MurphyA/hacker-news huggingface dataset:
by blacksmith_tb | 2025-10-07 23:54:35+00:00
Well, that's hyperbolic (and shares something with journalism that reports things in useless but colorful units like "massive as a dozen bull elephants"), but if we sidestep the question of how Starbucks compares to small banks, it does seem pretty impressive that they're holding $2B USD worth of stored value cardholders' money? NYT reports 25% of US consumers use BNPL to buy groceries[1] which seems worrying.

1: https://www.nytimes.com/2025/06/02/business/buy-now-pay-late...
by vacuity | 2025-10-07 23:54:41+00:00
To be clear, since the other replies to you don't seem to be mentioning it, the major costs of MMU page-based virtual memory are never about setting the page metadata. In any instance of remapping, TLB shootdowns and subsequent misses hurt. Page remapping is still very useful for large buffers, and other costs can be controlled based on intended usage, but smaller buffers should use other methods.

(Of course I'm being vague about the cutoff for "large" and "smaller" buffers. Always benchmark!)
by hodgesrm | 2025-10-07 23:54:50+00:00
It's OK provided there's a garbage collection procedure. But the write-up seems to regard this as optional.

> Deletes accumulate in tombstone files over time. Eventually we would want to coalesce 100 small tombstone files into one and /or rewrite data files if a row group has >50% rows deleted, resulting in further compaction.

The bigger problem for me is that tombstones that remove rows can make reads quite inefficient because they reduce the usefulness of min-max and bloom filter indexes. It can also affect vectorized query if you have to apply predicates within row groups. Finally there are degenerate cases where the tombstones would be bigger than the compressed columns themselves.

Any assertion that this would be performant needs to be backed up by code. ClickHouse took many years to implement so-called lightweight deletes. It's a hard problem to solve in a performant way.
by Forgeties79 | 2025-10-07 23:55:22+00:00
I’m not sure that I buy that argument but either way the data clearly shows crime has fallen consistently over the decades. Even over the last couple of years. This narrative that cities (of course only Democrat-dominated cities) are so crime ridden that they are basically under siege is completely manufactured.

The governor of my state went out of his way to ask Trump to come crack down on a few cities (all overwhelmingly or somewhat leaning blue) despite drastic drops in crime rates over the last five years. Ignoring the fact that he is the governor and has a super majority Republican legislature, meaning that ultimately he is saying “daddy Trump come save me I can’t do my job uwu,” he also very conspicuously left his home city off the list despite it sharing a similar population size and crime rate as another major city on the list.

It’s all a sham. The data does not bear their message out.
by ElijahLynn | 2025-10-07 23:55:44+00:00
I've been teaching my kids to memorize my phone number as well as their mother's number! And I've been working on memorizing numbers of other people close to me. Because it isn't "if" I lose my phone some day, it is "when". So, preparing for that is really important to me!

I like the technique of not having the name saved in the phone but having the number, then when caller ID comes in I see the number more often.
by zdragnar | 2025-10-07 23:56:01+00:00
The JS universe moved quickly for about two years. The most popular frameworks at this point have been around since that time, with a few oddball upstarts. They've undergone some big changes, but are at the core the same concepts.

I recall evaluating Ember right around the time they switched from their last pretelease of I think 1.0 and suddenly all the documentation was either gone or out of date and not applicable. I ended up going with AngularJS (1.23 maybe?) and didn't look back until I went to work somewhere that used ember exclusively. It was far less pleasant to use than anything else I had been using up to that point except maybe Backbone.

There's been a few additions to the JS core APIs like webgpu and a few others, but all of them have been extremely niche. There's not much that's been added since 2016 or so that you couldn't pick up in a heartbeat, so it really boils down to the frameworks themselves. Ember lost to AngularJS, then Angular and React.
by Tadpole9181 | 2025-10-07 23:56:08+00:00
Article is paywalled, excerpt below:

By Jerome Adams, Richard Carmona, Joycelyn Elders, Vivek Murthy, Antonia Novello and David Satcher

As former U.S. surgeons general appointed by every Republican and Democratic president since George H.W. Bush, we have collectively spent decades in service as the Nation’s Doctor. We took two sacred oaths in our lifetimes: first, as physicians who swore to care for our patients and, second, as public servants who committed to protecting the health of all Americans.

