MurphyA/hacker-news huggingface dataset:
by yahway | 2025-09-17 04:03:01+00:00
Your opening statement is opinionated, factually incorrect, and unnecessarily divisive. Murder is not a matter of left or right as it stems from individual pathology, often tied to mental illness. Political affiliation is irrelevant in such cases.

Labeling and name-calling only deepen division and hostility. Conservatism, at its core, has historically meant preserving traditions, though its positions have shifted over time. Similarly, progressive movements have had both positive and negative impacts depending on the era.

I personally refuse to align fully with either side. What I do oppose is the deliberate incitement of hatred through oversimplification and demonization. That kind of rhetoric, not one’s political affiliation, undermines the principles America was built upon.
by armadsen | 2025-09-17 04:03:06+00:00
I’ve spent significant time in Africa. South Africa is higher than the US despite being a place where everyone has razor wire topped walls around their houses, and having the 5th highest murder rate in the world.

The US has problems. I myself was the victim of a violent robbery 15 years ago. But the idea that it’s less peaceful than South Africa, Lesotho, Sierra Leone, and only marginally more peaceful than Haiti? Come on…
by judge2020 | 2025-09-17 04:03:58+00:00
> I'd love some case studies or anecdotes about the real-world threats that using an old devices exposes me to.

The Apple patch in the OP is in regards to a zero-interaction exploit that compromised the device to install spyware etc.

> Impact: Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
by andrethegiant | 2025-09-17 04:06:26+00:00
> I think there should also be a reasonable cap on the number of connections that can be made. Something like 300 friends sounds right. Any more than that and you're a collector, and not using the platform to foster connection.

Path[1] did that, but with a cap of 50, and then 150 (based on the Dunbar number of meaningful human connections one can retain). They had a crazy growth period but eventually went kaput.

[1] https://en.m.wikipedia.org/wiki/Path_(social_network)
by jmyeet | 2025-09-17 04:08:19+00:00
I fully understand the feelings of helplessness and hopelessness with this situation. Lots of people like to imagine what they'd do in certain situations, historical or otherwise. We no longer need to imagine what most people would do in the HOlocaust. We now know: nothing. In WW2, most people could reasonably claim ignorance. Even a lot of Germans could claim ignorance. Now we have livestreamed 4K 60fps evidence that is impossible to ignore.

There's a phrase that's widely attributed (arguably misattributed) to Lenin:

"There are decades where nothing happens; and there are weeks where decades happen"

So while the US could end this entire thing with a phone call, it's not true to say that things aren't changing. US support for Israel continues to plummet to new lows [1], to levels I never thought I'd see. Small things like blocking a cycling event in Spain, the future of Eurovision being uncertain, European states recognizing Palestine, problems for the port in Haifa due to changes in shipping because of Houthi rebels, ICC?ICJ investigations, these genocide findings and so on... it all adds up. It all matters. It all compounds to political and economic pressure on the actors involved.

[1]: https://news.gallup.com/poll/692948/u.s.-back-israel-militar...
by mdaniel | 2025-09-17 04:08:19+00:00
I wasn't trying to relate anything to the bigger conversation, I just meant to draw attention to the fact that GitHub is not golang's package manager

That said, I would guess the 'bigger conversation' is that it is much harder to tpyo <<import "github.com/DataaDog/datadog-api-client-go/v2/api/datadogV2">> than $(npm i dataadog) or similar in a "flat" package namespace (same for its $(uv pip install dataadog) friend)

None of those cited ones fix the dependency lineage issue, proving that release 1.1 was authored by the same chain of custody as release 1.0 of any given package. One can opt in to gpg verified dependencies in Maven, but it is opt-in. The .jar artifacts can also be cryptographically signed, but the risk that's trying to drive down is tamperproofing and not lineage, AFAIK
by AdieuToLogic | 2025-09-17 04:08:41+00:00
Where C macros provide functionality C++ classes and/or templates cannot is stringification of their argument(s).

