MurphyA/hacker-news huggingface dataset:
by burnt-resistor | 2025-09-29 06:05:02+00:00
Yep. Defense in depth. Port-based VLAN at a minimum. Only total morons place their web-based and ssh remote/KVM management directly on the internet. Note that many Supermicro boards permit (as an option) to use the regular on-board NICs reducing the need to install a second or third cable for the BMC only adapter on mixed networks. Generally, one shouldn't be placing any box of any sort directly on the 'net unless it's hardened and behind sufficient network/application filtering.
by hakfoo | 2025-09-29 06:05:09+00:00
Gigabyte made a lot of marketing hay about it, but I think it was popular for a while. I think their version was some sort of watchdog/failover model where it would automatically load the backup BIOS, but some other firms had a secondary-BIOS jumper.

I think these days, the stub "BIOS flashback" is the trendy thing, where you can plug a flash drive into a magic slot and press a button to flash without even having a CPU installed.

This offered the same "brick-resistance" feature with the added benefit that people weren't stuck if they tried to pair an old-stock mainboard with a new CPU that wasn't supported by the original firmware release.

TBH, I'd rather they go the complete opposite direction: replace the soldered EPROM with a SD slot and a $1 MCU that reads the card and emulates a ROM chip. That could be configurable to write-protect the card, or you could just trivially swap it if you didn't trust the firmware image for any reason, while avoiding the fumbliness of modern tiny 8-pin flash chips. You could socket a big old-fashioned DIP ROM, but will people feel comfortable even trying to pry that out of a $10,000 server even with the appropriate chip puller tool?
by sasjaws | 2025-09-29 06:05:13+00:00
I've added support for Lithuanian and created a stream about version control for you to try it out. Just 'select language' -> Lithuanian -> Play

If you find it useful, you can register for free and create new streams on any subject. Send me a mail on alex@longyan.io if you'd like more stream/content quota or if you want to try the Anki thing, I'll gladly set it up for you.
by epidemian | 2025-09-29 06:06:22+00:00
> What inspired you to build this, I'd love to hear the story behind this.

Actually, i don't remember! Sorry, it's been a while (a decade, it seems... oh well)

This is probably my mind retro-creating a story, but i think this started with me wondering about how the Braille system worked. Like, did each Braille symbol map to a single letter, or to a whole syllable, or even a concept? Or, were more than one Braille symbol needed for some letters, like Morse?

Turns out each Braille symbol fits within a 2x4 grid of points. That's 2 possible states (point is on or off) for each of those 8 points. So 2^8 = 256 possible values. That's a byte! And luckily, Unicode encodes all those 256 possible values, and maps them to codepoints in a very systematic way.

So obviously, i started to wonder what kind of things could be represented on these Braille grids. The snake game was a natural fit, and a fun programming experience. But i also considered other things, like a horizontal Tetris. Or a Game of Life rendered on the URL, which i actually implemented(1), but i didn't find as entertaining as snake, because the 4-tile height restriction impeded any interesting patterns, like gliders (even with wrap-around logic). I think i even made some brute-force searching for horizontal or diagonal gliders trying out different born/survive rules(2), but couldn't find any interesting patterns, other than still life, blinkers, and some "moving walls" kind of things.

Anyways, that's for the Braille part. The idea of using the address bar to render the game, i have no idea where that came from TBH. Maybe i stole the idea from some other animated or pretty thing on URLs? I wish i remembered.

(1): https://github.com/epidemian/URLife

(2): See https://en.wikipedia.org/wiki/Life-like_cellular_automaton. The Game of Life rabbit hole goes deep.
by ido | 2025-09-29 06:08:29+00:00
> I'm convinced that most office work exists for social reasons

The powers that be are not competent/powerful enough to engineer a society-wide conspiracy like that.

A lot of waste (especially in big organizations, and the bigger the organization the more capacity for waste) happens, and the more the income is detached from production (e.g. governments get tax revenue regardless of how well they spend it) the less people care about efficiency.

