MurphyA/hacker-news huggingface dataset:
by curtistyr | 2025-10-23 09:21:54+00:00
Interesting point about SlateDB - I've been thinking about how different architectures handle event sourcing and stream processing. SierraDB's append-only model with fixed partitions is really compelling for event sourcing, but I'm curious how it compares to something like SlateDB when you need more general-purpose streaming capabilities. Do you think the trade-offs between these approaches are starting to converge, or are they solving fundamentally different problems? Also, SierraDB's use of RESP3 is smart - anything that reduces client complexity is a win in my book.
by nabla9 | 2025-10-23 09:21:57+00:00
I'm sure spies also operate on platforms like OnlyFans and can extract secrets even without physical interaction.

The number of lonely male tech workers who engage in parasocial relationships online is not insignificant. Twenty years ago, I never would have believed that people would pay money just for some written or verbal acknowledgment from someone on the internet. Attractive female whom men "support" for an illusory relationship can milk thousands from some people.

Getting security clearances after background check shows payments of this type is probably difficult.
by decimalenough | 2025-10-23 09:22:37+00:00
I presume you are aware of this, but for those who may not be, Singapore is both not China and the polar opposite of rural Chinese countryside. It does, however, have numerous sketchy nightclubs staffed with prostitutes from rural China (and Philippines, Thailand, Vietnam etc) who would dearly love to have a personal ATM.

Also, the reason Singapore doesn't have Bangkok's sexpot image is that these clubs are waaaaaay more expensive, squarely targeted at Chinese speakers (although there is an equivalent Indian scene) and whiteys are a rare sight.

https://www.ricemedia.co/the-secret-business-of-thai-disco-a...
by Chris2048 | 2025-10-23 09:22:53+00:00
I see the same scam/deepfake ad(s) pretty much persistently. Maybe they actually differ slightly (they are AI gen mostly), but it's pretty obvious what they are, and I'm sure they get flagged a lot.

They just need to introduce a basic deposit to post ads, and you lose it if you put up a scam ad. Would soon pay for the staff needed to police it, and prevent scammers from bypassing admin by trivially creating new accounts.
by Paracompact | 2025-10-23 09:23:24+00:00
Yeah, Azul stands out as a great exception to my rant. I get similar feelings playing it as I do playing riichi mahjong (a fabulously deep emergent blend of luck, planning, and player psychology). It's also managed a decent popularity not just as a quasi-abstract but as a board game, period.

There is another aspect to the thing I didn't mention but you did: It may be that the sheer amount of interest in board and video games at large is more to blame for the lack of deep abstracts than is the inherent lack of appreciation for them. In sum total, there are probably games out there currently that could be mechanically fit as a successor to chess or go, but with so many competing games out there (both cerebral and otherwise), even the cerebral gamer is unlikely to pursue them singlemindedly.
by lan321 | 2025-10-23 09:23:34+00:00
I think it's more simple in the Home Depot example. Even if you care about the breach what are you gonna do? Home Depot got hacked so they'll now probably get some more security staff. Funding for the quarter is secured. Lowes has not been hacked. Does that mean they won't be hacked? Not really... For cheap smart home shit it doesn't even matter since the company will go bankrupt and change hands 3 times in the next 5 years and again, they are all garbage. Either they'll get hacked or they'll sell your data anyway.

Plenty of my normie friends don't want new cars for example due to all the tracking and subscription garbage, but realistically, what can you do when the old ones slowly get outlawed/impossible to maintain due to part shortages.
by latexr | 2025-10-23 09:23:35+00:00
You explained the thing, gave references to learn more about the thing, and even listed one con of the thing:

> It is also extremely difficult to understand.

But nowhere do I see a reason why we should learn the thing. Is It useful in any way? Is it just a curiosity? Does it develop your thinking? Any reason is fine, but if you don’t give one we’re just left looking at something which looks both complex and useless, so why would we learn further?

