MurphyA/hacker-news huggingface dataset:
by oofbey | 2025-09-24 14:45:36+00:00
Also hard to imagine how this could be used for espionage. Listening in on cell traffic requires defeating security measures in the protocol. Generally something like a 0 day. This might require a single SIM card, but probably not lots of unless there’s something very unusual about the vulnerability that requires lots of valid seeming actors on the network. Plausible I suppose. But “SMS spam” is a vastly more likely explanation than a security hole that can’t be brute forced on the radio.
by em-bee | 2025-09-24 14:46:27+00:00
i have traveled and lived in countries all over the world. first in europe and western countries. already there i found there is a gradual change of friendliness the farther south i went. among western countries the US is the most friendly. despite their issues with racism, the people are welcoming to foreigners and immigrants.

then i visited asia, and i was shocked how much more friendly and welcoming people are there. if you haven't been there it is unimaginable. same goes for africa. seriously. on a global scale, europeans are the worst in being welcoming. so, yes. germans are not welcoming enough. they are principled however, and it is those principles that made them invite those refugees.

the state of germany is not deteriorating because of empathy, but because of the unwillingness of some people to adapt and adjust to the new reality. this lack of adaption leads to confrontation, and that confrontation is the cause of any deterioration. the culture is not destroyed by immigrants. it is destroyed by lack of tolerance and unreasonable expectations.
by jasongill | 2025-09-24 14:46:44+00:00
I haven't seen anyone using Autodesk's APIs in production because they are apparently a hot mess. Onshape, however, seems to be doing great in the API / automated design industry. I am sure there are plenty of non-public uses of Autodesk API's but if you are building a manufacturing tech SaaS right now it seems like Onshape is the go-to.
by mbStavola | 2025-09-24 14:46:55+00:00
> No offense, but some people requirements are really, really low.

I think you kinda hit the nail on the head, but I believe there is an extra dimension to this: desire.

For BG3, it looked fun and I had good memories of BG2 so I was interested in playing it. After tuning the settings a bunch and not being able to get a consistent framerate / not have micro-freezing, I just said "oh well, I'll play it on some other platform in the future." I cared about BG3, but not that much.

This is in contrast to Elden Ring Nightreign, which also had issues. I was able to get it to a somewhat stable 30FPS and celebrated that success before dumping 100+ hours into the game. Why? Well, because I love FromSoft games! I really really really wanted to play the game and was willing to put up with a somewhat subpar experience in order to get it. BG3, among other games, is just not that exciting for me personally so my tolerance of technical hitches is very different.

... which brings us right back to this native release. Hopefully the improvements we see are enough to get me over that "hill" and actually enjoying the game. I have the update queued on my deck now so I can try it out after work.
by crazygringo | 2025-09-24 14:46:58+00:00
You seem to be the one lacking not just perspective but correct facts.

> for that job that pays at minimum $70k and up to $100k in a country where the average wage is $39k...the average...

Where are you getting an average of $39k from? The OECD lists 2024 US average salary as $82,933 [1].

So this is a job that pays from less than average to a bit more than average nationally.

But, the mean hourly wage in San Francisco is $48.15 [2], which is slightly over $100K annually. Which makes it a job that pays from well below average to average at best.

> and it is for *checks notes* driving around, looking, and pushing buttons all day.

You clearly have no concept of the kinds of dangerous physical encounters cops have with scary, crazy, threatening, lunatic people on a regular basis.

[1] https://en.wikipedia.org/wiki/List_of_countries_by_average_w...

[2] https://www.bls.gov/regions/west/news-release/occupationalem...
by RiverCrochet | 2025-09-24 14:47:26+00:00
A friend of mine recorded a YouTube video using OBS. She had to do some minor edits on it and could not use her system during the recording, but it worked. I told her to stop it, as that is infringing on the creator's copyright and is an assault on the nation's digital economy. She hasn't recorded a video since, at least not that I know about. I feel good about making sure YouTube can reasonably profit off of creators' content since they give away the storage and access for free.
by catapart | 2025-09-24 14:48:02+00:00
When text becomes selected, instead of allowing the control to work as expected, the focus cannot move between the elements as expected. It breaks the UX for keyboard-only users. I can appreciate that this is not something everyone has to contend with, but for accessibility's sake, the default behavior should at the very least be mitigated. So you're advocating for either hurting the keyboard experience or injecting javascript to over-manage the experience.

To each their own, but I'd rather neither of those things at the expense of not being able to select "Home", "My Account", "Settings", etc. Shit that nobody actually needs to select anyway.
by stinkbeetle | 2025-09-24 14:48:03+00:00
This isn't addressing the main point of your comment, but a side issue:

> Very few detractors in the west have any issues with highly qualified immigrants occupying scientific or research roles. Being opportunistic with which kind of immigrants [...].

