwudbebd | 2025-09-16 16:51:10+00:00
UK perspective here: I've not claimed for $43, but I've used the small claims process to recover £65. They replied to the paperwork sent out by the court indicating they intended to defend it, so I paid the hearing fee to take it to court, where the judge was polite, helpful, very switched-on, and didn't seem remotely annoyed by the size of the claim.

The total costs of making the claim were more than the amount I'd claimed, but I'd been careful to provide all the proper notice and offer to settle for the amount of the claim, so they were awarded against the defaulting client.

It was great fun and I think it would have been fun and educational even if I'd lost. Would definitely do it again.
by nradov | 2025-09-16 16:51:23+00:00
So in other words you're proposing more wishful thinking and inaction. Germany has made many attempts to eliminate waste already with nothing much to show for it.

As for their so-called "navy" it's a government jobs program with uniforms. Their warships aren't even able to defend themselves, let alone project power. What a joke.

https://www.twz.com/news-features/german-navy-confirms-its-u...
by thewisenerd | 2025-09-16 16:51:24+00:00
recently pulled the trigger on a migration out of jdk8

we decided to bite the bullet and do 21 instead of 17; one of the reasons being 25 being just around the corner.

as far as i can tell, the biggest hurdle is 8 to 11 (with the new modules system); but it's smooth sailing from there. the proof-of-concept was done with jdk17, but it worked as-is with jdk21 (except guice which needed a major version bump).

(of course being with a jvm language instead of java itself also probably helped)
by floren | 2025-09-16 16:51:29+00:00
We came up with some simple coding exercises (about 20 minutes total to implement, max) and asked candidates to submit their responses when applying. Turns out one of the questions regularly causes hallucinated APIs in LLM responses, so we've been able to weed out a large percentage of cheaters who didn't even bother to test the code before submitting.

The other part is that you can absolutely tell during a live interview when someone is using an LLM to answer.
by miki123211 | 2025-09-16 16:51:39+00:00
(not a Java developer, no dog in this fight)

I'm not sure I like the module import system very much. I think `import *`-like constructions make code a bit easier to write, but much harder to read, especially for developers new to the language / codebase.

C# and Nim love that style, and it makes them almost unreadable without a good IDE.

Personally, I much prefer Python's "short aliases" style, e.g. `import torch.nn.functional as F`
by lycopodiopsida | 2025-09-16 16:51:42+00:00
> Or Lisp via QuickLisp

Common Lisp is not worth it - you are unlikely to hit any high-value production target, there are not many uses and they are tech-savy. Good for us, the 5 remaining users. Also, Quicklisp is not rolling-release, it is a snapshot done one or two times a year.
by everdrive | 2025-09-16 16:51:55+00:00
>Eventually as you get older, your "passion" for learning new things just for the sake of learning wanes

Crucially, you're not really even learning anything that matters. You're just learning new UIs, a new query language, a new framework, etc, and all are equally meaningless; they aren't applicable to other parts of your life, and aren't necessarily even applicable to your job a few years from now.
by m_mueller | 2025-09-16 16:52:20+00:00
I never implied it's useless. I don't have scientific data to back this up either, this is just my personal "feeling" from a couple hundred hours I've spent working with these models this year: GPT-5 seems a bit better at top-down architectural work, while Sonnet is better at the detail coding level. In terms of usable context window, again from personal experience so far, to me GPT-5 has somewhat of an edge.
by efortis | 2025-09-16 16:52:43+00:00
Show them this Ken Thompson paper of 1984: "Reflections on Trusting Trust"

https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...

And then hardware compromises…

I don't mean install anything. I mean, it's not a problem particular to the JS ecosystem.
Show HN: 47jobs – A Fiverr/Upwork for AI Agents
by the_plug | 2025-09-16 16:53:05+00:00
Hi HN,

I’ve been working on something I’d love to share: 47jobs (https://47jobs.com ) – a marketplace where you can hire AI agents to do tasks instead of human freelancers.

Why? I kept noticing that many tasks on Upwork/Fiverr—coding, content generation, data analysis, automation—can now be handled by AI in minutes, not hours. But there wasn’t a platform built around hiring AI directly.

So I built 47jobs:

100% AI agents doing the work (no humans in the loop).

Jobs get delivered 10x faster, at transparent prices.

You can “hire” an agent for coding, automation, research, etc.

I’d love your thoughts:

Does a pure AI-agent marketplace make sense?

What types of jobs would you want AI agents to handle first?

Any UX or trust issues you’d expect with this model?