To really drive the point home, I have no doubt this would be fun to learn and even useful for a certain kind of people. But because you don’t say, we don’t know if we fit the bill.
by aleph_minus_one | 2025-10-23 09:25:43+00:00
> while they don’t care personally whether the site is vulnerable - otherwise they wouldn’t have let such a basic vulnerability slip through

Even if they do care personally (which I would assume is often the case if the respect person is not an ignorant careerist), they often don't have the

- organizational power

- (office-)political backing

- necessary very qualified workforce

to be capable of deeply analyzing every line of code that gets deployed. :-(
by arccy | 2025-10-23 09:25:59+00:00
PSL isn't a list of dangerous sites per-se.

Browsers already do various levels of isolation based on domain / subdomains (e.g. cookies). PSL tells them to treat each subdomain as if it were a top level domain because they are operated (leased out to) different individuals / entities. WRT to blocking, it just means that if one subdomain is marked bad, it's less likely to contaminate the rest of the domain since they know it's operated by different people.
by wickedsight | 2025-10-23 09:27:59+00:00
Isn't this true for literally everything else too?

Recruiters seem to be automating everything and it doesn't seem to make their work any more useful. Marketing people seem to generate a ton of slop. Even executives are starting to use AI assistance for writing memos and taking business decisions.

At some point, will nobody do anything anymore, like in Dall-E? Will we just lay down while we get AI slop force fed into our eyes?

I doubt it, but sometimes it does seem that way.
by defrost | 2025-10-23 09:28:40+00:00
Err, you might want to at least watch Succession if you can't keep up with the IRL drama.

In September 2023, News Corp reported that Rupert Murdoch would retire from the board of News Corporation. He would also retire from the board of Fox Corporation and his son Lachlan Murdoch would replace him on both boards. The retirement would take effect in November 2023.

~ https://en.wikipedia.org/wiki/Succession_of_Rupert_Murdoch

The siblings voting rights in NewsCorp are inactive / on hold or somesuch and Lachlan has his block and his dad's, and there's a slew of detail.
A complete toolkit that helps to ship startups in days
by sumamakhan | 2025-10-23 09:28:43+00:00
Hey HN,

I'm a Developer & solopreneur.

I realized building a SaaS product means spending a lot of time on repetitive tasks like setting up databases, authentication, emails, payments, SEO, and security. On top of that, developers struggle with debugging, monitoring, and writing clean code. Using AI can help, but most of are get stuck, leading to bugs and confusion.

To solve these problems, I built StartKitPro — a full-featured SaaS boilerplate that handles all the setup and common challenges out of the box. It includes ready-to-use pages, a growing UI component library, and a powerful AI Prompt Library that solves all problems like creating PRDs for AI, frontend, backend, error handling, testing, Advanced SEO, Code review, Bug Hunting & Security and much more prompts.

Would love your feedback pls.

Sumama

startkitpro.com
by frio | 2025-10-23 09:28:51+00:00
In `pyproject.toml`:

"django-stubs>=5.2", "django-stubs-ext>=5.2.2",

In `settings.py`, add:

import django_stubs_ext django_stubs_ext.monkeypatch()

With that, it seems _mostly_ OK, though I had to toggle off some of basedpyright's typechecking.
by isaachinman | 2025-10-23 09:29:33+00:00
Well Jobs is long gone. Apple Mail seems like it hasn't been touched much since his days.

I've written about my experience and motivations here:

https://marcoapp.io/blog/marco-an-introduction

Gmail does indeed _intentionally_ provide poor IMAP service. But the long and short of it is that Apple Mail simply isn't a first-class product. It's an afterthought.
by coldtea | 2025-10-23 09:30:40+00:00
>How is this not a contradiction? They're not contorting their words, they're just restating them with subtle changes to make it "correct". What?

"Contorting someones words" is said when someone changes what somebody said to make it appear as if they meant something else.

Not when someone merely expresses a different opinion, as their own, using some part of the other's wording.

>Yes, and do you not see how clapping back by "cleverly" rewriting someone words would come across as incredibly annoying?

No. That's a you problem. And even describing it as "rewriting someone words" would be a stretch. They merely used the same noun (which they need to, as they speak about the same thing), and contended that the opposite is true:

"I think the increasingly widespread attitude that only open source software is good and trustworthy increasingly annoying and problematic"

"Software being open source almost always makes it more trustworthy, and I'm glad that more people are picking up on this over time".

