MurphyA/hacker-news huggingface dataset:
Show HN: WorkSplit – iPhone camera that keeps work photos separate
by adrianwa | 2025-10-29 14:48:07+00:00
I built WorkSplit, a tiny iPhone app to keep work photos separate from personal ones, stored locally on device.

Problem As a field technician I often mixed project photos with my private camera roll. That made documentation messy and raised privacy issues when sharing or backing up.

What it does - Separate, work-only camera inside the app (shoot directly into a selected project/album) - Optional import from the system Photos app into a project - Fast retrieval of unsorted shots and quick assignment to a project - Local-only storage on the iPhone (no accounts, no cloud)

Who it’s for Tradespeople, technicians, and freelancers who document jobs and want clean separation and privacy.

Link (App Store): https://apps.apple.com/ch/app/id6753669162

I’d love feedback on: - Does the capture→project flow feel right, or what’s missing for field work? - Must-have features you’d expect (bulk actions, export flows, metadata)? - Any iOS edge cases I should account for?

Happy to answer technical or product questions. – Adrian
by voxic11 | 2025-10-29 14:48:10+00:00
It seems, based on the article in the sibling comment, that Pandora took a overly narrow view of the encryption requirements for working with credit card data. So they served the web pages over HTTP and only used HTTPS for the API calls that transferred the credit card information. This is obviously still insecure because a MITM attack could inject javascript onto the page to steal the data while it was being entered, but at least in the case where an attacker could just read the traffic they might not be able to capture the credit card information.

I can totally believe there were still companies in existence at this time who were still following such misguided interpretations.
by meesles | 2025-10-29 14:48:14+00:00
> I'm sure I could learn to be slightly faster on dvorak/colemak, but nothing beats the convenience of always having guaranteed access to qwerty, everywhere I go.

Citation needed. Of my 2 friends that have tried, neither have been able to reach their 'standard' typing speed after 1+ years of dvorak. Maybe they didn't try hard enough?
by JohnFen | 2025-10-29 14:48:19+00:00
> “The 40- to 60-plus-aged crowd used to attend movies on a frequent basis. They wouldn’t just go to critically acclaimed movies but programmable ones like Woman in Gold ($33M) and Hello My Name Is Doris ($17.7M). That demographic has been lost to the convenience of Netflix, and the arthouse exhibition track for these movies which included the Landmark and Arclight Cinemas isn’t in the same shape as it was pre-pandemic. The cinemas that made these movies pop on opening weekend are gone, and with it the audience.”

I'm in this age group, and I'm also someone who has basically stopped paying any attention to movie releases anymore. I used to be an avid movie-goer, but that stopped years ago.

The reason isn't streaming services (I don't watch movies on streaming services either), it's that there was a very long dry spell where everything seemed to be remakes, superhero movies, Star Wars and Star Trek franchise movies (those franchises lost me about when JJ Abrams and Disney got involved) and the like.

The industry seemed to largely stop making movies that entertained or compelled me and/or were actually very good. At the same time, the experience of going to the theater became both crazy expensive and increasingly unpleasant, regardless of the movie.

So I stopped going and, over time, I simply lost the habit. When I'm planning a night out now, going to the movies isn't even an idea that I reject -- it's an idea that just doesn't occur to me.

Could I get into it again? Anything's possible, of course. I have new habits now, though, that don't include movies. I honestly have no idea what the path to getting me back in the movie theater would look like.
by sceptic123 | 2025-10-29 14:48:59+00:00
Swerving to avoid x but hitting y has a greater than 0 chance of causing an accident which is fatal for the vehicle's occupants.

I'm not saying it's likely, I'm saying a human will make that call in the moment, and we may judge that human for the decision.

But how do you feel if a self-driving car is making that decision?
by ecshafer | 2025-10-29 14:49:20+00:00
I was a at a company that was doing their SVN/Jenkins migration to Git/Bitbucket/Bamboo around 2016/2018. But they were using source control and a build system already, so you have to hand it to them. But I have an associate that was at one of the large health insurance companies in 2024, complaining that he couldn't get them to use git and stop deploying via FTP to a server. There is danger with being too much on the cargo cult side, but also danger with being too resistant to change. I don't know how you can look at source control, a CICD pipeline, artifacts, IaC, and say "This looks like a bad idea".
by bell-cot | 2025-10-29 14:49:58+00:00
Is he really trying to move those goalposts? Or is he just voicing the most-common way for humans to process such events?

