MurphyA/hacker-news huggingface dataset:
by secstate | 2025-10-28 19:41:22+00:00
While I wont argue about it feeling like a conspiracy theory, I will argue that pretty much no one knows sideloading as a term with regards to what i-drive meant by it.

And the fact that `adb sideload` is where the concept originated does nothing to dispel the way the term is frequently used in a derogatory fashion these days. It's wielded as a bogey man to make people afraid of unsigned applications. Despite the fact that many perfectly signed applications are full of malware and dark patterns.

Also, FFS, this is hacker news. Why on Earth would be arguing in favor of Google locking down how I can install software on my device.
by epistasis | 2025-10-28 19:41:50+00:00
Oddly enough the big rhetorical push against a universal system from prior decades was about "death panels" deciding what care somebody would get. And guess what's happened with insurance? Death panels!

The propaganda spin on the health care system in the US has been on overdrive ever since Hillary Clinton wanted to implement some reforms in the 1990s, leading to absolutely massive resistance to any change whatsoever. Even the changes implemented by Obama, which were a HUGE improvement in access, barely made it across the legislative line, and dismantling that access to the health care system has been a huge rallying cry for one of the major political parties. I won't say which one because mentioning that fact results in people turning off their brains and downvoting.

The US healthcare has optimized for availability and higher access to the most treatment options. This does not mean evenly distributed treatment options, but that people have the chance to get access to things more quickly.

And for most people, the healthcare system works fairly great. There are exceptions, like the denial described in this thread, and they usually get lots of attention because holy hell is that a messed up situation. But the everyday care that most people get is better than adequate.
by theothertimcook | 2025-10-28 19:41:58+00:00
QLD state schools are being left to languish while the government heaps funding on private schools and weird “not for profit” flexi schools.

Teachers have to deal with all the political drama and enshittification of government while managing behavioural issues and often with adversarial relations with parents.

Private schools receive 23 % more recurrent income per student than public schools, capital expenditure in private schools was 2.4 times that of public schools.

This kind of blunder isn’t at all surprising, I am surprised that something as fluffy as ancient history could be worth a quarter of one’s final grade though!?
by tsimionescu | 2025-10-28 19:42:07+00:00
The economies of scale would work exactly the other way than you think. Right now, the same company can sell the same solution for the same money to 20 government agencies, ones that have broadly similar needs, because it costs too much for anyone else to compete with them. The company then extracts massive profit from every subsequent project, with none of the savings going to the government. And even if a new player wins some of the contracts, they have to start from scratch and thus need to charge similar prices.

If there was a government IT office, it could build this in house, and after the initial investment in building the base infra, re-use it almost for free in every government agency in the same country. In the context of the EU, they could even make moves to share this code with other governments, passing on the savings there as well.
by xtracto | 2025-10-28 19:42:08+00:00
What % of the US population would you think have to pay to get that "best" care?

Would a household making $250,000 have enough to pay for that best care? That would mean 2% [1] of US household. Other comment in the thread mentioned earning "6 figures" and not being able to pay.

A health system that is affordable to 2% of the population is definitely not working.

[1] https://www.factcheck.org/2008/04/americans-making-more-than...
by sfn42 | 2025-10-28 19:42:39+00:00
First you create an API, then others start using it. So if you never allow mangled requests your clients will necessarily send proper requests.

If you're maintaining an old api you can publish new versions of endpoints that don't accept mangled requests. If it's important you can give clients a time limit like let's say a few months to update their software to use your updated endpoints before you remove the old ones.
by spacechild1 | 2025-10-28 19:43:11+00:00
The problem is that the insurance is provided by private companies whose incentive is to earn as much money as possible, at cost of the people in need of medical care. In my country, I never heard of anyone going bancrupt over a hospital bill. It just isn't a thing.

