MurphyA/hacker-news huggingface dataset:
by aurareturn | 2025-09-17 10:10:19+00:00
I think it's bad news if the US government owns Tiktok data rather than the Chinese government.

Chinese government won't prosecute me. US government might.

The State Department also said it would crack down on non-citizens who have made posts making light of the shooting. “In light of yesterday’s horrific assassination of a leading political figure, I want to underscore that foreigners who glorify violence and hatred are not welcome visitors to our country. I have been disgusted to see some on social media praising, rationalizing, or making light of the event, and have directed our consular officials to undertake appropriate action,” Deputy Secretary of State Christopher Landau posted on Thursday. “Please feel free to bring such comments by foreigners to my attention so that the @StateDept can protect the American people.” [0]

Americans prefer that Tiktok data lives within the jurisdiction of the US government, why? If you don't think Palantir is putting together a centralized database to survey individual Americans for the US government, you are crazy. There will be real consequences where if they don't like what you're saying or doing, they will come after you some how. I'd much rather have my data based in China.

[0]https://time.com/7316628/charlie-kirk-death-celebrations-soc...
by Tade0 | 2025-09-17 10:10:31+00:00
I can tell you how I got duped into buying their product - a Zephyrus G14:

ASUS at the time had an exclusive deal with AMD to ship their Ryzen 4xxxHS line.

Initially it worked fine, but two years later performance was already much worse and dominated by thermal throttling. Repasting, though necessary due to the state of the paste, only helped partially.

I still don't know the root cause of the issue, but I investigated declining battery performance and it turned out that the iGPU was going full throttle at all times. Setting the dGPU as the preferred device actually improved battery life somewhat.

When mechanical failures started accumulating I switched to a FW16 and never looked back. I don't care what gaming laptop manufacturers have on offer and for how little if I can't buy having them give a shit about their products and customers.
by jeroenhd | 2025-09-17 10:10:36+00:00
Realistically, your malware exposure risk has three parts:

- The apps you run get exploited and your outdated OS can't protect you - An app you install exploits your OS - Someone attacks a system component and exploits your OS

The first risk can be mitigated mostly by just updating your browser/email client/webview engine/etc, which Google supports long past an OS version's lifetime. Android apps typically get updated for five or six versions behind the latest one.

The second attack vector is always a risk (0days do exist), but probably won't harm you if you have a set of trusted apps. There's always the risk of a supply chain attack, but I haven't heard of that in practice outside of cracked apps or that shitty spamware you find on Google Play.

The third vector probably won't affect you either because most system components aren't directly exposed. iOS has a history of getting exploited through simple MMS messages but on Android those processes are harder to exploit (and can often be updated years later through Google Play if you use the Google ones).

There was a huge flaw in Google's Bluetooth stack which pretty much allowed RCE on any phone with Bluetooth enabled. If your phone hasn't been patched against that, you have to be careful about leaving Bluetooth oh. Same goes for WiFi, but those bugs are harder to exploit.

There's a risk, but in practice millions to billions of people use outdated Android versions and malware strains abusing that fact aren't very common, especially not if you don't install weird third party apps from shady sources.

Part of the challenge of exploiting Android devices in practice is that there are endless combinations of firmware versions+device models+system app versions+kernels. iOS, on the other hand, generally has a handful of models, often running predictable software stacks because of Apple's decent track record when it comes to software updates.

Android exploitations does exist: various spyware companies use remote attack vectors, including WhatsApp or MMS like on iOS, to deploy targeted exploit chains to their victims. In practice, that's a risk to journalists, human rights activists, and other people The Government Doesn't Like Very Much (any government, really). Outdated phones are also easily dumped by law enforcement, so if you do anything that could be considered illegal, better not take your phone across international borders.
by baubino | 2025-09-17 10:10:59+00:00
This desire to follow people’s lives from a distance without necessarily interacting with them in the world is the root of the very unhealthy parasocial tendencies driving social media. It seems quite innocent and benign on the scale of one person just wanting to keep up with the life of a cool coworker from the past, but it quickly adds up to a bunch of people passively following other people with very little actual interaction. It is more akin to reading a novel or watching a movie except that social following tricks our brain into thinking we really are keeping up a relationship with the people that we’re voyeuristically watching.
by mjburgess | 2025-09-17 10:12:14+00:00
It's incredibly difficult to kill two million people, the easiest -- if not the only practically possible way -- is with mass starvation.

