MurphyA/hacker-news huggingface dataset:
by coldfoundry | 2025-09-12 15:20:19+00:00
Why does it seem like phishing is popular again? Maybe bad actors forgot how gullible humans were? I get phishing attempts nearly daily via email or sms and I honestly thought “Who would fall for this?” every time one came in.

The only phishing I can see that would be extremely hard to detect are browser extension injections (either in extension window or page replacement) so the domain is legitimate.
by diogenescynic | 2025-09-12 15:20:22+00:00
Every area of California is controlled by various healthcare monopolies. In Sacramento, it's Sutter Health. In San Diego, it's Perlman. In Bay Area, you have Kaiser. We have no choice or free market. You either pay them or you don't have access to decent reliable health care. I am honestly starting to think about just not having health care and going to Mexico/Canada when I need something--and we make well into the top 10% for wages. I don't know how others can pay for healthcare and all the premiums. I just paid like $300 for a minor skin care treatment at a dermatologist that I had to wait weeks for an appointment with. It's a clear racket. Oh and despite all this, none of the local speech therapists are in-network so we have to submit individual claims and they don't pay the full amount. It's a scam.
by poszlem | 2025-09-12 15:20:45+00:00
> "UK defence secretary John Healey has outlined new plans to send thousands of interceptor missiles to Ukraine every month, with the Ukrainian-developed UAV to be shared with the UK to help in the fight against Russia."

The UK isn’t just being generous, it’s paying for access to Ukrainian drone know-how. Too many in the West still cling to the fantasy that Ukraine is some backward state, when in fact it’s become one of the world’s top drone powers.
by bilbo0s | 2025-09-12 15:20:48+00:00
This is not quite the problem.

There are multiple issues at play.

The two main issues are:

1 - Sometimes processing is done in private cloud servers for complex translations. Apple is not allowed to do that for EU users. Full Stop. Even if it were not prohibited by EU law, you still have issue 2.

2 - It's unclear whether or not Apple can charge. If another dev uses the APIs, and it triggers a call to the cloud, who pays for the inference? Until Apple gains clarity on that, charging could be considered "punish"-ing a dev for using their APIs.

My own opinion? Issue 2 they will get worked out, but it won't matter because I don't think the EU will move at all on issue 1. I think they see data privacy as serving a twofold purpose. One, protecting their citizens from US surveillance. ie-National Security. And two, part of their long term strategy to decrease the influence of US tech firms in the EU. Both of which I think European policymakers and European common people feel are critical to Europe.
by mothballed | 2025-09-12 15:21:07+00:00
If you start with the assumption there should be regulation, even then IDK how you get there.

You're regulating an "untraceable" utterance of a string of data.

Pragmatically it's worse than trying to stop fentanyl, which is already impossible, and even trying to stop it has just made the gangs that much more powerful because they now control whole small nation-state tier light-infantry militias funded by black-market profits induced from trying to ban it.

I honestly don't see any way to effectively ban cryptocurrency that has net positive utility. "Yay we caught some criminals, all it cost us was a dystopia!"
by alephnerd | 2025-09-12 15:21:10+00:00
> It's pretty much the same balance between each item, just more zeroes on the end of each number

You cannot compare the poverty or material condition between the two.

Personal access to tap water, personal bathrooms, not having to pay a bribe to get ID, public services, school meals, public schools the actually have some sort of services, and other stuff Americans take for granted are not available to the vast majority of Vietnamese, Indians, and others in the developing world.

My SO literally had to pay a $5k bribe/speed money to get her diploma from her university otherwise she'd have to work as an unlicensed doctor for 2 years.

The rent for an illegal 1 bedroom hovel in D3 in Saigon with a tap water connection and personal bathroom goes for $250-550/mo - that's literally the monthly wage for most residents in Saigon

You really cannot compare even the worst life in the US with the life the silent majority faces in developing countries
by JumpCrisscross | 2025-09-12 15:21:31+00:00
> a presidential candidate can run with removing the Patriot Act as one of their campaign points

I've worked on privacy regulation. This would not get votes. The unfortunate fact is that the people most passionate about these issues are also tremendously lazy or extremely nihilistic. (Maybe it comes with the territory of not trusting institutions.)

