MurphyA/hacker-news huggingface dataset:
by IshKebab | 2025-09-20 21:22:50+00:00
Rust isn't popular just because of memory safety though. I think the memory safety message is maybe a little too loud.

It's also a modern language with fantastic tooling, very high quality library ecosystem and a strong type system that reduces the chance of all kinds of bugs.

It's obviously not perfect: compile time is ... ok, there aren't any mature GUI toolkits (though that's true of many languages), async Rust has way too many footguns. But it's still waaaaay better than C or C++. In a different league.
by kiitos | 2025-09-20 21:23:36+00:00
> So how would the Decompress Reader be implemented correctly? Should it use its own buffer that is guaranteed to be large enough?

yes

> If so, how would it allocate that buffer?

as it sees fit. or, it can offer mechanisms for the caller to provide pre-allocated buffer(s). in any case the point is that this detail can't be the responsibility of the producer to satisfy, unless that requirement is specified somehow explicitly

in general the new zig io interfaces conflate behavior (read/write) with implementation (buffer size(s))
by kragen | 2025-09-20 21:24:31+00:00
You may not be very familiar with Creative Commons licensing. For example, CC BY-SA 4.0 would prohibit YouTube from using DRM:

> No downstream restrictions. You may not offer or impose any additional or different terms or conditions on, or apply any Effective Technological Measures to, the Licensed Material if doing so restricts exercise of the Licensed Rights by any recipient of the Licensed Material.

(https://creativecommons.org/licenses/by-sa/4.0/legalcode.en)

Most of the CC licenses include such language and have since the first versions.
by magicalhippo | 2025-09-20 21:24:37+00:00
My Renault Megane e-Tech has physical controls for just about everything needed, but regardless it also has a voice interface, so I can tell it to adjust the AC or turn off the seat heater etc without taking my eyes off the road.

Physical controls were a must when getting a new car, but I find myself using voice a lot, especially in traffic.
by Terr_ | 2025-09-20 21:24:43+00:00
IMO physical-world safety measures are underused. Not just because they provide pretty hard barriers to certain attacks, but also because they often exist in a world the human user can notice and verify.

For example, I would prefer to press a fob-button to unlock or start a car, but there are systems out there where thieves simply boost/relay the signal of your keys in order to open and and drive it away.

Sure, there are countermeasures involving complicated speed-of-light timing tricks, but it could have all been avoided with a button.
by somat | 2025-09-20 21:24:52+00:00
I got nerd sniped by this xkcd and was happily working my way through an implementation and realized that the accent combiners work with any character. It is trivial to add bad steganography to your bad encryption.

r̊e̝q̝ůěs̔t͞ p̊e̝a͞c̍e̊ t̠a̗lks
by glenstein | 2025-09-20 21:25:06+00:00
I'll start by recommending you look up whataboutism, and learn about why it's a fallacious form of argumentation. There's definitely a non-fallacious way of making your argument, but that's your job.

I also don't think your assessment of the relative histories is reliable, but for our purposes here, that's all largely beside the point, because the degree of national security alignment of domestic companies in China compared to the United States are at completely different orders of magnitude, which is the pertinent issue when considering harm reduction here.
by JuniperMesos | 2025-09-20 21:25:22+00:00
That's precisely my point - people will call any country doing something that they dislike "authoritarian". There's no way for me to verify that without spending a bunch of time learning about what specifically Modi is doing that previous Indian political leaders weren't, and evaluate that in the context of Indian politics in general. This is a difficult enough problem when it comes to evaluating what political pundits are saying around your own country and society, and I am well aware that I don't have more than a cursory, outsider's understanding of anything at all that is actually going on in India.
by dragonwriter | 2025-09-20 21:26:02+00:00
> The US worked pretty well without them before?

The period between the inauguration of the first President under the US Constitution (April 30, 1789) and the first formal executive order (June 9, 1789) was 40 days, so I have no idea what you are thinking of.

