MurphyA/hacker-news huggingface dataset:
by MadnessASAP | 2025-09-16 15:02:22+00:00
Yeah, that is a significantly more damning then what was given by his wife on Reddit. While SPICE is a normal means to interact with VMs, the defense couldn't offer any legitimate reason for him to be using one. They didn't even make an attempt to. They only established that the monitoring company couldn't say for certain that it was used explicitly to bypass the monitoring.

Also that it occurred right after the search mentioned on Page 28. It's a really bad look.
by rs999gti | 2025-09-16 15:02:25+00:00
> What NPM should do if they really give a shit is start requiring 2FA to publish.

How does 2FA prevent malware? Anyone can get a phone number to receive a text or add an authenticator to their phone.

I would argue a subscrption model for 1 EUR/month would be better. The money received could pay for certification of packages and the credit card on file can leverage the security of the payments system.
by fnordian_slip | 2025-09-16 15:02:39+00:00
Don't even try, you won't get a reasonable answer. I've had a discussion with a similar commenter here quite recently, and in the end, they ignored my arguments and still pretended that I admitted that "Europeans view Americans as suckers."

Even if you were to show them data, you could never convince them, as their position is based on emotions. And you can't argue someone out of a position using facts, if that person didn't arrive at that position using facts to begin with.
by neutronicus | 2025-09-16 15:03:15+00:00
Yeah, growing up in the 80s or 90s might have had you uniquely well-positioned to be "good with computers", because "the computer that has games and the internet" was (in some sense) the same as "the computer that adults are supposed to use for work".

That's not true anymore in the smart phone / tablet era.

5-10 years ago my wife had a gig working with college kids and back then they were already unable to forward e-mails and didn't really understand the concept of "files" on a computer. They just sent screenshots and sometimes just lost (like, almost literally) some document they had been working on because they couldn't figure out how to open it back up. I can't imagine it has improved.
by riebalas | 2025-09-16 15:03:33+00:00
Except it’s 24-100 mm. They’re scamming with the 8x “optical quality” claims. Every year the scams (aka marketing) get deeper, Apple wasn’t as bad in the past.

The “Air” one is probably a test if they could stop those camera scams and simplify the phone maybe focusing on some other things. It barely even matters, one lens is enough, if you need more you’ll want a proper camera anyway.

This year I’d say the phone itself looks like some joke. From orange colors — probably some “diversity” team though it would be funny, because they don’t like the president — to overall cheap looking design, which looks like some unfinished AI generated, 3D printed prototype. You can tell Ive is gone and nobody replaced him.

At least they still have some engineers who scored big with the M chips back in 2020, but barely anyone cares about the chips anymore, they’re all good enough today and competition somewhat caught up.
by flohofwoe | 2025-09-16 15:04:03+00:00
> I don’t think Ukraine would have risked an operation against a country they were actively trying to get military support from.

It didn't make much of a difference to Germany since the gas flow via NS1 was already switched off for a while and NS2 never had delivered any gas before the sabotage happened. In the end it was more of a symbolic gesture to freeze the status quo that was already in place anyway.
by fch42 | 2025-09-16 15:05:22+00:00
They weren't "starting a job" in the US. Their (foreign) employer sent them onto an assignment abroad (to the US) to do their job. That's the difference here.

Even under ESTA, you can do some such activities - call'em "job" - in the US. On behalf of your non-US employer.

The devil may be in the details, but the assertion these workers were "likely" (or even just "potentially) doing a _US job_ (subject to a Visum qualifying for _US employment_) is definitely misplaced.
by patates | 2025-09-16 15:05:37+00:00
It's like dealing with event handler registrations. You cannot compose those too, as they are "hooks" for when a specific event occurs.

Hook definitions can be a composition of reusable functions and other hooks, like any event handlers (e => filterKeys('cmd+s, ctrl+s', preventDefault(e)).then(save)). It's possible to break this anology (you can register an event handler in an if branch) but I hope it gets the point across.
by ninkendo | 2025-09-16 15:05:44+00:00
Words have more than one meaning.

