MurphyA/hacker-news huggingface dataset:
by monkeywithdarts | 2025-09-24 21:23:51+00:00
I really like the direction this thread is going. I've wondered if Left and Right in the US only see half the problem: one side fears corporate/wealthy/majoritarian power, the other fears government power. If you allow two assumptions:

(1) Power and money generally lead to more power and money

(2) Government and corporate/wealthy power are a revolving door (regulatory capture, pay-to-play politics, etc).

... then someone who is skeptical of abuses of power should be wary of both government and corporate/wealthy power. But that seems like an untenable position — you can't check the one without muscling up the other.

Is there a way to maintain a small, decentralized, local-oriented government that can still check the power of corporate/wealthy/majoritarian impulses and provide a social safety net?
by aerostable_slug | 2025-09-24 21:24:38+00:00
That's easily falsifiable. Trump's DOJ and Treasury have multiple press releases regarding prosecutions and sanctions against Vory v zakone, thieves-in-law. Just search on either phrase and you'll see them.

Additionally, calling Venezuelan and Mexican cartels like CJNG small or remnant is extremely inaccurate, to be charitable. They are among the largest, best equipped, and most dangerous organized criminals in the world. You don't have be pro-Trump to acknowledge this fact.
by spicypixel | 2025-09-24 21:24:41+00:00
Are we at the point where I can store arbitrary scripts in a sql database and execute them with arguments, safely in a python sandbox from a host language that may or may not be python, and return the value(s) to the caller?

I'd love to implement customer supplied transformation scripts for exports of data but I need this python to be fully sandboxed and only operate on the data I give it.
by mmmore | 2025-09-24 21:24:42+00:00
I think by most objective measures the size and power of large organizations has increased since WWII. For example, the size and scope of Western governments, consolidation in many industries, the portion of the stock market that is representated by the n-biggest companies, increased income/wealth inequality. If you debating the "large organizations have grown in power relative to small ones" part of the thesis I would be interested in what exactly you think would capture that.
by backflippinbozo | 2025-09-24 21:25:19+00:00
Yeah, probably pretty simple compared to the methods we've publicly discussed for months before this publication.

Here's the last time we showed our demo on HN: https://news.ycombinator.com/item?id=45132898

We'll actually be presenting on this tomorrow at 9am PST https://calendar.app.google/3soCpuHupRr96UaF8

Besides ReAct, we use AG2's 2-agent pattern with Code Writer and Code Executor in the DockerCommandLineCodeExecutor

Also, using hardware monitors and LLM-as-a-Judge to assess task completion.

It's how we've built nearly 1K Docker images for arXiv papers over the last couple months: https://hub.docker.com/u/remyxai

And how we'll support computational reproducibility by linking Docker images to the arXiv paper publications: https://github.com/arXiv/arxiv-browse/pull/908
by lucb1e | 2025-09-24 21:25:20+00:00
I would be curious what it's like in the UK. It would probably do well as an HN submission if you're up for writing a blog post about it. All I know is that they passed some legislation that requires people to authenticate for anything that could possibly show nudity or something, including Wikipedia, and that VPN apps were going wild. I don't know what it's actually like in daily life, how one does authenticate to Wikipedia (or if they bought themselves time for now by iirc suing the govt?), if there are privacy-friendly age verification options and if those options are commonly implemented by the websites that need it, etc.
by pjdesno | 2025-09-24 21:25:27+00:00
Note that you can kind of infer that S3 is still using hard drives for their basic service by looking at pricing and calculating the IOPS rate that doubles the cost per GB per month.

S3 GET and PUT requests are sufficiently expensive that AWS can afford to let disk space sit idle to satisfy high-performance tenants, but not a lot more expensive than that.
by lifeisstillgood | 2025-09-24 21:25:45+00:00
He should look up Roald Coase - mid 20C who tried o answer the question of why have firms at all - big or small. The “market” ought to be able to supply services (secretary, welding etc) - but his “Theory of the firm” suggests that there are complex processes inside a firm that are pretty easy to employ someone and teach them, and pretty hard to write a contract for.

