MurphyA/hacker-news huggingface dataset:
by kazinator | 2025-10-11 05:53:03+00:00
I definitely don't love C that does atoi on a Content-Length value that came from the network and passes that to malloc.

Even before we get to how a malicious would interact with malloc, there is this:

> The functions atof, atoi, atol, and atoll are not required to affect the value of the integer expression errno on an error. If the value of the result cannot be represented, the behavior is undefined. [ISO C N3220 draft]

That includes not only out-of-range values by garbage that cannot be converted to a number at all. atoi("foo") can behave in any manner whatsoever and return anything.

Those functions are okay to use on something that has been validated in a way that it cannot cause a problem. If you know you have a nonempty sequence of nothing but digits, possibly with a minus sign, and the number digits is small enough that the value will fit into int, you are okay.

> A malicious user can pass Content-Length of 4294967295

But why would they when it's fewer keystrokes to use -1, which will go to 4294967295 on a 32 bit malloc, while scaling to 18446744073709551615 on 64 bit?
by drnick1 | 2025-10-11 05:53:39+00:00
Best hackable smart TV should be a Linux box connected to a monitor or to a "smart" TV via HDMI without Internet access. The best thing about this setup is that you can stream Youtube ad-free though clients like VacuumTube. You can also open a browser and head straight to the high seas. Plus countless other things that are arbitrarily restricted or made difficult in locked down environments, all without your viewing habits being sent to the mothership, data brokers, and possibly the government.

The main downside is that there is currently no great "ten foot" UI for this use case on Linux. But the KDE Bigscreen project is being revived and could offer a definitive solution for free TVs.
by vasco | 2025-10-11 05:53:45+00:00
This guy is exactly like the get quick rich scheme guys.

I believe he initially had a vision for the product but now the whole schpiel is quotes like "a kid made $180k on an app in 4 weeks" like he was on and on about in podcasts.

Ok if its so easy, why don't you use your own website to do a bunch of $180k / m apps? How many companies can have employees produce 12 different apps per year and a combined revenue of $2.1m per employee? Also everyone can do it so you can pay them minimum wage you don't need developers.

But of course nobody is going to make any successful apps other than the people in the marketing materials.
by mindcrime | 2025-10-11 05:54:33+00:00
Can't speak for the OP, but FWIW, I was always taught to use the "we" construct in academic writing, even when writing as a solo author. But from doing some Googling around and reading threads on Reddit / *.se sites / etc. just now, it seems like this may be something where the guidance has changed over time. I guess it's more common now to actually use the first-person voice in that situation?
by toast0 | 2025-10-11 05:57:24+00:00
> It is bizarre that they are putting 100mbps Ethernet ports on TVs though.

It's not that bizarre. About the only media one might have access to that is above 100mbps is 4k blu-ray rips which can hit peaks above 100m; but TVs don't really cater to that. They're really trying to be your conduit to commercial streaming services which do not encode at that high of a bitrate (and even if they did, would gracefully degrade to 100Mbps). And then you can save on transformers for the two pairs that are unused for 100base-tx.
by in_cahoots | 2025-10-11 05:58:04+00:00
As an aviation fan just reading this thread is quite eye-opening in terms of how much risk tolerance the average commenter has vs what is standard in the aviation community and on aviation forums. It's almost like peeking into two different worlds. I wonder if there would be any value in teaching an "engineering when lives are on the line" or "war stories from accident investigations" classes to new engineers. I feel like there's value in appreciating just how much more work goes into building a system where people's lives are at stake.
by keyshapegeo99 | 2025-10-11 05:58:18+00:00
I completely agree and I just put in the bit about the keyboard shortcuts to pre-empt comments from the minority of iPad users who never remove the iPad from their Magic Keyboard saying they quite like the update.

Although regarding your final sentence - I don't think Apple even knows what the iPad is supposed to be any more. It seems execs completely lack any kind of product vision. And given both the tackiness of Liquid Glass and the various insulting ad campaigns that have trickled out over the past few years - they also clearly lack taste. In other words, Apple is Just Another Tech Company now.
by Panzerschrek | 2025-10-11 05:59:07+00:00
Catching exceptions caused by a bug has no sense in production code. For debugging purposes exceptions aren't necessary, a compiler can just insert asserts and call stack printing at the place where a bug was detected.

