MurphyA/hacker-news huggingface dataset:
by roody15 | 2025-09-16 21:21:07+00:00
Email I sent to staff

Good Afternoon,

Apple released its new operating system today, macOS Tahoe. This is a full version upgrade (26.0) with a new look, feel, and many changes. At this time, I recommend NOT updating to Tahoe for the following reasons:

Stability: Version 26.0 is the first release and, like most “.0” versions, contains glitches that will take time to fix. Later versions (26.1, 26.2, etc.) are expected to address these issues.

Release Cycle: Apple now releases a new macOS every year instead of every two years. These initial yearly releases are often closer to “beta” products, and Apple typically patches problems over the first 6–8 weeks.

There is no real advantage to upgrading right now. It’s best to wait 6–8 weeks until the system stabilizes and then reevaluate.

How to Skip the Upgrade

When prompted, simply do not click “Upgrade Now.” This upgrade may pop up on your machine over the course of the next few days.

Close the upgrade window, or scroll down to select other updates.

For reference, macOS Sequoia (15.x) is now at version 15.7, which means it’s very stable and well-patched.
by nzeid | 2025-09-16 21:21:29+00:00
> Just using Rust will not magically make your application safe; it will just make it a lot harder to have memory leaks or safety issues.

You know, not sure I even agree with the memory leaks part. If you define a memory leak very narrowly as forgetting to free a pointer, this is correct. But in my experience working with many languages including C/C++, forgotten pointers are almost never the problem. You're gonna be dealing with issues involving "peaky" memory usage e.g. erroneously persistent references to objects or bursty memory allocation patterns. And these occur in all languages.
by tguvot | 2025-09-16 21:21:41+00:00
"i can't refute the facts so i will have to do character assassination".

(i'll remind that those are books that are taught by UN agency)

the atlantic article from 1961 about unrwa camps showing that they were taught back than liberation of entire area by force and destruction of israel https://cdn.theatlantic.com/media/archives/1961/10/208-4/132...

it's almost like if population is educated for violence for 50 years, it will behave violently and it will result in counter action from "occupying force"

on the other side, Israeli population is been subjected to palestinian violence for extended period. Pretty much everybody was either target of it or lost somebody to it.

Lets see what do we have in Israeli schoolbooks: https://www.impact-se.org/wp-content/uploads/Arabs-and-Pales...
by whitfieldsdad | 2025-09-16 21:22:05+00:00
As a Canadian this seems great - if someone wants to go, they should be allowed to go.

One of my neighbours ended their life through MAiD a few years ago after becoming fully paralyzed due to ALS - and I can see why - all they could do was watch TV all day - they couldn't even wipe their own butt for like, a year.

Another one of my neighbours was on the fence for a long time, but then after their dementia progressed too far they were no longer eligible and regretted waiting - as they had to wait to die of natural causes at that point.

MAiD is fine.

I think that MAiD is fine.
by rustystump | 2025-09-16 21:22:51+00:00
There is no discussion only mass flagging for anyone who isnt in lockstep on this. This is why politics is usually a subject to be avoided.

I am sure i will be flagged despite completely agreeing with the UN here but if any real change is to happen, minds must be changed which mass flagging does nothing to help. It only further entrenches people. But hey, at least it feels good right? Righteous and all that.

For those who disagree with the UN here, id be happy to change your mind. The us should not be involved in any of this.
by jandrese | 2025-09-16 21:22:57+00:00
In Linuxland you at least have pkg-config to help with package management. It's not perfect but neither is any other package management solution.

If I'm writing a small utility or something the Makefile typically looks something like this:

CC=clang PACKAGES=libcurl libturbojpeg CFLAGS=-Wall -pedantic --std=gnu17 -g $(shell pkg-config --cflags $(PACKAGES)) LDLIBS=$(shell pkg-config --libs $(PACKAGES)) ALL: imagerunner imagerunner: imagerunner.o image_decoder.o downloader.o
by cpburns2009 | 2025-09-16 21:23:24+00:00
As much as I prefer Python over JavaScript, Python is vulnerable to this sort of attack. All it would take is a compromised update publishing only a source package, and hooking into any of setuptools's build or install steps. Pip's build isolation is only intended for reproducible builds. It's not intended to protect against malicious code.

