MurphyA/hacker-news huggingface dataset:
by lukevp | 2025-10-04 07:26:28+00:00
So this is saying you have to have an Android developer account and sign the app with your identity… so a one-time $25 cost and that’s it? You can still distribute and sideload apps as long as you sign them.

Microsoft does this for Windows apps if you don’t want scary warnings popping up everywhere. Apple doesn’t even let you sideload at all for iOS and for macOS they do the forced trash malware thing unless you run commands to allow the app in the terminal.

Am I missing how this is different from what we already have on most platforms? Is it because you can’t force it to install the apps? Is there not a developer mode that lets you install unsigned apps, or a way to root the device to install apps?
by eminence32 | 2025-10-04 07:26:45+00:00
I'm not an android developer, so I'm missing some context and key information. But I have a question: When Google is asking developers to "register" their apps as part of this new program, are they just trying to keep a mapping from some code signing key to a government ID? Or are they trying to do a code review process that is similar to submitting to an app store?

I know both are objectionable in their own way, but these two scenarios are quite different and I want to understand this better.
by takluyver | 2025-10-04 07:27:06+00:00
The umbrella organisation signing apps is not impossible, as far as I know. But it would need to be pretty cautious, because if Google revokes its registration, that could block all the apps it has signed at once.

It's hard to see how you could get the necessary level of careful code review with just volunteer effort. But I suspect that most developers who don't want to register with Google are also unlikely to pay money to a third party to work around this.
by runting | 2025-10-04 07:27:33+00:00
This isn't so bad. Unlike other mobile OSes (namely iOS and HarmonyOS), you will still be able to install whatever you like on Android over a USB debugging connection (adb) without any developer verification.

It doesn't take much effort to enable Developer Options, plug into a laptop and run "adb install whatever.apk". It's kind of like the floppy disk era again, having to physically insert things into one's computer to install software. Not a big deal.
by measurablefunc | 2025-10-04 07:28:01+00:00
The query data they are collecting can be used for ad targeting. Remember, if you're not paying for it (and in many cases even when you are paying for it) then the data collected from your use of the application is going to be used by someone to make money one way or another. Google made billions from search queries & OpenAI has an even better query/profiling perspective on its users b/c they are providing all sorts of different modalities for interaction, that data is extremely valuable, analogous to how Google search queries (along w/ data from their other products) are extremely valuable to corporate marketing departments that are willing to pay a premium for access to Google's targeting algorithms.
by squigz | 2025-10-04 07:28:39+00:00
I'm not sure why this is being downvoted. Commenter is entirely correct. If someone has an answer to their question that would add credibility to Discord's phrasing and GP's interpretation, I'm all ears, but otherwise it does seem like this is the case, and every ID they've collected has been leaked, not a subset.

(To say nothing of... does it matter the amount of IDs leaked?)
by ben_w | 2025-10-04 07:29:03+00:00
I think >95% of global electricity will be renewables or nuclear by 2032[0], >85% road vehicles green by 2035[1]; for everything else, limits are *at a minimum* 50% of the MTBF for the equipment but may be even harder, e.g. hydrogen jet fuel is theoretically possible but there's no obvious path to it.

[0] just extrapolate growth curves for PV and wind and you get 100% by then even without nuclear, but in practice last 5% of anything is hard

[1] needs new electricity not yet on the various grids, but not as much as the thermal power of the fuel burned as EVs are more efficient; mainly limited by production of batteries, and that itself is accelerating
by dyauspitr | 2025-10-04 07:29:25+00:00
Definitely. Right now they’re “cancelling” Bill Burr because he went and did a show in Saudi Arabia. One of the left’s staunchest allies for years and one of the few males on the left that young boys can actually identify with and he’s in the trashcan for doing a show with the Saudis. It’s bonkers.
by lxgr | 2025-10-04 07:30:02+00:00
Ironically, the few embossed cards I still have are from debit or prepaid issuers, presumably in a plot to make them look more "official", so at this point we've looped around completely and I've started associating it with a dated/tacky look. (They also take up twice the space in my card wallet and often lose their cheap metallic paint over time, annoyingly spreading glitter across my pockets.)
by danabramov | 2025-10-04 07:32:13+00:00
I responded to this here (https://news.ycombinator.com/item?id=45471337) but I want to emphasize this: your domain is "just" a handle. If something happens to it, you still control your identity, so you can point it at a different domain. Apps just display "invalid handle" instead of your handle but your posts/follows/data stay intact. You can go through a "change handle" flow then and fix it.