Here's a fun story: my sister was living with an exchange student from the US. Some day the student was complaining about intense intestinal pain she's had for the past few days. My sister told her to go the hospital. The student asked her if she was crazy. My sister then had to explain her that hospitals are free and won't bancrupt her...
by zzo38computer | 2025-10-28 19:43:14+00:00
X.509 already does that, and in a better way. It also makes it unnecessary to register multiple devices, if you allow certificate chains (the server would check the certificate chain; one of the was issued by the service and contains information about which account it is associated with; the other ones you can issue to yourself, optionally with more restricted permissions, and can be revoked or expire). That would also allow you to have passworded private keys, and/or to store one private key on a separate computer that is not connected to the internet to issue the other one to yourself in order to mitigate security issues (and you can revoke the certificate and make a new one if it is compromised or expires). X.509 also is not limited to only WWW, so it can be used with other protocols too.
by jfalcon | 2025-10-28 19:43:18+00:00
Often people are stopped using a premise of what's called a "Terry Stop" (https://en.wikipedia.org/wiki/Terry_v._United_States) which permits police to briefly detain a person based on reasonable suspicion of a crime. If new reasonable suspicion for a different crime arises during the stop, that new crime can be investigated, provided the entire stop's duration is not prolonged beyond the time that the original stop would have taken.

And body cameras suck ass in terms of audio, they control when it's turned on and off, etc...

The best defense is to film them as well. Have cameras in your vehicle and home that stream directly to the cloud. Make sure that all the dialog is recorded.

Cops will do what they do - there is no stopping that at the individual level.

But what you can do is make sure that every movement and word is recorded for later scrutiny for due process. The days of banning cameras outright is gone, the data is sold and they purchase it. The only way to handle the invasion of privacy is to control the information.

Radio scanners made in the US today have a block in the 800Mhz range while everywhere else, that is not the case - reason? Newt Gingrich being caught talking this same shit over an analog cell phone. Yet, we still live with the stupid laws long after the technology, their antics or political relevance have moved on.
by foxyv | 2025-10-28 19:43:31+00:00
Traffic violence has become so normalized that you don't even see it anymore. Twice as many people are killed by traffic accidents than are murdered per capita. Your ad hominem attacks do not invalidate the piles of evidence.

https://www.sfexaminer.com/marketplace/why-san-franciscos-st...

https://www.kron4.com/news/bay-area/san-francisco-man-arrest...

https://abc7news.com/post/pedestrian-elderly-woman-killed-hi...
by ewoodrich | 2025-10-28 19:43:38+00:00
I'm struggling to think of a reason why being "treated as an always-idiot" is an actual negative in this specific example.

I use Bitwarden and when the password autofill doesn't work as expected my first assumption from many previous experiences is that it's because a website changed something slightly in their auth flow or a particular page has a weird redirect/embedded login scheme different than the primary login, or similar "modern" web weirdness.

So if I get phished and let my guard down just that one time due to panic, sleep deprivation, or whatever else I'm glad that it gives me a second layer of defense against me reflexively clicking a couple times to copy/paste the password manually. A passkey dropdown with "No passkeys saved for this site" would be a massive red flag and stop me in my tracks before trying to do something else stupid.
by bmurphy1976 | 2025-10-28 19:43:57+00:00
How comfortable are you with naming and shaming the company? I don't think things are going to change if we don't call this stuff out loudly and publicly.

That's awful but I'm glad you were able to figure this out. I've had my own problems with insurance companies, but nothing to this level. I can't imagine the frustration, especially with YOUR CHILD'S HEALTH on the line.

Five years back I ended up getting surgery for a herniated disc. I was in immense and crippling pain. Before having the surgery, we decided to go through a round epidural shots. I had done that 20 years previously and it resolved the problem, so why wouldn't I?

Turns out my insurance company (who I will name: BCBSIL) delegated the approval for the epidurals through some kind of extra bureaucratic process with a 3rd party. It took days and additional effort on our end to get approved.

I remind you, I was in crippling pain at the time.

