MurphyA/hacker-news huggingface dataset:
by braza | 2025-09-09 07:12:44+00:00
> People across England are already banned from using hosepipes, with more restrictions probable over coming months. > So how on earth did famously rainswept England, notorious the world over for being green and wet with our national symbol pretty much a furled umbrella, come to this? > The UK is one of the rainier places in Europe. Some areas are wetter than others > Water companies in England and Wales lose about 1tn litres of water through leaky pipes each year. The industry has said that about 20% of all treated water is lost to leaks. The water firms have pledged to halve leakages by 2050. > Meanwhile, the annual pipe replacement rate is 0.05% a year across all water companies

An honest request for enlightenment:There's the structural problem. There are the structural aspects of a potential solution. There's some mapping around the problem. Given that, why does the England government not provide a definitive solution?

As a former 3rd world resident, one thing that I noticed in Europe is that several basic problems do not have the right incentives or willingness to be solved, even if there are the "raw materials" in place, like capital, human talent, a need, and so on.

I know that some can think like the "Why Didn't I Think of That?" meme template [1], but I have been in worse places where you have several headwinds like corruption, lack of capital, etc.; I see that in England and in continental Europe you can see a lot of those "basic problems" happening and piling up. I wonder if those issues will be solved gradually or if those societies will need to have their “burning platform” moment [2].

[1] - https://imgflip.com/memegenerator/139781746/Why-Didnt-I-Thin....

[2] - https://news.ycombinator.com/item?id=32698044
by bestouff | 2025-09-09 07:12:57+00:00
I wonder how this will work for Rust where bytes are u8 - will they special-case them ? That would look weird.

Also there are some botched examples, e.g. :

> define void @src(ptr %a, ptr %b) > { > %mem = alloca i8 > call void @llvm.memcpy(ptr %mem, ptr %a, i32 1) > call void @llvm.memcpy(ptr %a, ptr %mem, i32 1) > ret void > }

The last %a should be a %b. But you can get the idea anyway.
by tpm | 2025-09-09 07:13:47+00:00
I don't really understand this attitude because clearly if this passes, it will create a (black) market of new communication tools to bypass this and so on and will end up locking down every connected device so we can't run anything that is not government approved. It does not matter there will be ways around this - what matters is they will be illegal. So no, this can't be allowed to happen.
by hdjrudni | 2025-09-09 07:15:06+00:00
Passkeys can be a pain in the ass too. Evidentially I set up my Yubikey with Github as some point, which is fine if I'm at my desktop where my key is plugged in, but if I want to sign in on mobile.... now what? I just couldn't log in on mobile for months until I realized I think there's a button on there somewhere that's like "use different 2fa" but then what was even the point of having a key registered if it can be bypassed.
by arcane23 | 2025-09-09 07:15:15+00:00
Most of Earth's powerful armies are all into war AI/AGI machines and I doubt any of these movements can do the least bit of change about that. If anything these kinds of movements will at most serve as a tool to calm the spirits of concerned people, but nothing else. Or even cut access to AI/AGI tech for normal people, which would be even worse, but more convenient for the people in power.

This movement's framing is suspicious at the very least.
by gonzopancho | 2025-09-09 07:15:35+00:00
You seem to not understand the difference between a fact "The disputed domain name <opnsense.com> was registered on April 8, 2014, and is not pointed to an active website." and an assertion or claim, "The Complainant further points out that the Respondent registered..."

How does bad faith exist when the domain "opnsense.com" was registered a full 8 months prior to the January 2, 2015 OPNsense announcement?

Point in fact, we published nothing. That website was not ours. We pointed the domain at it.

you also are ignoring this bit: ---

However, in contesting the Complainant’s supplemental submissions made by the Complainant to substantiate the asserted use of the trademark before the registration date of the disputed domain name, the Respondent introduces new elements which, in the Panel’s view, are relevant for the assessment of the Respondent’s position in this case and will thus be taken into consideration.

