MurphyA/hacker-news huggingface dataset:
Show HN: The Open-Source Bastion Host I Refactored in Three Months
by leo0808 | 2025-09-04 11:58:10+00:00
Hi, HN! I'm excited to share OneTerm, an open-source web-based bastion host built with Go and Vue.

Initially, OneTerm only provided basic bastion host features. Over the past few months, I dedicated most of my spare time to this project, gathering feedback from friends and the community, and iteratively refactoring and improving it. After about three months of on-and-off development, OneTerm is now much more feature-complete, with significant improvements in user experience and performance.

Key updates: 1. Revamped Workbench UI: New sidebar with productivity tools—file management (batch upload/download, permission control, audit logs), theme switching, preferences, fullscreen mode, recent sessions, connection sharing, quick commands, and more. 2. Multi-Protocol Support: Now supports Web (HTTP/HTTPS), Redis, MySQL, MongoDB, PostgreSQL, and Telnet, in addition to SSH and RDP. 3. Access Control Redesign: Fine-grained permissions across nodes, assets, and accounts, with time templates (multi-timezone, multi-period), command templates, and IP whitelisting for flexible security policies. 4. System Settings Module: Configure your public keys, terminal preferences, access control defaults, storage options, and more. 5. Improved Client Experience: Enhanced UI and command interactions. You can use your favorite terminal client to connect via SSH for a native experience.

In addition to the above features, OneTerm has undergone significant performance optimizations and code refactoring. If you have any questions or suggestions—whether about features, docs, or UX—please let me know or open an issue! I'd love to hear your feedback and work together to make OneTerm even better.
by EmptyCoffeeCup | 2025-09-04 11:59:09+00:00
I think just about every school in the land has one or two kids in each year who spend their lunch money on Monster/Red Bull (Caffeine is addictive - they cannot help it).

Sadly, there is often only enough money for caffeine or food: So you end up with children who are living off Sugar & Caffeine. They look as healthy as you'd expect.

This legislation is as much about preventing such scenarios as it is about the effects of the energy drinks themselves - (not that it'll work, but that's a another point entirely)

As for the tea/coffee points - I don't think any school allows access to a kettle - it is already a moot point.
by xenobeb | 2025-09-04 11:59:37+00:00
You say this as if humans do not collude all the time. The pejorative idea of a "Conspiracy theory" is such a great modern tool for those who want to collude to hide their collusion in plain view.

Somehow it has become a heuristic that if caste in, the collusion is instantly dismissed as fiction. Even better that the person who thinks collusion is happening must have a lower IQ than those who don't. How convenient for those who are colluding.
by krabizzwainch | 2025-09-04 12:00:23+00:00
Landscape mode would make sense, if scrolling on eInk wasn't completely awful. I can sometimes deal with it on really light websites like Wikipedia, but I just prefer not to.

I will say that my supernote really is just a digital notepad. I keep all my work to do lists organized on it. But since it's Android and supports side loading apps, I have the Kobo app and read a ton on it even without a backlight.
by drej | 2025-09-04 12:00:31+00:00
Fun aside - I actually used polars for a bit - first time I tried it, I actually thought it was broken, because it finished processing so quickly I thought it silently exited or something.

So I'm definitely a fan, IF you need the DataFrame API. My point was that most people don't need it and it's oftentimes standing in the way. That's all.
by azangru | 2025-09-04 12:00:34+00:00
No. Could you try to put your finger on what exactly in this text gives you the vibes?

Also, a sibling comment suggests that "those tiles" is some sort of slop; but I find it no more sloppy than "this little web app" in the preceding sentence. Both are handwavy markers of imprecision common in oral speech. A comment on English Stack Exchange points out that this feature is referred to as the "indefinite this" [0].

[0] - https://english.stackexchange.com/questions/389637/using-thi...
by myrmidon | 2025-09-04 12:00:53+00:00
Sure; but people are not typically getting paid to post Show HNs, and that content is not shown to victims unsolicitedly, so I don't have any problem with it either.

If you are a "fellow techy, working on serving ads", it is a pretty safe assumption that producing "Show HNs" is neither the main purpose of your job nor very representative.
by shmeeed | 2025-09-04 12:01:05+00:00
$6.9M to the CEO, to be precise, which is roughly the same amount as the total of all private donations, grants and government funding they receive. It's bizarre.