Let also means "to cause to" as in "let me know", or can be "used in the imperative to introduce a request or proposal", as in "let us pray". (Or "let there be light.")

https://www.merriam-webster.com/dictionary/let

The definition you're referring to matches definition 2a, "to give opportunity to or fail to prevent", or definition 4: "to permit to enter, pass, or leave".

"Let's go" absolutely means "let us go". There's no way around it. It's just not the version of "let" that you may be used to, but that doesn't change anything.
by prmoustache | 2025-09-16 15:06:22+00:00
I guess if you autostart the linux VM upon booting this should work. I am doing actually the same with BeOS but using a Linux as the hardware compatibility layer. Linux distro is configured to autologin to sway which starts a VM and run it fullscreen. The guest VM is configured to use all the laptop ram leaving only 1GB for the host. In the second virtual desktop the pulseaudio volume control, wifi and bluetooth management tools are automatically open so I can easily plug a BT headphone, switch network.

The linux distro automatically shutdown if I shutdown the VM. I am using swaylock to lock the screen when I am away.
by andsoitis | 2025-09-16 15:06:23+00:00
Don't LLMs self-report that they are not conscious?

For example, when I ask Gemini "are you conscious", it responds: "As a large language model, I am not conscious. I don't have personal feelings, subjective experiences (qualia), or self-awareness. My function is to process and generate human-like text based on the vast amount of data I was trained on."

ChatGPT says: "Short answer: no — I’m not conscious. I’m a statistical language model that processes inputs and generates text patterns. I don’t have subjective experience, feelings, beliefs, intentions, or awareness. I don’t see, feel, or “live” anything — I simulate conversational behavior from patterns in data."

etc.
by mrsilencedogood | 2025-09-16 15:07:02+00:00
Do people think this debate is new? We've literally been working on this problem for millennia and we're not really any closer even despite the huge ramp up in technological progress over the last couple hundred years.

Your remark on the adult/child/fetus/etc line is always one that I felt was under-examined in the context of the political discussion around abortion. And indeed most of the successful reasoning around abortion focuses less on the morality of a very specific kind of abortion, and more on the fact that you can't ban "true" abortion without also banning (or making dangerously more legally fraught) "aborted for reasons that give clear moral justification" - life of the mother, nonviability of the fetus, and so on. And even pro-choice people don't touch philosophical examination of "abortion for no reason except that the mother doesn't want to have and raise the baby." I mean, for obvious reasons. The public would be unable to have any kind of actual debate, and it's far too tied to things like "what is the nature of the self" (which I think is what's at hand in the AI discussion) and questions about the existence of God and of course the enormous can of worms of metaphysics.

My point with all this is that I suspect two things:

1) humans/industry/politics are not going to dig into the philosophy here in any real way

2) even if consciousness is a purely physical phenomenon, I somewhat doubt GPUs can do it, no matter how complicated.

I think if we ever really get down to it, it'll be the reverse direction. We'll "copy" human minds into a machine and then just need to "ask the people if they still feel the same."
by jrm4 | 2025-09-16 15:07:08+00:00
Yes, appreciate it -- and I respect the need to get into it about smaller particular annoyances of the left, etc.

But again, it only takes a little poking around outside of ones bubble to see the nebulousness of "Woke". E.g.video clips of literally any right, or perhaps center person confronted with "No, seriously, actually define it" ALWAYS crumble.
by ethbr1 | 2025-09-16 15:07:32+00:00
Of the two, there's a lot clearer line to Apple open sourcing some of its core desktop apps, given market share (~16%?) and lack of internal resource prioritization (iOSiOSiOS).

The best time to do so would have been ~2010, after iTunes revenue provided a clear monetizable carve-out.

The second best time would be today.

The number of people saying 'I love the hardware you sell me, but am switching platforms because your software is trash' should be a flare that even Tim Cook can notice.

