MurphyA/hacker-news huggingface dataset:
by d4mi3n | 2025-09-09 18:51:52+00:00
Oh, absolutely. There are some ways to avoid this--customer managed encyrption keys, for example--but there will always be some kind of trade-off. The less an EDR (endpoint detection & response) tool can see, the less useful it is. Going with a customer managed encryption approach means the customer is then on the hook for watching and alerting on suspicious activity. Some orgs have the capacity and expertise to do this. Many do not. It often comes down to deciding if you have a budget to do this yourself to a level you and an auditor/customer is comfortable with (and proving it) or outsourcing to a known and trusted expert.

EDIT: For additional context, I'd add that security/risk tradeoffs happen all the time. In practice trusting Huntress isn't too different than trusting NPM with an engineer that has root access to their machine or any kind of centralized IT provisioning/patching setup.
by kjkjadksj | 2025-09-09 18:51:58+00:00
The issue with the camera in newer iphones is that it uses an Ai engine to smooth things and add details that aren’t there.

If you want reference tier photos for documenting family history, modern mirrorless is better. DSLR from 10-15 years ago is also still great in all but the most challenging light conditions, where you could simply use a flash.
by qianli_cs | 2025-09-09 18:52:24+00:00
Thanks for sharing your insights! You nailed the key tradeoffs of most durable workflow systems. The callback-style programming model is exactly the pain point we aim to solve with DBOS.

Instead of forcing you into a custom async runtime, DBOS lets you keep writing normal functions (this is an example in Python):

@DBOS.workflow() def do_thing(foo): return bar # You can still call the workflow function like this: result = do_thing(fooInput)

Under the hood, DBOS checkpoints inputs/outputs so it can recover after failure, but you don't have to restructure your code around callbacks. In Python and Java we use decorators/annotations so registration feels natural, while in Go/TypeScript there's a lightweight one-time registration step. Either way, you keep the synchronous call style you'd expect.

On top of that, DBOS also supports running workflows asynchronously or through queues, so you can start with a simple function call and later scale out to async/queued execution without changing your code. That's what the article was leading into.
by microtonal | 2025-09-09 18:52:27+00:00
I think iPhone 17 is the first worthy upgrade to the base model in years, LPTO is a huge upgrade to the aging pre-iPhone 17 screen. The difference between Pro and non-Pro is pretty thin this year. I currently have a 16 Pro, might upgrade, but mostly because models are typically shifted through our family (so everyone gets an upgrade).
by r0fl | 2025-09-09 18:52:28+00:00
Phones are used to consume content. Bigger screens make consuming content better. Therefore smaller screens do not sell well.

The sales back up my statements.

Yes I romanticize about an iPhone 17 mini pro but in the end I like being able to watch some downloaded content on a plane without having to bring an iPad from time to time and I'm not going to do that on a tiny screen.
by toast0 | 2025-09-09 18:52:29+00:00
Most of my circle seems to like that crap. You can opt out, all of the carriers have prepaid offerings with much lower rates and a lot less financing. Maybe you get less data priority, almost certainly you get a lower tier of customer service, but those are ok tradeoffs for me. If you want to save more money, you can go to former MVNOs now owned by the carrier they run on or actually independent MVNOs. https://prepaidcompare.net/ seems like a good place to compare plans. They also have deals listings if you want to have fun with subsidy locked phones.
by babaceca | 2025-09-09 18:53:01+00:00
Reality isn't on your side.

1. A lot of people use the old C standards. 2. Not a lot of people use the new ones. 3. A lot of useful software is written in C. 4. Not a lot of useful software is written in any of the other languages you've listed in this conversation, despite the fact that you can hardly call them "new" at this point.

I'm done with you, I'll leave you to puzzle out the obvious conclusion of these 4 points.

You write software your way, I'll write it mine, and in 10 years we can check our homework. The first 10 years of Rust haven't really given us any results software-wise, but I'm sure with language design powerhouses such as yourself on the case, and just a few more pieces of syntax sugar, you can turn it around.
by strbean | 2025-09-09 18:53:03+00:00
> We still use VIM.