Indeed, in its Supplemental Filing, the Respondent states that a document submitted by the Complainant in its Supplemental Filing (as Annex 17) does not demonstrate the Complainant’s use of the trademark OPNSENSE but provides, instead, evidence of use of a trademark PFSENSE in which the Respondent has rights. The Respondent also informs the Panel that it is the manager of Electric Sheep Fencing LLC, a United States company which owns the United States trademark registration No. 3571276 for the trademark PFSENSE, registered on February 10, 2009 claiming first use as of February 19, 2005, for services in International class 42 relating to technical support services, maintenance and development of computer software; and of the International trademark registration No. 1176766 for the trademark PFSENSE, registered on August 28, 2013, for goods in class 9, including computer security software. The Respondent also states that its company Electric Sheep Fencing LLC has rights in a book referenced on the document submitted by the Complainant entitled “pfsense.org The Definitive Guide to the Open Source Firewall and Router Distribution”.

---

OPNsense were using the pfSense mark, and we were taking legal action to stop them.
by aorth | 2025-09-09 07:15:46+00:00
Most of this reads as disingenuous to me. Not all of us have the capacity or skill to scale so we need to take drastic measures to keep services up.

I do believe in and love the open web. But the AI scrapers need to change, not me! They're the ones with the money and the 10x engineers (apparently). Read my sitemap and crawl my content from one IP, don't just haphazardly crawl and click every damn link and search term from hundreds or thousands of IPs every day!
by dijit | 2025-09-09 07:18:31+00:00
is that really true?

I haven’t touched a lot of these cyber security parts of industry: especially policies for awhile…

… but I do recall that auditing was a stronger motivator than preventing. There were policies around checking the audit logs, not being able to alter audit logs and ensuring that nobody really knew exactly what was audited. (Except for a handful of individuals of course.)

I could be wrong, but “observe and report” felt like it was the strongest possible security guarantee available inside the policies we followed (PCI-DSS Tier 1). and that prevention was a nice to have on top.
by dns_snek | 2025-09-09 07:18:48+00:00
Consider yourself lucky. Some of their A/B tests seem to be designed to psychologically torment you with videos "buffering" for 10-60 seconds before they start playing, navigation taking 15+ seconds.

If that happens to you, this thread [1] is sometimes updated with manual workarounds that sometimes work:

www.youtube.com##+js(nano-stb, resolve(1), *, 0.001) www.youtube.com##+js(set, yt.config_.EXPERIMENT_FLAGS.web_enable_ab_rsp_cl, false) www.youtube.com##+js(set, yt.config_.EXPERIMENT_FLAGS.ab_pl_man, false) ||googlevideo.com/videoplayback$xhr,3p,method=get,domain=www.youtube.com www.youtube.com/watch##+js(set, ytInitialData, undefined)

[1] https://www.reddit.com/r/uBlockOrigin/comments/1jbv1xn/youtu...
by autoexec | 2025-09-09 07:19:15+00:00
When it comes to things like utilities every penny of profit comes at the expense of the public. Either prices are raised so that a small number of people can stuff their pockets with extra cash above what it costs to deliver the service and maintain the system or they get that extra money by failing to deliver the service or they do it by failing to maintain the system itself.

I think the neglect and failure to invest in infrastructure is the worst because unlike high bills or increasing numbers of people not being served it's more or less invisible to the public while companies and shareholders rake in a lot of money, but doing that causes problems tax payers end up footing the bill for down the road, and it may not always be obvious to the public what the cause was.

A power company who makes profit by neglecting the condition of their power lines can cause a wild fire, but it takes a lot of time, taxpayer money, and luck to identify that the lines were the source of the fire, to discover that the company knew (or should have known) about the problem and done something about it, to get enough proof of those things that a lawsuit is possible, and to fight it out in court in order to hold the company accountable. It's not just the cost of fire the public is on the hook for in that case, but the costs of everything else too.
by littlecranky67 | 2025-09-09 07:20:24+00:00
Might be true in the US, but here in Europe we see this quite often. Prices don't have to be negative, it is enough if they are cheap (we pay for water too). And in some locations there are already projects like this [0] where they built a hydro-electric pump station with a dam for storage plus a desalination plant that fills the reservoir from seawater in one location.

[0]: https://www.ree.es/en/ecological-transition/storage
by guidedlight | 2025-09-09 07:20:29+00:00
Is it just me, but doesn’t it seem like a terrible idea to bake the COPILOT trademark into the name of an Excel function?

