MurphyA/hacker-news huggingface dataset:
by hurril | 2025-09-07 06:44:24+00:00
I think that a big problem here is the fact that in OOP, everything is an object, i.e.: a class. And if all you have is a hammer, then .... But it is much better to picture the model, controller and the view as emergent. But implementing this in OOP is too challenging because some things in either of those three domains are going to be a process, or a piece of state or a role, etc.

And in implementing some process, what is it? As in: what is its encoding in $language and where does it go?

So you end up with the local stamp collectors in the office and get into an argument of: it is part of the model, so should be in the Model class. "Process, nah, that is totally a controller aspect. It does something." etc.
by 8n4vidtmkvmk | 2025-09-07 06:45:27+00:00
If the incentives are wrong, ya. At the lower levels of big tech, I don't think this is an issue. Or maybe I've been fortunate but all my managers and skip managers seem aligned on helping progress my career. Maybe because we're not competing for the same position and there's room for growth. If slots are limited and you're competing.. I can see this though.
Show HN: Integration Security Top 10: An OWASP-style framework
by leo1452 | 2025-09-07 06:46:18+00:00
The Salesloft–Drift breach (more context - https://news.ycombinator.com/item?id=45106340) this August showed how one weak integration can ripple across 700+ orgs (Cloudflare, Palo Alto, Zscaler, etc.). Attackers stole tokens from a single app and used them like skeleton keys to exfiltrate Salesforce, Google Workspace, and Slack data.

Looking around, I found no clear framework or set of controls to track and improve integration security.

So, I’ve published the Integration Security Top 10 (ISF) and open-sourced it on GitHub. It’s modeled after the OWASP Top 10: short, memorable, and focused on the most critical risks in SaaS-to-SaaS and API integrations. Each item also has an actionable “playbook” to help move theory into practice.

The goal is to help orgs prevent the sorry situation that we saw unfold at so many supposedly "secure" companies over the last few weeks. I'm doing this by creating a clear set of controls that orgs can look at and use like a checklist to fix integration security issues.
by tonyhart7 | 2025-09-07 06:46:43+00:00
"Thus forcing unknown millions of people worldwide to upgrade an ENTIRE CPU and Motherboard just for the next version of Windows"

I don't know why you must come conclusion at this point, no one force you to upgrade into next version

as far as I know, when you buy windows 10 license, you tied into certain edition that would work for that edition. nothing mention next OS (in this case windows11) should backward compatible with last edition

if you think 7-8 years is bad, think how much smartphone that not receive update for years, most often that this phone didn't receive update at all

and google and apple literally making new edition of android/ios that break depedency every year
by uncircle | 2025-09-07 06:47:45+00:00
Exactly what I thought. 10am-4pm is sane, 10 hours a day is still crazy, but I guess to employees talking about 996, in comparison it seems a good deal.

I have been self employed for 12+ years, for 9am-1pm is a very productive day, and anyone that claim they can do much more actual knowledge work than that either is pushing papers or has a lot of down time and faffing about.

Also I’d rather work fewer hours 6 days a week, than pushing way past my productivity cramming everything in 4 days.
by watwut | 2025-09-07 06:48:53+00:00
I doubt it will become as usual. It scream innefective management in the first place and is not defense of ai at all.

Company trying to get rid if innefective people would make sense, but if you measure it by ai usage all that happens is that your ai usage will go up - and price of using it along with it.

There are always irrational managers enjoying power trips. But the norms normally dont become that irrational
by JustExAWS | 2025-09-07 06:50:08+00:00
> Oh, I forgot, it's ridiculously easy to become a writer and sustain living from a podcast. Those ~400 000 people could've easily found a different job.

So the only choices anyone has in the US is to become a writer or an Uber driver? Does Uber have some type of monopoly on employment?

> However, the actual insane thing is this worldview that companies are not responsible for anything, and can do whatever they want;

I said that companies shouldn’t be able to do things that harm their employees - I never said that OSHA and safety standards shouldn’t exist. They also shouldn’t be able to do anything that hurts others. I even said that they should pay taxes to fund a safety net and to provide universal health care like every other civilized company.

