MurphyA/hacker-news huggingface dataset:
by TheDong | 2025-10-05 12:37:40+00:00
This is another case of being on the other side of an airtight hatchway: https://devblogs.microsoft.com/oldnewthing/20060508-22/?p=31...

If someone has arbitrary code execution on your machine as your user, then of course they can access things your user can access.

They could just as easily keylog your password, or replace the onepassword-cli binary with one that exfiltrates data, or steal your browser cookie to get into your email account and use that to hijack recovery flows...
by leobg | 2025-10-05 12:37:44+00:00
Beautiful. Sounds like they’re doing with pens in Maryville what Tesla did with the Model S in Fremont.

> Peterson […] found that the factory could use robots to do an increasing share of the packing. But he decided to keep the employees who knew the company and convert their jobs to roles such as automation engineering. In that case, an employee would fix a robot instead of packing a box. Peterson estimates the average wage at its Maryville facility, which employs 550 staff, has gone up some 50% over the past five years—without a change in head count.
by RickJWagner | 2025-10-05 12:39:21+00:00
Sure, it’s popular among the shrinking pool of Democrats.

Democrats as a whole are polling at record low levels. 34% surveyed approve of the Democrats, 59% disapprove.

That’s not from a single poll, it’s an average of the most recent polls.

https://www.realclearpolling.com/polls/favorability/rcp_aver...
by redhale | 2025-10-05 12:39:30+00:00
I think seatbelts or airbags are better analogies.

And both seatbelts and airbags are mandated in the US.

Of course saving lives isn't the ONLY metric (perhaps all personal vehicles would be banned if that were the case), but we make reasonable compromises all over the place in the direction of saving lives. I think the discussion is just over what people generally see as "reasonable". And public opinion can change drastically over time [0], due in part to the popularization of studies like this.

[0] https://www.wpr.org/history/surprisingly-controversial-histo...
by dariusj18 | 2025-10-05 12:39:43+00:00
Not a big fan of this kind of promo article that just links to several of their own learning resources instead of giving some actual examples inline.

I've worked in Mongo enough to know that whatever decision I make will end up being wrong.

What i will never understand is why mongo doesn't have some simple means of document referencing that automatically updates documents a doc is embedded in. If it's such an important pattern that every app needs to reinvent for itself, just add it to the system.
by anonbuddy | 2025-10-05 12:40:39+00:00
that is exactly what is going to happen, as more people become aware.

that's why we all need to exercise our rights and freedoms. I'm scared that if we fail to do this in next few years. And let the AI be used in similar ways like it has been used to create social media algorithms. Then we are all fucked!

Whoever owns your AI owns you, so it better be you who owns it!
by metalman | 2025-10-05 12:40:57+00:00
everybody is working up fully autonomous drones russians are fielding fiberopp drones retail drones are bieng weaponised everywhere delivery drones agricultural drones search and rescue drones so, no "fighting back" , as we enter a new age of universal aysymetric warfare

prolly better to have peace overwhelm peoples desires for revenge and mayhem, but I am thinking there will be an upswing in billionares building bombproof stuff, and a lot of mayhem happens before peace breaks out
by estearum | 2025-10-05 12:42:44+00:00
Yes if you are friends with and deeply networked with professional artists and designers, you'll see a lot more hobby art. Most people are not friends with even one (never mind several) professional artists though.

This scenario is irrelevant to my main thesis anyway, which is that people principally do not develop artistry to the levels required for strangers to care about it without doing so as a professional pursuit.

That you get to see the exhaust and byproducts of such a professional pursuit isn't a point against it.
by OptionOfT | 2025-10-05 12:43:17+00:00
Right. You can have the best documentation:

If they expose them as string and mention they're opaque? Then customers who parse them to uint will get bugs and be unhappy.

Did they expose them as ints? Customers who used uints will be unhappy.

At `jobs[-2]` the front-end parsed the ids (exposed as strings, but ints under the cover).

The backend left them alone.