EDIT: It’s worth noting that the first Act of Congress was only signed into law 8 days earlier than the first executive order was issued, so for most of the time before executive orders the executive had no actual laws to execute.
by cjtrowbridge | 2025-09-20 21:26:06+00:00
This brings up a point many will not be aware of. If you know the random seed and the prompt, and the hash of the model's binary file; the output is completely deterministic. You can use this information to check whether they are in fact swapping your requests out to cheaper models than what you're paying for. This level of auditability is a strong argument for using open-source, commodified models, because you can easily check if the vendor is ripping you off.
by epolanski | 2025-09-20 21:26:14+00:00
Really disliked the author's tone: "me, me, me, me, me, me. Also somebody promote me."

All this paragraphs telling us what a great job he's done and this charlatan's product (with great potential)...doesn't even save your chats.

So you start discussing about something in your notes, come back and...the messages are gone.

But sure come tell me what a genius you are with your 3 column layout.

Charlatans, and those people become multi millionaires with those projects and such a crap work.
by lucb1e | 2025-09-20 21:27:24+00:00
Is there someone in the world for whom this demo https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/... does not play? Because that's what I use and am not aware of issues with it

> Reddit struggles to provide a video player that is up to YouTube’s par. Do you have more resources than Reddit? Better programmers?

It's hard to say whether MDN and I have/am better programmer(s) and resource(s) than reddit without having any examples or notions of what issues reddit has run into.

If you mean achieving feature-parity, like automatic subtitles and dubbing and control menus to select languages and format those subtitles etc., that's a whole different ball game of course. The site I was speaking of doesn't support that today either (they don't dub/sub), at best you get automatically generated Dutch subtitles from yt now, i.e. shit subtitles (worse than English autogen and we all know how well those deal with jargon and noise)
by burntoutgray | 2025-09-20 21:28:15+00:00
... and stop doing things that you don't like just because others are guilting you to do them. I once heard somebody use the expression "x is shoulding all over you!" Really struck home how people try to dictate how you should act/live/think.

A simple advice is to consider the Taoist symbol of Yin-Yang. Move away from the dark and towards the light. Live in your own light!
by Arnavion | 2025-09-20 21:29:05+00:00
>(in fact, no device at all is reported as having a fully functioning camera, let alone everything else)

Nit: The Pine64 PinePhone's cameras at least have been fully functional since 2021. It's a very shitty pair of cameras, but they're definitely fully functional.

I know the wiki.postmarketos.org page for it says the camera support is "Partial" and that a bunch of drivers are out-of-tree. This and much of the rest of the page is extremely outdated, and I (maintainer) just haven't had the time to go through that page and fix it up.
by yread | 2025-09-20 21:30:24+00:00
> If you want files in TIFF format, you (the lab tech) have to take an action to export a side in TIFF. It can take up a fair amount of lab tech time.

Worse, you have to do it manually one by one in their interface, it takes like 30 minutes per slide and you only have like 20 minutes after it's done to pick it up and save it somewhere useful otherwise the temporary file gets lost.

DICOM is of course the way to go, but it does have its rough edges - stupid multiple files, sparse shit, concatenated levels and now Philips is the only vendor who makes JPEG XL (next to jpeg, jp2k and jpeg xr).

We learnt to live with iSyntax (and iSyntax2), if you can get access to them that is. In most deployments the whole system is a closed appliance and you have no access to the filesystem to get the damn files out.
by stavros | 2025-09-20 21:30:33+00:00
While I really really want devices I can own, I don't want to compromise security to do it. We need to do two things:

1. Lobby politicians to write laws that allow us to actually own the devices we bought.

2. Stop the FUD that a device that can be jailbroken is insecure. I heard this from our frigging CSO, of all people, and it's patently false, just FUD by Apple and Google who want you to be afraid of owning your device.

I want a device that's as secure as possible, but that I can own. I don't want to hack my own self just to get what I paid for.
by TrinaryWorksToo | 2025-09-20 21:30:48+00:00
Bayesian reasoning would lead me to think that a high rate of failures means even if QA is 99.9% amazing and dev is AI 80% slop, there still will be more poor features and bugs (99.9% * 80% = 79.92%) than if both are mediocore (%90 * %90 = 81%)
by ddxv | 2025-09-20 21:31:20+00:00
The company that has the most reach in mobile spyware is AppsFlyer which is Israeli owned and as yet a private company.

