MurphyA/hacker-news huggingface dataset:
by kccqzy | 2025-10-23 09:57:41+00:00
> 99% are just text, images, and videos

This actually reminds me that early in the HTML5 era one of its key selling points was that you could play videos using just the <video> element. There would not be a need for Flash, Silverlight or JS. However these days it is extremely rare to come across a site that can successfully play videos with JS turned off. Complicated JS has de facto become a requirement for videos but it doesn't have to be.
by nottorp | 2025-10-23 09:58:29+00:00
Can relate. I went through various consumer ish access points until I got tired of it and splurged on an Ubiquiti.

Haven't had any wifi problems since. To the point I don't remember what wifi standard my home is on :)

Too bad they may or may not have given up on the cloud connectivity requirement. I've been told (even on here) they have, but I've also been told that you can disable it after setup instead of setting up without any stinking cloud.

Say, did Ubiquity stuff work during the AWS outage?
by pjc50 | 2025-10-23 10:01:24+00:00
It always has been run on special lists.

I've coined the phrase "Postel decentralization" to refer to things where people expect there to be some distributed consensus mechanism but it turned out that the design of the internet was to email Jon Postel (https://en.wikipedia.org/wiki/Jon_Postel) to get your name on a list. e.g. how IANA was originally created.
by pkolaczk | 2025-10-23 10:01:40+00:00
You can use a germanium diode or even Shottky now instead of a “crystal”.

Such a simple radio can be a gateway drug to a very complex and deep hobby. In my case it went like that:

1. Built a simple radio

2. Could hardly hear anything, need to add an amplifier to it 3. Now it’s better but captures a lot of noise

4. Design a filter to select just that one station

5. Now I want to listen to more stations.

6. Ugh, you can’t design a good filter with variable frequency. Enter the superheterodyne world.

7. Now finally got something that resembles a tunable AM radio, but it kinda whistles / hums a lot. Ah, so the mirror image is a real thing?!

8. Need a higher IF to be able to better reject the image before the mixer. Ok, let’s make a double conversion superhet then.

9. Buy a set of ceramic filters and play with them to get the best selectivity.

10. Try to add more amplification only to learn if you go too far you get an oscillator instead of an amplifier.

11. The sound level is not stable. Add AGC.

12. Pick up some stations from 5000+ km away. Nice. But there is some weird distortion. Oh, I’ve been a culprit of frequency selective fading…

Fast forward and now I’m building a PLL synchronized AM product demodulator with a squaring loop for carrier recovery.

Fun. Lot of fun! Wholeheartedly recommend!
by pas | 2025-10-23 10:02:21+00:00
as long as we cannot provide some objective foundations for the meaning of words we're pretty much left with the law constantly being interpreted, and even if somehow laws and enforcement becomes completely independent of the fallibility of human minds, as long as we are subject to it we ourselves will have different interpretation from time to time

and even if the law somehow becomes a perfect ideal filter for separating good from bad ... its enforcement will run into the problem of false positives and negatives as long as it deals with messy real world events and their various imperfect impressions found in whatever evidence is collected in a case.

well, of course a more competent electorate and politicians would be nice anyway, but now we run into the problem of competence in the eyes of who?
by wahern | 2025-10-23 10:02:21+00:00
> Wouldn’t surprise me, if the US and Israel have done the same.

The US doesn't have the institutions or culture in place to recruit and shepherd people into that kind of espionage. Or any espionage, really. We're notoriously horrible at HUMINT. With the possible exception of a brief period during the Cold War, we've always been hopelessly obsessed with developing and wielding technological solutions, not without some success, to be fair. Why spend $10 million on building a long-term HUMINT espionage program when we can pay Palantir $10 billion to run contractors to steal secrets remotely.

Israel... I dunno. Given the deep cultural and social ties and relatively easy mobility, and the fact most of the US and Israeli defense and information sectors are privatized and diffuse, Israel can probably just rely on poaching people, much like a corporation. By contrast, China's problem until recently has been brain drain. Chinese want to move to the US, China can just leverage that demand and flow of people.