Either way, privacy advocates can rarely muster even a dozen calls to electeds, let alone credibly threaten backing a primary opponent. The reason SOPA/PIPA worked is it animated a group of tech advocates beyond those with ideological opposition to surveillance.
by user34283 | 2025-09-12 15:21:54+00:00
Talk about rejecting nuance, but now the state is "all powerful" because you can't transact privately.

Yes, the state has control of finance and transactions. It always does.

Democracies are build on principles like Popular sovereignty, political equality, or the rule of law.

Private transactions or tax-free property isn't a democratic feature. Yes, it's that obvious.
by kbolino | 2025-09-12 15:21:55+00:00
In my experience, most code that operates on integers does not anticipate overflow or wraparound. So it is almost always guaranteed to produce wrong results when these conditions occur, and is only saved by the fact that usually they doesn't occur in practice.

It is odd to me that every major CPU instruction set has ALU codes to indicate when these conditions have occurred, and yet many programming languages ignore them entirely or make it hard to access them. Rust at least has the quartet of saturating, wrapping, checked, and unchecked arithmetic operations.
Show HN: An MCP Gateway to block the lethal trifecta
by 76SlashDolphin | 2025-09-12 15:22:00+00:00
Hi there, me and some friends were inspired by Simon Willison's recent post on the "lethal trifecta" (https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ ) and started building a gateway to defend against it.

The idea: instead of connecting an LLM directly to multiple MCP servers, you point them all through a Gateway.

The Gateway:

- Connects to each MCP server and inspects their tools + requirements

- Classifies tools along the "trifecta" axes (private data access, untrusted content, external comms)

- When all three conditions are about to align in a single session, the Gateway blocks the last step and tells the LLM to show a warning instead.

That way, before anything dangerous can happen, the user is nudged to review the situation in a web dashboard.

We'd love for the HN community to try it out: https://github.com/Edison-Watch/open-edison

Any feedback very welcome - we'll be around in the thread to answer questions.
by 4ggr0 | 2025-09-12 15:22:24+00:00
Problem could be economical. The rich want to get richer and more powerful, the poor and rest of the 99% have issues. Solving a lot of these issues would mean less wealth and power for the rich. So they need to create scapegoats. And racist stereotypes are probably the easiest way to do that. Close second are the people who think differently than [your_group].

helps that the same rich people have lots of influence over what the rest sees, hears and thinks.
by rmunn | 2025-09-12 15:22:55+00:00
Me, a tabletop RPG gamer and board gamer who hasn't played computer games in years (literally more than a decade): "Huh, that's interesting. Why are they rolling a 12-sided die between 1 and 3 times, choosing how many times it will be rolled by rolling a 6-sided die and dividing the number in half rounded up?"

Because before I clicked on the article (or the comments), that's the only sense I could make of the expression "d3d12" — rolling a d12, d3 times.
by Aurornis | 2025-09-12 15:23:05+00:00
> What is it that makes people in tech in their late 20s and 30s write about life lessons like an old sage?

Some of my friends tried going down the influencer path. Some on LinkedIn, one as an Substacker, others on Instagram.

Seeing their influencer content in contrast to their personal lives made it abundantly clear that they were using their influencer side as an outlet for their thoughts. As ideas or epiphanies came to them, they would jump to their influencer accounts and preach their realizations as if it was knowledge they had held for decades.

The optimistic angle is that they were using the outlet as a place for sharpening their thoughts. Thinking in public and putting your thoughts into words forces you to sharpen your ideas and make them more coherent.

The part that never sat well with me was how they were trying to preach it to others and present themselves as the wise, experienced guru sharing this advice to others when really they were just barely figuring it out.

