MurphyA/hacker-news huggingface dataset:
by westurner | 2025-10-31 17:30:02+00:00
Sigstore.dev supports revocation:

"Don’t Panic: A Playbook for Handling Account Compromise with Sigstore" (2022) https://blog.sigstore.dev/dont-panic-a-playbook-for-handling...

"Why you can’t use Sigstore without Sigstore" (2023) https://blog.sigstore.dev/why-you-cant-use-sigstore-without-... :

> Revocation in Sigstore. A recent post on this blog notes that signatures alone don’t tell you whether to trust an artifact; for that, you need a verification policy. This verification policy is a much more natural place to handle revocation than the identity layer; see Don’t Panic for an example. This allows us to avoid the scalability problems of global revocation lists (see CRLite for a discussion of these issues). The mantra here is revoke artifacts, not keys.

Artifact Attestation > Verifying an artifact attestation for binaries: https://docs.github.com/en/actions/how-tos/secure-your-work/... :

gh attestation verify PATH/TO/YOUR/BUILD/ARTIFACT-BINARY -R orgname/reponame

If it is not possible to retract/revoke releases then, there again, the installer MUST verify against a signed list of revoked releases
by dcminter | 2025-10-31 17:30:13+00:00
I guess FTP was the extinction event for Kermit ... and didn't Kermit itself kill off the various [XYZ]Modem protocols?

I too recall the reversed addresses. The transition from X29 to Internet fell in the middle of my university¹ education... we went from mostly Vax/VMS+JANET when I started to mostly Linux+Internet when I left (and the web had suddenly appeared too). There was an awkward bit in the middle where I was super keen to be on the internet (though my main interest was Usenet) and the nsfnet relay via PAD on the Vax was the only available intermediary. It's mildly interesting that the sole system I could connect to in this way to browse Usenet was Nyx which rather amazingly is still up. I assume they deleted my account at some point in the last 30 years though. It was unbearably slow anyway, so I gave up quite swiftly.

Fun times dimly remembered.

---

¹Actually a Poly, uk.ac.pow when I arrived, but a Uni, glam.ac.uk when I left. It's changed name once or twice since then as well!
by treis | 2025-10-31 17:30:25+00:00
It's not windows mobile because OpenAI was first and is the clear leader in the market. Windows mobile was late to the party and missed their window.

Palm is closer but it's a different world. It's established that Internet advertising companies are worth trillions. It's only in retrospect that what Palm could have been is obvious.

Barring something very unexpected OpenAI is coming out on top. They're prepaying for a good 5-10 years of compute. That means their inference and training for that time are "free" because they've been paid for. They're going to be able to bury their competition in money or buy them out.
by bigstrat2003 | 2025-10-31 17:30:41+00:00
> Before the mid sixties torn clothing would signify economic disadvantage

It still does. Absolutely insane to me that people are willing to put on the appearance of being poor, and they think it's cool. You will never catch me wearing ripped jeans, but maybe that's because I grew up poor enough that I had to wear ripped jeans when we couldn't afford new ones.
by ASalazarMX | 2025-10-31 17:31:59+00:00
I was really excited for it, because I didn't know about it, but seems to scratch every terminal itch I've got.

Except it didn't run on my Windows VDI because "The OpenGL implementation is too old to work with glium". There's a config workaround here https://github.com/wezterm/wezterm/issues/1813 though. I don't know if this setting, or the implementation per se, makes rendering slow, but it's unusable for me. I can't wait a couple of seconds for every keystroke inside mc, rendering text is supposed to be lightning fast.
by bigstrat2003 | 2025-10-31 17:32:29+00:00
That's so wild. Why on earth would anyone want worse eyes? It's a complete pain in the ass. Glasses make people look uglier, you have to keep track of them, they make stuff like 3D movies a pain (cause the glasses don't fit especially well over your normal glasses). I have had glasses since I was a kid and I would love to have been born with healthy eyesight.
by jauntywundrkind | 2025-10-31 17:32:53+00:00
Yeah, whether AMD is willing to go after some market low end has long been TBD. Intel's N100/N97/N150 is everywhere & very affordable, seemingly, based off some of the system prices. AMD doesn't have anything remotely like it.

The chip here is an interesting mix. Fast ddr5-9600! But less GPU CU's than most APUs: 4 down from 6. But if it comes with the other fixings like a good video engine & AMD's very good drivers it could be a real win.

