MurphyA/hacker-news huggingface dataset:
by sfink | 2025-09-17 01:47:17+00:00
Strict honesty here has always been a losing proposition. The "requirements" section of a job posting has almost never been accurate. It's more of an image they're painting. An honest applicant is one who reads the whole description to understand as best they can what the company is looking for, and sort of holistically matches their own expertise against that picture.

If the job posting lists requirements A-F and you have A, B, D, E, and F, then you'd do both yourself and the company a disservice by disqualifying yourself. Put it in your cover letter if you can't handle the discrepancy.

I'm not going to address either the morality or advisability of being "dishonest" by this standard. I've just seen too many people sell themselves short, when in fact they are exactly what the company is looking for, it's just that the recruiter wasn't able to spell that out in the job description. And it's not necessarily because they were stupid either; if they only put the true minimum necessary criteria into a job post, then (1) they'll get flooded with underqualified candidates who don't even come close to what they need, and (2) they may very well miss out on good candidates because the job looks lame.

Source: I've been on both ends. As a candidate, I mentioned during the interview that I actually had no experience in the required technology X but I had related experience. The interviewer just laughed; it was obvious to both of us that it didn't matter. As someone offering a job (not the hiring manager but sort of), I talked to a couple of people who were hired into other roles in the company and asked why they didn't apply for our position, they seemed perfect for it (to me). Several of them pointed to some specific line item under the requirements that disqualified them. Sometimes it was an item that we'd removed later because we weren't getting enough people in, even though strictly speaking it was part of the job. We would sometimes push the recruiter to add "experience with X, or willing to learn X", but they would push back and honestly I'm not sure I know better than them. They were the ones who had to be the front line filtering through the noise resumes, after all.
by k310 | 2025-09-17 01:47:29+00:00
The party of laissez-faire capitalism is now into "let's interfere", with government ownership, presence within companies and of course, dropping the hammer on "unpatriotic" speech, a kind of Amended First Amendment.

10 Small Steps: Executing the Fascist Playbook [0]

The Fascists’ Playbook [1]

[0] https://www.huffpost.com/entry/10-small-steps-executing-the-...

[1] https://www.counterpunch.org/2023/05/08/the-fascists-playboo...
by shagie | 2025-09-17 01:47:38+00:00
> - basically all jobs you see posted on LinkedIn or on big sites are either fake or might as well be because they are being run through HR

When I was looking (a while back), my experience was that the big sites are a dozen or so of consultancies and head hunters reposting all the jobs as "an opportunity for a client."

FooCorp (a real company) would post a position. Then headhunters and contract to perm style consultancies would repost it. This way, you'd get 1 + 12 job postings for the same position (assuming that the company even posted it there in the first place).

Next, applying to a position (other than the real one) on that set would get you ghosted (they're collecting resumes to send on and will pick 100 that they feel have the best chance of getting hired before contacting back). Sometimes, they'd call you back with a different position that "you'd be perfect for". Often, the resume that they send on to the actual position is significantly doctored from the original (to the point where its "this person isn't the one on the resume"). In today's world, the "this is an AI fake" is sometimes the transformation that the head hunter does to your resume.

So its not so much run through the company's HR, but run through the head hunter's filter trying to find the "best" ones to send on and for that filter, even though you applied it might not get to the hiring company to consider.

(Anecdote: when I was unemployed looking for a job a number of years ago, I tried some headhunters. One interview that I got they were asking me really odd questions about technologies that I knew nothing about. When it was pointed out that "I should know about these things, its on your resume" they showed me the one that they got that had my name on it... and it didn't match the copy that I brought with the exception of when I got my degree and what university it was from. They thanked me for my honesty and we both agreed that I was not a good technical fit for the position.)
by lrvick | 2025-09-17 01:48:04+00:00
Keyless signing is not a real thing. Trust online is always anchored to keys, even if short lived. Keyless signing just means letting a centralized oracle blind sign for you with trust anchored in a CA key of some kind in most cases, that an unknown number of people can tamper with.