But for the most part people get hired because somebody thought that makes business sense to do so.
by burnt-resistor | 2025-09-29 06:09:24+00:00
The EFI firmware flasher or some other method needs to be able to erase and flash the entirety of BMC/SOC/BIOS ROMs from a trusted environment not dependent on a potentially-infected APT BIOS. Perhaps the SD card slot on many Supermicro boards and/or certain USB port should be able to flash a bricked BIOS & BMC just like some of the Asrock boards can flash themselves without booting using an additional button-holding sequence.
by vikrantrathore | 2025-09-29 06:09:48+00:00
One reason the quality of service at UPS has traditionally been stronger than at FedEx is that most UPS drivers are full-time employees rather than contractors or temporary staff. Many UPS drivers are able to earn a good living, often better than their peers at other companies including FedEx [0][1]. By contrast, some logistics companies pursue cost savings by classifying drivers as self-employed contractors, thereby avoiding social security contributions and other employee benefits. UPS’s approach reflects the vision of its founders, who believed a company cannot thrive unless it takes care of its employees.

However, the financial markets, which tend to reward short-term returns and a “winner-takes-all” mindset, have often penalized UPS for this philosophy. In recent years, to satisfy investor demands, UPS management has also turned toward cost-cutting measures. This shift coincided with leadership changes, as the current CEO came from outside the company. External leaders often emphasize sales and marketing over operations, and UPS has followed this trend. As a result, UPS, FedEx, and Amazon are now competing in a cost-reduction race, prioritizing sales growth while reducing operational staff—changes that inevitably affect service quality.

One critical element still missing from the broader logistics landscape is a truly integrated, multi-modal framework that seamlessly combines air, road, rail, and water transport to meet diverse customer needs. While rail may be less applicable in the U.S., it plays a vital role in Europe, China, Japan, and India and could be leveraged more effectively. Perhaps modern logistics theory should evolve to reflect this more holistic, global perspective.

[0] https://www.cnbc.com/2023/08/18/ups-drivers-can-earn-as-much...

[1] https://www.cbsnews.com/news/ups-drivers-170000-pay-benefits...
by defrost | 2025-09-29 06:09:55+00:00
It's more and more probable that an infected tick passes on sufficient amounts of the bacteria that causes Lyme disease into blood as time passes.

It's almost certain to have crossed that threshold after 24 hours.

It's unlikely and uncommon to have happened in five minutes or an hour.

It's possible to occur almost immediately .. but that would likely only happen to someone with a weak immune system that's easily overwhelmed by a relatively small amount of bacteria.
by jenadine | 2025-09-29 06:11:04+00:00
In my interpretation, this clause is for when someone ships a user product that contains GPLv3 software. That means it would apply to the phone vendor if the phone contained GPLv3 (or anything using LGPLv3) software.

But if you're just a developer who ship software GPLv3 software for Android, you are good because any developer that want to modify your software on their phone can, as long as they register to Google to get these keys. It should therefore be respecting the licenses.

But that's just my interpretation.
by thaumasiotes | 2025-09-29 06:12:16+00:00
> Usually preferable, except when not. Just like distinguishing between upper- and lowercase letters

When would it be preferable to distinguish between capital and lowercase letters?

Wiktionary does it religiously, and it always makes the entries worse. Want to know what something means in German? Well, that's on a separate page.

Do you want to look something up while using your phone? Don't be stupid; use a desktop that won't autocapitalize the first letter you type in.
by muzani | 2025-09-29 06:12:48+00:00
Malaysian here. Different environment but there's some similarities in that there was no jobs when I started off, and only recently were there unicorns etc, but local funding is still dry.

1) We'll always need tech for bureaucracy. Look for anything that is done on paper that can be digitalized. CRM, POS, LMS, inventory management. These stuff are red ocean and you don't need to convince people that yours is better. Just be better than Excel, simpler than SAP.

2) Anti-corruption is a fertile field in developing nations. That means forms. Payments and payments infra. Malaysia is entering an era where e-invoicing is mandatory for tax cuts. Things like remittance may be difficult too and it could mostly be a paperwork thing.

