MurphyA/hacker-news huggingface dataset:
by NoboruWataya | 2025-09-08 16:10:41+00:00
Perhaps I'm missing it but does it explain what aspects of your setup contribute the most to your score or suggest remedial actions? I wasn't that surprised to find that my standard setup is highly fingerprintable (for one, I use Firefox which alone is enough to single me out in a crowd) but I also tried using a vanilla Chromium install via a popular commercial VPN and still got a rating of 100%.
by ApolloFortyNine | 2025-09-08 16:11:13+00:00
In my opinion, the search 'monopoly' is just not the best poster child for antitrust cases in the US.

Perhaps the US is too lax on antitrust, but if you, literally anyone reading this, can stop using Google search on every device you own in the next 5 minutes, I just can't see that as a monopoly. Perhaps another word and legislation is required.

You can't even argue the network effect like you can with chat apps or social networks. You can literally cut Google search from your life forever before your lunch break is over.
by AdmiralAsshat | 2025-09-08 16:11:23+00:00
The distinction is, if I stop paying for the Switch Online membership at any point (or forget to renew), all those titles go away. By contrast, my Animal Crossing Gamecube disk still works. :)

People have even come up with generic gift codes that can unlock some of the NES games Nintendo never "officially" released for AC, like Legend of Zelda, Punch-Out, and a few others.

My entire basement house in the original Animal Crossing is filled with nothing but gyroids and NES games.
by LarryDarrell | 2025-09-08 16:11:23+00:00
The writing was on the wall when Kamala Harris wouldn't commit to keeping Lina Khan at the FTC. We had some soft Anti-Trust action for the first time in decades, and the Trusts responded. If we get the chance to try again, we should be more clear eyed about what we are up against.

I've de-Googled my life as best I can, but I know how little it actually matters. Now that Google is clearly on the path of closing up Android, I hope the Linux phone effort gets reinvigorated.
by kube-system | 2025-09-08 16:11:26+00:00
Governments have a monopoly on the use of force, and they exercise it to compel their citizens to do things whether or not they want to. For example, I have to pay taxes, and if I don't, they will use force against me.

Your relationship with Apple is very different. If you don't like Apple, you can just simply not buy or use their products. You have a choice and they have no way of compelling you otherwise.
by goku12 | 2025-09-08 16:11:41+00:00
Developer account got hijacked through phishing. @junon acknowledged this readily and is trying to get it sorted. Meanwhile, this is a mistake that can happen to anyone, especially under pressure. So no point in discussing the personal oversight.

So let me raise a different concern. This looks like an exploit for web browsers, where an average user (and most above average users) have no clue as to what's running underneath. And cryptocurrency and web3 aren't the only sensitive information that browsers handle. Meaning that similar exploits could arise targeting any of those. With millions of developers, someone is bound to repeat the same mistake sooner or later. And with some packages downloaded thousands of times per day, some CI/CD system will pull it in and publish it in production. This is a bigger problem than just a developer's oversight.

- How do the end user protect themselves at this point? Especially the average user?

- How do you prevent supply chain compromises like this?

- What about other language registries?

- What about other platforms? (binaries, JVM, etc?)

This isn't a rhetorical question. Please discuss the solutions that you use or are aware of.
by lenzm | 2025-09-08 16:12:19+00:00
Yes, it gets a trailing comma if it's on it's own line. That way when you add/remove arguments in a multi-line call it's only a one-line diff. This doesn't apply when the diff is only one line anyway.

Who's to say you don't add a new argument to the function in the future, like

my_print( "This string has two parameters, `a` which is equal to {a} and `b` which is equal to {b}", a=1, b=2, color_negative_red=True, )
by gradientsrneat | 2025-09-08 16:12:28+00:00
People boycotting an entire company because a fraction of its civilian industry operates in a tiny country that doesn't care about your existence at all, with a high concentration of multiple ethnic minorities who fled from other nearby countries, in an extremely politically unstable region, will never not sound weird to me.

TSMC (AMD's fab), is heavily based in Taiwan, which has its own implications regarding long-term sustainability and monopoly.

