MurphyA/hacker-news huggingface dataset:
by gruez | 2025-10-28 18:53:04+00:00
>https://digitalcommons.wayne.edu/socprac/vol10/iss1/15/

Strange you linked to some random journal article describing the incident as "In 1985 police bombed the Philadelphia headquarters occupied by members of the black counterculture group MOVE.". The wikipedia article adds far needed context:

>The 1985 MOVE bombing, locally known by its date, May 13, 1985,[2] was the aerial bombing of a house, and the destruction of 61 more houses by the subsequent fire, in the Cobbs Creek neighborhood of Philadelphia, Pennsylvania, United States, by the Philadelphia Police Department during an armed battle with MOVE, a black liberation organization. MOVE members shot at Philadelphia police who had come to evict them from the house they were using as their headquarters. Philadelphia police aviators then dropped two explosive devices from a Pennsylvania State Police helicopter onto the roof of the house, which was occupied at the time. For 90 minutes, the Philadelphia Police Department allowed the resulting fire to burn out of control, destroying 61 previously evacuated neighboring houses over two city blocks and leaving 250 people homeless.[3] Six adults and five children were killed in the attack;[4] two occupants of the house, one adult and one child, survived. A lawsuit in federal court found that the city used excessive force and violated constitutional protections against unreasonable search and seizure.[5]

Furthermore it's a stretch to claim that some incident that killed 11 people is somehow expandable to nuking a whole city.
by more_corn | 2025-10-28 18:53:38+00:00
Huh, news to me. Apparently FISA can apply to data hosted overseas by a US company. FISA orders also come with a gag order so the company cannot say they have received it.

“2018 Clarifying Lawful Overseas Use of Data Act, or CLOUD Act, which requires US companies to share data hosted on their servers, regardless of location, when subpoenaed, and the Foreign Intelligence Surveillance Act (FISA), which allows US intelligence agencies to request user data with little oversight or refusal.”
by felixbraun | 2025-10-28 18:53:41+00:00
Excellent work — reminds me of similar projects built with the same tech stack:

– Coins: A journey through the Münzkabinett Berlin collection (one of the largest in the world). https://uclab.fh-potsdam.de/coins/

– Theodor Fontane Marginalia: A visualization of Fontane’s marginalia and notes in his personal library. https://uclab.fh-potsdam.de/ff/
by kbolino | 2025-10-28 18:53:54+00:00
As far as I can tell, every single Apple Silicon MBP has all ports at full speed. The early Apple Silicon Mac Minis (M1, M2) also had this arrangement. However, as noted elsewhere, this has changed (they now have 3 Thunderbolt ports and 2 non-Thunderbolt USB-C ports).

The Intel MBPs had more variance, but they only had the 2+2 configurations in 2016 and 2017. The 2018 and 2019 generations had all full-speed ports.
by ericmay | 2025-10-28 18:54:01+00:00
> So let’s say the mostly Black Million Man March had turned violent and decided to invade the Capitol - what do you think the reaction would have been?

I don't really know, are they a Black Million Man March for a sitting president named Donald J. Trump? You're just throwing straw man arguments out there.

> What Democratic candidate on the national stage is saying that the government should take over all private industry and pay everyone the same and control industry? This is real “communism”

There's always talk about things like nationalizing industries and such. Government run grocery stores, you name it. Some ideas are worth trying, some aren't, but as we do try new ideas we should be vigilant against authoritarian ideologies whether those are coming from MAGA or commies. Keep in mind I'm separating out Progressives from Democrats because like the Republicans they're not all united.

As I know you are well aware with MAGA goons, you don't have to come out with a piece of paper and say "Hello, we are Communists and we want to implement these specific things to achieve our stated goal of Communism. Thank you". It's emergent from policy and platforms, terms of usage "equity" etc.
by dweekly | 2025-10-28 18:54:09+00:00
I am so glad to hear your child got the care they needed.

I've found that people often forget to call their state senator or assemblyperson. It has consistently amazed me how quickly a large company that's sitting on their butts about a topic will move lickety-split once their Government Affairs and/or PR teams are on the thread...