PyPI's attestations do nothing to prevent this either. A package built from a compromised repository will be happily attested with malicious code. To my knowledge wheels are not required.
by scj | 2025-09-16 21:23:27+00:00
"you can write perfectly fine code without ever needing to worry about the more complex features of the language. You can write simple, readable, and maintainable code in C++ without ever needing to use templates, operator overloading, or any of the other more advanced features of the language."

You could also inherit a massive codebase old enough to need a prostate exam that was written by many people who wanted to prove just how much of the language spec they could use.

If selecting a job mostly under the Veil of Ignorance, I'll take a large legacy C project over C++ any day.
by alexisread | 2025-09-16 21:23:29+00:00
Quite simply Israelis and Jews are not the same group, otherwise you would be holding all Jews on the planet responsible for this genocide. Dismissing the source for being Israeli is not antisemitic.

There are many examples of Israeli sources lying about the state of things, from the baseless claims against UNRWA to the unconscionable excuse of burying medics and the ambulances they were in, to avoid wild dogs eating them.

Israeli sources rarely offer evidence to refute the claims presented in this report, and a cry of antisemitism, as stated, conflates Judeism with Israeli nationality, hence these sources are worthless at best.
by whobre | 2025-09-16 21:24:02+00:00
> C++ is very old, in fact, it came out in 1985, to put it into perspective, that’s 4 years before the first version of Windows was released

Nitpick, I guess, but Windows 1.0 was released in November 1985:

https://en.m.wikipedia.org/wiki/Windows_1.0
by simanyay | 2025-09-16 21:24:32+00:00
Very cool! I wonder if it performs differently on actual “production” code versus random tests? I opened ChatGPT, typed a random non-sensical prompt, copy-pasted the response[1] into the tool and it gave me 50% AI generated.

[1] - https://chatgpt.com/share/e/68c9d578-8290-8007-93f4-4b178369...
by etblg | 2025-09-16 21:24:37+00:00
> Charlie Kirk thought conversation was the only way we were going to heal America. He believed we had to learn to talk to each other without vitriol, without poison, without anger. We had to be able to listen, and say what we mean, without being mean. And to talk to each other across divides. These are exactly the kind of things good discussion here exemplifies.

And just so we're clear on what some of those surely great conversations were, to say what he meant, without him being mean, to talk across divides, here's some of the guy's ideals:

"If you’re a WNBA, pot-smoking, Black lesbian, do you get treated better than a United States marine?"

"Happening all the time in urban America, prowling Blacks go around for fun to go target white people, that’s a fact. It’s happening more and more."

"Reject feminism. Submit to your husband, Taylor. You’re not in charge." – Discussing news of Taylor Swift and Travis Kelce’s engagement

"We need to have a Nuremberg-style trial for every gender-affirming clinic doctor. We need it immediately."

"The American Democrat party hates this country. They wanna see it collapse. They love it when America becomes less white."

"The great replacement strategy, which is well under way every single day in our southern border, is a strategy to replace white rural America with something different."

"America has freedom of religion, of course, but we should be frank: large dedicated Islamic areas are a threat to America."

"Islam is the sword the left is using to slit the throat of America."

"There is no separation of church and state. It’s a fabrication, it’s a fiction, it’s not in the constitution. It’s made up by secular humanists."

Choice quotes from https://www.theguardian.com/us-news/2025/sep/11/charlie-kirk...

Can't lionize a guy for promoting what he believed in without saying what he believed in.

And since we need a disclaimer in all these threads: I don't care about the guy before or after his death, I don't agree with him at all, and I think his views were pretty bad, pretty bad.
by rjpruitt16 | 2025-09-16 21:24:52+00:00
I hear a lot of people complain that Gleam is “not OTP.” They’re right. At the time of writing, Gleam still doesn’t have a registry or pubsub. If you ask the Gleam team, they’ll tell you to use external calls — which works, but is a pain to reproduce consistently across projects.

