MurphyA/hacker-news huggingface dataset:
by EvanAnderson | 2025-09-11 18:34:03+00:00
I'm with you on this. I run my ACME clients as least-privileged standalone applications.

On a machine where you're only running a webserver I suppose having Nginx do it the ACME renewal makes sense.

On many of the machines I support I also need certificates for other services, too. In many cases I also have to distribute the certificate to multiple machines.

I find it easy to manage and troubleshoot a single application handling the ACME process. I can't imagine having multiple logs to review and monitor would be easier.
by JustExAWS | 2025-09-11 18:34:08+00:00
You didn’t look at the prices of other “Google assistant” compatible headphones did you?

And those Sony ones aren’t cheap.

The first review I found comparing them..

https://wasteofserver.com/sony-wf-1000xm4-vs-apple/

Why would I want to by a none Apple laptop with horrible battery life, loud, and that produces enough heat to ensure that I don’t have offspring if I actually put it on my lap?
by WinstonSmith84 | 2025-09-11 18:35:01+00:00
it's about the interests of each party.

The interest of a government is to control its citizen, either now or at some point in the future.

The interest of a private company is to make more money.

Between the two, I certainly prefer a private company attempting to monetize my data rather than a government trying to control me either now or in the future. And let's stop the bs about "public servants", even in the EU which is maybe the most democratic bloc in the world, governments are trying to impose a chat control (among other laws restricting freedom). It's just in the nature of governments to control its population
by pxc | 2025-09-11 18:35:23+00:00
IME LLMs are only useful for very basic completion, answering careful questions about Nixpkgs idioms, and some basic packaging stuff (but it's easier to just read the manual for that), when it comes to Nix. They generate needlessly overcomplicated code, and they are worse than useless when it comes to the module system (always falling into infinite recursion problems and giving you nonsense solutions to it).

What have your successes in using LLMs to write Nix code looked like?
by smalltorch | 2025-09-11 18:36:07+00:00
This script compiles all the needed dependencies and builds the server in termux. Watch streamable link for all features of the chat server.

Once completed, you are now running a hidden service others with a Tor browser can chat or share files anonymously.

Raw Script https://limewire.com/d/UBcgm#Ey2Hkqky81

Mirror https://pastebin.com/DbnDhCzB

To install. Open Termux > nano torchlockdown.sh > chmod +x torchlockdown.sh > ./torchlockdown.sh

After install, open link in a tor browser and share with your friends. Try refreshing if it doesn't load the very first time :-)
by tuckerman | 2025-09-11 18:36:27+00:00
I get what you are saying but surely obtaining a certificate is much closer to being considered a core part of a web server related to transport, especially in 2025 when browsers throw up "doesn’t support a secure connection with HTTPS" messages left and right, than those other examples.

I think there is also clearly demand: caddy is very well liked and often recommended for hobbyists and I think a huge part of that is the built in certificate management.
by RHSeeger | 2025-09-11 18:36:52+00:00
Because it has been commented over and over "oh, type 2 is because you are overweight"...

> We tend to think of type 2 diabetes as a disease that afflicts people who are overweight. But it can also appear in people with perfectly healthy weights—and be more deadly in them. A study published today in the Journal of the American Medical Association indicates that normal-weight people diagnosed with type 2 diabetes have double the risk of dying from heart disease and other causes than overweight people with diabetes.

- https://www.health.harvard.edu/blog/diabetes-can-strike-hard...

(Yes, I know this post is about Type 1... but _all_ of the talk in it when I posted this was about Type 2; and basically blaming the people with it for their condition)
by SequoiaHope | 2025-09-11 18:37:02+00:00
Municipal approval was probably only a minor part of the development time tho no? Google was operating Waymo in Mountain View for years before they expanded. The vast majority of the time cost was in development.

I think technology development can be faster thanks to better AI systems like VLA models, but I do think the time to real deployment will be long.

My pet issue is that the dexterity of the hands is still really poor. A human hand is incredible with what it can do.