They operate in a closed space called mobile attribution of which only a few companies are competitors. Appsflyer is by far the largest. https://appgoblin.info/companies/types/ad-attribution

They are probably in 20 or more apps on your phone. https://appgoblin.com/companies/appsflyer.com
by Terr_ | 2025-09-20 21:32:01+00:00
> The average car is 12 years old.

That's not the same statistic though: If the only car in the world was manufactured 20 years ago and had 4 owners, then the average ownership-duration would be 5 years, a much smaller number.

____

Survey says [0] people tend to cycle vehicles in 8 years.

[0] https://www.thezebra.com/resources/driving/average-length-of...
by rayiner | 2025-09-20 21:32:20+00:00
> English is an official language of India, of course Indians are much more likely to seek work in the UK and the US than people from Latin America.

The U.S. is also much closer to Latin America, and has a large Latino community already. The disparity in H1bs (70% versus 2% for Mexico/Brazil/Colombia) is just too huge to explain by language preferences.

> since India has the largest population of all countries, those 130M college graduates must have gone through some very tough selection.

Not at all. Outside the top schools standards plummet. Half of those graduates are not qualified to work in their fields: https://www.tbsnews.net/bloomberg-special/worthless-degrees-...
by JuniperMesos | 2025-09-20 21:32:22+00:00
Sometimes democracy is the sheep area violently and unconstitutionally seceding from the wolf area and then ethnically cleansing the region of wolves, to make absolutely sure that no wolf will be around who can vote about what to eat (see e.g. the post-1991 history of Yugoslavia). A major reason why people living in immigrant-attracting democratic political entities care about immigration policy is because immigrants eventually change the composition of the voting electorate.
by saghm | 2025-09-20 21:33:07+00:00
>> insisting on a closed C compiler in 2025.

> Everything should use one compiler, one run-time and one package manager.

If you think that calling out closed C compilers is somehow an argument for a single toolchain for all things, I doubt there's anything I can do to help educate you about why this isn't the case. If you do understand and are choosing to purposely misinterpret what I said, there are a lot of much stronger arguments you could make to support your point than that.

Even ignoring all of that, there's a much larger point that you've kind of glossed over here by:

> The shitheads who insist on using alternative compilers and platforms don't deserve tools

There's frequently discussion around the the expectations between open source project maintainers and users, and in the same way that users are under no obligation to provide compensation for projects they use, projects don't have any obligations to provide support indefinitely for any arbitrary set of circumstances, even if they happen to for a while. Maintainers sometimes will make decisions weighing tradeoffs between supporting a minority of users or making a technical change they feel will help them maintain the project better in the long-term differently than the users will. It's totally valid to criticize those decisions on technical grounds, but it's worth recognizing that these types of choices are inevitable, and there's nothing specific about C or Rust that will change that in the long run. Even with a single programming language within a single platform, the choice of what features to implement or not implement could make or break whether a tool works for someone's specific use case. At the end of the day, there's a finite amount of work people spend on a given project, and there needs to be a decision about what to spend it on.
by willis936 | 2025-09-20 21:33:55+00:00
I remember being stuck on a ski lift on a day that was too cold and windy for any intelligent person to be skiing. The phone in my breast pocket was cold to the touch and the battery capacity evaporated by 50%. The display's response time was hundreds of ms. I turned it off at that point.

Not a huge deal. Just charge it when it's warmer. I would have been a little surprised if something inside popped and suddenly the phone started thermal throttling or had water damage.
by zzo38computer | 2025-09-20 21:34:01+00:00
I would not provide precompiled binaries for other systems if I could not even test it properly (nor know all of the details for programming for those other systems), whether or not it uses GitHub Actions.

If you do use GitHub Actions for compiling, then it might be better for the actual implementation of compiling to be in a separate file (which can also be used outside of GitHub) and the GitHub Actions file will only specify the conditions to trigger that separate file.