VIM has autocomplete nowadays old man! ;)

No excuse to use a language that has the syntax of "get (things...) from (thing)" and make it impossible contextually to know what the possible (things...) are until later.

> Your new fad NoSQL may or may not be relevant tomorrow.

NoSQL is a misnomer, this is exactly why the whole conversation I'd like to have is nearly impossible. SQL and relational aren't synonyms. The guys who co-opted the name NoSQL to mean "non-relational DBs" really screwed us.

It's like someone created a movement called "No-C++" and defined it to mean "we are only going to use programming languages that run in an interpreter, no bare metal!" Then someone comes along suggesting the ideas behind Rust etc. and everyone argues against it by saying "No-C++ is dumb, sometimes you need to run on the bare metal!"

That's before you even encounter the people who firmly claim that SQL and the relational model are one and the same, and there is no conceivable other way to represent it. Which I regularly do encounter here on HN.
by OutOfHere | 2025-09-09 18:53:23+00:00
Meanwhile, Google is doing all it can to weaken Android safety by withholding images and patches, also by failing to fully segregate applications from each other. The evidence is linked below:

(1) AOSP isn't dead, but Google just landed a huge blow to custom ROM developers: https://www.androidauthority.com/google-not-killing-aosp-356...

(2) Privacy-Focused GrapheneOS Warns Google Is Locking Down Android: https://cyberinsider.com/privacy-focused-grapheneos-warns-go...

(3) GrapheneOS exposes Google's empty promises on Android security updates: https://piunikaweb.com/2025/09/08/grapheneos-google-security...
by com2kid | 2025-09-09 18:53:28+00:00
But that is dumb luck. Release an exploit, hope you can then gain further entry into a system at a company that is both high value and doesn't have any basic security practices in place.

That could have netted the attacker something much more valuable, but it is pure hit or miss and it requires more skill and patience for a payoff.

VS blast out some crypto stealing code and grab as many funds as possible before being found out.

> Lots of people/organisations are going to be complacent and leave you with valid credentials

You'd get non-root credentials on lots of dev machines, and likely some non-root credentials on prod machines, and possibly root access to some poorly configured machines.

Two factor is still in place, you only have whatever creds that NPM install was ran with. Plenty of the really high value prod targets may very well be on machines that don't even have publicly routable IPs.

With a large enough blast radius, this may have worked, but it wouldn't be guaranteed.
by dragonwriter | 2025-09-09 18:53:41+00:00
> Trump didn't fire the BLS head because the numbers were bad

Yes, in fact, he did.

> he fired them because the BLS has been cooking those numbers for 35 years or more!

He fired them because the numbers were bad. He also publicly stated what he described as his “opinion” that the reason that the numbers were bad was that they were “rigged” for partisan reasons, but he has provided no evidence that that ever occurred, and I have no idea where the 35 years claim comes from.
by some_guy_nobel | 2025-09-09 18:53:45+00:00
Courts have repeatedly held that the government cannot chill lawful protest activity by imposing undue surveillance or intimidation. Sure, there is no explicit “right to anonymity,” but the Supreme Court has recognized in cases like NAACP v. Alabama (1958) that forced disclosure of membership lists can violate First Amendment rights, because it deters participation and chills association.

Of course, the Fourth Amendment also has clauses against “unreasonable searches and seizures.” I'm not a constitutional lawyer, but it's easy to see, from modern cases like Carpenter v. United States (2018) (which limited warrantless cellphone location tracking) why this could be perceived poorly.

But the Constitution tries to ensure that risk doesn’t come from government retaliation against lawful expression. I would ask why you're so keen to allow it.
by prewett | 2025-09-09 18:54:01+00:00
> parents can give the economy their best

Surely parents should be giving their child(ren) the best, no?

Giving the economy your best only makes sense in Communism, and since that has never gone well, I'll assume that what was meant was "self-fulfillment via work" or "better standard of living". The first just seems like one of these modern lies. I'm neither a mother nor a woman, but I've never understood why women are so eager to go work. Work has never been particularly fulfilling, although I have generally more or less enjoyed it. I've met no father (or mother) who say they wished they had more time at work rather than their children. I have heard both fathers and mothers say that it is the most fulfilling part of their lives. The second is just prioritizing the self. I've never met a child who was excited that his/her parent(s) are working and/or making lots of money instead of being with them. I don't think a goal of career or comfort/wealth is compatible with flourishing children.