With only two real choices for x86, and the complexity of the global supply chain, it hardly seems like a fair comparison.
by sunir | 2025-09-08 16:12:29+00:00
lol, contradictions about MVC are par for the course. It's not personal. It's just confusing. Talking about the concepts isn't the same as talking about each other as professionals. Some of the articles you linked to express this tumult over decades.

Looking at 1979, when I read this.

> A controller is the link between a user and the system.

I think of it as the boundary

> It provides the user with input by arranging for relevant views to present themselves in appropriate places on the screen.

It's the router, or view loader.

> It provides means for user output by presenting the user with menus or other means of giving commands and data. The controller receives such user output, translates it into the appropriate messages and pass these messages on .to one or more of the views.

The controller receives user input, translates it, and dispatches the input to the views. I think this has changed in the modern era.

> A controller should never supplement the views, it should for example never connect the views of nodes by drawing arrows between them.

I don't really understand this exactly, but I think it means views compose themselves.

> Conversely, a view should never know about user input, such as mouse operations and keystrokes. It should always be possible to write a method in a controller that sends messages to views which exactly reproduce any sequence of user commands.

The controller handles the raw input and translates it into actions/commands meaningful to the system.

>> How does the model handle authentication without having to become aware of boundary protocols? > It gets passed required information. Just like it gets passed other information.

Is what you consider the model all logic in the system? I would not. I would consider the model to be the data in the system world, using terms in systemese. It shouldn't know or care about OAuth or SAML or HTTP Authorization or whatever. It would care about Users and Sessions.

However, is this semantics? The use case and work flow approach is just a layer on top of the data model. The auth is another layer.

Why it matters to me is I prefer to think of systems as data flows, and the code follows the data flow. Control layers are different than the actual data.
by doublerabbit | 2025-09-08 16:12:31+00:00
I'm someone who deleted my account back in 2010. I've lived life without Facebook, Instagram and it's been hell. I've been targeted with emotional sabotage for not having Facebook.

"You don't have Facebook?, well your a red flag" and that hurts when your trying to connect. I now look back and am I glad that no data of mine really exists on the platform.

My twenties and university I've missed out on parties, arrangements, opportunities for not having access to groups. Facebook forces you in to their walled garden; disallows & scalds you from sharing anything outside.

Shops use Facebook/WhatsApp and I am unable to access their pages. Should I boycott my local organic grocery store because of my own anarchy? Customer support for some large main-high street chains first point of call of contact is via WhatsAp, unhelpful if I need to chase up a refund.

My family only have a signal group only because of me. They all default back to WhatsApp, Instagram and the rest because that's where their contacts are. I have no right to tell them not too.

CraigsList isn't really thing here, Gumtree works, but not as efficient as market place.

Deleting your account leaves you heavily isolated and if you can deal with that; great. With doing so, you however miss out on a lot of stuff and receive not many perks in return. Other than your data isn't being combed to manipulate and poison others.

FOMO becomes real.

> Actual friends and family can keep in touch with me IRL, over SMS, by phone calls, or by email

My actual friends, live in the foreign countries so IRL isn't possible. SMS and Phone calls are expensive. I use a iPhone and they use Android. Apple/Android integration has only just become available but people don't want that.

I've tried to onboard them but the mindshare of what WhatsApp gives doesn't match those to of Signal or Element; it's seen as a chore. Discord has some things right and as much as I loathe it, it has been the "one-fits-all" but definitely not suitable for my 70 year old something mother.

It's a nice ideology "just delete" but it's flawed concept when the whole world uses the technology you're trying to escape from. MySpace was perfect and I didn't need anything else.
by dragonwriter | 2025-09-08 16:12:32+00:00
> But time is not the fundamental axis in a spreadsheet

I’ve worked with lots of financial projection and reportinf spreadsheet, and time has usually been the, or at least a, fundamental axis.

> but the calculations don't step through time, day by day (or weekly/monthly/hourly) like they do in other simulation systems.

