MurphyA/hacker-news huggingface dataset:
by dylan604 | 2025-09-08 19:30:25+00:00
Are you using a desktop or laptop? I used to carry my laptop around with me to use whenever wherever as designed, and found myself always using it. Setting aside a dedicated desk space where I limit the use of the laptop made it much easier to just think of it as desktop and less mobile. Now, using it feels like I'm at work, and it is much easier to walk away from it.

Finding other things to do when bored instead of opening a browser is key. You're going to fill the time with something, so you have to find the something else.
by Aurornis | 2025-09-08 19:30:48+00:00
This is a small study (n=1005) that only included children age 6-8. The way they're shotgunning a long list of nutrients against a list of eye parameters screams p-hacking to me, so I wouldn't get excited about this result.

Omega-3 and fish oil stories always attract a lot of impossibly positive claims, but real-world studies are rarely as good as the anecdotes.

I would also caution people that fish oil isn't entirely benign to supplement with, despite common wisdom suggesting it's risk-free. Fish oil supplements can induce depressive-like symptoms in some people and high dose fish oil is a known trigger for mania in certain people with mood disorders. You can find countless puzzled posts from people wondering why fish oil is making them feel bad: https://www.google.com/search?q=site%3Areddit.com+fish+oil+m...

These outcomes are unlikely, but watch for them. It's really sad when someone is taking high dose fish oil because they're desperate for depression relief and all of the influencers say it's good for depression, then months later they run out of pills for a few days and are surprised that they feel better.

Before I get accused of exaggerating anecdotes, there are also randomized clinical trials with an order of magnitude more patients than this study that show a slight increase in depression, opposite of the expected reduction in mood disorders: https://jamanetwork.com/journals/jama/fullarticle/2787320
by serial_dev | 2025-09-08 19:31:13+00:00
It’s about setting up systems that help you succeed even if you are not perfect. It’s about facing the fact that you don’t always have enough self control, and minimizing self destruction when that happens.

I guess it’s like when recovering alcoholics, though ideally should just “simply” have self control, in reality it’s about removing booze from your apartment, getting rid of triggers, changing habits, friends, etc.
by craftkiller | 2025-09-08 19:31:37+00:00
Eh, how often are you going down to the bit representation of signed integers? Naturally I learned two's complement ages ago, but all of my bitwise manipulation seems to be on unsigned integers (and frankly I've only used bitwise operations at work once for implementing bloom filters. Normally I only get to do lower level stuff like that in side-projects). So internalizing two's complement has never seemed relevant.

> And a byte value of 128? What is that in hex?

0x80
by esbranson | 2025-09-08 19:32:07+00:00
> Cтатья отсутствует в базе

I was unable to access the OP's source, but I do want to point out there are several ω-3 polyunsaturated fatty acids with different nutrient characteristics. Thanks be to Chat G for banging this out, but I like many people have had this drilled in.

ALA (α-linolenic acid, 18:3 n-3) is an essential fatty acid. It's nutritional role is primarily as a precursor to the other ω-3 PUFAs, humans can elongate and desaturate ALA into longer-chain ω-3s (EPA, DPA, DHA), but the conversion efficiency is very limited (<5% to EPA, <1% to DHA for most people). ALA cannot be converted from EPA, DHA, or DPA. Sources are primarily plant oils (flaxseed, chia, walnuts, canola, soy). If this is your only source of ω-3 PUFAs, you're unhealthy.

EPA (eicosapentaenoic acid, 20:5 n-3) is (conditionally) essential. Its role is anti-inflammatory, a precursor for resolvins, cardiovascular protection, eye and brain signaling, and a precursor to DHA synthesis in limited amounts. Sources are marine foods (fatty fish: salmon, mackerel, sardines, anchovies).

DHA (docosahexaenoic acid, 22:6 n-3) is (conditionally) essential. Its role is as a major structural lipid in the retina, brain, and neural tissues, visual function, cognitive development, and neuronal membranes. Sources are marine foods (same as EPA) plus algae oils.