3) Common advice in HN is jobs good, entrepreneurship bad. But in your situation, the odds of having a business may be 15%, and the odds of getting a job may be 1%. Entrepreneurship is also a lot more difficult if your competitors are people like Walmart or Amazon so the math is entirely different.
by awesome_dude | 2025-09-29 06:13:20+00:00
For my money, certain types of software shouldn't have tests, too much planning, or any maintenance whatsoever

Prototypes (start ups) rarely have the luxury of "getting it right", their actual goal is "getting it out there FAST to capture the market (and have it working enough to keep the market)"

(Some - apologies but I'm not a game dev enough to be able to say what types this applies to) Game devs - they're more or less build it, ship it, and be done with it, players tend to be forgiving of most bugs, and they move on to the next shiny thing long before it's time to fix all the things.

Once the product has traction in the market, and you have paying customers, then it's time to deal with the load (scale up) and bugs, I recall reading somewhere that it's probably best to drop the start up team, they did their job (and are now free to move on to the next brilliant idea), and replace them with a scale up team, who will do the planning, architecting, and preparation for the long term life of the software.

I think that that approach would have worked for Facebook (for example) they had their PHP prototype that captured the market very quickly, and (IMO) they should have moved through to a scale up team (who could have used the original code as a facade, strangling it to replace it with something funky (Java/C++ would have been what was available at the time, but Go would be what I would suggest now)
by Twirrim | 2025-09-29 06:13:26+00:00
As someone who's never really read that much on compression stuff, I have absolutely zero clue what this visualisation is actually showing me.

That's compounded by the lack of legend. What do the different shades of blue and purple tell me? What is Orange?

e.g. on a given text in an orange block it puts e.g. x4<-135. x4 seems to indicate that the first 4 binary values for the block are important, but I can't figure out what that 135 is referencing (I assume it's some pointer to a value?)
by adlumal | 2025-09-29 06:14:06+00:00
This may be due to changes in the sources used for remotes over time perhaps.

> There was a slight loss of -0.6 dB per decade in the cumulative threshold, but regression analysis showed the lack of a significant correlation between age and sensitivity. The intergroup analysis confirmed that infrared vision did not significantly differ between the four decades of life. The sensitivity level did not significantly correlate with visual acuity, spherical equivalent, retinal thickness or straylight parameter. The comparison of values measured at the seven locations showed a significant difference between the central (19.7 ±2.2dB) and the peripheral retina (22.5 ±2.4dB).

Source: https://iovs.arvojournals.org/article.aspx?articleid=2745068
by marc_abonce | 2025-09-29 06:15:12+00:00
> F-Droid is different. It distributes apps that have been validated to work for the user’s interests, rather than for the interests of the app’s distributors.

F-Droid's curation saved me at least once when I wanted to upgrade my Simple™ apps and couldn't find them in F-Droid anymore, which led me to learn that SimpleMobileTools was sold to a company that closed sourced the apps[1] and that there's a free fork called Fossify[2].

Had I installed these through Google Play, they wouldn't have cared about this particular change and I would've gotten whatever random upgrades the new owners pushed.

Each app store's policies have their pros and cons, but that's why it's so important to have a diversity of marketplaces.

[1] https://github.com/SimpleMobileTools/General-Discussion/issu...

[2] https://github.com/FossifyOrg
by Earw0rm | 2025-09-29 06:16:07+00:00
Even though I'm a touch sceptical as to how good LLMs are at coding, imagine developing world demand for LLMs via a cheap Android handset for $1/month.

There's a lot of use case for the information retrieval side, especially for people whose educational level and mindset means well-crafted search queries were never a thing for them.

But there's also the other side of the trade. How much are suppliers willing to pay for upranking? It's a dirty business model, Enshittification 3.0+, but when did that stop anyone?
by hulitu | 2025-09-29 06:16:16+00:00
> After a couple of years of slow progress, Intel realized that they needed a stopgap processor to counter competitors such as Zilog and Motorola. Intel quickly designed a 16-bit processor that they could sell until the 432 was ready. This processor was the Intel 8086 (1978)

And after 20 years the history repeats itself with Itanic.
by thaumasiotes | 2025-09-29 06:17:09+00:00
> Scottish

...is not a term for any language. In Scotland, you might want to talk about Scots (a Germanic language) or Scots Gaelic (a Gaelic one).