For example:

#include <iostream> #define SQL(statement) #statement int main (int ac, const char *av[]) { const char *select = SQL(select * from some_table); std::cout << select << std::endl; return 0; }
by paulgerhardt | 2025-09-17 04:09:12+00:00
Given they’re near Hangzhou they can source a lot of stock for 1/4-1/40th the price as the US. I would guess $1.5k-$2k for the hot mess they show at 6:06 and $8k for the polished setup plus $0-$850,000 in billable hours to some PLC engineers.

The old school way to learn this field is an Allen Bradley or Siemens certification[1] but it’s pretty dry and tedious [2] with good money [3] because once you have a network you can show up at any factory or bottling line as they all use Siemens or Allen Bradley and they’re always breaking down.

The new school way is AI, raspberry pi’s, and 3D printer tool chains.

It’s worth watching the Valve Steam Controller Factory video to appreciate the scale of these lights off factories: https://youtu.be/uCgnWqoP4MM

[1] https://www.youtube.com/c/TimWilborne

[2] https://youtu.be/zDmGSHGH_is

[3] https://youtu.be/aLd2Y7pQ79o
by dluan | 2025-09-17 04:09:20+00:00
Seeing PG slowly turn on this issue, from nothing into recognition and now into advocacy has been wild. Presumably because he has kids, and like many parents you understand with your eyes first, and then your heart.

PG wields some amount of power in SV, but YC and others are still inextricably tied to what's happening. Thiel was just in Israel with elad gil, rabois, alex karp, joe lonsdale. It's just too much to list.

I guess my point is when does recognition turn into action.
by kstrauser | 2025-09-17 04:10:40+00:00
For sure. Or Bear, or Notion, or ...

There are a lot of things to track all this. I personally didn't want to spend more than the minimum time setting up and using the system, because last think I wanted was to get nerdsniped into inventing a job application tracking systems instead of, like, applying for jobs. That would've been a real risk to me.
by mingus88 | 2025-09-17 04:10:41+00:00
I run a ton of apps like this.

Look at it the other way. Why muck up my OS with a bunch of tiny apps? Who knows what version I’ll pull in my repo today. Chances are good it’s outdated with weird patches.

The docker image is built by the devs. All the proper dependencies are baked into the image. It’s going to run exactly as intended every time, no surprises.

And I can pick up the docker file and my configs and run it exactly the same on any OS.
by cpncrunch | 2025-09-17 04:11:34+00:00
No, if they had had the password they wouldn't have needed to do all of that. They could have just logged in, perhaps just needed the 2FA code. However, you say that you gave them both enhanced security codes (I'm guessing this was a gmail backup key), and you also gave them the 2FA SMS code. These are the only two things you need to take over any gmail account, and it doesn't require knowing the password. It's just purely social engineering.

The only question mark is the email from google. It sounds like it was a scam email, so it would be interesting to know whether/how it was spoofed.
by mythz | 2025-09-17 04:11:48+00:00
Kind of glad that I missed the Cursor hype then rapid slide into enshittification, since I didn't think its goal of replacing an IDE would be a winning strategy and instead went for IDE plugins/extensions AI assistants like Augment Code, GitHub Copilot and Gemini Code Assist as they work in both Rider/Intellij, VS Code and NeoVim.

I'm assuming I don't use AI as much as most devs as I'm still comfortably within Augment Code's 600 user messages/mo dev plan limit which IMO is great value for being able to use its Context Engine. If I ever exceeded that I'd likely temporarily switch to Qwen Coder's effectively unlimited free tier [1] until the next quota refill.

Not sure if Augment's going to increase their prices or downgrade their quotas since they're still at the whims of Claude Sonnet / GPT 5 API pricing, but if they do I'd be looking at moving to an open model solution like Open Code / Roo Code so I can easily switch to the best value coding models of the day, between Qwen3 coder, Grok Code Fast, GLM, Kimi K2, DeepSeek, etc we're spoilt for choice [2].

[1] https://github.com/QwenLM/qwen-code

[2] https://openrouter.ai/rankings#categories
by TheFreim | 2025-09-17 04:12:15+00:00
>Israel targets Hamas while taking steps to limit civilian harm. Civilian deaths are tragic, but tragedy is not genocide.

Israel does not merely target Hamas with incidental civilian deaths, they have been documented actively targeting civilians. This has been indisputably demonstrated at this point. Early on I was much more skeptical since it's similarly indisputable that Hamas does engage in terroristic behavior, but as time has gone on we've had report after report confirming that Israel isn't merely targeting Hamas.