Second, are the children actually taken care of? Assuming everything is well-run, then sure, their physical needs and safety are taken care of. They aren't getting love from parents during that time. They aren't living in a loving community. Instead they are getting socialized into being atomized, like the rest of us, where loneliness is epidemic. I'm really thankful my mother stayed home with us. (She started teaching part-time once we all got into all-day school)
by belorn | 2025-09-09 18:54:02+00:00
Hydro is pretty great with a few caveats. Flooding remain a massive problem if there is a failure, as the world most deadliest power plant accident was a hydro power plant with a death toll between 26,000 to 240,000 people. An other major issue is the extinction of species, as is currently occurring in Europe and especially in the northern parts. There are technologies to allow for migrating fish to bypass hydro power plants without chopping them to bits, through the effectiveness of the bypass tend to work against the power output of the plant.
by diddid | 2025-09-09 18:54:16+00:00
You can’t in good faith say the root article was an “article about chip making” unless you didn’t read the article. I will only agree my tone was off but it was very much on topic and anyone who actually read the article would realize it’s political. I’ve learned often what HN is going for, which is often shallow group think, and I agree HN is better when it posts articles that are “about chip making” but this wasn’t one of them. The silver lining is at least we can still comment on this without the “system” making a “decision” that just ends the discussion immediately.
by const_cast | 2025-09-09 18:54:29+00:00
> What part of the constitution guarantees me the right to be anonymous while I protest?

The fourth amendment: unreasonable searches and seizures. This is an unreasonable search.

Also, protests aren't civil disobedience. Civil disobedience is civil disobedience. Protests are explicitly protected by the first amendment and you can protest all day long.
by bayindirh | 2025-09-09 18:54:30+00:00
On the other hand, they are adding tons of invisible yet useful features like auto OCR on PDFs, auto-transcription of audio files, a much better search, etc.

It's not suitable to store anything that sensitive, but for regular stuff, they are becoming a powerhouse, and the web app allows you to work very efficiently and fast.

I personally like Dropbox, and don't find the direction they're heading ill-advised.
by patapong | 2025-09-09 18:54:37+00:00
I am a big fan of dropbox and pay for their premium subscription, but I am sometimes a bit confused as to the direction they are taking. They still have the best sync engine and conceptual simplicity in my opinion, but since "File Request", none of their features have been useful for me, and mostly seem to have made the app more bloated. I am also sad at them shutting down the photo features, which I used.

I would love for them to implement:

- The ability to exclude folders from syncing - useful for .venv etc

- The ability to sync folders outside of the dropbox folder

- Instant hosting by sharing a link pointing to a folder with an index.html
by izacus | 2025-09-09 18:54:38+00:00
It's worth observing that when remoters talk about "productivity", they talk about their personal ability of chugging through tickets and not overall team productivity which includes a lot of teaching, mentoring, conversations and getting on the same page.

So yeah, what's happening is that senior folks "productivity" as they perceive it has risen while the output of whole teams over time suffered.
by jacobsenscott | 2025-09-09 18:54:39+00:00
This won't work - npm.* npmjs.* npmjs-help.* npm-help.* node.* js.* npmpackage.*. The list is endless.

You can't protect against people clicking links in emails in this way. You might say `npmjs-help.ph` is a phishy domain, but npmjs.help is a phishy domain and people clicked it anyway.
by microtonal | 2025-09-09 18:54:54+00:00
I have a Pixel 9 to check out where Android is standing and for GrapheneOS. Unfortunately Pixel OS still has pretty bad bugs all the time (oneUI is much more polished, but has other issues) and the Pixel 10 is really overpriced compared to the iPhone 17 (the Pixel 10 is more midrange than a flagship, even though it has a flagship price).
by n8cpdx | 2025-09-09 18:54:57+00:00
I agree that #1 is correct, and I try to practice this; and always for anything security related (update your password, update your 2FA, etc).

