MurphyA/hacker-news huggingface dataset:
by marklar423 | 2025-09-08 18:33:22+00:00
I've been trying to do this too - paring down distracting apps, leaving only essentials like communication, maps, uber, etc. But my problem is what to do about the browser? I feel it's too essential to the "long tail" of uses (as the author put it), but also among the most distracting apps on my phone.

If anybody has any ideas I'd love to hear them.
by lillecarl | 2025-09-08 18:33:24+00:00
Just because in 2025 the defaults don't have YouTube or Gmail doesn't mean they've not already entrenched themselves.

I can't tell you EXACTLY which sites aren't blocked by your domain based adblocker, I'm not an adblock developer.

If you believe Google doesn't deserve antitrust measures for their duopoly with Apple you're free to do so, you're still arguing against things you interpret freely to make your points.
by bnycum | 2025-09-08 18:33:38+00:00
No surgery and I don't wear any vision correction, they aren't gone 100% just reduced greatly. I really only ever notice them when going from dark to light. Typically never inside my house under normal light, mainly just outdoors.

My diet does lack seafood overall. While I love salmon my family doesn't. If we eat seafood it's mainly catfish and shrimp though, as we are in Louisiana.
by AlecSchueler | 2025-09-08 18:33:47+00:00
The GP comment was about tuning out, they mentioned feeling guilty for not following the rise of authoritarianism in their country. I was responding within that context.

Of course you can follow the news and still be mislead and of course you can keep to do date with what's happening in other ways, but tuning out and feeling guilty about it was what was explicitly being discussed as I understood it.

I then understood your comment within that context as being flippant about that kind of tuning it. However it seems we just got our wires crossed so apologies for my tone.
by tgsovlerkhgsel | 2025-09-08 18:34:07+00:00
Absolutely the right security trade-off for Signal users. Anything else would devalue the entire product.

Whatsapp chose a different approach (which is reasonable for their user base) but that means that there is an escrow key. Regardless of your choices, messages that you sent may end up "end to end encrypted" but in reality stored in the cloud with a key escrowed to Meta...

The backup feature seems to be opt-in, i.e. the requirement to write the key down won't be too surprising.
by btilly | 2025-09-08 18:34:38+00:00
Assuredly you have encountered the idea that an organization with a culture, incentive structure, and specific financial incentives, will act sufficiently like a living being that people find it helpful to talk about it as one. While understanding the actual complexity of what is going on.

Apparently you've chosen to willfully refuse to understand what others mean when they such language. The result of which is a guaranteed miscommunication, and your ability to insist to yourself that you're right.

I will not bother attempting to discuss this further. If you choose to not understand why it is that organizations frequently and predictably act in ways that are not under the control of any individual within them, that is your prerogative. If you refuse to understand the kinds of language that people usually use to convey that idea, that's up to you.
by rs186 | 2025-09-08 18:35:10+00:00
That's an extremely rare edge case that fails to justify your point spectacularly.

I thought the comment says "it was an absolute dream for consumers" but actually it says "it's". Sorry to burst your bubble, if you ask any normal person who does not spend 10 hours on HN per week, chances are that they have never heard of the term RSS in their life.
by terpimost | 2025-09-08 18:35:43+00:00
Antithesis | Multiple Roles | Onsite | Full-time | Vienna, VA (D.C. metro area)

We are making autonomous testing platform that finds bugs in your software with perfect reproducibility to help you fix them.

Please apply here https://antithesis.com/company/careers/

Hot roles:

- UI Engineer | Frontend Developer (I review every application)

- Product Marketing Manager
by ajcp | 2025-09-08 18:35:48+00:00
You are severely underappreciating how complex a retail organization of Tesco's size is.

I work in this space for a retailer almost the same size as Tesco and when factoring in all the attendant organizations, businesses, and functions it requires, 40k servers does not surprise me at all.

Outside of just the brick-and-mortar stores you have Marketing, Retail, eComm, Merchandising, Strategic Sourcing, FP&A, Finance & Accounting, Asset Protection, Corporate Real Estate, Retail Real Estate, Internal Audit, Supply Chain, Transportation, Business Services, Data Science, etc etc. and IT at every level of those. Each one of these components is large enough to be a medium-to-large sized company in its own right.
by thedougd | 2025-09-08 18:36:00+00:00
HIPAA services are not separate. You only need to establish a Business Associations Addendum (BAA) with AWS and stick to HIPAA eligible services: https://aws.amazon.com/compliance/hipaa-eligible-services-re...