Unlike with web redirects, you don't need cooperation from whoever owns the old domain because it's the DID Document that controls which handle you use, and you still control the DID Document even if you lose your handle. (That's part of what my article tried to explain by showing the flow: domain is resolved to DID, DID is resolved to hosting, links are stored with the DID.)

When you change your handle, all your followers/posts/etc stay with you, it just seamlessly updates in the apps you use.
by scotty79 | 2025-10-04 07:32:29+00:00
When unrest happens the military sides with the ones that give better hopes of keeping the stream of money that funds the army flowing.

It sides with the poor only if the powerful (gov) are hopelessly inept at gathering money. If there's a chance that current civilian power can reform and keep collecting the money from the people and funding the army then the army sides with them and help quell the rebellion.

Those who hold kinetic power will never side with poor against the rich.
by minitech | 2025-10-04 07:32:57+00:00
This is the context:

> > The reason to care about compile time is because it affects your iteration speed. You can iterate much faster on a program that takes 1 second to compile vs 1 minute.

> Color me skeptical. I've only got 30 years of development under the belt, but even a 1 minute compile time is dwarfed by the time it takes to write and reason about code, run tests, work with version control, etc.

If your counterexample to 1-minute builds being disruptive is a 1-second hot build, I think we’re just talking past each other. Iteration implies hot builds. A 1-minute hot build is disruptive. To answer your earlier question, I don’t experience those in my current Rust projects (where I’m usually iterating on `cargo check` anyway), but I did in C++ projects (even trivial ones that used certain pathological libraries) as well as some particularly badly-written Node ones, and build times are a serious consideration when I’m making tech decisions. (The original context seemed language-agnostic to me.)
by 7952 | 2025-10-04 07:34:03+00:00
I think in the near term social media can actually have a stabilising effect just because of how much it paralyzes people. It takes emotion and redirects it into something with little real world effect. Whilst most actual power is exercised offline. This sometimes breaks down and the crazy escapes from the internet and reeks havoc. But mostly the geriatrics are left alone to pull the levers of power in relative peace.
by jryle70 | 2025-10-04 07:35:19+00:00
That's a shame. Following Starship's development process has been amazing, talking as someone who is interested but not intensely so. Raptor engine, booster catching, ship maneuvering, heatsink development, launch infrastructure. All is very exciting. It's was a big disappointment when they encountered setback earlier this year, and I was very happy when they got back on track with the latest flight.

You are entitled to your opinions, I happen to be more or less on the same side as yours. If antics is what make you enrage, though, it isn't hard to find people that you agree with ideologically having the same behavior, and I doubt you find them as distasteful.

Politics changes but technological advances are permanent that have long term impacts.
by jen729w | 2025-10-04 07:35:21+00:00
Tourist in Japan here. Suica is great. I prefer it over my Visa tap 'n pay just for speed. It's instant vs. a few seconds which isn't much, but it's nice.

Topping up a Suica every now and then vs. having many international transactions might also work out better for some. My bank (ING) gives me those fees back so it makes no difference to me.
by lxgr | 2025-10-04 07:35:48+00:00
It's usually based on the chip settings. Rules aren't as simple as "always online" or "never offline"; an issuer can e.g. convey that they'd prefer online transactions for certain types of payments, while offline is ok for others, via relatively complex configurations of the code of the chip application.

Before that, there was the service code on the magnetic stripe, which also can convey things like "online only" or "domestic use only".