Still, I don’t understand how npmjs.help doesn’t immediately trigger red flags… it’s the perfect stereotype of an obvious scam domain. Maybe falling just short of npmjshelp.nigerianprince.net.
by tempfile | 2025-09-09 18:54:59+00:00
I was with you til the end, so now I need to ask what you really mean by "greedy jobs". I took it to mean jobs that are all-consuming, no fixed hours, high pressure, high stress. If that is what you mean then I seriously doubt your claim that there are few non-greedy jobs that contribute to the economy. The vast majority of jobs are non-greedy by this definition, unless the US has really regressed so far from Europe as to be unrecognisable.
by kotaKat | 2025-09-09 18:55:12+00:00
If I trade in my phone, I want my trade-in offer now. Instead, the full value of whatever trade-in deal provided is split over 36 months as bill credits.

While the new phone might actually be “free” in one of these promotions, it’s not, naturally, because you’ve been thrown into a 36 month installment agreement separate of the cellphone service they’ve sold you on (that they also claim is “price locked” while independently raising surcharges and other fees).
by johnisgood | 2025-09-09 18:55:17+00:00
Only if Rust did not have so much symbol soup... :/ It is a bit too much for me, personally. If you are accustomed to it, it is probably not a big deal for you anymore, but for someone who does not know Rust as well, it could be a deal-breaker, which is why I would still rather prefer reference implementations in C, not Rust. Do not hide things from me!
by deepGem | 2025-09-09 18:55:29+00:00
The earlier reports are intentionally more noisy because there is value is being fast and then revising later, and everyone who uses this data is aware of that.

I get it and yeah my tone is very exaggerated. I don't think anyone in BLS should be fired and whoever is suggesting that does not understand how public institutions work.

I am just curious why there is so much of a discrepancy. This has been pretty much the status quo in BLS for a long time. They issue numbers and then they revise them later. However, you'd expect the revision to be moderately within an error %age.

Also how will this retroactive change help everyone involved. Ok, the new job numbers reflect a gloomier past (or a more vibrant past) how is that even helping everyone who is so focused on 'what's going to happen tomorrow'.

I retract my stance about BLS being intentionally corrupt - that's uncalled for.
by ashf023 | 2025-09-09 18:55:37+00:00
Agreed it's missing that detail. I think it makes sense though that the durable queues shouldn't need strong consistency and transaction isolation, just durability, so the DBs can probably be sharded pretty arbitrarily, maybe operate in lower isolation modes, etc, whereas the DB they need to async writes to probably does need transaction isolation and all that. I'd appreciate if the article would confirm or deny my guess here!
by Someone | 2025-09-09 18:55:50+00:00
https://unicode.org/emoji/proposals.html has a list of factors for inclusion (example: “is legible and visibly distinctive”) and a list of factors for exclusion (example: “is overly specific”)

I don’t think Unicode.org has a nice list of rejected proposals, but examples are easily googled, for example https://charlottebuff.com/unicode/misc/rejected-emoji-propos...
by thevillagechief | 2025-09-09 18:55:53+00:00
I'm going to go ahead and say that the last 5 years did in fact show that journalists cannot be trusted. I will agree that random persons paying $20 obliterates what was already an embarrassingly low bar. Really, opening it up just expanded the pool of what was already just influencers/activists. And why did celebrities have the bluecheck? It's probably more useful as a verification mechanism.
by juanviera23 | 2025-09-09 18:56:07+00:00
Would you pay to gain the ability to create forecasting models?

Examples:

1. You’re building a airplane ticket booking platform, and want to offer users forecasts of when ticket prices will go up or down in the next 30 days.

2. You have a retail shop, and want to build an internal dashboard that forecasts how many items of each type you need to buy next week, given how many you sold in the last month

3. You’re building an real estate investment platform, and want it to notify users how real estate prices will change over the next 5 years (given sq. m., distance, location, etc.)

Problem:

You want to add forecasting to the app or platform you’re building

However, you don’t know enough to build and deploy a production-grade ML model

What if you could have a platform that could autonomously train and deploy ML models for you?

