MurphyA/hacker-news huggingface dataset:
by ratelimitsteve | 2025-10-14 14:41:15+00:00
two things:

1) this whole case hinges on intentionality and the gov't intends to prove that he set the fire intentionally. part of the chatgpt history is images he generated of fires and people running from fires. If he intentionally set a fire in a wildfire-prone area it doesn't matter that he didn't intend it to be a wildfire or anything he did after he set the fire.

2) If you'd like to have emergency services that are either prohibitively expensive or simply nonexistent, one great way to do that is to make first responders responsible for not doing a good enough job in their responses. I'm honestly not sure what we'd do in cases of blatantly neglectful behavior by a first responder during an emergency response, but beyond intentional malpractice we generally extend an assumption of good faith to anyone who bothers to show up and help during an emergency like this. The first time I get sued for not putting a fire out fast enough or completely enough is the last time I put out a fire.
by juangcarmona | 2025-10-14 14:41:27+00:00
Really glad to see DMR getting "new life"... I’ve been experimenting with it for local agentic workloads (MAF, Google's ADK, cagent, Docker MCP, etc...) and it’s such a clean foundation...

A few things that could make it even more powerful (maybe some are out of your scope):

- Persistent model settings (context size, temperature, etc.) across restarts — right now it always resets to 4k, which breaks multi-turn agents. - HTTP/gRPC interface to let tools and frameworks talk to DMR directly, not only through the CLI. (Here the issue is on Docker MCP side, right?) - Simple config management (`docker model set` or `docker model config`) so we can tweak GPU, threads, precision, etc. predictably. (there are at least a couple of issues on this topic already...)

TBH, I love how fast the discussion evolved today.

Congrats and good luck with this. I'll try to help, promised!
by _wire_ | 2025-10-14 14:41:29+00:00
That "Welcome" screen told you this was coming decades ago: you arrived at the new house you just bought and when you got to the door someone was already there, "Welcome", and instead of responding "Who the hell are you and what are you doing in my house" you thought "Oh, this place has built in servants? Sweet!"

This is the ultimate hazard of robots. The first step of autonomous cars is you believe they will take you where you want to go. The obvious next step is that they will take you where they want you to go.

At first AI answers your questions... Later AI will give you your questions.

An MSM report today says 1/3 of U.S. thinks the President and his policies are a manifestation of God's will, not a consequence of their vote and representative of the electorate.

The thrust of enshittification is vectored towards dark planet of theocracy, which will be populated by a new caste of indentured servants and human chattel. The engines producing this thrust, are the most powerful ever conceived and will soon be fully operational.

The oracle is a human disaster: Freedom is meaningless when you depend on machines to comprehend it.
by jeroenhd | 2025-10-14 14:41:39+00:00
Because your website will sell me Viagra and tell me to buy cryptocurrency when I visit it on some public wifis. Your words are also obscured by ISPs telling me that my router needs replacing and that I've nearly used up my data cap.

You don't need TLS for your blog, though. Browsers will still connect to port 80 if you don't enable HTTPS.
by archb | 2025-10-14 14:41:42+00:00
It should be JMAP because that's the primary protocol that Fastmail as a email hosting company (not a email client) operates on.

I don't think that's open source based on the blog post alone, and I don't think they have a reason to build a separate email client with advanced features. This app is likely just meant to serve the needs of the business clients that have asked for a separate app rather than using the website.
by 7thaccount | 2025-10-14 14:42:07+00:00
It's really just that it's a pretty easy language to learn that finds a good balance between structure and brevity. It has very good support for the data structures you need and libraries for everything. A lot of people love the language and that built up a lot of momentum and eventually people started adding stuff like numpy and scipy and pandas and before long you had this giant scientific computing environment that almost anyone can get into.

I tried out most of the scripting languages out there (Ruby, Perl, Tcl, Groovy, R, and many more) and Python just seemed to click more and it has a whole lot less to worry about upfront than languages like C# and Java. In comparison to languages like C and C++, it's a godsend for those with typical automation needs.

