MurphyA/hacker-news huggingface dataset:
by thayne | 2025-10-22 17:02:31+00:00
That just means the fork would also need to be AGPL licensed, and the owner of the fork wouldn't be able to also sell a proprietary version with additional "enterprise" features. And IMO that would be a good thing.

I think it is unlikely a single entity would do that. But a coalition of current MinIO users might get together to create such a project, perhaps under the Auspices of a foundation such as the Linux Foundation. Although, I think that scenario would be more similar to OpenTofu than Valkey.
by bawolff | 2025-10-22 17:02:35+00:00
> Has it been demonstrated at all that someone who intercepts a session key is able to somehow inject into a conversation? It seems highly unlikely to me with TCP over the internet.

if you can read the TLS session in general, you can capture the TLS session ticket and then use that to make a subsequent connection. This is easier as you dont have to be injecting packets live or make inconvinent packets disappear.
by keeda | 2025-10-22 17:03:01+00:00
An MBA, an engineer and a quantum computing physicist check into a hotel. Middle of the night, a small fire starts up on their floor.

The MBA wakes up, sees the fire, sees a fire extinguisher in the corner of the room, empties the fire extinguisher to put out the fire, then goes back to sleep.

The engineer wakes up, sees the fire, sees the fire extinguisher, estimates the extent of the fire, determines the exact amount of foam required to put it out including a reasonable tolerance, and dispenses exactly that amount to put out the fire, and then satisified that there is enough left in case of another fire, goes back to sleep.

The quantum computing physicist wakes up, sees the fire, observes the fire extinguisher, determines that there is a viable path to practical fire extinguishment, and goes back to sleep.
by dragonwriter | 2025-10-22 17:03:05+00:00
My understanding is that the normal rule here is that the launching state has jurisdiction over (and international legal responsibility for) what is done by a spacecraft, but I’d bet that if private parties crashing their spacecraft into those of other private parties with widespread, economically significant use became a thing, a whole lot of countries in which one or more of the companies have assets or interests would discover jurisdiction in underused provisions of their domestic law rather quickly, no matter where either of the craft involved were launched.
by zdw | 2025-10-22 17:03:28+00:00
Just because you're not aware of where the strings are attached yet doesn't mean there aren't any. There very well may be none, or they may be unsaid - one historical example:

https://www.computerworld.com/article/1338390/darpa-pulls-fu...

In any case, the examples of donations being given through unconventional channels, then reusing the name/logos as marketing/endorsement for FUTO without obtaining permission, feels very problematic.
Show HN: Convert Videos into Blog Posts
by AndrewPetrovics | 2025-10-22 17:03:35+00:00
Hey HN,

My name is Andrew Petrovics. First time poster. Long time lurker.

I created a web app called Video To Blog that converts videos into (what I think are awesome) blog posts / email newsletters.

I originally created the tool with YouTubers in mind as a way to quickly repurpose existing videos into blog posts and help capture traffic from another channel (i.e. search engines). Since I launched though I've had a bunch of other people use it for all different reasons including bloggers, affiliate marketers, digial agencies, realtors, churches, and more. My growth has flat lined and I'm trying to find a solid niche to focus on in order to spark growth and get this to a point where I can work on it full time (I'm almost there, but having a family, I need to grow a bit more before I'm comfortable taking the leap).

Any who, our most popular feature is "auto screenshots" which can automatically take screenshots from the video and put into the blog post. The tool allows for a ton of other customization options (like automatically including internal/external links, tone/voice customiziation, ability to add writing samples / custom AI instructions, and more).

Would love to hear and feedback you have.

Also, just a heads up, an email is required in order to test it out (without an email requirment we saw a bunch of abuse).

Thanks, Andrew Petrovics
by brailsafe | 2025-10-22 17:03:36+00:00
I think this is why I've been feeling less productive overall lately. Partly due to the fact that more code is expected to be produced more quickly, and partly because using an agent or something puts me into the wrong frame of mind where I don't really have the full context of what I've written and why, and the amount of quality work I can produce is necessarily qualified by how much I can reliably review, line-by-line, over whatever period of time.