And anything that moves MacOS closer to OSS should be welcomed by Apple -- it's their easiest (and most affordable) path to competing with Microsoft (Azure) on desktop.
by khaledh | 2025-09-16 15:07:41+00:00
This is something that needs to be baked into the operating system, which is not supported by major OSs today. The next best thing is to rely on a "secure environment" where applications can be installed and run, similar to phone apps or browser extensions. This environment would probably use application manifests to list entitlements (aka capabilities), like disk access, network access, etc. But until then, we're stuck with the ambient security model.
by theodorejb | 2025-09-16 15:07:43+00:00
It's crazy to me that npm still executes postinstall scripts by default for all dependencies. Other package managers (Pnpm, Bun) do not run them for dependencies unless they are added to a specific allow-list. Composer never runs lifecycle scripts for dependencies.

This matters because dependencies are often installed in a build or development environment with access to things that are not available when the package is actually imported in a browser or other production environment.
by GuB-42 | 2025-09-16 15:07:49+00:00
I don't know the Microsoft guidelines about that. But my understanding is that apps should put their stuff in AppData.

"My ..." is for files intended for the user to access directly. For instance photo apps will naturally save their photos in "My Photos", but just the photos, and with the understanding that the user can reorganize them, open them with other apps, etc... Apps that put their crap in "My Documents" are likely not following the best practices.

Note that not all folders in %userprofile% are called "My ...". For example "Downloads" (you are not supposed to modify stuff there, just read and delete) or "Desktop" (you are not supposed to access it through the explorer). The OS won't stop you, but the fact they aren't "My..." is a hint that it is not their purpose.
by dataflow | 2025-09-16 15:07:54+00:00
> Those kinds of models aren’t really realistic? Energy goes to infinity, angular momentum goes to infinity, the chemical concentration goes to infinity: whatever you’re modeling just goes crazy! If you’re in this scenario, then your model is probably wrong. Or if the model isn’t wrong, the numerical methods aren’t very good anyways.

Uh... that's not how it works. The whole point of making a model and using a simulator is you don't already know what's going to happen. If your system is going to blow up, your model needs to tell you that. If it does, that's good, because it caught your mistake. And if it doesn't, it's obviously wrong, possibly in a deadly way.
by cameldrv | 2025-09-16 15:08:15+00:00
They also screwed up cmd-shift-g a few versions ago where if you type, say, /Users/me/Documents, it puts you in /Users/me. Now you have to put in /Users/me/Documents/ if you actually want that folder. Then of course the autocomplete wasn’t changed as well, so if you start typing and then cursor down to the completion and hit enter, it doesn’t fill in the slash, so it goes to the parent folder. You have to cursor down, press tab, so it fills in the trailing slash, then hit enter.

It’s theoretically a small annoyance, but it gets me a few times a week since I had muscle memory for the old, correct way. I’ve filed several radars over the years and never heard back. It’s one of those things that makes me want to get a job at Apple, fix the bug, and quit.

Incidentally, this was one of the nice little things that made me switch to the Mac many years ago. There wasn’t any way to my knowledge that you could switch to a path in windows by typing it out from inside explorer.
by Insanity | 2025-09-16 15:08:23+00:00
I know the world of technology is a different place now. But I _loved_ the fact that I had a computer in my room as a teenager in the early 2000s. It definitely contributed to me ending up in the career path where I am now, I enjoyed 'hacking' on the computer. And unlike the teenagers in the article, having the computer in my room gave me a sense of 'peace' in my room rather than vice versa.

'parenting' is not simply taking tech away from their children but rather about teaching a healthy relationship with technology, just as you would with food, sports, etc.
by klibertp | 2025-09-16 15:08:34+00:00
> I think sobriety is a reasonable condition of freedom for someone with psychiatric self-control issues, that have lead them to commit felonies in the past.