> The moral difference is intent.

Hamas intends to eliminate Israel, Israel intends to eliminate Hamas (justifiable) and exterminate the Palestinians (unjustifiable) to continue their long-running expansion operation and further their grip on the region at the expense of the other native populations.

> Calling this “indiscriminate extermination” ignores Hamas using civilians as shields and demands an impossible standard of zero casualties.

1. I've already explicitly acknowledged the distinction between attacking Hamas, inadvertently harming civilians in the process, and the active slaying of the civilian population which is taking place. The former is regrettable but unavoidable, the latter is evil and it is what is also taking place.

2. I intentionally said "near-indiscriminate" rather than just "indiscriminate" for a reason. Unlike many people, yourself included, I don't view this conflict as a completely black-and-white matter. Israel is instrumentalizing their legitimate efforts in order to implement a wider effort to ethnically cleanse Gaza.
by albert_e | 2025-09-17 04:12:18+00:00
Should internet based chat platforms develop a common protocol (like SMS for mobile networks) so that people don't all need to use the same app (Whatsapp and the like) to be able to have 1:1 or group chats?

(Before someone says I have rediscoered email -- I know email exists for a similar reason but not for instant messaging for a smartphone weilding generation)
by hansvm | 2025-09-17 04:12:53+00:00
I don't know which 1200 applications they saw, but IME they're a lot better at trying to con you than succeeding. LLMs aren't great for a lot of use cases (yet?), and this is one of those areas where reality doesn't match the dream:

1. ~10% of applications are over-tailored. Really? You did <hyper-specific thing> with <uber-specific details> exactly matching our job description at $BigCo 3 years before the language existed and 5 years before we pioneered it? The person might be qualified, but if they can't be arsed to write a resume that reflects _their_ experiences then I don't have enough evidence to move them forward in the interviewing process.

2. ~40% of applications have obvious, major inconsistencies -- the name on LinkedIn doesn't match the name on the resume, the LinkedIn link isn't real, the GitHub link isn't real, the last 3 major jobs on LinkedIn are different from the last 3 major jobs on the resume, etc. I don't require candidates to put those things on a resume, but if they do then I have a hard time imagining the candidate copy-pasting incorrectly being more likely than the LLM hallucinating a LinkedIn profile.

Those are quick scans, well under 4s each on average. We've used 80 minutes of our budget and are down to 600 applications. Of the remainder:

3. ~90% of remaining applications fail to meet basic qualifications. I don't know if they're LLM-generated or not, but a year of Python and SQL isn't going to cut it for a senior role doing low-level optimizations in a systems language. If there's a cover letter, a professional summary, mention of some side project, or if their GitHub exists and has anything in it other than ipynb files with titles indicating rudimentary data science then they still pass this filter. If they're fresh out of school then I also give them the benefit of the doubt and consider them for a junior role. Even with that leeway, 90% of those remaining applicants don't have a single thing in any of the submitted materials suggesting that they're qualified.

So...we're down to 60 applications. We spent another 40 minutes. In retrospect, that's already our full 2hr budget, so I did exaggerate the speediness a bit, but it's ballpark close. You can spend 2min fully reading and taking notes on each of the remaining applications, skimming the GitHub projects of anyone who bothered to post them, and still come out in 4hr for the lot.

It's probably worth noting, that isn't all to say that <5% of programmers with that skillset are qualified. I imagine the culprit is spray-and-pray LLM spam not even bothering to generate a plausible resume or managing to search for matching jobs. If bad resumes hit 99 jobs for every 1 job a good resume hits then you only expect a 1% success rate from the perspective of somebody reviewing applications.
by kstrauser | 2025-09-17 04:13:08+00:00
It's a little of that, and almost my particular job skills are still in demand right now. Just putting "looking for work" on my LinkedIn profile got the contacts flowing.