I've been using them more conservatively, slowing down, and manually writing things more. It's easier when I'm just replicating logic over a bunch of different well-defined properties of a clear type definition or spec, but even then results are a bit questionable sometimes.
by lunias | 2025-10-22 17:03:38+00:00
I remember the fraud, it was insider theft and distribution of game pieces. I'm sure the new system doesn't make them immune to fraud. It now just takes a different skill set. I don't buy the "We don't live in 2015 anymore." take, do you remember the airport before 9/11? Is it okay to say, "Ah, but we don't live in 2011 anymore." There is a very clear trend of companies gaslighting everyone into thinking something is better when it's clearly only better for the company proposing it. I agree that it's cool to be able to see the remaining prize pool; it'd be really cool if I could see that on the menu, on the kiosk, on a dedicated Monopoly display in the store, etc. McDonald's can use their devices for their promotions, not mine.
by tialaramex | 2025-10-22 17:04:00+00:00
I mean, the Bible has God himself lying to Adam. God says do not eat this fruit - because if you eat it you'll die immediately. And later of course Adam eats the fruit, and of course he doesn't die, because actually God was lying about that.

The general position of Christians seems to be that God lying is OK, however lying to them is a sin. But, Christians lie all the time, so, seems like actually the rule is "Lie but pretend it's a sin if anybody else does it" which is consistent with God and their own behaviour and indeed consistent with lying about Mamdani...
by adgjlsfhk1 | 2025-10-22 17:04:12+00:00
AES-128 is quantum safe (more or less). 64 bit security in the classical domain isn't safe because you can parallelize across 2^20 computers trivially. Grover gives you 2^64 AES operations on a quantum coputer (probably ~2^70 gates or so before error correction or ~2^90 after error correction) that can't be parallelized efficiently. AES-128 is secure for the next century (but you might as well switch to aes-256 because why not)
by brycewray | 2025-10-22 17:04:39+00:00
> It's also probably on its last legs since the courts have ruled that Google can't buy default search (which ironically will probably enhance its monopoly position).

"Under the court's ruling, Google will still be permitted to pay for search placement --- those multi-billion-dollar arrangements with Apple and Mozilla can continue."

- https://arstechnica.com/gadgets/2025/09/google-wont-have-to-...
by fencepost | 2025-10-22 17:05:03+00:00
Knocking can cut down on grinding. I have in the past created setups where you had to knock prior to establishing a VPN connection, and given the semi-regular problems with VPN implementations I really don't feel bad about that. Fortigate, Sonicwall, Cisco, Ivanti, etc - sure a big part of it is "don't run VPNs based on big legacy codebases" but who's to say there won't be implementation problems found (or introduced given "Jia Tan" style attacks) in Wireguard?

Is knocking incredibly weak security through obscurity? Sure, but part of what it does is cut down on log volume.
by TheDong | 2025-10-22 17:05:07+00:00
If I went to a lot that had a sign at the entrance saying "Open Source Cars, feel free to open the hood and look to learn stuff. No warranty implied. Some may not function. All free to duplicate, free to take parts from, and free to take home", and then took a car from the lot and drove it home, no I would not be surprised if it fell apart before getting out of the lot.

When you purchase a car, you pay actual money, and that adds liability, so if it implodes I feel like I can at least get money back, or sue the vendor for negligence. OSS is not like that. You get something for free and there is a big sign saying "lol have fun", and it's also incredibly well known that software is all buggy and bad with like maybe 3 exceptions.

> If you bought a car and your dealer had you sign an EULA with that sentence in it (pertaining specifically to the security features of your car)

If the security features are implemented in software, like "iOS app unlock", no I would not expect it to actually be secure.