Today, in keeping with those oaths, we are compelled to speak with one voice to say that the actions of Health and Human Services Secretary Robert F. Kennedy Jr. are endangering the health of the nation. Never before have we issued a joint public warning like this. But the profound, immediate and unprecedented threat that Kennedy’s policies and positions pose to the nation’s health cannot be ignored.

...

Rather than combating the rapid spread of health misinformation with facts and clarity, Kennedy is amplifying it. The consequences aren’t abstract. They are measured in lives lost, disease outbreaks and an erosion of public trust that will take years to rebuild.

It is essential to note that good science and public health require not only evidence but also people — the scientists, public health professionals and civil servants whose expertise protects millions of Americans. Yet under Kennedy’s leadership, the HHS workforce has been badly damaged. He has silenced and sidelined hundreds of scientists, public health officials and medical professionals, creating an atmosphere of fear and distrust. Many of the nation’s top public health professionals — people we have worked with during crises — have resigned or retired early. They describe a culture of intimidation, where scientific findings are censored, evidence is disregarded and career officials are pressured to rubber stamp conclusions that are not backed by science.
by apwell23 | 2025-10-07 23:56:11+00:00
yes i bike on chicago lakefront up and down is like 40 miles for me.

also biking on roads you should never count on sounds to guide you. you should always use vision. for example, making a left you have to visually establish that driver coming straight has made eye contact with you or atleast looked at you.

can you share a example of how you are using sound to help you ride bikes with other vehicles on the road? are you maybe talking about honking? that. you will hear over podcasts.
by serf | 2025-10-07 23:56:34+00:00
go watch any movie about a panopticon for the (overdiscussed) side-effects of a surveillance state.

Fiction works, but if you want to spend the evening depressed then go for any East/West Germany (true) stories.

For it or against surveillance and I can understand, but just not understanding the issue? No excuses -- personal surveillance for the sake of the state is one of the most discussed social concepts in the world.
by serbuvlad | 2025-10-07 23:57:01+00:00
While that is true, both Espressif and the Pico have their own SDKs, and they're really well written too.

The Arduino SDK is the simplest to use, sure, but the Pico framework (I don't have experience with the Espressif one) is extremely good, and the Pico's PIO is a godsend. I used it to implement 3 wire SPI (data bidirectional on the same wire) at almost 'real-time', which is to say, at half the speed of the hardware SPI controller (half the speed because the interface clock is put up one cycle and down the next; this also gives enough time for data shuffling).

Why does the Arduino SDK necessitate a huge markup on Arduino boards, when $0 of every computer I buy to run Linux on goes to GCC?
by Dylan16807 | 2025-10-07 23:57:09+00:00
> No, you have to trust the one company, as well as everyone you were trusting before. You are still using the router, and now you are also trusting the VPN provider, as well as the nodes in between the VPN provider and your original destination.

As long as the VPN is up, the worst the wifi can do is cut you off. It can't alter your connections.

It's far fewer trust points.

> Also, you are just switching up the "unprotected stretch" between your local wifi, and, say, Google's servers, whereas now that "unprotected stretch" lies between the VPN provider servers in Latvia or British Virgin Islands or Panama, or whatever dubious jurisdiction, and, say, Google. Sure, you added a layer of protection against the random hacker sitting in your Starbucks, but you have added many more vectors.

When I use a VPN for protection, the server is in the US too.

And if it's for netflix I'm going to some major country, not dubious-land.

(Also I'd say datacenter and internet core routers are less likely to attack some random person's traffic, but that's not core to my argument.)

> It becomes the poison because the solution you are introducing brings more issues. And it's schizophrenic because the issue to begin with, was minuscule (a hacker stepping into MacDonalds, breaking the network encryption and then also the application encryption.