DPA (docosapentaenoic acid, 22:5 n-3) is an intermediate between EPA and DHA. Don't know. Sources are fish and red meat (esp. grass-fed ruminants).

In practice EPA, DHA, and DPA conversion from ALA is too inefficient, so direct dietary sources (fish, seafood, algal oil) are the meaningful way humans obtain enough EPA/DHA. That's why nutrition guidelines (WHO, FAO, NIH, EFSA) often treat EPA + DHA as conditionally essential, especially for infants (where DHA is critical for retina and brain development) and for populations with low fish intake.

Eat fish. As always, a balanced and diverse diet is a key requirement for health. For those who don't know, sardines are less fishy than tuna (hardly at all IMO), cheap, widely accessible, and pretty sure they have low mercury risk.
by mhitza | 2025-09-08 19:32:26+00:00
Thanks for calling this out. Apparently on iOS it's complicated, for some reason https://support.signal.org/hc/en-us/articles/360007317471-Vi...

On Android I tap on the image in chat, 3 dots and save. Way more involved on iOS. But at least I'll be able to point this out to my iOS peers.
by RomanPushkin | 2025-09-08 19:32:27+00:00
Big fan of it. Allows you to create experimental software for OpenWrt, like I did: https://github.com/ro31337/big-internet-button?tab=readme-ov...

> In our hyper-connected world, we've become slaves to the endless scroll. Social media, news, videos - the algorithm-driven content feeds are designed to capture and hold our attention indefinitely. We tell ourselves "just 5 more minutes" but hours disappear. Our brains are being rewired for constant stimulation, making us less capable of deep thought, genuine connection, and meaningful work.

> The Big Internet Button breaks this cycle by introducing friction back into your internet consumption.
by adrian_b | 2025-09-08 19:33:11+00:00
Yes, but where I live, in the middle of a continent, not on some sea coast, I can buy food that contains all nutrients, except omega-3 fatty acids, for a price at least 10 to 20 times less than if I would buy food of marine origin.

Adding to that food 10 milliliter of cod liver oil per day, which provides 2 grams of DHA+EPA, requires only the equivalent of 40 US cents per day.

With most capsules, one would need 5 or more capsules for this amount of oil, which would increase the price a lot. To create the sensation of a higher content of DHA+EPA, on many capsule boxes the quantity that is written is for a pair of capsules, not for one capsule. Therefore I consider capsules as more like a scam for increasing oil price than as a useful method of delivery, which is why I have stopped using them many years ago.

Looking right now on Amazon.com, it seems that the US prices for omega-3 oils are significantly higher than in Europe, at least double, the cheapest being labeled as dog food.

I wonder whether there is any difference in quality between those labeled as dog food and those labeled as human food, e.g. if the "dog food" oils are also tested for contaminants. Otherwise, the "dog food" oils seemed not only cheaper, but also better, being pure and unflavored, while the "human food" oils suggested by Amazon were either flavored or in capsules. Here in Europe, I see such pure oils advertised for children and pregnant women, instead of as dog food.
by gruez | 2025-09-08 19:33:25+00:00
>"Dumbphone"

>installs e-reader apps, password apps, ridehailing/rental apps, music apps, gym apps, dev apps, home apps, "Your Internet Provider" apps (?)

???

I get that some of these are essential, but including home automation and gym apps is really pushing the definition of a "dumb phone". It just sounds like the author wants to avoid installing tiktok and games when he's talking about a "dumb phone".
by twoodfin | 2025-09-08 19:33:32+00:00
We should be immediately suspicious when we get any solicitation to "renew" something "expired" in a security domain. Swapping un-compromised secrets is essentially always more risky than leaving them be.

