MurphyA/hacker-news huggingface dataset:
by pessimizer | 2025-09-17 13:17:47+00:00
Every one who had access to a computer that could convert json into something more readable for humans, and would know that was the first thing they needed to do?

You might as well have asked how many English speakers could solve the questions if they were in Chinese. All of them. They would call up someone who spoke Chinese, pay them to translate the questions, then solve them. Or failing that, they would go to the bookstore, buy books on learning Chinese, and solve them three years from now.
by epage | 2025-09-17 13:17:50+00:00
This comes across as not being self-aware as to why security as laughed out of rooms: I read this as you correctly identifying some risks and said only offered the false-dichotomouy of solutions of "risk" and "no risk" without talking middle grounds between the two or finding third-ways that break the dichotomy.

I could just be projecting my own bad experiences with "security" folks (in quotes as I can't speak to their qualifications). My other big gripe is when they don't recongnize UX as a vital part of security (if their solution is unsuable, it won't be used).
by pavel_lishin | 2025-09-17 13:17:56+00:00
> Yes, he'd make lives of people, very much not like Avi, at least a little bit worse.

Avi Loeb is a Jewish man, holding a Ph.D., and works at Harvard University.

He is exactly the kind of person whose life Charlie Kirk was trying to make difficult. The only way Kirk's work could make his life worse is if Avi Loeb was gay.
by QuiEgo | 2025-09-17 13:18:28+00:00
Sending out a strong disagree from the embedded systems world. C is king here.

(Broad, general, YMMV statement): The general C++ arc for an embedded developer looks like this:

1.) discover exceptions are way too expensive in embedded. So is RTTI.

2.) So you turn them off and get a gimped set of C++ with no STL.

3.) Then you just go back to C.
by FooBarWidget | 2025-09-17 13:18:39+00:00
What does "are not good after all" even mean? I feel there are too many value judgements in that question's tone, that blindsides western observers. I feel like the tone has the hidden implication of "this must be fake after all, they're only good at faking/stealing, nothing to see here move along".

Are they as good as Nvidia? No. News reporters have a tendency to hype things up beyond reality. No surprises there.

Are they useless garbage? No.

Can the quality issues be overcome with time and R&D? Yes.

Is being "worse" a necessary interim step to become "good"? Yes.

Are they motivated to become "good"? Yes.

Do they have a market that is willing to wait for them to become "good"? Also yes. It used to be no, but the US created this market for them.

Also, comparing Chinese AI chips to Nvidia is a bit like comparing AWS with Azure. Overcoming compatibility problems is not trivial, you can't just lift and shift your workload to another public cloud, you are best off redesigning your entire infra for the capabilities of the target cloud.
by 542354234235 | 2025-09-17 13:18:41+00:00
The problem is when cities treat car infrastructure as absolutely mandatory, and all other transport infrastructure (pedestrian, cycle, bus, tram, train) as optional. When you say that everyone has to be able to get everywhere by car all at the same time, you have to build more roads and parking (at minimum more roads using taxis, self-driving), more roads spread everything farther apart, which means more distance per trip, which means more cars on the road, which means more roads, which means everything is spread farther apart, rinse, repeat.

American cities low density is a direct result of designing for car infrastructure over all else. And car infrastructure is far more expensive than other transportation, and since increased car infrastructure lowers density, it directly makes all other transportation more expensive and less viable.

Since cars are the most dangerous form of transport, for other drives but more so for cycles and pedestrians, it makes it less feasible to use them for your first-last mile. Then you add in that, as the roads grow and distances multiply, speeds are increased to attempt to compensate, multiplying the danger to anyone not in a car.
by dfee | 2025-09-17 13:19:18+00:00
My obsidian is slow to start on my phone (~30s, latest iPhone) and even on my computer it’s ~10s. I probably have 1000 notes, no back links, and I’m using the Vim extension and the default theme. It uses iCloud backup.

