MurphyA/hacker-news huggingface dataset:
by NoMoreNicksLeft | 2025-09-17 01:11:49+00:00
>But you know you're in trouble when you start saying things like "I am no telepath",

I'm not in trouble. There is virtually zero chance of this ever being noticed by law enforcement, and even less chance than that of them giving a shit.

Also note, I am not arguing what the worst possible interpretation might falsely convict someone of, but how the law should be viewed, or, if someone can demonstrate to my satisfaction that the law disagreed with, then how it should be altered.

If I have to guess what retards (read: juries) might think is reasonable, then there can be no public internet. We're just a few years after journalists were arrested for looking at html source with "view source", aren't we?

>The terms you're both dancing around are mens rea

I'm only mildly ignorant. Has CFAA ever been considered to describe strict liability crimes?
by jandrewrogers | 2025-09-17 01:12:53+00:00
Qualitatively better. C++20 'concepts' obviated the need for the arcane metaprogramming tricks responsible for generating the vast majority of that template vomit.

Now you mostly get an error to the effect of "constraint foo not satisfied by type bar" at the point of use that tells you specifically what needs to change about the type or value to satisfy the compiler.
by myahio | 2025-09-17 01:12:58+00:00
What could potentially put an end to the current hiring "winter"?

We have an increasing amount of immigrants coming over in hopes of getting a white-collar job, in combination with the tech sector shrinking, as well as companies as a whole being much more careful when hiring.

There would need to be some explosion in the amount of tech jobs, in order for everyone to be able to get one. However, I just cannot see what could cause something like this in the near future.
by totetsu | 2025-09-17 01:13:05+00:00
I was just reading an article in Foreign Affairs that was discussing a possible future with an increased separation of science and technological developments between China and The West. And it occurred to me, what would such a siloed landscape mean for OSS and basically the whole web infrastructure as it is today, shared and open for anyone in any country. I think this kind of malware becoming pervasive could be the failure state if this future becomes reality.
by motorest | 2025-09-17 01:13:29+00:00
> If it's not feasible to audit every single dependency, it's probably even less feasible to rewrite every single dependency from scratch.

There is no need to rewrite dependencies. Sometimes it just so happens that a project can live without outputting fancy colorful text to stdout, or doesn't need to spread transitive dependencies on debug utilities. Perhaps these concerns should be a part of the standard library, perhaps these concerns are useless.

And don't get me started on bullshit polyfill packages. That's an attack vector waiting to be exploited.
by aprilthird2021 | 2025-09-17 01:14:47+00:00
> On the other hand, there is no guarantee that completely cutting off ties with Israel, would make anything better for Gazans.

I agree with everything you said about Biden being practically better for Palestine, but this is nonsense. Israel would be a completely isolated state without US support. Even North Korea has China. The last completely isolated state in the world was South Africa whose apartheid ended as a result. It's not crazy to think Israelis might realize forcing people who have lived in the same country for generations to be stateless and voteless to preserve a "pure", "Jewish" state is not a worthwhile gamble if it costs them any connection to the outside world.
by hedora | 2025-09-17 01:15:12+00:00
Tesla’s been doing that for years in SF. There’s only been one fatality on that stretch of the 101 so far.

More info on autopilot deaths (59 including 2 FSD):

https://www.tesladeaths.com/

Waymo’s had one fatality (other driver was at fault), but that’s not normalized by miles driven.
by jjk166 | 2025-09-17 01:15:37+00:00
> where picking the least of two evils gives the “less evil” party a near infinite amount of leverage over you to demand your loyalty regardless of whether they give in to any of your requests.

The less evil party commands no loyalty at all, you vote for it only so long as there are no better options. If we're presupposing that there will never be any other option but the greater evil, then the lesser evil very much should be voted for consistently. Why can't the other side be the one that needs to reform to better appeal to the voters interests? What is to stop the lesser evil from becoming more evil, catering to voters who actually show up?