They... absolutely do, if the underlying view that the sheet is built around is a sequence of time steps. A workbook with a control plane sheet or sheets with starting values and a grid of input variables in rows and timesteps in columns with an output sheet with output variables in rows and timesteps in columns, where each output row has a formula taking into account outputs in earlier timesteps and inputs in the same or earlier timesteps is, IME, a fairly common way to construct a modeling tool using spreadsheet software.
by tpmoney | 2025-09-08 16:12:34+00:00
On the other hand, individual developers not working directly on the projects benefit immensely from OSS being easy to integrate and “exploit” by companies. How many skills can you pick up that are instantly transferable between jobs because “everyone” uses the open source project. Surely we’re all better off with most major companies using and deploying to Linux even if most of them will never contribute money or time to it
by gpm | 2025-09-08 16:13:16+00:00
Anthropic paid $3000USD per work because they pirated works and US copyright law comes with statutory damages completely unrelated to the amount it would have cost to acquire the same thing legally.

The same thing, legally, according to the judge in that lawsuit would have been a purchased (potentially used) copy of the book scanned - i.e. what Anthropic also did after pirating works. It'd be surprising if that would cost even $30USD/work, two orders of magnitude less.

$10AUD million doesn't seem sufficient for a competitive set (and as you say they aren't saying it is), but if you told me $50AUD million was enough to build a legal (according to Judge Alsup's interpretation of US law) repository of training data I would not be surprised.
by skybrian | 2025-09-08 16:13:20+00:00
Yes, but that’s research. When you’re reading the news, it’s to learn about news stories that you don’t already know something about.

I suppose you could also search on something generic like “ai news?” When I tried that, all the news story results at the top of the page had no snippets. It’s not until way down the page that there are regular search results with snippets.
by ctoth | 2025-09-08 16:13:20+00:00
What if this paper actually took things seriously?

A serious paper would start by acknowledging that every previous general-purpose technology required human oversight precisely because it couldn't perceive context, make decisions, or correct errors - capabilities that are AI's core value proposition. It would wrestle with the fundamental tension: if AI remains error-prone enough to need human supervisors, it's not transformative; if it becomes reliable enough to be transformative, those supervisory roles evaporate.

These two Princeton computer scientists, however, just spent 50 pages arguing that AI is like electricity while somehow missing that electricity never learned to fix itself, manage itself, or improve itself - which is literally the entire damn point. They're treating "humans will supervise the machines" as an iron law of economics rather than a temporary bug in the automation process that every profit-maximizing firm is racing to patch. Sometimes I feel like I'm losing my mind when it's obvious that GPT-5 could do better than Narayanan and Kapoor did in their paper at understanding historical analogies.
by FollowingTheDao | 2025-09-08 16:13:34+00:00
I disagree, I think they need to study specific populations for specific diseases associated with different diets. If you study this across population where this doesn’t matter as much then they will say omega-3 has no effect on nearsightedness, which is bad for the population that needs omega-3.

Omega-3 saved me from the fate of my family, dying from a heart attack before I was 50.

And I see this need in my genetics, specifically FADS1 FADS2 polymorphisms that make me need higher chain omega-3 fatty acids like from seafood.
by pyrale | 2025-09-08 16:13:35+00:00
> let your homegrown champions stay strong and keep getting stronger.

...Until they start getting banned abroad because your government openly tries to manipulate election in ally countries. And once that happens, you're perpetually weaker and your reputation is done for a century.

People arguing for this kind of hard power are just too weak-minded to understand the extent and strength of US' historical soft power.

> markets don't work the way libertarians think.

Well, if you keep pushing down that line, markets won't work at all, and welcome back to 19th century's gunboat policy, except people have nukes now.
by joezydeco | 2025-09-08 16:13:38+00:00
United inherited a bunch of long-range 757s with the Continental merger. I flew one Newark-Stuttgart one summer. United saw it as a cheaper way to fly transatlantic with a smaller crew.

Problem was that the aircraft couldn't make it back to the US on a single tank of fuel if the jet stream was too strong. Which happened a lot. So we got a nice detour to Goose Bay for refueling and nearly missed our connection. The regulars joked that YYR was the new United hub on the east coast.