So there is a natural size of a firm that is a tug of war between savings of contracting out and the cost of contracting to the market

My still to be published magnum opus claims this is upended by software - that processes can be written and followed in software reducing the cost of hiring and changing the dynamics in favour of large companies.

But software literacy in all employees will enable smaller companies to outperform larger ones - we hope
by asdff | 2025-09-24 21:26:04+00:00
Especially when I'm guessing a lot of these "urban tech worker" commutes are mostly on surface streets or congested highways barely moving any faster. In my experience cycling to work I am actually faster on the bike than when I take the car. This is mostly due to filtering to the front of the intersection effectively eliminating any and all effects of rush hour traffic. Another huge factor is I can also park the bike directly in front of the door to the building, no having to walk from a designated parking or drop off zone.
by SAI_Peregrinus | 2025-09-24 21:26:14+00:00
There are essentially 4 layers of naming:

First you've got names that describe the structure in some detail, like the International Chemical Identifier (InChI) & SMILES. For paracetamol, the InChI is `InChI=1S/C8H9NO2/c1-6(10)9-7-2-4-8(11)5-3-7/h2-5,11H,1H3,(H,9,10)`.

One level up is the IUPAC name, a systematic name for a compound which is less descriptive than the InChI but still generally allows determining the structure of that compound. For paracetamol, that's N-(4-hydroxyphenyl)acetamide.

Next up you've got generic names for drugs. Different countries have different systems for naming generics, but they're usually designed to give some hint as to the sort of drug it is. E.g. drugs with generic names ending in "-vir" are antivirals. Most names are standardized in the International Nonproprietary Name system¹ but some drugs (particularly older ones) have different generic names in different countries.

Last up you've got the brand names. These will often vary quite a lot & tell you nothing about the drug.

The INN wikipedia article¹ actually uses paracetamol/acetaminophen as the example for comparing various national naming standards.

¹ https://en.wikipedia.org/wiki/International_nonproprietary_n...
by iamnothere | 2025-09-24 21:26:51+00:00
You are welcome to fork Tor and create a version that uses this approach, but good luck getting people to use it.

Conversely, even if the official project implemented an onion blacklist, a fork would quickly appear to remove it. And node operators would likely prefer that one.

Anyone with any sense understands that introducing a node blacklist creates the capability to expand the use of that blacklist in the interest of political and/or military censorship. The Tor project, Tor devs, and node operators are adamantly opposed to any such censorship capabilities. Therefore it will not happen, period.
by ryanjshaw | 2025-09-24 21:27:11+00:00
Not sure what point you’re making, are you saying to never update your system?

Not updating your system is not a magic solution either. I ran Linux Mint for 9mo and twice during that time I ended up in a bizarre situation:

1. the menu bar, or whatever it’s called (taskbar/dock equivalent) had disappeared on boot and I spent about 2 hours trying to get it back

2. the system simply wouldn’t boot into Cinnamon anymore; I ended up reinstalling

Bought a MBP and while it has some annoying quirks I don’t have any crazy ruined-my-day issues anymore.
by lucb1e | 2025-09-24 21:27:28+00:00
Add Belgium and Germany to the list.

Notably not the Netherlands. They've got the ID card chip (as required internationally iirc) but I emailed them once to get the public key so I can verify signatures (this was like 2016, I was still in school) and they said it was for governmental use only. It's not meant to be used by commercial entities

Why the EU decides to go with the bad example rather than the good example, I have no idea. Both ways achieve the stated goal of age verification and even the possible goal of universal ID tracking, without disallowing you to do whatever you want with your phone's privacy settings
by nicce | 2025-09-24 21:27:49+00:00
> Today when you generate a PDF from you own content (from Apple Notes app) you are asked about opening links you click on.

Or they don't have any usability studies. A hard regression in efficiency in many places.

E.g. Safari in iOS 26 forces you to do 50% more button presses. E.g. if you want to close a tab, you need to press one button more these days. Also one button press more to see the current tabs. These are likely the most used scenarios when you use the browser and they add one button press more?
by okanat | 2025-09-24 21:28:27+00:00
All banks are required to have "safe" 2FA in the EU by EU regulation. SMS is banned.