If people voted for a third party, that would be one thing. Sure the odds of winning the election are slim, but a third party candidate needs only 5% of the vote for the party to get federal campaign funds, to say nothing of the increased legitimacy in upcoming elections. It's happened in my lifetime, it can happen again. A strong showing by a third party forces the major parties to adjust to avoid splitting the vote. Jill Stein of the Green Party was openly opposed to Israel's actions in Gaza, they could have voted for her. And while there they could have voted for down ballot candidates so one party doesn't get control of all branches of government. But they didn't; third parties had their worst election since 2012. Of the 6 million democrat votes lost from 2020 to 2024, 400,000 were picked up by the green party. You can't simultaneously accept that the two party system is the be all end all and that you don't have an obligation to vote for the better of the two parties. It's understandable that people unenthusiastic with the current political situation just want to disengage, but don't act like it's a noble act of protest. Staying home isn't playing the long game, it's just throwing away your vote.

> The neoliberals are to blame more than anyone else for the situation we’re in today. They love to deflect but they are complicit in everything going wrong right now.

That they could have done better doesn't reduce at all the blame of those who specifically worked towards creating the current situation, and those who saw what was happening and chose to do nothing.
by next_xibalba | 2025-09-17 01:16:28+00:00
All that may be true. Human drivers are not the point of comparison. The search business is. Waymo will still always be a lower margin business than search for the reasons I enumerated.

Waymo may end up being great business. But it is unlikely to exceed what search is/was. For that reason, press X to doubt GP's claim that Alphabet is undervalued. "IT'S PRICED IN" [1]

[1] https://www.reddit.com/r/wallstreetbets/comments/eberem/ever...
by sgammon | 2025-09-17 01:17:28+00:00
why were you synchronizing your 2fa codes? that requires opt in, even in the form of a signed in google account combined with google authenticator as a choice of 2FA code storage

why were your coins not in a cold wallet? that is how you stop this permanently

why did you acknowledge any kind of inbound communication? ignore it. always. or call outbound to a confirmed number to make sure.

btw you were scammed out of $80k, as you admit in your article, the headline is misleading for seemingly no reason except the larger number
by sfilmeyer | 2025-09-17 01:17:36+00:00
> What’s Apple’s default time frame for security support?

This isn't thaaaaat far out of support. Their last security update for iOS 15 was just earlier this year, and they only dropped iPhone 6s from new major versions with iOS 16 a few years ago. As someone who has kept my last few iPhones for 5+ years each, I definitely appreciate that they keep a much longer support window than most folks on the Android side of things.
by devnullbrain | 2025-09-17 01:18:00+00:00
I find this kind of advice underspecified. The people struggling the most to find work are juniors: what projects are big enough that the applicant would a) know and care about them and b) get a benefit out of the network but also c) have fruit low enough for a solo junior to reach?

I tried this way-back-when and ended up submitting fixes to projects that were open source but had no real path to accepting patches from people outside the cathedral.
by sporkxrocket | 2025-09-17 01:18:12+00:00
The Democrats could simply not fund (and start) a genocide and easily win elections. Don't blame voters. I won't vote for anyone complicit with Israel, D or R. Ask yourself why it's so important to Democrats to support Israel, even when that means losing important elections. We've got big problems on our hands and it doesn't look like we'll be voting our way out of this, Israel has too much control over every aspect of our government.
by sgammon | 2025-09-17 01:20:10+00:00
> an authenticator code is NOT a 2nd factor, if that user is using Google Authenticator.

it is still a second factor, because it is something you have instead of something you know; it's just that you converted it to something you know when you read it and transmitted it to someone else

all that being said, yeah, legal@google.com (as a homograph attack) should probably be blocked.
by giancarlostoro | 2025-09-17 01:20:57+00:00
One key thing I noticed is this is before iPadOS was a thing, so this patch targets iPads too... Which makes me wonder... this is speculation no proof, but I wonder if someone is exploiting Point of Sale devices that are powered by old iPads somehow, which is out of the control of a lot of end-users who are at thee mercy of the POS vendors who are probably charging an insane premium on them.