BTW, I did not, never, not once, apply to any jobs listed through LinkedIn this time around. I did that before and it was utterly demoralizing. Their ads were like "subscribe to LinkedIn Ultra and move to the top of the list of 9,000 people applying for this role!" I've never gotten a single hit from applying for a tech job through LinkedIn. I don't think that's actually a thing.
by Retric | 2025-09-17 04:14:04+00:00
Saying it’s “right” based on outcome alone is like saying ~half the people in Vegas and betting on black made a good decision. You can win and still have made a poor decision.

A better approach is to look at the full range of your bets and try and decide if the betting strategy was good. But that gets difficult when you consider outcomes are linked through wider economic trends.
by contingencies | 2025-09-17 04:14:45+00:00
After realising the organic insecticides were only a single active ingredient (Potassium laurate) and overpriced I launched a chemistry mission.

Based upon commercial retail product labeling, the target solution strength is 2% in water and this has been certified organic by some authority or other. Based upon my recent research, you can't buy it at full strength as far as I know, but you can buy two precursor chemicals: potassium hydroxide and lauric acid. It's an acid-base reaction. Therefore you need to work on equal molarity not equal weights.

1. Obtain potassium hydroxide and lauric acid

2. Weigh out 20.03g of Lauric acid, dissolve in 200mL water.

3. Weigh out 5.61g of Potassium hydroxide, dissolve in 200mL of water. This will get hot so you will need to wait until it cools down.

4. Mix the two solutions. It will give you 400mL solution containing 23.84g potassium laurate (60g/L).

5. Since a 2% solution is 20g/L, you dilute the solution in the ratio 1 part solution to 2 parts water (ie. add 800mL water). So in total you should have 1.2L of 2% product.
by LocalH | 2025-09-17 04:16:48+00:00
Headline is slightly misleading. It implies that the update is only available on the 6s, when in reality it's available for:

> iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation)

That's a lot of devices, more so than "10-year old iPhone 6s" implies.

I won't be upgrading my iPhone 7 and 4th gen iPad mini, because I don't want to take the chance that the update needs an update to Dopamine to be jailbroken. Fortunately they're secondary devices for me.
by JdeBP | 2025-09-17 04:16:59+00:00
In addition to the other problems identified by other people here (e.g. account authentication information passed on the command line) the DNS readiness check is counter productive, as negative response caching caused by the very polling that the tool does will obscure the resource record's appearance, and the file existence check is a brute force mechanism that (a) spawns an entire subprocess instead of doing lstat() and (b) does not take advantage of any kqueue() or equivalent mechanism for waiting for filesystem changes.
by zhala | 2025-09-17 04:17:56+00:00
A few years ago I used an RTL-SDR to determine if I had a water leak since my meter is one that broadcasts over 900mhz (iirc). I wrote a small program to parse RTL-AMR output into Prometheus metrics (real life gauges are just like Prometheus gauges, who would've thought) and tracked it over a week while I was away on vacation. No leak luckily.

RTL-AMR: https://github.com/bemasher/rtlamr
by pama | 2025-09-17 04:18:35+00:00
> Viruses are unnecessary for prions (near as we can tell), and a nasty virus can do plenty of direct damage.

Agreed

> Someone could (if they discovered one) construct a nasty prion directly eh? And we’d probably be pretty fucked.

It would be easy to construct a potent prion-like sequence that works in isolation (in vitro) with such a tool, but not clear what the rationale would be even if one has nefarious purposes. We know of enough of them (eg pick Creutzfeldt–Jakob disease for human hosts; if you have a hydrogen bomb, the variations on the engineering could be intersting but most likely not needed.) I dont think we would be fucked if someone constructed new prion-like sequences with this method, though we might be at risk if someone makes genuine efforts to find ways to deliver the existing (or new ones) to humans at scale. The main risk factors in prions diseases involve exposure and host compatibility. You need enough time and thus enough of a starting dose for harm to happen. You need to enter the host and go to the right place, say nervous system, without being chopped up along the way by random proteases and without self aggregating in the wrong place and becoming useless. There may be other computational tools that in combination would help realise more potent/nasty/risky designs, but it is probably much easier to use human cell lines and benchwork (design a funky evolution experiment) to fish out nasty sequences that actually work in human cells.

