MurphyA/hacker-news huggingface dataset:
by vel0city | 2025-10-03 17:09:24+00:00
I'm only just now using a Mac again after not using them since elementary school. Tucking my thumbs under the rest of my hand to press the command key is a motion I'm really not used to, while as before I was really used to using my pinky to press/hold the control key often.

I do have to say though, its nice not having to worry about situations where I need to remember some odd shortcut for something that actually supports control characters like text consoles. I never need to worry about "does ctrl+c actually copy here, or does it kill things?" They're just different button presses. I get the logic these days of having those things be different keypresses than control key logic.

A lot of keyboard shortcuts I use daily now feel quite alien because of tucking my thumb under to reach the command key. And boy is it sometimes annoying having so many shortcuts using number keys in them. And the common jump between words or jump to the end or start of a line seem to be backwards in my mind (command+arrow versus option+arrow), I tend to get mixed up on those a bit right now.
by somat | 2025-10-03 17:10:17+00:00
Sure it's a game engine, they are not exactly praised for their security. but my understanding is for games the end user has a mental modal where the engine isolates the users computer from the game content (the levels, art and game logic) I am not sure how relevant this mental model is to unity. Where unity is more of a game engine framework and the engine proper and the game code are more or less intertwined within that.

The gold example is the original quake where the engine had an application specific vm to run the game code. Again, not security focused and I am fairly sure vm escapes would be easy to find. But I also don't remember ever hearing news how a quake mod installed a rootkit on someones pc.
by brad0 | 2025-10-03 17:10:27+00:00
I've been reading through the book The Courage to be Disliked recently. I'm not a big fan of the writing style of the book, but some of the ideas in the book appear in this post too.

One of the concepts in the book is being comfortable with being disliked. If instead you're trying to avoid being disliked, you're effectively subject to other people's whims.

When you look at it from that perspective, that's a pretty stressful experience!
by abxyz | 2025-10-03 17:10:57+00:00
The problem with using clinical phrases to describe normal behavior is demonstrated in this post. "Social anxiety" has a specific clinical meaning that is not covered by this post. The post is actually discussing a very natural and rational nervousness that normal people have in social situations. The post is providing a way of thinking about that nervousness that can help reduce it, for the nervous person's benefit, and it's great if that works, but it's not addressing social anxiety.

Social anxiety is a condition that cannot be thought away, you cannot rationalize social anxiety nor can it be represented as a cost/benefit analysis of risk of being disliked vs. reward of being liked. You can feel socially anxious without having social anxiety. You can be depressed without having depression. You will be depressed after your beloved pet dies. You will be socially anxious walking into a room full of people you haven't met before.
by chrchr | 2025-10-03 17:11:20+00:00
I also switched from PaperWM to niri, and I was reluctant to do it, because I really liked not having to configure several different little apps to get a working desktop environment. GNOME comes out of the box with an app launcher, a basic configuration editor, a screen locker, widgets for controlling audio and network, etc. But ultimately, PaperWM was too quirky. For example, sometimes PaperWM and an app would disagree about what size the app's window should be, and the window would resize itself repeatedly. The vertical sizing never worked very well either.
by potato3732842 | 2025-10-03 17:11:22+00:00
>If women feel like it is no longer safe to marry because they will be forced into equal custody

The word choice of your comment is beyond absurd and your usual schtick of cherry picking links to back up your point doesn't make it any less absurd.

It's mostly men who don't wanna get married and/or start a family and do all that stuff because (in states that have yet to reform their laws) they stand to lose half their shit and not even have half a kid to show for it.

I have zero sympathy for people, of any gender, for whom not being on the favorable end of unequal treatment in divorce/custody is the marginal difference that makes them not get married.
by aDyslecticCrow | 2025-10-03 17:11:37+00:00
It's a opinion piece. But so are must attempted explanations of emotions. How would you even study this?

It seems some in the comments resonate and some disagree. So its somewhat useful.

One thing i feel missing is the anxiety part of social anxiety. The way the brain colors vague or unclear external (social) signals in default negative ways, in a feedback loop.

Not avoiding being disliked or seeking being liked, but simply being unable to quantity it correctly.
by xivzgrev | 2025-10-03 17:11:42+00:00
That's astute. I was always uncomfortable with this kind of joking. I felt threatened. The real reason was that I didn't have a good comeback.

Let's say my nose was large, and a friend jokes about it. I need to say something back. And I could not think of anything. A low stakes situation becomes higher stakes than it needs to be.

So on their side they see me struggle and probably feel bad, so they don't do it again. But then we are just friends not best friends.