I agree that errors handling as it is implemented in Go is error-prone. Rust does this much better - values of a Result type shouldn't be discarded.
by saghm | 2025-10-11 06:00:19+00:00
Moving into a house for the first time since before college this year, I only just learned about Wi-Fi channel width this week. Apparently the mesh routers I ended up picking several months ago had a default width of 160 MHz, but only go as low as 80 MHz, so that's what I ended up switching to. Anecdotally it has seemed to be somewhat more reliable, but maybe in the long run finding something that can go even lower might be worth it because we do still notice some stutter occasionally that would be nice to reduce even if the theoretical max throughout was a bit lower.
by burnt-resistor | 2025-10-11 06:01:03+00:00
Until you slip a disc around C6, or your back or knees give out.

While "dirty hands == clean money", the problem is that it often ends in sacrifice in health and/or body that leads to involuntary early retirement.

My dad had an A/C and electrical automotive specialty shop until 1985 when that took him out in his mid 30's. He also had Agent Orange exposure in the military and exposure to various carcinogens with a culture of PPE avoidance in the automotive industry of the 70's and 80's.
by vasco | 2025-10-11 06:01:09+00:00
I guess what the mean is the same way spark gap transmitters are forbidden. Anyone can do it but it's forbidden. Anyone can read the wifi signals but CISCO doesn't have to sell you a dashboard with real time view of your location and everyone walking through it with all the websites they visited since they walked in, last time they were at your location, average time they are there, to communicate to a store in the mall that you're almost in front of it so it sends you a push notification with an ad, etc.
by Vaslo | 2025-10-11 06:01:12+00:00
I had a huge music collection of everything from thrash and death metal to new age and 80s. I don’t miss those days at all. I can’t tell you how many times I bought cds for one song and the rest of thing was garbage. When you’re a teen without a job or working to pay things like car insurance, gas etc, that 17 bucks was precious. No record store would let you return shit albums where I live.

Now I have all the music I’ll ever want for a low monthly fee, and I’ve discovered genres I would have never splurged for because of the limited resources I had at the time. My son does tons of music discovery through Spotify that I could have never done and doesn’t have to plop down 17 bucks for only 12-13 songs, 11-12 of which might be utter garbage.
by k310 | 2025-10-11 06:04:36+00:00
Nuance seems to have gone out the window long ago with blatant lies being stated and posted everywhere.

Any nuanced statement, meaning out of lockstep with The Information Ministry, is attacked, and with the usual ad-hominem.

Seriously, if you disagreed on some point, say, "Portland is reduced to smoldering rubble" and came under attack via media and death threats, how would you nuance that?

We in the U.S. have not experienced what other countries have experienced, at least since the Civil War, and any outside view, presumably nuanced, comes down hard on outright lies and personal and group threats.

And other countries have fought fascism on their homelands and see the big picture.
by hirako2000 | 2025-10-11 06:04:47+00:00
Yes I migrated workflows which I felt should be promoted as critical/production. Also because I wanted to scale that independently. https://applycreatures.com started as product backed by n8n. It enabled rapid backend tweaks to focus on the frontend. Once MVP was completed, it was time to migrate. I had the code in JavaScript so the core logic could simply be moved over, but a lot of boilerplate code had to be written to create a full fledged nodejs API. It confirmed that n8n was a good decision for early, prototyping the solution.

Most of my workflows remained in n8n, those that are unimportant or turned out unnecessary to the application. It saved me days for each, not having to build an app backend and cicd for those.
by ssl-3 | 2025-10-11 06:05:15+00:00
Oh, bathrooms are [sometimes] easy.

In an apartment I once had, I ran some cat5-ish cable through the back wall of one closet and into another.

In between those closets was a bathroom, with a bathtub.

I fished the cable through the void of the bathtub's internals.

Spanning a space like this is not too hard to do with a tape measure, some cheap fiberglass rods, a metal coat hanger, and an apt helper.