In my eyes it seems like a pretty straightforward development. There have been plenty of other tools that may have made sense throughout history too. Matlab could have done this, but by that time nobody was going to build out massive libraries for something expensive and partly closed off.
by strken | 2025-10-14 14:42:15+00:00
The architecture in TFA is fine, and sounds preferable to microservices for most use cases.

I am worried by the talk of 10k daily users and a peak of 1000TPS being too much premature optimisation. Those numbers are quite low. You should know your expected traffic patterns, add a margin of error, and stress test your system to make sure it can handle the traffic.

I disagree that self-inflicted architectural issues and personnel issues are different.
by like_any_other | 2025-10-14 14:42:55+00:00
I stand corrected. China has recently opened up (wisely only recently, protecting its native industries until they are able to compete globally). Yet the fact remains it is fiercely protective (as it should be. If only EU and US followed its example), and pursues an explicit, government-supported policy of taking over first local, then global markets:

China imposes more trade and investment barriers, discriminatory taxes, and information security restrictions than any other country by a vast margin. - https://ecipe.org/wp-content/uploads/2017/06/DTE_China_TWP_R...

https://en.wikipedia.org/wiki/Made_in_China_2025

And China also makes sure to appear open, using subtle instead of blunt tools, and concealing its influence operations - mister DeH40, with a 19 month old account, zero favorites or submissions, and a total of two comments, both in defense of China.
by crazygringo | 2025-10-14 14:43:01+00:00
If this is verifiably true, you should contact a journalist. Meaning if it's still in your Gemini history and the comments you posted are still up.

This would be a major tech news story. "Google LLM rewriting user history" would be a scandal. And since online evidence is used in court, it could have significant legal implications. You'd be helping people.

This is much too important to merely be a comment on HN.
by Havoc | 2025-10-14 14:43:17+00:00
Last I looked at it coverage is pretty good for land globally? Sea less so.

The bigger issue is that in first world buying a sdr dongle for giggles is viable while in poor countries less so. A raspberry and dongle is a substantial investment if you’re earning 1/20th of a US salary. Don’t think there is an issue with willingness to share data
by benjiro | 2025-10-14 14:44:06+00:00
> suddenly things started breaking. We eventually tracked it down

Amateur level ... Around 2006, we enjoyed some clients complaining why information on our CMS was being duplicated.

No matter what we did, there was no duplication on our end. So we started to trace the actions from the from the client (inc browser, ip etc). And low and behold, we got one action coming from the client, and another from a different IP source.

After tracing back the IP, it was a anti virus company. We installed the software on a test system, and ... Yep, the assh** duplicated every action, inc browser settings, session, you name it.

Total and complete mimic beyond the IP. So any action the user did + the information of the page, was send to their servers for "analyzing".

Little issue ... This was not from the public part of our CMS but the HTTPS protected admin pages!

Sure, our fault for not validating the session with extra IP checks but we did not expect the (admin only) session to leak out from a HTTPS connection.

So we tried to see if they reacted to login attempts at several bank pages. O, yes, they send the freaking passwords etc. We tried on a unused bank account, o, look, it was duplicating bank actions (again, bank at fault for not properly checking the session / ip).

It only failed on a bank transfer because the token for authorization was different on their side, vs our request.

You can imagine that we had a rather, how to say, less then polite talks / conversation with the software team behind that anti-virus. They "fixed it" in a new release. Did they remove the whole tracking? Nowp, they just removed the code for the session stealing if the connection was secure.

O, and the answer to why they did it. "it a bug" (yea, right, your mimic a total user behavior, and its a "bug"). Translation: Legal got up their behinds for that crap and they wanted to avoid legal issues with what they did.

Remember folks, if its free your the product. And when its paid, you are often STILL the product. And yes, that was a paid anti-virus "online protection". And people question why i never run any anti-virus software beyond a off-line scan from time to time, and have Windows "online" protections disabled.

Companies just can not stop themselves from being greedy. Same reason why i NEVER use Windows 11... You expect if you paid for Windows, Office or whatever, to not be the product, but hey ...
by lanyard-textile | 2025-10-14 14:44:16+00:00
Let’s Encrypt has always been a saving grace in my eyes: When it first entered the scene, it solved a problem we all loathed dealing with.

