MurphyA/hacker-news huggingface dataset:
by esbranson | 2025-09-07 02:06:50+00:00
The EU treats UPU ITMATT (CN 22/23) data as both advance security and the legal customs declaration, whereas the US treats it as postal AED for targeting only and requires a separate ACE customs entry with HTSUS-10, importer ID, and invoice details for clearance and liability. The US STOP Act is the proximate cause. Washington's framing is that de minimis had become a loophole for tariff evasion and fentanyl imports.

Express carriers (FedEx, UPS, DHL, etc.) were already compliant and unaffected. This article is about the UPU network (read: USPS, national carriers) parcels carrying goods, not ordinary letters or documents.

The UPU is building new duty-collection modules and working with CBP to certify intermediaries. Once those pipelines exist, traffic volumes will rise again, but under a much heavier compliance burden. Chat G knows what's up, it helped me understand.
by benreesman | 2025-09-07 02:07:50+00:00
If Moore's Law is Ending leaks are to be believed, there are going to be 24GB GDDR7 5080 Super and maybe even 5070 Super Ti variants in the 1k (MSRP) range and one assumes fast Blackwell NVFP4 Tensor Cores.

Depends on what you're doing, but at FP4 that goes pretty far.
by tomhow | 2025-09-07 02:09:02+00:00
Please don't post ideological flamebait like this on HN. We've had to ask you repeatedly to observe the guidelines in recent months. Hacker News is only a place where people want to participate because others make an effort to keep the standards up. Please do your part to raise the level, rather than dragging it down. This line from the guidelines is particularly relevant:

Please don't use Hacker News for political or ideological battle. It tramples curiosity.

https://news.ycombinator.com/newsguidelines.html
by diath | 2025-09-07 02:09:13+00:00
It would be nice if desktop software had to explicitly request access to different APIs on the system (network, filesystem, etc) as well as only request access to specific filesystem paths, then give us prompts that list the permissions that the app wants. Something like pledge (https://man.openbsd.org/pledge.2) from OpenBSD/Serenity but integrated into the desktop systems GUI.
by pabs3 | 2025-09-07 02:11:51+00:00
SFC are the same as FSF effectively, or even better. Their GPL lawsuit against Vizio for example is brilliant, they are suing as a third-party beneficiary of the GPL, rather than as a copyright holder. If they win then it means any recipient of GPLed binaries can sue for compliance.

https://sfconservancy.org/copyleft-compliance/vizio.html

They are also the only folks doing GPL compliance work for the Linux kernel and hardware vendors.
by benreesman | 2025-09-07 02:12:08+00:00
Ryzen AI 9 395+ with 64MB of LPDDR5 is 1500 new in a ton of factors and 2k with 128. If I have 1500 for a unified memory inference machine I'm probably not getting a Mac. It's not a bad choice per se, llama.cpp supports that harware extremely well, but a modern Ryzen APU at the same price is more of what I want for that use case, with the M1 Mac youre paying for a Retina display and a bunch of stuff unrelated to inference.
by to11mtm | 2025-09-07 02:12:18+00:00
My basic understanding is that a 'dual use' tool is moreso based on intent; using the same analogy as when this came up on HN over a decade ago [0], a good kitchen knife can be at least as dangerous as a lot of explicitly 'banned' knives but because it has a non-illegal use it doesn't fall into the same category as, say, a DDOS tool. And AFAIK there hasn't (yet) been a case where NMAP has gotten someone in Germany in trouble with the law for possessing or using within their local subnet.

[0] - https://news.ycombinator.com/item?id=3797151
by didibus | 2025-09-07 02:12:22+00:00
> I'm not sure why this would be any different.

The issue here is you need to make a trade. It's not like cutting out alcohol. Now you have to decide, what alternative painkiller will replace it.

There was an initial reason why Tylenol became the standard one, because others were assessed to be riskier in other ways.

I agree with you, people should weight all the known risks from all legitimate studies and data, and base policies around that, and this is no exception.

People are worried though that this won't be the case, and that bias is present from the start in this case, and we might end up making the wrong policy call.
by non_aligned | 2025-09-07 02:12:33+00:00
20+ years isn't exactly "recently" in internet time.