So I wrote Glixir, a library that wraps common OTP patterns in Gleam using Elixir’s battle-tested OTP library. It’s not as type-safe as Gleam, but I needed something production-ready today, not next year.

This lets you:

Use supervisors, GenServers, and pubsub patterns from Gleam.

Stay in Gleam where it makes sense, but drop down to Elixir OTP when you need reliability.

Ship code faster without reinventing OTP on the Gleam side.

Obviously there are trade-offs — you give up some type safety, and it’s not “pure Gleam.” But if you’re trying to build something real, you may find this a useful middle ground.

It's MIT so if you disagree with direction you can fork and do whatever you want.
by RussianCow | 2025-09-16 21:25:10+00:00
The same logic you used for runtimes also applies to libraries. Vulnerabilities are found in popular JS libraries all the time. The surface area is, of course, smaller than that of a runtime like Node.js, but there is still lots of potential for security issues with out-of-date libraries.

There really is no good solution other than to reduce the surface area for vulnerabilities by reducing the total amount of code you depend on (including third-party code). In practice, this means using as few dependencies as possible. If you only use one or two functions from lodash or some other helper library, you're probably better off writing or pulling in those functions directly instead.
by IshKebab | 2025-09-16 21:25:29+00:00
Terrible article.

> you can write perfectly fine code without ever needing to worry about the more complex features of the language

Not really because of undefined behaviour. You must be aware of and vigilant about the complexities of C++ because the compiler will not tell you when you get it wrong.

I would argue that Rust is at least in the same complexity league as C++. But it doesn't matter because you don't need to remember that complexity to write code that works properly (almost all of the time anyway, there are some footguns in async Rust but it's nothing on C++).

> Now is [improved safety in Rust rewrites] because of Rust? I’d argue in some small part, yes. However, I think the biggest factor is that any rewrite of an existing codebase is going to yield better results than the original codebase.

A factor, sure. The biggest? Doubtful. It isn't only Rust's safety that helps here, it's its excellent type system.

> But here’s the thing: all programming languages are unsafe if you don’t know what you’re doing.

Somehow managed to fit two fallacies in one sentence!

1. The fallacy of the grey - no language is perfect therefore they are all the same.

2. "I don't make mistakes."

> Just using Rust will not magically make your application safe; it will just make it a lot harder to have memory leaks or safety issues.

Not true. As I said already Rust's very strong type system helps to make applications less buggy even ignoring memory safety bugs.

> Yes, C++ can be made safer; in fact, it can even be made memory safe. There are a number of libraries and tools available that can help make C++ code safer, such as smart pointers, static analysis tools, and memory sanitizers

lol

> Avoid boost like the plague.

Cool, so the ecosystem isn't confusing but you have to avoid one of the most popular libraries. And Boost is fine anyway. It has lots of quite high quality libraries, even if they do love templates too much.

> Unless you are writing a large and complex application that requires the specific features provided by Boost, you are better off using other libraries that are more modern and easier to use.

Uhuh what would you recommend instead of Boost ICL?

I guess it's a valiant attempt but this is basically "in defense of penny farthings" when the safety bicycle was invented.
by strcat | 2025-09-16 21:26:18+00:00
> You are a partisan.

I provided accurate and verifiable information. You are yourself clearly here to promote /e/ and attack GrapheneOS, which you're doing with objectively false claims about both.

/e/ has far lower app compatibility and stability. It lags many months and years behind on critical privacy and security patches. Their services were down for many months recently. It has major issues with stability and functionality across devices. Those are facts.

People can verify that what I've said is accurate along with looking at the third party sources from actual experts, contrary to the phony inaccurate study from 2021 done in coordination with /e/ that you've provided.

> I'm sure all your points are correct in some narrow technical sense

They're all accurate and not only in a narrow sense.