> but to go and start supporting yourself with books and podcasts

No I said that the government shouldn’t get involved with creating an environment where adults can’t get into voluntarily contracts where they get to decide how much their labor is worth.

Even a cursory reading of whey I wrote would tell you I used Snell as an example of all of the contractors that wanted to do freelance who were harmed by a law meant to protect them but only created a nanny state that took away agency from adults who freely made a choice.

> and that there should be some magical government that provides some safety net

You mean the same type of safety net that every other industrialized company provides?
by asalahli | 2025-09-07 06:51:07+00:00
> the original/popular definitions were so incredibly abstract and disconnected from real life usage that they ended up being whatever the person implementing it wanted it to be.

This is what happened with REST too, and it frustrates me more than it probably should.

The original pattern is such a good idea and not even remotely abstract. It's a well defined architectural pattern for a well defined problem yet people still managed to bastardize it to the point that the term REST barely means anything today
by guilamu | 2025-09-07 06:51:24+00:00
The new 'good' (more like less worst) version of Windows is Windows 11 iot ltsc. It's as clean as windows 11 gets (https://massgrave.dev/windows_ltsc_links#differences-between...).

Still, I've been using computers for 30 years and I'm starting to feel the itch to look for Linux alternatives and I'm pretty old. Change does do not comes easily to old people. This is bad for ms.
by MrJohz | 2025-09-07 06:51:29+00:00
It's not about costing less, it's about program structure. The goal should be to move from interface type (in this case a series of strings passed on the command line) to internal domain type (where we can use rich data types and enforce invariants like "if server, then all server properties are specified") as quickly as possible. That way, more of the application can be written to use those rich data types, avoiding errors or unnecessary defensive programming.

Even better, that conversion from interface type to internal type should ideally happen at one explicit point in the program - a function call which rejects all invalid inputs and returns a type that enforces the invariants we're interested in. That way, we gave a clean boundary point between the outside world and the inside one.

This isn't a performance issue at all, it's closer to the "imperative shell, functional core" ideas about structuring your application and data.
by masonremaley | 2025-09-07 06:52:14+00:00
That’s also a good question.

I personally wouldn’t compress pixel art—the artist presumably placed each pixel pretty intentionally so I wouldn’t wanna do anything to mess with that. By pixel art’s nature it’s gonna be low resolution anyway, so storage and sample time are unlikely to be a concern.

Pixel art is also a special case in that it’s very unlikely you need to do a bake step where you downsize or generate mipmaps or such. As a result, using an interchange format here could actually be reasonable.

If I was shipping a pixel art title I’d probably decide based on load times. If the game loads instantly with whichever approach you implement first then it doesn’t matter. If it’s taking time to load the textures, then I’d check which approach loads faster. It’s not obvious a priori which that would be without measuring—it depends on whether the bottleneck is decoding or reading from the filesystem.
by 8bitsrule | 2025-09-07 06:52:44+00:00
No devices, no passwords were ever required of any of us (yet). We deliberately walked into this, we can walk right back out again. Will we have to make do with less? (Did we really need it anyway?)

While I owned a cellphone, I never left the house with it. While using it, my location was always known.

None of this is terribly new. For decades our names and addresses were collected in telephone books (along with our numbers) that were given away to everyone. Telecorp doxxing. That too was involuntary.

The company whose buses I carded into (instead of paying cash) knew where I got on and got off. Once you get tuned into these 'services', you are in a position to limit their accuracy. That skill can be refined. We don't have to become predictable.
by HippoBaro | 2025-09-07 06:52:59+00:00
It’s really the hardware block size that matters in this case (direct I/O). That value is a property of the hardware and can’t be changed.

In some situations, the “logical” block size can differ. For example, buffered writes use the page cache, which operates in PAGE_SIZE blocks (usually 4K). Or your RAID stripe size might be misconfigured, stuff like that. Otherwise they should be equal for best outcomes.