(I do use GitHub Actions, but only to automatically assign issues to myself (which is not something that is necessary in order to work the software that is being made by your repository). If it is moved to (or copied or mirrored to) something else that cannot use GitHub Actions files, it might have another way to auto-assign issues or make it unnecessary to do s.)
by fakedang | 2025-09-20 21:34:02+00:00
Ex Mossad, Shin Bet and Aman guys going into the private sector. In other countries, intelligence services people usually stay around for the long run. In Israel, most do it for a few years before moving to the private sector, and taking those talents with them. It's also the case with Russia and China - there's just more money for these guys in the private sector, while national service ensures they don't get treated any more exceptionally and obtain very little benefit for staying on.
by pedalpete | 2025-09-20 21:34:37+00:00
My understanding is there is a directional correlation between untreated sleep apnea and Alzheimer's.

Do you feel your CPAP improves your mental clarity, or mood?

The reason I ask is the cognitive benefits of CPAP are inconclusive. It works in some people, not in others. It solves the hypopnea, but that doesn't mean slow-wave activity increases as a result.

There is no research I'm aware of that has been published showing how slow-wave enhancement impacts people with sleep apnea.

We work out of The University of Sydney, where CPAP was invented and work with a few former ResMed employees, and know a bunch of people who still work at ResMed.

When we approached them a few years ago, they didn't seem very interested, but the science has progressed significantly since then, and it's getting pretty difficult to ignore it.

I'll reach out and see if they're keen on supporting a study.

BTW, have you tried a mandibular splint (biteplate)? My brother was on CPAP for about 8 years, and then moved to a moved to the biteplate about a year ago. He's MUCH happier with it.
by afpx | 2025-09-20 21:34:39+00:00
Here's a regular occurrence for me:

I took my daughter to shop for clothes at Target. She picked out an outfit and wanted to try it on but it was in a pack and needed to be separated first. I found a clerk and asked her to separate it. But, the clerk didn't speak English - only Spanish. So, she took me to another clerk. But, that clerk also didn't speak English - only Arabic. And, neither could talk to each other.

If that's not societal "cognitive load", what is it?

These are just the harmless occurrences. I could go on to much more alarming examples, but I won't.
by explorer01 | 2025-09-20 21:34:49+00:00
Anecdotally, I have seen the h1b under leveling happen multiple times. But not sure it’s common enough to skew the data but it does stand out when it happens because you have a great engineer with 10 years experience and you find out they are an SDE1. For every one of those there are probably 10 that are correctly leveled or over leveled.
by simonask | 2025-09-20 21:35:51+00:00
That is an unbelievable claim.

1. Rust structs are generally smaller due to layout optimization.

2. A 10-50% difference is well within the “are you measuring debug builds?” territory.

I’m curious what code you are writing that requires unsafe all the time? I do a lot of low-level optimization, and unsafe is barely ever actually needed.
by SaggyDoomSr | 2025-09-20 21:35:57+00:00
I worked in the networking group for a cloud computing company. You've heard of them. We didn't charge for (some) DNS traffic, so some customers figured out how to use DNS as a transport mechanism to skirt around paying data transfer fees. It would essentially be a DoS attack which affected EVERY customer, so a few could save tiny fractions of their overall spend. A peer team of mine had to deal with the mess. That team had > 100% annual staff turnover, because they just made the oncall staff deal with the problem every time it showed up rather than ever solve the core issue of having a DoS vector masquerading as a feature.
by like_any_other | 2025-09-20 21:36:23+00:00
Middle easterners probably want to know. I'm sure you can appreciate how that's relevant to their politics [1]. Would you have preferred the author had decided for his readers what information they should be interested in?

[1] Iranian state media warns Israel using cell phone tracking to assassinate leaders in Iran - report - https://www.jpost.com/israel-news/defense-news/article-85806...
by duxup | 2025-09-20 21:37:23+00:00
Long time ago I was just an IC at some company, 5k employees.

Once a quarter or so the local director would buy pizza for our team. Maybe 12 pizzas altogether from a national chain pizza place. Later on "to save money" they said they wouldn't do that. Once a quarter... cost cutting.