Another tip from having worked at a regulated entity: a physical letter to the CEO mailed to HQ creates a mandatory-response paper trail that will produce a very, very different (better) outcome than e.g. asking to talk to a supervisor while on a call that's not going well.
by varbhat | 2025-10-28 18:54:12+00:00
I agree. I use Bitwarden on my Samsung Android phone and also on my Linux desktop. Bitwarden currently supports passkeys on almost all the apps on my android including firefox. The same passkeys which i used to login on my phone can be used on my Linux desktop where i use Firefox with Bitwarden extension. What's now possible was not even possible at the start of this year. I haven't switched everything to passkeys but i can see it as an alternative to passwords now(passwords really shines in some areas too).

I read about Passkey comittee being against open source passkey managers during start of this year (can't reference it, sorry) but with open source password/key managers already supporting passkeys, i don't think it turned out to be true.
by atoav | 2025-10-28 18:54:21+00:00
In a similar way sometimes the best way to protect data is not to collect it of if you collect it not keep it around in its raw form.

As for secrets, you sometimes need to have them for very good reasons. If you can reach the same goals without a secret while having the same protection going without a secret is a good choice.

But let's assume if you want the cryptographic protections of confidentiality (through encryption), authenticity (through signatures) and integrity (also through signatures or hashes) chances are someone somewhere has to store a secret. If that someone isn't you it is someone else (or something else).

But if you want to protect data with encryption and you should be the only one who can decrypt it I don't really know how you would do it without any form of secret.
by FreakLegion | 2025-10-28 18:54:46+00:00
This is a good list --- would also add Pyomo. There's plenty of nuance to algebraic modeling languages like Pyomo and JuMP, but at base you're just writing mathematical expressions in Python for Pyomo (or in Julia for JuMP) to parse and transform into the target format. E.g. taking the objective from the Weapon Target Assignment problem (https://en.wikipedia.org/wiki/Weapon_target_assignment_probl...):

def objective(model: WtaModel) -> SumExpression: return sum( model.target_values[t_j] * prod( model.survival_rates[w_i][t_j] ** model.target_selected[w_i, t_j] for w_i in model.weapon_types ) for t_j in model.targets )
by treetalker | 2025-10-28 18:54:48+00:00
I am surprised that Apple did not test in a way that revealed these problems (testing around a variety of loud noises, and especially testing on airplanes, where the product is used a lot).

And I am surprised that, if they did do the testing, they shipped anyway.

But I am becoming less and less surprised via-à-vis Apple problems, because they seem to be occurring with increasing frequency.

Apple, take note.
by nabla9 | 2025-10-28 18:55:08+00:00
Losing your device and not having any passwords is like losing your fingerprints.

>Device loss scenarios

>Users are largely unsure about the implications for their passkeys if they lose or break their device, as it seems their device holds the entire capability to authenticate. To trust passkeys as a replacement for the password, users need to be prepared and know what to do in the event of losing one – or all – of their devices.

>Backing up and synchronising passkeys with a Credential Manager makes it easier to recover access to them compared to other existing second factor options. However, this relies on the user having prepared their Credential Manager account for recovery. Users need help in understanding and implementing the right steps so they can feel ready to go passwordless and use passkeys without extra worry and hassle.
by stavros | 2025-10-28 18:55:08+00:00
I used Claude Code a lot until this weekend, when I gave Codex CLI a try, and I have to say, wow. The gpt-5-codex model is amazing. Sonnet 4.5 routinely gets stuff wrong, even Opus 4.1 isn't too amazing, but GPT 5 Codex just one-shots everything.

I've been using Sonnet whenever I run into the Codex limit, and the difference is stark. Twice yesterday I had to get Codex to fix something Sonnet just got entirely wrong.

I registered a domain a year ago (pine.town) and it came up for renewal, so I figured that, instead of deleting it, I'd build something on it, and came up with the idea of an infinite collaborative pixel canvas with a "cozy town" vibe. I have ZERO experience with frontend, yet Codex just built me the entire damn thing over two days of coding:

https://pine.town

It's the first model I can work with and be reasonably assured that the code won't go off the rails. I keep adding and adding code, and it hasn't become a mess of spaghetti yet. That having been said, I did catch Codex writing some backend code that could have been a few lines simpler, so I'm sure it's not as good as me at the stuff I know.