Also GnuPG is not PGP.

My team and I dual PGP sign all packages in stagex with smartcards after confirmed determinstic builds. It works great, and avoids trust in any single party or computer. We even do this for all our python packages as pip will not allow it.

It is a single command with a rust binary to setup a PGP smartcard out of the package, with a backup. (keyfork) All devs should be PGP signing releases, reviews, and commits so we have a paper trail blackhats cannot inject themselves into.

There are no excuses other than misconceptions and misinformation on this topic being normalized.
by vunderba | 2025-09-17 01:48:46+00:00
This might not be applicable to your situation since it sounds like more of a spam issue, but several of my colleagues who help with the hiring at their companies now require an "on-site" interview because of rampant cheating and misrepresentation by potential applicants.

The amusing thing is that the positions are still 100% remote - they just conduct the interviews at shared workspaces.
by BLKNSLVR | 2025-09-17 01:48:48+00:00
Article title: "Tired of Screening Spam Calls? An AI Digital Receptionist Could Do It for You"

I find it interesting that they're treating the symptoms and not the cause. Profit on both sides - Spam calls pay to use our network, and people who don't want spam calls can pay for this AI Digital Receptionist to screen these spam calls (I'm speculating as to whether this is a paid service or not, the article doesn't specify).

Fix the security of your network. Seeing comments on another thread about a scammer posing as Google makes it appear that the phone network is used more by scammers than legitimate users. The problem is that security costs money and deflates "daily average users" numbers.

The aeroplane that is "phone networks" already has both engines on fire. The only question is how long it takes before it inevitably collides with the ground.
by runarberg | 2025-09-17 01:49:18+00:00
I want to be clear that my first sentence was speaking generally and not accusing my parent directly of being in bad faith. And in keeping with the spirit of HN I responded to my parent assuming good faith.

Otherwise you are right, I have accused others of being in bad faith on this topic, however when I do so, I tend to do it after many more interactions than what I have had with my parent above.
by lisbbb | 2025-09-17 01:49:21+00:00
After working with it for over 20 years, I think it's time has come and gone and that it's not the most efficient way to build enterprise applications anymore. You're lucky that Clojure program still works on the newer JVM because many of the applications I worked on, which were very large, could not be migrated to newer versions of Java. In fact, that experience repeated several times for me. I barely ever worked on anything that used the latest versions of the JVM, every place I worked was always on things like "Java 8" and crap like that. It was infuriating, but the situations were not unique at all.
by autoexec | 2025-09-17 01:49:21+00:00
> Finally if I'm not capable of auditing the dependencies it's unlikely I can replace them with my own code. That's like telling a vibe coder the solution to their brittle creations is to not use AI and write the code themselves.

In both cases, actually doing the work and writing a function instead of adding a dependency or asking an AI to write it for you will probably make you a better coder and one who is better able to audit code you want to blindly trust in the future.
by vFunct | 2025-09-17 01:50:08+00:00
Indeed. My gift to Democrats that continue to support Israel is to make sure Republicans win and destroy the country.

Genocide is cause for war and destruction of countries. And fortunately, Republicans made it convenient to destroy American society.

You see children being burnt alive by racist zealots with your tax dollars, and you CONTINUE to fund it? Yah that's a good way to end your society. The USA is no exception.
by actinium226 | 2025-09-17 01:50:20+00:00
As a counter example, consider the jerry can from WWII. It was easy to handle a single unit to refill a vehicle, and it was also easy to stack millions of them for shipping.

Another example is the internet itself. You can have a local LAN of a few computers or a global network of billions. So I'd say that to some degree innovation is measured by how well something can scale both up and down, but of course that's not always the case.
by Dylan16807 | 2025-09-17 01:50:58+00:00
He did have permission to "enter". He was authorized to use the server.

His intent of releasing the data was bad (assuming he started with that intent!) but he wasn't committing any fraud when collecting it. He didn't bypass any authentication or damage the server. CFAA is the wrong law to use.