I'm thinking that 99% of people would feel horrible and/or morally responsible if they lent an axe to their neighbor Mr. Seemed-Nice, which he then used to kill his wife. Vs. far less so, if their neighbor bought his fatal ax from Amazon or Walmart.
by unsupp0rted | 2025-10-29 14:50:31+00:00
This is in English but it should really be in Turkish, Hindi, etc because there are cultures that do this 9/10 times, and cultures that do this 2/10 times.

Sure it's generational too.

But in some cultures it's not generational- people can't merely write a question without waiting for your "Hello" response, and then your "How are you, I'm fine thank you, and you?" response.
by vpShane | 2025-10-29 14:50:46+00:00
No way. People deserve expression and to have a place that's THEIRS where they can foster a community. Much is learned. Playing battle bots is fun at the sysadmin level (for me), maybe not so much for others, but to have a place where people express themselves, and have THEIR place outside of the walled gardens such as social media, AND they protect it from the bots?

That's the battle, and expression, people, their interests, and their communities are worth fighting for. _ESPECIALLY_ in this day and age where botnets/scrapers are using things such as Infatica to mask themselves as residential IP addresses, and mimicking human behaviors to better avoid bot detection.

There's a war on authenticity, people's authentic works, and the reverse: determining if a user is authentic now adays.
by rhodey | 2025-10-29 14:51:14+00:00
Because AWS does not sell the Nitro TEE hardware

And so there is no case where you find a Nitro TEE online and the owner is not AWS

And it is practically impossible to break into AWS and perform this attack

The trust model of TEE is always: you trust the manufacturer

Intel and AMD broke this because now they say: you also trust where the TEE is installed

AWS = you trust the manufacturer = full story
by karlshea | 2025-10-29 14:51:46+00:00
A client of mine had this exact problem with faceted search, and putting the site behind Fastly didn’t help since you can’t cache millions of combinations. And they don’t have the budget for more than one origin server. The solution was if you’ve got “bot” in your UA Fastly’s VCL returns a 403 with any facet query param. Problem solved. And it’s not going to break anything, all of the information is still accessible to all of the indexers on the actual product pages.

The facet links already had “nofollow” on them, now I’m just enforcing it.
by piggg | 2025-10-29 14:51:59+00:00
There's also a ton of companies selling "make money off your unused internet" apps which are all over tiktok and basically turn yourself into a residential proxy/sketch VPN egress node.

On top of that - lots of free tv/movie streaming stuff that also makes yourself a proxy/egress node. Sometimes you find it on tv/movie streaming devices sold online where it's already loaded on when it arrives.
by redasadki | 2025-10-29 14:52:01+00:00
The 2025 report confirms that climate change’s assault on human health has reached alarming new levels:

Thirteen of 20 indicators tracking health threats are flashing red at record highs.

Heat-related mortality, now estimated at 546,000 deaths annually in the 2012-21 period, has climbed 63% since the 1990s.

Deaths linked to wildfire smoke pollution hit a new peak in 2024, while fossil fuel combustion overall remained responsible for 2.52 million deaths in 2022 alone.

Extreme weather increasingly drives food insecurity.

This accelerating health crisis unfolds against a backdrop of faltering political will.

The report documents governmental retreats from climate commitments.

Yet, within this sobering assessment lies a quiet but potentially pivotal shift.
by TeMPOraL | 2025-10-29 14:52:43+00:00
South Korea is, the go-to example I've seen brought up on on HN many times over the years. AFAIR, they used to legally mandate ActiveX controls to access banking and government portals, and that practice continues to date even though the legal mandate was dropped. From what I read, there's still a set of applications that are commonly required to access banking and tax filing services, that purport to provide a degree of remote attestation and "security" (firewalls, detection of keyloggers and screen capture), and to access digital certificates.

Brazil is another example - ironically, the software suite that's commonly required for banking is named after the capital of the country I live in :).

