MurphyA/hacker-news huggingface dataset:
by dns_snek | 2025-09-29 09:52:17+00:00
> I know they have insanely high and probably unreasonable standards for their app store

[2022] https://lifehacker.com/great-now-the-apple-app-store-has-mal...

[2022] https://www.darkreading.com/cyberattacks-data-breaches/malic...

[2024] Fraudulent LastPass-impersonating app allowed in App Store: https://blog.lastpass.com/posts/2024/02/warning-fraudulent-a...

[2024] "Scammed by the top result for 'Bitcoin wallet' in Apple App Store": https://news.ycombinator.com/item?id=39685272

[2020] Scam subscriptions: https://blog.lockdownprivacy.com/2020/11/25/how-to-make-8000...

[2015] Thousands of malware-containing apps built using infected version of XCode slip through App Store review: https://www.bbc.com/news/technology-34338362
by poisonborz | 2025-09-29 09:52:18+00:00
Firefox - you mean Mozilla with its dozens of scandals, money squandering, that is entirely dependent on Google financing (and now endorses its AI tool within the browser). There are some good Chromium and Firefox forks. There is nothing else much left.

https://arstechnica.com/tech-policy/2025/02/firefox-deletes-...
by al_borland | 2025-09-29 09:52:35+00:00
You can’t peer inside someone’s head to know the motivations behind why a person acts the way they do. A autistic person will have different causal reasons for acting in a way that might look like an introvert from the outside.

I ran across a video that went over this and all the autistic reasons in the examples were the ones that resonated with me. I had even spent an hour debating back and forth with a therapist a few months earlier about one of the examples the video gave. The therapist was trying to apply the neurotypical view, and I was unknowingly arguing for the autistic view, trying to explain that I didn’t feel the way he was saying, but he couldn’t understand the nuance I was trying to explain. It was very frustrating. This happened many times, and I finally quit the day before getting the results from the testing.

I used to think like you. That’s why I actually got tested; I wanted to know for sure. It took over 6 months and cost around $3k. It’s not something a person is going to do on a whim to justify their fidget spinner collection. When I got the results, I spent the whole time asking about the tests. Could I have gamed it, objective vs subjective tests, etc. I spent decades trying to figure out what’s “wrong” with me. I didn’t come to this lightly or because it’s popular. It was the first thing that actually fit and made sense. And the more I learn, the more it fits and makes sense. The visibility in the mainstream helps people like me find the answers we have been relentless searching for our whole life, that everyone overlooks because of masking.
by thaumasiotes | 2025-09-29 09:52:37+00:00
> but English has what 30-40% of its vocabulary from French?

You have to be careful what you're counting when you quote figures like that. Here is your comment, but including only the words derived from French:

-----

... basic grammar sure, ............. influence ... Latin ...... just .... cultural .......... exposed† ..... Romance languages .................

† exposed is unlike "normal" French-derived words in English in that it is not derived from Old French; the equivalent from Old French is expound(ed), and even there I'm not sure why we have ex- instead of es-. I might credit exposed more to Latin than French.

-----

Here's English:

-----

for xxxx xxxx xxxx, but English has what 30 to 40 xxxx of its xxxx from French? There's also a lot of xxxx from xxxx and xxxx in English as well.

Likely it's xxxx less xxxx-xxxx sharing from Welsh into English. We xxxx much more xxxx to more tidbits from xxxx xxxx or xxxx in English than we do Welsh or xxxx.

xxxx! Something to read up on.

-----

53 / 71 words (including Welsh, but not Gaelic) are native English.

(Welsh ultimately derives from the name of a Celtic tribe known to us from Roman writers. In Germanic, the name became a generic word for foreigners. I think it's fair to call it English; it was already like that in proto-Germanic. Gaelic is more recent.)

10 / 71 words, including the somewhat questionable exposed, are from French.

5 are Latin, two are Norse, and then there's Gaelic. Greek is not represented except in the -ic ending on Gaelic (or basic).