Here's an interview with a senior UNICEF worker: https://www.youtube.com/watch?v=NsAo2j6aih0

You may want to distance yourself from a defense of israel. This is not what you think it is; within a year a very large percentage of gazans will be dead, a very significant majority of all their children. They are starving now with water withheld. You can kill a large number very quickly if you withhold water.

That's where we are. Israel's actions have becoming increasingly genocidal as they have ratched up the "genocidal escalation ladder" with impunity. They had been afraid that someone would step in, but none have.

There's now no way of reversing at least 20% of the population dying, it's really just a question of whether they can finish them off, at least as a peoples with a need and claim to that land. If they can be whittled down to a small fraction of their original population, they can then be ethnically cleansed.

I'd imagine that has been the plan now for at least a year, or at least, most of this one.
by andycaine | 2025-09-17 10:12:53+00:00
That's great - PGP signing works for you in your org.

But the fact is it hasn't worked for package repos like PyPi, and it won't for npm, because in a distributed, low-trust ecosystem like npm, you can't easily bind identities to PGP keys or have any confidence in the key management practices of package signers.

And of course "keyless" signing isn't literally keyless. But tools like sigstore remove the need for the management of long-lived keys and can bind a signature to an identity verified by a trusted IdP, solving some of the main issues with adopting PGP signatures.
by Prunkton | 2025-09-17 10:13:07+00:00
Since it’s kind of related, here’s my anecdote/data point on the bit rot topic: I did a 'btrfs scrub' (checksum) on my two 8 TB Samsung 870 QVO drives. One of them has been always on (10k hours), while the other hasn’t been powered on a single time in 9 months and once in 16 months.

No issues were found on either of them.
by Findecanor | 2025-09-17 10:13:16+00:00
I find it a little sad that you haven't released a new revision since 2016 [0]. It has not declined in usefulness.

Edit: Incorrect:(I'd guess the biggest requested change would have been to update it from using GTK 2 to GTK 3, but I can definitely understand why someone wouldn't want to...)

0: https://sourceforge.net/projects/gentoo/
by vintermann | 2025-09-17 10:14:06+00:00
In fixed intervals? I'm not so sure about that. Generally if the intervals are fixed, you shouldn't need delimiters, you know where one thing begins and another ends anyway.

Anyway, BWT-based compressors like Bzip2 do a good job on "repetition, but with random differences". Better than LZ-based compressors. However, they are not competitive on speed, and it's gotten relatively worse as computers got faster since the Burrows-Wheeler transform can't be parallelized very well and is inherently cache-unfriendly.
by Gareth321 | 2025-09-17 10:14:48+00:00
The Chair of this "independent" inquiry is Navi Pillay of South Africa (https://en.wikipedia.org/wiki/Independent_International_Comm...); the nation which accused Israel of genocide and referred it to the ICJ. The outcome of this inquiry was always going to be highly partisan. The report's definition rests upon statements by key Israeli officials in determining genocidal intent. While the statements are accurate, in a democracy, individual representatives do not constitute a single will. If the standard used here were applied to other international conflicts in which civilians were killed, as long as just one governing official were to have made genocidal remarks (and they used a fairly wide range), the entire conflict could be ruled to be genocide. Thus the standard used by Pillay and co-authors is so far removed from anything applied to any other nation and conflict that I find the entire exercise farcical.

I await the ICJ ruling, as I regard that institution as reasonably impartial.
by danielscrubs | 2025-09-17 10:15:09+00:00
I don’t get the llm shilling. If you think you can earn 50k with some prompts, then earn it. Why _instead_ shill for llms? Feels like stock traders having courses for how YOU could earn big bucks. They themselves have photos taken with one day rented Ferraris…

We all lean on LLMs in one way or another, but HN is becoming infested with wishful prompt engineers. Show, dont tell. Compete on the market instead of yet another PoC.
by jeroenhd | 2025-09-17 10:15:25+00:00
That's part of the reason why Google is pulling more and more stuff out of AOSP and into Google Play.