Some quick searching now also flags Slovenia and Serbia as places where some banks require custom desktop (or even Windows-specific) software to access banking services.
by MisterTea | 2025-10-29 14:52:47+00:00
> Most if not all large, successful open source projects are funded by commercial interests, not just consumers.

Right, the key point here is most of the fundamental projects were never commercial in origin and had grassroots community or academic roots. Android is built on top of a student's hobby Unix clone.

> The resources it takes to maintain something like Android far exceeds what can be funded solely by donations and volunteers.

Um, no duh a corporate project requires corporate funding. Android was never a grass roots community effort.
by nromiun | 2025-10-29 14:53:03+00:00
Helix's features look very cool, but I could not switch to it because of this bug [0]. It has been open since May 2022 and it is still not fixed. Basically you can't exit insert mode with a key combination like `jk`. Four years feels like a long time for such a basic bug. I will stick to NeoVim for now.

0. https://github.com/helix-editor/helix/issues/2612
by Foobar8568 | 2025-10-29 14:53:06+00:00
These will give you an idea of beans we find in supermarket, several of these brands are considered as local roasters, I can even find Boreal in supermarket, which would be your typical "new wave coffee bar/beans" https://www.galaxus.ch/en/s7/producttype/coffee-beans-183

Given that, Switzerland is a bit special for this matter I believe, but I know that most people will be happy with Nespresso.

I rarely see anyone drinking instant coffee. On that subject, I rather drink some "expensive" instant coffee (yes I have seen single origin instant coffee) than Nespresso or Nescafé.

My point is drinking good coffee is a luxe.
by SketchySeaBeast | 2025-10-29 14:53:23+00:00
> According to xAI policy, Grok is "not directed" to children under 13 while teens between 13 and 17 must have their parent or legal guardian's permission to use it, and they must agree to the company's terms of service.

You know, I'm pretty sure it's not cool to ask for nudes from a 13 year old even if their parents say it's OK.
by owenversteeg | 2025-10-29 14:53:43+00:00
Of course not everything is sponsored by Mastercard. In my small country - the Netherlands - there was a small, unique gay community for many years. It had its own very specific culture. That is dead and gone now; and indeed, its corpse is sponsored by Mastercard (an American corporation.)

You can escape sponsorship, but homogenization is inescapable. I'm not sure where you are on Earth, but I have traveled far and wide and the list of places where newly-built corners are not generic extrusions of glass and steel and aluminum and drywall is short and grows shorter by the day.
by joshstrange | 2025-10-29 14:54:36+00:00
The idea of paying for a $2k fridge that has a $30* android board running a large screen is just absurd to me. Not only was this kind of enshittification almost a given, but we all know how well manufacturers update devices like this. Security issues aside, you just know that the software is going to slowly rot (Think: Widget to show tweets before Twitter closed the API down).

If you feel so inclined to have a touch screen on your fridge then you'd be better off getting some random tablet and sticking it to the fridge.

I _love_ my home automation/smart house devices but I wouldn't touch one of these with a 10ft pole.

* That might be a bit high
by everdrive | 2025-10-29 14:55:11+00:00
Ubiquitous internet, especially on mobile devices was a huge mistake. So what if Grok does this? Grok obviously sucks, but the kid currently has access to Google, reddit, etc and has all the inappropriate content one could imagine.

I'm not claiming that "this is not a new problem, therefore we should do nothing" -- rather I'm saying the problem is ubiquitous mobile internet. Fixing Grok won't do anything useful.

[edit]

Also, holy heck, I didn't realize they put Grok into Teslas. One more reason to never buy this product.
by pjc50 | 2025-10-29 14:55:59+00:00
Nice work. Especially referencing the TI prior art of the Speak and Spell. This kind of synthesis was quite prevalent in the early 80s - school BBC Micros had a ROM which let you "*SAY" a phrase. Classic Macs had MacinTalk.

Another codec which might be interesting to try but is considerably more complicated is AMR, from GSM: https://en.wikipedia.org/wiki/Adaptive_Multi-Rate_audio_code...
by nlh | 2025-10-29 14:56:00+00:00
The only thing missing here is a way to SEND emails from your new business email. I don’t think CloudFlare (yet) offers virtual SMTP for your routed email, so you can receive emails to your new “noah@mynewcompany.com” address but sent mail will still come from your personal email address.