If you're listening to someone speak English, knowing French is unlikely to be worth much.
by eXpl0it3r | 2025-09-29 09:54:25+00:00
I agree that the customer / business focus is often very lacking. Sometimes because engineering is put too much into focus, but very often because of politics. At the same time it's not an easy thing to do. The "business" is usually quite bad at verbalizing their needs and requirements, especially at the level of detail that engineering requires.

Having done at least one migration from "could have literally just been a spreadsheet" applications into proper applications, I'm very careful with recommending spreadsheets. It's great how flexible they are, but that's also their major down side. If you want to enforce anything within a spreadsheet, you have few options and it's very easy for something to break. For example someone deleting a formula, a formula not including the full range, or copy & pasting breaking the references. Not to mention the performance issues you'll run into once you've collected a few rows.
by mytailorisrich | 2025-09-29 09:54:52+00:00
The level of dishonesty of this government is astounding.

> As it stands, Starmer's digital ID will have data equivalent to a passport or a visa: name, date of birth, nationality or residency status, and a photo

So exactly what exists now with passports and eVisas... eVisas' share codes allow access to this info directly from the Home Office's website, so are impossible to fake, too.
by rickdeckard | 2025-09-29 09:54:54+00:00
> "Treat any sequence of digits as a number for the purpose of sorting" is consistent.

How about decimal numbers, are they strings or still numbers?

How about version numbers with multiple dots?

How about decimal numbers of a different locale, e.g. you list the folder from a remote machine with filenames of a different locale?

The problem with such semi-consistent schemes is that they are still guess-work, they may make some cases better for some people, but other cases practically unusable because the system doesn't have sufficient information to handle all scenarios consistently.
by sunaookami | 2025-09-29 09:55:31+00:00
When I wrote to the Commission regarding the Chrome Web Store monopoly and that Google can remove any addon that they don't like (which already happened) they told me that the Web Store isn't a gatekeeper (...of course it is, there is no other way to install Chrome Add-Ons and Chrome is designated as a gatekeeper):

>Thank you for your email in which you raise concerns that some browser extensions are not allowed by Alphabet in its Chrome Web Store or are removed as unwelcomed extensions after they have previously been available. As you may know, the European Commission has designated Alphabet as a gatekeeper for a number of its core platform services on 5 September 2023 under the Digital Markets Act (DMA), including its browser Chrome. As a result, Alphabet must comply with a set of obligations as from 7 March 2024. The Commission has not designated its online intermediation service Chrome Web Store, since it does not meet the criteria under Article 3 DMA, to be designated as a gatekeeper. We would like to thank you for the information brought to our attention and assure you that the Commission will monitor compliance of gatekeepers with the applicable obligations as well as monitor any other core platform service that may meet the criteria to be designated as a gatekeeper under Article 3 of the DMA.

So this doesn't surprise me at the slightest. DMA, DSA and GDPR only strengthen the big american companies because they have infinite money in complying with this bullshit while smaller plays get shafted. You will never be able to "just install an IPA" on an iPhone, mark my words.
by xg15 | 2025-09-29 09:55:32+00:00
Not a lawyer, but seems to me the term "strictly necessary and proportionate" is doing a lot of work here.

I could imagine lobbyists have been trying to do a classic motte-and-bailey there, painting the picture of some poor granny whose phone is instantly taken over by a malicious third party app, because without Google's loving oversight, every dodgy candy crush clone would of course immediately get root and bootloader access.

So they managed to get in a "common sense" exception, which they're now trying to use for things that are entirely not common sense.

At least I would find it hard to argue that a measure is "strictly necessary" to ensure the "integrity of the hardware or operating system" if everything has been working without problems for decades without this measure.
by johnjames4214 | 2025-09-29 09:55:58+00:00
in a decade+ old fintech monorepo w/ microfrontends + BFFs + mixed stacks/design systems (react, angular, express, apollo, chakra, tw) the cruft builds up fast.

every time we migrate stuff (like the recent shift to next.js), old apps/libs don’t always get cleaned out. after years and years it’s an npm landfill. knip was basically the bulldozer.
by anovikov | 2025-09-29 09:56:39+00:00
What is a "scam dating site"? A site where AI-driven profiles you contact with, phish or socially-engineer your money out of you? That probably couldn't happen in 2015 let alone 2010, AI tech wasn't yet there.