I think between the general manipulation tasks, world understanding, and more these systems are still a long ways out for widespread use, though I wouldn’t be surprised if they find niche uses near term.
by UtopiaPunk | 2025-09-11 18:37:04+00:00
The USA really needs to implement Medicare For All or a similar plan. The amount of bureacracy that would be simplified or just go away is staggering. The savings would be huge. Getting healthcare would be easier not just for patients but for doctors as well! Doctors' primary concern is providing the best treatment for their patients, but they usually have no idea how much such treatment would cost. Patients often don't know if they'll be totally covered or if they'll be financially ruined until they make a separate phone call to some customer support rep (who also probably doesn't really know). It's nuts. Under a Medicare For All system, coverage would be standardized for everyone, and doctors would have much better understandings of whether an MRI or X drug would be covered or not.

Likewise, employers won't have to carry this burden. Companies that hire employees across multiple states have to navigate a patchwork of state/region based health insurance policies. Whenever there is a wrinkle in health insurance paperwork, an HR person has to to hunt down the issue and coordinate between an employee and the health insurance.

My gosh. I switched employers within a month of having a major medical event, and it was just the worst. The hospital was claiming I didn't have insurance, but I did (through COBRA, which is a whole other shit show that should and would go away), so I had to have multiple phone calls with the HR dept of the employer that I had just left. It's pretty awkward!

How often do we get to say that the government option reduces bureacracy.

That's not to mention the increasing potential for innovation! I know personally I left a fulfilling but somewhat unstable freelance lifestyle to get a job that offers health insurance after I had kids. I would like to pursue something else independently, and I can tolerate the financial risks, but I simply cannot tolerate the high costs of health insurance for myself and the rest of my family (or worse, the risks that come with having no insurance at all). If my family had health insurance, I'd leave my day job and chase other more exciting, fulfilling prospects. If that was a successful venture, maybe I could afford to hire a few employees because I wouldn't have to cover their health insurance.

Medicare For All should be a slam dunk. The only thing standing in the way is the health insurance industry, which is rolling in money. Get rid of them.
by ajdude | 2025-09-11 18:37:20+00:00
> I fully expect to still be paying a human cleaning service decades from now.

I'm curious if a cleaning service wasn't an option, would the Roomba be worth the saved time compared to doing the cleaning yourself?

I also own a Roomba, but I don't have a cleaning service so my options are either do 100% of the cleaning or let the Roomba do its thing and manually take care of the difference.

For me it's just one less room I have to sweep.
by AnimalMuppet | 2025-09-11 18:38:27+00:00
What should be the response to genuinely transgressive speech? What the title said. Ditto all the other examples you gave.

You don't beat up somebody for being stupid. You don't kill somebody for advocating planar planetary physics. You don't beat up somebody even for advocating racial discrimination. (You don't "quietly demur", either. You respond with forceful denunciation and moral condemnation.)

In this country, you don't beat up or kill someone for blasphemy. And in any country, you don't if you're a Christian. A Christian's orders are to love their enemies, do good to those who hate them, and pray for those that persecute them. I don't see "kill" anywhere in that.
by satisfice | 2025-09-11 18:38:31+00:00
Regardless of your take on political violence. Studying the history of especially the French and Haitian revolutions is instructive. Going down the road of civil war sounds good to some of us, but the reality of civil war is incredibly bleak. The Haitians have still not recovered after 225 years.

It’s mind boggling how violent and destructive it can get once people completely give up on the humanity of other people.

So, let’s keep trying for more peaceful lives. Even angry peace is better.
by philipkglass | 2025-09-11 18:38:36+00:00
Who are Oracle's cloud computing customers? In my circle I hear mostly about AWS, with a little Azure and GCP, but I don't know people running anything on Oracle Cloud. Presumably there are circles where Oracle Cloud is gaining rapidly, given these numbers. Are these Oracle customers shifting from other cloud providers or using cloud resources for the first time?

EDIT: I missed the news from yesterday that OpenAI signed a $300 billion (!) contract with Oracle Cloud:

https://techcrunch.com/2025/09/10/openai-and-oracle-reported...

So this big cloud revenue jump may be from a single giant customer.
by Ajedi32 | 2025-09-11 18:39:30+00:00
It makes sense to me. If an application needs a signed certificate to function properly, why shouldn't it include code to obtain that certificate automatically when possible?