I can’t figure out why it’s so damn slow. But also, how is it any better than Notion at that point?
by sporkxrocket | 2025-09-17 13:19:44+00:00
That's not true at all. Even Alexis de Tocqueville discussed the value in not voting. It takes away the mandate from politicians. I don't think we live in a real democracy and I'm not giving legitimacy to fake, fully-Zionist elections. Direct action is much more effective and at some point our government will dissolve if the vast majority of people exit the optics of fake democracy.
by amiga386 | 2025-09-17 13:19:47+00:00
As far as I remember:

"go get" doesn't execute downloaded code automatically; there's no "postinstall" script (there can be a manual "go generate" or "go tool" the user may run)

Go doesn't upgrade existing dependencies automatically, even when adding a new dependency: you need an explicit "go get -u"

You don't use the same tool to both fetch and publish ("go get" vs "git push") so it's less likely a module publisher would get pwned while working on something unrelated.

The Go community tends not to "micropublish" so fewer people have or need commit rights to published go modules.

Go has a decent standard library so there are fewer "missing core functionality" third-party packages that world + dog depends on.

Npm is easier to pwn than Go, Maven, RubyGems, PyPI, CPAN, etc. because the design has more footguns and its community likes it that way
by amelius | 2025-09-17 13:20:15+00:00
> They've gone all-in with using less advanced equipment (DUV instead of EUV) but advanced techniques (multi patterning).

But that still seems like a huge step behind using EUV + advanced techniques.

Anyway, I'm curious to know how far that gets them in terms of #transistors per square mm.

Also, do we know there aren't secret contracts with TSMC?
by hollerith | 2025-09-17 13:20:20+00:00
Usually low-lying areas protected by dikes also deploy large pumps to pump out water that does get in. My guess is that it would be cost prohibitive to keep on pumping the water back out of Miami in 2075, but that is just a guess. There are probably people who know for sure, and it would be nice to read what they have to say.
by zachrip | 2025-09-17 13:20:28+00:00
What about if pw or 2fa change, your tokens go on a 24hr cooldown? I think the debug package maintainer even provided his 2fa to the phishing site. Obviously doesn't fix the case where they just exfiltrate and use tokens, but there's no fix that solves all of this, there needs to be layers. I also think npm should be scanning package updates for malicious code and pumping the brakes on potentially harmful updates for large packages.
by terminalbraid | 2025-09-17 13:20:36+00:00
What was wrong with the proof in this case? The paper explicitly states and acknowledges the issue raised by this article before the author was aware of it. The author of the article just contends that it is an experimental issue to set up unentangled initial states which are required for the experiment, and indeed someone who was going to perform the experiment needs to convincing demonstrate the assumptions are met.

The author even admits this "is better than doing no test at all".
by goku12 | 2025-09-17 13:21:56+00:00
> This is the right answer. I'm willing to stick my head out and assert that languages with a "minimal" standard library are defective by design.

> Standard libraries should include everything needed to interact with modern systems. This means HTTP parsing, HTTP requests, and JSON parsing.

There is another way. Why not make the standard library itself pluggable? Rust has a standard library and a core library. The standard library is optional, especially for bare-metal targets.

Make the core library as light as possible, with just enough functionality to implement other libraries, including the interfaces/shims for absolutely necessary modules like allocators and basic data structures like vectors, hashmaps, etc. Then move all other stuff into the standard library. The official standard library can be minimal like the Rust standard library is now. However, we should be able to replace the official standard library with a 3rd party standard library of choice. (What I mean by standard library here is the 'base library', not the official library.) Third party standard library can be as light or as comprehensive as you might want. That also will make auditing the default codebase possible.

I don't know how realistic this is, but something similar is already there in Rust. While Rust has language features that support async programming, the actual implementation is in an external runtime like Tokio or smol. The clever bit here is that the other third party async libraries don't enforce or restrict your choice of the async runtime. The application developer can still choose whatever async runtime they want. Similarly, the 3rd party standard library must not restrict the choice of standard libraries. That means adding some interfaces in the core, as mentioned earlier.
by toyg | 2025-09-17 13:22:42+00:00
Have you seen Windows 11? It's like they copied random ideas out of KDE 4 and bolted them on top of Windows, badly.

My theory is that big companies like to compress salaries. To compress salaries, you hire young and fire old, which means losing historical knowledge.