> Graphene is an OS for geeks who want to geek out about security, not for normal people who want to use a smartphone without surrendering all their digital privacy.

GrapheneOS objectively provides far better app compatibility and stability than /e/. It's far better tested and provides the current generation Android functionality and usability rather than being based on old versions.

> Independent researchers have confirmed that /e/OS leaks very little data

The paper doesn't claim any such thing and /e/ has added multiple kinds of invasive telemetry and services since 2021. You should check the much more up-to-date and better researched information from Mike Kuketz and Divested. Your claim that they're independent researchers is unsubstantiated and contradicted by information which has come out about the motivations and methodology behind what they published. /e/ was involved in it.

> If you're a security nerd, live in an authoritarian state, or you're a targeted activist, Graphene is a better choice – although, really, you should be using a burner phone or staying offline.

/e/ isn't safe to use due to lack of current privacy and security patches. It should be avoided by anyone who cares the slightest about privacy or security. Going years without receiving important patches for serious privacy and security issues is a severe problem.

Contrary to what you're claiming, GrapheneOS provides much better app compatibility and stability.

Murena's services were recently down from early October 2024 through March 2025, for an idea of what people can expect from the OS and services:

https://community.e.foundation/t/service-outage-announcement...
by creatonez | 2025-09-16 21:26:20+00:00
You might be confusing this with Google Toolbar. It didn't change your search engine, because searching in the URL bar didn't even exist yet. Search engine competition wasn't really a zero-sum game back then, because users would often install multiple toolbars for different purposes (or more likely, have them installed automatically by crapware). But nevertheless it did cement Google's market dominance.
by nixosbestos | 2025-09-16 21:26:35+00:00
And you wrote 4 condescending sentences and still haven't engaged with my point, at all. Next time just write "umadbro" like the troll you are, instead of pretending like you're anything else.

> your writing is overflowing with emotion which is interpreted as idiological and not serious.

no you!!!11. Man, just the absolute cringiest, most embarrassing way of engaging online. You spelled ideological wrong, too.

> I wrote the above before looking at the rest of your comments. After looking at the rest of your comments, I rest my case.

well hot fucking dog, I'm sure embarrassed now! What a joke. Guys, he rested his case!! I'm so owned and devastated!
by ryandrake | 2025-09-16 21:26:48+00:00
If the user is to report a bug, then any additional information would be better than "Something Went Wrong." "Something Went Wrong" is the equivalent of the guy who calls into the IT helpdesk and says "My computer isn't working."

Surely, somewhere in the code, there is an if() statement, and you're displaying the "Something Went Wrong" dialog in the else() clause. You could at least add some context that the user can copy down, so that the bug report that will come later helps you find the bug.
Show HN: I built a tool to visually manage my LLM prompt templates and save them
by ml4den | 2025-09-16 21:26:51+00:00
This is Prompt Canvas - a simple, open-source web app that lets you visually build LLM prompt templates as YAML schemas and then generate complete prompts by populating values in the templates. It’s based on a single HTML file with no real privacy concerns and everything is portable thanks to YAML exports.

Check out the example in the dropdown and read the guide to see how it works: https://promptcanvas.ml4den.com/

LLMs like structure and I found that generating prompts like this is an easy way of giving it to them. It can be useful if you’re doing a degree of prompt engineering and you want to test small variations in your prompts; or if you have a use case where you submit the same promps many times but with some input variations. I found that browsing to a YAML file and tweaking one parameter for a particular job is much cleaner than a web of Notion pages which is what I had before.

Some thought and iteration has gone into the templating engine but everything is still early stage! Some of it is opinionated, and some of it is meant to be quite extensible to different use cases. Let me know if it makes sense.

I built this mostly with Gemini 2.5 Pro out of my own necessity. Would love to know if it's useful for you! Feedback welcome; as are bugs and things on GitHub: https://github.com/ml4den/PromptCanvas
by jedimind | 2025-09-16 21:27:08+00:00
zionists still trying to deceive people with misleading analogies while pretending that their apartheid ethno-state can just start its origin story at october 7th [1]. I wonder what kind of individual still buys into these false and lazy zionist narratives.

