MurphyA/hacker-news huggingface dataset:
by csmantle | 2025-10-07 05:15:44+00:00
Most OSS projects have a scale of expectation for external contributors depending on what they propose, either implied or written (like in [^0]). A hypothetical but likely scale would be from typo/docs fixes (lowest), bugfixes, new features, to CI/CD and release workflow (highest). Generally, the wider audience your patch might influence, the more you are expected to know about the project itself, its workflow, collaboration, best practices, code quality and maturity, etc. in the first place.

I agree that banning people without prior communication is rude, but looking at OP's PR[^1], I tend to concur with lodash maintainers this time. The PR gets no description, no explanation, and no prior discussion or RFCs. It adds a totally new GitHub Actions pipeline, while lodash isn't even using GitHub Actions now. It contains various fixup commits that should be squashed. One commit has a super long subject that should be split up. OP here went straight to the top level to propose a brand new release workflow, but the lodash maintainers obviously didn't consider them to be ready for such contributions.

These are common mistakes every contributor would make in the beginning, and I don't think the maintainers meant it personal. As many other comments have pointed out, by choosing an easier task, getting familiar with the workflow, and building trust, OP can get their patch landed.

[^0]: https://www.mozilla.org/en-US/about/governance/policies/comm...

[^1]: https://github.com/lodash/lodash/pull/6014
by lelanthran | 2025-10-07 05:15:44+00:00
>95% of answers could be accurate. Combined with the 85% that are helpful and you have “85% of answers are helpful & accurate.”

Instead of using the lower bound, wouldn't it make more sense to say "85% of the 95% accurate answers are helpful"? Or perhaps "95% of the 85% helpful answers are accurate"?

In both cases, the number for "answers that are both helpful and accurate" is lower than 85%.
by whycombinetor | 2025-10-07 05:15:56+00:00
Without naming, there seems to be >1 VC-funded companies building "open-source" products, with paid-enterprise or other more sinister business models, where they claim to be open to contributions and have a full CONTRIBUTING.md, and where there's an active community of devs trying to contribute good PRs to solve open issues in the issue tracker.

But the issue tracker is so overwhelmed by slop, non-Latin scripts, and people who think their personal problems (or AI model problems) are the product's problems, that the employees have all but ghosted the issue tracker and PRs; it takes days or weeks for the maintainers (employees) to triage/respond/despam the Github issues list. And if the employees _do_ leave an initial comment on a community PR that multiple users on the issue tracker are begging to be merged, and the PR author makes the requested changes or solves the roadblock, then the team never responds, or takes months to respond. Meanwhile main branch marches on - PRs from the internal paid dev team do get merged often.

I have to imagine that there's a layer of internal politics (maybe VC funding related? dunno) at these companies that shifts more and more communication onto internal nonpublic platforms, to the point where the open-source community rarely gets updates beyond patch notes. It certainly can feel strange when you're on the receiving end of a ghosting. One has to remember that "open-source" does not necessarily mean "community".
by Fischgericht | 2025-10-07 05:17:51+00:00
Well, as this is standard practice the movie would be a ... documentary? ;)

I wasn't clear here enough: The device at this point enables you to typically see all devices on the LAN and WLAN on L2. Which means you can do ARP spoofing and all that kind of stuff. One of the first things you then would look at is what printers are available to infect. People often print interesting things :)

And yes, of course the USB keylogger is the cheap lazy solution. These days due to second factors not that useful as it used to be, but still... you can deploy it in seconds pretty much in every office, shop or governmental institutions.

But to not further drift into off-topic:

I am serious about all this. Should Grapevine be successful and for example one day put out a press release like "Procter & Gamble is now using our services", you will have in addition to state actors (China, Russia, Israel) a thousand kids looking up that P&G makes a profit of $15 Billion or whatever per year, and that they surely will pay 1% of that for not having all of their company data published.

If you look at existing knowledge management system that are deployed in physical-world-companies, you will see that they actually are not allowed to index all the data, but as you would be running against a lot of laws and management best practices if in the next coffee brake everybody would laugh about poor Tony who once had a really stupid concept, created a draft document of it, but then noticed that it won't work and make him look like a fool.... Thought not giving it to his manager would solve that "problem", but it got indexed as company knowledge..