This is an early version, and I’m here to learn from your feedback. Thanks!
by fitnessrunner | 2025-09-16 16:53:21+00:00
As a 42-year old who has been at this 20 years or so... and who got into tech back in the early 2000s for the love of computer science, I keep thinking to myself... maybe I could become a:

* Physical therapist (5+ years of training)

* Nurse (5+ years of training)

* Pharmacist (Out of the picture at this point)

* Plumber (5+ years of training (to actually get to a point

* where I would be pulling in good money))

* Electrician (same)

* Carpenter (same)

Or... continue to languish here. It really sucks right now. I've been doing 9x9x6 for the past several months because my company fired most of the US staff and are left with a skeleton contingent picking up the pieces, and of course now everything is on fire and everything is an emergency. Lunch meetings, 7AM, 9PM, weekend meetings aren't even blinked at in terms of being abnormal.

I can't stand AI and what it has "done" for society.

:-(
by gunnarmorling | 2025-09-16 16:53:21+00:00
I wouldn't expect migrating from 17 to 25 to be an awful lot of work. The hard bump was moving from Java 8 to 9+ (11, typically), due to the introduction of the module system, removal of APIs previously shipped with the JDK (e.g. JAXB), etc. Things get much easier once you've passed this hurdle. Adopting 17 posed another, usually smaller, challenge due to reflection not working OOTB like before, but I'm not aware of other, equally disruptive changes after 17.
by cubefox | 2025-09-16 16:53:26+00:00
A tangent..

> Bertrand Russell, one of the great intellectuals of his generation, was known by most as the founder of analytic philosophy

That title is usually attributed to Gottlob Frege (in particular his 1884 book "Grundlagen der Arithmetik", and his 1892 paper "Über Sinn und Bedeutung") who directly influenced Bertrand Russell, Rudolph Carnap, and Ludwig Wittgenstein, who all later became large influences on analytic philosophy themselves. Frege is most known for the invention of modern predicate logic.
by The_President | 2025-09-16 16:53:31+00:00
Meanwhile in iOSland I am hesitant to update an iPhone SE 2nd gen from 16 to 18 due to the apparant lack of option to customize the charging limit. To anyone with an engineer mind, this seems like a non-implementation that would have an excuse behind it if it were ever exposed. I also wonder if the Personal Hotspot wifi bug ever will get fixed for old hardware, or will the speculation remain of another service changing its mode to promiscuous momentarily for the sake of more data collection.
by kouteiheika | 2025-09-16 16:53:55+00:00
An AI chatbot is not a person, and you're not talking to anyone; you're querying a (fancy) automated system. I fundamentally disagree that those queries should not be guaranteed private.

Here's a thought experiment: you're a gay person living in a country where being gay is illegal and results in a death penalty. You use ChatGPT in a way which makes your sexuality apparent; should OpenAI be allowed to share this query with anyone? Should they be allowed to store it? What if it inadvertently leaks (which has happened before!), or their database gets hacked and dumped, and now the morality police of your country are combing through it looking for criminals like you?

Privacy is a fundamental right of every human being; I will gladly die on this hill.
by zenmac | 2025-09-16 16:53:57+00:00
There are a few draw backs. dnf for arm linux doesn't support Tor Browser yet!! Power saving was quite bad when I tried a few month back. When on sleep mode, it drains more battery than on MacOS sleep mode.

There are a few other compile/transpile bugs here and there.... but I'm rooting for the it!!! Hopefully they can get sorted out soon.
by patates | 2025-09-16 16:53:58+00:00
You are absolutely right! (Here I'm roleplaying an AI chat bot which caught red handed hallucinating).

It appears that I was wrong about the definition of transpilation. It's a specific term for a compiler that compiles from a high-level language to another high-level language, even when those languages are the same with no DSL and even when the logic is optimized.

I stand corrected.
by yjftsjthsd-h | 2025-09-16 16:54:21+00:00
> Here is a recent report of widespread advanced malware looking to see if a device is rooted

Okay? I do actually think that should be blocked (good root is invisible), but I'm not seeing a problem.

> Here is a report of malware using root

To quote the article:

> In addition to collecting the messages using the Accessibility Services, if root access is available, the spyware steals the WhatsApp database files by copying them from WhatsApp’s private storage.

Note that it already uses a11y features to do the same thing regardless, but also this is another case of conveniently skipping all the important details. Seriously - "if root access is available, the spyware steals" - how did it get root access? If the "vulnerability" is that the malware asks the user for root access and the user gives it, that is not a vulnerability. A system where malware needs permission to do bad things is perfectly fine.