The BIN is only involved in risk management on the terminal's side: Many of these in-flight terminal accept deferred online transactions, which means that, even though they're completely offline, they take the risk of accepting an online-only card. (For truly offline capable cards, the risk is often with the issuing bank.)

That type of risk management can benefit from knowing what type of card it is, and prepaid cards are often seen as riskier (because customers might intentionally drain them before a flight). Of course, debit and credit cards can also be empty/marked as stolen, but these are marginally harder to get and replace.
by js8 | 2025-10-04 07:36:31+00:00
Well, you might be right, I agree that war is a waste of resources. But that's actually why EU should stop them, by offering Russia some tangible alternative, a path to prosperity. Instead we cut the ties completely (which we didn't do with U.S. when it attacked Iraq, Israel genociding Palestinians also doesn't seem to matter).

Instead, EU wants to embrace the same kind of (they call it) "military keynesianism". They think military spending will fix their economies. (In fact, attempt to use war as a way to prop up the economy was suggested as a reason why Putin started the war.)

It's also bad because longterm, it puts Russia on the same path the U.S. has been - a big weapons manufacturer that is looking to export a war somewhere.
by giancarlostoro | 2025-10-04 07:37:16+00:00
Not that I disagree, but it does make me wonder if this would be one rare instance where American Express which I know is notorious for siding with their customers (at least for a time? - my father worked as an accounts payable accountant at a big hotel in Orlando near Disney World and he said American Express was notorious at not paying even with signature if their customer claimed it was fraud) would still side with their customers. Leaves one to wonder if they even take Amex on flights.

I still remember them taking my card which I think was a debit card on a flight and shoving it into carbon copy paper and basically billing me whenever we landed. This was late 2000s. From Puerto Rico to Florida.
by WmWsjA6B29B4nfk | 2025-10-04 07:37:17+00:00
> Even if they don’t offer it to travelers, it doesn’t mean they themselves do not have Internet connection

It usually does, it requires quite a bit of equipment and it doesn’t make economical sense to install it and not sell it to passengers. Airplanes have other means communicating with the ground and airline offices though.
by timschmidt | 2025-10-04 07:37:46+00:00
I see. Perhaps I wasn't clear. I've never encountered a 1 minute hot build in Rust, and given my experience with large Rust codebases like Bevy I'm not even sure such a thing exists in a real Rust codebase. I was pointing out that no matter how slow a cold build is, hot builds are fast, and are what matters most for iteration. It seems we agree on that.

I too have encountered slow builds in C++. I can't think of a language with a worse tooling story. Certainly good C++ tooling exists, but is not the default, and the ecosystem suffers from decades of that situation. Thankfully modern langs do not.
by JSR_FDED | 2025-10-04 07:37:47+00:00
Question about using Litestream - I have an app running, and now need to upgrade it to a newer version. Currently I build the new version in a different directory, stop the old app, copy/migrate the database from the old version to the new version (in the new directory). Then finally I delete the old directory, and rename the new directory to be the production one.

Will Litestream freak out about the database being replaced underneath it?

Will I still be able to restore old versions of the DB?
by takluyver | 2025-10-04 07:37:53+00:00
I'm guessing Windows gets a pass because you can still fairly easily bypass the signature check - it's effectively a warning rather than a hard block. It sounds like for (mainstream) Android, the only workaround will be to plug it into a PC and use adb there to install an unsigned app, which is considerably harder. Installing a custom ROM will presumably get around it too, but that's tough, and various government and banking apps etc tend to refuse to run because of attestation.

Apple is of course locked down, but that's not news. The anger is because Android was the better option on this dimension.
by kassner | 2025-10-04 07:37:57+00:00
That’s a different thing: pre-authorization. It’s used for when you want to authorize some purchase before delivering the goods (that you later confirm once it’s delivered). The pre-auth is still done online for amounts above the card-offline limit.

The nicer feature of preauth is that you can confirm a lower amount. So in the case of a gas pump, they first have to make sure you have the money, without knowing how much, because you haven’t pumped it yet. Once you finish, then they know the amount, and confirm the transaction at a lower amount.
by wjr | 2025-10-04 07:38:04+00:00
Product Manager (recent titles: Director, Sr.)