Regardless of whether the real NPM had done this in the past, decades of dumb password expiration policies have trained us that requests like this are to be expected rather than suspected.
by dzaima | 2025-09-08 19:33:38+00:00
You could pretty easily have an integer representation using [-127; 128]; 128 being 0x80 of course (all other values being the same as in two's complement). Still would hold that -n == 1 + ~n, zero is all-zeroes, and the property that add/sub needn't care about signed vs unsigned. Only significant difference being that top bit doesn't determine negativeness, though of course it's still "x < 0" in code. (at the hardware level, sign extension & comparisons might also get very slightly more complicated, but that's far outside what typical programmers would need to know)

For most practical purposes outside of low-level stuff all that really matters about two's complement is Don't Get Near 2^(width-1) Or Bad™ Things Happen. Including +128 would even have the benefit of 1<<7 staying positive.
by like_any_other | 2025-09-08 19:33:43+00:00
> California sanctuary laws bar police from assisting in immigration enforcement

How is this a real law? The federal government would withhold federal highway funding if states set speed limits too high [1], but they can sabotage the border and nothing happens? Citizens can even pass a referendum, but a judge overturns it [2].

[1] https://en.wikipedia.org/wiki/National_Maximum_Speed_Law#Ena...

[2] https://en.wikipedia.org/wiki/1994_California_Proposition_18...
by aerostable_slug | 2025-09-08 19:34:12+00:00
I used to work in adtech a long while back. We found that our system could effectively target people who tried not to be targeted. By that I mean we realized a better ROI that without said targeting and click-throughs & conversions were happening for our customers at a nice rate.

At the end of the day the object of the exercise is generally less about building a perfect profile of a person and a lot more about getting said person to buy something. We found our system worked very well at figuring out what ads worked on privacy-conscious people and our customers saw a nice ROI from it.

In fact, it turns out pro-privacy technically skilled people cluster nicely and it's entirely possible to sell them stuff, and their attempts to be less 'profileable' than normal actually helped our mission (which was advertising, an endeavor that in my experience doesn't GAF about violating a given person's privacy in the way the pro-privacy crowd often thinks it does).

Take from that what you will.
by brycewray | 2025-09-08 19:34:30+00:00
“Anatomy of a Billion-Download NPM Supply-Chain Attack”[0] suggests adding this to `package.json` for now...

"overrides": { "chalk": "5.3.0", "strip-ansi": "7.1.0", "color-convert": "2.0.1", "color-name": "1.1.4", "is-core-module": "2.13.1", "error-ex": "1.3.2", "has-ansi": "5.0.1" }

EDIT: This comment[1] suggests `npm audit` issue has now been resolved.

[0] https://jdstaerk.substack.com/i/173095305/how-to-protect-you...

[1] https://github.com/chalk/chalk/issues/656#issuecomment-32676...
by Cthulhu_ | 2025-09-08 19:34:40+00:00
Tbh, it's not your fault per se; everybody can fall for phishing emails. The issue, IMO, lies with npmjs which publishes to everyone all at the same time. A delayed publish that allows parties like Aikido and co to scan for suspicious package uploads first (e.g. big changes in patch releases, obfuscated code, code that intercepts HTTP calls, etc), and a direct flagging system at NPM and / or Github would already be an improvement.
by Reubachi | 2025-09-08 19:34:58+00:00
Google's business model as it stands is too faceted to say any statement like that.

But largely it's generating ad revenue from new connected devices/interfaces as the ycome into scale, based off the data they generate/analyze.

If you had read the article, you'd see that open web that the executive is refering to is the open web before multimedia devices/interfaces became the primary ad absorption method.

Google certainly wants you stop stop watching youtube on firefox on your windows tv. They will give you a free device to do so. (chromecast) where they can control the entire experience, FORCING you to reconcle the ad.
by peanut-walrus | 2025-09-08 19:35:04+00:00
Openwrt still has some strange footguns (imo) and the upgrade process is painful. I personally just prefer running general-purpose distros for my routing and firewalling needs. I realize the learning curve for this for someone who just wants a home router is unrealistic though :)

But out of all the router/firewall distros, OpenWRT it is by far the best.
by gs17 | 2025-09-08 19:35:13+00:00
The whole international student thing with them is incredibly frustrating. It's practically a scam the US is pulling on the rest of the world, and somehow it's "winning" by ending it. We get the top students from other countries to come here and spend hundreds of thousands of dollars each in money from their own country. American students get a discount on their tuition paid for by international students overpaying. Now, Americans will be out of jobs and have a harder time getting a college degree.