I don't think UA does this much anymore. Maybe COVID killed that route too.
by dijit | 2025-09-08 16:14:11+00:00
Don’t they have communicators?

Don’t they also have ways of sending messages wirelessly in real time, just bounded by speed of light? That’s a down-sight lot better than what we have now as we basically just blast radio signals in all directions at roughly the speed of light- which degrades very rapidly over distance.

I’m coloured largely by Voyager, but I don’t see any technology that we have now that they don’t have, not at the distances it would need to work at and without the infrastructure to make it work.
by thewebguyd | 2025-09-08 16:14:25+00:00
Unfortunately I don't think we're going to get the chance to try again. This, and Apple's upcoming case which they'll probably get off free as well, was our chance.

These companies are now even more emboldened, and with market caps bigger than the GDP of most countries, there is no one to stop them. Every politician has a number, and this administration has shown that open bribes are legal and expected.

Good luck prosecuting any big tech when they can pay billions of dollars to the administration to make anything go away.
by simonw | 2025-09-08 16:14:40+00:00
This is a fair analysis, thanks for taking the time.

As far as I can tell the Google + Wikipedia solution gets the name of Cambridge University wrong: Wikipedia lists it as "The Chancellor, Masters and Scholars of the University of Cambridge" whereas GPT-5 correctly verified it to be "The Chancellor, Masters, and Scholars of the University of Cambridge" (note that extra comma) as listed on https://www.cam.ac.uk/about-the-university/how-the-universit...

I tried to reverse engineer the system prompt in the cake pop conversation https://chatgpt.com/share/68bc71b4-68f4-8006-b462-cf32f61e7e... purely because I got annoyed at it for answering "haha I believe you" - I particularly disliked the lower case "haha" because I've seen it switch to lower case (even the lower case word "i") in the past and I wanted to know what was causing it to start talking in the same way that Sam Altman tweets.
by Aunche | 2025-09-08 16:14:51+00:00
Lobbying isn't used to exacerbate the social divide. It's used to achieve incremental policy wins and prevent incremental policy losses for the clients of the lobbyists. This is what the general public needs to do as well if they want the government to better represent their interests, but they have little interest in that. People willingly choose to exacerbate the social divide, and the overwhelmingly negative sentiment to lobbying is evidence of this.

Colonialism is a form of centralized planning, which catastrophically fails for the same reasons that it does in communist regimes.

China is evidence of capitalism's incredibly successful record of poverty mitigation. They've retained some communist style central planning, but the "bad" part of capitalism is unlimited accumulation of wealth, as mentioned upthread, which China allows just like any capitalist country.
by washadjeffmad | 2025-09-08 16:15:47+00:00
"As of March 2025, the current versions of VMware Fusion Pro and Workstation Pro are available at no charge for all use cases, including personal, educational, and commercial use. Users no longer need to purchase a license for these versions for any scenario. Broadcom will continue releasing updates and security patches but will no longer sell new support contracts for these versions."

FYI. I know we weren't the only ones left gun shy after Oracle's legal team reached out to let us know about the dozen or so employees using VirtualBox from their work laptops a few years ago.
by oaiey | 2025-09-08 16:15:50+00:00
Imagine we nuke the world right now ... How long until we can start creating a modern iPhone again. Right now only 2-3 countries are able at all to produce these chips. And all rely on very sensitive technology.

Knowledge might not be lost but rebuilding tech might take centuries depending on how worse it is. And that is probably very similar to the past. Middle age people probably understood how Romans build their water supply but where unable to reproduce it because how the bad the time was.
by bigyabai | 2025-09-08 16:15:57+00:00
Most NPUs are almost universally too weak to use for serious LLM inference. Most of the time you get better performance-per-watt out of GPU compute shaders, the majority of NPUs are dark silicon.