I worked at a restaurant chain and I remember it being a whole thing to even consider reworking the POS tables + software due to rising costs.
by akerl_ | 2025-09-17 01:21:23+00:00
I can only speak for myself, but when I'm looking for apps, the hierarchy of needs is something like:

1. Does it solve the underlying problem

2. Am I a standard or outlier user of the product

3. Does it make it easy to get it / use it

4. Is it from a company/developer that I like

I'm obviously not going to use an app that doesn't solve the original goal. Beyond that, some examples of things that have made me go chasing for other alternatives:

1. Updating the app isn't automated -- I use a window manager on Windows where updates have to be manually downloaded and run, and every time I update I google if there's a viable replacement.

2. The app has a bunch of fluff -- I'm currently trying a couple new apps for logging infant activity like diaper changes / feeds, and 90% of the options can do the task but are covered in other buttons/options/reports that I do not care about.

3. I'm clearly not the target audience for the developer -- I use Anydesk for remote management of some Windows desktops but all their plans are clearly enterprise/prosumer-focused and I'm actively preparing for them to kill off my plan level or break the functionality.
Navi – First AI Voice Computer
by andyprevalsky | 2025-09-17 01:21:55+00:00
Hi Everyone!

Excited to introduce ya’ll to Navi!

Navi is a hackable smart speaker built for developers. All interfacing is done entirely through voice w/ Navi, who acts as an agent to complete any long term goal you care about, or simply to chat / be a SOTA research assistant.

Navi is completely customizable, you can add your own custom voice, change it’s personality, and hook in any custom tools you care about so as best to fit your needs (or pick from a dev marketplace). It also has a pretty killer memory system that consistently updates it’s world view to better help you achieve the goals you care about.

Would love any feedback or questions! I’m still super early on in the process & would love to hear about any of your thoughts :)
by brikym | 2025-09-17 01:21:58+00:00
Here is my armchair engineering design. The blades are already wings so they get bolted on and become the wings of the plane and can rotate (or add canards if that's too hard). The engines are at the back.

\ || || || || || || || \ || == || \ ============> == || / / || || || || || || || || /

But then how does it get back home? Attach some 70m blades as wings.

What about the asymmetry of the blades? You can't have two blades from the same wind turbine as one would have the leading edge facing backwards. Every second wind turbine would have to rotate in the opposite direction for this to work.

It would probably work as well as da Vinci's helicopter but it's an interesting thought experiment.
Show HN: npm-daycare, an NPM proxy that filters out recent & small packages
by n2d4 | 2025-09-17 01:22:11+00:00
Hey all! npm-daycare is a simple NPM proxy built on Verdaccio which filters all packages that:

- are younger than 48h (it will just provide an old version instead)

- have fewer than 5,000 weekly downloads

https://github.com/stack-auth/npm-daycare

This is in response to the recent supply chain attacks that shattered the JavaScript ecosystem [1]. It's likely not a problem that will go away any time soon, so we figured we'd build something to protect against it.

Doing this on the proxy layer means it will work across the entire system, as proxies are set globally. In the future, we could also add more filters to the proxy.

To get started, just run the Docker container:

docker run -d --rm --name npm-daycare -p 4873:4873 bgodil/npm-daycare npm set registry http://localhost:4873/ pnpm config set registry http://localhost:4873/ yarn config set registry http://localhost:4873/ bun config set registry http://localhost:4873/ npm view @types/node # has recent updates npm view pgmock # has <5,000 weekly downloads

Downside: npm-daycare won't show packages that are younger than 48h on its default config, so be aware of that when you try to update your packages to patch a zero-day exploit.

You probably also shouldn't rely on this as your only line of defense. Curious to hear what you think!

[1] https://news.ycombinator.com/item?id=45260741
by shirro | 2025-09-17 01:22:38+00:00
I don't want to be locked into Apple's ecosystem so they are not an option for me. For others, Apple are in a different league to the rest of the industry with their level of product integration, design, supply chain control etc.