Annoyingly, "Irish Gaelic" (the English phrase) uses the pronunciation /geɪlɪk/ (first syllable rhymes with "pale"), while "Scots Gaelic" uses /gælɪk/ (first syllable rhymes with "pal").
by stingraycharles | 2025-09-29 06:17:32+00:00
Not sure if there will be an AI winter, but the claims of AGI being very close are likely very optimistic. Maybe AGI requires an entirely new paradigm, maybe it requires quantum computing, or biological computing (our brains are able to work at just a fraction of the cost of current LLMs after all), regardless it’s much further out than certain industry leaders would like you to believe.

But an AI winter is unlikely to come either, as it currently adds a lot of value in many places. But the profits coming out of it are unlikely to line up with current investments being poured in.
by AlecSchueler | 2025-09-29 06:18:20+00:00
Do you have source for any of these claims? You're being quite snarky and rude with me but you back up nothing of what you say, despite your claim that the research is so trivial. I actually did provide sources for what I said so it would seem kind to reciprocate.

> Please use your mind a bit more and understand that those drones are not a new tactic

Where have I even claimed anything like this? Can you appreciate how it comes across to set up a strawman and begin with "please use your mind a bit?" It's incredibly condescending and makes it difficult to take anything you've said seriously. I even made explicit reference to the repeated border tests on both sides over the past 30 years, and I linked to an independent body that showed how often it happens with drones. Did you just not read anything I wrote?

> Like always, some people are just too much into conspiracy ...

Are you really saying that neither Russia nor other state actors perform online misinformation campaigns? It only takes a second of research to see otherwise.
by loeg | 2025-09-29 06:18:40+00:00
The actual intrinsic is like 8-9 cycles on Zen4 or Ice Lake (vs 1 for plain add). It's something if you're banging on it in a hot loop, but otherwise not a ton. (If refcounting is hot in your design, your design is bad.)

It's comparable to like, two integer multiplies, or a single integer division. Yes, there is some effect on program order.
by some_guy_nobel | 2025-09-29 06:18:58+00:00
""" REV Chief Operating Officer Maya Burkenroad is also accused of aiding Lopez and Mehr's alleged crimes. On REV's website, Burkenroad, who is Lopez's cousin, was described as having "over 10 years of experience managing multi-million-dollar companies," according to the complaint.

But the SEC claims Lopez and Mehr misrepresented her experience. Before joining REV, she had worked as a substitute preschool teacher, a promoter at a radio station, and as an assistant to Lopez at a prior endeavor, the complaint alleges. """

Nice family. Hopefully they get lots of jail time.
by BatteryMountain | 2025-09-29 06:19:36+00:00
I've built a couple of tools for myself over the years, some of which includes android apps. They were never released to the public.

If we go down this path, I will stop all development on android (and at work too, as it is up to me how we deliver, coincidentally). I implore all other developers to resist this. This will completely lock down the platform forever, there will be no going back.The entire reason why android is so attractive is because we have linux in our palms and all the amazing benefits of that. If google wanted to do the right thing, they would go in the opposite direction and make it easier to gain root access on mainstream devices instead of locking it down further.

It seems the only last bastion left is Firefox, so I will be focusing on making all my tools work well on Firefox (mobile & desktop) instead of app ecosystems.
by isoprophlex | 2025-09-29 06:19:49+00:00
> For example, to entice individuals to invest in their acquisitions, they said their portfolio companies were "on fire" and that "cash flow is strong."

Clearly if someone tells you their stonks are "on fire" that's all the due diligence you need to do as a buyer. Some people just really deeply believe that there exist risk-free get-rich-quick schemes.

I find it difficult not to do at least a little bit of victim blaming here...
by ok_dad | 2025-09-29 06:20:00+00:00
Thanks, I am also autistic, so I guess we're evenly matched for this battle to the death :)

Also, I wouldn't presume to speak for all autistic people, though I am one.

Sometimes people can take the same sentence to mean different things. Please don't assume malice from others where it could be a difference of understanding.