Most banks in Germany, Austria and Portugal default to Play Store or App Store apps with OS integrity checks. It seems like the Nordic countries have it a bit better with the ID reader apps. There are sometimes alternatives and some of them require paid subscription.

The apps they require are proprietary. They are not generic TOTP generators. Some of them require biometric approval. Some just logging in and approving a notification. I have seen some generate a form of non-standard TOTP. Otherwise I wouldn't complain about being locked into Google or Apple ecosystems. They are Play Store or App Store apps that require attestation from the libraries / systems provided Google or Apple like SafetyNet or Play Integrity. Some require strong hardware attestation. If the OS is modified, those checks do not pass. You cannot use any FOSS system without crazy hacks. If the phone is stolen, you have to go through manual reonboarding. It sucks when you're out of the country.
by psunavy03 | 2025-09-24 21:29:10+00:00
One could make an argument that the state does not hold a monopoly on violence. It holds a monopoly on the legitimization of violence. You're allowed to use deadly force to protect yourself from death or serious bodily harm in the majority of jurisdictions, provided it is not disproportionate. What matters is that the state declines to prosecute this, but does prosecute the person who hypothetically shoots someone on Fifth Avenue for no reason.
by Karrot_Kream | 2025-09-24 21:29:14+00:00
I think the key difference is that online communities are "cheap"; they're easy to create and easy to destroy. Offline communities are difficult to form and as such more "sticky". A great example is ideological differences. Lefty political groups (no doubt Righty ones have this too but I'm not as familiar with them) constantly reorganize based on perceived ideological bounds. Leftist groups splinter from liberal groups, labor-forward leftist groups split from identity politic leftist groups, and on and on.

A PTA doesn't do that. The folks in the PTA all have the same shared interest in the school their kids attend. They can't just splinter off into another PTA over a perceived difference. This forces the folks on the PTA to work together and makes the organization sticky in a way an online group might not be.

If the activation energy to form and join a community needed it's also really easy to just churn from the community. Moreover when splitting is this easy it prompts the creation of hyper-specific communities which lead to things like radicalization and dehumanization of the other (look at the acrimony between leftist identity-politic progressives and center-left liberals on the internet right now for example.)
by MrPowers | 2025-09-24 21:29:16+00:00
Rust is a good language for performant computing in general, but especially for data projects because there are so many great OSS data libraries like DataFusion and Arrow.

SedonaDB currently supports SQL, Python, R, and Rust APIs. We can support APIs for other languages in the future. That's another nice part about Rust. There are lots of libraries to expose other language bindings to Rust projects.
by nostrademons | 2025-09-24 21:29:27+00:00
I think his point is that it's not about nation-state intelligence operations, and that the capabilities claimed here are garden-variety cybercriminal operations. You or I could set up something very similar, if we were willing to participate in a dodgy business.

And by some basic napkin math and a few Google searches, he appears to be right. Prepaid sim cards are about $5/each [1]. A 16-port SimBerry server is $499 [2]; their full-fledged servers are "contact us" for pricing, but support up to 18,000 SIM cards [3]. Assuming their enterprise solutions are cheaper on a per-SIM basis than retail, that's about $35/SIM in hardware costs. For $100K in startup capital, you can run a 3000-SIM farm. And then, like this article suggests, once you get started you reinvest the profits: if you assume each SIM card gives you 1000 txts, then if you charge 2c/txt your $5 investment becomes $20 and you can expand your operations accordingly.

I wonder sometimes if, when it comes to cybercrime, "[Russia/North Korea/China/Iran] did it!" is actually code for "The FBI has no idea who did it, but if we said that it would encourage all sorts of script kiddies to do this for profit, so we might as well blame it on our nation-state level adversaries." Many of the hacks in question (eg. ransomware) are not out of reach of a lone malcontent in their 20s with some tech skills.

[1] https://www.google.com/search?q=prepaid+sim+card

[2] https://www.simberry.com/offers

[3] https://www.simberry.com/equipment/sim-server
by labrador | 2025-09-24 21:29:29+00:00
Good find. That's really interesting. I would guess the titles are related.