Entry level Apple products can overlap with Frameworks in price but are spec-wise in a very different category. This is very apparent with similarly priced plastic Framework 12 with a 13th gen i5 and entry level Macbook Air. They have hugely different build quality, performance and battery life, all wins to Apple.

A $400 laptop might be worse for sustainability but if you are buying a computer for your kids for school it still makes sense for many people to buy something cheap and cheerful and upgrade in a few years than try and buy for life, at least on the non-Apple side of things. Many people, financially, don't have a choice. Apple devices have tended to have long usable lifetimes in the past but who knows if that will continue.

I hope Framework can help change the industry but they need sustainable margins on low volume manufacturing and supporting them on their mission requires a willingness to look beyond straightforward price/performance comparisons. It is hard to make a general recommendation of Framework products but if you are like me and use Linux and value repairability I think their 13" is still a solid choice.
by next_xibalba | 2025-09-17 01:22:39+00:00
As big as search!? Doubtful. The entire globe is unlikely to be the addressable market. China will never let Waymo in. India will undoubtedly field multiple worthy competitors. Europe is hostile to technological progress and even more-so to American tech cos. In most parts of the world, Waymo is unlikely to be able to deliver a positive gross margin business given the per-capita-income of most places.

It could be a big business. In fact, I hope it is. Lives will be saved. But there is still a lot to be worked out, and the margins will never be as sweet as those of search.
by utbabya | 2025-09-17 01:22:46+00:00
Blog author company's runner detects anomalies in them, but we shouldn't need a product for this.

Detecting outbound network connection during an npm install is quite cheap to implement in 2025. I think it comes down to tenant and incentives, if security is placed as first priority as it should, for any computing service and in particular for supply chain like package management, this would be built in.

One thing that comes to mind that would make it a months long deabte is the potential breakage of many packages. In that case as a first step just make an eye catching summary post install, with gradual push to totally restriction with something like a strict mode, we've done this before.

Which, reminds me of another long standing issue with node ecosystem toolings, information overload. It's easy to bombard devs with thesis character count then blame them for eventually getting fatigue and not reading the output. It takes effort to summarize what's most important with layered expansion of detail level, show some.
by giancarlostoro | 2025-09-17 01:23:01+00:00
Before I got my first iPhone five years ago, I always noticed that iPhone owners would drag it along for a long time, but really the phones are tanks. I remember switching Android phones every two years, because they quite literally started to decay. I think my last Android Phone I could have probably made last longer than two years, I still turn it on and play random games on it, and its still very responsive.

I assume they know just how long their customers keep their phones and maintain them accordingly.
by jjk166 | 2025-09-17 01:23:56+00:00
Voting third party isn't the same as staying home. If a third party candidate gets just 5% of the vote, the party gets federal election funds in the next election. This isn't some pipe dream, third parties were crossing that threshold in the 90s. It encourages the major parties to alter their positions to avoid splitting the vote, and if they fail to do so then the third party can gain traction over the long run. Further, if you go to the polls for a third party, you are presumably also voting in down ballot races, where you have significantly more impact whether you vote third party or major party.

Staying home does nothing to combat the two party system, gives no direction to politicians as to which way they ought to move to get your vote in the future, and doesn't allow you to participate in local politics.
by smegma2 | 2025-09-17 01:24:00+00:00
The median household net worth in the US is $193,000. The rate of home ownership is 65%. I don’t think the median American is at risk of becoming homeless during normal unemployment. Maybe you mean that the article isn’t as relevant for a global audience which is fine, but I would think that the median American lives in “the real world”.

https://www.federalreserve.gov/econres/scf/dataviz/scf/table...

https://www.nahb.org/blog/2024/08/lowest-homeownership-rate-...
by jonhohle | 2025-09-17 01:24:05+00:00
I think many games were that way. SotN definitely has a global timer. On a native 32-bit system it makes sense, especially when the life of a game was a few months to a few years on the retail shelf. No player is going to leave their system running for 2.27 years so what’s the point of even tesing it?