Maybe if there were OS level features for doing the same thing you could argue the applications should call out to those instead, but at least on Linux that's not really the case. Why should admins need to install and configure a separate application just to get basic functionality working?
by subscribed | 2025-09-11 18:39:47+00:00
Considering last years development and quite open Google hostility?

No.

GoS have provided a lot of patches upstream, Some of which were even applied. Despite that they wouldn't get early access to A16 just because. Access EVERY vendor promising to preinstall privileged Google services has.

Allegedly Google security team was very happy about that idea, but got vetoed by management.
by unethical_ban | 2025-09-11 18:40:04+00:00
>all attempts to challenge the 2020 election results were through legal means

And all 70-something accusations across the country, when they had to be held to actual factual basis, were rejected, and the candidate continued to lie and say he won when he did not.

>(even the call to the GA SoS was not a crime)

Wrong.

>J6 was not in fact an insurrection

Wrong.

>gerrymandering is absolutely standard in American politics and has been almost from the start

One political party in the past generation has advocated for eliminating it, while another political party is explicitly and proudly using it to weaken democracy. No pretense, just "We need to keep Republicans in power, and so we will do everything we can to that end, even if it is undemocratic".

One political party wants to make elections more accurate and representative by changing to things like ranked-choice or approval voting, and one political party defends the status quo because anything that gives voters more options would disenfranchise extremists.

You are not even handed.
by khedoros1 | 2025-09-11 18:40:26+00:00
There are a couple of frames where the pinky disappears, the ring finger becomes the new pinky, middle becomes ring, pointer becomes middle, and a new pointer appears from behind the middle finger as he puts his hand down.

During that time, the reflection that was the tip of the pinky becomes the reflection from his shirt, and the tie reflection that becomes visible first appears bent to the viewer's left, and shifts rightwards to match with the now-visible tie and shirt in the next frame.

It all happens within 5 frames. Pause the video, and period and comma can be used to advance and reverse frame-by-frame.
by aurareturn | 2025-09-11 18:41:36+00:00
The company said Tuesday after the bell that it has $455 billion in remaining performance obligations, up 359% from a year earlier. Oracle now sees $18 billion in cloud infrastructure revenue in fiscal 2026, with the company calling for the annual sum to reach $32 billion, $73 billion, $114 billion and $144 billion over the subsequent four years.

Ok. Who is paying for these? I know OpenAI's revenue 3x'ed this year to $12b. Let's say they get to $15b by end of the year. Let's say they 3x next year to $45b/year.

$114b? $144b for Oracle? per year?

Who? Can someone make a serious attempt at speculating who and how revenue will get to 144b/year?

I know Oracle as a Stargate partner. Maybe this is OpenAI being extremely bullish on its growth figures?

Edit: Ok. I have a theory. Oracle is the only big cloud company NOT developing their own AI silicon chips. AWS, Google, Meta, Apple, Microsoft are all making internal AI chips that compete against Nvidia. Nvidia prioritizes Oracle as a partner so the first and the bulk of Nvidia's chips go to Oracle. Therefore, AI labs are going to Oracle for Nvidia access. Video on Ellison having dinner with Jensen Huang "begging" him for GPUs [0].

[0]https://www.youtube.com/watch?v=zPQnPciuxhU
by bsghirt | 2025-09-11 18:42:00+00:00
But the New York Times on a phone is not particularly more or less addictive than the same content on a piece of paper. Nor does reading it on a phone cut anyone off from the rest of society any more than focusing on the printed paper or a book or a Walkman.

If the problem is games, social media, or porn, why don't we identify those as social problems and try to fix them? Rather than blaming the device.
by infamouscow | 2025-09-11 18:42:38+00:00
Unless you actually have the ability to deploy the military, it's genuinely stupid to leap to this conclusion.

To be clear, this is not an insult or ad hominem. You have to actually be stupid to think random citizens can magically deploy the military just by saying so. This is personal moral failure on your part, no different than being a liar, thief, murderer.
by 9rx | 2025-09-11 18:43:25+00:00
> We should not downvote a post just because we may disagree with it.