And while early 2000s might be pushing it, in the 1990s, it was most certainly normal for people to put their home phone numbers in Usenet signatures. The internet was initially just this small subculture thing for nerds, generally not on the radar of anyone not wishing you well. Your employer wasn't there. Your parents weren't there. Your stalker wasn't there. Your insurer and your bank and your local PD weren't there.

And I hate to say this, but the privacy dystopia we now live in is largely of our own doing. We had a bunch of really naive ideas about how information wants to be free. It made for a couple of wonderful years, but then allowed bad actors to abuse every single bit of it. And the bad actors weren't exactly external: the companies were founded and staffed by techies who now lament the status quo.
by stevenwoo | 2025-09-07 02:14:17+00:00
The one pilot they highlighted in the series completed his missions in European theater (to be fair he only flew a few when the Allied casualty rate was horrendous) then signed up to serve again and volunteered for B-29 training so he could fight in the Pacific but the war ended before he could fly missions against Japan. IIRC he then volunteered to help with the Nuremberg prosecutions.
by inkyoto | 2025-09-07 02:15:08+00:00
Today's sunscreens are complex cocktails of different molecules. The most advanced and efficient ones use both, inorganic and organic, chemicals, e.g.:

Zinc oxide – for the broadest UV-A and UV-B absorption. Titanium dioxide – for UV-A absorption. Diethylamino hydroxybenzoyl hexyl benzoate (DHHB) – for UV-A absorption. Octyl methoxycinnamate – for UV-B absorption. Octocrylene – for short-wave UV-A and UV-B absorption. Bemotrizinol – a broad-spectrum UV absorber, absorbing both UV-A and UV-B rays. Octyl triazone (ethylhexyl triazone) – for UV-B absorption.

The actual composition varies, but it is going to have a combination of multiple compounds due to them having different absorption peaks, e.g. bemotrizinol has two absorption peaks, 310 and 340 nm, and DHHB peaks out at 354 nm.. The compounds also have synergistic effects when blended with one another, so the sunscreen design is a science on its own.
by sneak | 2025-09-07 02:17:05+00:00
You have to take a lot at one time, or chronic overdoses, to damage your liver.

Taking the maximum daily recommended dose (4g per day, thereabouts, in 1g doses) every day for months on end is fine and won’t do any damage.

I’m sorry about your friend but his experience is unrelated to the fact that using the medication as recommended, even long term, is not harmful in the least.
by username223 | 2025-09-07 02:17:21+00:00
> blogs weren't a place to promote yourself and your side hustle. Blogs were personal diaries. We didn't have the same concept of OPSEC back in the early 2000's

OPSEC has nothing to do with it. People used pseudonyms by default in the 1990s, and blocked Doubleclick (a.k.a. Google) in their ~/.hosts files. Blogs were non-commercial places where we worked out ideas and offered useful information.
by TuxSH | 2025-09-07 02:17:26+00:00
> EDIT: ironically modules (as a concept) would (could?) solve the header problem, but they've not exactly been a success story so far.

Because they are little different from precompiled headers. Import std; may be nice, but in a large project you are likely to have your own defines.hpp file anyway (that is going to be precompiled for double-digits compile times reduction).

Ironically too, migrating every header in an executable project to modules might slow down build times, as dependency chains reduce the parallelism factor of the build.
by varenc | 2025-09-07 02:18:51+00:00
I ran 'neoprint.php' on myself at Facebook in 2007 and immediately got a stern email about it... It was some script that collected info for responding to law enforcement requests. But after chastising me, the email said "I was gratified that you ran it on yourself". (as opposed to snooping on someone else!)

It was just a summer internship and FB was like 'only' 80 engineers back then. But they still took it seriously.
by 01HNNWZ0MV43FF | 2025-09-07 02:19:05+00:00
Wikipedia claims Hiroshima was saved for atomic bombing, about a month ahead:

> On 3 July, the Joint Chiefs of Staff placed (Hiroshima) off limits to bombers, along with Kokura, Niigata and Kyoto

Nagasaki was not explicitly saved, but was just a difficult target to hit:

> Nagasaki had been spared from firebombing because its geography made it difficult to locate at night with AN/APQ-13 radar.

> Unlike the other target cities, Nagasaki had not been placed off limits to bombers by the Joint Chiefs of Staff's 3 July directive, and was bombed on a small scale five times.