For PhDs it's a bit different, but we still could get the top students from the rest of the world to come here to contribute to our research projects (and most of the stipend they're paid is directly injected in the local economy anyways!).
by j45 | 2025-09-08 19:35:33+00:00
Appreciate the intro to the book.

I recently talk therapied some legacy code through Claude Code back to life, but along the way put some frameworks in place for the codebase itself, and overall with how I think about approaching existing implementations, which helped a ton to shed a path forward for modernization.

It ultimately reminded me there's always a ton more to learn and think about, and it's sometimes quickest to learn from others experiences when considering paths forward, so the book is a helpful share, thanks.

All code is eventually legacy code in one way or another, whether it's the code directly, or the infrastructure level. Today's code might be the best one writes today.. looking back in 5-10 years.. one might wonder if best practice was best practice.
by moduspol | 2025-09-08 19:35:45+00:00
You can use headscale [1] (open source) as the mothership, and all the published clients (AFAIK) support pointing them to an alternative mothership.

I set it up, and it worked, but regular Tailscale works so well out-of-the-box that I just used that instead of maintaining headscale.

[1] https://github.com/juanfont/headscale
by Sohcahtoa82 | 2025-09-08 19:36:07+00:00
IMO, implicit string concatenation is a bug, not a feature.

I once made a stupid mistake of having a list of directories to delete:

directories_to_delete = ( "/some/dir" "/some/other/dir" ) for dir in directories_to_delete: shutil.rmtree(dir)

Can you spot the error? I somehow forgot the comma in the list. That meant that rather than creating a tuple of directories, I created a single string. So when the `for` loop ran, it iterated on individual characters of the string. What was the first character? "/" of course.

I essentially did an `rm -rf /` because of the implicit concatenation.
by vladkens | 2025-09-08 19:36:11+00:00
Actually, my problem is not really with NPM itself or the fact that it can be hacked, but with the damn auto-update policy of software – as users we usually have no idea which versions are installed, and there is even no way to roll back to a safe version.

All these Chrome, VSCode, Discord, Electron-apps, browser extensions, etc – they all update ± every week, and I can't even tell what features are being added. For comparison, Sublime updates once a YEAR and I'm totally fine with that.
by jauntywundrkind | 2025-09-08 19:36:20+00:00
Strongly agreed. I'd rather be running a Debian, with systemd, and boring regular utilities, than the bespoke environment openwrt has crafted together.

I'm super glad openwrt exists, and their uci config predates systemd's attempt to build a cohesive consistent whole system configuration pattern & is epic, but given the capabilities of these systems it feels so worthwhile to de-specialize the environment, to make it more boring.

What I really want is Kubernetes oriented tools that can manage hostapd & something like dawn or openert's usteer for band/ap steering. And some other ancillary wifi tools. Maybe maybe a setup for radius/enterprise, instead of just psk. You can do so much more with it, but at its core openwrt is 90% packaging for openwrt. It's not even particularly super well tuned hostapd: theres so much wireless config one can go try & enable that really is just additional 802.11 specs hostapd supports, they may improve your openwrt wifi experience.
by bcm4702 | 2025-09-08 19:36:55+00:00
The amusing thing about that is that broadcom, not Cisco, was the culprit in the original WRT54G GPL violation. Cisco, of course, were legally liable and should have checked that the code they obtained was not encumbered - although the usual way to do that is to specify contractually that your vendor will do the checking. It was a huge issue for them that they had tripped a customer who provided a significant fraction of their revenue into legal difficulties. I suspect that to this day, a big reason that parts of broadcom are reluctant to open-source stuff is because certain executives are still angry about the experience.
by starbugs | 2025-09-08 19:37:21+00:00
> The problem is, even as you ignore the internet, it goes on without you, and yet your ignoring it doesn't make you immune to it.

I recently moved and had a lot on my list in real life generally for about six to nine months. I stopped using the internet as I did before because I simply didn't have time. I primarily used it to order stuff for the new house and to do my professional work. No podcasts, no YT videos, no news articles, no social media. I even stopped watching the news completely.