They started with the WebViews that vendors refused to update leading to all kinds of exploitation. These days, system components like the bytecode runtime and the Bluetooth stack can be updated by Google, unless the manufacturer actively prevents Google from doing that.

Firmware remains an issue, and IOMMU protections aren't all that great on every single device, but more and more Android internals get maintained by Google these days.

As for messages, there is always a risk in the pipeline between modem and the system service, but the Messages app is just another app you can update through Google Play or whatever store you prefer. Same with the dialer app and plenty of other apps. The super-integrated components that make for preferred exploitation targets on iOS aren't set up the same way on Android (not that Android doesn't have other attack vectors, of course).
by piltdownman | 2025-09-17 10:15:42+00:00
When Daniella Weiss explains that the purpose of the settlements is to "change the reality on the ground", it's probably best to believe her.

//Yet this is what the grocery stores look like, as of two weeks ago

Israel has systematically obstructed food entering Gaza, in the easily-confirmed words of Daniela Weiss again “THE ARABS WILL MOVE, DON'T GIVE THEM FOOD.”

In terms of qualifying a Famine, all three criteria have been met long-since.

Starvation: At least 1 in 5 households face an extreme shortage in their consumption of food

Malnutrition: Roughly 1 in 3 children or more are acutely malnourished

Mortality: At least 2 in every 10,000 people are dying daily because of outright starvation or the combination of malnutrition and disease

"BBC -How Israel's policies created famine in Gaza" https://www.bbc.co.uk/news/articles/ckg4p90z1kxo

The figure _compiled and published by Israel_ confirms it. Between March and June, Israel allowed just 56k tonnes of food to enter the territory; less than a quarter of Gaza’s minimum needs for that period.

Even if every bag of UN flour had been collected and handed out, and the GHF had developed safe systems for equitable distribution, starvation was inevitable. Palestinians did not have enough to eat.

https://www.theguardian.com/world/2025/jul/31/the-mathematic...

Oh yes and the closed-doors, Jewish-only property-expos in America at the moment offering properties in illegally occupied Palestinian territories are just one more piece of that biased media I suppose.

https://www.reddit.com/r/Palestine/comments/1mmilhz/property...

Really looking forward to 'Stealing Sunset' - where Indya Moore, Rain Dove and Heydon Prowse posed as real estate influencers to gain access to the Israeli realtors, hoteliers and developers making a killing from real estate and tourism on Palestinian land.

They included Tomer Mor Yosef, VP of Kass Group, who developed the ‘Magic Kass’ mall, hotel and amusement park in the West Bank); Ze’ev Epshtein, owner of Harey Zahav, who infamously photoshopped blueprints for beach front villas on the bombed out ruins of Gaza; and Shelly Levine, one of Israel’s leading realtors for overseas purchasers in illegal West Bank settlements.

https://operationsunbird.com/ https://www.indiegogo.com/projects/stealing-sunset#/
by justsomehnguy | 2025-09-17 10:15:58+00:00
> The reported SSD lifetime is reported to be around 94%, with over 170+ TB of data written

Glad for the guy, but here are a bit different view on the same QVO series:

Device Model: Samsung SSD 870 QVO 1TB User Capacity: 1,000,204,886,016 bytes [1.00 TB] == /dev/sda 9 Power_On_Hours 0x0032 091 091 000 Old_age Always - 40779 177 Wear_Leveling_Count 0x0013 059 059 000 Pre-fail Always - 406 241 Total_LBAs_Written 0x0032 099 099 000 Old_age Always - 354606366027 == /dev/sdb 9 Power_On_Hours 0x0032 091 091 000 Old_age Always - 40779 177 Wear_Leveling_Count 0x0013 060 060 000 Pre-fail Always - 402 241 Total_LBAs_Written 0x0032 099 099 000 Old_age Always - 354366033251 == /dev/sdc 9 Power_On_Hours 0x0032 091 091 000 Old_age Always - 40779 177 Wear_Leveling_Count 0x0013 059 059 000 Pre-fail Always - 409 241 Total_LBAs_Written 0x0032 099 099 000 Old_age Always - 352861545042 == /dev/sdd 9 Power_On_Hours 0x0032 091 091 000 Old_age Always - 40778 177 Wear_Leveling_Count 0x0013 060 060 000 Pre-fail Always - 403 241 Total_LBAs_Written 0x0032 099 099 000 Old_age Always - 354937764042 == /dev/sde 9 Power_On_Hours 0x0032 091 091 000 Old_age Always - 40779 177 Wear_Leveling_Count 0x0013 059 059 000 Pre-fail Always - 408 241 Total_LBAs_Written 0x0032 099 099 000 Old_age Always - 353743891717