Anyone with better sources could please fill out the Wikipedia article some more:

https://en.wikipedia.org/wiki/Atomic_bombings_of_Hiroshima_a...

https://en.wikipedia.org/wiki/Atomic_bombings_of_Hiroshima_a...
by bigyabai | 2025-09-07 02:19:05+00:00
You don't seem to know what Khronos even is, at this point. It is a nonprofit consortium, joining the group for the community effort is the only reason it exists.

By blaming Khronos you're really just reiterating blame on Intel and AMD with the tacit inclusion of Apple. I suppose you could blame Nvidia for not giving away their IP, but they were a staunch OpenCL supporter from the start.
by dmoy | 2025-09-07 02:19:36+00:00
Right exactly. The only way IP blocks work is if there's no vulnerable machines to take over anywhere. That is - it basically doesn't work for any motivated attacker.

You could hypothetically make it work, but it would mean an extremely different Internet and device landscape than exists today. (And even then I doubt it stops a nation-state level attacker, they can always use old fashioned espionage to get someone in meat space and get around any technical barrier)
by Kranar | 2025-09-07 02:20:10+00:00
Safety profiles don't exist and there are so many issues with them that it's unlikely they will ever get added to the language. For example, you mention how it's a method applied to a source file, but C++ doesn't have the concept of a source file, it only knows about translation units.

But then the problem becomes where exactly do you opt-in to this feature? If you do it in a header file then this can result in a function being compiled with the safety profile turned on in one translation unit and then that exact same function is compiled without that safety profile in another translation unit... which ironically results in one of the most dangerous possible outcomes in C++, the so-called ODR violation.

If you don't allow safety-profiles to be turned on in header files, then you've now excluded a significant amount of code in the form of templates, constexpr and inline functions.
by WaltPurvis | 2025-09-07 02:20:16+00:00
Yes, but that fact does nothing to make the statement in question more sensible, so I don't know why you bothered to point it out, or to emphasize the "HPC6 [is] in Italy which is definitely in Europe" aspect. (Although I don't think the statement in question was all that nonsensical to begin with — IMO, it was just inartfully phrased.)
by non_aligned | 2025-09-07 02:21:46+00:00
> most people are boring

Nah. Unless your benchmark is "interesting to every person on the planet", in which case, sure. But then, I'd say that following celebrity and politician gossip is far less productive than following the life of my family, friends, and relatives.

Almost every person is interesting to several dozen other people. Exceptions happen, but are relatively rare.

You're correct on the other count: writing takes effort. Not writing to make things interesting, just... writing in general. If you want to summarize your day, it's gonna cost you 30 minutes of brain work. If you want to post to your Instagram reel, Snapchat, or whatever, just point your phone at your surroundings and hold the record button down for 10 seconds or so.
by to11mtm | 2025-09-07 02:21:57+00:00
That would indeed be very nice, compared to the current standards out there for desktops...

Ironically, I -think- UWP tried to 'solve' this in some ways but OTOH adds new problems instead...

I also know Microsoft had a different idea when it came to .NET before core, where libraries could be run in 'Partial trust' but with 'Link Demands'... And I've never seen a shop actually do that right vs just YOLOing with 'full trust' and/or abuse of AllowPartiallyTrustedCallersAttribute...

Which I guess is a roundabout way of saying I feel like Microsoft has tried twice but completely lost the plot early on and failed to deliver a usable product (What even is the state of UWP questionmark, and .NET Code Access Security was given up in Core....)
by bigiain | 2025-09-07 02:22:11+00:00
In Australia, at least in the late 90s, you were allowed to record voice and video without consent or notification of all parties, but you were not permitted to play/show the recordings to anyone else.

This was well know amongst the sort of people who regularly got harassed by police (in my circle of friends, riders of sportsbikes). There was well known legal advice saying to record every interaction you had with police, and if it turned out badly in any way, as soon as you got home write down the transcript of the conversation as "contemporaneous notes" and email them to your gmail account to establish a timestamp. But the only time you ever even mentioned your recording would be to your lawyer, so that if the cop challenged or contradicted your notes in court, your lawyer could then offer the recording as evidence.