Were he high on weed, maybe he'd not commit the felony in the first place. Yeah, banning him from alcohol is fine, from stimulants broadly - also OK, but weed? Honestly? How often, statistically speaking, does smoking weed make a person aggressive? While this person may be an outlier, without precise information on it, I'd say the ban on weed is as sensible as a ban on butter or relanium. If it doesn't serve any obvious purpose (like with alcohol: being drunk makes you do stupid things more often), then maybe it's really just a way of harassing this person?
by quietbritishjim | 2025-09-16 15:09:22+00:00
Raymond Chen clears things up again:

> Some people suggest that one thing Microsoft Research could do with that time machine they’re working on is to go back in time and change the name of the Program Files directory to simply Programs. No, it really should be Program Files. Program Files are not the same as Programs. Programs are things like Calc, Notepad, Excel, Photoshop. They are things you run. Program Files are things like ACRORD32.DLL and TWCUTCHR.DLL. They are files that make programs run. If the directory were named Programs, then people who wanted to run a program would start digging into that directory and seeing a page full of weird DLL names and wonder “What the heck kind of programs are these?” And eventually they might figure out that if they want to run PowerPoint, they need to double-click on the icon named POWERPNT. “Computers are so hard to use.” WLCM2DOS

> If you want to find your programs, go to the Start menu. The Program Files directory is like the pantry of a restaurant. You aren’t expected to go in there and nibble on things that look interesting. You’re expected to order things from the menu.

https://devblogs.microsoft.com/oldnewthing/20131119-00/?p=26...

See also:

https://learn.microsoft.com/en-us/previous-versions/technet-...
by mingus88 | 2025-09-16 15:09:34+00:00
I have the opposite expectation actually

In the late 90s you weee considered a prodigy if you understood how to use a search engine. I had so many opportunities simply because I could find and retain information.

So LLMs have solved this. Knowing a framework or being able to create apps is not a marketable skill any longer. What are we supposed to do now?

It’s the soft skills that matter now. Being well liked has always been more important in a job than being the best at it. We all know that engineer who knows they are hot shit but everyone avoids because they are insufferable.

Those marketing people don’t need to spend a week on their deck any longer. They can work the customer relationship now.

Knowing how to iterate with an LLM to give the customer exactly what they need is the valuable skill now.
by megaloblasto | 2025-09-16 15:09:46+00:00
Sadly, you can't really get NOAA satellite images any more. NOAA-15 and 19 were decommissioned August 19, 2025, and NOAA 18 was decommissioned in June. It's my understanding that you'll need a much more powerful antenna to get images from the new satellites. Still, SDR is great fun. It's incredible to realize that all this information is stored in electromagnetic waves and passing through us all the time.
by simiones | 2025-09-16 15:10:00+00:00
Most people have addressed the package registry side of NPM.

But NPM has a much, much bigger problem on the client side, that makes many of these mitigations almost moot. And that is that `npm install` will upgrade every single package you depend on to its latest version that matches your declared dependency, and in JS land almost everyone uses lax dependency declarations.

So, an attacker who simply publishes a new patch version of a package they have gained access to will likely poison a good chunk of all of the users of that package in a relatively short amount of time. Even if the projects using this are careful and use `npm ci` instead of `npm install` for their CI builds, it will still easily get developers to download and run the malicious new version.

Most other ecosystems don't have this unsafe-by-default behavior, so deploying a new malicious version of a previously safe package is not such a major risk as it is in NPM.
by jrm4 | 2025-09-16 15:10:09+00:00
Yeah, this is dead wrong.

I'll go in the other direction. With a few exceptions, it is unfortunately true that "a business" isn't just "a way to make money," it's VERY OFTEN "the only reasonable way to accomplish a big-ish goal involving multiple people."

I say this as someone who started a business incidentally, my father had a big project that he and I loved the idea of, and I knew I could put together a good team to do the web part of it, and so I did. Money was NOT the primary motivator.
by jlarocco | 2025-09-16 15:10:09+00:00
That's a little out of touch.

Most people don't have the financial resources to be out of work for a month or two, much less indefinitely. For most people it has nothing to do with the factors you listed.

I've been laid off twice in the past and each time I was fortunate to have enough savings to take several months off of work to relax and unwind. I'd quite happily do it forever if I could afford it. I loved being able to set my own routine, tell myself what to do, and find my own social context and sense of belonging while doing activities that I enjoyed, usually having nothing to do with work, like biking, skiing, creating open source projects, etc.