Or these days, a person can replace the helper by plugging a $20 endoscope camera into their pocket supercomputer. They usually come with a hook that can be attached, or different hooks can be fashioned and taped on. It takes patience, but it can go pretty quickly. In my experience, most of the time is spent just trying to wrap one's brain around working in 3 dimensions while seeing through a 2-dimensional endoscope camera that doesn't know which way is up, which is a bit of a mindfuck at first.

Anyway, just use the camera to grab the rod or the ball of string pushed in with the rod or whatever. Worst-case: If a single tiny thread can make it from A to B, then that thread can pull in a somewhat-larger string, and that string can finally pull in a cable.

(Situations vary, but I never heard a word about these little holes in the closets that I left behind when I moved out, just as I also didn't hear anything about any of the other little holes I'd left from things like hanging up artwork or office garb.)
by oofbey | 2025-10-11 06:05:45+00:00
I don’t think I agree with the assertion that instantly bringing the chicken up to temp wouldn’t result in it being cooked. Especially since the classic solution got the chicken up to 400F. I don’t care how fast it cools off, if we assume magic uniform heat distribution from the slap, starting at 400 F, all the proteins are gonna be denatured and the diseases killed.
by Ekaros | 2025-10-11 06:06:25+00:00
Chicken sized 74C object radiates at 2kW? Probably cools rather fast, but still feels like high number...

Energy in general really feels weird, when you look at the numbers. Like potential energy or kinetic on relatively low speeds... And then compared to chemical energy...

Edit: Also how do you get it there? Wouldn't you need to hit it with higher frequency to start with to get to temp?
by lelanthran | 2025-10-11 06:07:10+00:00
> While the classic "Parse, don’t validate"[0] paper uses Haskell instead of C as its illustrative programming language, the approach detailed is very much applicable in these scenarios.

Good thing someone (i.e. me) took the time to demonstrate PdV in C: https://www.lelanthran.com/chap13/content.html
by sph | 2025-10-11 06:09:16+00:00
> Creating new projects from scratch can trip up even experienced professional developers because in most jobs you come in, work an existing codebase, and iterate.

I’ve worked on greenfield projects for so long (15+ years at this point) that my experience is the exact opposite. The few times I’ve had to contribute to an existing code base was a painful experience of figuring out where everything is, and why everything is done in such a weird way.

There is no better feeling than doing that first `git commit -m 'initial commit'`

In a way, it is interesting and a bit frightening to know that my experience is very different than most engineers are socialized and molded for team work and daily standups and code review which are alien (and scary) to me.
by hunvreus | 2025-10-11 06:09:32+00:00
I'm still trying to figure out what the key difference would be when writing an app with Datastar over HTMX.

I wrote /dev/push [1] with FastAPI + HTMX + Alpine.js, and I'm doing a fair bit with SSE (e.g. displaying logs in real time, updating state of deployments across lists, etc). Looking at the Datastar examples, I don't see where things would be easier that this [2]:

<div hx-ext="sse" sse-connect="{{ url_for('project_event', team_id=team.id, project_id=project.id) }}" sse-close="sse:stream_closed" > <div hx-trigger="sse:deployment_creation, sse:deployment_status_update, sse:deployment_rollback, sse:deployment_promotion" hx-get="{{ url_for('project_deployments', team_slug=team.slug, project_name=project.name).include_query_params(fragment='deployments') }}" hx-target="#deployments" ></div> </div>

Also curious what others think of web components. I tried to use them when I was writing Basecoat [3] and ended up reverting to regular HTML + CSS + JS. Too brittle, too many issues (e.g. global styling), too many gaps (e.g. state).

[1]: https://devpu.sh

[2]: https://github.com/hunvreus/devpush/blob/main/app/templates/...

[3]: https://basecoatui.com
by whycome | 2025-10-11 06:12:04+00:00
You also made me think. I think the problem lies in the nature of “threaded” discussions. The information was useful, but it wasn’t necessarily a “reply” to any particular comment. But, the design here leaves no other choice when adding it. It maybe doesn’t make sense as a top-level comment either. It’s almost like we need to have…side comments? Asides? Like a place to just drop in relevant tidbits and informational helpers rather than a true “comment”. Maybe it’s as simple as having a means to turn off replies to signify that a contribution was an “relevant aside”.