In general, we want it to be as small as possible!
by KajMagnus | 2025-09-07 06:52:59+00:00
Could one say that humans are trained very differently from AIs?

If we (humans) make confident guesses, but are wrong — then, others will look at us disappointedly, thinking "oh s/he doesn't know what s/he is talking about, I'm going to trust them a bit less hereafter". And we'll tend to feel shame and want to withdraw.

That's a pretty strong punishment, for being confidently wrong? Not that odd, then, that humans say "I'm not sure" more often than AIs?
by metanonsense | 2025-09-07 06:53:27+00:00
But isn’t that exactly what GP meant? There is an original, very precise but also very abstract definition (and what is more abstract than category theory). Then people come along who give a different definition that matches the original one in their specific context („three laws in Haskell“). After that people take these three laws and apply them (sometimes overly simplistic) to other contexts („just give it a flatMap in Scala to get a monad“). And at some point the original meaning got lost, and there are competing definitions out.
by jhanschoo | 2025-09-07 06:53:39+00:00
> The 2019 operation has never been publicly acknowledged, or even hinted at, by the United States or North Korea. The details remain classified and are being reported here for the first time. The Trump administration did not notify key members of Congress who oversee intelligence operations, before or after the mission. The lack of notification may have violated the law.

> The White House declined to comment.

> This account is based on interviews with two dozen people, including civilian government officials, members of the first Trump administration and current and former military personnel with knowledge of the mission. All of them spoke on the condition of anonymity because of the mission’s classified status.

The NYT story has this to say regarding provenance.
by lloydatkinson | 2025-09-07 06:54:50+00:00
Haven’t seen anyone mention it yet but 11 runs perfectly fine on older provided your CPU has POPCNT - which apparently was introduced in 2008.

Rufus can create a bootable USB drive with the 11 installer modified* to bypass the other artificial requirements like TPM and bypass the stupid “need internet access to force you to make a Microsoft account” requirement too.

https://rufus.ie/en/

*change some flags in the installer
by dragontamer | 2025-09-07 06:55:05+00:00
Its easy to think if you can see it in both frequency and time domains.

So the fourier-transform of white noise is still.... white noise. Random is random as you say. But this has implications. That means the "wattage" of noise (ie: Voltage * Current == Watts aka its power) is a somewhat predictable value. If you have 0.5 Watts of noise, it will be 0.5 Watts of noise in the frequency-domain (after a fourier transform, across all frequencies).

The hard part of amplification is keeping it consistent across all specifications. I assume the previous post was talking about keeping white noise (which is "flat" across all frequency domains), truly flat. IE: It means your OpAmps (or whatever other amplifer you use) CANNOT distort the value.

Which is still student level (you cannot be a good EE / Analog engineer if you're carelessly introducing distortions). Any distortion of white-noise is easily seen because your noise profile weakens over frequency (or strengthens over frequency), rather than being consistent.
by watwut | 2025-09-07 06:57:18+00:00
But back then, you was better off not depending on pet.com. If products of one of those vaporware companies became important in your process, your company went down along with.

Those were companies that had multiple expensive IT restructurings one after another, each making them more innefective and then either run out of cash or barely made it.

It worked well for companies that were choosing smart.
by v9v | 2025-09-07 06:57:20+00:00
They have an emulator here: https://github.com/Datamuseum-DK/R1000.Emulator2

Notably it needs KiCad to run and takes ~140 hours to boot.

Seems like the reason for KiCad and the slow operation is that the emulation occurs at a really low level, and they've written a program to digitize all of the computer's schematics and convert them into netlists (which is then converted into systemC components for the emulator): https://github.com/Datamuseum-DK/R1000.HwDoc

a video explaining the process?: https://www.youtube.com/watch?v=oMRTr0bPuOA
by pcl | 2025-09-07 06:57:28+00:00
There is so much fun to be had with a rotary encoder and some sensors. What are your plans for extensibility? I think this would be an awesome hacker device — everyone needs a thermostat anyways, and an easy way to build new screens (volume control, door buzzer, whatever) and deploy to the device would be so cool.