Meanwhile they're cutting down on devs, killing products like Pocket and Fakespot, ignoring user feedback, driving strange and off-putting community engagement, and introducing eye candy BS nobody asked for.

In short, they appear to be doing anything but advancing the brand and actually, you know, competing in the browser market. Note that I'm not shitting on the poor devs, I still think they are delivering a great core product despite it all. But market shares and even absolute user counts keep dwindling. What is management doing about that?

And all this would seem like a case of simple mismanagement, if one weren't to reflect the fact that the overwhelming majority of their income comes from Google. The way they're behaving is suspiciously convenient to the entity that is their main revenue source. One could resonably suspect they serve primarily as an antitrust litigation sponge.
by blaze33 | 2025-09-04 12:01:28+00:00
> It is the most technological color, and I’m willing to claim that this is why it is usually, in science fiction and elsewhere, used to represent the future.

For me it is because of red- and blueshifting[1]. Far away galaxies appear both older and redder the further away they are, so red is the past. And if you go really fast, the forward view will be bluer, so in the sense that it is where you go, blue is the future. [1] https://en.wikipedia.org/wiki/Redshift#Blueshift
by sotix | 2025-09-04 12:01:45+00:00
I wasn't using stack overflow before LLMs. It had already declined too much in quality and discouraged me from posting legitimate questions on there. I was more focused on reading documentation to gain a solid understanding. So for me, it's a much different experience.

It's incredible how quickly an LLM can answer. I've also crossed checked its responses with documentation before and discovered that it suggested implementing a deprecated feature that had a massive warning banner in the documentation that the LLM failed to indicate. I'm still a fan of reading documentation.
by mitjam | 2025-09-04 12:01:51+00:00
I use a Kindle Scribe for reading eBooks and occasional note taking.

Personally, I like the bigger form factor better, both for reading and writing, could even be a bit bigger for reading PDFs.

After a short period of writing on ePaper, I'm now back to real paper. It's just a much better writing experience, lighter in the pocket, cheaper, more flexible (rearrange, give away, lay out on a table), more practical (write while you read, use big sheets when you need it), etc., etc.

A folded sheet and a small pen is all it takes. ePaper for writing might have a use case in professional workflows, but for personal use, it's a nice idea in theory, but not in practice, in my opinion.
by burnt-resistor | 2025-09-04 12:02:20+00:00
What they're saying is that is that if {{malicious user}} receives an ip cert from {{malicious-enabling root CA}} trusted by {{unwise OS/browser vendor}}, then infrastructure-{aided,involved} attacks become easier.

The intractable and difficult root (pun unintended) problem is OS/browsers/CA root cert list providers must delegate trust carefully to legit CAs while continually auditing they're not issuing garbage certs to entities that can't prove they own the subject(s) they're covering.

CA = Certifying Authority is the issuer of certs that make https:// work, but isn't limited to uses of just the web. S/MIME email, some software signatures, and more.
by locao | 2025-09-04 12:04:43+00:00
Who can afford space for a junk drawer in 2025? If junk wants to be my roommate, it better pay the rent.

I'm joking and completely agree with your point about lack of hyper stimulation, but I'm also a bit serious. About ten years ago I started getting rid of things that would entertain me once or twice a year mostly because of the real state they use. Now that I quit all social media I remember why I used to keep all that stuff around.
by solarkraft | 2025-09-04 12:05:08+00:00
> because it lets me syncthing notes

I know this probably doesn’t exactly fit your use case, but I’ve actually been able to do this with a Kindle Touch (yes, from 2011)! It was a super serene experience to have your books synced over into KOReader.

> if you try to use it as a generic android tablet you're doing it wrong

I agree, but I felt that’s what the system invited me to do (may just be my tinkerer genes though). Update notifications, etc, web browsing, hoops to jump through to share files ...