It could allow Microsoft to threaten to use trademark law against competitors who support the Excel file format.

It would also mean Microsoft would need to provide indefinite support for a function name that might not survive more than a few marketing cycles.
by AlecSchueler | 2025-09-09 07:20:33+00:00
Your sentences are quite difficult to read so I apologise if I'm misunderstanding, but I think it's good to remember cases like Saudi where religious fundamentalists were placed into power by Western powers. These days we see them as representative of the Islamic world but it's largely our own doing.

I'm aware that there are non Islamic "oil countries" of course and I don't think the GP comment was equating oil with Islam. It's just something that does happen in other contexts and that we should be aware of when speaking, because there are very real real would consequences.
Realistic attack vectors against modern ecommerce platforms that defenders miss?
by iksmel | 2025-09-09 07:20:44+00:00
I’m interested in understanding attack surfaces beyond the “usual suspects” like SQLi, XSS, or CSRF.

What are some creative but realistic attack vectors that often slip past defenders in modern e-commerce systems?

- Abuse of business logic (e.g., coupon codes, cart manipulation, returns/refunds) - Supply chain risks (malicious dependencies, Docker images, CI/CD compromises) - Authentication bypasses through SSO/OAuth misconfigurations - Exploiting integrations (payment gateways, third-party APIs, shipping providers) - Insider threats or misused admin panels

If you’ve seen or tested interesting vectors in the wild, I’d love to hear about them. Also curious how defenders can realistically monitor or mitigate these risks without overwhelming their teams.
by Someone | 2025-09-09 07:20:46+00:00
FTA: “This is the first time we’ve offered a paid feature. The reason we’re doing this is simple: media requires a lot of storage, and storing and transferring large amounts of data is expensive”

Those costs are for doing backups to their servers. If this supported making encrypted backups to Google drive/OneDrive/iCloud/etc, they wouldn’t have those costs, and, AFAICT, that would not be less secure, given (also FTA):

“At the core of secure backups is a 64-character recovery key that is generated on your device. This key is yours and yours alone; it is never shared with Signal’s servers. Your recovery key is the only way to “unlock” your backup when you need to restore access to your messages. Losing it means losing access to your backup permanently, and Signal cannot help you recover it.”

⇒ I think it’s more of “we were looking for a new revenue stream, and picked this as a way to get that”

There’s nothing wrong with that, but presenting it as “to get secure backups, we have to make costs” is disingenuous.
by jl6 | 2025-09-09 07:21:18+00:00
I see a lot of skepticism in the comments, but if you’re going to gamble, SMRs seem like a pretty good bet. Nuclear is still in its mainframe era, where everything is bespoke and costly. Modularization enables repeatability, which is the heart of optimization. Doing something smaller, but more often, is how you get good at most things!

There’s a hundred and one “yes, but” objections to make, but our energy transition needs to throw everything at the wall and see what sticks. I don’t think it’s a choice between nuclear and other renewables. We need them all.
by somenameforme | 2025-09-09 07:21:35+00:00
That trick can be easily explained. All you need to do there is repeatedly add no more than 9 to 4 small numbers. Keep a running tally of the thousands, hundreds, tens, and ones places. Then at the end you re-add those numbers while obviously adjusting for overflow.

For a simple example: 1234 + 5678 + 9012. You get: 15 thousands, 8 hundreds, 11 tens, 14 ones. Now adjust for overflow (small to big): 4 ones (1 overflow moved), 2 tens (1 overflow moved), 9 hundreds, 15 thousands. Final calculation: 15,924. Notably the final 'adjustment' phase does not need to be done in 300ms, so all he's demonstrating is being able to repeatedly add 0-9 to 4 small numbers in 300ms. That's certainly an achievement and one that would require a lot of training, but nothing beyond that.

You can also see this in the video by his timing. The numbers start at 22 seconds and he finishes at 59 seconds. So he spent 30 seconds on the numbers (100 numbers at 0.3 seconds), and then around 6 seconds to input his answer.
by monegator | 2025-09-09 07:21:47+00:00
Yeah, no thanks. I used to think like this, and i remember exactly what happened the day i installed my first adblocker: i was already annoyed that some sites i visited employed very annoying ads, on both sides of the window, occupying about 20% of the screen, each. And they were serving an animation with _very_ loud music.