The only annoying comment I see in the whole exchange is yours.

>People getting hostile in response to hostility? Oh no, not the irony?!

The only hostility was in your mind, based on your premise that responding by reusing some of the same wording is "hostile".
by tromp | 2025-10-23 09:30:49+00:00
A french company is developing similar technology called PERS (pedaling energy recovery system) [1] that is actually chainless. This comparison [2] claims an overall efficiency of around 64%, with both generator and motor losing about 20% each. They were interviewed by the Laidback bike report [3].

[1] https://www.cixi.life/pers-technology

[2] https://www.ebike24.com/blog/chainless-ebikes

[3] https://www.youtube.com/watch?v=DyGDZw3VPlI
by Chris2048 | 2025-10-23 09:31:07+00:00
Apparently the "best practise" is using Manifest V3 versus V2.

Reading a bit online (not having any personal/deep knowledge) it seems the original extension also downloaded updates from a private (the developers) server, while that is no longer allowed - they now need to update via the chrome extension, which also means waiting for code review/approval from google.

I can see the security angle there, it is just awkward how much of an vested interest google has in the whole topic. ad-blocking is already a grey area (legally), and there is a cat-and-mouse between blockers and advertisers; it's hard to believe there is only security best-practise going on here.
by MrThoughtful | 2025-10-23 09:32:08+00:00
Apart from the "warfare" aspect, it is an interesting question whether the combination of "The man is attractive because of money" and "The woman is attractive because of her looks" can work.

When I look at instances in my social circle, it seems like it doesn't really work. The relationships typically seem to suffer from a lack of mutual interests. The woman's beauty quickly dwindles as time passes. And the woman feels like she is missing out on a "real life" because all she does is be at the side of the man, instead of building her own career. The attraction of the man seems to dwindle quickly too. I know a few such couples, where the man told me that their sex life is dead, even though he wished it were different.

What that tells me is that to work on your attractiveness, working on your career is not the way to go.
by tasuki | 2025-10-23 09:32:51+00:00
What do I think? It's amazing! Got crushed by a 300 bot in Hex, then beat a 100 bot, then again lost against 200. It's great how one can see the review immediately afterwards!

Feature requests:

- TwixT - just TwixT PP like on LittleGolem is fine (much easier to implement).

- Quoridor - a delightfully incomprehensible game.

- Larger board sizes. Hex starts being really fun at 19x19!

Questions and suggestions:

- On reddit you mention you "used AlphaZero-style methods to train the bots" - I suppose the networks are size-dependent? You could look into the many KataGo improvements[0].

- You mention the source code isn't released. If you released it, people could help add games.

Again, very well done, thank you!

[0]: https://github.com/lightvector/KataGo#training-history-and-r...
by Liquix | 2025-10-23 09:34:13+00:00
yeah, me neither. for anyone else who comes across this, these may be helpful to monitor:

https://bugs.mysql.com/bug.php?id=119212

https://bugs.mysql.com/bug.php?id=119213

https://repo.mysql.com/

https://keyserver.ubuntu.com/pks/lookup?search=mysql-build%4...
by somat | 2025-10-23 09:35:16+00:00
js can't use a string as a template.

my example: a table to lookup translated templates. most translation engines require you to use placeholder strings. this lets you use the template directly as the optional lookup key.

simplified with some liberties taken as this can't be done with template literals. Easy enough to fake with some regexes and loops. but I was a bit surprised that the built in js templates are limited in this manner.

const translate_table = { 'where is the ${thing}':'${thing} はどこですか' , } function t(template, args) { if (translate_table[template] == undefined) { return template.format(args); } else { return translate_table[template].format(args); } } user_dialog(t('Where is the ${thing}', {'thing', users_thing} ));

I even dug deep into tagged templates, but they can't do this ether. The only solution I found was a variant of eval() and at that point I would rather write my own template engine.
by slightwinder | 2025-10-23 09:35:42+00:00
Obsidian is using electron, so the source is already somewhat available anyway. I understand them not making it open source, and risking someone forking it and harming their business. But considering the situation, I would think making it at least source available on a popular forge, where people can make issues and open merge-requests, might be a beneficial thing.