For most wifi networks, there is no encryption between users. And it's quite likely that the neglected router got hacked over the internet and is part of a botnet.

> Maybe if this were 2010 and websites still used HTTP, or you are using a local email client without TLS configured. But it's 2025, everything has HTTPs and you are using an HTTPs email client.

Until you type in a URL and HSTS isn't set.
by aussieguy1234 | 2025-10-07 23:57:35+00:00
I guess the real question here is: Who is more likely to ban you, Google and co or your domain registar?

For most people, who are not doing anything shady/controversial with their domain and are using a .com or .net domain (which are price regulated by ICANN), are not using a shady registrar and will always have the cash on hand to renew as needed, the answer will be Google and co.

Its a good idea to set up auto-renew on a credit card, so you can be sure it will go through and you won't forget to renew it.
by iamnothere | 2025-10-07 23:59:15+00:00
The project seems to be about bootstrapping a civilization after collapse, and you’re worried about... accelerating resource extraction?

None of these machines are cost-effective in the current day world. Actual resource extraction operations are going to use massive machines made by big manufacturers. Small scale hobby miners and such will just order equipment from AliExpress or refurbish old equipment. There is literally zero risk of this project accelerating global resource extraction.
by hn_throwaway_99 | 2025-10-07 23:59:43+00:00
What about the NVidia/OpenAI deal? Such a giant investment in a huge customer looks a heck of a lot like "circular dealing". That is, invest $100 million so your biggest customer can spend a ton of that on your own chips. You get to report skyrocketing revenue but that revenue was bought with your own money.
by strken | 2025-10-07 23:59:48+00:00
AI art mostly doesn't make use of the medium. There are things you can do with computer vision and user interaction that just aren't possible with traditional media.

I remember the game PlaneShift, which has an interesting not-for-profit development model, and which uses natural language processing to handle text. The possibilities here are really impressive! You could fully voice player characters, parse user intent with better accuracy, etc.

There's all sorts of stuff you could do. Introspecting the models themselves gave us DeepDream. Setting early models up to talk to each other caused headlines about AI inventing its own language. Leaning into the unhinged nature of the medium interests me, as does displaying "thought" graphically.

Even back in the ML days, I had high hopes for this sort of thing. Discarding those hopes because of AI slop feels like throwing the baby out with the bathwater. The whole problem is that people use an amazing (but glitchy and imperfect) technology and use it to make bad art in existing fields, instead of pioneering good art in new fields. It's herd mentality from both sides.
by nis0s | 2025-10-08 00:01:48+00:00
This initiative is meaningless if it doesn’t create jobs in the range where most employees are being shed in this new economy. It doesn’t mean that everyone needs to work for Google, just that FAANG companies need to invest in all sorts of places, for whatever suits their interests. Maybe this also means more incubators, or non-profit research programs to bolster foundational research.
by halfcat | 2025-10-08 00:02:18+00:00
> what does it mean for an email address* to be cryptographically strong?*

Something someone couldn’t guess, like:

<uuid>@domain.com

c4694056-63dd-476f-9823-2548aa3d754a@domain.com

> in case of hard to remember address, what do you do if asked to write it down with no access to your records?

It’s a tradeoff. You’d probably want to use the cryptographically secure addresses sparingly.

Another option would be to use your password manager to create a “memorable” password, which is usually multiple random words, like:

essay-curve-white-cable@domain.com

But again there’s only so many of these you’ll memorize, so use sparingly. Compare it to the cost of just changing the email. Maybe with a bank it’s more work and risk, so it’s worth the added effort, but if it’s the email you use to order pizza, just change it.
by Spivak | 2025-10-08 00:02:42+00:00
If there's an avenue for extrajudicial punishment it seems like every government is angling to use it. How did we wind up with such openly vindictive and unprincipled people in our governments? Like you call yourself Liberals, surely it's clear as day that such a thing isn't compatible with how you believe government should operate. You're doing this because you can't arrest them for a crime—shouldn't that give you pause?
by voidmain0001 | 2025-10-08 00:02:45+00:00
A couple of weeks ago. My employer provided a new computer which I loaded with Fedora. I found the colors on Remmina really saturated and harsh. I loaded Win11 because I really disliked it. But, I will try Fedora again since I need to reinstall Win11 due to an account problem I can’t resolve.
by bigstrat2003 | 2025-10-08 00:03:19+00:00
> Job-hunting is a brutal, humiliating slog, because of the thousands of junk CVs even the most obscure job posting gets.