The content can be helpful for others to sharpen their own thoughts or catch up on basic realizations about life, but for others it feels weird to see so much fanfare around basic social and workplace understandings.
by lukeschlather | 2025-09-12 15:23:11+00:00
What text are you referring to? The article has a screenshot of a tweet with a screenshot of an excerpt that seems fair to paraphrase as "anyone behaved in this sort of activity is suspicious." I don't see anything about a ban and if you're only using single-use addresses that seems probably not suspicious in absence of all the other things which if you're doing all of them, seem objectively like they can only be described as money laundering.
by labcomputer | 2025-09-12 15:24:15+00:00
Double jeopardy in the US means being prosecuted for the exact same crime more than once. It does not, however, prevent being prosecuted for similar or related crimes.

For instance, when local white juries would acquit white defendants in for lynching black people in the South, the federal government could (and did) try them again for the crime of violating the victim's civil rights. Same set of facts, but different crime. Not double jeopardy because they were being prosecuted for a different crime.

That doesn't work for legislation, because defining when a law is "the same" is basically impossible. If I change one word, is it the same? What if I "ship of Theseus" the law? At what point is it a different law?

Many legislatures ban members from repeatedly bring the same bill in the same session, which does require a similar determination. But that's a much weaker prohibition (even if the determination was wrong, you can always bring the law for a vote next year), and it is a necessary limitation to allow the legislature to get other work done without having members clog the process by bringing the same bill for a vote over and over again.
by ceejayoz | 2025-09-12 15:24:38+00:00
> Doctor wages contribute way more than silly insurance companies whose margins are lower single digits.

The numbers don't back this up. https://www.cms.gov/files/document/nations-health-dollar-whe...

> There should be a good career ladder for nurses to become actual doctors if they perform well on the job.

Again, that's most frequently called becoming a nurse practitioner.
by timr | 2025-09-12 15:24:56+00:00
You're describing a scenario where you bought the product without knowing the price, and were shocked by the additional bill(s) you got after the fact.

At what point in your story were you able to comparison shop for a cheaper option? I know you said you chose a more expensive option, which is always your prerogative, but how many other providers did you evaluate before you made that decision?
by diggan | 2025-09-12 15:25:36+00:00
> Why does it seem like phishing is popular again?

Was it ever not popular? Looking at my spam box, I receive countless of phishing attempts per week, and doing some quick queries of the total count over time, it seems to more or less been the same for the last 2-3 years at the very least.

I'm not sure why it's such big news all of a sudden, probably because it recently succeeded against a developer of some popular npm packages?

I think most people either have the phishing emails flagged, so they never see them. The ones that get seen, get ignored as obvious phishing. And for the ones that click the link, their password manager would stop them from entering their detail. And then you have the final 0.0001% who never protected themselves, and were tired/stressed at that very moment, and fell for it.

So I guess ultimately it's bound to become news every now and then, until everyone finally got the memo to get a proper password manager that don't show accounts that don't belong to the domain.
by tormeh | 2025-09-12 15:25:37+00:00
Apparently (can't be bothered to fact check this) the nazis liked having parades in the dark because it was easier to propagate the idea of the nazi ubermensch when you couldn't see that the dedicated members of the nazi party were generally on the uglier side of average. As you'd expect of dissatisfied radicals, really. Probably same reason there's a stereotype of right-wing people on social media having a profile picture of themselves in a car with sunglasses on.

Anyway, as stupid as this is, Americans are generally literate, with access to unadulterated messages from the other side of the world. Imagine how stupid things were when 95% were illiterate and all information passed through a giant game of telephone before it arrived to you.
by nick_ | 2025-09-12 15:25:43+00:00
Were they though? Or, was that a single, unverified bulletin put out by one cop?

The engravings have nothing to do with "transgender and antifa ideology". They are all "online" troll phrases/codes.

EDIT: The ATF has apparently subpoenaed Steven Crowder for posting the claim you are referring to: https://x.com/scrowder/status/1966236010381193388
by zukzuk | 2025-09-12 15:26:09+00:00
We have two unavoidable necessities in life — food and healthcare (and housing, but i’ll leave that out because it’s an odd fit in this analogy).