So I’ve always been fond of it and never really thought twice of it. While it’s rare for companies to support a shared resource together, this was a situation where it made sense.

But this is a good reminder to be wary of even the most benevolent looking tools and processes.
by spankalee | 2025-10-14 14:44:25+00:00
One problem I think people are going to run into here is loading CSS libraries from the components that use them.

Luckily, CSS Modules are starting to land in multiple browsers. Firefox added support behind a flag, and it might ship in 145.

So you'll be able to import the CSS from your JS modules, and apply it to the document:

import extras from 'css-extras' with {type: 'css'}; if (!document.adoptedStyleSheets.includes(extras)) { document.adoptedStyleSheets.push(extras); }

Or, if you use shadow DOM:

this.shadowRoot.adoptedStyleSheets.push(extras);
by AndrewStephens | 2025-10-14 14:44:49+00:00
Hey, I only read EmbarrassingFetish.com for the recipes section (I recommend their carrot cake.) I'm not into the rest of the stuff there and you can't prove it thanks to HTTPS.

More seriously, you are not wrong. Site Authentication is still a problem and actually the weakest part of HTTPS but it is also more of a people problem than a technical one. Nothing stops somebody from registering MyB4nk.com but at least HTTPS stops crooks spoofing MyBank.com exactly.
by mschuster91 | 2025-10-14 14:44:57+00:00
> You can hire way more developers with battle tested tooling, than some bleeding edge thing you don't know if it can even scale.

There's a crucial difference!

You can hire expensive developers on battle tested tooling... or you can hire a shit ton of juniors that want to work on $BUZZWORD for cheap in exchange for the CV creds of "worked on $BUZZWORD".

Resume Driven Development...
by ceejayoz | 2025-10-14 14:45:05+00:00
This was an issue with uterine morcellation; https://en.wikipedia.org/wiki/Morcellator. Per the article, though:

> Some researchers have raised concerns about histotripsy potentially seeding new cancer growths as tumours are broken up inside the body, meaning they can be transported to other areas. That fear, however, hasn't borne out in animal studies so far.
by eqvinox | 2025-10-14 14:45:07+00:00
Hm, it doesn't seem to be dealing particularly well with imported packages that don't have type annotations. Seeing a bunch of "has no attribute" warnings. Some of the "substitute" annotations also seem to be wrong (e.g. asyncio in CPython has no annotations [in my installed version], but it's pulling some in from somewhere and they're not quite right…) It's also getting confused about lists and tuples in __slots__.
by wredcoll | 2025-10-14 14:45:18+00:00
> Can you otherwise show that law is not being followed?

How, when we, the people/country, are not allowed to arrest ice agents and put them on trial? How do you propose we apply legal rules if some people are above them?

> Fourth Amendment, yes? Do you know of court cases scheduled to make this argument?

No, because the people involved DON'T GET COURT CASES.

I genuinely do not know if you merely haven't taken in any new information over the last 12 months or are deliberately trying to promote a false agenda.

> Do you otherwise disagree about the general principles of setting and enforcing rules for immigration?

If you are genuinely trying to discuss this matter, you can't use deflection tactics like this.
by jerojero | 2025-10-14 14:45:44+00:00
I have an 8 pro.

A month or so ago I went to NYC, I visited some of the museums.

Although I managed to get some great pictures, framing wise and sharpness wise. The color resolution was absolutely ridiculously bad.

I couldn't figure out a way in that moment to fix the issue, but seriously, the colors were so far off it kinda ruined this phone for me.

My friend had an iphone, we took the same pictures of the same paintings and his photos looked much closer to life than mine. Huge disappointment.

In the iphone its very easy to shoot raw and the camera app has a lot of very good intuitive controls. Not to even begin talking about video.

At some point I think Google did make really good photography phones but it seems to me like they've basically stopped trying to stay ahead of the competition whereas apple is always trying to improve. Thats my impression anyway.
by ownagefool | 2025-10-14 14:45:44+00:00
Yeah, the argument apparently doesn't really grok how certificates are issued and why the changes exist.