Location: Poland (GMT+2); frequent in NYC & EU

Remote: Yes (EU/US time-zone overlap)

Willing to relocate: Yes (EU or US)

Technologies: Product discovery/delivery, workflow automation, integrations; Ruby/Rails, JS, SQL; AWS; analytics (Mixpanel/Heap/GA/PowerBI), UX/UI (Figma), PM stacks (Jira/HubSpot/Gainsight/Gong/Clari)

Résumé/CV: available on request.

Email: wesleyjross (at) gmail.com

Results-driven PM with 12 years experience.

Led Automations & Integrations at B2B Scale Up: owned 5+ products including a no-code workflow engine and 32+ integrations; increased adoption >20%, reduced time-to-market 15%, built/mentored a 5x PM team (2 promotions, +15% productivity).

Strong GTM + technical depth; comfortable owning P&L and platform roadmaps.
by jen729w | 2025-10-04 07:38:31+00:00
Similarly in the UK we had the concept of a 'cheque guarantee card'. Present your Barclays plastic card along with a paper cheque up to some value (£50 rings a bell; I was too young, it was my mam doing the transacting) and that cheque is guaranteed by the bank.

https://en.wikipedia.org/wiki/Cheque_guarantee_card
by runting | 2025-10-04 07:39:08+00:00
On Android you can both install and run apps over adb. The linked article explains:

> Participating in developer verification will not affect your experience in Android Studio, the official IDE for Android app development. You will continue to be able to build and run an app even if your identity is not verified. Android Studio is unaffected because deployments performed with adb, which Android Studio uses behind the scenes to push builds to devices, is unaffected. You can continue to develop, debug, and test your app locally by deploying to both emulators and physical devices, just as you do now.
by lxgr | 2025-10-04 07:39:37+00:00
That sounds like security theater.

What would asking for the ZIP code help if it can't be validated on the spot? If the terminal submits the transaction in batch later, it's too late for that to catch a stolen card.

Providing an incorrect ZIP code also makes the transaction more likely to be declined than not providing one at all for card-not-present transactions (and is also allowed), so it really makes no sense for a merchant to do that.
by JimDabell | 2025-10-04 07:39:42+00:00
> Vague. Are you talking about reasons to create like the joy of creating?

That’s one of them, but I really don’t have to be specific about the reasons. I just have to point out the existence of permissively licensed works. You said:

> Great, you've just removed any incentive for people to make anything.

This is very obviously untrue. Perhaps you meant to say “…you’ve just removed some incentives for people to make some things”?
by danabramov | 2025-10-04 07:39:43+00:00
I think they're saying using PLC as an identity method is not tied to buying into the whole AT spec. So you can use it for something else.

>Isn’t PLC tied to bluesky (or some other central authority)?

Yes, PLC is currently tied to Bluesky, and is in the process of moving out into a separate legal entity (https://docs.bsky.app/blog/plc-directory-org). It would indeed remain centralized.

>Why didn’t they use some mechanism for decentralisation, like a DHT (e.g. did:pkarr)?

AFAIK Bluesky is open to supporting more did methods in atproto in the future as long as they can act as permanent identifiers. I found a response from Bryan about `did:dht` here: https://github.com/bluesky-social/atproto/discussions/2705#d...:

>did:dht is interesting and maybe could work, for atproto, but there have been many DHT projects in the history of decentralized computing, and only a small handful have really worked out. AKA, been resilient to abuse, attacks, neglect, etc, over years and decades. magnet links are cool but kind of the exception to the rule. I think if the W3C standardized did:dht it could be a real contender, but somebody needs to carry the flag and demonstrate it working "in real life" with millions of users, and I suspect that will be difficult, and I would not expect Bluesky to lead that charge (we already have our own pet DID method to maintain and support).
by concinds | 2025-10-04 07:41:52+00:00
I suggest that everyone here stop submitting Feedback Assistant/Radar reports. Let teenagers, college students, adults and old people buy a new Mac, experience the bugs and lack of polish and let it affect Apple's brand, consumer's preferences, and their market behavior. Apple is too big to care about anything other than market consequences. Apple is fully aware that no one likes the Radar system, that no one feels their reports count, they had an executive do a sort-of mea culpa years ago but nothing changed.