How‘s your note sync workflow? Can you reasonably easily and quickly access your handwritten notes from a laptop? Last I checked there was some manual export step to jump through.
by burnt-resistor | 2025-09-04 12:05:14+00:00
Similar here too. I'm on the lazy.nvim train too because it's componentized, powerful, and scalable. It would take me ages to get all of the stuff going that Just Works™ (pretty much) OOTB. Yes, even Copilot if you're into that sort of kinky code completion sharing with OpenAI/Microsoft everything you type.
by mickael-kerjean | 2025-09-04 12:05:21+00:00
If someone from mistral comes around, is there a way for third party MCP implementation to be in the connector directory? I built a MCP connector allowing people to connect to every possible file transfer protocol from S3 to FTP(S), SFTP, SMB, NFS, Gdrive, Dropbox, azure blob, onedrive, sharepoint, etc.. and have a couple layers to delegate authentication, enforce authorisation, support for RBAC and create chroots so the LLM can't go haywire + tools to visualise and or edit hundreds of file format. Would be awesome to get it listed, and it's open source: https://github.com/mickael-kerjean/filestash
by hilbert42 | 2025-09-04 12:05:53+00:00
"They can’t all have the same effect, they’re wildly different chemically!"

Exactly, I made the same point on HN on a similar story only a few months ago.

Your conclusion makes sense given the data from this questionable research.

As I pointed out in that earlier comment, with vastly different chemistries the only thing these compounds have in common is that they cause the sensation of sweetness and that this could be a possible factor.

There's been a hypothesis around for a while that the body reacts to sweetness and it may have an effect on metabolism. It's also been suggested that receptors in the stomach are sensitive to sweet compounds even though we aren't aware of the sensation and that this could be the mechanism.

If sweetness turns out to have a metabolic effect then it's possible that artificial sweeteners are overstimulating that mechanism given that drinks sweetened with them are often very sweet (to me some are so sweet I find them undrinkable). That last point I've not heard elsewhere, it's a notion of mine based on the fact that in recent decades food and drink manufacturers have been increasing the sweetness of products to the point where the average person's 'bliss point' has increased significantly since say the 1950s. 'Bliss point' is industry jargon for ideal maximum sweetness point, it's the target sweetness level manufacturers aim for in their products.

I have no idea whether stimulating the sensation of sweetness affects body metabolism in ways that could account for these functional changes in cognition or not but it ought to be ruled out completely before tackling the matter of the 'toxicity' of artificial sweeteners. That's just good scientific method.

Studies into the possible damaging effects of artificial sweeteners have been bouncing around for decades with widely differing results and with no real consensus, so it doesn't require an Einstein to figure out something is wrong with the data or methodologies or both. Ruling out the sweetness factor completely is a way to move forward. That could be done with studies with sucrose and fructose. They could then be compared with existing artificial sweetener studies.

Given the obesity epidemic and the increasing percentiles of diabetes cases it's clear that getting definitive results is more urgent than ever.
by LorenDB | 2025-09-04 12:08:19+00:00
The only difference is that Framework has threatened to make printers multiple times before.

https://x.com/FrameworkPuter/status/1857110846780145910 https://x.com/FrameworkPuter/status/1750545558765519344 https://x.com/FrameworkPuter/status/1617566347877298177
by conradev | 2025-09-04 12:08:22+00:00
Yes, that all makes sense! My understanding is that the damage propagation gets worse with depth (no limit) in addition to breadth (screen size). If the compositor has N layers, a blur layer, N more layers, another blur layer, etc. then there are a lot of "offscreen render passes" where you have to composite arbitrary sets of layers exclusively for the purpose of blurring them.

It's true that GPU is itself not busy during a lot of this because it's waiting on pixels, but whatever is preparing the pixels (copying memory) is super busy.

Downscaling is a win not just for the blurring, but primarily the compositing. KDE describes the primary constraint as the number of windows and how many of them need to be blended:

The performance impact of the blur effect depends on the number of open and translucent windows

https://userbase.kde.org/Desktop_Effects_Performance#Blur_Ef...
by jl6 | 2025-09-04 12:10:04+00:00
Humans are moored to their social web: having to exist amongst others continually pulls you towards the average feelings/views/activities of the people you are connected to. Change is slow.

When humans become unmoored from this web through loneliness/isolation/alienation, they can freewheel and drift further from that average. This can be liberating! But if you don't re-connect, either with your previous web or a new one, there's nothing stopping you falling off the deep end; nothing to give you a little correction that keeps you "normal". Political extremism of various flavors, or identity crises founded in over-rumination, are what we see - but also innovation and removal of constraints. Brian Eno's Oblique Strategies relates. The social isolation moonshot is to break from convention and be a hero auteur, but the risk of failure is very high. Nullum magnum dementiae sine mixtura ingenium fuit.
by hansvm | 2025-09-04 12:10:09+00:00
They're born with neural hardware whose architecture has been optimized by evolution. Any choice of architecture imparts some inductive bias, making some problems easier and some problems harder to learn, and humans have the advantage that people with bad architectures (those not matching properties of the world we live in) were more likely to die or to not mate.