GovCloud exists so that AWS can sell to the US government and their contractors without impacting other customers who have different or less stringent requirements.
by hs586 | 2025-09-08 18:36:15+00:00
Came to write something along these lines. I do this for restaurants, and sometimes for the places that refuse to take cash. But I do not have hope that such behaviour will impact the restaurants' policies: it's usually chains or non-owner-ran places that will have a "high-tech" policy and I am not sure if this kind of feedback reaches the decision makers.

But these days (for now) finding another restaurant is easy. The author mentions that his gym requires having a smartphone. Now, that's a much bigger problem.
by michaeldoron | 2025-09-08 18:37:06+00:00
a. Amen to the internet being a great tool for learning

b. I acknowledge this is a tangent, but I would say the same about LLMs. They can have plenty of negative effects on society as a whole and individuals using them, but I found that when I use them as a tool for learning they are usually great and a net positive, both at the time of learning and later on when using that knowledge on my own.
by rdtsc | 2025-09-08 18:37:21+00:00
OpenWrt is what I use. I picked my routers specifically to be well supported by OpenWrt, immediately wiped whatever the original firmware and installed OpenWrt and that was about ten years ago. Then when I replaced the hardware I also looked for a compatible model with OpenWrt and did the same.

I never had any issue with OpenWrt which I couldn't solve and it just works. Its uptime is pretty much the uptime since when the power goes out due to storms and such.
by ivape | 2025-09-08 18:37:31+00:00
but it's akin to being a project manager contracting the work out.

And that's probably the difference between those who are okay with vibe coding and those who aren't. A leader of a company that doesn't care about code quality (elegant code, good tradeoffs, etc) would never have cared if 10 monkeys outputted the code pre-AI or if 10 robot monkeys outputted the code with AI. It's only a developer, of a certain type, that would care to say "pause" in either of those situations.

Out of principal I would not share or build coding tools for these people. They literally did not care all these years about code quality, and the last thing I want to do is enable them on any level.
by moduspol | 2025-09-08 18:37:42+00:00
I just made a similar transition a few weeks ago.

I just often felt like I wasn't making progress on various things I've been wanting to, that I used to do, and for which I kept telling myself I don't have time. And it wasn't difficult to tell where my time was going based on the Screen Time app.

For me, I've drawn the line at endless feeds, which for me, was Reddit and Facebook. And for the first week or two, I was often catching myself in a split-second of boredom just opening up one or the other (just to be greeted by an error message). Now that instinct is gone.

I don't think I was as bad as the people endlessly doom-scrolling through TikTok, but it was certainly bad enough that I felt like I didn't have enough free time to work toward life goals that were outside my work time. And it's a lot better now.
by ath3nd | 2025-09-08 18:37:52+00:00
LLMs have been existing for 5-6 years already in some shape and form. How long do I have to wait for Claude to actually do something and me starting it to see it in OSS?

- Cause currently what we see in OSS is LLM trash. https://www.reddit.com/r/webdev/comments/1kh72zf/open_source...

- And a large majority of users don't want that copilot trash in their default github experience: https://www.techradar.com/pro/angry-github-users-want-to-dit...

At what point that trash will become gold? 5 more years? And if it doesn't, at what point trash stays trash?

- When there is a study showing that trash is actually sapping 19% of your performance? https://metr.org/blog/2025-07-10-early-2025-ai-experienced-o...

- When multiple studies show using it makes you dumb? https://tech.co/news/another-study-ai-making-us-dumb

Cause I am pretty sure NFT still has people who swear by them and say "just give it time". At what point can we confidently declare that NFTs are useless without the cultist fanbase going hurr durr? What about LLMs?
by logicchains | 2025-09-08 18:37:55+00:00
>Overall, this is a good thing - I certainly don't want to go back to superstition, subsistence farming, and dying of infectious diseases at 50.