The delays getting this approved lead to me taking more Ibuprofen than I would otherwise have taken, which in turn lead to signs of internal bleeding. I had to ease off the Ibuprofen and significantly increase the amount of codeine (a drug which does not sit well with me) just to get by. Now not only did I have to wait for the approval, but I then had to wait for the signs of internal bleeding to go away before the doctor would give me the shot (which was the right call, even though it sucked).

Delays, compounding delays, compounding delays, all while I was absolutely miserable.

Anyway, I finally got approved and got the shot and it kinda helped, but didn't fix the issue. I had a second shot, got worse, and then decided we had no choice but to schedule the surgery.

The most frustrating thing (but something I am glad for) is that the surgery was approved immediately.

It's so maddening how inconsistent the whole thing is.
by zie | 2025-10-28 19:44:10+00:00
So true, two-way certs with TLS have crappy implementations everywhere, not just in the browser.

I have 2 problems with webauthn/passkeys:

* You MUST run Javascript, meaning you are executing random code in the browser, which is arguably unsafe. You can do things to make it safer, most of these things nobody does(never run 3rd party code, Subresource Integrity, etc).

* The implementations throughout the stack are not robust. Troubleshooting webauthn/passkey issues is an exercise in wasted time. About the only useful troubleshooting step you can do is delete the user passkey(s) and have them try again, and hope whatever broke doesn't break again.
by fngjdflmdflg | 2025-10-28 19:44:17+00:00
`abd install` will still work as per[0] so to me sideloading is still possible, so the statement 'Google’s message that “Sideloading is Not Going Away” is clear, concise, and false' is not correct.

I think users should be able to install whatever software they want, without any charge or other external permissions, but at the same time device and OS makers should be able to make it difficult to do so, within reason. Apparently scam apps are more common in some countries than others and is actually a problem in some countries, although I'm not sure.[1] Google did cite that as the reason for the change.[2] However, combined with the way Google has been locking down Android APIs more and more, (eg. the file system, but other APIs as well) it is concerning. At the same time those changes were also about security. I think every phone should be able to have full root permissions if you go through enough hoops without having to install another ROM. That seems to solve most of the issues here.

[0] https://android-developers.googleblog.com/2025/09/lets-talk-...

[1] see eg. https://techcrunch.com/2024/02/07/google-starts-blocking-use... at the end of the article for some examples

[2] https://android-developers.googleblog.com/2025/08/elevating-...
Remixable software: more devs –> user submitted features –> identity service?
by adell | 2025-10-28 19:44:19+00:00
Random lunch thought:

- non-coders now have the ability to code with LLMs (I'm assuming mostly around features that scratch their own itch) - the code isn't great, but could serve as some kind of specification and definitely shows users demand/intent - it would be interesting if users could modify ("remix") products they like with features they personally want. - would there be enough incentives to grow like an open protocol for identification and attribution of work so that companies have an easier time partnering with external people - does this only work for smaller/foss/side project products where there is a reduced corporate need for control, reliability, and profit? - am I just re-inventing git and FOSS?
by wahnfrieden | 2025-10-28 19:44:23+00:00
If I'm doing a large task, I use GPT 5 Pro to write a spec first (with advice for Codex, broken down task list, snippets etc). I may also supply entire files/repos as context for 5 Pro to produce this.

If I skip 5 Pro but still have a large task, I have Codex write a spec file to use as a task list and to review for completeness as it works.

This is how you can use Codex without a plan mode.
by magicalhippo | 2025-10-28 19:45:07+00:00
Relative recently had their baby come several months early. The baby needed intensive care for a couple of months, and breathing support (CPAP) for another two. Mom lived at the hospital hotel for the duration.

Baby got regular inspections of the heart, lungs and eyes (too much oxygen in the blood can lead to problems with the cornea or something), including after checkout.

They got billed exactly zero.

Both parents even got full pay during the hospital stay, so didn't have to worry about the economy.