Anyone have a simple way of solving this? I’ve done it in a complex way (setting up my own SMTP service through through Google Apps, a paid service), but I’m wondering if there’s a simpler approach I should use going forward for these quick setups.
by levi-turner | 2025-10-29 14:56:11+00:00
> Was it agreed by some salespeople without the knowledge of legal / management?

Never worked for either company, but there's a zero percent chance. Legal agrees to bespoke terms and conditions on contracts (or negotiates them) for contracts. How flexible they are to agreeing to exotic terms depends on the dollar value of the contract, but there is no chance that these terms (a) weren't outlined in the contract and (b) weren't heavily scrutinized by legal (and ops, doing paybacks in such a manner likely require work-arounds for their ops and finance teams).
by codemusings | 2025-10-29 14:56:31+00:00
I saw beta screenshots of what used to be the toolbar (e.g. in Finder) and immediately disabled auto-update on my Mac. Seeing how many bugs have also been introduced (not just visual glitches) pretty much reaffirmed me in my decision.

However the downside is I can't try some new app releases like Daft Music[1] because it has become to burdensome to maintain two different designs. Especially in SwiftUI.

[1] https://daftmusic.app
by AlexandrB | 2025-10-29 14:56:52+00:00
Full headline still sucks for the same reason. "12 year old boy was asking Tesla’s Grok AI chatbot about soccer. It told him to send nude pics." would be much better IMHO. I wonder if it's phrased the way it is because of the "she says" at the end which might get the CBC off the hook legally since the whole story is based on this mom's account and no further corroboration.
by qsort | 2025-10-29 14:57:18+00:00
I feel so seen lol. I work in data engineering and the first paragraph is me all the time. There are a lot of cool technologies (timeseries databases, vector databases, stuff like Synapse on Azure, "lakehouses" etc.) but they are mostly for edge cases.

I'm not saying they're useless, but if I see something like that lying around, it's more likely that someone put it there based on vibes rather than an actual engineering need. Postgres is good enough for OpenAI, chances are it's good enough for you.
by ecshafer | 2025-10-29 14:57:25+00:00
This is true, but also really funny considering that even today the average windows sysadmin can still barely use powershell and relies on console clicking and batch scripts. A good unix admin can easily admin 10-100x the machines as a windows admin, and this was more true back in the early 00s. So the marketing on getting the facts was absolutely false.
by zer00eyz | 2025-10-29 14:57:36+00:00
> Should You Use Postgres? Most of the time - yes. You should always default to Postgres until the constraints prove you wrong.

Kafka, GraphQL... These are the two technology's where my first question is always this: Does the person who championed/lead this project still work here?

The answer is almost always "no, they got a new job after we launched".

Resume Architecture is a real thing. Meanwhile the people left behind have to deal with a monster...
by jjice | 2025-10-29 14:58:11+00:00
This is a well written addition to the list of articles I need to reference on occasion to keep myself from using something new.

Postgres really is a startup's best friend most of the time. Building a new product that's going to deal with a good bit of reporting that I began to look at OLAP DBs for, but had hesitation to leave PG for it. This kind of seals it for me (and of course the reference to the class "Just Use Postgres for Everything" post helps) that I should Just Use Postgres (R).

On top of being easy to host and already being familiar with it, the resources out there for something like PG are near endless. Plus the team working on it is doing constant good work to make it even more impressive.
by foul | 2025-10-29 14:58:21+00:00
That's a folk music wave, a conscious soul album, conflated with more pop social commentary. Not much protest songs. Products made out of popular discontent. Now if you said Woody Guthrie... But in pre-war times was there a non-mainstream?

The only thing that this may say is that in USA the regime fights dissent in mainstream media. Like, if you want to catch signs of a product made out of popular discontent, you can't e.g. find in UK charts the Sleaford Mods or Kneecap?
by nucleardog | 2025-10-29 14:58:30+00:00
> We have standard colors for this as well (as do most jurisdictions), neutral is always blue but the phases are Brown, Black and Grey

Never even thought about the fact that different regions may have different colour standards. This explains some of the power cables I've torn apart over the years and the strange colours I found inside!

> When I trained as an industrial electrician they where different colors, they changed in 2006 so that just makes me feel old (used to be Red, Yellow, Blue with Black for Neutral).