I'm not sure Americans are any more susceptible to bribery than elsewhere. We're a tremendously wealthy country, with median incomes nearly twice those of even some wealthy Western European countries. The problem with recruiting established professionals is that access to highly valuable information is strongly correlated to career success, and career success means you have much more to lose, and thus less incentive to accept bribes, especially given how harsh our sentencing is compared to most of the rest of the world. (I wouldn't be surprised if corporate espionage results in longer prison time here than China, notwithstanding that for the really severe defense-related cases China will quickly put you to death, as shown by the recent CIA asset fiasco.) Most bribery cases seem to be low-level wage employees without much to offer except in exceptional situations, or government or military workers being paid much less than market rate compared to their counterpart in private industry. Elsewhere, the high-profile, high-level cases, most of the time it's not even clear the accusation is well founded.

While the current state of corporate espionage seems much more opaque, looking back at the history of French corporate espionage might be worthwhile. I don't know much about the specifics, but during the 1980s and 1990s France had a notoriously brazen corporate espionage program, much of which has been well documented and researched, so useful for understanding how it works generally.
by lazycatjumping | 2025-10-23 10:03:28+00:00
Wifi-8 will be great. Finally we get seamless controlled handovers between accesspoints that can be controlled from infrastucture side.

With MAP 2.4GHz can serve as long range network that can be filled with High-Rate 5GHz / 6GHz cells. And all of them can be utilized in parallel.

802.11be (Wifi-7) still lacks this.
by lazycatjumping | 2025-10-23 10:03:49+00:00
> I bet companies will release WiFi 8 products even when it's still a draft, just as they did with WiFI 7.

They must. Otherwise it cannot be tested within the labs.

And producing chips before a standard is finalized is usually no problem at all: there are gates within the standardization process where the will be no more changes that are relevant for the silicon.

These 802.11n-draft APs were a singular fuckup regarding this.
by dingdingdang | 2025-10-23 10:03:59+00:00
I think someone is missing a massive marketing/product-improvement opportunity by not selling a scaffold for the bike to allow it to be used as an exercise bike - this is turn would make significant savings on people's electricity budget .. then suddenly the direct-to-battery pedal arrangement would go from weakness to proper feature! #feelfreetocontactmewithmonetaryreward
by seedify | 2025-10-23 10:05:20+00:00
Seedify, one of Web3’s leading launchpads with 150+ projects launched, together with BNB Chain, DoraHacks, Polymarket, Lovable, and 30+ sponsors & mentors, invites you to build the next generation of onchain prediction market apps, enabling users to forecast real-world outcomes across AI, sports, crypto, global events, and beyond. What’s in it for YOU $400K+ in prizes plus additional funding opportunities Workshops with Experts: Learn directly from Lovable.dev, Thirdweb, Azuro, and others Dedicated Tracks: YZi Labs or Polymarket’s API for collaboration opportunities Post-Event Fast-Track: Top projects can raise on Seedify’s new launchpad and gain a stronger chance to join the Global BNB Hack for additional rewards Runs Oct 21 – Nov 4. More details and registration: https://dorahacks.io/hackathon/predictionmarketshackathon
by jrflowers | 2025-10-23 10:06:07+00:00
None of this post says anything about how you know stuff about stranger’s sex lives without believing what they say or imagining stuff.

Can you complete the statement “I am able to ascertain the truth of the sex lives of strangers by ignoring self-reported data or imagining things by the following process through which I reach my conclusions about strangers’ sex lives”

Now keep in mind if you want to sort of vaguely gesture at any scientific study of sexuality you have to exclude it due to your own rules. There is no such thing as a study of sexual relationships that doesn’t rely on self-reported data. I certainly hope you have the self awareness here to not attempt to imagine in your head that some self-reported data is valid (because it sort of feels right to you) but not other data (that feels icky) and then believe it. That would be kind of embarrassing.