Curious how did you learn / practice this?
by jandrewrogers | 2025-10-03 17:11:50+00:00
I've worked on similar types of operational systems in the past. The access control is always extremely limited in the prototypes.

It is important to understand that the customers don't have a clear view of the types of access controls they want until they start field exercises. By having relatively limited access controls in the prototype, they discover in real use cases that allowing some data access which never would have occurred to them is highly valuable which can then be refined into specific types of data sharing. In a default locked down environment, these beneficial interactions would never be discovered because they can't occur. All of the ways the users access and use data in the prototypes is logged and studied.

Similarly, other types of data sharing expose real risks that can be reduced to specific scenarios developed during operational exercises. The problem with an exhaustive access control model is that it simply has too many degrees of freedom to be usable for most people.

During development, the universe of all possible uses of access control is reduced to a much simpler and more understandable model of the key data it is important to restrict and the key data it is important to share, grounded in real-world operational learnings. These models are simpler and more precise to implement, and also easier to verify the correctness of, than a default "access control all the things" approach.
by pcthrowaway | 2025-10-03 17:13:00+00:00
Israel was formed atop the expulsion of 750,000 Palestinians (not to mention massacring of >5000). There were no Israeli citizens before it was formed, this was purely racial discrimination.

Palestinians under Israeli occupation generally have no pathway to Israeli citizenship, with the exception of those in East Jerusalem, which is occupied under international law but is considered part of Israel by Israel; in the West Bank there is a process to apply for Israeli citizenship, but only a small percentage of Palestinians in East Jerusalem can become citizens every year (I believe I read it was <5% of those who applied).

People who are not Palestinian, anywhere in the world, can convert to Judaism and make Aliyah. This pathway is denied to Palestinians, especially those under occupation.

So I don't know how you can claim this is not race based discrimination.

> It's pretty obvious giving the people who elected terrorists

8% or fewer of the people in Gaza today actually voted for Hamas. Most of them were not even born at the time of the last election, and combined with those who were under 18 at the last election and those who voted for other parties, 92% of people alive in Gaza today had no part in Hamas coming to power.
by dheera | 2025-10-03 17:13:26+00:00
I was there 8 weeks ago! I'll be posting pictures soon (stay tuned on IG @dheeranet) as well but quite a magical place, you see multiple seasons a day. Super place for introverts, you can book a place in Torshavn for a week and daytrip pretty much everything from there.

The only downside was that you had to pay for most of the hikes, and the money isn't actually going towards any real work getting done.
by alexchantavy | 2025-10-03 17:14:27+00:00
Neo4j has a GraphRAG book that I've found very helpful: https://neo4j.com/essential-graphrag/

It depends on the shape of your data. In my domain (cloud security), there are many many entities and it's very valuable to map out how they relate to each other.

For example, we often want to answer a question like: “Which publicly exposed EC2 instances are used by IAM roles that have administrative privileges in my AWS account?”

To answer the question, you need to: 1. Join ec2 instances to security groups to IP rules to IP ranges to find network exposure paths to the open internet. 2. Join the instances to their instance profiles, to their roles. 3. Join the IAM roles to their role policies to determine which have admin policies. 4. Chain all of those joins together, possibly with recursive queries if there are indirect relationships (e.g., role assumption chains).

That’s a lot of joins, and the SQL query would get both heavy and hard to maintain.

In graph this query looks something like

match (i:EC2Instance)--(sg:EC2SecurityGroup)--(r:IPPermissionInbound{action:"Allow"})--(rng:IPRange{id:"0.0.0.0/0"}) match (i)--(r:AWSRole)--(p:AWSPolicy)--(stmt:AWSPolicyStatement{effect:"Allow", resource:"*"}) return i.id as instance_id, r.name as role_name

To answer this question what internet open compute instances can act as admins in our environment, we needed to traverse multiple objects, but the shape of the answer is pretty simple: just a list of ids and names.

Graph databases have quirks and add complexity of their own. If your domain isn't this edge heavy, you're probably better off with Postgres, but for our use-case it's been worth the trade-off imo.
by somenameforme | 2025-10-03 17:14:29+00:00
Click on the longer videos. The overwhelming majority are literally unedited footage of him debating people. Even the shorter clips are complete and unedited. The most popular video [1] is of the girl who shows up and tries her hardest to troll and insult him. Here [2] is the in-context segment. It is literally the exact same thing, but just with her 'segment' snipped out of the series of debates.