If a restaurant puts a bunch of proprietary documents in a dusty corner of the public lobby, you shouldn't browse through them but you're not breaking and entering if you do so. No matter what your intent is.
by scosman | 2025-09-17 01:52:11+00:00
Just report them for copyright infringement. Apple will take the blatant cases down. The copy-cats that don't infringe are just a side effect of success, so... congrats?

Regarding Reddit, it's a great place to find users but also copy-cats. Stick to posting "I built a thing that solves a problem" and avoid the bragging "I made $N in N days" indie-hacker style. The latter doesn't help the app anyways.

Moat: there isn't one for a utility someone can build in a few days. It can still be a good business - you seem to have marketing savvy which is a big part of it.

One suggestion, on your homepage - the "See USB Connection Information in Action" the screenshots are much too small. Nice looking app!
by helsinkiandrew | 2025-09-17 01:53:25+00:00
Maybe with the HN readership, but in general the public don’t want to drive in driverless vehicles and don’t want them on the streets. It’s going to be a long uncertain road for them to be accepted.

https://newsroom.aaa.com/2025/02/aaa-fear-in-self-driving-ve...
by yieldcrv | 2025-09-17 01:53:29+00:00
I'm male and read about this exposure vector back in 2012 when it was only rolled out to 12 year old girls, with a further guideline that nobody over 26 should take it.

this was pre- antivaxxer anxiety, and just run of the mill 'is the government condoning sex' anxiety, and it was controversial for that reason alone

the issue was that if you've been exposed already then the vaccine doesn't work. they had a test for women that can prove they've been exposed or not, and most adults have. they don't have a test for men that can prove they've been exposed or not, and most adults have. At the time, they had also only considered males to be carriers, with no cancers themselves.

so for the US government to recommend a limited stock and get insurers on board, it was all based on probabilities of exposure and utility.

I was younger at the time, naturally, I paid $600 out of pocket to get it across 3 doses because I figured it was worse than that, or I could get some 'male ally' brownie points from women. I wasn't wealthy then but figured this experience couldn't be taken from me even if I went bankrupt.

Since then, they've further linked it to throat cancers in males, because of our mouth's contact with genitals, and insurers are told to cover it across all genders and up to mid 40s. that's not really much of a difference now though, since the checkpoint is basically the same group of people, 13 years later.

They're still assuming older people are not worth bothering with, due to likely exposure.

There is an amusing side of this if you are male and not vaccinated yet, since nobody can tell if you've been exposed still: keep your sexual relationships with younger women. lol. in case you needed an excuse - higher probability they're vaccinated.
by lapcat | 2025-09-17 01:54:09+00:00
> To clarify, my app is not open source. I only mentioned the open-source clones that have also appeared.

In what sense are open source Github projects "clones" of a closed source App Store app? Do you have links to these projects?

And do you have links to the Mac App Store apps that stole your origin story? I'm not finding any in Mac App Store search.

In your submission, what exactly did you mean by "organic press"? Press would imply news media coverage, but I'm not finding any of that in Google search.
by hedora | 2025-09-17 01:54:13+00:00
Holland’s dykes are mostly built on impermeable clay.

As I understand it, that’s not possible in Florida, or at least in places like Miami, where the soil is almost entirely sand.

Holland has been creating progressively better soil surveys since the 1800’s, partially to allow them to place dykes intelligently.

https://www.sciencedirect.com/science/article/abs/pii/S00167...
by okanat | 2025-09-17 01:54:47+00:00
Nice thing about Rust is not that you cannot write such code, it is you know exactly where you used peaky memory or re-interpreted something as a unsigned integer or replaced your program stack with something else. All of such cases require unsafe blocks in Rust. It is a screaming indicator "here be dragons". It is the do not press this red button unless you intend to.