Manual long term keys are frowned upon due to potential keyleaks, such as heartbleed, or admin misuse, such as copy of keys on lots of devices when you were signing that 10 year key.

Automated and short lived keys are the solutions to these problems and they're pretty hard to argue against, especially as the key never leaves the server, so the security concerns are invalid.

That's not to say you can't levy valid criticism. I'm not sure if the author is entirely serious either though.

p.s. Certbot and Cert-manager are probably fine, but they're also fairly interesting attack vectors
Is Claude down / intermittent for anyone else?
by nomilk | 2025-10-14 14:45:45+00:00
Status green on Claude status page: https://status.claude.com/

Down Detector shows a spike: https://downdetector.com/status/claude-ai/

I'm using it via cursor, all of the last 10 prompts have ended prematurely due to a rate limiting error.
by raw_anon_1111 | 2025-10-14 14:45:59+00:00
But more than likely they will be. While the Presidency may turn, everything about how the US government works and how the population of the US is geared toward rural America having an outsized say in the federal government.

Let’s start with Senate. Every state regardless of population gets 2 senators where South Dakota and North Dakota hace twice the number of Senators as California.

While the House is not as bad, since left leaning voters are mostly in big cities, it’s easy to gerrymander and dilute their vote.
by ameliaquining | 2025-10-14 14:46:09+00:00
Also, if the CA runs the ACME check from five different validation servers that aren't all on the same continent, which Let's Encrypt does and all other CAs will be required to do in a couple years, then it is dramatically harder to simultaneously MITM them all. And if you really want to, you can use DNS-01 with DNSSEC, which means an attacker would have to be able to compromise DNSSEC on top of everything else.
by tombert | 2025-10-14 14:46:45+00:00
Valedictorian means something, but going to Princeton doesn’t. There are plenty of morons who manage to graduate from Ivy League schools, I have met lots of them. I can guarantee you that there is at least one politician that you think is an idiot that graduated from an Ivy League.

He might have been a genius at one point (though I doubt it), but I do not think that a Fox News host who brags about never washing his hands [1] is smart. Maybe drinking messed up his brain.

[1] https://youtube.com/shorts/eQI7n_48AY4?si=V5OTOS3uo7GEH8iv
by bdbdkdksk | 2025-10-14 14:47:07+00:00
So they form the plastic (already processed) using machines they've imported, and then put pre-populated PCBs with components made in China inside them? Hardly soup to nuts manufacturing.

I've worked in a niche assembly line in North America where we populated some of the board components in-house, but they were etched in batches off-site.
by kstrauser | 2025-10-14 14:47:07+00:00
The type system’s alright. It just gets especially tricky when you’re trying to check code which won’t exist until you run it. For instance, suppose you wanted to load your own module from a database with something like

foo = eval(result)

It can’t know what you’re going to load until it actually does it.

Things which lean heavily into metaprogramming, typically ORMs or things like Pydantic, fall into that category. I can’t hold that against the type system.
by whalesalad | 2025-10-14 14:47:13+00:00
This comes across as a 100% vibe-coded system that could really just be a table or two in a standard SQL database with some care taken with indexing and partitioning (when you reach that point).

What am I missing? What would compel someone to abandon a battle tested system like PSQL for a critical storage engine for this?

You can do an append-only table like this in any SQL database. You can use composite keys to achieve the query+natural sorting abilities over a single field. The effort to replicate this feature in any other environment is so minimal that it the 'vendor lock-in' makes this a non-starter in my eyes.
by bogwog | 2025-10-14 14:47:15+00:00
> And GNOME lives on as a sorry excuse for a bad copy of MacOS desktop looks without the feel.

This is an inaccurate description. GNOME is a copy of (the worst parts of) Windows 8 and Mac OS, not just Mac OS.

But seriously, GNOME isn't that bad, and there are people who genuinely enjoy it over KDE. Choice is what makes the Linux ecosystem great.

However, I do agree that KDE is probably a saner default than GNOME, if the goal is to make the transition from Windows to Linux easier. GNOME is (probably) less buggy than KDE, simply due to having less features overall, but the UX is going to be completely alien and off-putting to most casual users.
by jezek2 | 2025-10-14 14:47:16+00:00
MacOS can run unsigned apps with GateKeeper active, no need to disable it. Attempt to run the app, then go into security settings, scroll down and click on "Open anyway". And before Sequoia a right click -> Open was sufficient.