I am not mad or anything, I know how it is to misunderstand things.
by carlmr | 2025-09-29 06:20:15+00:00
>> Of all antibiotics sold in the United States, approximately 80% are sold for use in animal agriculture; about 70% of these are “medically important”

I expected more, since biomass distribution is 62:34 for livestock to humans, the remaining 4% are wild animals[1]. So rather a 2:1 ratio.

The antibiotics are 4:1.

Livestock is fed a constant stream of antibiotics, but apparently Americans are fed a half as constant stream of antibiotics as well?

Last time I took antibiotics was decades ago. What are you all doing?

[1] https://ourworldindata.org/wild-mammals-birds-biomass
by Jnr | 2025-09-29 06:20:42+00:00
I learned this from hosting SmallStep CA behind Traefik. You can use TCP mode for specific subdomains and match it using HostSNI. Then if the client uses SNI it should work. So you can use both TCP and HTTP routers on the same port.

https://github.com/Janhouse/tailscaled-derper/blob/main/dock...

Since we use TLS passthrough and Traefik just proxies TCP, you have to pass certificates to derper, so you either use the Traefik certificate extractor or some other tool to get them.

And initially I though that I would have to integrate libproxyproto into derper in order to handle client IP addresses correctly behind Traefik but it looks like it doesn't really need it.
by Dylan16807 | 2025-09-29 06:21:04+00:00
I think the confusion is that "even worse" sounds like something meaningful but any license split between those two would be quite a fine hair and people tend to treat them as the same.

I mean, can you name any licenses that are one or the other but not both?

And I explicitly don't mean whether one of OSI or FSF approved a license when the other rejected it, because sometimes they make that decision based on nitpicks and not because of differences in principles.
by nine_k | 2025-09-29 06:21:09+00:00
Frankly, to me it's the other way around, I don't care too much about all that tracking (even though I routinely block most of it), but I do care about the cost of having ads on the page. The cost of my attention, first of all.

Some ads are masterfully made, but even they distract me, not attract. They jump into the view, they suddenly break the page flow, they strive to be clicked by mistake. Tis is especially insufferable on mobile. They clutter the screen and obscure the real content. They eat bandwidth and battery life by loading tons of content I did not ask for. They play whole videos, some are so impudent as to play sounds. They are consciously created as an impediment to reading (or sometimes watching) the content I came for! Isn't it the definition of being actively harmful?

Then, of course, they are mostly not relevant, like, 99.7% of the time. To quote: «A general trend that the advertising business is not interested in delivering ads to the people that want the product. Their real interest is in creating a stratification of product offerings that are all roughly as valuable to the advertiser as the price paid for them. They have to find ways to split up the tranches of conversion probability and sell them all separately, without revealing that this is only possible by selling ad placements that are intentionally not as good as they could be.» (https://news.ycombinator.com/item?id=42721611)

And they usually offer no way to say: "Hey, this is not interesting, show something else". Instead, Reader View does away with everything irrelevant in one click.

Interestingly, one of the places where I do not block ads is Facebook (which I use sparingly). It knows everything about my profile (obviously), it shows ads moderately, and in a way that's not infuriating, and it even actively asks my opinion about ads. As a result, I taught it to show me highly relevant ads: about electronic music, vintage computers, etc, stuff that I actually would be interested in clicking. This might look anti-privacy, but the tracking is mostly limited to the Facebook content, because I cut off third-party cookies.
by esperent | 2025-09-29 06:22:18+00:00
> Without any real proof, they have bought into this vision of advertising that is illogical, ineffective and simply not true in many cases --- the idea that personal browsing history is a good indicator of the future

You're claiming they don't have any real proof, but you yourself are not providing proof of that. On the contrary, I assume there's tons of proof (data), whole oceans of the stuff, because personalized advertising goes far beyond just checking if you searched for a car, then showing you car ads.

Instead its: if you searched for marriage related stuff, a year later they'll start showing you baby stuff. If you searched for "why is my husband so..." they'll start showing you ads for divorce lawyers. If you search for "why are there no jobs", they'll start showing you extremist political ads about immigrants stealing all the jobs, and on and on.

This stuff, personalized, designed to manipulate you and hit you at the times when you're emotionally vulnerable, does work. Of course it works. Humans are easy to manipulate if you know their private wants, needs, and emotional state.