Making a mental note of that one... a black neutral would be a nasty surprise coming from North America.
by kazga | 2025-10-29 14:58:42+00:00
> > 'The same language' is usually just a desguised nationalistic claim

> It's the opposite: "it's a different language" is usually just a nationalistic desire for differentiation of what are essentially dialects/variants of a language.

It's both. The idea that Ukrainian is an uneducated farmer's dialect of Russian is a common talking point in the "Greater Russia / Russkiy Mir" narrative. Conversely, asserting the status of the Ukrainian language is a big part of Ukrainian identity in the face of an imperial invasion.
by hedora | 2025-10-29 14:58:50+00:00
At another big-4 hyperscaler, we ended up with substantial downtime and a lossy migration because they didn’t know how to manage kubernetes.

Microk8s doesn’t use etcd (they have their own, simpler thing), which seems like a good tradeoff at single rack scale: https://benbrougher.tech/posts/microk8s-6-months-later/

The article’s deployment has a spare rack in a second DC and they do a monthly cutover to AWS in case the colo provider has a two site issue.

Spending time on that would make me sleep much better than hardening a deployment of etcd running inside a single point of failure.

What other problems do you see with the article? (Their monthly time estimates seem too low to me - they’re all 10x better than I’ve seen for well-run public cloud infrastructure that is comparable to their setup).
by tiu | 2025-10-29 14:58:57+00:00
I am whole off the vim (&friends) trend but my 2c-

The helix situation is still miles better for up and running asap compared to dancing with files/lua on lazyvim. Just having to refer to docs to install a plugin, writing sane remaps etc eats up time. If you really just speedrun everything under an hour good for you. But for the rest, a lsp is a one package manager install away (even on windows scoop seems to have become the de facto), editing a toml is much easier than fiddling with the lua api/vimscript "just" to set some variables.

(Not a helix user though I have tried both vim/nvim/helix)

The only problem for me was the keybindings work good unless my vim instincts kick in where I become slow. The other one was lack of plugins.
by xp84 | 2025-10-29 14:59:00+00:00
All the cloud platforms do not care about UI/UX at all. Although GCP gets honorable mention for being pretty consistent and I have to admit not too bad. But anyway none of them care because it’s expected that 90% of the usage of the platform will be via a CLI or some abstraction (k8s, terraform, etc etc). So, they put minimum effort into UI quality, usefulness, consistency, appearance. That’s my understanding anyway
by stronglikedan | 2025-10-29 14:59:05+00:00
> avoiding RSI

I tried all manner of keyboards over the years, and in my opinion, none of them solve RSI. I'm now back to a standard qwerty for the same reason as OP - they're just immediately available everywhere.

What did help my no-longer-existent RSI was simple - I don't rest my wrists any more like I was taught in high school typing class (by an instructor that would whack our hands with a ruler if we were caught resting our wrists).

I do have a bit of De Quervain's Tenosynovitis from the mouse, but I'm solving that with one of those hand stretchers that hook to your fingers and provide resistance when opening the hand. 100 reps a day (25x4) and I haven't really felt it in weeks. Turns out that working out the muscles opposite to the ones you think is the key (therapy putty did nothing).
by alwa | 2025-10-29 14:59:40+00:00
It’s a weird account. I wonder about the persona the mom and her son chose for the chatbot. The article describes that persona, “Gork,” as “lazy male.” Is this euphemism for “4chan-dweller in the mold of its edgelord technoking”?

(ETA: seems maybe so, per e.g. [0]:

> ”The leaked system prompt associated with Gork reveals a scripted persona aligned with the tone of the parody account, often delivering intentionally awkward or abrasive commentary.” )

I’m not up with much in the way of culture these days, but in those circles isn’t “send nudes” kind of a filler tic? Dumb and offensive, but spoken unseriously—like a teenager seeking a rise by blurting out “fuck your mother” or something?

It kind of buries its acknowledgement that the Mom in question had not switched on “kid mode” for her 12-year-old and his 10-year-old sister. That makes it a bit harder for me to fault the chatbot for, well, not behaving toward its user they way it should toward a kid.

[0] https://www.testingcatalog.com/xai-tests-new-gork-voice-with...