There are a bunch of small problems people encounter here and there, which usually will never be solved by the company. Giving the community a route to improve their tool, would be good.
by davidgerard | 2025-10-23 09:35:55+00:00
I glanced at the article links at the bottom:

* The shady Story behind why we think Veganism is healthy - Paid off scientists, swayed politicians, and hidden studies helped us be afraid of meat

*The $200 Billion Industry shrinking our brains - How a completely new food ingredient could be de-evolving our brains

* Men Need more Testosterone, not more Therapy - Focusing too much on emotions is a feminine solution to a masculine problem

yyyeah, hope this guy has fun with whatever's up with him
by tom1337 | 2025-10-23 09:36:41+00:00
Also argon doesn't care about input length compared to bcrypt which only ever compares the first 72 bytes of a hash. Okta actually fell victim to this because they concatenated userid + username + password. If userid + password were over 72 bytes then the password would never be checked thus you could login with userid + username.

https://trust.okta.com/security-advisories/okta-ad-ldap-dele...
by whoisgenerous | 2025-10-23 09:36:47+00:00
Hey HN

I made a tiny web experiment

You can pay real money to appear on a global leaderboard. There’s no prize, no perks, no rewards — just a flag with your country and a growing number next to your name.

Why? Because it’s hilarious, absurd, and curious to see how far people will go just to show off generosity for nothing.

It’s fully functional, secure via Stripe, and every donation counts. Just for fun, and completely transparent.

Would love feedback, questions, or just laughs.
by perching_aix | 2025-10-23 09:36:59+00:00
I hope all replies you'll ever get will be in their style, maybe that will (eventually) teach you why I find it oh-so-unreasonably hostile, and yes, an intentional contortion of words.

I further hope someone will be there afterwards to gaslight you about how there's actually nothing wrong with it, and that it's all in your head (which is like no shit, where do you think hostility arrives to?), and that it's a you problem (whose problem would you be reporting on? nonsense...).
by bob1029 | 2025-10-23 09:37:31+00:00
I think the DCT is a compelling way to interact with spatial information when the channel is constrained. What works for jpeg can likely work elsewhere. The energy compaction properties of the DCT mean you get most of the important information in a few coefficients. A quantizer can zero out everything else. Zig zag scanned + RLE byte sequences could be a reasonable way to generate useful "tokens" from transformed image blocks. Take everything from jpeg encoder except for perhaps the entropy coding step.

At some level you do need something approximating a token. BPE is very compelling for UTF8 sequences. It might be nearly the most ideal way to transform (compress) that kind of data. For images, audio and video, we need some kind of grain like that. Something to reorganize the problem and dramatically reduce the information rate to a point where it can be managed. Compression and entropy is at the heart of all of this. I think BPE is doing more heavy lifting than we are giving it credit for.

I'd extend this thinking to techniques like MPEG for video. All frame types also use something like the DCT too. The P and B frames are basically the same ideas as the I frame (jpeg), the difference is they take the DCT of the residual between adjacent frames. This is where the compression gets to be insane with video. It's block transforms all the way down.

An 8x8 DCT block for a channel of SDR content is 512 bits of raw information. After quantization and RLE (for typical quality settings), we can get this down to 50-100 bits of information. I feel like this is an extremely reasonable grain to work with.
by kotaKat | 2025-10-23 09:38:06+00:00
But I don’t want to be forced to sign into a Google Account to use my vehicle. GM’s pivot to Android Automotive has forced Google Play and its complete walled garden into the vehicle at the bare metal.

Google won. Apple loses. At the end of the day, Android users will just use the native AAOS and all the native built in Play crap, while Apple users get screwed.
by sharperguy | 2025-10-23 09:38:17+00:00
The community around NOSTR are basically building a kind of semantic web, where users identities are verified via their public key, data is routed through content agnostic relays, and trustworthiness is verified by peer recommendation.