It is well known that while the pure engineering disciplines, those that make cars and planes and boats, mostly know what they're doing... the software engineering industry knows how to produce code that constantly needs updates and still manages to segfault in so much as a strong breeze, even though memory safety has been a well understood problem for longer than most developers have been alive.
by kelnos | 2025-10-22 17:05:16+00:00
That's the point, though. The taxes are there to discourage use. Certainly smuggling from lower-tax or tax-free places is going to be expected in that scenario, but it doesn't mean that the higher taxes aren't working for the intended purpose. Sure, they're working less than they could have in the absence of smuggling, which you probably are never going to be able to fully stamp out, but that's ok.
by cyberpunk | 2025-10-22 17:05:28+00:00
> Well if you are sitting in the right place on the network then you can.

Not really. This would be if not instantly then when a batch goes for clearing or reconciliation, be caught -- and an investigation would be immediately started.

There are safeguards against this kind of thing that can't be really defeated by breaking some crypto. We have to protect against malicious employees etc also.

One can not simply insert bank transactions like this. They are really extremely complicated flows here.
by exasperaited | 2025-10-22 17:05:31+00:00
Fun fact: the first impact Trump had on the Republican policy platform, before he was even President, was to remove from platform language the promise to arm Ukraine with offensive weapons. Back before the convention in the 2016 campaign.

That was secured by Paul Manafort, a man who —- only months earlier -- worked as an advisor to and lobbyist for a pro-Russian Ukrainian PM (Viktor Yanukovych, essentially a Putin stooge).

Paul Manafort worked for Trump for free (this is not in doubt), but appears to have had massive debts at the time, which appear to have ultimately been settled.

Ukraine is the thread that runs through the entire story of Trump's political career. It is and has always been so utterly, abundantly obvious that Trump's position on Ukraine consistently has favoured and will favour Putin's, that media and journalists failing to observe it is nothing short of malpractice.
by LorenPechtel | 2025-10-22 17:05:49+00:00
Depending on the terrain the loss rate might not be high. Put a cell phone in the package. Location tracking, find the phone. If they're dropping into ares with cell coverage and flat enough that they're likely reachable then you won't lose a lot.

And if you're dropping into areas without coverage you put something like an inReach on the balloon, set to send out pings. And put an AirTag or the like in it because the balloon might land on the transmitter and block it. (I own an inReach, know it can send pings at 2 minute or 10 minute intervals, I've only used them to look up where I was once (the real reason I have it is the SOS button works pretty much anywhere and even if I couldn't push it S&R would look up the last ping) but the website was spot on to normal GPS accuracy. There are competitors but I do not know their capability.)
by zombico | 2025-10-22 17:06:13+00:00
Hey HN! Creator here.

Quick context on the cryptographic verification piece: Each conversation gets a chain hash of the full context (messages + responses + metadata). This lets you verify conversation integrity—useful for auditing or detecting if logs have been tampered with.

The Ontario procurement demo is deliberately specific/boring to show real-world document retrieval. The screenshot in the README shows the conversation recall and inspector handling a jailbreak attempt

Happy to answer questions about the implementation or pattern!
by rdtsc | 2025-10-22 17:06:28+00:00
Does the “don’t implement your own cryptography” advice apply to multi-billion companies, or it’s just for regular, garden variety developers?

Some of the issues like validating input seem like should have been noticed. But of course one would need to understand how it works to notice it. And certainly, in a company like CF someone would know how this is supposed to work…

Surely the devs would have at least opened wikipedia to read

https://en.wikipedia.org/wiki/FourQ

> In order to avoid small subgroup attacks,[6] all points are verified to lie in an N-torsion subgroup of the elliptic curve, where N is specified as a 246-bit prime dividing the order of the group.
by apizon | 2025-10-22 17:06:28+00:00
Thanks for the detailed feedback :)

When I first started working on the app I actually mostly meant to go only with a quiz + flashcards approach with little to no explanation but this felt a bit rough and I was affraid most users would just give up on it too quickly. Also I think some users might have learned guitar theory a different way and might not be too familiar with diagrams, such as classical guitarists.

Hence why I added all these lessons with more details including beginner ones.