So on the appointed day I just bought pizza and told the team to come on down to the break room and enjoy. Maybe $200 in pizza or such, we were going to have our little break as far as I was concerned.

Later some crappy manager complained that I did that, the director was reportedly not pleased. Fortunately nothing came of it, like bro of all the people to complain about ...
by dhfbshfbu4u3 | 2025-09-20 21:37:47+00:00
Sure. Cormac groomed a vulnerable 16 year-old girl in a motel when he was 42. He used her and her life countless times in his work. He never gave her credit. Possibly never paid her for the contribution (not that this makes it any better). Seeing his tips at the top of HackerNews is sickening.
by vnuge | 2025-09-20 21:38:24+00:00
Regardless of the signer interface the procedure call remains the same. The client application determines what method it wants to use, then the plaintext is passed to the signer (web extension, nip46 remote signing, android etc) with the nip44.encrypt or nip04.encrypt procedure calls.

The user is then requested to confirm the encryption operation. So a "downgrade" could happen in two ways. The client selects nip04 without the user's instructions, and the signer does not properly guard or notify the user that the message to be encrypted is using nip04. Still not really an attack I don't think, since no "sessions" exist in DMs there shouldn't be any way a remote user gets to cause a client to change algorithms.

To answer directly, the client app chooses, makes a remote procedure call with the desired algorithm, user confirms, message is encrypted, returned, signed (another rpc round-trip), then written to relays.

The signer application is ALWAYS authoritative, if it chooses to.
Show HN: Model Routing for Claude Code – same experience, just cheaper
by botirk | 2025-09-20 21:39:01+00:00
Adaptive is a drop-in replacement for Claude Code that cuts AI costs by 60-80% with zero code changes. Just swap the API endpoint and you're done.

How it works: We extract features from prompts (complexity, tool usage, context length) and route them using a DeBERTa classifier trained on model evaluations. Simple tasks → cheaper models, complex reasoning → premium models. The routing adds ~2ms latency but saves orders of magnitude in API costs.

Same Claude Code experience, same quality, much cheaper.
Ask HN: Longer term Math Academy feedback
by TheAlchemist | 2025-09-20 21:39:23+00:00
I'm in the process of re-learning a lot of maths, with a goal to move to ML research in ~2 years, and after discovering Math Academy (on HN of course) I jumped right into it.

It is great, but after a month of ~1-2 hours / day, I feel like it's a bit shallow sometimes, and given the amount of time I can invest, I may be better off going with the right books.

Would appreciate feedback of other long term / intensive users on that.
by citizenpaul | 2025-09-20 21:39:43+00:00
I'm not as solipsistic as you. I understand that there are other people perhaps less educated that maybe run the same 100m of empty road 10 times a week for years without event. Then they start thinking maybe I can do some other stuff while I run this boring route. Which is fine again for years until something happens.

I'm not saying its right, I'm straight up militant in my driving. I'm saying its part of human nature. Anytime you fight that you are going to lose. So a product that reduces the distractions even a bit can be a net good thing.
by zamadatix | 2025-09-20 21:39:59+00:00
The lowest alternative, 13 Pro Max had double the sale volume (at 1.5x the cost), while the VAST majority chose the 6.1" models instead, how does that support the argument the desire for a >5.5" phone is from a vocal minority? The articles themselves directly state the sales of small models are poor, it's not the other way around no matter how you spin the charts.

The relative preference for the larger unit has increased over time as well, e.g.: https://www.macrumors.com/2025/05/28/iphone-16-q1-2025-best-...
by lurking_swe | 2025-09-20 21:41:18+00:00
I think their point is many americans are simply not capable of having an honest debate about the pros / cons of living in both countries. It’s OK to not like a country and give them credit where credit is due.

They just say china has NO FREEDOM and CANT TRUST THE CCP, and shut down the conversation, as if the debate has been won? As if no other metric matters in a society. There is nuance - which 90% of the comments on this post have missed.

Most importantly, most commenters are not entering the discussion with an open mind. In which case there’s not point in debating anything. It’s a waste of time.