In C and C++ no such thing exists. It is walking in a minefield. It is worse with C++ because they piled so much stuff, nobody knows on the top of their head how a variable is initialized. The initialization rules are insane: https://accu.org/journals/overload/25/139/brand_2379/

So if you are doing peaky memory stuff with complex partially self-initializing code in C++, there are so many ways of blowing yourself and your entire team up without knowing which bit of code you committed years ago caused it.
by lisbbb | 2025-09-17 01:56:40+00:00
With over 20 years working with Java, I'd much prefer working on Python for lots of reasons, but a big one is that the kinds of projects that involve Java are always involve the same stupid politics and organizational struggles. I've noticed that projects involving Python are way more enjoyable with less friction, likely due to the organizations themselves being more open-minded and maybe younger. I don't know. At some point, every Java project at every Fortune 500 company I worked with was the same damn hellish mess and I had to get away from that.
by fossman | 2025-09-17 01:57:09+00:00
You're comparing a Linux OS (postmarketOS) to a device (FLX1). I think you meant to compare postmarketOS to FuriOS : )

FuriOS (and its base Droidian) are at a better stage of development for devices made to run Android using the old Android Linux kernel, whereas postmarketOS is better for devices made specifically for Linux, like the Liberty Phone, Pinephone, etc. Droidian will not even work on them.
by ganelonhb | 2025-09-17 01:58:53+00:00
The “realism” of graphics has nothing to do with performance. It has to do with shaders which, contrary to your point can be expected in a greater degree in a game that uses cartoonish graphics BUT I don’t even think that the shaders are the culprit. It really just is that Unreal Engine 5 requires insanely high specs because of all of the myriad different cutting edge technologies it employs, all of which BL4 seems to take advantage of including Lumen, Nanite, and level streaming (idk the name for it)
by dotancohen | 2025-09-17 01:59:23+00:00
> international peacekeeping operation

Just like those international peace keepers abetted Hezbollah, providing them intel and cover, even illuminating our assets via spotlights for Hezbollah?

Or just like those international peacekeepers who filmed Hezbollah breach our border, kill soldiers, abduct others? And then when this was discovered, refused to share the unedited video with Israel?

We don't trust the UN. So which international peace keepers do you propose?
by cj | 2025-09-17 01:59:33+00:00
If the community upvotes AI-genraated content to the front page, I don't see why it should automatically be penalized. (I respect your own opinion, which is why I suggest flagging the submission).

But clearly there's a reason it was upvoted if it's on the front page. Why ignore that fact... clearly the community thinks these articles have value if they're upvoted.

(Also, "it's AI, bad article" is just a weak complaint that can't be proven right or wrong - if you dislike it, share why you dislike it, e.g. lacking specific information, shallow depth, something other than "don't like it because AI")
by blahedo | 2025-09-17 02:01:33+00:00
This... is the opposite of my experience. Friends with iPhones seem to upgrade them unreasonably often, but my (Samsung) Android phones last a loooong time. My first Samsung I retired somewhat involuntarily after 3 years so that I could get a model that would also work overseas, but the phone itself was still fine. My second Samsung (the one I got in 2016 for the overseas trip) I just retired last fall, 2024, and even then only because a job required MS Authenticator and it wouldn't let me download it to the phone. Battery life was still fine, everything I used worked fine.

I fully expect to be using my current Android phone into the 2030s.
by awcode | 2025-09-17 02:02:05+00:00
Hi, founder of Users Loop here.

Users Loop helps SaaS teams communicate with customers, capture feedback, and deliver world-class support - while replacing multiple expensive tools with one affordable platform.

Collect Feedback with ease - Beautiful, customizable widgets that capture feedback seamlessly. Automatically detect user context, browser info, and page details.

Public Product Roadmaps- Beautiful, shareable roadmaps that keep customers informed. Show what you're building, why, and when it's coming.

Helpdesk & Knowledge Base - Create comprehensive help docs and FAQs. Reduce support tickets with self-service solutions.

Live Support Chat - Real-time customer support with live chat. Connect instantly and resolve issues faster.