Ok, so I pay a fair bit of taxes here in Norway, and some of it is used on stupid stuff. But overall I like knowing my life won't be ruined because of some random event forced me into insolvency.
by mholm | 2025-10-28 19:45:19+00:00
Customers are generally low-information shoppers. They go to a hardware store and ask the salesperson for a fridge that fits their requirements. The rep will show them a few options, and then the customer gets to try them out. This is where the animal brain takes over: Samsung designs for the animal brain. It's sleek. It's futuristic. There's so many doors. It has a beverage drawer. A condiment drawer. You can customize the panels. The animal knows the Samsung fridge is better, and customers likely won't know any better if the salesperson doesn't tell them (and would they? They make a better commission on the more expensive fridge)
by ethbr1 | 2025-10-28 19:45:30+00:00
> "We should waive minimum space standards for permitted developments on existing buildings because it means more housing." We could "solve" the homeless problem tomorrow simply by building tenements (that is why they existed in the first place after all).

... the entire reason tenements and boarding houses no longer exist is because most governments regulated them out of existence (e.g. by banning shared bathrooms to push SFHs).

You can't have it all ways.

strict minimum regulation : availability : cost

Pick 2.
by rcarmo | 2025-10-28 19:45:48+00:00
I've managed to mostly excise Samsung from my digital life (except for phones that family buys without my knowledge and that I have to troubleshoot), and I have been happier for it for many decades now.

(This was after direct exposure to their Tizen engineering team back in the early 2000s)

I stayed away from their phones, SmartTVs, everything.
by voxgen | 2025-10-28 19:45:57+00:00
Ratio/quantity is important, but quality is even more so.

In recent LLMs, filtered internet text is at the low end of the quality spectrum. The higher end is curated scientific papers, synthetic and rephrased text, RLHF conversations, reasoning CoTs, etc. English/Chinese/Python/JavaScript dominate here.

The issue is that when there's a difference in training data quality between languages, LLMs likely associate that difference with the languages if not explicitly compensated for.

IMO it would be far more impactful to generate and publish high-quality data for minority languages for current model trainers, than to train new models that are simply enriched with a higher percentage of low-quality internet scrapings for the languages.
by terminalshort | 2025-10-28 19:45:58+00:00
Citizens United has everything to do with journalism, but not in the way the comment you are replying to says. The CU case was over a film maker who released a political documentary and was banned from advertising it because those adds were political in nature and therefore banned by campaign finance laws. The court correctly ruled that the government had no power to regulate this because of freedom of the press.
by disgruntledphd2 | 2025-10-28 19:46:11+00:00
> This is solving a problem few people have. They assume your table name, column names and relationships is confidential information. For most people such metadata is not confidential.

For most businesses, it really really is. In general, people (businesses) are incredibly sensitive about any possibility of data leakage, even just the metadata. There are lots of companies who would pay for this, and they tend to have a lot of money.
by overfeed | 2025-10-28 19:46:16+00:00
> Bernie Sanders has resolutely fought for civil rights in the past and even now does so as a matter of routine"

I see where the disconnect is. Please read the sibling thread about the differences between Opinion (responsible for editorials, and subject of the NPR article) and news department (does reporting on actual news journalism). Opinion & News have different org charts under the WaPo banner. In my prior comment, A = disclosures in journalism, B = disclosures in editorials. They are not the same thing in a way that can be applied to a singular Bernie.

> They don't say, we have no numbers and without numbers or any sort of relative comparison we have no way to gauge whether the current behavior is or is not worrisome.

The number of op-eds are a small part on this article about the vibe-shift at the Washington Post: NPR provided additional context with the words of people who used to work there, mentioned thr waves of resignations and subscriber cancellations, noted WaPo declined to comment on this story. Make of that what you may.
by skinwill | 2025-10-28 19:46:33+00:00
There is an error on that page. src="https://www.media.snipettemag.com/wp-uploads/2019/09/cheese-..." should be src="https://media.snipettemag.com/wp-uploads/2019/09/cheese-stre..."

There is an extra "www." which breaks the link.
by notahacker | 2025-10-28 19:46:37+00:00
I'd also say that their grants aren't unusually burdensome and grantmaking is arms length compared with a lot of other bodies.