That caused some issues when building out shared libraries.
by chrisldgk | 2025-10-05 12:43:27+00:00
Which is just laundered from real material that real humans put work in to create, only to be regurgitated by a krass homonculous of 1s and 0s for free without any mention of the real work that has been put into creating that information.

I’m not a big fan of the copyright system we have myself, but there’s a reason it exists. AI companies illegally training their AI on copyrighted content to reap the spoils of the hard work of other people that never get recognition for their work is the opposite of „giving back“.
by lerp-io | 2025-10-05 12:43:46+00:00
you store ur photos on fb same way you store your money at the bank and your code on github, its delegation of concerns, you can make same argument for literally anything....not using your own silicon, growing your own food, financing your own venture, owning your own land, etc etc.... maybe its more "secure" vs "less efficient" or some other tradeoff. and you have to get the right balance or take risks for optimal efficiency / profit/whatever your values are
by renatko | 2025-10-05 12:44:00+00:00
Location: Georgia, Tbilisi

Remote: Yes

Willing to relocate: Maybe

Technologies: PHP / Symfony / Laravel / TypeScript / Go / Docker / Kubernetes / Google Cloud / AWS / Redis / Kafka / RabbitMQ / Clickhouse / MySQL / PostgreSQL / GraphQL and more

Email: hn@bilalov.net

LinkedIn: https://www.linkedin.com/in/rbilalov/

CV: https://cv.bilalov.net/

Hey! 15+ years of backend experience in small and enterprise-like teams. Able to cover the entire backend: code, databases, message queues, API, devOps, CI/CD and more. I have experience in complex high-load projects, analytics databases and etc.
by HarHarVeryFunny | 2025-10-05 12:45:32+00:00
> There will be no successor civilization to humans. Earth won't be able to support multicellular life in a few hundred million years due to the sun becoming gradually more luminous over time

Modern humans have only been around for < 1 millions years, and all the technology we have invented is incredibly recent. 200 years ago we had neither electric light or bicycles.

Over the course of 100s of millions of years, as the sun's increasing luminosity becomes an issue, I'd have to assume we could create some sort of atmospheric solar shield to reflect or absorb a lot of the energy. Of course you can only postpone the inevitable (red giant).

Assuming the evolutionary lineage of our species survives a few hundred more million years (which seems rather doubtful), then it's not going to be homo sapiens any more - we'll have evolved into successor species that may be barely recognizable. If you go BACK in time 100M years, our ancestor was some mouse-like animal.
by bonoboTP | 2025-10-05 12:46:14+00:00
I agree, this is context dependent. If the email clearly touches upon multiple topics and is separated into several questions, it can be better to answer point by point. Still, to me, ripping my message apart and inserting the comments feels a bit off, as if you were my prof or teacher grading and commenting and critiquing my paper.

Of course, answering inplace makes it harder to weasel out of answering some of the points. In that sense it's more honest and straightforward to write it inbetween.

> ultimately no way not to offend people who are dying to be offended

This is absolutely true. One should not assume too much based on small things like this, assume good intentions until clearly proven otherwise instead of reacting to minor "clues" and "signs". But on the other hand when producing text, it's also good to know how they are culturally interpreted around you. You can say all that is a "you problem" but I don't think that thinking leads to a good life.
by tpm | 2025-10-05 12:47:08+00:00
> This is highly unlikely.

It is my experience from working in the sports betting industry for several years, including the risk reporting and risk managing part. In fact I'm pretty sure several people lived comfortable life by going around our risk management by using a loophole that was possible at the time in our country - it was possible to bet anonymously in person. So while we could limit maximum winnings per bet, we could not tie particular bets to persons, and they just placed several bets in different locations, or they used helpers.

I'm not going into speculations how they acquired the knowledge. Some people are just nerds, others sit at the stadiums and place bets right from there etc., but I'm pretty confident there are customers who are able to make money on sport bets and are not fraudsters.
by kood | 2025-10-05 12:48:00+00:00
I think "sideloading" is a completely ok term. it says what it is,, you load an app, not with the intended method (appstores) but from an alternative source, aside the official store. not a native English speaker, so I might not fully understand the possible connotations with this particular word, but I do not personally see anything wrong with it.
by p5v | 2025-10-05 12:48:54+00:00
We have a very similar feature on https://feedle.world. Every search has its own dedicated RSS feed that can new followed directly, as well as an iframe that can be embedded on other people’s websites. This way, anyone can build accidental blogrolls, based o topics of interest.