On M1+ devices it might also need "ad-hoc signing" if the developer hasn't done it (not required for Intel binaries). This is not a true signing, it just inserts a cryptographic checksum into the binary, no actual signing is involved.
by modo_mario | 2025-10-14 14:47:18+00:00
New? It's been blamed for a long time now.

And it makes sense on this front.

You make tax optimising by dumping profits on R&D less attractive (and around the same time change patenting law with bayh-dole) and make it more attractive to spend it on stock buybacks to directly benefit shareholders

Results seen in the real world line up as less is spent on the former and more on the later so i'm not sure how the blame is unfounded
by kace91 | 2025-10-14 14:47:33+00:00
I’ve been trying it out coming from the Mac recently, mostly because I had to do stuff that didn’t play well with an arm processor.

It is surprisingly elegant and polished now. There’s a couple rough edges - the settings menu needing the apply button on every change like a form is weirdly ancient, and notifications are a bit noisy, but overall I could see myself ditching macOS for it.
by lossolo | 2025-10-14 14:47:34+00:00
The JV rule is gone. China removed the foreign ownership cap in autos on a staged schedule with NEVs in 2018, commercial vehicles in 2020 and passenger cars from the start of 2022. The old "max two JVs" rule was lifted at the same time. In other words, if a foreign OEM wants 100% today, the law allows it.

BMW example I mentioned is an example of exercising that choice, it lifted its stake in BMW Brilliance from 50% to 75% once the rules changed. And Tesla ias wholly owned in Shanghai (enabled by the 2018 NEV opening). That's precisely the point I made, it wasn't an "exception" as you framed it, to a still binding rule, it was an early use of the liberalization.

So since 2022 ownership is a strategic choice for these companies. Many legacy JVs remain not because they don't have a choice but because of scale, supply chain integration, dealer networks, local partners assets etc, so on other words it works for them like this better, but any OEM with the capital can take majority or go 100% (as BMW did and as Tesla/Scania/Lexus show).

Saying "technically the market might be open ... but in practice it is pretty closed" doesn't hold up to the post 2022 facts.
Show HN: I built ExtremeFitness.app for gym trainers
by shuvrokhan | 2025-10-14 14:47:35+00:00
I built ExtremeFitness.app to solve a problem I’ve seen many trainers face: managing client workouts and diet plans across messy spreadsheets, PDFs, and chat messages.

A while ago, my wife and I were both following structured fitness and nutrition plans, and I noticed how difficult it was for our trainer to keep everything organized — especially when adjusting workouts or calories week by week. That’s what sparked the idea.

I wanted to create a simple tool that lets trainers create, update, and share plans effortlessly, while still keeping the human touch that coaching needs. The app includes a built-in exercise and diet library, along with AI suggestions to help trainers personalize routines faster.

It’s just me building this so far, and I’d love your thoughts — especially from anyone who trains clients or works in health tech. Does this seem genuinely helpful? What would make it better?

To take a quick look: https://extremefitness.app

Thanks for taking a look.
by triceratops | 2025-10-14 14:47:40+00:00
> Also trusts are taxed fairly punitively

That only reinforces my viewpoint that buybacks advantage rich shareholders.

> your cap gains rate can vary substantially over time

It is 0% (up to like $100k for a couple filing jointly), 15% (up to about $580k), and 20% above that. Income tax has many more brackets than that and they kick in at way lower incomes.

It's true that your income can vary substantially over time. It might be nice to do earn all your capital gains and dividends in retirement. You will likely need less income then to live on and can incur $100k/year in gains and dividends tax-free. On the other hand, remaining invested in a stock that does buybacks during your working years also concentrates your risk in that stock. So people will likely sell anyway and take some capital gains to diversify.

And finally, if we want companies to improve productivity (read: fewer employees) then we can't solely tax labor to fund everything. We have to tax the part of the pie that's actually growing: this is represented by stock prices and dividends.