A nitpick but people weren't dying at 50; they were dying as infants. The average life expectancy was around 50 because so many children died, but the life expectancy of people who made it past age 5 was around 60-70: https://pmc.ncbi.nlm.nih.gov/articles/PMC2625386/ .
by achierius | 2025-09-08 18:38:20+00:00
Are these CEOs not "actual criminals"? Frankly, a CEO who knowingly allows his company to put poison (melamine) in the baby formula they produce -- killing several babies and hospitalizing *51,900* others -- is far more of a "criminal" than a simple mugger. Muggers can only hurt so many people, while major corporations have the capacity to cause harm on a society-wide scale.
by golly_ned | 2025-09-08 18:38:20+00:00
Amazon did this, at least for a time, as part of a "No See, No Hear" hiring pilot program.

The purpose was to see if they could hire university graduates with a minimum of human interviewing effort. They selected from a handful of universities, gave a couple online tests, verified the candidate's identity as the test-taker, then would give out offers sight-unseen.

I was hired this way in 2015. From my perspective, I had taken a couple online tests, then months later had a thirty-minute identity verification call, then a couple months later, was sent a job offer. I thought it was by mistake, so I didn't ask too many questions. I had a thirty-minute call with a hiring manager I otherwise never interacted with, then accepted, flew internationally back to the states to Seattle to start, met him and all my teammates for the first time on my first day of work.

I found the internal documents about this program later on spelunking in the internal wiki.
by wduquette | 2025-09-08 18:38:45+00:00
There were lots of blogs that were personal diaries back in the early days; but there were always many blogs the weren't. The first "web log", in my opinion, was the page at NCSA, home of the Mosaic browser, that was literally a log of new web servers coming on-line. I used to go there daily to see what was new. (Later I used Yahoo for that purpose; and not much later than that I gave up. :-)

Another big site for early blogging was Dave Winer's "Scripting News", in which he talked about Frontier and Radio Userland, two early web platforms. Winer was also responsible for "EditThisPage", the first web site I ever saw that allowed editing a website on another server through the browser. It was followed by Weblogs.com, which hosted some of the earliest blogs. I had one there, briefly.

And then, of course, there was GeoCities, where you explicitly picked your "city" based on the kinds of things you were going to be writing about. Blogging was always extremely hetergeneous.

What we didn't have in the early days was monetization or, naturally, an intense focus on monetization.
by cstrahan | 2025-09-08 18:38:47+00:00
> The alternative is to import packages directly from the (git) repository.

That sounds great in theory. In practice, NPM is very, very buggy, and some of those bugs impact pulling deps from git repos. See my issue here: https://github.com/npm/cli/issues/8440

Here's the history behind that:

Projects with build steps were silently broken as late as 2020: https://github.com/npm/cli/issues/1865

Somehow no one thought to test this until 2020, and the entire NPM user base either didn't use the feature, or couldn't be arsed to raise the issue until 2020.

The problem gets kinda sorta fixed in late 2020: https://github.com/npm/pacote/issues/53

I say kinda sorta fixed, because somehow they only fixed (part of) the problem when installing package from git non-globally -- `npm install -g whatever` is still completely broken. Again, somehow no one thought to test this, I guess. The issue I opened, which I mentioned at the very beginning of this comment, addresses this bug.

Now, I say "part of of the problem" was fixed because the npm docs blatantly lie to you about how prepack scripts work, which requires a workaround (which, again, only helps when not installing globally -- that's still completely broken); from https://docs.npmjs.com/cli/v8/using-npm/scripts:

prepack - Runs BEFORE a tarball is packed (on "npm pack", "npm publish", and when installing a git dependencies).

Yeah, no. That's a lie. The prepack script (which would normally be used for triggering a build, e.g. TypeScript compilation) does not run for dependencies pulled directly from git.

Speaking of TypeScript, the TypeScript compiler developers ran into this very problem, and have adopted this workaround, which is to invoke a script from the npm prepare script, which in turn does some janky checks to guess if the execution is occuring from a source tree fetched from git, and if so, then it explicitly invokes the prepack script, which then kicks off compiler and such. This is the workaround they use today:

https://github.com/cspotcode/workaround-broken-npm-prepack-b...

... and while I'm mentioning bugs, even that has a nasty bug: https://github.com/cspotcode/workaround-broken-npm-prepack-b...