I’m going to have to guess that by ignoring the basis of every scientific study of sexuality and not imagining things, your insight comes from your… heart? Divine revelation? Messages decoded from a numbers station? Sections of the digits in pi converted into ascii? Anime?
by funcDropShadow | 2025-10-23 10:06:38+00:00
Even if we assume that JSON numbers are JavaScript numbers. There is the problem that some large natural numbers cannot be represented in double or float although some even larger numbers can be represented. This is very bad if you use these numbers as IDs.

scala> (Long.MaxValue-1) val res4: Long = 9223372036854775806 scala> (Long.MaxValue-1).toDouble.toLong val res5: Long = 9223372036854775807

The fact that I used Scala is irrelevant here. That is true for many programming languages that 64 bit long and double types.
by Findecanor | 2025-10-23 10:06:40+00:00
Phi-functions and block arguments are just different views of the same thing. Sometimes it is more convenient to use one or the other when thinking of a problem.

If you lay out phi-functions and their parameters on a grid, you'd get a "phi-matrix" where phi-functions are rows and block arguments are the columns.

If you don't do an out-of-SSA transform before register allocation, and effectively treat block parameters like function calls then you're pushing the complexity to the register allocator.

An out-of-SSA transform before register allocation would coalesce not just registers but also variables in spill slots (thus avoiding memory-memory moves), it would reduce the complexity of parallel moves. A more advanced transform could also hoist moves out from before the hottest branch which could potentially lead to un-splitting previously split critical edges.
by CyberusTech | 2025-10-23 10:06:54+00:00
Cyberus Technology is hiring a Full-Stack Software Engineer (m/f/d) (Rust) to help build our high-assurance, Rust-based hypervisor and cloud infrastructure. You will design new virtualization features, work on Linux/KVM and Cloud Hypervisor integration, and improve system reliability and performance. Tech: Rust, Linux/KVM, virtio, Cloud Hypervisor Location: Remote (Germany/Spain) or hybrid in Dresden/Berlin Level: Beginner or Senior Apply: jobs@cyberus-technology.de

We are an open-minded, deep-tech team focused on security, performance, and longevity — join us.
by lucideer | 2025-10-23 10:08:06+00:00
I love Immich & greatly appreciate the amazing work the team put into maintaining it, but between the OP & this "Cursed Knowledge" page, the apparent team culture of shouting from the rooftops complaints that expose their own ignorance about technology is a little concerning to be honest.

I've now read the entire Cursed Knowledge list & - while I found some of them to be invaluable insights & absolutely love the idea of projects maintaining a public list of this nature to educate - there are quite a few red flags in this particular list.

Before mentioning them: some excellent & valuable, genuinely cursed items: Postgres NOTIFY (albeit adapter-specific), npm scripts, bcrypt string lengths & especially the horrifically cursed Cloudflare fetch: all great knowledge. But...

> Secure contexts are cursed

> GPS sharing on mobile is cursed

These are extremely sane security feature. Do we think keeping users secure is cursed? It honestly seems crazy to me for them to have published these items in the list with a straight face.

> PostgreSQL parameters are cursed

Wherein their definition of "cursed" is that PG doesn't support running SQL queries with more than 65535 separate parameters! It seems to me that any sane engineer would expect the limit to be lower than that. The suggestion that making an SQL query with that many parameters is normal seems problematic.

> JavaScript Date objects are cursed

Javascript is zero-indexed by convention. This one's not a huge red flag but it is pretty funny for a programmer to find this problematic.

> Carriage returns in bash scripts are cursed

Non-default local git settings can break your local git repo. This isn't anything to do with bash & everyone knows git has footguns.
by goku12 | 2025-10-23 10:08:32+00:00
It's the latter - podman just sets up all the necessary stuff - namespaces, cgroups, seccomp, network, mounts, etc - and then executes the child. No monitoring whatsoever. The best you can do is to have it listen on the socket it uses for the control API (similar to the docker socket).