These days, dashcams are pretty ubiquitous, and demonstrate that whatever the legal technicalities are, video recording in public without consent is not only widespread, but bashcam footage is also something police regularly request from the public.
by nobody9999 | 2025-09-07 02:22:54+00:00
>More like technology evolves in spurts. Huge gains within a specific area for 2-3 decades and then only small incremental advancements for the next 2-3 decades.

I'd expect that the time scales between spurts, while getting shorter over the past 350 years or so, were generally much, much longer.

We first started using stone tools more than 2.5 million years ago. We didn't start effectively using fire for another 500-750k years.

It was another 1.75 million years before we began harvesting seasonal "crops" we identified in our nomadic travels, and another tens of thousands of years before we founded permanent agricultural settlements.

Doing so (and the food surpluses enabled by such) allowed for specialization and R&D into stuff that wasn't directly related to food production.

That really kicked off a technological spurt, which included writing -- a technology that was, perhaps, the biggest step forward, until Liebniz/Newton's Calculus.

Given the immaturity of our current understanding of physics (Standard Model/General Relativity), biology (DNA research) and the like, it seems we're likely to continue without another spurt for quite some time.

I, of course, could be wrong. But since history is often a good guide to the future, I don't think so.
by oceanhaiyang | 2025-09-07 02:23:00+00:00
> I started from zero knowledge and spent months collaborating with AI agents as a learning experience. Every pixel and every function went through me. The AI translated what I asked for into code, but every decision was human.

This is so absurdly cringe and absolutely not coding. It’s like saying I spent absolutely trying to get ChatGPT to write my college essay for me. At the end of the writing period, I wrote nothing but decided which ai goop I liked best.
by Kranar | 2025-09-07 02:23:27+00:00
There is a version of C++ that adds complete memory safety to the language by adding features to the language in a way that preserves complete backwards compatibility with existing C++ source code. That version of C++ is called Circle/Safe C++, it represents a monumental amount of effort that was written by a single individual, and it's a complete disgrace that the C++ committee has informally shut the door on that individual:

https://safecpp.org/draft.html
by zx8080 | 2025-09-07 02:23:45+00:00
> no monitor during the XP era would've been a CRT one haha

Well, not really, and it depended highly on the place of work/study and country/state. For example, my University replaced the CRT ones with LCDs only in 2005-06 (they've used XP in computer rooms for quite a long time, skipping Vista and 8).

I myself used the CRT monitor with winXP until the late 2004.
by mastazi | 2025-09-07 02:23:48+00:00
> it is known they would never be enough.

No that's not what it says. Brakes were not enough "in the current configuration" in other words they were not applied fully. The investigation will focus on why brakes were not applying full breaking force.

In railway jargon "brake configuration" refers to "how much are you braking" but you seem to have interpreted "braking configuration" as "the number and type of brakes that are currently installed in the vehicle"
by r-bryan | 2025-09-07 02:23:48+00:00
Check out this 156-page tome: https://arxiv.org/abs/2104.13478: "Geometric Deep Learning: Grids, Groups, Graphs, Geodesics, and Gauges"

The intro says that it "...serves a dual purpose: on one hand, it provides a common mathematical framework to study the most successful neural network architectures, such as CNNs, RNNs, GNNs, and Transformers. On the other hand, it gives a constructive procedure to incorporate prior physical knowledge into neural architectures and provide principled way to build future architectures yet to be invented."

Working all the way through that, besides relearning a lot of my undergrad EE math (some time in the previous century), I learned a whole new bunch of differential geometry that will help next time I open a General Relativity book for fun.
by benreesman | 2025-09-07 02:24:02+00:00
I dramatically prefer modern C++ to either of Python or Rust in domains where it's a toss up. It's really nice these days.

Like any language that lasts (including Python and Rust) you subset it over time: you end up with linters and sanitizers and static analyzers and LSP servers, you have a build. But setting up a build is a one-time cost and maintaining a build is a fact of life, even JavaScript is often/usually the output of a build.

And with the build done right? Maybe you dont want C++ if youre both moving fast and doing safety or security critical stuff (as in, browser, sshd, avionics critical) but you shouldnt be moving fast on avoinics software to begin with.

And for stuff outside of that "even one buffer overflow is too many" Venn?