Yes, some of the questions are weird, but I'd really rather write a bit confirming that the AI system being developed isn't going to be racist or Skynet than jump through some other hoops that exist (and that absolutely includes VC due diligence). The actual biggest issue with European funds is they get way more competent applications than they can fund anyway.
by tialaramex | 2025-10-28 19:46:52+00:00
They're focused on the thing that'll get the most people up and running for the least extra work from them. When you say "push" do you just mean that's the default or are they trying to get you to not use another ACME client like acme.sh or one built in to servers you run anyway or indeed rolling your own?

Like, the default for cars almost everywhere is you buy one made by some car manufacturer like Ford or Toyota or somebody, but usually making your own car is legal, it's just annoyingly difficult and so you don't do that.
by kaoD | 2025-10-28 19:47:03+00:00
It doesn't MITM anything. Do you see that as normal? Because I don't. We're adults here and I'm a tech guy, there's zero reason to control anything in my laptop.

In fact it's just a regular laptop that I fully control and installed from scratch, straight out of Apple's store. As all my company laptops have been.

And if it was company policy I would refuse indeed. I would probably not work there in the first place, huge red flag. If I really had to work there for very pressing reasons I would do zero personal browsing (which I don't do anyways).

Not even when I was an intern at random corpo my laptop was MITMed.
by nomel | 2025-10-28 19:47:17+00:00
How much die area does it use that could be used for performance? How much engineering time does it use? Does it make sense to keep it around, causing ~30% more power usage/less performance?

There are many acceptable opposing answers, depending on the perspective of backwards compatibility, cost, and performance.

My naive assumption is that, by the time 2027 comes around, they might have some sort of slow software emulation that is parity to, say, M1 Rosetta performance.
by thewebguyd | 2025-10-28 19:47:20+00:00
> I have one today, displaying the output of an Apple TV and not directly connected to the Internet

That's how I do it as well, and I hate that dumb TVs are getting increasingly more rare.

I know the day is coming where any new "Smart" TV will mandate you connect it to the internet to go through some initial setup process or require regular phone homes to function, and I'm not looking forward to it.

I don't want my TV to do anything except display whatever I have connected to it. It's job stops there.
by phoneafriend | 2025-10-28 19:47:55+00:00
Love these discussions to find out what's new. For me replit.com is still the GOAT.

- Time to start your container (or past project) is ~1 sec to 1 min. - Fully supported NixOS container with isolated, cloned agent layer. Most tools available locally to cut download times and ai web access risk. - Github connections are persistent. Agents do a reasonable job with clean local commits. - Very fast dev loops (plan/build/test/architect/fix/test/document/git commit / push to user layer) with adjustable user involvement. - Phone app is fully featured... I've never built apps on roadtrips before replit. - Uses claude code currently (has used chatgpt in the past).

Tips: - Consider tig to help manage git from cli before you push to github. - Gitlab can be connected but is clumsy with occasional server state refreshes. - Startups that haven't committed to an IDE yet and expect compatibility with NixOS would have strong reason to consider this. It should save them the need to build their own OS-local AI code through early builds.
by switchbak | 2025-10-28 19:47:56+00:00
Privileged commenter. Not everyone has access to a cell phone or the internet, so they can't respond to your statement. Not to mention some people have bad dyslexia or eyesight issues. We could play this game forever, and we'd all be dumber for it.

Walking in a forest is something that much of humanity can do, and it's not a particular privilege (in the pejorative modern sense) - even if there are a small number of people that have issues that would prevent this.
by ModernMech | 2025-10-28 19:48:04+00:00
Disability accommodations are a cornerstone of DEI. As an able-bodied individual, you may not feel you would benefit from those today; but if you are blessed enough to grow old, one day you will likely be disabled in one way or another. When that day comes, you'll be asking for accommodations to get into public areas, and if those accommodations are not available to you, you will likely find how that limits your ability to participate in public life very unfair.