My AirPods keep going silent on my new Tahoe Mac and require a disconnect and reconnect. Will I report it? No. (Besides, if you report bugs like that, Apple collects a map of your entire filesystem, every path and filename). Apple shouldn't have fired their QA team. Let them deal with any brand damage, they've earned it. I mean, did Apple really not test their new OS with Slack, Zoom or VSCode? Really? Reckless.
by e-khadem | 2025-10-04 07:41:55+00:00
I first learned about FFT in highschool to solve competitive programming problems, and it was, let's say, useful for that. But then I started studying EE, and after learning more about the different types of Fourier transform, I started respecting the humble DFT matrix much more. I believe there is big gap of understanding between considering FFT as a cool algorithm for multiplying polynomials (or doing a circular convolution), and considering the transform as obtaining an eigenvalue representation of linear systems. The latter might not be as fruitful in the software engineering per se, but is the backbone of understanding the Fourier Transform for EE.
by lxgr | 2025-10-04 07:42:05+00:00
That said, just because there is no passenger connectivity doesn't mean the airline doesn't have some, for operational reasons. Even if that's just a narrowband satellite or VHF (ACARS) link, credit card transactions take very little data (POS terminals are 80s technology, after all).

That said, I still don't think that that's too common – building out cabin Wi-Fi for card authorizations only is probably not worth it, given how hard it is to get away with fraud in an environment where every seat has a passenger name to it, and that name is often verified by the airline or government at the airport or at boarding time.
by pjmlp | 2025-10-04 07:42:57+00:00
Additionally any language that wants to be a C++ replacement, keeps a dependency on C++ as long as LLVM is part of its tooling infrastructure.

For me beyond the initial adoption hump, programming languages should bootstrap themselves, if nothing else, reduces the urban myth that C or C++ have to always be part of the equation.

Not at all, in most cases it is a convenience, writing usable compilers takes time, and it is an easy way to get everything else going, especially when it comes to porting across multiple platforms.

However that doesn't make them magical tools, without which is impossible to write compilers.

That is one area where I am fully on board with Go team's decisions.
by swiftcoder | 2025-10-04 07:43:17+00:00
I think the risk is somewhat higher than just losing your job - you are potentially burning your whole referral network in the process (especially if you end up with your name in the press during any resulting prosecution).

For a junior engineer it may not be that hard to fly under the radar, but senior/staff level folks tend to be well known by the execs. And execs talk, they call their friends to vet future hires... burn your execs, and maybe you don't work in that town again
by drnick1 | 2025-10-04 07:43:25+00:00
Aren't Graphene and Lineage exactly that?

I have been running Graphene on a Pixel for a while now and I don't think Linux phones are a viable alternative. The vast majority of Android apps just work on Graphene, and there are millions of them. The UI experience is polished, everything just works with the exception of apps that require Google Play Integrity. And of course these projects aren't affected by Google's restrictions on sideloading.
by Galanwe | 2025-10-04 07:43:45+00:00
> historically there were open-loop deployments in many European countries

Indeed, there used to be things like "Moneo". The problem is that banks never trusted really these systems, so you were limited to, say, 50E of stored value. Also for some reason in Europe the readers of such cards have never been great, I guess because most devices were built on the cheap, so even if the transaction is offline and supposedly fast, you would have to wiggle your cards all around most readers for 2s until it's picked up.

In Hong Kong there is the Octopus card, which started as a closed loop subway card, but ended up being so loved that now you can pay litterally anything with it. It can store up to $500, and you can set it up to automatically top-up to $500 more per day linked to your bank account. Also accepting payments from octopus cards is very easy, you don't need a physical device and small businesses can just have the customer card tapped on their phone with a merchant app.