So, erm, yeah: Existing knowledge management systems to a large extend are about NOT sharing knowledge.

Sorry for this raw brain dump of mine into this thread :)
by HaZeust | 2025-10-07 05:17:56+00:00
I'm going to keep it real with you bro, I don't remember how it works, but the video below has been saved in my YouTube watch later for a few months and I think it's what I followed when I tried (I eventually moved onto Linux anyway):

https://youtu.be/s9dYV75sY3s?si=iIlg_0JDDMe8GWqI
by schiffern | 2025-10-07 05:18:15+00:00
Theoretically, a cheap option is to modify Starlink with enlarged argon tanks to rendezvous and "shepherd" large debris into lower orbits. Add LiDAR (DragonEye) and "Push Me Pull You" argon thrusters and it can exert a gentle push even when the debris object is uncontrolled and tumbling.

I'm somewhat surprised SpaceX hasn't tackled this problem yet. Even including just one StarCleaner every 2-3 Starlink launches could make a huge difference.

SpaceX even has the perfect test satellite. RatSat was their first successful launch in 2008, and it's barely decayed despite saying it would only last five to ten years.

https://forum.nasaspaceflight.com/index.php?topic=44753.0
by jcranmer | 2025-10-07 05:20:09+00:00
> (This difference possibly shows the more fundamental difference in the cultures, where one values truth more, and one values agreement/harmony more.)

I'd be extremely wary of ascribing any cultural significance to the language modes here. Negation and especially affirmative/negative responses to negative questions is just extremely variable among languages. Even languages in the same language family just end up doing it differently.
by epistasis | 2025-10-07 05:22:06+00:00
When thinking about block matrix multiplication, it's always a fun time to revisit Strassen's algorithm, which is less than O(n^3).

Normal block multiplication works like:

[ A11 A12 ] [ B11 B12 ] = [ A11*B11 + A12*B21 A11*B12 + A12*B22 ] = [ C11 C12 ] [ A21 A22 ] [ B21 B22 ] [ A21*B11 + A22*B21 A21*B12 + A22*B22 ] = [ C21 C22 ]

Which takes 8 matrix multiplications on the sub blocks. But by cleverly defining only 7 different matrix multiplications on top of block additions and subtractions, like:

M3 = A11 * (B12 - B22)

You can make the C blocks out of just additions and subtractions of the 7 different matrix multiplications.

https://en.wikipedia.org/wiki/Strassen_algorithm

As far as I know this is not useful in the major GPU libraries for saving bandwidth, but I have never bothered to spend the time to figure out why. It must have something to do with the ratio of bandwidth to FLOPs, which is way past my knowledge of GPUs.
by dmantis | 2025-10-07 05:22:44+00:00
Two reasons why so at least professionaly:

- Reliability. For anything that needs deterministic result and not even 99.9% of chance that it's generated correctly and not hallucinated. E.g. health, finance, military, etc. There is no room for "you're absolutely right". For the same input an algo must give the same output.

- Privacy. Until we have powerful local models (we might have though in 10 years, I don't know), sending everything to some cloud companies, which are already obliged by court to save data and have spy and ex-military generals in their boardrooms, sounds a bit crazy if it's not about an apple pie recipe. Web chat interface isolates important data from non-important, but we can't integrate it fully in our lifes.
by instagib | 2025-10-07 05:22:49+00:00
Thirty years ago, at a fair demonstration, they tried to determine passerby’s who were high. They did a quick reaction test, looked at eyes, and a short intoxication test using a driving video with questions.