Overall in biology and chemistry killing is easy, therapy is hard. Prions are somewhat interesting from a biology or engineering perspective, but they dont have the huge added risks of rapid exponential growth and easy transmission to hosts that many viruses have. They seem more like a curiosity and primitive danger form, and not a huge public health risk factor. Maybe there even exist some semi benign (even useful?) forms related to prions that we dont study much yet and they may end up influencing things like our understanding of aging or immune responses.

Prions relate to nucleation and first order phase transitions, so they have some technical appeal to people with past background in physics or chemistry, including myself, but they are not making it in my top 20 threats for humanity, not even if there were concerted efforts by rogue actors to create new nasty ones.
by underlipton | 2025-09-17 04:18:40+00:00
On the contrary, Democrats win when black voters turn out and lose when they don't. Because Republicans often hold such nakedly racist and repugnant views that voting for them is a complete non-starter, the only practical choice available to most black voters is not who to vote for, but whether to vote.

Black citizens make the most progress by strategies built around embarrassing the powers that be. Those powers generally capitulate (as much as they ever were going to) after a period of tantrum-throwing, which is where we are now. Such politicians hate having to vote against the donor class's wishes, but they'll do it to get reelected (or they'll be primaried by candidates who will). Or, they'll lose. Those are the choices, which Kamala Harris unfortunately learned the hard way.

One other thing black folk have known for decades: nobody you can put into the White House or the legislature will be able to stop half the country from thinking of you as a n!gger. You don't vote based on that because Carter and Clinton and especially Obama and Biden have shown us that election-based social progression is a pipedream.
by fulafel | 2025-09-17 04:19:26+00:00
A barrel of oil means about 560 kg of co2 emissions. Including the mortality cost til 2100 from emissions bumps the cost of emissions to about $145 per barrel using nrs from[1] (0.56 tons of emissions from a barrel x $260 scc per ton of emissions). I'll leave it to you to quantify the local effects and whether they are worse.

[1] https://pmc.ncbi.nlm.nih.gov/articles/PMC8322393/ - they include effects only to 2100 which is way too short term IMO, should be higher
by guptadeepak | 2025-09-17 04:19:45+00:00
I wrote this piece to explore how tech debt accumulates and why it often undermines scaling efforts if left unresolved.

Two points stood out during my analysis: first, that debt isn’t inherently bad—it’s a trade-off that enables speed, but compounding interest appears when teams skip foundational fixes. Second, systemic failures emerge when architectural shortcuts stack, making later feature work exponentially harder.

In practice, addressing debt early often means pausing new development to refactor core data models, testing harnesses, or CI/CD pipelines.

For those here who’ve scaled fast-growing systems, how do you balance debt repayment against product velocity?
by bkettle | 2025-09-17 04:19:49+00:00
I think modern social media is a huge problem but don’t see we can fix it without regulation. It’s clear that all the current incentives point companies towards engagement and rage bait and away from anything actually “social”, and I think it’s unlikely that any new social network that tries to fix these issues would achieve widespread usage.

Have any countries proposed legislation to help reign it in? What would that legislation look like? My main idea is to simply outlaw ML-based recommendation algorithms, but obviously that is not as simple as it sounds and is mostly based on looking fondly on the earlier days of social media, when I felt like it was making my life better instead of worse.
by AdieuToLogic | 2025-09-17 04:20:30+00:00
> You have a team of 20 engineers on a project you want to maintain velocity on. With that many coooks, you have patches on top of patches of your build system ...

The scenario you are describing does not make sense for the commonly accepted industry definition of "build system." It would make sense if, instead, the description was "application", "product", or "system."

Many software engineers use and interpret the phrase "build system" to be something akin to make[0] or similar solution used to produce executable artifacts from source code assets.

0 - https://man.freebsd.org/cgi/man.cgi?query=make&apropos=0&sek...
by jandrewrogers | 2025-09-17 04:20:56+00:00
I can store a ton of firearms in my garage but they can’t destroy the neighborhood by accident. High-explosives can.

People that buy high-explosives at scale just have some land outside of town where they can store them en masse. Problem solved. There are huge magazines of high-explosive just outside many major cities all over the US. Very infrequently, one of them goes “boom”, which kind of justifies forcing them to be on the outskirts.

You can own it, you just have to store it where it won’t wreck your neighbors if you are an idiot. Rural land is cheap.