[1] https://web.archive.org/web/20231029055310/ojp.gov/ncjrs/vir...
by varispeed | 2025-09-16 21:27:22+00:00
They don't let you record phone calls (at least in my country, call recording is blocked), but they'll let people look up other people etc?

I guess as long as the data is shared with three letter agencies and data mills, then why not.

With phone calls that would be tricky, so at least they disabled it to protect scammers.

When that feature did work, I was able to get money back from insurer as their sales person misrepresented the policy I paid for. I had it recorded and they had to pay up.

With call recording no longer available, I don't do any calls if I don't have a tablet with me to record it.
by sunshowers | 2025-09-16 21:27:25+00:00
Java has the same problem most imperative languages do, which is the lack of clear separation between mutable and immutable state, rigorously enforced by tooling. Many large-scale Java programs try and work around this by using immutable collections, which certainly makes a difference but can only go so far.

Java has the additional issue of being object-oriented, which leads to spaghetti parent-child relationships under stress.
by bluGill | 2025-09-16 21:27:27+00:00
Years as since humans have flown planes stable enough not to need constant attention. On a calm day you don't need autopilot, just set your trims correctly and some airplanes will hold course well enough for a short nap - though of course this is more likely to result in a crash (which likely has happened, though it is hard to guess why a plane crashed beyond pilot error)
by adgjlsfhk1 | 2025-09-16 21:27:59+00:00
Hairer and Wanner (Solving Ordinary Differential Equations) is the classic if you want a graduate level understanding of the mathematical details of all the different methods, but it is incredibly dense (thorough understanding of both volumes will take months to years). If you want a more approachable reference, I would recommend https://book.sciml.ai/ (specifically chapters 7-9) which skips over most of the detail on how to construct ODE solvers but covers quite well the methods that tend to be used in practice.
by skinnymuch | 2025-09-16 21:28:26+00:00
I said two labels to give an idea of my politics. You’re not supposed to think everything revolves around your interpretation of those labels.

> So then what's this imperialism of America you're yapping about?

Same here. You saw me say a general principle and then assumed a bunch of logic. As if what I said isn’t a basic general philosophy that many societies and cultures have had (none that you like ofc).

—

I think the political knowledge gap between us is too wide so it will just keep resulting in the same issues of you projecting your [white and liberal] supremacist ego on to others.

Like thinking pan nationalism can mean the global north too. A bananas thing to say while accusing others of being bad faith or hypocritical.
by brw | 2025-09-16 21:29:11+00:00
These days compromised packages are often detected automatically by software that scans all packages uploaded to npm like https://socket.dev or https://snyk.io. So I imagine it's still useful to have those services scan these packages first, before they go out to the masses.

Measures like this also aren't meant to be "final solutions" either, but stop-gaps. Slowing the spread can still be helpful when a large scale attack like this does occur. But I'm also not entirely sure how much that weighs against potentially slowing the discovery as well.

Ultimately this is still a repository problem and not a package manager one. These are merely band-aids. The responsibility lies with npm (the repository) to implement proper solutions here.

> The responsibility lies with
by LegionMammal978 | 2025-09-16 21:29:13+00:00
> It depends on your dimensions of the system. If your system is one or low dimensional or if the function has sufficient smoothness, then it makes sense to assume that the function is a series of some kind, and then iterative solve on the least squares using gradient descent. If you pick the correct kind of series, you would get extremely quick convergence.

Thank you, this sounds like what I'm looking for. Would you know of any further resources on this? Most of what I've been playing with has 4 dimensions or fewer.

(E.g., in one particular problem that vexed me, I had a 2D vector x(t) and an ODE x'(t) = F(t,x(t)), where F is smooth and well-behaved except for a singularity at the origin x = (0,0). It always hits the origin in finite time, so I wanted to calculate that hitting time from a given x(0). Series solutions work well in the vicinity of the origin, the problem is accurately getting to that vicinity.)