MurphyA/hacker-news huggingface dataset:
by pottertheotter | 2025-10-12 03:49:04+00:00
As you said, rare earth elements aren't really rare--they are very abundant. But they are mixed in with themselves (there's 17 of them) and lots of other elements. Think of it like if you had 50 different colored sands and had huge amounts of all of them, then mixed them all up. The rarity is that you're not going to go through that sand and find a big patch of blue sand.

There's plenty of them, and all over the world. It's also important to separate the mining of rare earths from the processing/refining. 60% of REEs come from mines in China. But 90% of the processing is done in China (for some of them, heavy REEs, 100% of it is done there).

It wasn't always this way, but started to change in the 80s and 90s as Chinese firms were able to process rare earths at much lower costs. It was a mix of things--labor rates, lax standards, as well as state subsidies (the latter shouldn't be overlooked).

It's difficult to reopen processors, and starting up new ones requires a lot of time and money. We can do it, we just can't flip a switch and start it up. Also, China has developed a lot of new technology to do it and have export controls on the tech. Also, we have much more severe environmental standards these days that would make it even more difficult to get going.
by lovich | 2025-10-12 03:49:16+00:00
This is not the first time they "forced our hand".

https://en.wikipedia.org/wiki/Rare_earths_trade_dispute

Either were not actually that bothered by the restriction and are using this to gin up conflict, or we've been this incompetent at responding to existential threats for over a decade and a half, including multiple presidents, both parties holding power, and this current admin's first term.

I am not really excited about either situation.
by zeroq | 2025-10-12 03:50:44+00:00
This.

Most people do drugs or alcohol for kicks or to put the pain away, as in general, but there are a lot of people who are self medicating symptoms they are well aware and they know this "medicine" works for them.

Breaking out of that habit is extremly hard.

At the beginning of covid I found myself in a really dark place and opted to seek help with psychotherapy.

I had a long story of health and legal issues and I often told my peers that second opinion is key, no one is omnipotent and with hard legal or medical case it's worth seeking out opinion of at least two professionals (and if their opinions are contradicting - keep seeking).

I met eleven certified experts.

At the beginning of my journey one of them, guy with stellar reviews, upon hearing that I haven't been properly diagnosed, but I suspect I might be on the spectrum looked at me and said "no... I'm looking at you look perfectly healthy". One after five sessions when I said I'm not getting any feedback, like anything, I was the only one talking during the sessions, told me it take years to get to the core.

Long story short - just before someone advertise as an expert doesn't mean they know anything, or they care. Even in highly regulated circuit.
by MBCook | 2025-10-12 03:51:39+00:00
Like I said, I understand why they don’t.

I think the only answer would be you can’t interact directly with signed stuff. “new uint(42)” or “ulong.valueOf(795364)” or “myUValue.tryToInt()” or something.

Of course if you’re gonna have that much friction it becomes questionable how useful the whole thing is.

It’s just my personal pain point. Like I said I haven’t had to do it much but when I have it’s about the most frustrating thing I’ve ever done in Java.
by jrowen | 2025-10-12 03:52:10+00:00
It's more about the definition of collapse. By your definition civilization collapsed during World War 2.

Generally a large structure that has collapsed is hopelessly, irreparably broken - capable of performing near 0% of its function. It can't recover, it's not limping along in some form, it is "totaled" and you have to clean up the pieces and start completely over.
Show HN: Munshig – catches the API bug that cost Facebook 50M accounts
by shaikhzaynsaif | 2025-10-12 03:54:20+00:00
Hey HN

I built munshig, a zero-config runtime API security proxy that monitors your API during development and automatically detects vulnerabilities like Broken Access Control (BOLA), missing authentication, SQL injection, and PII leaks — before they reach production.

It’s inspired by tools like Salt Security ($500k/year enterprise products), but designed to run in 30 seconds with a single command:

npx munshig

It sits in front of your dev API (e.g. :3001 → :3000), analyzes real requests/responses, and surfaces runtime security issues right in your terminal — with detailed remediation steps.