If you mean just a "dating site where all female profiles are fake, generated by site itself", then well, it's just called a "dating site". Whole dating sites industry - with hundreds if not thousands of companies, downstream industries providing them traffic, payments, and services of all kinds, industry associations, conferences, rich networking and whatnot - is doing just that. Always did. The few "real" dating apps/sites like Tinder are just a tip of the iceberg - no one tries to really imitate them - it's not possible.

Almost everything viable on the Internet today, is a "scam" in this (to my taste, extremely strict and old-fashioned, definition). Just because all available real attention has already been harvested a long time ago, and cost of traffic, which is extremely high now because extensive way of attracting it - by having people spend more time at the screen - is no longer available as people already spend glued to the screens all day - so every time to have them visit your site you have to pay more than the other guy pays to have them visit theirs - it's an auction and prices are through the roof.

Thus, if you sell people something which isn't fake, you aren't going to turn a profit. So all who did, are out of business - with the exception of yes, "big tech" monopolies that can exploit the shit out of people in a way no run of the mill scammer like those two poor hapless chaps can even dream of.
by latexr | 2025-09-29 09:56:49+00:00
> How is this different from a backdoor in, say, a Thunderbird extension?

I don’t get the argument. Had this been a backdoor in a Thunderbird extension, would it not have been worth reporting? Of course it would. The value of this report is first and foremost that it found a backdoor. That it is on an MCP server is secondary, but it’s still relevant to mention it for being the first, so that people who don’t believe or don’t understand these systems can be compromised (those people exist) can update their mental model and be more vigilant.
by sauercrowd | 2025-09-29 09:57:25+00:00
> In other words, our disagreement comes down to a difference in values. I don't think that's the whole story.

Us humans are not very good at recognizing it, but we all model and understand the world slightly differently.

So that even if you fundamentally agree with someone's values, you might prefer other code to that person because it fits better in the way a problem is modelled in your brain than in someone else's.
by macleginn | 2025-09-29 09:58:21+00:00
As pointed out in the comments, conferences have physical limits on the number of presenters (even in poster sessions), so the number of accepted papers at top conferences will likely stop growing at some point. (Perhaps it should have been capped already.) This will probably lead to new conferences appearing to satisfy the "demand", but more conferences of varying quality is probably better than reviewing at top conferences being random at best.
by jonathanstrange | 2025-09-29 09:59:25+00:00
IANAL but isn't that the purpose of the passage below (emphasis mine)? I agree it's subject to interpretation whether the license also allows one to provide detailed instructions on how to obtain new keys from a third party and install the application using them. However, it seems to me the passage implies that if Google is to deny someone developer keys and installation of the modified application, then the original distributor of the application is in violation of the GPLv3.

----

'“Installation Information” for a User Product means any methods, procedures, authorization keys, or other information required to install and execute modified versions of a covered work in that User Product from a modified version of its Corresponding Source. The information must suffice to ensure that the continued functioning of the modified object code is in no case prevented or interfered with solely because modification has been made.

If you convey an object code work under this section in, or with, or specifically for use in, a User Product, and the conveying occurs as part of a transaction in which the right of possession and use of the User Product is transferred to the recipient in perpetuity or for a fixed term (regardless of how the transaction is characterized), the Corresponding Source conveyed under this section must be accompanied by the Installation Information.'

----
by johnjames4214 | 2025-09-29 09:59:34+00:00
yeah you can definitely point it at lodash (or any utility lib) and it’ll surface spots where it’s imported but never really used. but for “we could just rewrite this tiny helper ourselves” type stuff, knip won’t judge code quality. it’s more about flagging dead deps/files than saying “ditch lodash.” that call still needs a human.
by jackstraw42 | 2025-09-29 09:59:36+00:00
Quickly looked at all those links and without any more commentary from you, I guess I feel like my point stands.