Guess what? Nothing happened other than me feeling a lot better. I didn't miss out on anything as far as I know. Instead, I forgot about all the bullsh*t that's not even real. Let's be honest. Most of the stuff on social media is completely made up or has a core of truth but is completely blown out of proportion to get attention.

A couple of times a coworker told me about how scary the news were and that they are afraid something bad will happen soon. I just said: "Ah, it's probably not going to be that bad." And guess what? It wasn't that bad. I never heard of it again afterwards.

The internet will move on without you and you don't have to be immune to it. You can just move on without it. Use it for what you need and try to make it as hard as possible for it to use you.
by AvAn12 | 2025-09-08 19:38:03+00:00
you sure about that? Lots of progressive policies stimulate job growth e.g. infrastructure act, CHIPS act, Obamacare, support for public transit, etc. are all make it easier and less risky to hire people. I do agree with you about the disadvantages of the mad king routine, which injects uncertainty, risk, and chaos...
by xorcist | 2025-09-08 19:38:06+00:00
That's just it. If any of the browser vendors put 1% of the work they spent on renewing their visual identity, remodeling their home page, or inventing yet another menu system into slightly easier to use client certificates (and smart cards) this would have been a solved problem two decades ago. All the pieces are in place, every browser has supported this since the birth of SSL, it's just the user interface bits that are missing.

It's nothing short of amazing that nobody worked on this. It's not as if there isn't a need. Everyone with high security requirements (defense, banks etc.) already do this, but this clumsy plugins and (semi-)proprietary software. Instead we get the nth iteration of settings redesigns.
by kelnos | 2025-09-08 19:38:24+00:00
I don't get this. The local-only backup option is already encrypted. Why can't they include an option for me to upload it somewhere of my choosing, like Google Drive, or even using Android's built-in backup system, so I can do it for free (my current backup file is well over a GB)? I already donate $5/mo to Signal Foundation; building a paid-only backup solution gives me a bad taste.

I even wrote a small Android app to do GDrive uploads of the encrypted backup file, watching the local backup directory for new files. (It broke with an Android version update and I haven't gotten around to fixing it.)
by wiz21c | 2025-09-08 19:38:42+00:00
I was a kid and there were Tron, Star Wars, video games, personal computing, hacking culture, etc. Those defined new things and point of views.

Sure we had thermonuclear war threats and a bit of AIDS. But that was basically all.

But as far as my craft is concerned (coding) there's no question about it, everything is so much easier now !
by kstrauser | 2025-09-08 19:39:11+00:00
That was a transitional time. Intel Core CPUs launched as 32 bit in 2006, and the first Intel Macs around then used them. OS X Lion dropped support for 32 bit Intel in 2011.

So you could very well have bought a decent quality 32 bit system after 2005, although the writing was on the wall long before then.
by gruez | 2025-09-08 19:39:27+00:00
>Advertisers try to reidentify and match you against their database, the less information you give them and the more randomized it is, the less certain they can be, its you again.

This assumes the randomization is done properly, otherwise it just turns into a signal of "installs privacy extensions", which can still be used for targeting, as a sibling commenter has mentioned.
by hiq | 2025-09-08 19:39:42+00:00
Encrypted backups can't be deduplicated unless the encryption is flawed. There shouldn't be a way to tell that one Signal backup is somewhat related to another, unless you have the passphrase.

That also means that Syncthing can't do better than sending the full backup. But if you're syncing via wifi (e.g. at home) it's not really a problem anyway.
by FollowingTheDao | 2025-09-08 19:39:43+00:00
I’m sorry you’re missing my point. If a culture grows up eating a lot of long chain poly unsaturated fatty acids, and then suddenly they stop, then the myopia develops.

In populations that depend on a very heavy vegetarian diet, which is comprise primarily of shortchange, polyunsaturated fatty acids, they might have other issues not related to myopia when they go off of their traditional diet.

Myopia in my opinion is a result of the industrialization of food.