I expect you’ll need to be heads down on the hardware and basic software problems to hit your dates. But I also think it’d be worthwhile to figure out the baseline for extensibility early. Maybe this is just a call-home mechanism so you can advertise updates, so you can do something more in the future.

I also wonder if you could somehow take advantage of ESPHome here, for very basic HA etc integrations (of other functions, to be clear).

Also, what are your thermostat algorithm plans? Are you intending to consume HA thermometers / sensors? Or perhaps expose programmability hooks directly on the device?
by secure | 2025-09-07 06:58:02+00:00
HN mods, can we please finally ban this cross-posting bot called https://news.ycombinator.com/user?id=todsacerdoti?

This is my post, and my own submission got marked as a “dupe” (https://news.ycombinator.com/item?id=45155986).

On every blog post I post, todsacerdoti steals my post. It’s a bot. Why isn’t it banned?
by ozim | 2025-09-07 06:58:18+00:00
From my experience patterns suffer from new devs thinking that patterns are guidelines for writing their code and that they should create code that is generic and implements patterns. (Yes if their job is implementing framework, not when their job is to use framework to build business app)

Like everyone totally forgot patterns are mainly for understanding existing systems like you use a framework - hey this looks like a factory let’s use one from the framework we built stuff with instead of implementing our own.

Besides of course every developer wanting to build framework so others adhere to what he built not the other way around ;)
by kayleighb | 2025-09-07 06:58:28+00:00
Location: Australia

Remote: Yes (work from anywhere)

Willing to relocate: No

Technologies: SailPoint IdentityNow, Ms Project, Jira, Ms Office, RBAC, Cybersecurity Risk & Compliance frameworks (ISO 27001, NIST).

Email: kayleighmbeahan@gmail.com

Résumé/CV: (PM) https://drive.google.com/file/d/159-rsiOlx513Lg-W2UGZlQeU5o-... (BA) https://drive.google.com/file/d/1TLZBX_wbYYO1ceb1d-LiWRSlCDz...

I’m open to opportunities as either a Cybersecurity Project Manager or an IAM Business Analyst.

As a Cybersecurity Project Manager, I’ve led cyber projects end-to-end across planning, stakeholder management and delivery, drawing on my Big 4 consulting background and experience running complex enterprise initiatives.

As a Business Analyst, I specialise in SailPoint IdentityNow integrations, including application onboarding, RBAC development and aligning access models with business needs.

For either position, I’m seeking a remote full-time or contract role where I can add value in either capacity. Looking forward to connecting if my background aligns.
by globular-toast | 2025-09-07 06:58:42+00:00
Yep. I hate wearing suncream. Hate the feeling of it and the smell. I often spend all day in the sun on long walks so I do as you say: cover up. I've recently got a peaked cap with a neck guard to try as well.

If you're a man especially you might as well just start wearing a hat because the thick hair probably won't last forever!

One tip I got from South Africa is when you find shade take your hat off as you cool down a lot through your head.
by unsnap_biceps | 2025-09-07 07:01:24+00:00
No, they never did. It seems obvious to me that the thought process was

1. Humans are being enslaved by psychic powers 2. There's multiple different alien races in the war with very different environmental requirements 3. What if some of those alien races were also enslaved by psychic powers 4. Humans figured out how to break psychic enslavement 5. Therefore, it makes sense that the humans could free some aliens 6. Grateful aliens would fight with the humans to not be enslaved again
by theoa | 2025-09-07 07:01:53+00:00
See

The first "blog"

https://en.wikipedia.org/wiki/Jorn_Barger

https://firstsiteguide.com/robot-wisdom-and-jorn-barger/

https://robotwisdom2.blogspot.com/

https://www.wired.com/2005/07/robot-wisdom-on-the-street/
by yakshaving_jgt | 2025-09-07 07:02:24+00:00
Parsing includes validation.

The point is you don’t check that your string only contains valid characters and then continue passing that string through your system. You parse your string into a narrower type, and none of the rest of your system needs to be programmed defensively.