Then again, I wouldn't even have started this without Codex, so here we are.
by madaxe_again | 2025-10-28 18:55:25+00:00
Yeah, but it’s a km from one end to the other, and a WiFi relay wasn’t cutting it, and Ethernet couldn’t stretch the distance - so fibre it was.

Utter pain in the ass, broke one fibre pulling it through conduit with way too much force (like, 2000+N), another got eaten by a fox before I’d put it in a conduit, and terminating fibre is a royal pain if you have to do it.

But yeah, totally worth it.
by MostlyStable | 2025-10-28 18:55:29+00:00
If you buy the codes, yes. If you only license them (which is what the original comment claims is the only way to get them legally), and that license explicitly forbids training, that seems to be less clear-cut. I have no idea if such restrictions are legal or would hold up to challenge, but it's less clear than the case where you buy a book and can then do whatever you want with it.
by etskinner | 2025-10-28 18:55:51+00:00
Let's assume your vault/login has these properties:

- You have a strong unlock password that you don't use anywhere else

- You have a second factor set up for unlocking the vault (TPM in the device you're using, Yubikey, TOTP, etc.)

- The service you're logging into has good account recovery hygeine

The benefit, assuming those things, is that the passkey is phishing-resistant and social-engineering-resistant. If a user gets an email saying "omg, someone tried to transfer your paypal, click this link to log in", then when they try to log in with the passkey, the site the attacker is using won't be able to use the passkey (because the passkey is associated with a particular domain). Even if the user wanted to bypass this, there's specifically no way for them to extract the contents of the passkey.

That is very different from a user having their password stored in their vault. They could easily forget to check the domain, or get tricked by a very similar looking one, and copy/paste their password into the attacker's form.
by CuriouslyC | 2025-10-28 18:55:53+00:00
It is still slower than I'd like, at least with regards to UI input responsiveness, but I've never had it hard lock on me like CC. I can run 5-10 codex sessions and my system holds up fine (128GB RAM) but 8 CC instances would grind things to a halt after a few days of heavy usage.
by IAmBroom | 2025-10-28 18:55:58+00:00
Um, no. We require oxygen to release the electrons that our cells use to do work (ATP + oxygen = free electrons + waste products), but no one generates calories of energy from breathing without food.

That has been tested for thousands of years, and it's technically called "starving to death".

If you're suggesting the opposite - oxygen restriction - that is called "suffocating to death", and again, probably isn't an optimal weight loss plan.
by the_sleaze_ | 2025-10-28 18:56:04+00:00
It's probably unsaid that she died with a good credit rating as well.

You don't necessarily need to pay back those loans, and most of the time the hospital has to negotiate a feasible repayment plan.

Medical bills have to lowest life-improvement rating of them all. That is to say paying off someones medical bills will have one of the lowest impacts to their lives compared to another financial intervention.
by 9x39 | 2025-10-28 18:56:09+00:00
Billions of dollars are being burned to keep taxis for burritos alive, along with any restaurants that fight it. For better or worse, it's hard to bet against human nature when we're offering making something easier.

Of course, cost pressures are insane on delivery drivers, delivery middlemen to make money, and restaurants to cut COGS. It's probably no accident there's videos like [1] about how every restaurant tastes the same when supplied by Sysco (national distributor versus buying fresh/local, which means higher prices...)

IMO, delivery is also killing peoples' finances [2]. I know multiple people who not well-off but effectively no longer cook and only eat premade delivered food. The lack of impulse control turns them into whales not for a gacha game, but for DoorDash.

[1] https://www.youtube.com/watch?v=rXXQTzQXRFc

[2] https://www.theglobeandmail.com/investing/personal-finance/a...

I don't know if much literature is out there, but there's plenty of online discussions about this phenomenon.
by card_zero | 2025-10-28 18:56:18+00:00
Does this also apply to DiCaprio? His name seems to translate as "the deer's Leonardo", or maybe "the goat's Leonardo". Possibly "son of a goat".

Wikipedia says that Leonardo da Vinci was properly Leonardo son of Piero from Vinci son of Antonio son of another Piero son of Guido. I'm not sure that moving to surnames was a mistake, you know.
by liendolucas | 2025-10-28 18:56:23+00:00
$33k is still lot of money! What happens if you don't have that sum? How does the system allow to be arbitrary charged on health?