P.S. for people whore not really into RSS, we are also Beta testing the option to subscribe to searches and get results in email digests. Same idea, but you don’t need to bother finding an RSS reader.
by xandrius | 2025-10-05 12:48:54+00:00
If even the people who experience a different time gives up because "nothing changes" then it's truly over.

We need to do what we preach: sure, things are worse in certain things but for sure setting up a local network with top-level open source self-hosted alternatives is the easiest it has ever been ever.

Also I think people forget to realise that the type of people who were online in the 90s are still online, many still does exactly the same things. The Internet just got so much easier to use for the rest of the people who doesn't really see the magic of it all. And that's ok.

People always complaining how bad things currently are, they are doing a disservice to all the services and communities still around. They are not sexy or cool but they exist.
by starburst | 2025-10-05 12:49:24+00:00
I’m surprised the CLI doesn’t asked permission for each program trying to access it, when using their SSH agent I get a popup for any program (then it unlock that key for that program until session ends).

People dismissing this vulnerability miss the point of a password manager which is to protect in such scenario where code gets executed on a machine but at least the data is encrypted, of course in that scenario the attacker can get access to the plain text env variables anyway that the developers has on their machine but at least it is not ALL of your credentials like in this case.

Service Account can limit the blast radius BUT you’ll end up saving that API token in your env anyway giving access to anyone executing malicious code…

Using their CLI is dangerous if they haven’t done anything to protect in this scenario. Did they have any comments in that vulnerability and how they want to mitigate it?

Why not simply return the value of the requested items and that’s it? Why unlock everything in a CLI scenario, surely the most common case is simply grabbing a single item like a .env for a project and that’s it.
by southernplaces7 | 2025-10-05 12:50:14+00:00
Stalin died literally in his bed, secure and surrounded by dozens of protecting bodyguards who ironically were so afraid to bother him that his stroke wen't unattended for hours after he'd had it. And in dying at 74, he enjoyed what despite the hard toll of heavy smoking, drinking, eating richly, and deprivation in his youth, was a pretty decent lifespan by the standards of his time.

Hitler ultimately died from the sheer gambler's recklessness of reaching for far too much that belonged to too many other powers, and being burned by all the consequences. Had he not started a multi-front world war against almost every single one of the world's other major nations, he could have stayed safely in power as Germany's beloved dictator right up until any old age he managed to reach (as Franco pulled off by much more wisely focusing on consolidating domestic power and avoiding wars)

Societies do have ways of dealing with tyrants, yes, and mostly it's just by rewarding them with more. The bad parts mostly happen to utterly foolish tyrants who make tremendous missteps.
by Throaway152 | 2025-10-05 12:50:32+00:00
What I'd like to know is why did legalizing sports betting = complete change of the sports media landscape? Like the question asked doesn't seem to be around how sports betting has been integrated. it's just "is sports betting good or should we ban it."

Im fine with sports betting, what Im not fine with is my hockey games being saturated with ads, odds, and commentary about something that they keep telling us is tangential and not supposed-to-be-taken-seriously!

The whole thing is pathetic and I don't see how it's sustainable. There's going to be a Mothers Against Gambling movement or something after enough lives get wrecked.

And I'd like to add that most of the people throw the term around "lives get wrecked / ruined" flippantly around this, but that's exactly what it is. Your life is wrecked, you can't fix it, nothing can fix it. If only you never started gambling...
by nsndndkddk | 2025-10-05 12:51:23+00:00
The thing your missing is ICANN is headquartered in the US. The US political situation is dire and I think this could be a real danger for the internet at large. We might end up with disagreeing DNS worldwide at some point. E.g. if you hold a domain and have a non-authorized viewpoint so your DNS entry gets snuffed.