I might add something in the vein of a "practice page" with only challenges and the ability to create custom ones in the future for more advanced users + a change to a more interactive onboarding that actually asks what you want rather than showcase the app, we'll see...
by dheera | 2025-10-22 17:07:55+00:00
TFA> “In space, you get almost unlimited, low-cost renewable energy,”

Why is this exclusive to space? If you're powering datacenters on solar, one would think covering the Sahara or other large desert in datacenters would be easier than launching them into space. Renewable energy is just as plentiful and free there, you can connect it to the rest of the world with multiple TB/s of fiber links, and the construction/maintainence costs would be a few orders of magnitude less.
by collinmanderson | 2025-10-22 17:08:07+00:00
I forgot to mention what the parent comment said, yes, need to put something like this in /etc/fstab:

/swapfile swap swap sw 0 0

or via ansible:

mount: src: "/swapfile" name: "swap" fstype: "swap" opts: "sw" passno: "0" dump: "0" state: present
by zahlman | 2025-10-22 17:08:29+00:00
This reads like the work of a crank. It's a lot of words to present the hypothesis that gravity is evidence for the universe being a "computer simulation" (on what computer? In what other universe? Why does that universe have computers? How is it more "real" rather than "simulated" than this one?) because... things falling reduces entropy, which would supposedly be convenient for a computer simulation because it wouldn't have to track as much information. (In the "real" universe, is there not gravity? Can things be constructed in that world? For that matter, would putative computers in the putative real universe be constrained by the same considerations? Why should we be able to reason about how those computers work, from ones that we created here?) None of the logic makes sense, and weak philosophical arguments (in the service of https://en.wikipedia.org/wiki/Simulation_hypothesis) are passed off as science.
by macintux | 2025-10-22 17:08:37+00:00
You said:

>...it finally told me that it generated « the most probable » urls for the topic in question based on the ones he knows exists.

smrq is asking why you would believe that explanation. The LLM doesn't necessarily know why it's doing what it's doing, so that could be another hallucination.

Your answer:

> ...I wanted to know if it was old link that broke or changed but no apparently

Leads me to believe that you misunderstood smrq's question.
by hadlock | 2025-10-22 17:08:38+00:00
Just guessing, but it seems like you could duct tape a phone with a data plan and have it email you it's gps coordinates every 15 min under 10,000ft and every 5 min under 500 ft, or whatever is reasonable. I bet 80% of them land within reach of one of those extendable tree limb cutters, let them drop to the ground and drive off; and the other 20% are merely cost of doing business.
by mrguyorama | 2025-10-22 17:08:45+00:00
>The first trump campaign was fueled by government and banks not being held accountable

Nah that's horse shit. Trump has been trying to ride outright populism since Ross Perot showed you could be a moron with no experience and people would still insist you were somehow a genius because you had a million dollars.

Trump's first campaign was nothing more than the republican party being utterly ravenous to demonstrate the hatred that AM radio and Fox News had been cooking up for a generation.

The tea party movement was not organic, it was invented and astroturfed into existence. The outcome was not planned, but it was entirely intentional.

Trump was the biggest source for the birtherism bullshit remember?

The people who believe haitian immigrants eat dogs, that portland is currently on fire, or that Mr "grab them by the pussy, they let you do it" and "I used to watch all the ms teen USA girls change" is somehow not the primary pedophile problem were never serious about justice, never cared about it being applied equally, and will never be satisfied with an actual fair justice system. They believe that crime is at an all time high despite no evidence. They believe the man that has quite literally scammed them time and time again is a "great businessman" or knows what he is doing at all.

The people who say "Obamacare is the worst thing" and yet "Don't you dare take away my ACA coverage" at the same time do not care about justice.

These people keep electing Republicans despite mountains of objective evidence that Republicans nearly alone are responsible for America's current budget and debt problems.

A lot of these people are utterly furious that the Federal Government forced them to treat black people like people in the 60s and have been holding a grudge ever since. You don't scrub rainbows off of cross walks because you are upset about justice.