The food system is basically a free market (with some weak safety regulations). The apparent end-state of this free market that America has arrived at is tragic. Sure, people like me are free to select healthy, nutritious food at reasonable prices, but at a population level, 70% are overweight and 30% are obese, with all the risk and disease that comes with that.

This is where free markets (in necessary goods) tend to end up. Perfect for ensuring the concentration of capital, disastrous for the average consumer (and never mind the “externalities“…)
by etchalon | 2025-09-12 15:26:28+00:00
It's not just specialists that are expensive, though. The ER is expensive. You cannot price compare during a medical crisis.

It's also weird to think that someone with a rare, degenerative illness should have to evaluate whether their quality or length of life is "worth" the money that a specific specialist will cost.

This isn't cosmetic surgery comparison shopping. This is "this Doctor has experience with my rare neurological condition, has published papers on it, and has shown success in designing care plans for people like me."
by palmfacehn | 2025-09-12 15:26:35+00:00
> Lutnick said an investment committee will suggest projects to fund through Japan's cash pile.

An interesting twist on the theme of state capitalism. A planning committee will direct the funds of a 3rd party state, in exchange for "less bad" tariff rates.

Aside of a few recalcitrants, neither party is willing to defend laissez-faire in any form. Whether this latest effort at central planning succeeds or fails, the opposition will describe it as a failure of "capitalism". It isn't exactly clear what that term means anymore, beyond a vague image of monocled men chomping at cigars while wearing excessively tall stovepipe hats.
by renewiltord | 2025-09-12 15:26:49+00:00
It’s important to follow due process. We need more checks and balances, not fewer. Ideally, any accusations like this should first go through a careful examination by a jury of one’s peers rather than just being posted willy nilly.

We need to follow the process. And the process should be extensive. This is a problem of not enough process. Ideally, we could have more.
by kace91 | 2025-09-12 15:27:03+00:00
>Is this kind of thinking normal?

Sure. Haven’t you ever met someone who had a bad teacher and now claim they’re not good with numbers or languages?

We usually get comments like “oh you are smart!” when we succeed immediately at school. This is damaging, because it rewards current state rather than progress - the kid who doesn’t succeed at once assumes it’s not their thing, better to try something else.

The opposite is also true, after thousands of hours learning to draw people will get told “wow you’re so naturally talented!”, which accidentally is a dismissal of their effort.

I’m not saying talent doesn’t exist, but I’d go as far as to say it doesn’t matter much for non-elite settings - yet we seriously undervalue practice in the west.
by rkomorn | 2025-09-12 15:27:09+00:00
My out of pocket pre-insurance costs in Portugal are so low that I sometimes forget I still need to file for reimbursement with my private insurance provider. My copays on certain plans in the US were higher than this.

There's no way the cost difference (often literally 10x+) in private healthcare with the US can be explained by anything other than "US prices are actually total bullshit".
by banku_brougham | 2025-09-12 15:27:25+00:00
>I feel like I can't possibly live in the stupidest era in world history.

Your statistical intuition is sound, and while there are many historical sources describing very stupid events (VSE) dating as far back as recorded history, it is difficult to appreciate the outer bounds of the stupidity range because what has been written is a small fraction of the history that people have lived for at least 100,000 years.

So while I feel we are living in the stupidest era in history (the SEIH), I must conclude that we don't.
by HexDecOctBin | 2025-09-12 15:27:29+00:00
> otherwise they would still be wondering what OpenGL vNext should look like.

And the world would have been a better place. All we needed in OpenGL 5 was a thread-safe API with encapsulated state and more work on AZDO and DSA. Now, everyone has to be a driver developer. And new extensions are released one-by-one to make Vulkan just a little more like what OpenGL 5 should have been in the first place. Maybe in 10 more years we'll get there.
by mattlutze | 2025-09-12 15:27:46+00:00
That's the benefit and frustration of the democratic or representative democratic process.

Balance access to governance with fairness, and accept that you will never always get your way.

Similar to this, indeed some kind of fair and predictable cooling off period for a piece of legislation ensures the governing body isn't frozen in one influential faction's obsessions, while also allowing the voice of the people that faction represents to still be heard.