However, the quadlets technology allows you to easily setup systemd using systemd generators to initialize the containerized applications using podman and then monitor it for any crashes. Quadlets essentially does everything that docker compose does.

That aside, a container's main overheads aren't the compute or the memory. It's the storage overhead. You're essentially replicating the minimal Linux userland for each container, unless that's in a shared layer.
by supernes | 2025-10-23 10:08:33+00:00
Every single time I try to use it for research or learning it ends up spitting subtly invalid code. Results range from imaginary APIs that don't exist to straight up invalid syntax, not to mention outdated info, contradictory reasoning and flat out wrong explanations.

Maybe spending $200/mo or whatever to access the top-of-the-line models will mitigate some of that, but I'd rather come up with the solution and gain the understanding myself, then spend the money on something worthwile.
by anon291 | 2025-10-23 10:08:54+00:00
I made exactly this point at the inaugural Portland AI tinkerers meetup. I had been messing with large document understanding. Converting PDF to text and then sending to gpt was too expensive. It was cheaper to just upload the image and ask it questions directly. And about as accurate.

https://portland.aitinkerers.org/talks/rsvp_fGAlJQAvWUA
by jimbo_joe | 2025-10-23 10:09:28+00:00
Pre-ChatGPT OpenAI produced impressive RL results but their pivot to transformers was not guaranteed. With all internet data, infinite money, and ~800x more people, Google's internal LLMs were meh at best, probably because the innovators like Radford would constantly be snubbed by entrenched leaders (which almost happened in OpenAI).
by pjc50 | 2025-10-23 10:10:27+00:00
The CIA messed up their spies in Iran: https://www.reuters.com/investigates/special-report/usa-spie...

And of course there was almost certainly a lot lost in the sudden withdrawal of USAID.

There's a lot of Israeli "cybersecurity" firms, some of which overtly make and sell spyware.

> I'm not sure Americans are any more susceptible to bribery than elsewhere

Americans are more expensive, but high level political bribery and compromise is possible: https://en.wikipedia.org/wiki/Trials_of_Paul_Manafort https://en.wikipedia.org/wiki/Maria_Butina
by n4r9 | 2025-10-23 10:11:30+00:00
True, there's a big difference both in personal effort and the impact it has on the other party. I recently watched a Netflix spy drama "Black Doves" in which a prominent politician's wife turns out to be a spy contracting agency plant, who's had two kids with him. That really would be fantastical. I'm not aware of any real cases of it happening where the agent is female (and nor is Claude code FWIW) - the linked article provides some evidence in the form of hearsay.
by lucideer | 2025-10-23 10:13:06+00:00
Allowing user publishing is an inherent risk - these are good mitigations but nothing will ever be bulletproof.

The main issue is protecting innocent users from themselves - that's a hard one to generalise solutions to & really depends on your publishing workflows.

Beyond that, the last item (Public Suffix list) comes with some decent additional mitigations as an upside - the main one being that Firefox & Chrome both enable more restrictive cookie settings while browsing any domains listed in the public suffix list.

---

All that said - the question asked in the comment at the top of the thread wasn't about protecting users from security risk, but protecting the domain from being flagged by Google. The above steps should at least do that pretty reliably, barring an actual legitimate hack occurring.
by data_marsupial | 2025-10-23 10:14:47+00:00
In my first proper job, I worked with an accounting system in 2014/2015 that was a .NET GUI client that directly called SQL Server stored procedures. There was a bundled WMS that did the same thing. IIRC the requests were sent directly to the database and were authenticated with the client user's details.

I was a data analyst and had full access to the database for reporting and data import/export purposes. I had a lot of fun browsing through the stored procedures, which were not locked down or encrypted in any way, and figuring out how it all worked.