The other theory is that people who grew up with Kde-look.org are now running the asylum, without ever going through the sort of formal training that the previous generations of UI designers had to experience.
by screye | 2025-09-17 13:22:50+00:00
There is viable public transit from SFO to the city. Both Caltrain and Bart have decent connections to the airport.

Practically, travelers with heavy check-in bags prefer taxis. Public transit can't be the answer for everything.

Without heavy check-in, transit is a great choice. Alas, some problems remain. Many residents consider BART unsafe. Frequency is pathetic for a major subway line. BART is unusually expensive ($14! - 6$ + 6$ + 2$??) and last mile connectivity is bad.

On the topic of cost, other airports that are on the transit corridor (LaGuardia NYC, Boston Logan, Ronald Reagan Washington) cost $3-4 for the trip. EWR & JFK are more expensive, but they're often faster than taking a taxi which allows them to compete on pricing.
by sporkxrocket | 2025-09-17 13:22:55+00:00
I don't vote for Zionists or genocide. It really is pretty simple. I also am unwilling to build my comfort on the backs of mass murder. In many ways it's better to have Trump so we can feel one tiny bit of the pain we're inflicting on others. We need drastic change and at some point the dam is going to break.
by scrollaway | 2025-09-17 13:23:11+00:00
OK, so define it for us, please. Because, once again, this thread is talking about introducing laws about "AI". OP was talking about LLMs you say - So SLMs then are fine? If not, then where is the boundary? If they're fine then congratulations you have created a new industry of people pushing the boundaries of what SLMs can do, as well as how they are defined.

Laws are built on definitions and this hand-wavy BS is how we got nonsense like the current version of the AI act.
by rel_ic | 2025-09-17 13:23:17+00:00
People who know alcohol is bad for them and don't want to keep being drunks but keep drinking, people who believe phones are bad for their kids but still buy them, people who understand AI will significantly degrade the environment if it becomes ubiquitous but still work to help it become ubiquitous...

Mathematicians who publish proofs that are later proven inconsistent!

I suspect we have fundamentally different views of how humans work. I see our behavior and beliefs as _mostly_ irrational, with only a few "reasoning live-zones" where, with great effort, we can achieve logical thought.
by gausswho | 2025-09-17 13:23:39+00:00
Unilever turned down an offer to buy back for a cool two billionish, as the article mentions.

I would love to see the legal catfight as a new brand called GFBJ (Genocide-Free Ben and Jerry's) opens for sale across a series of supermarkets coinciding with a boycott of Unilever products.

One can dream.
by catigula | 2025-09-17 13:24:00+00:00
AI seems to explain this better than as framed:

>...the body of the article doesn’t describe a panel of physicians making predictions at all. The headline says “AI fares better than doctors,” but the text says the model outperformed “risk scores currently relied upon by doctors,” i.e., standard scoring tools clinicians use—not the judgments of the surgeons on the case or an outside panel.
by lawnchair | 2025-09-17 13:24:13+00:00
From my experience the problem at scale isn't that Terraform stops being useful. The problem is how state gets managed. Every IaC approach still has to coordinate changes across shared resources and none of them escape that. Other tools just shift the trade offs around. In house systems usually end up rebuilding the same thing in another form.

At scale the choices are pretty simple. You split state and live with orchestration glue. You move to a controller model and take on the operational overhead (see Crossplane). Or you keep a cohesive graph and fix the state layer. Those are the real options (imo). It's not about outgrowing Terraform.
by tsterin | 2025-09-17 13:24:32+00:00
In Coq-BB5 machines are not run for 100M steps but directly thrown in the pipeline of deciders. Most halting machines are detected by Loops using low parameters (max 4,100 steps) and only 183 machines are simulated up to 47M steps to deduce halting.

In legacy bbchallenge's seed database, machines were run for exactly 47,176,870 steps, and we were left with about 80M nonhalting candidates. Discrepancy comes from Coq-BB5 not excluding 0RB and other minor factors.