That day instead, when i opened the page 3-4 other pages opened as soon as the website loaded, all serving loud and obnoxious virus alerts, porn and some other crap. But how? I disabled popups a long time ago.

That day i found out about self-clicking ads. That day i installed an ad blocker.

It is THEM that have broken the social contract. Screw them and screw ads.

(good thing that i wasn't on dialup anymore. Anybody remember that? scam sites that would make your dialup bill go up crazy, as if you were calling a courier's help line)
by Ygg2 | 2025-09-09 07:22:21+00:00
From what I've seen. The Odin has three package collections: `base`, `core` and `vendor`.

`base` is intrinsically necessary to port Odin. `core` seems to be its standard library, your `libc`, `xml`, etc.

And `vendor` is everything else. So you basically get the Python's '`core` is where packages go to die' approach iff they take backwards compatibility seriously. Otherwise, they have breaking changes mid-language version change.

EDIT: Package collections not packages per gingerBill.
by AlotOfReading | 2025-09-09 07:22:26+00:00
Safer in what sense? We have no idea whether this hypothetical code is in a userspace application that can exit safely at any time or a hard real time system where panicking could destroy hardware.

A lot of important programs (like the Linux kernel) don't operate strictly on the exact letter of the standard's UB semantics. They do things like add compiler flags to specify certain behaviors, or assume implementation details.
by yibg | 2025-09-09 07:22:55+00:00
I'm frankly amazed that not a small portion of the population seriously believe that he's not corrupt and is genuinely trying to do what's best for the country. Many believe he's making a personal financial sacrifice in doing so. And this despite the mountains of evidence. I mean the man isn't even trying to hide it.

I'm not trying to be snarky here, just curious and seriously trying to understand the thought process. Not sure if I'll get a response here, but if we just take one example of trump coin and dinner invite for those bought a lot of it. How do you justify that? And if Biden or Obama did the same thing, launch their coin which they have control over while being president. Invite people that they can directly benefit or harm with their position to buy and hosts a person dinner for those that bought a lot of it, would you be as forgiving?
by rekoil | 2025-09-09 07:22:59+00:00
> And you sure as hell don't have primadonna developers stay in the payroll for long if they start throwing tantrums and personal attacks towards fellow engineers when they are asked to follow the release process or are called out for trying to sneak untested changes in mission-critical components.

You've obviously not been in this industry for very long, about half the places I've been to have had at least one "rockstar developer" that was actually quite mediocre but had the ear of management which thought they were all that and as a result got to do whatever they wanted.
by foresterre | 2025-09-09 07:24:45+00:00
I felt that the beginning of the game is pretty punishing, exactly because you don't have these movement abilities yet.

After getting Swift Step (dash), the game became quite doable. Luckily you get dash a lot faster than in the original game, although I would say, in Silksong it's more a necessity.

I went through Hunter's March without abilities and initially I hated the diagonal pogo jumps. It took a night's sleep to reset my mind, and learn pogo-ing for real.

That also was the lesson I needed to go forward: take your time, consciously clear the environment, and learn the movesets. I have a lot of hours in the original game, and was way too used to sprinting through the environment.
by danbruc | 2025-09-09 07:24:53+00:00
1. Strictly speaking, we’re not naming a table, we’re naming a relation.

And a relation is a set, hence plural.

2. It reads well everywhere else in the SQL query:

SELECT Employee.Name , Manager.Name FROM Users AS Employee , Users AS Manager WHERE Employee.ManagerID = Manager.ID AND Employee.DateOfBirth IS NULL;

3. The name of the class you’ll store the data into is singular (User). You therefore have a mismatch, and in ORMs (e.g., Rails) they often automatically pluralize, with the predictable result of seeing tables with names like addresss.

The class User represents a single row, not the entire table, hence singular. If the O/R mapper or some other tooling has issues with singular and plural, then I agree, it might not be worth fighting the tools.