The people cheering on the black bagging of American citizens and hate fueled oppression and the literal suppression of free expression or thought do not care about justice

The people who were upset by the injustice of 2008 were the Occupy movement. Where are their political candidates?
by ratelimitsteve | 2025-10-22 17:08:54+00:00
they did learn their lesson after the post office scandal. They learned that they make the law, and can just declare themselves not responsible for their own actions, and that far from disqualifying them from management decisions the fact that machines can't be held accountable makes them a nifty layer of insulation between people who hurt people and people who get hurt.

They'll still arrest you for implying support for forbidden ideas, though. Not for actually hurting people, and evidently not for child sex abuse in some cases, but there always seems to be a spare officer available if someone has an idea that enough people find unpleasant.
by sleepybrett | 2025-10-22 17:08:56+00:00
This is fucking awesome. I've recently built my own curing chamber and modified a humidifier so it didn't need a button press ;), and am taking delivery of some jowls on the weekend and have been getting all the software infrastructure set up for the monitoring of it's temp/humidity (grafana, prometheus, alerting, etc).

Given that my grandfather used to cure his own in a cabinet in his root cellar with NO automation it feels a little overkilly but I'm glad to see someone else is overkilling at an even more extreme level than me and is making their work public.
by tug2024 | 2025-10-22 17:09:48+00:00
Searle’s argument is like a captain claiming his ship isn’t sailing because the compass is inside a cabin, not on deck.

Nilsson points out: if the vessel moves as if it’s cutting through waves, most sailors would say it’s sailing. Even Searle’s “deep thought” may just be a convincing simulation, but the wake is real enough.

The systems reply? Claiming the ship can’t navigate because the captain doesn’t understand the ropes feels like denying the ocean exists while staring at the harbor.

In the age of LLMs, the seas are charted better than ever, yet storms of obvious mistakes and rows of confusion, misguided and misled folk still appear. Perhaps a model city of Beijing as old town, new streets, and maps can sway Searle readers in the 21st century!

Alas, the old captain has sailed into the horizon, leaving the debate with the currents.
by Sparkle-san | 2025-10-22 17:10:01+00:00
> I don't think the people in this thread have any concept of how much $$$ it costs to distribute a free container that is going to be downloaded billions of times.

Not very much at all. It looks like they're hosting on Docker Hub which doesn't charge for bandwidth. I could create a pro account for $11/month and be able to serve an image billions of times. The compute to build an image is small enough that it can be done at whim on a dev machine.
by nucleardog | 2025-10-22 17:10:14+00:00
I did. Implemented a "simple" solution (simple for anyone who is going to be setting up their own IP camera system and NVR):

Cameras are on their own VLAN. Port isolation is enabled so they can't connect to each other. Only connectivity allowed to/from that VLAN is from the cameras to the router for NTP, and from the NVR to the cameras.

So if you plug in you can... check the current time on my router. Maybe see how many other cameras are on that segment? Likely not going to get very far given you're already caught on camera, an alert's been fired, and pretty soon I'm going to be making a call to the police.
by bartread | 2025-10-22 17:10:22+00:00
Yeah, exactly this. I don’t know why the person who responded to me is talking about survivorship bias… and I suppose I don’t really care because there’s a bigger point.

The internet was originally intended to be decentralised. That decentralisation begets resilience.

That’s exactly the opposite of what we saw with this outage. AWS has give or take 30% of the infra market, including many nationally or globally well known companies… which meant the outage caused huge global disruption of services that many, many people and organisations use on a day to day basis.

Choosing AWS, squinted at through a somewhat particular pair of operational and financial spectacles, can often make sense. Certainly it’s a default cloud option in many orgs, and always in contention to be considered by everyone else.

But my contention is that at a higher level than individual orgs - at a societal level - that does not make sense. And it’s just not OK for government and business to be disrupted on a global scale because one provider had a problem. Hence my comment on legislators.

It is super weird to me that, apparently, that’s an unorthodox and unreasonable viewpoint.

But you’ve described it very elegantly: 99.99% (or pick the number of 9s you want) uptime with uncorrelated outages is way better than that same uptime with correlated, and particularly heavily correlated, outages.