But yes, in a perfectly meta way, I think we’ve both thought more about the nature and design of web comments and information and the implications of LLM-assisted chat ‘augmentation’. (All those AI summaries forced upon us in every site is probably the worse implementation of this!)
by outcoldman | 2025-10-11 06:12:07+00:00
Pebble does not have GPS at all. You don't have to use GPS on the watch, if you don't need to. You have an option to choose to use it, if you want to. Garmin watches ~2 weeks just as a smart watch, 8-50 hours with GPS on. But you will not have it on, unless you need it for a specific workout.
by burnt-resistor | 2025-10-11 06:13:07+00:00
HyperNormalisation (2016) helped me frame the decline they (and we) allowed. The people at the top have been trending towards dumber, less conscientious, less hopeful, less moral, and more corrupt when it doesn't have to be this way; plus, it's easier than ever for billionaires and private equity to buy up corporate media and manipulate social media to shape narratives favorable to their interests. It's trending this way because the very rich seem to believe they aren't stakeholders in society or planet Earth, and that they can breathe and eat money, and so they are extracting as much of it as possible before it all comes crashing down rather than doing anything to reset, rebuild, or prevent it.

Beware times when private edifices rival, or subsume, the states' majesty.
by chaseadam17 | 2025-10-11 06:13:32+00:00
If you read Thiel’s internal emails with Mark Zuckerberg, it’s clear he thinks a lot about public perception and how to frame tech to the masses.

The antichrist stuff strikes me as a debate tactic. Public sentiment has been trending toward, “maybe tech is kinda bad” so to shift the frame, Thiel says something extreme he knows will get headlines like, “if you regulate tech you might be the antichrist.” He also sprinkles in “or maybe there’s a 1% chance tech kills everyone” to deflate tech criticism from the other angle.

My 2c is that most tech is actually good and 90% of public disdain comes from social media and phone addiction (Thiel apparently limits his kid to one hour of screen time per week) and that because social media’s downsides caught nearly everyone by surprise we’re overcorrecting with AI safety stuff.

https://www.techemails.com/p/mark-zuckerberg-peter-thiel-mil...
by hunvreus | 2025-10-11 06:14:13+00:00
BTW, this comment is very true when dealing with HTMX as well:

> But what I’m most excited about are the possibilities that Datastar enables. The community is routinely creating projects that push well beyond the limits experienced by developers using other tools.

For example when displaying the list of deployments, rather than trying to update any individual deployment as their state is updated, it's just simpler to just update the whole list. Your code is way simpler/lighter as you don't need to account for all the edge case (e.g. pager).
by sph | 2025-10-11 06:16:06+00:00
> Reading and watching fills your brain [with dopamine] with whats possible

FTFY. Then you have to do it yourself, and none of that instant gratification comes. Tutorials are junk food that appear useful. Looking at one to solve a specific problem might help, trying to learn something by consuming an unspecified amount of hours watching randos with polished youtube videos is akin to scrolling TikTok and feeling you’re doing something useful.
by highpost | 2025-10-11 06:16:22+00:00
I think we're dealing with garden variety snobbery here. A great school, like a great teacher, is a school that makes a difference in people's lives. If it takes people who could have worked in a factory and gives them a leg up to a better living, then we should celebrate that kind of school. The point of the article is that circumstances have changed in a way that undermines the ability of school like WKU to deliver this kind of possibility.
by outcoldman | 2025-10-11 06:16:34+00:00
Sorry, I guess I was just reading about them, and went to the original blog post published on 2025-03-18 https://ericmigi.com/blog/introducing-two-new-pebbleos-watch...

I was able to develop apps for Garmin Fenix 3, which was released in 2015 https://www.garmin.com/en-US/p/160512/#specs it already supported building apps for the watch. They also had a funny name for the language they built, something like "Gorilla language" or something similar.

EDIT: found it, they call it Monkey-C https://developer.garmin.com/connect-iq/monkey-c/
by specproc | 2025-10-11 06:16:45+00:00
There are two big offers with streaming services: catalogue and curation (playlists, up next).