AI-Powered Responses - Automatically generate intelligent responses to common questions. AI learns from your knowledge base.
by yieldcrv | 2025-09-17 02:02:27+00:00
Here is how they reacted, by preparing for isolation

https://www.cnn.com/2025/09/15/middleeast/netanyahu-israel-i...

https://www.dw.com/en/middle-east-israel-to-get-ready-for-is...

https://www.timesofisrael.com/netanyahu-admits-israel-is-eco...

pick whichever source you respect the most
by nodesocket | 2025-09-17 02:02:44+00:00
While Python being more widely used than JS, it's interesting the majority of attacks and breaches come from NPM. The consensus seems to be that Python offering a standard library greatly reduces the attack surface over JS. I tend to agree with this, a decently large Flask python app I am working on has 15 entries in requirements.txt (many of which being Flask plugins).
by subscribed | 2025-09-17 02:02:50+00:00
Maybe you use low end phones or crappy vendors?

I'm migrating from my 5 year old flagship (lol) only because vendor decided to stop supporting it. Battery still good for a day, great screen, good enough camera, fantastic sound, ssd card slot...

My next has at least 7 years of mainline support (with all AOSP releases) plus at least couple of years damage control updates.

It's a matter of the choose I think.
by gus_massa | 2025-09-17 02:04:52+00:00
Probably not. It's hard to guess, but they probably get a Poison Distribution https://en.wikipedia.org/wiki/Poisson_distribution in the detector, they may read only a few of the lower bits of the data, and then mix them in the entropy pool, with other sources. So the end result is quite unpredictable.

It's somehow similar to a random generator where you have 5 dices, roll them and then add to the entropy pool only if the total was even or odd. Changing the power is like forcing the system to use only 4 dices. It changes the probabilities a little, but not in a very controlable way, and with a good mixing in the entropy pool it's almost irrelevant.
by Rover222 | 2025-09-17 02:04:56+00:00
Because some people read beyond headlines and realize that Tesla will most likely dominate with Robotaxi. Their traditional consumer vehicle revenue could pale in comparison. And Optimus could be another order of magnitude larger.

That’s the optimistic bull case. It’s not impossible.

Tesla will be able to scale Robotaxi much quicker than Waymo can scale.
by ezekiel68 | 2025-09-17 02:04:59+00:00
I guess the value of this is to encapsulate away various other command-line tools which could perform the same in a script. Lowers the barrier to entry. To my mind, though, this tries hard to tackle a solved problem.

On the other hand -- if it encourages dev teams to stop the silly habit of returning successful health checks from their microservices even before the back-end dependencies (DBs, other web services, etc) are ready, then it might have some value.
by shadowgovt | 2025-09-17 02:05:43+00:00
Ignoring the blatant falsehood about voter demographics (non-citizens don't vote), what about anyone in this administration engenders an expectation of competence? This is this President's second term. We've already seen him botch the job once; I don't see any reason to expect better this time. It's not like he demonstrates a capacity to learn, or is even capable of admitting past error.

Best case is this is more of the same, and it wasn't good last time.
by sjy | 2025-09-17 02:05:58+00:00
I'd complain to Google about this, maybe through a lawyer if needed to get them to take it seriously. They won't accept full responsibility, and in general people need to be aware of the risk of spoofed email, but Google should be able to stop fake emails from google.com from appearing in a Gmail inbox. You'd think they would also have the ability to recover an email deleted immediately after an account takeover, or at least work out how the spoofed email was delivered from other internal logs. Google should investigate whether their negligence contributed to the success of this attack.
by ripdog | 2025-09-17 02:06:09+00:00
AFAIK it's not really possible to implement Everything in Linux because Everything relies on reading the entire file list at once from the NTFS metadata, allowing it to index at incredible speed. On Linux, there are dozens of filesystems which likely make it impossible to achieve the same.

That said, I do wonder why Linux gone search is always so slow even on indexed files.