Yes, if the workaround calls `npm run prepack` and the prepack script fails for some reason (e.g. a compiler error), the exit code is not propagated, so `npm install` will silently install the respective git dependency in a broken state.

How no one looks at this and comes to the conclusion that NPM is in need of better stewardship, or ought to be entirely supplanted by a competing package manager, I dunno.
by Bender | 2025-09-08 18:38:49+00:00
I like their proposal but I doubt it will see the light of day unless someone up high pushes it through all the bureaucracy. When I think of the fictional Vogons, I think ma-bell and the NRC and that's even comparing them to the Department of Defense. Either way I wish them good luck. Why? Putting micro nuclear power plants in dense populated areas will never clear all the safety hurdles. I would expect the small towns in the middle of nowhere to get approvals first which is happening near me and still took a really long time.
by bronlund | 2025-09-08 18:38:54+00:00
I'm not criticising Minkowski, I'm criticising the author of the article. He starts out by talking about one dimensional lines, then suddenly jumps to curves as if they could be mistaken for the same thing. And in my humble opinion, it goes downhill from there. He even manage to talk about one dimensional squiggles which is an oxymoron. In one dimension, nothing is squiggly - that is an effect of higher dimensions.

That being said, I don't care much for Einstein's relativity or the derived works either. I think Maxwell was on to something and that quantum mechanics more or less agrees with him.
by ziml77 | 2025-09-08 18:39:13+00:00
After nearly being phished once (only having a confirmation email save me) I've taken to being extra vigilant if I don't get a password entry suggestion from my password manager. It means I need to be extremely damn sure I'm on a domain that is controlled by the same entity my account is with. So far I haven't had another incident like that and I hope to keep it that way.
by johnyzee | 2025-09-08 18:39:34+00:00
Yes. A real, raw source is almost certainly better than a processed and treated source. Packaged fish oil is sometimes rancid, unnoticeable to you, and those oxidation products are harmful. It is also heavily loaded with antioxidants, without which fresh fish oil goes rancid within hours, and which have their own detrimental effects when in excess.
by Dig1t | 2025-09-08 18:39:41+00:00
So yeah if you read that explanation but can’t understand why that isn’t convincing these people, then I would say you are not really trying to understand these people’s concerns. This explanation is basically making the anti-vaxxer argument for them. An uncharitable/skeptical interpretation of their explanation is one that hurts the cause. It basically sounds something like “drug companies couldn’t show their vaccines were safe enough like other drugs, but the government still wanted a supply of them anyway so they had to give them special protections”.

Basic question: so why does this stable supply concern apply to vaccines but not any other types of medicine? If you have concerns that one of these vaccines has some serious side effect, why is it important to have a stable supply of it?

I just feel like asking these types of basic questions leads to such vitriol like in your response, it’s no wonder nobody trusts you.
by Arnavion | 2025-09-08 18:40:07+00:00
>[Updated on 2025-09-09 to clarify the affected builds are 32-bit x86]

That's nice... When this was originally posted on 09-05 it just mentioned "32-bit support", so I'd been worried this would be the end of me using FF on a Microsoft Surface RT (armv7, running Linux).
by mgh2 | 2025-09-08 18:40:24+00:00
> Meta did not directly dispute or confirm the events in Germany described by the researchers, but said such a deletion would have been meant to ensure compliance with a U.S. federal law governing the handling of children’s personal data and with the General Data Protection Regulation, a landmark European privacy law that broadly prohibits companies from collecting personal information from anyone without consent.

"Concerns on privacy", ironic and laughable.

Meta is a just a PR company brainwashing its users.
by taylodl | 2025-09-08 18:40:38+00:00
I think people are going to discard it. It'll be interesting to see what people propose to replace it with considering all the alternatives have failed. Maybe you're right and we'll resume with a stricter regulation. At this point though we have bigger fish to fry: Americans have just learned they have no inalienable rights. All their rights are what the government allows them to have. Several people have come to that realization over the lifetime of the US, but now that realization is hitting everyone en masse. How that is dealt with my drive how capitalism is dealt with.
by parliament32 | 2025-09-08 18:40:41+00:00
The NPM team has repeatedly commented that it's "too hard", effectively, and would discourage new developers from publishing packages. See:

https://github.com/npm/npm/pull/4016#issuecomment-76316744

https://news.ycombinator.com/item?id=38645969

https://github.com/npm/cli/commit/5a3b345d6d5d175ea9ec967364...
by dns_snek | 2025-09-08 18:40:44+00:00
> Especially after SyncThing disappeared from Play Store (because it was basically a non-Android app behind a thin Android shell that couldn't easily be upgraded to more modern native APIs), there's nothing super-obvious here.