But exponential backoff feels too open to be gamed by countervailing factions. Some small period of time within a session however could make sense.
by ceejayoz | 2025-09-12 15:28:08+00:00
Go on, give us the right figures, then.

The first chart includes "private healthcare insurance" as an input, so I'm pretty sure you're wrong.

The $4.9 trillion detailed in this chart is "the official [estimate] of total health care spending in the United States". https://www.cms.gov/data-research/statistics-trends-and-repo...
by dansmith1919 | 2025-09-12 15:28:10+00:00
> The part that never sat well with me was how they were trying to preach it to others and present themselves as the wise, experienced guru sharing this advice to others when really they were just barely figuring it out.

Honestly, you probably have to bring it like this if you want to generate a following. I guess people like it when someone just hands them a truth in a confident enough way.
by zerkten | 2025-09-12 15:28:11+00:00
Possibly, but this not unreasonable for regular employees. They are not paid enough to deal with the consequences of making a mistake in a low volume situation.

If they go off-piste, even when that is a valid action, then they are likely going to be penalized by their employer's compliance department. That's because that piece of bureaucracy is still required at the next stage of bureaucracy. Now level 2's life is harder. It's best just to ignore and move on. There will always be some non-zero failure rate like this as long as bureaucracies exist.
by WesolyKubeczek | 2025-09-12 15:28:16+00:00
When you grab a domain which is plausibly very similar to the legit domain the organization you work with is using, you can forge emails that will make your email client show all sorts of “verification passed” badges next to them.

You can further appeal to developers’ geeky hearts by not making language mistakes and actually using verbiage present in real emails as sent by them.

You can exploit recent supply chain attacks and the sense of urgency and panic that developer blogs have created by pressing for even more urgency.

Seems like this does work. Don’t worry, when they actually target you, you’ll be caught.
by doganugurlu | 2025-09-12 15:28:16+00:00
I think you are conflating 2 things: - ability to privately give money to someone (mechanism is irrelevant, by hand or by way of a blockchain) - self-custody risks for uninformed users

The first one is the privacy argument.

Would you be comfortable if you’re not allowed to give the cash in your pocket to someone without someone watching over? If the answer is no, you are pro privacy for financial transactions.

Cash has the privacy feature as a default. You can argue that 3rd parties that help you send cash don’t have to offer any privacy, but BTC isn’t that, and forcing it to be that way is an attack on privacy.
by LambdaComplex | 2025-09-12 15:28:22+00:00
> Increase nurses, allow them to get promoted to doctors.

I think this sentence shows that you don't really understand the difference between the two jobs. Nurses and physicians have wildly different training/education. There are things about the body that any first year medical student could tell you, that nurses never learn even after decades of experience (because they don't need to).
by madkangas | 2025-09-12 15:29:07+00:00
Thank you for writing this. Your point about "quicker deterioration of local environments" is thought-provoking.

My key technical complaint about LLMs to date is the general inability to add substantial local context. How can I make it understand my business, my processes, my approach to the market? Can I retrain it? Or make it understand my data warehouse?

I think you are explaining why LLM providers don't care about solving my concerns, generally speaking. This is sobering.
by graeme | 2025-09-12 15:29:20+00:00
>I’m fine with apple looking to exit the market and/or harm their product rather than comply.

It's not clear to me to what extent you disagreed with what I wrote. But, on this point I should point out that every time Apple holds back a feature citing the DMA there is much complaint in Europe.

So regardless of what you think it seems a lot of people do care. You appear to have a better understanding of the law: Apple can bring in a feature if all can use it or they can withhold the feature.
by Analemma_ | 2025-09-12 15:29:46+00:00
Yes and no: I've asked questions like this in interviews, and I'd count it as a plus if the candidate reached for a constraint solver. They're criminally underused in real-world software engineering and this would show the candidate probably knows how to get the right answer faster instead of wasting a bunch of time.

Now, if they did answer with a constraint solver, I'd probably ask some followup whiteboard questions to make sure they do actually know how to code. But just giving a constraint solver as an answer definitely wouldn't be bad.