I want to also mention that with "Bachlorette" Björk seems to anticipate Large Language Models and wrote a cautionary tale about them:

“One day I found a big book buried deep in the ground. I opened it, but all the pages were blank. Then, to my surprise, it started writing itself: 'One day, I found a big book buried deep in the ground…’”

björk : bachelorette https://www.youtube.com/watch?v=JNJv-Ebi67I
by WarOnPrivacy | 2025-09-24 21:29:50+00:00
disclaimer: zero instagram experience

From <1yo results on setting up an anonymous instagram account: Different email address, different phone number and I'll add setting up from a different device and IP.

Lots of email options, like disroot.org. If your phone takes a physical sim, you can buy a new prepaid starter. Or sign up with a MVNO like anveo.com and get a forwarding number (incoming text only w/ that last) A public library would connect you with a different device and IP

If you succeed, there may be some risk of identification when you add family to your contacts. I'm not savvy enough to guide you thru that tho.

ref: https://kagi.com/search?q=How+to+set+up+an+anonymous+instagr...
by pjdesno | 2025-09-24 21:30:04+00:00
Full seek on a modern drive is a lot closer to 25ms than 8ms. It's pretty easy to test yourself if you have a hard drive in your machine and root access - fire up fio with --readonly and feed it a handmade trace that alternates reading blocks at the beginning and end of disk. (--readonly does a hard disable of any code that could write to the drive)

Here's a good paper that explains why the 1/3 number isn't quite right on any drives manufactured in the last quarter century or so - https://www.msstconference.org/MSST-history/2024/Papers/msst...

I'd be happy to answer any other questions about disk drive mechanics and performance.
by kemayo | 2025-09-24 21:30:07+00:00
I like how it looks. It's nice to have a fairly-minor shake-up in the aesthetics every now and then, and it makes everything feel a bit fresh and new. And I do sincerely find it fairly minor -- things got a bit rounder and glossier, and there's a few bits of iOS that have some fairly cute glass-distortion effects, and some apps got some not-huge UI redesigns.

Overall, particularly on my phone, it's just giving me an occasional pleasant burst of "ooh, shiny". On my laptop, I admittedly barely notice anything has changed.

(I don't personally have any legibility issues with it, though I'm willing to believe that's down to individual usage patterns.)
by dragontamer | 2025-09-24 21:30:43+00:00
Because it means that 85.7% of all mistakes will be caught by very simple software checks before getting to your system. (85.7% == 6/7).

Check digits in your userdata is an old trick and is very useful in practice. Maybe modern systems should aim for something better than %7 but it's a good starting point as a system design concept.
by backflippinbozo | 2025-09-24 21:31:05+00:00
AI & ML engineering in particular is very research-adjacent.

That's why we began building agents to source ideas from the arXiv and implement the core-methods from the papers in YOUR target repo months before this publication.

We shared the demo video of it in our production system a while back: https://news.ycombinator.com/item?id=45132898

And we're offering a technical deep-dive into how we built it tomorrow at 9am PST with the AG2 team: https://calendar.app.google/3soCpuHupRr96UaF8

We've built up to 1K Docker images over the past couple months which we make public on DockerHub: https://hub.docker.com/u/remyxai

And we're close to an integration with arXiv that will have these pre-built images linked to the papers: https://github.com/arXiv/arxiv-browse/pull/908
by kstrauser | 2025-09-24 21:31:17+00:00
1) Aesthetically, I think it's pretty. That's a subjective opinion, though.

2) I vastly prefer it displaying buttons as buttons, instead of as just undifferentiated text on a screen. In the past I've sometimes been frustrated that an app didn't have a feature I wanted, only to learn that it actually had that feature, hidden behind what I'd assumed was just a text label but was actually a button. This is an enormous freaking improvement.

3) I very much prefer the new UI patterns in other places. For example, when highlighting text on iOS, the old UI gives a horizontally scrolling list of options with arrow keys to rotate through them. The new UI replaces that with a ">" More button that pops up a vertical list of all available actions. Again, this is an enormous freaking improvement.