GitHub: https://github.com/shaikhzaynsaif/munshig

npm: https://www.npmjs.com/package/munshig

I built this because I kept seeing APIs with BOLA bugs even in large companies — most scanners miss them since they analyze code statically, not behavior at runtime.

Would love feedback from other developers — especially:

Does the zero-config proxy approach make sense for your workflow?

What kinds of vulnerabilities would you want it to detect next (XSS, SSRF, JWT misuse...)?

Thanks!

— ZaynSaif (Author)
by JimDabell | 2025-10-12 03:55:16+00:00
> Why don't you just explain what you want people to know instead of making everyone else guess what you are thinking?

I’m not making people guess. I explained directly what I wanted people to know very, very plainly.

You are replying now as if the discussion we are having is whether it’s a good system or not. That is not the discussion we are having.

This is the point I was making:

> instead of reading about how it actually worked, huge amounts of people just guessed incorrectly about how it worked and the conversation was dominated by uninformed outrage about things that weren’t happening.

The discussion is about the ignorance, not about the system itself. If you knew how it worked and disagreed with it, then I would completely support that. I’m not 100% convinced myself! But you don’t know how it works, you just assumed – and you got it very wrong. So did a lot of other people. And collectively, that drowned out any discussion of how it actually worked, because you were all mad about something imaginary.

You are perfectly capable of reading how it worked. You do not need me to waste a lot of time re-writing Apple’s materials on a complex system in this small text box on Hacker News so you can then post a one sentence shallow dismissal. There is no value in doing that at all, it just places an asymmetric burden on me to continue the conversation.
by MBCook | 2025-10-12 03:56:51+00:00
I guess that’s my problem. At this point I don’t trust that they DO have an endgame. I think this WAS it and they just ignored all the problems.

I’m sure we’ll all get used to it. Just like we got used to a lot of the problems that the iOS 7 redesign brought.

But that doesn’t mean we’re actually moving forward and getting better. We seem to be finding new ways to get worse.

You can look at screenshots of OS X 10.4 or 10.6 and they’re incredibly easy to read. They have good information density. You know what the controls are and things haven’t been hidden like scroll bars.

Yeah there were excesses with iOS 6 and below. And the pixel perfect layout stuff was never going to be viable long-term as phones kept changing size every year or two.

But you could tell what was a button and what wasn’t. You knew if something was just text or a field you could edit. We’ve lost that.
by creativeSlumber | 2025-10-12 03:57:31+00:00
> to prevent wasted processing.

If that was the case, the message should be about a limit on re-enabling the feature n times, not about turning it off.

Also the if they are concerned about processing costs, the default for this should be off, NOT on. The default should for any feature like this that use customers personal data should be OFF for any company that respects their customers privacy.

> You are trying to reach really far out to find a plausible

This behavior tallies up with other things MS have been trying to do recently to gather as much personal data as possible from users to feed their AI efforts.

Their spokes person also avoided answering why they are doing this.

On the other hand, you comment seem to be trying to reach really far trying to find portray this as normal behavior.
by drnick1 | 2025-10-12 03:58:20+00:00
Waydroid runs Lineage, so it's certainly possible, but I don't know how easy it is on something like QEMU.

That being said buying a phone compatible with Lineage or Graphene (only Pixels for the latter) is well worth it. This will probably become even more important in the future if Google bans sideloading or complies with idiotic laws such client-side scanning of messages in some markets.
by badsectoracula | 2025-10-12 03:59:07+00:00
> 677,633 packages in PyPI.

Chances are 677,634 of those will be broken next week though :-P

The problem with package managers is that they encourage piling on dependencies and creating deep (and thus fragile and often hard to reason about) dependency trees.

I loathe having to install anything more complicated than simple scripts[0] based on Python because unless the developer constantly chases after all their dependencies to keep them in working order, i'll be the one who will have to do that when something inevitably breaks (assuming it wasn't already broken the time i decided to try it - which is sadly something i encountered more than a few times). And once the developer moves on, the bitrot spreads alarmingly fast.