But from a practical point of view a decentralised system should not rely on domain name ownership. Any computer can generate a private/public key pair, which is all you need for identify.
by VWWHFSfQ | 2025-10-05 12:51:34+00:00
We've seen a convergence of document DBs adding relational features, and relational DBs adding document features.

I had such a bad experience with Mongo DB that I will absolutely never use it again, and will never recommend that anyone else use it either.

This alone will get you 90% of the benefits of Mongo DB but with the full power of Postgres for everything else:

create table document ( id uuid primary key default gen_random_uuid(), doc jsonb not null );
by yreg | 2025-10-05 12:52:16+00:00
Maybe it's not possible for all character pairs, but we could have a font-face with plenty of possible pairs and render them as ligatures.

AD -> render an A that looks like a D when viewed upside down

DA -> render the same character in the other orientation

Then to use the font you need to carefully construct palindromes out of the supported pairs. Of course copy-pasting this would be a pita, accessibility would be non-existent, but could be fun for print and such.
Ask HN: How Can I Learn to Analyze Sports Statistics and Calculate Odds?
by proudmo | 2025-10-05 12:52:19+00:00
I'm really interested in understanding how statistics and probability theory apply to sports, particularly in calculating odds (like in betting markets or predictive modeling). I'm not looking to gamble, I'm more interested in the math, models, and real-world data challenges behind it.

Where would be a good place to start for someone with a general understanding of math and some programming experience? Are there open datasets, books, blogs, or academic papers that you'd recommend? I'm also curious how professionals in this space (like sports analysts or data scientists) approach modeling player/team performance and factoring in uncertainty.

If you work in this area or have dabbled in it as a hobby, I’d love to hear how you got started.
by mrsmrtss | 2025-10-05 12:52:37+00:00
The fact that you even need to be very careful when choosing a JDK is a lot bigger problem than some simple easily replaceable library is going commercial (not that this has not happend also in Java land). Also .NET is fully open and really cross-platform for a long time already and it includes more batteries than Java out of the box, you may not even need to include any third party dependencies (although there are also plenty to choose - 440k packages in Nuget). .NET has also proper IDEs or is Jetbrains Rider not a proper IDE for you?
by maxlb | 2025-10-05 12:53:22+00:00
I've been a C# developer my entire career and spent a few years building apps with Xamarin/Uno. At my current company, we evaluated MAUI and Flutter for our mobile app rewrite (1M+ monthly active users).

We first built a proof of concept with 15 basic tasks to implement in both MAUI and Flutter. Things like authentication, navigation, API calls, localization, lists, map, etc. In MAUI, everything felt heavier than it should've been. Tooling issues, overkill patterns, outdated docs, and a lot of small frustrations that added up. In Flutter, we got the same features done much faster and everything just worked. The whole experience was just nicer. The documentation, the community, the developer experience... everything is better.

I love C#, that's what we use for our backend, but for mobile developement Flutter was the clear winner. We launched the new app a year ago and couldn't be happier with our decision.
by troad | 2025-10-05 12:53:41+00:00
I really wish I could restrict CLI access to 1Password per vault (or even per item).

When I briefly tried Kamal, it made me very uncomfortable for a script to ask for access to my entire 1Password - every login, credit card, etc. While I do not think Kamal is malicious, in the context of all the constant supply chain attacks, saying yes to anything like that seems extremely irresponsible.

This seems like an area where there'd be obvious value in applying the principle of least privilege, so I was surprised when I couldn't find any granularity to the CLI permissions in 1Password.
by blibble | 2025-10-05 12:54:40+00:00
> I sent it back and got a warning that if I return anything else in "non original condition" I'd be banned.