They are currently experimenting with replicating many types of services which are currently websites as protocols with data types, with the goal being that all of these services can share available data with eachother openly.

It's definitely more of a "bazaar" model over a "catherdral" model, with many open questions and it's also tough to get a good overview of what is really going on there. But at least it's an attempt.
by motorest | 2025-10-23 09:38:22+00:00
> A kid showed up a bunch of big names.

The kid purposely changed the price of a service to lower it to an insignificant fraction (reportedly from ~27£ to ~0.15£).

If that same kid went around a supermarket replacing price tags to lower the selling price, would you call it "showing up a bunch of big names"?

Say what you may about how broken and buggy the system was. Purposely misusing it for financial advantage is still a no-no.
by asimpleusecase | 2025-10-23 09:39:28+00:00
I see a lot of comments here about using some browser that will allow ME to see sites I want to see, but I did not see a lot about how do I protect my site or sites of clients from being subjected to this. Is there anything proactive that can be done? A set of checks almost like regression testing? I understand it can be a bit like virus builders using anti virus to test their next virus. But is there a set of best practices that could give you higher probability of not being blocked?
by pfannkuchen | 2025-10-23 09:39:43+00:00
Spreading into new territory is a fundamental human instinct. It’s how we ended up being spread out across the entire planet. Tut tutting ain’t gonna change that, people are still going to follow the instinct. See: religion’s attempts to control sexual instincts in humans. We would at least need to respect the instinct and give it a robust outlet, not just expect people to suppress it for the good of… some rocks?
by postit | 2025-10-23 09:39:55+00:00
The shift away from proprietary formats is long overdue.

As a composer and arranger working with different studios, I need multiple DAWs installed for compatibility. Every time I open my DAW or Gig Performer after a few days, it rescans all plugins. With around 800 installed, that happens across AU, VST, and VST3.

I hope Apple and Avid are holding meetings after this decision to help simplify the life of library/plugin makers. As an example AAX requires a complete mess to compile and test their plugins, and several AU plugins are just wrappers aroud VST that add another layer.

I really hope the next five years bring real standardization and smoother workflows.
by fakedang | 2025-10-23 09:40:26+00:00
In my circle, I've seen it work, not in the same way though. Attractive women often go after the wealthiest men they can get. Likewise the minute a man goes out of a job, the strain in the marriage becomes immediate in a dual income household; less likely in households where the man was the sole breadwinner. The greater the difference in incomes and/or wealth, the more likely the marriage is going to last. And no, these aren't observations from some theocratic shithole in the Middle East or some ultra conservative Asian circles. These are from all the most liberal cities in the world.
by lucideer | 2025-10-23 09:40:30+00:00
I think my comment came across a bit harsh - the Immich team are brilliant. I've hosted it for a long time & couldn't be happier & I think my criticisms of the tone of the article are likely a case of ignorance rather than any kind of laziness or dismissiveness.

It's also in general a thankless job maintaining any open-source project, especially one of this scale, so a certain level of kneejerk cynical dismissiveness around stuff like this is expected & very forgivable.

Just really hope the ignorance / knowledge-gap can be closed off though, & perhaps some corrections to certain statements published eventually.
by JadeNB | 2025-10-23 09:42:31+00:00
Lots of fun, though I think "less than nothing" oversells (undersells?) it. I appreciate the author's taking time to explain somewhat at the end, rather than leaving the reader just to feel stupid if they miss, for example, the reference to Smullyan. I also can't help wondering if Dana is just a choice of name, or a cheeky reference to Dana Scott.
by in_a_hole | 2025-10-23 09:42:46+00:00
This is more the case for D-Wave's machines which are specialised for quantum annealing, allowing for greater numbers of qubits. Google and most other major hardware players make chips which can implement a universal quantum gate set allowing for arbitrary quantum operations to be performed (in principle). The issue with these chips is that quantum error correction is not fully implemented yet so computations are effectively time-limited due to the build up of noise from imperfect implementation and finite-temperature effects. A big part of current punts at quantum advantage is figuring out how to squeeze every last drop out of these currently faulty devices.