There is nothing to suggest it was downvoted because of disagreement. We have no idea why it was downvoted. But the most likely explanation is that a user with poor dexterity accidentally pressed the button. There is no logical reason for why someone would purposefully exert the effort to press a button that doesn't do anything other than maybe change the font color. And one will employ a once and done CSS override to change the color if they really don't like the default choice for some reason.
by Vinnl | 2025-09-11 18:43:26+00:00
I'll do a manual one that's more correct and captures the spirit better:

Panel 1

Waiter: "Sir, please take your hat off in this restaurant."

Smurf: "Take off my hat? You wouldn't ask me to take off my trousers either, would you!"

Panel 2

Waiter: "That’s not the same at all."

Smurf: "Yes it is!"

Panel 3

Cook (to waiter): "Let's let him put his hat back on."

Waiter: "Yes, let's."
by asadotzler | 2025-09-11 18:43:41+00:00
Almost identical? The Fold 4 was 14.2mm thick and weighed 263g while the Fold 7 is 8.9mm and weighs 215g.

The Z Fold 4 feels like two flagships stacked in your pocket. The Fold 7 is lighter than an iPhone Pro max and only a vinyl sticker thicker. It feels identical to a flagship in your pocket but it's got an 8" screen. Not innovative? Where's Apple's innovation toward an 8" smartphone?
by gnabgib | 2025-09-11 18:44:02+00:00
This is so out of date (980 points, 6 days ago, 736 comments) https://news.ycombinator.com/item?id=45142885

It's not even accurate Anthropic Judge Denies $1.5B AI Copyright Settlement (288 points, 2 days ago, 310 comments) https://news.ycombinator.com/item?id=45179304
by johnisgood | 2025-09-11 18:45:32+00:00
Agreed.

I have had my share of compiling Rust programs, pulling in thousands of dependencies. If people think it is good practice, then well, good for them, but should not sell Rust as a safe language when it encourages such unsafe practices, especially when there are thousands of dependencies and probably all of them have their own unsafe blocks (even this ACME support does), which affect the whole codebase.

I am going to keep using certbot. No reason to switch.
by sjsdaiuasgdia | 2025-09-11 18:45:58+00:00
This makes a lot of assumptions about the field service potential of humanoid robots. A humanoid robot is so much more complex than something like a washing machine. There are far more things to break. Assuming humanoid robot maintenance will look like general appliance maintenance may not be a robust assumption.

"Replace tiny parts" option - Which parts is the manufacturer making available for purchase and what does the supply chain look like for that? What tools are needed to do the disassembly, part installation, and re-assembly? Can a humanoid robot out in the real world replicate the clean room conditions in which delicate components were assembled then sealed inside some compartment so dust can never get to them? Are we going to put heat guns and soldering irons in the fingertips of every humanoid robot to support self repair? There's going to be problems that can't be resolved with the kinds of tools available in the average household.

"Replace modules / components" option - Having to buy a whole new hand when you really wanted to replace a single finger joint impacts the value proposition of self repair, it's not a 50 cent washer it's a $1000 pre-assembled component. The repair is now definitely doable in the field, at least.

You might also be assuming humanoid robot manufacturers would not work specifically against self-repair. They make more money if you buy a new robot, or you pay them to fix your broken robot. Maybe "fix this other robot" ends up on a list of forbidden tasks the robot will always refuse to do...
by const_cast | 2025-09-11 18:45:59+00:00
It depends a lot on the distro and how volatile it is and what tools are available.

I run Debian stable, and it's not immutable, but it is very unchanging. I don't worry much about system libraries and tooling.

The downside to that is that then userland application are out of date - in enters Flatpak. I run most GUI applications in flatpak. This has a lot of benefits. They're containerized, so they maintain their own libraries. They can be bleeding edge but I don't have to worry about it affecting system packages. I also get much simpler control - no fiddling with apparmor, the built-in Flatpak permission system is powerful enough.

The blind spot then is CLI apps and tooling. Usually it doesn't matter too much being bound to system packages, but if it really does, I can always containerize those too. I only do it for my PHP dev environment.
by mattblalock | 2025-09-11 18:46:51+00:00
If it were me, I'd just setup a PPC campaign in Google Ads and not worry about it anymore.