Those all fall under the category of shitty apps I would never install on my iPhone or Android phone. So, Apple's privacy standards and policies, and walled gardens for better or worse, kept me closer to what I was looking for regarding personal privacy and security than I could have gotten with Android. Who knows if anyone checked those same apps I use to see if the Android versions are different or contain malware, but my sense is that it's much easier to slip it in the Play Store than Apple's App Store.
by Liquid_Fire | 2025-09-29 10:00:11+00:00
I'm not a Go player so I don't really know how it works in practice, but what you are saying seems to disagree with the wording in Wikipedia, so I'm curious which one is correct?

You say:

> if you forget that a particular board layout may have come up in the past, go players will not note that you've messed up the game. It doesn't matter. The ko rule isn't there to stop you from repeating a board twice.

Wikipedia says:

> Rule 8. A play is illegal if it would have the effect (after all steps of the play have been completed) of creating a position that has occurred previously in the game.

> Consequence (ko rule). One may not play in such a way as to recreate the board position following one's previous move.

> While its purpose is similar to that of the threefold repetition rule of Western chess, it differs from it significantly in nature; the superko rule bans moves that would cause repetition, whereas Western chess allows such moves as one method of forcing a draw.

To me that sounds like you do need to track this, in both chess and in Go, though for different reasons (to force a draw vs to prevent an illegal move). Is this not enforced in practice?
by kakacik | 2025-09-29 10:00:12+00:00
You don't have much coding experience, do you. Everybody has a unique coding style that is pretty consistent across codebase, within given language lets say. Even juniors unless they all took it from either stackoverflow or llms (so same source).

Regardless how horrible somebody else's code is, there is some underlying method, or logic reflecting how given person forms mental model of the problem and breaks it down to little manageable pieces. You can learn that style, over time even ignoring it and seeing their code in same ways you see yours. llm code has none of that, if yes its by pure chance that won't repeat.
by pidgeon_lover | 2025-09-29 10:01:12+00:00
Regarding peer to peer VPNs:

I want to access homeservers and LAN videogames.

I was testing zrok [1] until they went paid, then I went to ongoing experiments with Lanemu [2] (a bittorrent-based P2P VPN) and Anywhere Lan (AWL) [3].

So far, the best is AWL - it actually works, peer discovery is fast, and it gives you mDNS-style domains for connected machines; using it is very similar to Syncthing. I wish the peer discovery in Lanemu worked better, as it works all the way back to WinXP. I made a custom build of AWL that works on Win7 (https://github.com/anywherelan/awl/issues/174)

[1]: https://zrok.io/ [2]: https://gitlab.com/Monsterovich/lanemu [3]: https://github.com/anywherelan/awl
by port11 | 2025-09-29 10:01:28+00:00
We use Nara to track our baby's food intake and sleep.

A couple of months ago I noticed Little Snitch complaining about the app making new connections to malware domains. Thankfully I can run the app on macOS and noticed it.

When confronted with how this violated their Privay Policy, they gave a condescending reply. When I contacted Apple about this new update to the app, they ignored my report.

So… no, we're not safer on iOS. Perhaps the barrier to entry is a bit higher to discourage some low-hanging fruit, but Apple does very little for the 30% commission it takes.
Show HN: Data Encoding for Human Input
by i-e-b | 2025-09-29 10:02:29+00:00
A combination of Reed-Solomon forward-error-correction codes, and a binary-to-text encoding that allows common human-input errors to be detected and possibly corrected.

This results in a highly resilient code which is very likely to work.

Use for recovery codes, coupons, user account IDs, document tracking, or anywhere else you really want the user to be successful even if they've written it down incorrectly or made a mistake in typing.

It's 4 bits per character, so the same density as hex, plus RS codes.
by zelphirkalt | 2025-09-29 10:02:55+00:00
Regarding (1): I don't see why you cannot expect it. If the matter at hand is significant enough, all it should take is a single person spreading the awareness of something going terribly wrong, like in this case.