The only out of context clips are when people are trying to misrepresent him, the things he says, or the way that he generally behaves towards the people he debates/discusses with. For instance the widely disseminated clip where he speaks against the term empathy, which is edited to remove the clip and subsequent context where he talks about it being exploited and abused, and much preferring the term sympathy - which he feels is less susceptible to exploitation.

[1] - https://www.youtube.com/watch?v=nk4Nkmfgxzk

[2] - https://youtu.be/U_BY2ENwPyA?t=349
by NicuCalcea | 2025-10-03 17:14:36+00:00
I don't consider myself autistic, but the simulation seemed to me like the typical experience of a working adult. Most of us force ourselves through routines we need to adhere to but don't enjoy, or even hate. Most of us aren't really ourselves with work colleagues.

I still don't understand why having breakfast or changing the radio station decreases your masking, though.
by kccqzy | 2025-10-03 17:15:32+00:00
You seem to think GPUs are better than TPUs for rapid iteration. Why is that? There's no inherent reason why one is more suited to rapid iteration than another; it's entirely a matter of developer tooling and infrastructure. And Google famously has excellent tooling. And furthermore, the tooling Google exposes to the outside world is usually poorer than the tooling used internally by Googlers.
by pessimizer | 2025-10-03 17:15:58+00:00
I'll get into radicle when they make a properly namespaced p2p alternative to crates.io out of it. I'll make it my religion. If I'm going to have all of these packages on my system at all times, I can continually dedicate 50-100K of my bandwidth to sharing them; everyone could, really.

Rust has a Microsoft dependency in crates.io. We all have a Microsoft dependency with github.

edit: iirc, they're extreme CoC warriors and crypto-connected, so that's going to limit the reach of the project.
by dheera | 2025-10-03 17:16:32+00:00
There are cruel practices in almost every country, including the US or [wherever you are from]. Society evolves over time. Different countries overcome different problems at different points in time, and the time differences are just noise on the grand timeline of history.

The developed world has more or less eradicated slavery, but it was commonplace just 0.5% ago on the human civilization timescale. Some countries eradicated it at 0.4% and others at 0.6%.
by mdasen | 2025-10-03 17:16:50+00:00
It's very different from k3s. With k3s, you have a Linux installation like Debian or Fedora and you install k3s on it. You can SSH into the box, install any other Linux program not running in Kubernetes, etc. It also means that you need to run security updates and all the other stuff that goes along with administering a Linux box.

With Talos, it's just Kubernetes running on the box. There's no SSH or anything. Yes, it's a Linux kernel running, but you don't have a way of running stuff on the box outside of Kubernetes.

For me, Talos is great. If I'm setting up some boxes for K8s, I don't want to have to deal with admin'ing a Linux box. I don't want to login to the box and run some non-K8s service on it. I just want a K8s node and that's what Talos gives me. I think that's also the experience most people want. It's why people pay AWS, GCS, and Azure tons of money to get hosted K8s nodes rather than a Linux box they need to admin.
by gfodor | 2025-10-03 17:17:22+00:00
Do people really buy this nonsense? I mean just this week Sora 2 is creating videos that were unimaginable a few months ago. People writing these screeds at this point to me seem like they’re going through some kind of coping mechanism that has nothing to do with the financials of AI companies and everything to do with their own personal fears around what’s happening with machine intelligence.
by masonabbruzzese | 2025-10-03 17:17:32+00:00
Location: Austin, Texas (TX)

Remote: Open to it, but hybrid or in-person is preferred

Willing to relocate: No

Technologies: Type/JavaScript, Ruby, Next, Node, React, AWS, PostgreSQL

Résumé/CV: https://drive.google.com/file/d/18huKy50P-jSCLelh2Ou4n5PRNBF...

Email: mason@abbruzzese.me

I'm a full-stack developer with 2 years of experience mostly explained on my resume. The biggest thing I'm looking for in my next role is learning and growth opportunity – I'm still early in my career and need the space for that. The most impressive thing I've done is co-create Rabbitory (https://rabbitory.github.io), a tool for automating the deployment and management of RabbitMQ on AWS.

I'm fast, hungry, and want to talk
by nathanielbennet | 2025-10-03 17:17:43+00:00
Format-Transforming Encryption (FTE) is what you're looking for--it ensures the resulting message isn't vulnerable to cryptanalysis techniques while enabling encoding of a message in arbitrary formats [0], including a blog post or text message. The authors of the source use it specifically to hide messages in semantically-correct network protocol packets, but it applies just as well to text.

[0] - https://dl.acm.org/doi/pdf/10.1145/2508859.2516657
by rodhan | 2025-10-03 17:17:49+00:00
SEEKING WORK | REMOTE | Dublin, Ireland, EU

Hi, I’m Rodhán. An experienced CTO and mobile app developer, ready to help you solve your business, product or engineering problems!