On curation, taking one's time to do that oneself is arguably superior. You get to know your music better, tailor the collection to your tastes, discovery and growth is active not passive.

If you're really into a band or genre you'll also run into the limits of Spotify's collection. Artists have missing albums, some artists aren't there at all. It's not as bad as film and TV, where six subs are required to cover a broad range of viewing, but that's the enshittification pathway.

Also, real music people hate the mainstream, man.
by Ekaros | 2025-10-11 06:16:53+00:00
Not if they are not only ones doing it. And at the current moment there is enough consensus that valuations are high. And even that they look bubbleish... In this sort of environment you can basically freely say as such.

I think there would be lot more pushback if you said that this will go to 10x or 100x or 10000x in a few years... That might be suicide...
by Terr_ | 2025-10-11 06:18:40+00:00
> convince everyone that this is beeblebrox and therefore the previous rules don’t apply.

This reminds me of how services like Realpage have been described as "algorithmic price-fixing." There's something traditionally illegal (but profitable), and people try to get away with it by slapping on "but with a computer" as some kind of twist that's supposed to make it OK.

Sometimes there's a POSIWID [0] aspect to it, where the excuse is "no human explicitly designed the system to do X from the ground up"... which is a distraction from "we kept shopping around and tweaking until it started to do X and then we decided to make that a core part of our business."

That might be a defense against mens rea, but once someone points out that you created a crime-machine by accident, you still gotta fix it or turn it off.

[0] https://en.wikipedia.org/wiki/The_purpose_of_a_system_is_wha...
by lelanthran | 2025-10-11 06:19:23+00:00
> I strategy that helps me [...]

In another comment recently I opined that C projects, initiated in 2025, are likely to be much more secure than the same project written in Python/PHP (etc).

This is because the only people choosing C in 2025 are those who have been using it already for decades, have internalised the handful of footguns via actual experience and have a set of strategies for minimising those footguns, all shaped with decades of experience working around that tiny handful of footguns.[1]

Sadly, this project has rendered my opinion wrong - it's a project initiated in 2025, in C, that was obviously done by an LLM, and thus is filled with footguns and over-engineering.

============

[1] I also have a set of strategies for dealing with the footguns; I would gues if we sat down together and compared notes our strategies would have more in common than they would differ.
by darth_avocado | 2025-10-11 06:20:09+00:00
I also confirmed with a MD friend of mine, 10 days or more of worsening symptoms could be indicative of bacterial sinusitis. For adults you can begin the treatment on that diagnosis. You can also start antibiotic treatments before 10 days in certain conditions but it is generally not recommended. Just because a patient shows up on 11th day with worsening symptoms doesn’t mean you have to wait 2 weeks.
by outcoldman | 2025-10-11 06:21:38+00:00
I have been using Apple Watch since series 0. I believe I switched from Garmin fenix 3. I feel like at that time Fenix had a lot of issues, I remember there were some about the maps, maybe they did not even had them at that time. And I was really into hiking. So thought that Apple Watch could be a better watch. Workouts were nice, listening music from the watch was a good addition.

I have not tried new fenix watches. And I would assume they are the same good as Apple Watches as well. But I do like my Apple Watch Ultra (2 or 3, whatever was released this year)
by NoiseBert69 | 2025-10-11 06:21:43+00:00
I'm an embedded engineer for 15 years now and did some really spicy stuff during my career.

This hobbyist SAR project made by hforsten absolutely nuts. Wonderful.

He mastered mechanics, electronics, software and applied higher math of the highest difficulty grade. Guess we have to call this "The Holy Quadrivium".

Back to the tech:

Radar stuff is very interesting. Reverse Engineering cheap FMCW radars from China makes these very accessable to hobbyists too. Often you "only" have to care about the VCO for the frequency sweep and then read back the I/Q channels using two sync'ed ADCs. Then you can play around with algorithms to analyze the signals.

These 24GHz Car Speed CW (you see next to streets) radars can be used for classifying rain drops for example. They antenna pattern is quite sharp and they have high gain.