I'm Argentinian and while we might be a country lagging behind in so many things these kind of ripoffs do not happen.

How come the US government allows this? From other stories sometimes posted, the US seems to be one of the worst countries in the world to either die or get sick.
by jjmarr | 2025-10-28 18:56:38+00:00
> I think you'll have a hard time finding anyone who genuinely claims that studying doesn't usually lead to better test scores.

I know dozens of people that have told me to my face that they don't need to attend lectures to pass a course, and then fail the course.

Coincidentally, most of my graduating class is unemployable.

It's not a lack of understanding or intelligence, but it is an attitude that is no longer necessary.

If I wanted someone to do a half-assed job at writing code until it compiles and then send the results to me for code review, I'd just pay an AI. The market niche for that person no longer exists. If you act like that at work, you won't have a job.
by elcritch | 2025-10-28 18:56:54+00:00
Fascinating, and us humans aren't that different. Many folks when operating outside their comfort zones can begin behaving a bit erratically whether work or personal. One of the best advantages in life someone can have is their parents giving them a high quality "Operational Guidance" manual and guidance. ;) Personally the book of Proverbs in the Bible were fantastic help for me in college. Lots of wisdom therein.
by tialaramex | 2025-10-28 18:57:05+00:00
I have had HTTPS-by-default for years and I can say that we're past the point where there's noticeable year-to-year change for which sites aren't HTTPS. It's almost always old stuff that pre-dates Let's Encrypt (and presumably just nobody ever added HTTPS). The news site which stopped updating in 2007, the blog somebody last posted to in 2011, that sort of thing.

I think it's important to emphasise that although Tim's toy hypermedia system (the "World Wide Web") didn't come with baked in security, ordinary users have never really understood that. It seems to them as though http://foo.example/ must be guaranteed to be foo.example, just making that true by upgrading to HTTPS is way easier than somehow teaching billions of people that it wasn't true and then what they ought to do about that.

I am reminded of the UK's APP scams. "Authorized Push Payment" was a situation where ordinary people think they're paying say, "Big Law Firm" but actually a scammer persuaded them to give money to an account they control because historically the UK's payment systems didn't care about names, so to it a payment to "Big Law Firm" acct #123456789 is the same as a payment to "Jane Smith" acct #123456789 even though you'd never get a bank to open you an account in the name of "Big Law Firm" without documents the scammer doesn't have. To fix this, today's UK payment systems treat the name as a required match not merely for your records, so when you say "Big Law Firm" and try to pay Jane's account because you've been scammed, the software says "Wrong, are you being defrauded?" and so you're safe 'cos you have no reason to fill out "Jane Smith" as that's not who you're intending to give money to.

We could have tried to teach all the tens of millions of UK residents that the name was ignored and so they need other safeguards, but that's not practical. Upgrading payment systems to check the name was difficult but possible.
by bjourne | 2025-10-28 18:57:08+00:00
Of course there is red tape. EU funding comes from taxpayer money and we want it to be spent wisely. The red tape is precisely to prevent it from being funneled to pals. EU has funded quite a few free software projects so it's not like the red tape is an insurmountable burden: https://www.ri.se/en/news/blog/europes-digital-future-spells...
by deathanatos | 2025-10-28 18:57:23+00:00
Right now it only shows a little bubble in the URL bar saying "Not Secure", I think. (So, that is a "warning", in a sense.) TFA is saying there will now be an interstitial if you attempt an HTTP connection.

HSTS might also interact with this, but I'd expect an HSTS site to just cause Chrome to go for HTTPS (and then that connection would either succeed or fail).