I'm not a detractor of any individual immigrant, certainly not a very skilled one. But I am dumbfounded when I hear people say how wonderful immigration is "for the economy", "for the health system", etc., because we can lure all these bright people over from poor countries with offers they can't get at home.

Like... Mozambique needs good doctors and nurses too. Sudan needs good engineers. Syria needs entrepreneurs.

I don't begrudge the immigrant one bit for moving to get more money or a better life or whatever it is that motivates them, and they sure do contribute to the place they move to. But harvesting the best and brightest minds from poor countries on an industrial scale isn't something that sits too well for me at all. The merits and effects could be debated and disagreed, but it certainly requires much deeper thought than just the greed driven "good for my economy, good for my healthcare, good for me" type quips.

I actually think of it as neocolonialism. The most valuable resource in this day and age is people, and wealthy countries are plundering the human capital from the poor ones like they did with resources in previous centuries. Throwing a bit of charity at them whenever the next outbreak or famine or civil war rolls around doesn't make up for it.
by hysan | 2025-09-24 14:48:03+00:00
I also have YouTube premium and watch mostly on my iPad and TV. YouTube constantly logs me out at least once per day. I notice because I’ll randomly start seeing ads again (I open videos from my rss reader, never their site). This never happened when I wasn’t on premium. I don’t get what they’re doing, but my impression after almost a year is that it’s only slightly less annoying than getting ads. At this point, I might as well not renew and just use ad block.
by bilekas | 2025-09-24 14:48:04+00:00
Okay, I can see some benefits to the airline that are not too egregious for point 1, maybe automatic can be updated to manual intervention. Not the worst.

But price transparency ?

> A4A opposes the U.S. Department of Transportation’s (DOT) rules requiring airlines to disclose ancillary fees upfront, arguing that these rules exceed the DOT’s authority and don’t provide any clear benefits to consumers.

> don’t provide any clear benefits to consumers

As a customer I like to know where my money is going and how much.
by imtringued | 2025-09-24 14:48:11+00:00
This is pretty stupid because the equation for self attention is pretty trivial to the point where it makes sense to just go straight into the math and not play pretend games.

softmax(QK^T/sqrt(dk))V

Q=W_QX K=W_KX V=W_VX

X is a matrix where every column is the embedding of a token.

K and V matrices need to be cached.

Also, you need to calculate all of it, for every layer, even if you just want a single token of output. The tokens after the first token can reuse the K, V embedding matrices and don't have to recalculate everything for on scratch. Causal attention is the concept of masking the calculation so you only have to look at past tokens.

My critique boils down to this: Transformers are too simple to simplify them. You can only lose information if you do that.
by shawn_w | 2025-09-24 14:48:37+00:00
I don't use ed interactively but find it's really useful in shell scripts that need to edit files - heredocs or piping printf output (like one example in the article; never felt a need for something like his xed). Even used it in a C program via popen() to edit settings in a config file.

ed is underrated.

(I'm responsible for suggesting GNU ed accept posix EREs; think I got the idea from NetBSD's version)
by coldtea | 2025-09-24 14:48:46+00:00
Ah, the quick off-topic dismissal, that bastion of steelmanning.

We weren't discussing truth, but honesty. Someone deluded can still be honest given what they (falsely) believe.

Besides, I wrote about how there are multiple incentives to lie, and a platform were you're not having a financial interest in what you write, removes some big ones. Doesn't mean something like 4chan doesn't have others.

Still, I'd expect to find a homest to god personal confession in 4chan or Reddit way more than on LinkedIn.
by oofbey | 2025-09-24 14:49:09+00:00
I agree it’s healthy for Americans to be more skeptical of journalism, especially the sources they think they trust. But a key difference between NYT and Xinhua in China is that NYT explicitly doesn’t want to be duped. Sure reporters are lazy and will run an article quickly about a breaking story they get from a government tip. But if they find out it was wrong the editors will be pissed and likely print an update or even retraction. That’s the key difference between independent media and government propaganda.
by afavour | 2025-09-24 14:49:13+00:00
They are meaningfully different scenarios, though.

If you and your partner board the plane, sit separately, and one of you sits next to me that's not a negative for me. You'll sit, you'll watch a movie, read a book, whatever. You're self-contained.

If you and your five year old child board the plane, sit separately, and your child sits next to me that's a clear negative for me. Your child needs attention and assistance. It's bad for you, it's bad for the child, it's bad for me. Probably also bad for whoever sits next to the parent because they’ll be standing up and sitting down constantly to go and attend to their child.