NB you need to look at the first decimal number in 177 Wear_Leveling_Count to get the 'remaining endurance percent' value, ie 59 and 60 here

While overall it's not that bad, losing only 40% after 4.5 years - it means what in another 3-4 years it would be down to 20% if the usage pattern wouldn't change and the system wouldn't hit the write amplification. Sure, someone had that "brilliant" idea ~5 years ago to use a desktop grade QLC flash as a ZFS storage for PVE...
by A_D_E_P_T | 2025-09-17 10:17:20+00:00
What's happening in Gaza right now is unequivocally genocide, and it's shameful. But...

> The Israelis have a near monopoly on force in this conflict. They are the overwhelmingly dominant party, the only one with tanks, aircraft, destroyers and nuclear weapons. They have the power to dictate solutions, and that's what they've been doing for decades, using brute force. Pretending these are two equal sides that just can't agree is a fantasy.

Why should the losers of a conflict get to decide the terms? Has that ever happened, in all of recorded history? Say the Israelis don't want to give up East Jerusalem under any circumstances, what then? Would the Palestinian side be justified in "blocking" the resolution of the conflict?

The way I see it, the fairest and best outcome was a two-state solution with Israeli sovereignty over Jerusalem -- this would have represented a compromise on both sides.

Today, I don't know. I don't think that there is a fair or best solution. They're probably going to just keep fighting until the Palestinian side is hollowed-out and the Israeli side is a Burma-tier pariah state.
by baubino | 2025-09-17 10:17:22+00:00
Reading someone’s life updates and watching their videos is not keeping up a connection though. It’s a parasocial relationship that makes us feel like there is a connection whereas an actual connection would require interaction between people. As you rightly noted, one of the main outcomes of the parasocial relationship is that it replaces real life interactions - you no longer have to ask people questions about their lives or figure out how to make conversation when you do see them; you can just reference their social media posts.
by account42 | 2025-09-17 10:17:50+00:00
AMD developed their closed source Vulkan driver for Windows based on their proprietary shader compiler from their existing proprietary OpenGL driver (amdgpu-pro). They promised to release this driver as open source but didn't want to release the shader compiler for who knows what reason so this took them a while. Meanwhile David Airlie (Red Hat) and Bas Nieuwenhuizen (student at the time) didn't want to wait for that or were just looking for a challenge and wrote their own open source Vulkan driver (radv) which got pretty good results from the start. Linux distributions prefer open source drivers so this one quickly became the default. One AMD released the open-source version of their driver (amdvlk) it was faster than radv in some games but not decidedly so. It was also not an open project but rather just an open source release of their proprietary driver with a different shader compiler. So there wasn't really any reason for the open source developers to abandon their work on radv and switch to amdvlk. But they could and did use amdvlk to learn from it and improve radv so it was still useful. When Valve decided to contribute directly to Linux graphics drivers, radv was already winning so they backed that one as well.

Note that this is only about the user-space portion of the driver - the kernel part of the Linux drivers is shared by all of these as well as the OpenGL drivers - there used to be a proprietary kernel driver from AMD as well but that was abandoned with the switch to the "amdgpu-pro" package.
by haijo2 | 2025-09-17 10:18:15+00:00
Nobody is really behaving in a manner that is tied with long term thinking anymore.

Everything is short term. Just look at the equity market - its all pricing not intrinsic valuation, based on forecasting cash flows out in perpetuity.

Folks need to wake up to this realisation and just accept it as a flaw of the system we operate in. Until the system is revised and redesigned, its not gonna change.
by h4ch1 | 2025-09-17 10:18:20+00:00
Last I personally used Alacritty was 3-4 years back on Linux w/ wayland got some weird rendering bugs, switched to st (https://st.suckless.org/) for a good while.