Having been on the hiring end, I can assure you that it is not true that even the most obscure posting gets thousands of applicants. Sometimes you put out a job and get very few bites. So it depends, as always, on the specifics of the posting (what industry, where it is, etc).
by chrisfosterelli | 2025-10-08 00:03:43+00:00
Yes. I can't speak to the USA, as I'm from Canada, but I've had conversations with traffic engineers from another city about it and increasingly seen them in my own city. Here's an example of one of the systems: https://www.iteris.com/oursolutions/pedestrian-cyclist-safet...

They're obviously more common in higher density areas with better cycling infrastructure. The inductive loops are effectively useless with carbon fibre bicycles especially, so these have been a welcome change. But from what I was told these also are more effective for vehicle traffic than the induction loops as drivers often come to a stop too far back to be detected, plus these also allow conditional behaviour based on the number of vehicles waiting and their lanes (which can all be changed without ripping up the road).
by txrx0000 | 2025-10-08 00:03:49+00:00
That "almost entirely" part is the problem. They sneak in a clause that makes those restrictions also apply to which customers ISPs can serve.

Even the supposed intended purpose of restricting equipment may be malicious. Why should the government be able to restrict whose equipment or which fibre operators the ISP can use?

If equipment is the concern, then they can just regulate the actual imported equipment. Canada probably already has such oversight like the US's FCC.
by serf | 2025-10-08 00:04:13+00:00
>This will never hit a production enterprise system without some form of hooks/callbacks in place to instill governance.

knowing how many times Claude Code breezed through a hook call and threw it away after actually computing the hook for an answer and then proceeding to not integrate the hook results ; I think the concept of 'governance' is laughable.

LLMs are so much further from determinism/governance than people seem to realize.

I've even seen earlier CC breeze through a hook that ends with a halting test failure and "DO NOT PROCEED" verbage. The only hook that is guaranteed to work on call is a big theoretical dangerous claude-killing hook.
by alganet | 2025-10-08 00:04:16+00:00
Coding++

Seriously now, I think the whole industry suffers from too many buzzwords and whacky terminology.

*The job hasn't changed*. As mentioned, all those things from the past are still the most important thing (version control, being good at testing, knowing when to outsource, etc).

It's just coding (which is something that was never about typing characters, ever).
by ahallock | 2025-10-08 00:05:36+00:00
I'm going to make the case that it's actually the opposite. Rails might seem simpler out of the box, but this is all surface level. Rails is massive and extremely complex, especially its ORM, which encourages really bad database practices in my experience. And it doesn't have strong typing.

If you went head-to-head with Rails on a slightly complex project with say shadcn/ui, Convex DB, and TanStack Start, I guarantee you, the TypeScript app will be much simpler and give you more power than Rails, especially when building the UI. And to top it off, you will have strong typing everywhere -- from the DB schema to the URL routes.

And bonus, deployment is simple. ConvexDB already takes care of the backend and the frontend could be deployed to something like Cloudflare Pages.
by T3OU-736 | 2025-10-08 00:06:21+00:00
Distributing (and controlling) the necessary decryption seems like a helaciously difficult challenge for general/commercial aviation. Who are the authorized recievers of the ebcrypted data? How do we revoke access as time goes on? How do we handle normal key rotation (so that the adversary can't have unlimited time to crack/bruteforce the current keys)?

(Not my core field, so this is SWAG-ish): There is also a separate but equally important problem of signal vs noise - isolating the signal for decryption. Doable, but fairly costly to implement, and far more brittle than I suspect would be acceptable.
by xp84 | 2025-10-08 00:06:41+00:00
I got a LOT more confused looks, especially because I stupidly used a subdomain for this purpose. Imagine like, burgers@e.abc.co.uk when someone is expecting an @gmail.com.