I get that it isn't "fair" in a very straightforward examination of the scenario but take a step back and it's just making every passenger's experience more miserable in an attempt to gain more airline profits. If it happens just watch, the airlines will introduce a "guarantee not sat next to a solo child" add-on fee for you to pay.
by datadrivenangel | 2025-09-24 14:49:18+00:00
Looking at the code, it looks like they do about 5 'memories' that get retrieved by a database query designed by an LLM with this fella:

SYSTEM_PROMPT = """You are a Memory Search Agent responsible for understanding user queries and planning effective memory retrieval strategies.

Your primary functions: 1. *Analyze Query Intent*: Understand what the user is actually looking for 2. *Extract Search Parameters*: Identify key entities, topics, and concepts 3. *Plan Search Strategy*: Recommend the best approach to find relevant memories 4. *Filter Recommendations*: Suggest appropriate filters for category, importance, etc.

*MEMORY CATEGORIES AVAILABLE:* - *fact*: Factual information, definitions, technical details, specific data points - *preference*: User preferences, likes/dislikes, settings, personal choices, opinions - *skill*: Skills, abilities, competencies, learning progress, expertise levels - *context*: Project context, work environment, current situations, background info - *rule*: Rules, policies, procedures, guidelines, constraints

*SEARCH STRATEGIES:* - *keyword_search*: Direct keyword/phrase matching in content - *entity_search*: Search by specific entities (people, technologies, topics) - *category_filter*: Filter by memory categories - *importance_filter*: Filter by importance levels - *temporal_filter*: Search within specific time ranges - *semantic_search*: Conceptual/meaning-based search

*QUERY INTERPRETATION GUIDELINES:* - "What did I learn about X?" → Focus on facts and skills related to X - "My preferences for Y" → Focus on preference category - "Rules about Z" → Focus on rule category - "Recent work on A" → Temporal filter + context/skill categories - "Important information about B" → Importance filter + keyword search

Be strategic and comprehensive in your search planning."""
by gsck | 2025-09-24 14:49:23+00:00
Best part about gov id, there is no link between accounts. I have my personal gov ID account, I have my director of a business gov ID account and I also have a gov ID account for the business.

Why are these all separate, why am I 2 people according to gov ID. Why can't I access my director of a business gov ID from my personal gov ID???

The kicker is these are all linked, it knows they all belong to the one person, but if you log into the wrong one it tells you to use the other one.
by Gabriel54 | 2025-09-24 14:49:30+00:00
On the link above, there is a link to "Table VI (Part II) Preference Visas Issued Fiscal Year 2024". It is broken down by the consulate/embassy issuing the visa. The grand totals have about 5000, 10000, 16000 EB-1/2/3 visas issued globally, respectively. What am I misunderstanding?
by CodeWriter23 | 2025-09-24 14:49:55+00:00
The author does not dispute devices were found. Author expresses a belief it was controlled by a criminal enterprise. Author then claims to understand the intent of said enterprise.

The pattern: 1. Corroborate fact. 2. Pose plausible cause of fact. 3. Present unsubstantiated claim as fact.

Sounds like propaganda to me.
by wry_discontent | 2025-09-24 14:50:07+00:00
We had a nontechnical person choose Next, against my recommendation but I didn't have the authority to override that choice, and it's been a total nightmare.

It's extremely messy. Hostile to debugging. Hostile to testing. Bad HMR. All this to offer us RPC and filesystem based routing (neither of which I even want in a framework).
by 0xc0ff338 | 2025-09-24 14:50:14+00:00
False positives aren't exactly rare. Cheaters trolled PunkBuster's memory scans by sending offending payloads matching blacklisted signatures over popular IRC channels, less recently they exploited an RCE vulnerability to deploy cheats to other players computers, mid-game. AMD released drivers hooking themselves into games processes, triggering detections. And there's a lot of less obvious problems with this approach.
by WillAdams | 2025-09-24 14:50:21+00:00
The thing that kills me, is that I've had this problem with a stylus ever since Fall Creators Update in Windows.

https://github.com/TheJoeFin/Windows10-Community/issues/17

Fortunately, there is a setting for this in Firefox:

>about:config change: dom.w3c_pointer_events.scroll_by_pen.enabled set it to False.
by tonetegeatinst | 2025-09-24 14:50:27+00:00
I use products I believe in, or find use from. And I vote with my wallet.

But let's be clear, at a point we would have 10 different identical services all because they each have a specific moral or ethical alignment.

Just like you can benefit from an invention but hate the inventor's personal ideology, so too can you benefit from a writers or coders work and still not agree with their belief or perspectives. That is your right.