Who knew at the time they were creating games that would be disassembled, deconstructed, reverse engineered. Do any of us think about that regarding any program we write?
by duped | 2025-09-17 01:24:12+00:00
I'm just pointing out that one reason devex sucks in C++ is because the fact you need a wide array of tools, that are non portable, and require learning and teaching magic incantations at the command line or in build scripts to work, doesn't foster what one could call a "good" experience.

Frankly the idea that your compiler driver should not be a basic build system, package manager, and linker is an idea best left in the 80s where it belongs.
by tTarnMhrkm | 2025-09-17 01:24:27+00:00
You're right, "successful" needs context, especially on the Mac App Store where volume can be low. For me, as a solo dev, it's meant having days with multiple sales. It's more than enough to validate the idea and fund ongoing development, which feels like a huge win.

To clarify, my app is not open source. I only mentioned the open-source clones that have also appeared.
by westurner | 2025-09-17 01:24:52+00:00
Containerd/nerdctl supports a number of snapshotter plugins: Nydus, e Stargz, SOCI: Seekable OCI, fuse-overlayfs;

containerd/stargz-snapshotter: https://github.com/containerd/stargz-snapshotter

containerd/nerdctl//docs/nydus.md: https://github.com/containerd/nerdctl/blob/main/docs/nydus.m... :

nydusify and Check Nydus image: https://github.com/dragonflyoss/nydus/blob/master/docs/nydus... :

> Nydusify provides a checker to validate Nydus image, the checklist includes image manifest, Nydus bootstrap, file metadata, and data consistency in rootfs with the original OCI image. Meanwhile, the checker dumps OCI & Nydus image information to output (default) directory.

nydus: https://github.com/dragonflyoss/nydus

awslabs/soci-snapshotter: https://github.com/awslabs/soci-snapshotter ; lazy start standard OCI images

/? lxc copy on write: https://www.google.com/search?q=lxc+copy+on+write : lxc-copy supports btrfs, zfs, lvm, overlayfs

lxc/incus: "Add OCI image support" https://github.com/lxc/incus/issues/908

opencontainers/image-spec; OCI Image spec: https://github.com/opencontainers/image-spec

opencontainers/distribution-spec; OCI Image distribution spec: https://github.com/opencontainers/distribution-spec

But then in the

opencontainers/runtime-spec//config.md OCI runtime spec TODO bundle config.json there is an example of a config.json https://github.com/opencontainers/runtime-spec/blob/main/con...

The LXC approach is to run systemd in the container.

The quadlet approach is to not run systemd /sbin/init in the container; instead create .container files in /etc/containers/systemd/ (rootful) or ~/.config/containers/systemd/*.container (for rootless) so that the host systemd manages and logs the container processes.

Then realized you said QEMU not LXC.

LXD: https://canonical.com/lxd :

> LXD provides both [QEMU,] KVM-based VMs and system containers based on LXC – that can run a full Linux OS – in a single open source virtualisation platform. LXD has numerous built-in management features, including live migration, snapshots, resource restrictions, projects and profiles, and governs the interaction with various storage and networking options.

From https://documentation.ubuntu.com/lxd/latest/reference/storag... :

> LXD supports the following storage drivers for storing images, instances and custom volumes:

> Btrfs, CephFS, Ceph Object, Ceph RBD, Dell PowerFlex, Pure Storage, HPE Alletra, Directory, LVM, ZFS

You can run Podman or Docker within an LXD host; with or without a backing storage pool. FWIU it's possible for containers in an LXD VM to use BTRFS, ZFS, or KVM storage drivers to create e.g. BTRFS subvolumes instead of running overlayfs within the VM by editing storage.conf.
by strken | 2025-09-17 01:24:57+00:00
Sure, but none of us have to read all the way through every article that hits the front page, or take it to heart when the article is about a rich person.

One of my friends has given up on finding a software job and become a handyman to make ends meet. I get that not everyone in tech is loaded. I just don't think holding your nose and gagging at the "reek" when you deliberately read about someone who has six months of savings is a productive or useful reaction.