They could not determine if people were high or tired but both were ineligible to drive according to their tests. Never heard of any improvements or applications.
by wingman-jr | 2025-10-07 05:23:09+00:00
Agreed. These technologies are the backbone of a lot (most?) of IoT devices, so unlike the article's description of "devices" in terms of "consumer handheld phones (that are often replaced every 3 years)", the impact here would be much deeper. And these technologies have been and are continuing to be sold as stable. For example, see https://www.nordicsemi.com/Products/Wireless/Low-power-cellu... . Quote: "Future-proof: LTE-M and NB-IoT are slated for support beyond 2040, ensuring devices' long lifespans. Subscriptions guarantee a reliable network, in contrast to other LPWANs that could shut down preemptively, risking your business." On the other hand, I guess I haven't seen as many IoT devices choose T-Mobile as a carrier either, so maybe it's just that T-Mobile knows their market.
by yosefk | 2025-10-07 05:23:51+00:00
The real problem is that the browser won't let you control the width of a tab without resizing the browser window, which is a bit fiddly, exposes stuff behind the window, and makes you resize the window again and again when moving between tabs.

If you could easily shrink a tab, I would prefer websites to not limit text width. Since you can't, I sorta prefer them to do it, though it's much worse than the user controlling it in a nice per tab way
by toast0 | 2025-10-07 05:24:20+00:00
Drivers are a lot of work. IMHO, do some core stuff, and then build in driver adapters. NDIS wrapper, linuxkpi, etc.

If you want to work hard to make things easy, I bet you could build a hypervisor that does pci passthrough for each device to a guest that runs a different OS driver and rexports the device as a virtio device, and then the main OS guest can just have virtio drivers for everything. It can't be that hard to take documentation for writing Windows drivers and use that to build a minimal guest kernel to run windows drivers in.

That indirection will cost performance and latency, but windows 11 feels like more latency than windows 10 too, so eh. You can also build native drivers for important stuff as needed / over time.
by Fischgericht | 2025-10-07 05:24:30+00:00
Not true really. You will hit regulatory hurdles if your rockets explode in other countries too often :)

And: RF spectrum is HIGHLY regulated.

Also, 4 weeks ago they spent 17 BILLION USD on buying ~30 MHz of spectrum in the 2 Ghz range. 30 MHz translated to a total bandwidth capacity of about 300 MBit/s.

Yes, you have read that correctly: 17 Billion for 300 MBit/s.
by userbinator | 2025-10-07 05:25:22+00:00
How likely is it that this is a coincidence with all the pervasive "digital ID" (read: mass surveillance and control at an unprecedented scale) schemes also being discussed recently?

As long as WinPE and the core of Windows exists in its current form, there will always be a way to use Windows entirely offline. The modding scene also still exists, and although it's a fraction of what it used to be (the peak of Windows-modding was probably in the 98/2K/XP era), some extremely talented individuals remain and fight. (One might ask why they haven't moved to Linux; the answer is usually "because Windows is still more familiar, and it's more fun to hack and rebel". To them, to migrate to a different OS is to surrender.)
by komali2 | 2025-10-07 05:25:50+00:00
I've been doing one bag for 8 years and I still am not understanding pack lists. They seem to get more absurd every year. 10L bag with 6 shirts, 6 underwear, 6 socks, extra pants and shorts, a jacket, and all the electronic and chargers? It beggars belief.

I can do with like 2 shirts, gym clothes, 2 pairs of underwear, 2 undershirts, and I wear my jacket, in a tom binh synapse, about 25L. With electronics it starts getting tricky to get stuff in and out.
by porridgeraisin | 2025-10-07 05:27:14+00:00
This method reminds me of how deep learning models get compressed for deployment on accelerators. You take advantage of different redundancies of different data structures and compress each of them using a unique method.

Specifically the dictionary + delta-encoded + huffman'd index lists method mentioned in TFA, is commonly used for compressing weights. Weights tend to be sparse, but clustered, meaning most offsets are small numbers with the occasional jump, which is great for huffman.
by _flux | 2025-10-07 05:28:46+00:00
Assuming you trust GitHub CI, why doesn't attestation bring the same value?

I haven't really looked into what it entails in establishing an attestation for a CI-built package, though, but I thought the idea was that you will at least get a git commit id that will describe the work, and that the attestation says that that's the work that's been done?