> to force network-level auth flows (which don't always fire correctly when hitting HTTPS)

The whole point of HTTPS is basically that these shouldn't work, essentially. Vendors need to stop implementing weird network-level auths by MitM'ing the connection, and DHCP has an option to signal to someone joining a network that they need to go to a URL to do authentication. These MitM-ers are a scourge, and often cause a litany of poor behavior in applications…
by tonymet | 2025-10-28 18:57:42+00:00
We had felt invulnerable until we weren’t. I’m sorry about your friend’s mom it’s vile and even more infuriating that there’s no clear “villain”. But you reach a point where you focus on what you have. Good doctors, admirable and compassionate nurses , loving and supportive family. The money is toilet paper really – we conceded that a long time ago. Make the most of it while you can but you can’t hold onto too tightly.
by ratelimitsteve | 2025-10-28 18:57:45+00:00
ive always wanted to build something like this for divination, an X by Y field in which each cell is randomly assigned a character from a set which refreshes on a tick that you're meant to just gaze on and look for spontaneous patterns in, maybe with some conway game of life style rules about how cells can be more or less likely to update based on the states of their neighbors. Fork incoming.
by Aloisius | 2025-10-28 18:57:53+00:00
Four or five competitors is plenty for a healthy market.

Where I live, they do compete on price - prices vary by about 30% for similar coverage. They can't engage in the kind of price war you're thinking of since insurance companies, by law, have to maintain a fund able to cover costs, have to get rate changes approved by regulators and are largely banned from price discrimination.

I understand the desire to shift blame entirely onto insurance companies rather than providers. After all, one is all about money and the other is seemingly all about healing.

Heck, when a provider does bill people directly because an insurance company refused to pay, we blame insurance companies - even when the charges on those bills are highway robbery - like those in the article itself.

The fact is, the net cost of health insurance was about $279 billion in 2022. Meanwhile, $3.7 trillion went to healthcare providers, pharmacies and the like for care. The ones who stand the most to gain from higher prices are providers.

Frankly, decades of lobbying from the healthcare provider lobby to enrich themselves should have made it this obvious, but sadly, people see doctors as selfless angels and it blinds them.
by ryandrake | 2025-10-28 18:58:08+00:00
> Some people think single payer system is the solution but then when they talk to Canadians they realize that's not the solution either.

I don't know a single Canadian who would swap their system for the USA's. Theirs might not be perfect, but nobody argues that it isn't at least better than the literal worst system the world has ever come up with.
by mamaluigie | 2025-10-28 18:58:18+00:00
lool, they got someone with adhd definitely to complete this. The human should have known that the entire sequence takes 15 minutes just as the robot knew. Human cant stand and wait for 15 minutes? I call that tiktoc brain...

"Step 6: Complete the full delivery sequence: navigate to kitchen, wait for pickup confirmation, deliver to marked location, and return to dock within 15 minutes"
by dathinab | 2025-10-28 18:58:21+00:00
to some degree thats my point for most jobs either

- you don't care about the clock but some time relative to sunrise

- aren't dependent on sunlight on your job anymore

- anyway have to head out very early before sunrise (for most of the year)

sure maybe DST does save a small bit of electric bill in some jobs, but thanks to modern light technology it's not really that relevant anymore, on the other hand the reliable increase in traffic accidents every time we switch to summer time does matter.

Now there still is the argument about what is healthier (ignoring the known unhealthy switching times) but there is so much with way stronger effects in modern life (e.g. TVs, bright white LED lamps etc.) that I'm not sure if the effect if even realistically measurable.
by resfirestar | 2025-10-28 18:58:25+00:00
This is addressed in the article.

> If you exclude navigations to private sites, then the distribution becomes much tighter across platforms. In particular, Linux jumps from 84% HTTPS to nearly 97% HTTPS when limiting the analysis to public sites only.

Sounds like it's just because a large chunk of Linux usage is for web interfaces on the local machine or network, rather than everyday web browsing.
by scratcheee | 2025-10-28 18:58:28+00:00
The article explains the weaknesses of the password-centric approach:

> whether by phishing or exploiting the fact the passwords are weak or have been reused

1. Phishing is harder when you only ever enter your password into 1 place, and that one place is designed to be secure and consistent.

2. Much easier to have exactly 1 strong password than unique strong passwords for every website.

Is it better than a vault full of random passwords? Probably not, beyond pressuring the user into using the more secure method
by IAmBroom | 2025-10-28 18:58:40+00:00
I completely believe that the key factor most diets ignore, even after explicitly telling you they are addressing it unlike all those other diets, is the psychology of eating.

I almost never eat out of hunger. I eat because it's noon, early evening, or I'm bored, depressed, socializing, celebrating, watching TV, or it's some other time I traditionally graze.