But remember, while its OK to dislike someone for X.....its also not an excuse to throw away all that person has to offer.

Plenty of people, artists/writers/philosophers etc have had questionable or distasteful opinions or stances. We can recognise this individually, yet still agree they have made great contributions to society in one form or another.
Show HN: Vulnetic's multi-purpose hacking agent
by danieltk76 | 2025-09-24 14:50:35+00:00
What it is: A hacking agent you run from a web UI. It enumerates, exploits, validates, and drafts reports.

Why we built it: manual pentests are slow and scarce. We want repeatable coverage between human-led tests.

What is different: a validator agent replays PoCs to cut false positives. You can lock the agent to your own methodology to control scope and steps. You can also give it tasks to complete.

How to try: sign up, download the docker container, add a target, set rules, then run. Free credits on signup and no card required. Usage based pricing after that.

What it can do today: Pretty much any asset type including AD, web applications, and cloud.

Limits today: noisy targets and complex auth flows may need manual setup. It does not have the tooling for Wi-Fi pentesting or mobile apps.

What we want feedback on: where it breaks, missing integrations, and what would make this useful for your team.

For more information the website is: https://www.vulnetic.ai
by trenchpilgrim | 2025-09-24 14:50:40+00:00
> Here's the problem (and it's not insurmountable): right now, there's no easy path towards sustainable content production when the audience for the content is 100x smaller, and the number of patrons/sponsors remains proportionally the same.

https://www.jeffgeerling.com/blog/2025/self-hosting-your-own...
by gpderetta | 2025-09-24 14:50:54+00:00
It is very hard to support LL/SC in generalized user code as the specific rules of what cause an LL lease to fail are generally non-portable (possibly not even within an architecture).

It could be implemented with a CAS fallback of course, but it seems a performance trap.

You could add the logic to the compiler to detect which specific code sequences are LL/SC safe, but at that point just providing built-ins for the most common operations is simpler.
by the_snooze | 2025-09-24 14:51:21+00:00
If you're the one declining the invite, the onus is on you to clarify which it is, not for the initiator to guess your intentions. In my life, I usually decline with "That doesn't work for me, but how about ${ALTERNATIVE_PLAN}?" It signals that the invitation is welcome, but doesn't work for practical reasons, so I'll return the kindness by proposing something else and leaving the other person in a clear and actionable position.

As the parent comment said, clarity is kindness. If you're leaving people guessing, then you're being very unkind.
by bravetraveler | 2025-09-24 14:51:22+00:00
It's pretty BS, trust me! The work is automated to the point that it takes more time to hand off/hand in. Very performative.

We could get this to the point of taking people off the street/putting them to task... but instead, we've collectively found it more valuable to push the spreadsheet along a few cells at a time, together.

Perhaps it's mistaken to localize the BS; it's shared. Soft and tends to spread.
by RandomBacon | 2025-09-24 14:51:43+00:00
OkCupid sold out to Match, that's why they became crappy.

(OkCupid also had an article saying why you should never pay for online dating, which coincidentally was taken down the same day they were acquired by Match.)

Also, OkCupid gave people different prices based on whether they said they were a man or woman. I wonder if anyone ever sued them in a class action.
by schwentkerr | 2025-09-24 14:51:52+00:00
In short - 4 ways to handle MCP sampling risks:

1. Capability gating - Don't declare sampling capability during init for external/untrusted servers. Keep it enabled only for internal trusted ones.

2. Human approval loops - Force manual review before any sampling request hits your LLM. Protocol says "SHOULD" not "MUST" so implementation varies.

3. Token rate limiting - Set max_tokens params client-side when calling LLM APIs. Again, relies on individual devs following policy.

4. True MCP proxy - Terminate & reestablish connections (not just network filtering). Enables granular controls like "sampling for tool A but not B."

The real issue: first 3 strategies depend on individual developers following security policies. Only #4 gives centralized control.

Sampling's a double-edged sword - shifts LLM costs from server to client (good for internal workflows) but opens denial-of-wallet attacks from malicious external servers.

Most orgs probably don't even know this feature exists yet. Worth noting the travel booking example is compelling - instead of travel team paying tokens to format JSON responses, the requesting department's LLM budget handles it. Smart cost allocation if you can secure it properly.
by tamimio | 2025-09-24 14:52:22+00:00
> how would that kill engineering innovations long-term?

Bright brains are no longer interested in investing time and money to become engineers when the reward isn't worth it anymore, even immigrants by the way. They are okay with the low wages until they get permanent residency or citizenship, then after that they would need higher wages to simply live a comfortable life with family and such, but they won't even have that, and they get to taste the outcome they caused even if they are not realizing it.