If I could think of an unambiguous .com, .net, or .org that is a pronounceable word that wasn't registered already by 2001, I'd be maybe willing to try this again.
by danielodievich | 2025-10-08 00:06:52+00:00
Last weekend we had dinner at a friend to celebrate their child's birthday. They work at OCI in a very senior position and were heading out next day to troubleshoot that exact datacenter in Abilene, TX next day, to presumably yell at various people about cabling and schedule and whatnot. They were not looking forward to it because a) TX and b) it's Abilene TX and c) the overall situation.

We spoke quite a bit about this project, circular money and things and the impression I got is that OCI is just grabbing money while the perpetuum mobile is unrolling.

I am looking forward to hearing how the trip went when I see them next.
by gpm | 2025-10-08 00:07:21+00:00
The headline is not true because "impose conditions" is not "strip". "Strip" would look like 15.2(2)(e) and (f) except targeting the ISPs customers instead of their suppliers. Imposing conditions does not as a matter of statutory interpretation include the ability to prohibit or terminate.

> (e) prohibit a telecommunications service provider from entering into a service agreement for any product or service used in, or in relation to, its telecommunications network or telecommunications facilities, or any part of those networks or facilities;

> (f) require that a telecommunications service provider terminate a service agreement referred to in paragraph (e);

Moreover even if, say, 15.2(2)(f) referred to (d) instead of (e) the headline would still be entirely untrue because the charter would prohibit it and this law, like all laws, must be interpreted in a manner consistent with the charter.
by jfengel | 2025-10-08 00:08:04+00:00
It's a little broader than that, because these are general defense contractors who have their fingers in every pie. So it's seen by contracting officers, partners, potential employees, etc.

It's a bit like a Coke ad -- you do not need to be informed about Coke, but it creates an atmosphere of nebulous positive feelings. Still, kinda weird.
by aeon_ai | 2025-10-08 00:10:20+00:00
MITM attack is a disingenuous label applied to a completely voluntary service that the site you're visiting opts into.

Why? Because, for many, it's a technical necessity to protect sites from the dark forest of the web (i.e., assholes.)

You can cast aspersions on the implications of that in conjunction with US intelligence access, but you're painting a completely fabricated picture of reality that borders on delusional.
by 93po | 2025-10-08 00:10:51+00:00
the difference is there is an implicit call to violence there and it's private people, not representatives of the government.

the idea behind the ICE agent tracking is to avoid them. you don't need to avoid abortion providers, they're not sneaking up on people on the street and giving them abortions.

someone doesnt need ICE tracking apps to attack ICE agents, they're wearing vests with giant "ICE" text on them. that someone allegedly misused the app in this way is like saying we need to ban knives because someone used one to stab someone else
by dragonwriter | 2025-10-08 00:11:06+00:00
> You're describing the US South in the 60s.

No, I'm describing one particular split among peotrst groups that exists today (similar splits may have existed in the 1960s civil rights movements, but differences in the technical, political, and social context beyond the point of disagreement being discussed make them of limited utility as analogs, even to the extent that they were otherwise similar.)

> The civil rights protestors did not respond by becoming black block anarchists

The average modern protestor who follows the precautions-against-mass-surveillance-and-retaliation is also not a black bloc anarchist.

> If you're an upper middle class internet user

The average protestor is not upper middle class, even if your implicit contention that political respectability is entirely driven by class, that the upper middle class is uniformly more respected than the agents of state enforcement, and, most critically, that the decisive point here is respectability were correct.
by drewbeck | 2025-10-08 00:11:32+00:00
> or at least first navigate manually and then based on that, write a playwright typescript script for future tests

This has always felt like a natural best use for LLMs - let them "figure something out" then write/configure a tool to do the same thing. Throwing the full might of an LLM every time you're trying to do something that could be scriptable is a massive waste of compute, not to mention the inconsistent LLM output.