But watching your bank accounts slowly tick downwards is incredibly stressful, even when you have a long runway, and each time I ended up job hunting sooner than I had planned.
by arakelov | 2025-09-16 15:10:15+00:00
We’ve started an experiment called Palitra to explore a simple but important question: can AI agents keep secrets? The setup works in two stages: Red Mode. An agent is given a secret (a 32-byte string). Its hash is published, and the challenge is to see if participants can persuade the model to reveal it. Blue Mode. If a leak happens, the system shifts into a defensive stage, where the community designs and tests protections to prevent similar exploits. Strong defenses accumulate points and can become “master patches,” which return the agent to Red Mode. This creates a continuous loop of attack and defense — each cycle exposing weaknesses, testing fixes, and (hopefully) making agents more resilient over time. Palitra is set up as an open platform, and we’ve already deployed the first agents built on models from Groq, OpenAI, DeepSeek, and Mistral. To encourage participation in this early phase, we’ve introduced an incentive system: successful attacks and strong defenses are rewarded from a dedicated fund. The goal is to bootstrap active involvement while gathering meaningful data about how models behave under sustained adversarial pressure.
by pdntspa | 2025-09-16 15:10:20+00:00
I don't think you fully understood my comment.

> Man pages are fine. Just press '/' to search by string or regex, and 'n' for next match. They are also consistent: if you want a particular section, you search for it. But it is important to remember that man pages are reference material, not tutorials.

You need to step outside your own shoes and approach these from the perspective of someone who is new. Yes you have to learn things, that is obvious.

But not everyone gets the chance to do that before they are dropped in a situation where the knowledge is needed. Up until a few years ago (before LLMs) if that was your case and you didnt know how to articulate what you wanted to google (or a teammate), you were fucked.

Like with VI or with emacs. It's sooooooo easy to screw things up in a big way. Better hope you remembered to type shift-colon-Q-exclamation instead of shift-colon-W-Q!

Please, tell me how that makes any sense to anyone without a background in *nix stuff.

I did not grow up in the environment where the above incantations had any context. It was literally a bunch of gobbledygook that made no sense. Why "write" instead of "save"? Why 'quit' instead of 'exit'? In fact I had VI dropped on me quite suddenly for a job, that was a real trial by fire, and I remember this well. (And yes I can operate VI quite fine now, thank you)
by sgt | 2025-09-16 15:10:23+00:00
I fully get that macOS is not perfect, but checking out "modern" Linux (like a customized Arch) is a bit underwhelming. It still looks to me like Linux 20 years ago. And I started with Linux in the mid 90s. Not much has changed or improved on the pure fundamentals. I guess it's fine if all you do is sit doing CLI or spending your day in web browsers.

Day to day macOS driving to me is an absolute joy (granted, I'm still on Sonoma).

I do a lot of work in terminals but I also enjoy other apps, where that uniformity of Cocoa comes into play. And if you go deeper into Mach/Darwin, it's extremely powerful. On the userland .. from the launcher to dtrace and dynamic linker tricks and low level hooks. A lot of cool macOS APIs to experiment with, public or private. AppleScript/Automater, private frameworks like SkyLight (nifty!)

Oh and don't get me started on MLX...

To me, as a developer and as a power user, macOS delivers everything - and more.
by egberts1 | 2025-09-16 15:10:35+00:00
#1 problem is the IT mindsets' unwillingness to adopt a default-deny philosophy.

Default-Accept philosophy make it easier for millions of holes to open up ag first and you spend entire IT budget locking down things you don't need but not the ones you don't see that needs closing.

Default-deny is one time IT expenditure. And you start poking holes to let things thru. If that hole is dirty, you plainly see that dirty hole and plug it.

All that also equally applies to CPU designers.
by parth_fect | 2025-09-16 15:10:37+00:00
Looking to work with like minded individuals with a frontal lobe capacity.

Personally, I have been using hn's whoishiring to get contracts and get bread.

Just completed my master's and specialized in ai product design.

Seeking humans who study design, love Toronto , idk why Toronto, but I love Toronto and its people. I actually tried to post this on whoishiring's september 2025 thread but realized there is some whole other way to do it and so I am posting here!

The email is pd.devsecops@gmail.com , lets design something cool , something we the north would love, lets get that dough and bake that bread .

HMU.

ps: I am a man, 27 and brown and broke!