I'd imagine your brand name carries a low CPC, so the cost to ensure potential clients find you would be pretty low.

Use [exact match] keywords, campaign goal of clicks, and a pretty basic/clean ad with some sitelinks.

Worst case, you're really visible and it adds some authority to relevant serps.
by PaulHoule | 2025-09-11 18:46:53+00:00
That's the way it is. Generally though I think people on HN are interested in languages, compilers, stuff like that. I know I am because I spend most of my time doing applications work which makes systems look interesting.

Also what creators like and audiences like is not the same. In posting photographs to social I get the most votes on flower photos and less on the sports photos which I find a lot more challenging and interesting. As a result I've put a lot of interest in improving my flower photos, but still I find people on Instagram are more likely to vote up "classic" Instagrammy flower photos where a flower fills a square frame as opposed to the ones that I think are interesting that combine flowers with interesting backgrounds, see

https://bsky.app/profile/up-8.bsky.social/post/3lyjnyyhq2s22

vs

https://bsky.app/profile/up-8.bsky.social/post/3lyc6dv75fc2f
by ls-a | 2025-09-11 18:47:16+00:00
Foldable phones are selling like hot cakes outside the U.S. but I don't know about the U.S. market. Could be catching up.

Here are some things to know about folding phones 1. They're like expensive cars. Do not own one without a warranty 2. As soon as the new model comes out, swap it in 3. If you're into smaller phones, they're a good option 4. They are not for the financially conscious. Those things are kind of a status symbol
by matheusmoreira | 2025-09-11 18:47:18+00:00
He's not wrong from a computer freedom perspective. GrapheneOS is actively hostile to things like complete root access. It blows a hole in the security model. It's also very much enabled by the exact same sort of user hostile cryptography that corporations use to lock down their devices. Things like hardware attestation which protects apps from us. We can't easily do things like MITM an app to reverse engineer it.

I still it's superior to any stock Android OS but the risks associated with giving up freedom for security must be considered. The ideal is to have security while simultaneously maintaining our power as the owners of the machine.
by subscribed | 2025-09-11 18:47:24+00:00
How so?

Root can access absolutely everything.

Malware capable of getting root can access / exfiltrate anything, use your network, flash your firmware, can persist permanently, can use you as a vector.

Shellshock, log4j, Heartbleed. Hundreds of the big profile vulnerabilities that can be exploited on the system in an attempt to obtain root. And then you're cooked.

You really think a malware with the root access can't do much?

Why do you think selinux (and similar) even exist?

This isn't absolute stance. This is just stating that having a root access on the proruction/daily system is the opposite of security.
by trenchpilgrim | 2025-09-11 18:47:48+00:00
Years ago I worked at a $BIGCORP which already had a major presence in Azure, AWS and private datacenters, and there was chatter with the execs about putting a footprint in Oracle. Wouldn't be surprised if that's happening now.

Partnering with the non-Amazon cloud providers meant spending several millions in surplus infrastructure costs to hire more engineers to un-fuck the alternate cloud shitshows, but unlocked billions in partner deals (think Microsoft promoting our products running on Azure to Azure customers). And then every 3-5 years when we negotiated new cloud resource SKU discount rates we had leverage on common resources like VMs, storage buckets and SQL databases. "If you can't beat this rate we'll move part of our capacity to the other clouds" kinda thing.
by david_shaw | 2025-09-11 18:48:22+00:00
> WTH is a “bulletproof host”?

A "bulletproof" host or provider is the colloquial term for a business that will not reveal your identity, payment information, provide LEO access, respond to subpoenas, etc.

It's generally used by cyber-criminals as a "safe" vendor, though some privacy-minded individuals like this type of provider as well.
by ImPostingOnHN | 2025-09-11 18:48:27+00:00
Likewise, raising awareness of threats to our democracy implicitly and explicitly appeals to the threats to stop threatening democracy. It is not incitement to violence.

Incitement to violence is what I see when the president explicitly tells his supporters to beat up his opponents, which he does. Unfortunately, that is one of the smallest incitements to violence we've seen from the right over the years.