C++ doesn't segfault more than either of those after its cleared clang-tidy and ASAN. Python linking shoddy native stuff crashes way more.
by hakfoo | 2025-09-07 02:27:10+00:00
We sort of had two phases of development:

- Running up single-core performance through increasingly sophisticated core design and clock speed (which is now at the 5% per year point mentioned)

- Going wider by throwing more SMT, more cores, and larger caches at the problem.

Assuming here that x86 was the last major architecture that was going for high single-thread performance at all costs, the first phase lasted us a good 30 years-- from the 4004 to the flameout of Netburst.

We could consider the second phase starting when they started delivering the P4 with Hyperthreading, and its true-dual-core predecessors shortly thereafter, so we're now about 20 years into that era.

Do we have another 10 left in it?
by elcritch | 2025-09-07 02:28:35+00:00
Ugh yeah, s/aspirin/Tylenol/. My brain always wants to call Tylenol and acetaminophen as generic "aspirins" and it's a hard habit to break. Joys of having ADHD I didn't even notice the switch.

Nevertheless, comparing the observed correlations of Tylenol with aspirin and ibuprofen would be the first thing to check. Seems unlikely to me that the OP's suggestion could be controlled for that way. I'll be curious if Kennedy's report checks those basic things.
by wpm | 2025-09-07 02:29:12+00:00
No OS exists because everyone knows it couldn't be installed in the current status quo. Why would anyone do the work of porting $OS to old iPads if they knew it was fruitless? How could they even do it?

Apple needs to step TF out of the way. They sold this hardware, they got their money. Move aside and let people use what they bought.
by diebeforei485 | 2025-09-07 02:29:54+00:00
> Why not shift liability?

Because being a passenger in a driverless vehicle is a much better user experience than being a driver. You can be on a zoom call, sleep, watch a movie or TV show or scroll TikTok, get some work done on your computer, wear a VR headset and be in a different world, etc etc. Tesla would make a lot more money, and could charge a lot more for FSD.

They aren't doing that yet because they aren't ready yet. It's why they still have humans in the robotaxi service.

There are no doubts in my mind that they will do it probably next year. The latest version of FSD on the new cars is very, very impressive.
Show HN: Lightweight tool for managing Linux virtual machines
by ccheshirecat | 2025-09-07 02:30:16+00:00
hey guys. the other day i was migrating hosting providers and i just needed something not too heavy and convenient to spin up my backups for awhile and realised there is almost nothing out there. kimchi hasn't been updated for years and cockpit is heavy. so here's something i came up with in a couple hours because of a sudden urge, nothing fancy just basic creation with cloud init, lifecycle management and image/storage, but it's modern-ish and it compiles to a 8.4mb binary inclusive of the embedded web UI, CLI and API, and only dep is libvirt.
by bigiain | 2025-09-07 02:30:25+00:00
Especially since that email address presumably is used for the forgot password authentication anyway.

But it is at least the equivalent of a code smell. perhaps a "UX smell"?

A couple of obvious ways it can go bad: An attacker could potentially have access your email (perhaps from a data breach elsewhere or a password stuffing attach) and use the temp password before you do. If the temp password is the one entered by the user during signup, a naive user could sign up using their commonly-reused-password which then sits in cleartext foreven in their email archive.
by ChrisArchitect | 2025-09-07 02:30:53+00:00
Early generations of 'social media', or in the context of this post I guess 'microblogging' were super personal, basic, and of the moment (without followup for 24hrs when another post happened). I'm talking like early Twitter posts would be what people were having for lunch. Or that they just woke up and were enjoying a coffee. And the classic "poopin'". It was like that for at least a few years before the posts got longer and more directed to conversational context or 'trying to say something more'.
by InTheArena | 2025-09-07 02:33:21+00:00
This is false. There has never been any historical record at that time that shows that “warning the soviets” was any part of it. In fact, the USA disclosed the bomb to stalin beforehand hand. Anyone who postulated that was not in the chain of command. The Americans still very much believed at this point that the best post wore outcome was an ongoing alliance between the United States and the USSR. It was only after the scale of Stalin‘s ambitions in Eastern Europe became apparent and the aftermath of the Nuremberg trials that it was becoming obvious that there would be an ongoing confrontation.

I strongly suggest the recent book on operation downfall, as well as the recent popular works on the last months of the war from the Japanese point of view.