Solution:

We propose a vibe coding platform (like https://lovable.dev/ )

To empower everyday users to train and deploy machine learning models to production without needing to know anything about the field

Should we build it?
by inanutshellus | 2025-09-09 18:56:12+00:00
Really wish skintone+gender emoji variants weren't an option in Slack.

It's awkwardly personal in a way I don't want to think about at work.

It's inappropriate to broadcast my skintone so i can confirm "taco bell sounds good" in a thumbs up, or announce gender to say I'm investigating something with the manly/girly detective emoji, which then others click on, scowl, unclick, then must manually go find the other one if they want to join in...

When in professional settings (like Slack), "everyone's just a bright yellow smiley face" is much more professional and cohesive. (As professional as emojis can be, I suppose.)
by microtonal | 2025-09-09 18:56:55+00:00
I didn't pay attention for the non-Pro, but for the Pro they 'said' they give you 256GB for the price of last year's 256 GB. So it seems like another step in moving the prices up.

Edit: 16 Pro 128 GB was $999 at introduction iPhone 17 Pro 256 GB is $1099. Better for the non-Pro though - the 16 128 GB was $799, the 17 256 GB is also $799.
by lillecarl | 2025-09-09 18:56:58+00:00
There are barely any stay at home moms because it's socially detrimental, the ones who are are either social outcasts by lack of capability or religious oppression.

We should not subsidize stay at home moms or dad's because it's bad for society, if they can afford to do it or stretch their economy to do it for other reasons it's their bad choice, and we allow free choice even if it's bad, that's why cigarettes are still allowed.

I don't know who to look up, but if you have some suggestions I could look it up through ratsit.se
by kjkjadksj | 2025-09-09 18:57:27+00:00
What I found with screens going back to an old 1280px macbook screen when the retina was in the shop is that you quickly lose appreciation for quality when you don’t have an example next to you. This is why the Apple Store model is good for sales, you can dangle the new screens on an hdr wallpaper and its clear that it is different to the one you already have. But again, it only became an issue because one day you made it an issue.
by lazide | 2025-09-09 18:57:28+00:00
There are ~ 15 million unoccupied houses in the US [https://www.realtor.com/news/trends/states-with-most-vacant-...]. That we know about.

A desirable location will never have enough capacity. Regardless of how much building occurs. If you don’t believe me, look at NYC, Paris, etc, etc.

People move as close to a desirable location as they can afford. And often more.

Don’t get me wrong, rules set where and how bad the line is, but there is no realistic situation where everyone who wants to live in SF can, and can afford to, and it is anything like SF.
by deepGem | 2025-09-09 18:57:38+00:00
Create punishment system? Unless compaies report data back to BLS very fast, they pay big fee or are taxed higher. Small shops would hate it.

Or incentivize companies to report accurate data pretty fast. Payroll management systems can be plugged in real time, but that costs money and yeah small businesses are not going to be happy. So incentivization works better than punishment I think.
by bbor | 2025-09-09 18:57:39+00:00
In glad someone is excited for it!

I’ve done a bit of climbing, and I guess I’m just struggling to imagine using it… rocks falling is either not a big enough deal to text about (cause we’re all following safety guidelines by wearing helmets, right?), or way too big of a deal to make light of with an emoji. The latter case applies even more so in cases where the rocks hit buildings.

The only situations I can imagine are a) “im gonna be late, the road is blocked by rockfall” and b) “couldn’t go skiing this weekend, an avalanche closed the slope”. But maybe two is enough! And who knows, maybe it’ll be interpreted as “collapse” in general, which is broadly useful obviously.
by sharts | 2025-09-09 18:57:45+00:00
While sketchy and total crap move on MS. What recourse do employees really have?

MS likely consulted with their army of lawyers before pulling this.

Actions might be crappy but not illegal. Not a lawyer but employers are usually allowed to dictate the terms of the employment agreements and requiring someone to go into an office to work can be one of them. Even changing from permanent remote to onsite at a later time seems like another relatively protected decision.

Unless someone somewhere higher up is on the record saying something like “Oh yeah let’s make them come into the office to actually make it really crappy for them so they leave on their own” I doubt any reasonably reliable legal case can be made.