Reproducible building would be useful for removing the need to trust GitHub. But then what do you need the builds for anyway, you would always need to build it yourself anyway?
by vivzkestrel | 2025-10-07 05:29:56+00:00
I have said this before and I'll say it again. I am happy to pay 3x prices for a "Windows Optimal" version. 0 telemetry, 0 unwanted apps, 0 bloatware, 0 shady tactics for privacy bypass or making things intentionally hard to tweak, 2x the performance of Windows 7 as promise. If the hardware has gotten better since the era of windows 7 , why do I feel the software is going backwards. If I had a million dollars, I would advertise my request for such a windows version everywhere on the planet from Madison square to NYtimes and even write letters to Satya Nadella
by akerl_ | 2025-10-07 05:30:33+00:00
To put my cards on the table: RubyGems.org seems plenty trustworthy to me. They seem to be shitty at communication, but locking down production access to systems in light of the state of supply chain attacks in 2025 is the kind of thing that reduces the risk of rogue repo-level activity.

But to your comment: I'm not arguing the same, I'm arguing that the results are the same. If I'm consuming packages from a repo, and I care about the security of the thing I'm running, I need to think about how I know I'm getting legitimate code that does what I expect it to do. One of the risks to that is malicious developers at the package level (either outright malicious or stolen publish credentials). Another is malicious substitution by the package repo. The detection strategies and next steps are different but as a consumer of code, bad code is a risk regardless of who injects it.
by troupo | 2025-10-07 05:30:36+00:00
> Chrome is unusually good about working in public to develop specifications for such features even when other browsers aren't currently interested in shipping them.

That is, if there's a promotion, or a company bet, or a need to establish/secure market dominance for one property or another, Chrome dumps a scribble on a napkin, barely engages in any conversation, and ships to production within a few weeks after dumping said scribbles.

Once it's out there, it couldn't care less what other browsers vendors will say. Dominant market share and an army of developers who never bothered to learn about standards processes will make sure that this is now a standard.
Show HN: My first finished audio plugin. Minimal Bloat, Under 1000 LOC
by not_woowoo | 2025-10-07 05:30:56+00:00
... under 1000 LOC if you don't include dependencies, but those are minimal as well.

I had experimented with plugin development a few years ago, but I only recently got the time to actively pursue it, and I just completed my first "fully finished" plugin.

This plugin is admittedly a bit on the simpler side, but I'm hoping to pursue more ambitious stuff eventually. Plus, though this is simple, I'm not sure there's anything else quite like it; it's a comb filter where the delay taps smoothly interpolate in the time domain, and this leads to pitch/time bending of each delay tap individually. I have some audio examples here https://notwoowoo.github.io/plugins/

The source code is also available on GitHub https://github.com/NotWoowoo/honey-comb

I wanted to avoid the bloat that comes with popular plugin frameworks like JUCE and IPlug, which I've found to be overly complex with a lot of overhead. My past experiences with these led me to try a lighter approach: a very light library called CPLUG (https://github.com/Tremus/CPLUG), glfw (https://github.com/glfw/glfw) for window management, and nanovg (https://github.com/memononen/nanovg) for graphics.

I'm really curious to hear thoughts from musicians, plugin devs, or other DSP-related) developers. I've been working in this space in relative isolation, and I'm sure there's a lot for others to shed light on.
by sothatsit | 2025-10-07 05:31:19+00:00
Flexibility is the advantage. In a chat interface, you can type literally whatever you want and ChatGPT will do its best to serve you. In a website like Skyscanner, you are inherently limited by their UI design.

If all you want is the cheapest flight on a specific day, Skyscanner is really great. But what if you need to book a bus at the other end of your flight? Skyscanner is not going to help you with that, but ChatGPT might! It could search up different bus providers in your destination and cross-reference them against the available flights.

How much you trust ChatGPT to actually do this well is up to you. But I suspect a lot of people will trust it, and I would probably be willing to use it for low-stakes tasks at least.
by komali2 | 2025-10-07 05:32:06+00:00
I was wearing some Uniqlo puff jacket the ul community recommended on a trip to Italy. I brushed up against a pillar at some ruins and it snagged on the rough material and exploded into a cloud of down that the heavy wind blew all over a crowd of tourists.