When I got a Macbook last year, I did a "best terminal macos" search and evaluated multiple terminals; kitty, ghostty, iterm2 and wezterm.

settled on ghostty because it just felt faster for terminal refreshes when I use vite, had tabs, could easily theme it to use ayu-dark. Nothing too extreme, just personal reasons

iterm2 was fine as well, nothing special; wezterm and kitty just felt like linux apps that were on macos as well. YMMV.
by mschuster91 | 2025-09-17 10:18:42+00:00
The problem is, making hardware is hard. Screw something up, in the best case you can fix it in ucode, if you're not that lucky you can get away with a new stepping, but in the worst case you have to do a recall and not just deal with your own wasted effort, but also the wasted downstream efforts and rework costs.

So a lot of the complexity of what the hardware is doing gets relegated to firmware as that is easier to patch and, especially relevant for wifi hardware before the specs get finalized, extend/adapt later on.

The problem with that, in turn, is patents and trade secrets. What used to be hideable in the ASIC masks now is computer code that's more or less trivially disassemblable or to reverse engineer (see e.g. nouveau for older NVDA cards and Alyssa's work on Apple), and if you want true FOSS support, you sometimes can't fulfill other requirements at the same time (see the drama surrounding HDMI2/HDCP support for AMD on Linux).

And for anything RF you get the FCC that's going to throw rocks around on top of that. Since a few years, the unique combination of RF devices (wifi, bt, 4G/5G), antenna and OS side driver has to be certified. That's why you get Lenovo devices refusing to boot when you have a non-Lenovo USB network adapter attached at boot time or when you swap the Sierra Wireless modem with an identical modem from a Dell (that only has a different VID/PID), or why you need old, long outdated Lenovo/Dell/HP/... drivers for RF devices and the "official" manufacturer ones will not work without patching.

I would love a world in which everyone in the ecosystem were forced to provide interface documentation, datasheets, errata and ucode/firmware blobs with source for all their devices, but unfortunately, DRM, anti-cheat, anti-fraud and overeager RF regulatory authorities have a lot of influence over lawmakers, way more than FOSS advocates.
by pornel | 2025-09-17 10:18:53+00:00
People innately admire difficult skills, regardless of their usefulness. Acrobatic skateboarding is impressive, even when it would be faster and safer to go in a straight line or use a different mode of transport.

To me skill and effort is misplaced and wasted when it's spent on manually checking invariants that a compiler could check better automatically, or implementing clever workarounds for language warts that no longer provide any value.

Removal of busywork and pointless obstacles won't make smart programmers dumb and lazy. It allows smart programmers to use their brainpower on bigger more ambitious problems.
by jillesvangurp | 2025-09-17 10:20:00+00:00
> I hope we normalize just admitting when most of a piece of code is AI generated.

People using AI tools in their work is becoming normal. In the end, it doesn't matter how the code is created if the code works and is otherwise high quality. The person contributing is responsible for checking the quality of their contributions. Generally, a pull request that changes half the system for no good reason without good motivation is clearly not acceptable in most OSS systems. Likewise, a pull request that ignores existing design and conventions is also not acceptable. If you do such a pull request manually, it will probably also get rejected and get told off by repository maintainers.

The beauty of the pull request system is that it puts the responsibility on the PR creator to make sure their pull request is good enough. Creating huge pull requests is generally not appreciated and creates a lot of review overhead. It's also good practice to work via the issue tracker and discuss your plans before you start the work. Especially with bigger changes. The problem here is not necessary AI but but people using AI to create low quality pull requests and people not communicating properly.

I've not yet received any obvious AI generated pull requests on any of my projects. But I've used codex on my own projects for a few pull requests. I'd probably disclose that fact if I was going to contribute something to somebody else's code base and would also take the time to properly clean up the pull request and make sure it delivers as promised.
by amelius | 2025-09-17 10:20:35+00:00
Yes, driverless does not solve any real problem. When I come from work, I still have to sit in a car. Yes, I can work instead of drive, but that's only in theory because in practice the G-forces won't allow me to.

A robot cook, however, __would__ solve a practical problem for me.

Anyway, this whole approach is not even solving first-world problems (many families struggle to pay for a car), but it's solving the upper-1% of first-world problems, maybe. Except those people can afford to pay drivers who are now out of a job. So yes, what is this even solving??