Also, "There are 181 million ish essentially different Turing Machines with 5 states", it is important to note that we end up with this number only after the proof is completed, knowing this number is as hard as solving BB(5).
by jgrahamc | 2025-09-17 13:25:17+00:00
It's interesting that some of the commentators here are very, very against touch screens on a laptop. I use a MacBook Pro and a Panasonic Toughbook (https://blog.jgc.org/2025/07/ode-to-anti-mac-panasonic-tough...). The Panasonic has a touch screen and I love being able to touch a window to bring it to the foreground and use my finger instead of the mouse. It works well for "I want the input point to be here".
by Hikikomori | 2025-09-17 13:25:54+00:00
Can't reply to the other guy.

The report states on the first page "most likely pro-Hamas lobby groups in those countries", very conclusive indeed.

The supposedly pro Hamas groups: The Australian Friends of Palestine Association and Australia Palestine Advocacy Network, as well as the Free Palestine Melbourne and Palestinian Christians in Australia.

Just regular old "its antisemitism" to say that Israel shouldn't be killing so many civilians. Hasbara has become so bad its laughable that they think this is a website worth taking seriously, or it would be if they were using Hasbara to keep killing civilians.
by zerkten | 2025-09-17 13:26:43+00:00
>> On the other hand, while typescript supports a lot of the enterprisey nonsense similar to C#, the majority of the ecosystem is written with simple functions, callbacks and options objects. Not in an enterprisey way.

Going back to culture, who makes up the Typescript community? While C# devs are attracted to it there are many multiples more devs coming from a JavaScript background. This has a big impact on how the culture developed.

Taking a step back. C# devs often need to do frontend work. They could go with what the industry has settled on, React, or go another way. The bulk go with react and some perhaps lament still have to switch their brain to another mode for that work. Frontend is obviously more fragmented, but the scale prevents C# devs from influencing patterns to the extent that they do on the backend.

I'd argue similar for Java devs when it comes to frontend. In the case of Blazor, I think C# patterns are a much smaller factor in decision-making. In fact, lots of C# adherents would default to React given it's the industry standard.
by SpicyLemonZest | 2025-09-17 13:26:57+00:00
The median American has $8000 in transaction accounts and a net worth of $192k. 50-60% of Americans self-report that they’re living paycheck to paycheck, but not everyone understands that to mean “I literally can’t pay the bills if my paycheck doesn’t come on time”.

(Is it deeply uncomfortable to get laid off with $8000 in your account? Without a doubt, especially in an increasingly weak labor market, even if you have home equity or retirement savings you could theoretically dip into to cover what unemployment benefits can’t.)
by singulasar | 2025-09-17 13:27:20+00:00
There's multiple security firms by now that constantly scan updated npm packages for malware. Obviously those companies can only do this after a new package has been published.

Npm could add this as an automated step during publishing. Sure, there's a manual review needed for anything flagged, but you can easily fix this as well by having smth like a trusted contributor program where let's say you'd need 5 votes to overrule a package being flagged as malware
by bob1029 | 2025-09-17 13:27:22+00:00
I started working on shipping a game to Steam after I realized how broken the market was. I realize this might sound even more stressful than a job search for something like a backend role, but I feel like I have a better chance than average based upon cattle-like, low-effort trends in the space and my willingness to endure certain kinds of suffering that most indie game developers aren't even aware of.

Worst case scenario, this provides something interesting to talk about in subsequent job interviews. You can often delete large portions of a resume when you have a fully published product live on a platform like Steam, even if it's very mediocre and selling like trash.

In any reality, this is way better than working in the domain of boring bullshit banking and suffering the miserable personalities that inhabit the space. I feel like I might cross the "never going back" threshold with that entire industry within the next few months. If I reframe this, it is really stressful but it's also quite liberating. If I hadn't walked away from that job last year, I would have had zero time to think about these alternative paths.
by FooBarWidget | 2025-09-17 13:27:30+00:00
You need to see it from their perspective. "huge step behind" is better than "we have nothing, let's just die". This is the best they have right now, and they're going all in with that until R&D efforts produce something better (e.g., domestic EUV).

It could also happen that all their DUV investment allows them to discover a valuable DUV-derived tech tree branch that the west hasn't discovered yet.