Keep in mind - Nvidia has no NPU hardware because that functionality is baked-into their GPU architecture. AMD, Apple and Intel are all in this awkward NPU boat because they wanted to avoid competition with Nvidia and continue shipping simple raster designs.
by teamonkey | 2025-09-08 16:16:22+00:00
It honestly is weird that the 500 doesn't have a M.2 slot, being an all-in-one package. Not all of the Pi's use cases would benefit from fast mass storage and so you can understand why they wouldn't add a M.2 slot as standard if it keeps the BoM low and board size small. Not so with the 500.
by DDerTyp | 2025-09-08 16:16:34+00:00
One of the most insidious parts of this malware's payload, which isn't getting enough attention, is how it chooses the replacement wallet address. It doesn't just pick one at random from its list.

It actually calculates the Levenshtein distance between the legitimate address and every address in its own list. It then selects the attacker's address that is visually most similar to the original one.

This is a brilliant piece of social engineering baked right into the code. It's designed to specifically defeat the common security habit of only checking the first and last few characters of an address before confirming a transaction.

We did a full deobfuscation of the payload and analyzed this specific function. Wrote up the details here for anyone interested: https://jdstaerk.substack.com/p/we-just-found-malicious-code...

Stay safe!
by isk517 | 2025-09-08 16:17:07+00:00
The virtual console is now offering GameCube titles. GameCube/PS2/XBox was the tipping point when most major 3D releases looked reasonably good and the hardware was strong enough that developers were encountering fewer limitations that hampered the games in very fundamental ways. Compare Resident Evil 1 on the Playstation to the remake one generation later on the GameCube to see a very direct example of this.

Additionally video games can be a major time investment. Disney doesn't worry about the older Star Wars movies cannibalizing interest in the new ones because you can match the original trilogy in a single evening, were beating a single game could potentially take months. The quality of the entire Zelda series on average is extremely high and the majority of the games are still worth playing, a young gamer could easily start going through the library and find themselves having enough fun to just keep focusing on that instead of purchase the latest and greatest at top dollar.
by barbazoo | 2025-09-08 16:17:09+00:00
You used the word "always", the person I responded to didn't.

> I was flying from Kathmandu to Bangkok in 2000 and I couldn't book a ticket on the plane until the day it flew as 'half the plane' was reserved for 'Government Officials' 'just in case'.

The "just in case" sounds like speculation to me so all it sounds like is the flight they were on was reserved.
by goku12 | 2025-09-08 16:17:52+00:00
How many developers are there like him? If not him, they'll target someone else. And while you or I will never do such a thing under normal circumstances, that's a pretty simple mistake to make if you are stressed, sleep deprived or sick. We are supposed to have automatic safeguards against such simple mistakes. (We used to design stuff with the assumption that if a human mistake is possible, someone will eventually make it for sure.)
by ChrisArchitect | 2025-09-08 16:18:05+00:00
Anything here in this blog/linkspam that hasn't already been said last week?

More discussion:

Google can keep its Chrome browser but will be barred from exclusive contracts

https://news.ycombinator.com/item?id=45108548

The worst possible antitrust outcome

https://news.ycombinator.com/item?id=45120050
by ParetoOptimal | 2025-09-08 16:18:13+00:00
> All that really matters is consistency. Let a team make some decisions and then just move forward.

Not so! Amount of tokens correlates to perceived code complexity to some. One example is how some people can't unsee or look past lisps parenthesis.

Another example is how some people get used to longDescriptiveVariableNames but others find that overwhelming (me for instance) when you have something like:

userSignup = do let fullName = userFirstNameInput + userLastNameInput userName = take 1 userFirstNameInput + take 10 userLastNameInput saveToDB userName

Above isn't bad, but imagine variables named that verbosely used over and over, esp in same line.

Compare it to:

userSignup = do let fullName = firstName + lastName userName = take 1 firstName + take 10 lastName saveToDB userName

The second example loses some information, but I'd argue it doesn't matter too much given the context one would typically have in a function named `userSignup`.

I've had codebases where consistency required naming all variables like `firstNameInputField` rather than just `firstName` and it made functions unreadable because it made the unimportant parts seem more important than they were simply by taking up more space.