[0] and even that isn't reliable if the scripts rely on more than whatever comes preinstalled with Python
by piskov | 2025-10-12 03:59:56+00:00
Microsoft Silverlight.

Full C# instead of god forbidden js.

Full vector dpi aware UI, with grid, complex animation, and all other stuff that html5/css didn’t have in 2018 but silverlight had even in 2010 (probable even earlier).

MVVM pattern, two-way bindings. Expression Blend (basically figma) that allowed designers create UI that was XAML, had sample data, and could be used be devs as is with maybe some cleanup.

Excellent tooling, static analysis, debugging, what have you.

Rendered and worked completely the same in any browser (safari, ie, chrome, opera, firefox) on mac and windows

If that thing still worked, boy would we be in a better place regarding web apps.

Unfortunately, iPhone killed adobe flash and Silverlight as an aftermath. Too slow processor, too much energy consumption.
by BobbyTables2 | 2025-10-12 04:02:45+00:00
It’s funny.

I learnt the hard way that communications/image/signal processing research basically doesn’t care about Computer Architecture at the nuts and bolts level of compiler optimization and implementation.

When they encounter a problem whose normal solution requires excessive amounts of computation, they reduce complexity algorithmically using mathematical techniques, and quantify the effects.

They don’t quibble about a 10x speed up, they reduce the “big O()” complexity. They could care less whether it was implemented in interpreted Python or hand-optimized assembly code.

On one hand, I know there’s a lot of talent in AI today. But throwing hardware at the problem is the dumbest way forward.

WiFI adapters would be wheeled luggage if we had the same mentality during their development.
by itsme0000 | 2025-10-12 04:03:10+00:00
I run a collection on AI. The view/download numbers are very likely the result of random botting and make no logical sense in terms of rationally what you’d expect to see. I’ll see an item downloaded 10000x normal numbers for one day etc.

As for the AWS stuff. Look at the ties between these organizations, pretty clear Amazon is basically self-dealing via a non-profit to write stuff off or have some other scheme.
Show HN: Radiopuppy.com – Minimal Web App for Listening to Online Radio
by devrundown | 2025-10-12 04:03:23+00:00
I listen to online radio all the time while working, but none of the web based apps I found fit my needs.

So I built RadioPuppy.com - https://radiopuppy.com

It’s a lightweight web app that lets you quickly search thousands of online streaming radio stations and save your favourites.

I’m using the excellent https://www.radio-browser.info API as the data source for stations.

The tech stack is: Laravel 12, Inertia.js, React, Redis, and PostgreSQL.

Future features I am thinking of...

- Let users upload their own stream URLs, so if something isn’t available via the API, they can still save and listen to it. - Plot stations on a map to browse by location. - Play History: Keep track of stations you’ve listened to,

Would love any constructive feedback, thanks!
by somenameforme | 2025-10-12 04:03:34+00:00
Normal people don't post 'memes' with images of dying people in them. If you don't understand this imagine a 'meme' that showed that terrifying image of the dying Iryna Zarutska in it, murderer right behind her, and posted some edgelord caption below it. You only do this sort of stuff if you're completely screwed in the head, generally caused by political extremism.
by CMay | 2025-10-12 04:03:58+00:00
https://support.microsoft.com/en-us/office/group-photos-by-p...

"Microsoft collects, uses, and stores facial scans and biometric information from your photos through the OneDrive app for facial grouping technologies. This helps you quickly and easily organize photos of friends and family. Only you can see your face groupings. If you share a photo or album with another individual, face groupings will not be shared.

Microsoft does not use any of your facial scans and biometric information to train or improve the AI model overall. Any data you provide is only used to help triage and improve the results of your account, no one else's.

While the feature is on, Microsoft uses this data to group faces in your photos. You can turn this feature off at any time through Settings. When you turn off this feature in your OneDrive settings, all facial grouping data will be permanently removed within 30 days. Microsoft will further protect you by deleting your data after a period of inactivity. See the Microsoft account activity policy for more information."