Also a little hopeful that AMD rebadging it's Zen 1 and Zen 2 chips again might possible open up some decent low end space, but Sound Wave with more modern solutions would be a very nice to have power efficient low end.
by agentcoops | 2025-10-31 17:33:01+00:00
The question of origin is still pretty unclear. There seems to be a tension between things that are more developmental (if you have mental imagery, for example, you seem to be able to get better or worse) and those that are likely genetic (research does suggest a connection between aphantasia and autism spectrum etc).

As someone said below, I suggested figuring it out early is best because of a lot of things that just work differently, especially in learning. There seems to be a real selection bias that most people who learned they were aphantasic reading a New Yorker article, say, by definition figured out how to make it work somewhere along the line. Aphantasia isn’t at all a learning disability in a real sense, but you definitely have to approach things differently.
by angiolillo | 2025-10-31 17:34:08+00:00
Touchscreen scrolling has been in consumer products since at least the early 1980s and inertial scrolling on a touchscreen has been around since at least the early 1990s with Sun's Star7[1].

(And I wouldn't be surprised if there are academic papers that predate the consumer products by a decade or more.)

[1] https://www.youtube.com/watch?v=1CsTH9S79qI&t=266s
by dragonwriter | 2025-10-31 17:34:15+00:00
> By the way, a large percentage of the deaths on oct 7 was due to the hasbara directive, in other words, done by the israelis themselves to their own.

Without taking a position in the underlying claim, which I am not interested in debating either way, I think you are conflating the Hannibal directive [0] and its alleged invocation on October 7 with the practice of hasbara [1] here.

[0] https://en.wikipedia.org/wiki/Hannibal_Directive

[1] https://en.wikipedia.org/wiki/Hasbara
by dingnuts | 2025-10-31 17:34:45+00:00
if you think a next token predictor that has no internal world and stops executing when you stop giving it input and stops using the first person forever if instructed has dignity I strongly suggest you get professional health, and I'm serious, because that is medically significant psychosis.

the fact that you refer to a "companion community" is deeply concerning. this is like telling children their imaginary friends are actually real. or NPCs in a video game.

encouraging people to grow parasocial relationships with these sycophantic machines is actively harmful and dangerous. they are not conscious. they are mirrors.

if you consider yourself a part of this community please, and I mean this very seriously, get help
by lotsofpulp | 2025-10-31 17:34:46+00:00
In the US, that might be true if you don't have kids, and/or don't aim to buy a home in a major metro. Otherwise, a lot of those people are going to be working multiple jobs, or relying on a higher earning spouse. Especially retail and restaurant workers. Most won't even get subsidized health insurance from their employer, and if they do, they are not going to be able to afford the deductibles with their income from one 40 hour per week job.
by uyzstvqs | 2025-10-31 17:34:49+00:00
This has been happening for many years and they're not AI-related scrapers. These are attackers who port-scan as much IPs as possible, and attempt basic attacks on whatever they find. In your case they found Gitea, and started scraping your git commits likely in search of leaked credentials. They'll also look for Wordpress sites and try common weak credentials on wp-admin.

They're very easy to stop through honeypots and basic checks. You don't need Cloudflare. Anubis should work, but is probably more powerful than you actually need for these bots.
by wiether | 2025-10-31 17:35:01+00:00
I don't understand any of this.

Probably because of their proximity with the USA, the french-speaking community in Québec is far more attached to using French than actual French people. That's why in France we use "Stop" and not "Arrêt".

On the other hand, ".gouv.fr" is something used in France. gouv[ernement] is completely different than go[u]v[ernement] Not only because of its pronunciation, but also because it's not a simple shortening of the original word.

We never use "aso" to talk about an "association", even though it would shorten it even more, because it just doesn't make sense. You can remove the ending of a word, creating a kind of "prefix", bug it you remove multiple part of a word it just become something different.
by johnisgood | 2025-10-31 17:35:08+00:00
What setup would you (or other people) recommend for a local model, and which model, if I want something like Claude Sonnet 4.5 (or actually, earlier versions, which seemed to be better)?

Anyone could chime in! I just want to have working local model that is at least as good as Sonnet 4.5, or 3.x.
by grayhatter | 2025-10-31 17:35:45+00:00
> So you were saying that my own ways of upgrading or improving my code are ruled out, because the only way is via rewriting it for every new language release, right? That's the kind if religious statement I am against.