I like the appearance of Liquid Glass, but that could go either way. I think the actual UI implementation behind the graphics is so much better than before.
by kolektiv | 2025-09-24 21:31:32+00:00
An anomaly for sure, and I think as much as anything else one caused by the fact that Covid meant that government couldn't do business as usual. It wasn't procured and developed in the usual way, it didn't have the usual political pressures and fights from all sides. Yes, it's an example of what could be done if government was insulated from the usual environment!
by smjburton | 2025-09-24 21:31:33+00:00
Agreed OP. I could see ProductHunt being a place for product-oriented people and founders to form a community and collaborate (constructive feedback, partnerships, etc). Sadly, most of the activity there lately seems to be people quickly creating accounts, launching their vibe-coded app, and then moving on. I've stopped visiting regularly until the maintainers make improvements to foster more of a community and bring people back to the site.
by crazygringo | 2025-09-24 21:31:33+00:00
What are example web pages that prevent this for body text? I feel like I've never come across it before, expect TFA which is making a point...

I also can't recall ever coming across a clickable action trigger on every word. Just links that might have some popup action. And I use opt+click to select things within regular links.

I'm genuinely curious because it seems like lots of people are agreeing, and this is not a problem I've ever encountered before. Are there common sites known for this that I just haven't visited?
Ask HN: a REPL in an IME?
by zahlman | 2025-09-24 21:31:34+00:00
Recently I've been finding myself wishing more and more, while in the middle of using Discord or some other chat, or while writing a forum post, or even in a text editor, wishing that I could just write some code one-liner to generate the next bit of text I want to write (perhaps, calling a function I'd defined ahead of time in a "config" file that's really more of a personal library; as one might do with ~/.bashrc).

I already use an IME (fcitx-mozc) to input Japanese text, but that feels really limited and special-case to me. It'd be neat to be able to switch to e.g. Fraktur "font" by using https://en.wikipedia.org/wiki/Mathematical_Alphanumeric_Symbols , or any other variation, by writing a simple call to convert the text in Bash, Python or whatever else. Since an IME already commonly shows you a separate text input field where you can prepare the text that is eventually inserted into the original context, I thought of using that same mechanism to implement a REPL — provide temporary text to an interpreter, get the evaluated result back, and insert that into the main text field. Perhaps the system could allow for further editing of the result first; or with a language like Python that has typed results, the handling could be type-dependent (e.g. if the code evaluates to a list, the UI could show a window with the results and allow for selecting one, just like how Japanese IMEs let you choose the kanji you want after inputting ambiguous romaji).

Does anything like that exist for Linux already? It seems like something that would take quite a bit of effort (mainly research) to create from scratch.
by AznHisoka | 2025-09-24 21:31:42+00:00
Have you tried Bloomberry [1]? For instance, u can find companies that just started a Github organization profile or just started a self-hosted Gitlab instance (it scans DNS records for new instances). I think builtwith only focuses on front end facing technologies not backend.

[1] Disclaimer: this is an API product I built myself and recently launched at bloomberry.com
by lucb1e | 2025-09-24 21:31:53+00:00
You don't only need the account, you need a phone that is locked down with hardware components and cryptographic keys that attest it hasn't been modified "unauthorizedly". Where the authority is not the device "owner" but Google, Apple, and the manufacturer

The account would be easy enough with fake data and a 10€ prepaid one-time-use phone number. Finding an exploit in Android such that you can turn off Google's tracking but not trigger their "you modified your device" scans (that are to be tied to your government identity verification continuing to work) is a game I'm not looking forward to playing.
by bonoboTP | 2025-09-24 21:32:15+00:00
No, sending a pdf by email is no extra cost. They already have an email output interface for tickets and recipts and confirmations.

It's all about better tracking. I'm not quite sure what additional info they get exactly, but tons and tons of mobile websites (that work and don't get deleted) are close to unusable due to a barrage of popups telling you to use the app (e.g. Reddit and other socials).

Also there is no indication they will stop the mobile web version. Already today the mobile web version is there but it explicitly refuses to show the boarding pass QR code: https://i.redd.it/lj3wdnfp9mq91.jpg