Results are at least good enough that Huawei can produce 7nm-5nm-ish phones and sell them at profit.

A teardown of the latest Huawei phone revealed that the chips produced more heat than TSMC equivalent. However, Huawei worked around that by investing massively into avdanced heat dissipation technology improvements, and battery capacity improvements. Success in semiconductor products is not achieved along only a single dimension, there are multiple ways to overcome limitations.

Another perspective is that, by domestically designing and producing chips, they no longer need to pay the generous margins for foreign IP (e.g., Qualcomm licensing fees), which is a huge cost saving and is beneficial for the economics of everything.
by chuckadams | 2025-09-17 13:28:09+00:00
Looking for "type": "project" is about as close as npm gets to knowing whether something is a command, but lots of libraries do ship with utility commands. npx knows, since it's used for nothing but commands. I've never seen bundling used for anything I've installed through npm; that's more likely for standalone downloads and possibly things like homebrew.

I'll repeat that the bigger problem is that npm has such unfettered access to everything in the user account to begin with. FSM knows it's not strictly an npm problem, it's a Unix problem that's been there since the beginning, just that now, enough of the chickens are coming home to roost that people are starting to notice.
by Lio | 2025-09-17 13:29:37+00:00
It seems to be mostly about mass survellance. The quote I've seen from Danish Minister of Justice, Peter Hummelgaard seems to make that clear:

> We must break with the totally erroneous perception that it is everyone's civil liberty to communicate on encrypted messaging services,

https://www.ft.dk/samling/20231/almdel/REU/spm/1426/index.ht...

What they want is everyone to be watched, all of the time. Crimes will be determined later.
by fhd2 | 2025-09-17 13:29:48+00:00
Fair question. I'm personally a big fan of what I believe is called direct democracy - getting the populace to vote on a more fine-grained level and individual issues. Not just generic representatives with a bucket list of stuff they say they do and what you suspect they'll actually do. I admit that the EU level feels quite indirect, but I would still carefully call it democratic.
by crowcroft | 2025-09-17 13:30:40+00:00
It's more of a second order effect, once you train people to turn to your app for something instead of the open web you can then steer them towards more owned and operated experiences within that app instead of leaving.

Meta is the perfect example of this. In browser newsfeeds have the same ad load as the app but by steering everyone into an app and then controlling the experience there they make a shit ton more money.
by a4isms | 2025-09-17 13:30:43+00:00
Anyone familiar with The Onion knows this, The Onion themselves repost the exact same thing every time there's a school shooting. Which emphasizes how regularly it happens, and therefore in turn I have no objection to a joke like this becoming copy pasta every time an NPM supply chain attack takes place.

https://duckduckgo.com/?q=site%3Atheonion.com+%22no+way+to+p...
by bgwalter | 2025-09-17 13:31:00+00:00
It should be implemented for politicians:

https://en.wikipedia.org/wiki/Pfizergate

"Von der Leyen previously used her phone to award contracts worth several hundred million euros while acting as defense minister of Germany, effectively bypassing public procurement processes. She subsequently deleted all messages from her phone when investigators probed her. While awarding the COVID-19 vaccine contracts worth billions of euros as head of EU commission, she similarly bypassed procurement processes via her phone and withheld messages on it."
by ivape | 2025-09-17 13:31:34+00:00
They are heavy into AI investing but will tell people AI startups are just toy apps (Chamath). That podcast is full of crooks. I’d be willing to give them a pass as bunch of old white guy techies that just love to talk about tech, but they are literally at the dinner table with Trump and Musk.

This country used to have congressional hearings on all kinds of matters from baseball to the Mafia. Tech collusion and insider knowledge is not getting investigated. The All-in podcast requires serious investigation, with question #1 being “how the fuck did you guys manage to influence the White House?”.

Other notes:

- Many of them are technically illiterate

- They will speak in business talk , you won’t find a hint of intimate technical knowledge

- The more you watch it, the more you realize that money absolutely buys a seat at the table:

https://bloximages.chicago2.vip.townnews.com/goskagit.com/co...

(^ Saved myself another thousand words)