You can also see here some of the ways they're trying to expose these features to users, who can use Co-Pilot etc. https://techcommunity.microsoft.com/blog/onedriveblog/copilo...

I turn all Co-Pilot things off and I've got all those AI/tagging settings off in OneDrive, but I'm not worried about the settings being disingenuous currently.

There's always a worry that some day, a company will change and then you're screwed, because they have all your data and they aren't who you thought they were anymore. That's always a risk. Just right now, I'm less worried about Microsoft in that way than I am with other companies.

In a way, being anti-government is GOOD, because overly relying on government is dangerous. The same applies to all these mega-platforms. At the same time, I know a lot of people who have lots a lot of data, because they never had it backed up anywhere, and people who have the data, but can't find anything, because there's so much of it and none of it is organized. These are just, actual real world problems and Microsoft legitimately sees that the technology is there now to solve these problems.

That's what I see.
by sandreas | 2025-10-12 04:03:59+00:00
My personal take is that most Android devices no longer get updates pretty soon after the release (where pretty soon means 2-3 years). Google promises 7 years of support for their newer devices, but most vendors don't.

LineageOS is, besides the fact hat it is more open for non google stuff, providing Android Updates for older devices. While this does not necessarily provide better security (rooted devices are often not considered as secure), you still get the newer Androids security patches and FEATURES. Furthermore you are more open to do what you want.

However LineageOS does to my knowledge not support bootloader re-locking on most devices, which might be a security risk (see https://grapheneos.org/install/web#locking-the-bootloader).
by technofiend | 2025-10-12 04:05:22+00:00
I cancelled Facebook in part due to a tug-of-war over privacy defaults. They kept getting updated with some corporate pablum about how opting in benefited the user. It was just easier to permanently opt out via account deletion rather than keep toggling the options. I have no doubt Microsoft will do the same. I'm wiping my Windows partition and loading Steam OS or some variant and dual booting into some TBD Linux distro for development.

When I truly need Windows, I have an ARM VM in Parallels. Right now it gets used once a year at tax time.
by flowerthoughts | 2025-10-12 04:05:35+00:00
Yes. The argument will be that because it's expensive to police everyone, lawmakers will simply require anyone selling massmarket goods to do the policing instead.

If you're making a non-compliant device in your garage for you and your friends, the police might come. If you're trying to sell it broadly, the police will come, regardless of the user.

I'm for freedom of choice, but pushing regulations up the manufacturing stack is definitiely more efficient use of my tax money.
by mirawelner | 2025-10-12 04:06:49+00:00
I work in a lab which researches regenerative medicine and people often talk about how we are saving lives.

But at the end of the day, it’s not what we are doing that is pushing the needle, its projects like this make existing healthcare accessible for everybody. I want to get a PhD in something related to this at some point. You guys are so insanely cool.
by ROBLOX_MOMENTS | 2025-10-12 04:07:05+00:00
Yeah, it is just very humorous such that normally, all of us in the room are used to a specific kind of presentation, where they show metrics and why that's a good thing because all decisions MUST to be data-driven. In this particular case, it definitely "boosted productivity and was helpful" no Q&A, no data, meeting was over.

And then we didn't have enough desks, outlets, and internet was slow. Lmao.
by toast0 | 2025-10-12 04:07:50+00:00
> Why is having so many bands a bad thing? Demand for data is so much higher now you need (ideally) hundreds of MHz of spectrum in dense areas. You need some way to partition that up as you can't just have one huge static block of spectrum per auction.

Because different countries use different sets of bands. That was true for GSM too, but quad band phones were reasonably available. Many phones were at least tri band, so you would at least have half the bands if you imported a 'wrong region' tri-band.

But now, you'll have a real tough time with coverage in the US if you import a EU or JP phone.
by snowwrestler | 2025-10-12 04:09:13+00:00
I use AirBnB to book whole houses for trips, which are better for families who want to cook. I use it interchangeably with VRBO, which I’ve been using for many years, before AirBnB was founded in fact.