I have a similar story, they "delivered" when I was out, hidden behind a wall in my garden

when I found the package two days later, the expensive books had been ruined by the rain

I explained to their CS, they issued the return authorisation

then after they received the return they threatened me for not returning in "original condition"

I was a customer since the early 2000s, a prime member since it started, with something like 2 returns total in that time, with tens of thousands of spending (to this exact address)

I deleted my account
by anonbuddy | 2025-10-05 12:54:54+00:00
I agree that this is not just a technological problem to be solved. Technology by it self can't fix the problems, but it can help nudge the human experience in good or bad way. Right now, we gave our data to large corporations and we got the lovely attention economy thats being feed on human rage, envy and greed.

Solid idea is more in line with revolution and demand for our representatives to give their people internet that can push the humanity forward, and not just let us waist countless hours on doom scrolling.
by veidr | 2025-10-05 12:56:07+00:00
AFAICT, no. I think it just means "bad, unhelpful output" but isn't fundamentally different in any meaningful way from their super-helpful top-1% outputs.

It's kind of qualitatively different from the human perspective, so not a useless concept, but I think that is mainly because we can't help anthropomorphizing these things.
by CharlieDigital | 2025-10-05 12:56:41+00:00
I disagree on this.

I am at a (YC, series C) startup that just recently made the switch from TS backend on Nest.js to C# .NET Web API[0]. It's been a progression from Express -> Nest.js -> C#.

What we find is that having attributes in both Nest.js (decorators) and C# allows one part of the team to move faster and another smaller part of the team to isolate complexity.

The indirection and abstraction are explicit decisions to reduce verbosity for 90% of the team for 90% of the use cases because otherwise, there's a lot of repetitive boilerplate.

The use of attributes, reflection, and source generation make the code more "templatized" (true both in our Nest.js codebase as well as the new C# codebase) so that 90% of the devs simply need to "follow the pattern" and 10% of the devs can focus on more complex logic backing those attributes and decorators.

Having the option to dip into source generation, for example, is really powerful in allowing the team to reduce boilerplate.

[0] We are hiring, BTW! Seeking experienced C# engineers; very, very competitive comp and all greenfield work with modern C# in a mixed Linux and macOS environment.
Ask HN: HPC Learning Path for a Data Scientist
by proudmo | 2025-10-05 12:58:33+00:00
I have a degree in mathematics and currently work as a data scientist. While I’m comfortable with Python and core machine learning techniques, I’ve realized that I need to deepen my understanding of high-performance computing (HPC) and performance engineering in order to optimize my code for speed and scale up algorithms for large systems.

Specifically, I’m interested in: * Writing high-performance, memory-efficient code (e.g., using C++, SIMD, GPU, parallel computing) * HPC system design and architecture * Optimizing large-scale data processing and ML infrastructure * Profiling, latency optimization, and memory management for data-heavy tasks

I’m looking for: 1. Books, resources, tutorials, online degrees that can guide me from a strong mathematical and ML foundation into performance optimization 2. Effective learning paths to transition from a general data science role to working with performance-critical systems and large-scale compute environments

I’m keen to improve my ability to build more efficient systems and handle large datasets or complex models with near real-time performance where necessary.

Would love any recommendations, personal experiences, or resources to help guide my learning!
by tim333 | 2025-10-05 12:58:43+00:00
Depends on the e-bike. I ride a 15 mph e-bike and figure it's a lot safer than my former 60-85 mph motorbikes but it's mostly just a function of speed. The motorbikes were more stable at 15 mph than the e-bike, especially the enduro one which could go over kerbs, logs, ditches without blinking much.

Maybe we could improve safety by requiring e-bikes to be built like enduros but with the 15 mph thing? (bike pic https://en.wikipedia.org/wiki/Enduro_motorcycle)
by lapcat | 2025-10-05 12:59:07+00:00
> several people lived comfortable life

> in our country

A comfortable life in which country?

And "several" means "more than two but not many".

> they used helpers

So, this doesn't sound like just ordinary people who have lost hope.

The thing about lottery tickets, as opposed to sports betting is that the lottery requires zero skill. You buy a ticket, and if you get lucky and your numbers are randomly chosen, you win. Anyone can hope to win the lottery. But becoming a professional sports gambler, or a professional poker player, for example, is not really the usual response to losing hope.