Services: Fractional CTO, Startup CTO Coaching, Mobile Software Development

Technologies: Swift, iOS, SwiftUI, Objective-C, Kotlin, Firebase, Node.js, Vue.js.

Website: https://swiftcto.com LinkedIn: https://linkedin.com/in/rodhan Email: rodhan [at] swiftcto.com
by neom | 2025-10-03 17:17:59+00:00
I still couldn't quite grasp the underlying issue. People are not studying economics so schools are not creating those positions, but then it seemed to draw the line to people not studying economics due to the lack of positions in academia, so chicken and egg? I guess it's just that it compounds with the hiring freezes in the public sector mentioned?

I came away feeling unsatisfied, is there a bigger cultural thing going on here?
by stared | 2025-10-03 17:18:36+00:00
There are various types of insecurity.

A book "How to attract women through honesty" by Mark Manson (I think the only book in dating genre I recommend without some caveats, and recommend regardless on one's gender or orientation) has a lot about insecurity vs security (or: neediness vs non-neediness).

There was one passage that although most insecure people are in this "I don't want be hated" or "let anyone like/love me", there are also some people that are obsessed with everyone liking them. It has some different symptoms, but also stems from insecurity.

I guess you know friends (or maybe you are one yourself) who play too hard to be liked by everyone. Also, there is an interesting case of super-popular people, who are super-needy, even though at the first glance they don't look so. What's is characteristic, though, it is that everything starts to fall apart when they lose their spotlight. (Think about actors or musicians who, after they are no longer as popular as they used to be, drown in depression and drugs.)
by grumple | 2025-10-03 17:18:49+00:00
The mortality exceeding the rate I mentioned is a prerequisite for declaring stage 5. It has not been met. You don’t declare stage 5 until it has according to their own standards.

The rate of death in Gaza from those causes is nowhere near that CDR. The total death rate from all causes is substantially below that number (by a factor of 4).
by toomuchtodo | 2025-10-03 17:19:08+00:00
I don’t believe my citations are wrong, nor that they’re out of context as it relates to demographic trends, but you’re free to provide your own if you have them.

Additional citations below:

https://www.youtube.com/watch?v=UThiu3Q_NcQ

https://19thnews.org/2025/09/poll-traditional-family-gender-...

https://19thnews.org/2025/09/polling-2025/
by upmostly | 2025-10-03 17:19:41+00:00
The N+1 problem basically means instead of making one efficient query, you end up making N separate queries inside a loop. For example, fetching a list of tables, then for each table fetching its columns individually — that’s N+1 queries. It works, but it’s slow.

We ran into this while building, funnily enough, a database management app called DB Pro (https://dbpro.app) At first we were doing exactly that: query for all schemas, then for each schema query its tables, and then for each table query its columns. On a database with hundreds of tables it took ~3.8s.

We fixed it by flipping the approach: query all the schemas, then all the tables, then all the columns in one go, and join them in memory. That dropped the load time to ~180ms.

N+1 is one of those things you only really “get” when you hit it in practice.
by gorjusborg | 2025-10-03 17:20:17+00:00
> zero downsides

I just said that I have measured it being slower in at least some use cases.

JIT gains better when already compiled paths run repeatedly. Most long running programs embedding Lua will choose luajit for this reason.

I don't care what people use, the point is that JIT compilation isn't magic that makes everything faster. The way to know is measure.
by epolanski | 2025-10-03 17:20:38+00:00
Idk, it's a company with 4.5B in revenues in H1 2025.

It's not insane numbers but it's not bad either. YouTube had those revenues in...2018. 12 years after launching.

There's definitely a huge upside potential in openai. Of course they are burning money at crazy rates, but it's not that strange to see why investors are pouring money into it.
by jagged-chisel | 2025-10-03 17:20:39+00:00
How hard is it for a remote attacker to replace a DLL on your Windows system? And how hard for the remote attacker to gain access via this exploit through Unity?

With physical access, anything goes - like when you replace DLLs on your own system for modding … or changing permissions to gain access to files … or any number of “unauthorized” activities because you are physically located at the machine.
by AlexandrB | 2025-10-03 17:20:46+00:00
Not just power, but ~50% of the voting public.

An "overthrow" would be highly undemocratic and it's very curious to hear the same people that claim Trump is literally Hitler talk about "overthrowing" their (democratically elected) political enemies and then "punishing collaborators". Is there no sense of self-awareness at all?