You're right that we don't call those inherited thought patterns memories; we call them reflexes, emotions, region-specific brain functions, etc.
by dan_linder | 2025-09-04 12:11:48+00:00
it's not the exact science museum experience mentioned, but a quick Google search for "sand table video augment" pulled up a few, and this was the first one I found: https://share.google/89A6x4yfaw5a4hOuh

When the first Xbox were getting long in the tooth, I believe people were repurposing the motion tracking bar as the mechanism to measure the topography of the sand table. That, coupled with a video projector mounted over the top of the sand table provides the additional colors and elevation lines. (And of course a bit of cool software to process and produce the image.)
by carlmr | 2025-09-04 12:12:08+00:00
>Early classes on circuits in EE will usually take shortcuts using known circuit structures and simplified models.

Might just be me, but I found it all clicked when we started learning the fundamentals underneath these abstractions. For me it was harder in the first classes because it's about memorizing poorly understood concepts, my brain prefers logically deriving complex concepts as a learning method.
Atlassian is acquiring The Browser Company
by kevinyew | 2025-09-04 12:12:31+00:00
https://browsercompany.substack.com/p/your-tuesday-in-2030

https://www.atlassian.com/blog/announcements/atlassian-acqui...

https://www.theverge.com/web/770947/browser-company-arc-dia-...
by Un_Tracker | 2025-09-04 12:12:38+00:00
Hey HN,

I’m building Unfollowers Tracker, a tool that gives you granular insights into your Instagram follower fluctuations.

This started as a personal itch. I wanted to understand the "why" behind follower drops, not just the "who." Most apps in this space feel spammy, so I focused on building a clean, data-transparent, and privacy-focused tool.

The Tech Stack:

Backend: Python (FastAPI) handling the business logic and user management.

Data Pipeline: A combination of Celery for task queues and Redis for caching to handle the async job of checking follower changes. The Instagram API connection is handled through Meta's officially sanctioned Graph API endpoints where possible, using a secure, read-only approach to respect user privacy and platform rules.

Database: PostgreSQL for relational data (users, sessions) and a time-series database (TimescaleDB) to efficiently store and query the historical follower data for analytics.

Frontend: Simple vanilla JS and HTMX for a lightweight, fast interface that doesn't require a heavy framework.

What makes it different:

It's an analytics tool, not a vanity metric. The focus is on trends, not instant notifications. The dashboard shows net follower gain/loss over time, correlates unfollow spikes with posting times, and helps identify "ghost followers" that hurt your engagement rate—a critical metric for creators. Privacy First. We never store your Instagram password. Authentication is done via OAuth. We only store the data necessary to show you your trends and nothing more.

Technical Transparency: I'm open about the stack and the limitations of working with Instagram's API (which can be… finicky).

I’d love for the HN community to kick the tires. It’s free to try for basic tracking.

I'm particularly interested in:

Feedback on the technical approach for the data pipeline. Ideas on other valuable data points to extract from this type of social data. Your experiences with the constraints of social media APIs. Check it out here: https://unfollowerstracker.com

Thanks, and I look forward to your thoughts and critiques.
by llm_nerd | 2025-09-04 12:13:07+00:00
I often like the use of advanced media. The NYT and Washington Post have done some amazing advanced media that fully exploits the richness possible with the web.

Not so sure about this one, though. Like others, I was more annoyed with the constant scrolling to get tiny niblets of information and didn't even make it through. It makes it feel like work and the mechanisms completely overwhelms the message.

Also weird that it's hogging CPU even when you're sitting on a completely static portion of the page.
by simion314 | 2025-09-04 12:13:14+00:00
>Seems like their only USP at this point is Made in EU.

They are also releasing model weights for most of their models, where companies like Antropic and until recently OpenAI were FUDing the world that open source will doom us all.