Now I wear sturdy cotton, linen, leather, denim, and the extra weight is just a couple more calories burned.
by y-c-o-m-b | 2025-10-07 05:34:16+00:00
I am also a relatively happy proton user (now, but wasn't always this way). I second this. Based off the site, it looks like Mullvad passed a real world test too, Proton has not. I haven't tried Mullvad in a couple of years, but they were always reliable and fast. The only issue I had with Mullvad was getting connected to enough peers when torrenting, especially on older torrents where the pool of users is small. Proton's port forwarding feature did noticeably help with that. I do enjoy being able to pay a discounted yearly subscription price with Proton and their user interface is nice. There are some minor problems with split-tunneling in Proton though, sometimes it doesn't work and I haven't figured out why.
by refulgentis | 2025-10-07 05:35:43+00:00
Manifest v2 was having the same privacy guarantees as Safari and it broke a lot of people’s brains. Even if we assume it’s a secret way to neuter ad blockers even though they are fine, it does not imply we have IE or anything close. I’m kinda happy people take positions like these because they keep companies honesty but it’s completely irrational.
by userbinator | 2025-10-07 05:36:04+00:00
Isn't it entirely unsurprising that those running a highly privacy-oriented service would themselves be rather mysterious?

All it takes is an unattended machine for someone to boot another os on and grab the file

If you're going to the trouble of using a VPN, that is not a very likely scenario, and ditto for other users(!) on your machine.
by matheusmoreira | 2025-10-07 05:36:20+00:00
I'm actually one of the fools who tries to support creators by "buying" (licensing with 0 rights) their things. Why do you think I'm so angry at the shit quality of the products I receive in return? Anger doesn't even begin to describe what I feel when I pay for streaming services and get video so poorly encoded they have artifacts in black frames.
by willlma | 2025-10-07 05:36:25+00:00
And throw it all away before you fly home? That's like saying "Why wash dishes when you can just throw them away and buy new ones"?

As an aside, you should absolutely wash your clothes after buying them before wearing them. They're covered in chemicals that aren't great for your skin. I usually pack a week's worth of clothes and do laundry once a week while traveling. Doing laundry more often is a drag.
by y-c-o-m-b | 2025-10-07 05:37:32+00:00
That's actually interesting. My yearly Proton subscription ended several months ago and I tried both NordVPN and ExpressVPN before switching back to Proton. The other two options had limited server locations and I wasn't a fan of the software/setup. There's also a weird shady vibe with how they do their advertising compared to Proton, can't quite put my finger on it though. Proton's software also seems to be more intuitive (although a bit clunky).
by tkgally | 2025-10-07 05:40:11+00:00
I was thinking about consumer-facing AI products, where md files controlled by the user presumably wouldn’t fly.

I find it annoying that, when prompting ChatGPT, Claude, Gemini, etc. on personal tasks through their chat interfaces, I have to provide the same context about myself and my job again and again to the different providers.

The memory functions of the individual providers now reduce some of that repetition, but it would be nice to have a portable personal-memory context (under my control, of course) that is shared with and updated semiautomatically by any AI provider I interact with.

As isoprophlex suggests in a sister comment, though, that would be hard to monetize.
by gloosx | 2025-10-07 05:41:12+00:00
Im genuinely curious, what is the issue if you keep using windows 10?

I have a 10 year old macbook pro with a bootstrapped windows 10 for testing various things, and it looks like everything is kind of working the same way? Steam hardware survey shows that 32% of people are still using windows 10.

Besides "security updates", there is nothing to loose?
by motorest | 2025-10-07 05:41:28+00:00
> Still odd. The OS should be able to manage the memory and balance performance more efficiently than that. There’s no reason to preallocate memory by hardware.

You are arguing hypotheticals, whereas for decades the world had to deal with practicals. I recommend you spend a few minutes looking into how to create RAM drives on, say, Windows, and think through how to achieve that when your build workstation has 8GB of RAM and you need a scratchpad memory of, say, 16GB of RAM.

Recommended reading: https://en.wikipedia.org/wiki/RAM_drive
by soraminazuki | 2025-10-07 05:41:51+00:00
WINE it is. I can't see any point in playing cat and mouse with an actively hostile OS. When a new Windows update starts stealing IMAP credentials[1] before the modding community catches on, it's game over for the user. Better to not use anything based on Windows.

[1]: https://news.ycombinator.com/item?id=38212453