That's not what happened, it was Google who started rejecting their updates on Play store. I believe the original Android app maintainer quit after that but there's a fork on on F-droid which works perfectly.
by nine_k | 2025-09-08 18:40:45+00:00
This is because you cannot easily remove problematic stuff from the browser. It's actively being used by someone, so the vendors keep it, so it continues to be used. The process takes decades, literally.

On the server side, of course, you can do whatever you like, see Node / Deno / Bun. But the code bundle size plays a minor role there.
by iJohnDoe | 2025-09-08 18:41:09+00:00
This reason this title is clickbait is because flying empty airplanes is actually really controversial.

Airlines need a certain amount of flights to keep their gate slots at airports.

Ghost flights were a thing during COVID. You had airlines burning 30,000 to 80,000 gallons of fuel and putting tons of pollution into the air for empty flights just to maintain gate slots.

I was expecting this article to be about these types of ghost flights.

> The rule: At busy airports, airlines must use their allocated takeoff and landing slots for a certain percentage of their scheduled flights (typically 80%) to retain them for the next season.

> Regulatory response: The rule was initially relaxed in March 2020 but was later reintroduced with lower thresholds, such as 50% or 70%, which still compelled airlines to operate some unnecessary flights.
by Kirby64 | 2025-09-08 18:41:36+00:00
Are we reading the same list?

The mini cooper EV is a joke of a car. 114 miles is ridiculous for $30k. Likewise, the 'base' Nissan Leaf is 150mi for $30k isn't much better.

The crossover/small-SUV segment is a little more competitive, but still you're comparing vehicles with quite dissimilar (n.b., worse) specs for lower prices.

If all you care about is a car that is electric that can be driven, then sure, there's cheaper cars. That doesn't mean they're better or reasonable for most consumers.
by throw-qqqqq | 2025-09-08 18:41:49+00:00
I’m from Northern Europe so YMMV, but in this country IQ/cognitive tests are quite common for senior roles or management.

I’ve had to take a few. I don’t mind too much. It’s mostly to test if you are WAY below what they expect for the position.

The personality trait tests are also quite common IME.
by dboreham | 2025-09-08 18:42:28+00:00
OP entered their credentials and TOTP code, which the attacker proxied to the real npmjs.com

FWIW npmjs does support FIDO2 including hard tokens like Yubikey.

They do not force re-auth when issuing an access token with publish rights, which is probably how the attackers compromised the packages. iirc GitHub does force re-auth when you request an access token.
by alt227 | 2025-09-08 18:42:32+00:00
Exactly. 'Resistant' not 'impenitrable'.

The article itself says that 100% phishing resistance is impossible. So I stand by my arguement that if you give an idiot a Yubikey, it still doesnt save them from themselves.

>Does this technology eliminate all risk? No. As this becomes widely deployed new attacks will be developed, but it will be MUCH harder for the cyber attacker.

> FIDO is extremely resistant to phishing attacks but adopting FIDO does not mean your organization is secure against phishing.
by ZeroGravitas | 2025-09-08 18:42:43+00:00
Did you read the whole quote? You've added your own spin that I don't think is supportable.

I went and watched some of the source podcast before the lack of logic wore me down.

> You can’t just assert things in the way you can on TikTok or on YouTube.

This bit actually supports his argument as he originally said this on a YouTube podcast.

If you want to steel man his argument, he's worried about the loss of literacy i.e. the replacement of text by video. But all of his arguments are woolly BS and mix up print books and digital reading and reading for pleasure as if these were all the same thing in a really sloppy way.

He quotes people worried about TV in the 1960s, when we know the IQ was rising for decades afterwards.

The American guy supporting him goes on an extended tangent about how you can't pause video in the same way you can pause a book at which point I gave up.