Short-term house rentals are not a new idea. Before VRBO and AirBnB—before websites in general—we would call up the local chamber of commerce where we were going and they would give us the phone numbers for local real estate firms that managed short term rentals. Then we would call them directly and book.

Those types of companies are still around, and often when I book through AirBnB or VRBO, that’s who the “host” is.
by skissane | 2025-10-12 04:12:18+00:00
In en-AU locale, I’d prefer AU$ or AUD too - because you can just never be sure what you are dealing with - my work pays for me to use a coworking space not far from my house, and the app we use shows the price in US dollars, and doesn’t even mark it as US$ or USD, just plain $, I’m expected to know what it means. I’ve seen hotel sites quote amazingly cheap deals for hotel rates in Australia, only to realise they were quoting me USD (without clearly marking it as such), despite the fact that I was searching for a hotel in Australia from within Australia. In today’s global economy, you can’t go wrong by always being explicit about which currency you are using.
by drshapeless | 2025-10-12 04:13:21+00:00
Blog post author here. I never expect my blog post to get this much attention. I was emotional when I wrote that blog because I had spent a couple weeks to rewrite a service for self use. And the service was almost completely migrated to datastar from htmx.

I was facing a situation where I either need to stuck with the beta, or paying a pro version, as I was using the replace-url function a lot.

I was emotionally feeling betrayed. I went to the datastar reddit thread to raise my doubt that whether there would be more features that I rely on in the free version would be stripped out and be put behind the paywall. I was fine to convert my service to purely free tier features, when my service is stable and usable, I was very willing to buy a pro license.

But you know what? The datastar author jumped out and stated two points. He said the release version of datastar is a full rewrite, if I am not paying, I could stay in beta or fork it. And in open source world, he owned me nothing. Very legit points.

However, the real reason behind that fuck you statement is that I was attacked by the datastar discord members multiple times. In one of the humiliating replies I got, that guy said some one in the discord server told them to show support to datastar. Instead of supporting, they just mocked me and called me a troll as if I was an obstacle to their potential success, multiple people, multiple times.

I noticed some comments in the thread said that I don't know how to use version control, or ignorant towards software license. Well, I do use version control and occasionally contribute to open source projects. I am a doctor, I may not be as skillful as you all, but I do know some basics in programming.
by ndiddy | 2025-10-12 04:14:00+00:00
The "OS" on the drive stands for "off-spec". As far as I understand, here's where they come from:

1. A large company (think cloud storage provider or something) wanting to build out storage infrastructure buys a large amount of drives from Seagate.

2. When the company receives the drives from Seagate, they randomly sample from the lot to make sure the drives are fully functional and meet specifications.

3. The company identifies issues from the sampled drives. These can range from dents/dings in the casing or torn labels to firmware or reliability issues.

4. The company returns the entire lot to Seagate as defective. Seagate now doesn't want anything to do with these drives, so they relabel them as "OS" with no Seagate branding and sell them as-is at a discount to drive resellers.

5. The drive resellers may or may not do further testing on the drives (you can probably tell by how much of a warranty a given reseller offers) before selling them onto people wanting cheap storage.
by millicor | 2025-10-12 04:14:14+00:00
Hey HN!

We built Millicor to solve a problem that we were experiencing:

Finding the information we need that is embedded somewhere in a sea of documents.

We found that existing platforms like Claude, ChatGPT and NotebookLM all fail to perform well when we increase the number of documents. It also became a real hassle to organise the files!

So we decided to experiment and found that organising your files into folders is the best way to be able to reference information (who knew!). Additionally we also designed a multi-agent system specifically created to:

1. Improve accuracy by reducing context length 2. Query optimisations 3. Add additional metadata for files and folders (this really helps in improving search accuracy and enriching output as well)

We're still in a _very_ early stage, but wanted to share our work and gather feedback as we continue to build and improve the platform. We're currently setting up a waitlist for a small group of alpha testers (beyond our friends and family!) to try it out and share their thoughts. Hope to see some of you there!