I even fixed a bug with a custom module that was causing huge stock valuation errors (I can't believe I even did this now) and also created my own automated order import procedure by monitoring the procedures used by the client's order import screen. Possibly invalidating warranties and support contracts etc. but no problems came of it. They even tried to rehire me a few years later.
by spockz | 2025-10-23 10:14:52+00:00
How did the arrest go? For all you know it was the local cop that took him to the station and put him under arrest. Not to necessarily punish but to imprint that even though the action was minimally invasive for a simple bus ticket, it applied on larger systems, could have a significant effect. So more as a simple friendly deterrent rather than arrest and spent some nights in jail.
by soco | 2025-10-23 10:14:52+00:00
The question is, will the vibe coder care at all about those bugs? Will the company using vibe coded apps care about those bugs? Or they will just add another requirement to the prompt and churn out the next version? Yes, they will never have a guarantee this new version will be better, but arguably most software products don't have such guarantees either. So are we users worse off or the same? Because if we're about the same, and the producer saves a shitload of money, you can guess where the future is.
by Parae | 2025-10-23 10:15:26+00:00
She didn't simply used EU money to pay her party staff, she was the head of a stealing EU money system while also saying that EU costs to much to France. Not only is she a morally corrupt criminal but also a corrupter. It was not a mistake she made, she was not alone and all convicted members of her party were fully aware they were committing a massive fraud.

Saying that is was an error and the trial was political, is plain disinformation.
by somat | 2025-10-23 10:16:04+00:00
Apparently they also make network switches. I guess it is in support of their computerized audio equipment. but I was a bit surprised when they showed up in a search result.

https://usa.yamaha.com/products/proaudio/network_switches/in...

They have the technical capability to design one, but on the surface it is enough outside their core product line that I wonder if it is a oem rebadge.
by CyberusTech | 2025-10-23 10:16:20+00:00
Cyberus Technology is hiring a Business Development Manager to drive growth and marketing for our Test Automation and CI solutions. You will shape lead generation strategies, manage marketing initiatives, coordinate with engineering, and represent Cyberus at events and conferences.

Focus: Business development, marketing strategy, lead generation Location: Remote (Germany/Spain) or hybrid in Dresden/Berlin Level: Experienced Apply: jobs@cyberus-technology.de

We’re looking forward to your application!
by ViewTrick1002 | 2025-10-23 10:17:47+00:00
LFP Bess systems are already at ~52/kWh on the lowest end.

https://www.ess-news.com/2025/06/26/china-energy-engineering...

The crashing prices of LFP batteries has been Sodium-ions nemesis the past few years since their entire gambit is using cheaper raw materials while performing good enough for certain applications.

$10/kWh for sodium ion batteries using cheaper raw materials are definitely in reach as given by recent LFP prices.
by jart | 2025-10-23 10:17:52+00:00
It's always been the case with local infrastructure that if you run it yourself, you have to secure it yourself. It's not a vulnerability for local software to do what I tell it to do. Maybe I want to ask an LLM to try to hack into the things on my local network, to make sure nothing is vulnerable. The real vulnerability would be if the LLM does things I didn't ask it to do, like delete my production database. So it always irks me when security work is approached with the viewpoint that I'm the one who's untrustworthy and needs to be controlled rather than the machine. The whole point of tools throughout history has been to give people more power.
by jrflowers | 2025-10-23 10:18:08+00:00
This whole conversation with measurablefunc has been like seeing somebody get asked for a dollar, loudly yelling “And get a job?!” and then spending an hour trying to convince everyone in the room that they’re Bruce Wayne. I love this website.

Edit: or like seeing somebody get asked for a cookie and then saying “And go to the store? And buy sugar? And eggs? And flour? And drive home and bake them?! Hell no!” and then saying “obviously that meant I have a ton of cookies in my house right now”
by nunodonato | 2025-10-23 10:19:10+00:00
How is this different from the many available head tracking devices? I used to play Flight Simulator with head tracking[1]. It was great, although it did consume a bit of CPU cycles. IR trackers are more efficient

[1] - https://www.youtube.com/watch?v=P07nIcczles (actually, this one was using a paper tracker because the face tracker had a big impact on fps)