4. Some relations are already plural. Say you have a class called UserFacts that store miscellaneous information about a user, like age and favorite color. What will you call the database table?

I think having the table and the class name both in plural would be fine. That also seems rare enough in practice that I would not let this dictate the decision. In the given example I would also tend to record the user facts as a list of them. A user fact is a key value pair associated with an user, the keys living in their own table. Having the keys implicit as column names will also make some queries unnecessarily complicated and as the number of facts grows, the table will become increasingly wide.

Also sometimes we have singular names for collections of things, then it is fine to have a singular table name, you can name your Trees table Forrest if that makes sense in the domain.
by PartiallyTyped | 2025-09-09 07:25:36+00:00
All execution has to be serial in one way or the other, even if you backtrack you still spent time at T-i at one state, and then go back to a previous state. An LLM could very well act as simply having a tape of the computations it executed and evaluated in the sense that tokens J-K correspond to state at T-i, and the tokens after correspond to the previous state.

In essence, thinking of the computations performed as if logged on an infinitely long tape.

Now, an immutable tape without overwrites is at best a finite automaton, but giving it the ability to replace tokens — which we have and can do — gives us an interpreted tape that — in a very handwavey manner and if you really squeeze your eyes — resembles a Turing machine.

So backtracking could be simulated by an LLM, no?

Is there any “difference” under these conditions up to what an LLM can approximate?
by 0points | 2025-09-09 07:26:54+00:00
> what do you like the most about jellyfin

- Not selling off my watching history to third parties. This is a privacy disaster still about to blow up. Expect holders of large plex libraries with pirated content to be lined up in court in the near future.

- Decentralized.

- Not parasiting on FOSS such as ffmpeg. Plex famously took everything from ffmpeg and gave nothing back, while making lots of money in the process.
by netcan | 2025-09-09 07:27:06+00:00
>I also think it would take some doing to get advertisers to jump on a new platform when YouTube has almost all the viewers.

Volume isnt even your main issue here. YouTube ads are powered by adwords... that all advertisers already use. It comes with tracking and user-analytics built in.

You can't compete with YouTube by replicating this business model.

Even so.. direct YouTube ad revenue per view is low. Many successful tubers monetize with sponsors. That is replicable, if a (single) tuber has enough views.

I think there can be markets for smaller, paid video sites... but that's not really a competitor to YouTube. It's more like competition for substack.

The way YouTube is managed, including all the reasons for criticism, are why it is successful.

Legible rules have loopholes. Keeping advertisers "on their toes" with mystery rules is a strategy.

It makes sense to keep the platform as unoffensive as possible. Strict nudity rules, and other such "hard" rules. Demonetization gives yotube a chance to implement soft/illegible rules... many of them simply assumed or imagined. It also makes business sense to suppress politics a little. The chilling effect is intentional.. and understandable.

Honestly, I think the more open alternative to YouTube is podcasting. Podcasting has terrible discovery, and video is underdeveloped but... it also has persistence that proves it is a good platform.

Half of "the problem" with YouTube is Google running the platform and pursuing their own interests. These are somewhat restrictive, but they also make sense.

The other half is intense competition for daily attention. That's what a low friction, highly accessible platform does. You can't have everything.

Without all the restrictions and manipulations that YouTube do, the platforms would be 100% nudity, scandals and suchlike.
by wkat4242 | 2025-09-09 07:27:41+00:00
> And it doesn't have a global fucking hot key for push to talk/muting.

It's control-space. It is global on Windows as far as I know. Unfortunately you can't change it because I would love to have a single key I don't normally use assigned to it. I use a Mac keyboard with 19 function keys so there's plenty that I would never touch.

I agree with all the other criticism by the way, it's a messy slow clusterf*k.
by zozbot234 | 2025-09-09 07:27:48+00:00
Thing is, traditional nuclear plants generate so much power that we only need a few "bespoke" plants to fill in all baseload demand and even provide enough redundancy. Renewable sources are quite a bit cheaper though wrt. to the sheer amount of bulk power that they supply over time, it's just unreliable and highly intermittent. Smaller reactors just aren't very useful in that kind of scenario - it's unlikely that they'll be cheaper per watt than a few large plants.