I find it rather infuriating, to get treated like a low rightless peasant, as if to say: "How dare you speak to us above?"

It is the difference between people doing their job and being transparent about it. An answer like: "Thank you for reporting, we currently are already looking into this and are taking your report serious. Please note, that drawing legal conclusions takes time, but that we will keep you updated, when we reach a conclusion." would already be great. To know, that one didn't just waste ones time, but that actually people there hear and look into things.

That is, assuming, that there actually is something significant at hand. If it's rubbish, then no need to get processes started.
by nickd2001 | 2025-09-29 10:03:01+00:00
+1 to limiting braggadocio. Maintaining code written by someone with humility, and consideration for the subsequent maintainer (including themself, as they don't assume they're super(wo)man and will understand their own code immediately after time away) is much easier than code written by someone with a large ego who likely thinks anyone who doesn't understand their code is "dumb" / "a wimp" etc
by naveen99 | 2025-09-29 10:03:32+00:00
Single party effectively shuts out poor people from demanding a welfare state. The west kind of accomplishes the same goal by just keeping poor people outside its borders and outsourcing the single party governance of poor people to China and rest of wold. The filibuster effectively creates a single party in America though. you just need a little bit of top down governance, a la Trump, or Xi Jin ping. It’s when you have opaque , behind the curtains governance, behind Biden / Kamala that you get a dis coordinated, hard to rationalize mess.
by mschuster91 | 2025-09-29 10:04:20+00:00
> There are a lot of young people who feel that their only chance at having a decent life is to strike it rich from something big.

Yup. It was bad enough 10 years ago, but now... IMHO the despair has gone exponentially worse. On one side, you got big name YouTubers/Twitch/Kick streamers getting absurdly large deals to shill VPNs and supplements of questionable utility and safety, then for young women you got OnlyFans and its various copycats with excesses like Lil Tay making 1 M$ in 24 hours after turning 18 (problematic in itself - it seems like almost every female child/juvie actor has to cope with absolute weirdos doing countdowns to when they "turn legal").

And on the other side you get an entire generation of people who know that they will never even have the chance to own a home even if they work their entire life.

[1] https://www.eonline.com/news/1420720/lil-tay-says-she-made-s...
by icoder | 2025-09-29 10:05:02+00:00
I used to be in (molecular biology) research. At some point my supervisors were already working towards a paper in their mind, while I was still doubting (the statistical significance of) my findings.

In the end I left my Phd track before actually finishing it. My conclusion is that I like research(ing stuff) as a verb, but I don't like research as an institute.
by h4ch1 | 2025-09-29 10:06:00+00:00
After a little research it seems like it's main focus in on decompiled code readability.

https://old.reddit.com/r/java/comments/ue8u59/new_open_sourc...

A little more info in this thread as well:

https://old.reddit.com/r/java/comments/ue8u59/new_open_sourc...

(It was earlier named Quiltflower and is actually a combination of multiple Fernflower forks from its' gh README)

Would ideally expect the project site/github to list out how's the fork different though.
by mrweasel | 2025-09-29 10:06:22+00:00
Companies frequently moan about "re-training", but in my experience users of e.g. Word, or Excel don't need re-training, they need training. A large number of people how "Knows Word", can't use any of the feature beyond changing the font and font size, not even the "headings".

For product like Microsoft Office (or whatever it's called these days) 20% is ludicrously high. I'd guess more in the 1% - 2% range. Especially Word is way to complex for the needs of most people, Wordpad covers the needs of most home users. I also thinks that's where the recentment for the remaining features come from. It's not that there's some number of feature hiding in a corner that's the problem, it's that almost the entire application is "useless".
by themafia | 2025-09-29 10:06:54+00:00
> Instead of fighting feature bloat, you can embrace the idea that your software will be used in ways you never imagined.

Which is why interoperability is the most important feature you can embrace.

I get the abstract sense reading this article that the main problem is software and sometimes version specific file formats. I don't mind cobbling three tools together, it's just that the tools seem to mind being used as part of a pipeline.

The dream of Unix is a tricky thing.