Mistral smartest model is still behind Google, Antropic but they will catch up.
Show HN: Encypher – AI Text Detection Inspired by Wikipedia Guidelines
by bobnerd | 2025-09-04 12:13:20+00:00
I built Encypher, a tool that detects AI-generated text based on patterns recommended in Wikipedia's editor guidelines for spotting machine-generated content. I adapted these patterns into an automated tool that highlights which words or phrases match typical AI writing patterns.

Features: - Highlights words/phrases that match AI patterns. - Clear pass/fail evaluation of the text. - Free API

I’d love feedback from the HN community on the detection logic, UI, and API.
by whalesalad | 2025-09-04 12:13:27+00:00
This is a really good description of more or less exactly how our current approach works! This is a daily granularity variant we are testing atm, in order to eliminate flip-flops that occur during the length of a business day. The v1 impl was down to the second, this one is daily.

Here is the core of it:

CREATE TABLE time_travel_daily ( domain TEXT NOT NULL, valid_range tstzrange NOT NULL, valid_from timestamptz GENERATED ALWAYS AS (lower(valid_range)) STORED, valid_to timestamptz GENERATED ALWAYS AS (upper(valid_range)) STORED, tld TEXT, owned BOOLEAN, acquired_at timestamptz, released_at timestamptz, registrar TEXT, updated_at timestamptz, accounting_uuid TEXT, offer_received_date timestamptz, payment_received_date timestamptz, sold_at timestamptz, sold_channel TEXT, last_renewed_at timestamptz, expires_at timestamptz, transfer_started_at timestamptz, transfer_completed_at timestamptz, transfer_eligible_at timestamptz, snapshot_json JSONB NOT NULL, inserted_at timestamptz DEFAULT NOW() NOT NULL, source_data_change_id INT, PRIMARY KEY (domain, valid_range) ); CREATE INDEX ttd_domain_idx ON time_travel_daily(domain); CREATE INDEX ttd_gist_valid_range_idx ON time_travel_daily USING gist(valid_range); CREATE INDEX ttd_owned_valid_range_idx ON time_travel_daily USING gist(valid_range) WHERE owned = TRUE; CREATE INDEX ttd_registrar_idx ON time_travel_daily(registrar) WHERE registrar IS NOT NULL; CREATE INDEX ttd_source_data_change_id_idx ON time_travel_daily(source_data_change_id) WHERE source_data_change_id IS NOT NULL;

And then here is a piece of our update trigger which "closes" previous entities and opens an new one:

UPDATE time_travel_daily SET valid_range = tstzrange(lower(valid_range), target_date::timestamptz, '[)') WHERE domain IN ( SELECT DISTINCT dc.domain FROM data_changes dc WHERE dc.invalidated IS NULL AND dc.after IS NOT NULL AND dc.modified_at::date = target_date ) AND upper(valid_range) IS NULL -- Only close open ranges AND lower(valid_range) < target_date::timestamptz; -- Don't close ranges that started today
by aeonfox | 2025-09-04 12:15:19+00:00
Are windowed GUIs still doing diffed screen updates? I would have assumed that GPUs make this kind of thing very unrewarding to implement as an optimisation. I'd imagine every window is being redrawn every frame as a 2D billboard with textures and shaders.

The Guassian blur and lensing effects would still slow things down by needing to fetch pixels from the render target to compute the fragment, vs painting opaque pixels.
by bjackman | 2025-09-04 12:15:34+00:00
I hadn't seen that before, seems neat as the physical inconvenience factor of the KVM approach is definitely real.

It's pretty funny that you have both the input and output physically installed in and powered by the chassis, but then you run cables to connect them!

It would seem reasonable to at least have the option to have it directly enumerate as a USB hub/display device on the PCIe bus it gets power from! But maybe that would add a lot of bulk/cost?
by falcor84 | 2025-09-04 12:15:35+00:00
Well, not quite "equally":

According to the Economist "Democracy Index" [0], Turkey gets a score of 4.26 out of 10 while Russia's is a much lower 2.03 (highest is Norway at 9.81).

And according to Freedom House's "Freedom in the World Score", Turkey is at 33 out of 100 compared to Russia's dismal 12 (highest here is Finland at a perfect 100).

So while Turkey should be doing better, they're at least making an effort (although it's worth saying that both countries had significantly regressed on these metrics compared to a decade ago).

[0] https://en.wikipedia.org/wiki/The_Economist_Democracy_Index

[1] https://freedomhouse.org/country/scores