To describe this advice as “vacuous” says more about you than it does about the author.
by hodgehog11 | 2025-09-07 07:02:26+00:00
I mean no disrespect, as I'm no more fond of OpenAI than anyone else (they are still the villains in this space), but I strongly disagree.

> It's useful as a term of understanding.

No it isn't. I dare you to try publishing in this field with that definition. Claiming all outputs are hallucinations because it's a probabilistic model tells us nothing of value about what the model is actually doing. By this definition, literally everything a human says is a hallucination as well. It is only valuable to those who wish to believe that LLMs can never do anything useful, which as Hinton says, is really starting to sound like an ego-driven religion at this point. Those that follow it do not publish in top relevant outlets any more, and should not be regarded as an expert on the subject.

> they haven't shown they know how to do so yet. We can avoid it, but LLMs cannot, yet.

This is exactly what they argue in the paper. They discuss the logical means by which humans are able to bypass making false statements by saying "I don't know". A model that responds only with a lookup table and an "I don't know" can never give false statements, but is probably not so useful either. There is a sweet spot here, and humans are likely close to it.

> If it relies on us knowing whether the output is true or false

I never said the system relies on it. I said that our definition of hallucination, and therefore our metrics by which to measure it, depend only on our knowing whether the output is true. This is no different from any other benchmark. They are claiming that it might be useful to make a new benchmark for this concept.
by picafrost | 2025-09-07 07:03:14+00:00
There is something so fundamentally gross about Microsoft's vision of what role an operating system should serve. That there is an aftermarket of software that attempts to disable (but cannot remove!) the invasive dark patterns is alarming enough, but Microsoft may simply just... undo that, with the next unstoppable update.

Then again, this is the company that answered complaints about Windows being bad for development by embedding an OS that is good for development and calling that an innovation rather than an acknowledgement that Windows is bad.
by midnightclubbed | 2025-09-07 07:05:11+00:00
It’s not entirely trivial (if you care about texture quality) you’re choosing 2 endpoints in 3d space that can be linearly interpolated to values that best fit 16 points in 3d space.

I may have been a little off with saying seconds per texture but it’s definitely non trivial amounts of time. And ects (mobile) and BC7 are certainly still not something you want to compress to at game load-time.

Some comparisons of texture compression speeds for various formats (from 2020 but on a 12core i9): https://www.aras-p.info/blog/2020/12/08/Texture-Compression-...
by hodgehog11 | 2025-09-07 07:06:02+00:00
Hmm, I don't see where they have suggested this, could you point to where this is? If they do argue for this, then I would also disagree with them.

Modelling those things is a separate problem to emitting plausible text and pursuing one is not necessarily beneficial to the other. It seems more sensible to pursue separate models for each of these tasks.
by js8 | 2025-09-07 07:06:14+00:00
That's what I call "single vortex principle". The graph of data dependencies (flow of updates) in your application should ideally have only one circle (which includes the user). The minimal circles of data dependencies are what I call "vortices". Every time you have two different vortices in your application, a potential ambiguity arises about sequencing the updates. These are difficult to deal with and can cause bugs.

As you say, in MVC, the vortex should be User -> Controller -> Model -> View -> User. Best if this is the only vortex (Flux pattern). This can be nicely expressed functionally. That's why I think beans (and mutable variables in general) are bad because each has it's own small vortex of updates.
by defrost | 2025-09-07 07:06:45+00:00
Calling out to HN mods, HNMods, @HN or @dang simply won't work and they (dang & co) simply don't read every comment or submission and frequently remark that they don't have @modname alerts.

Although you might get lucky.

Your best bet, for any issue, is to simply email direct hn@ycombinator.com from your associated user email account - these all get read and largely replied | attended to.
by NAR8789 | 2025-09-07 07:06:55+00:00
This sounds like a footgun.

At some point some application developer will introduce a bug where they're not sending utc.

Without the time zone, the wrong times will end up in the database, bad data mixed in with good. This will be a nightmare to fix.

With the time zone, I don't think this class of bugs is possible. Most application developers will wrap the time in an object that allows them to do time operations without needing to directly handle time zone in most cases.