No, you misunderstood the idea I was trying to explain. Skill issue, almost certainly more mine than anybody else, but I try very hard to ask more questions than throw around judgements.

In the context of the question "Am I wrong that because things will change soon, today is a bad day to learn zig" The answer is no, because all the code you wrote, and all the stuff you learned about zig, will still apply when 0.16 is released. There will be no meaningful changes in 0.16 that invalidate everything from 0.15.

do note; I'm omitting details like needing to rename ArrayList to ArrayListManaged (an example change from the previous release) Because I'm trying to practice giving more attention to the pragmatics, over the semantics, because there's more opportunity for growth there contrasted with online pedantry.

So given the most significant change between 0.15.2 and 0.16.0 Will be a new, better API, that I believe from experience (e.g. the previous Readed/Writer change that I originally was skeptical about) will result in my code becoming better.

Thus, the idea is: If you don't enjoy constantly improving code, you won't enjoy Zig throughout it's 0.x cycle. The rate of improvement is very rapid. But as someone who enjoys the pride from committing a change where I see the new code as objectively better. I enjoy improving my code, so this isn't a reason not to, please note, I made my original comment with "In My Opinion". I could probably invent other arguments I could coerce into this context, but that feels disingenuous.

Thus I stand behind my assertion, given the changes you'll likely see, you don't have to upgrade your code, the raw API will still exist, but why wouldn't you? (please keep in mind the pedantry I'm intentionally ignoring as not interesting, I'm not afraid of using sed -i, or editor macros)

> Where is the room for exchanging the views and experiences if statements are contradicting the facts?

how about: This grayhatter fellow seems to be lacking the perspective of reality that I feel is obvious, I should ask why he's ignoring it, omitting it, or ignorant to it. Perhaps he knows something I don't and is bad at explaining it.

vs

I disagree, so I'll instead make a driveby judgement and call him a zealot, instead of being curious.

> Well I called it a zealotry not as an insult but to redirect your attention to how this style of expression is seen by others.

How'd that work? Because I thought you were just trying to be an asshole. For the record, I still don't believe this, it feels much more likely to me this is you trying to retcon an unkind comment you made casually without much thought, rather than taking ownership of the regret over poor communication. Roles reversed, would you believe I meant to encourage exchanging views had I called you a zealot?
by nucleardog | 2025-10-31 17:35:52+00:00
> If they made it easy to hold USD and/or forex/fees on international card charges were reasonable, Wise wouldn't be needed in most cases.

Yeah, if the banks could provide a service similar to Wise I'd happily use a bank.

My bank wanted ~$800/mo in foreign exchange fees for what I'm doing. Wise charges me ~$100/mo. That's, what, 700% more fees? I'm saving $8.5k/yr.

Even if Wise imploded tomorrow and I lost the cash I have in there I'm pretty sure after this long I'm still ahead versus having used my bank all along.

And there are a lot of value-adds on top.

I can get a Visa card that lets me pay directly in the foreign currency instead of paying the exchange fee twice. This was a whole separate expensive/specialty product from my bank.

I can send electronic transfers (through Canada's Interac e-Transfer service) that exceed what a local bank will provide even to my business account and completely avoid the need for additional services/hacks/fees/etc. This is, apparently, "impossible and not supported by Interac" according to multiple banks I've talked to, the business rep, etc.

Long story short... I agree. Wise only exists because banks are kinda terrible at this. If the banks sucked less, few people would bother with the friction of the additional account.
by mlissner | 2025-10-31 17:37:15+00:00
OK, this is really neat: - S3 is really cheap static storage for files. - DuckDB is a database that uses S3 for its storage. - WASM lets you run binary (non-JS) code in your browser. - DuckDB-Wasm allows you to run a database in your browser.

Put all of that together, and you get a website that queries S3 with no backend at all. Amazing.
by DrScientist | 2025-10-31 17:37:31+00:00
I think you missed the point. I understand that if you writing a simple function with an expected interface/behaviour then that's all you need to understand. Note this isn't something unique to a functional approach.

However, somebody needs to know how the entire program works - so my question was where does that application state live in a purely functional world of immumutables?

Does it disappear into the call stack?
by scosman | 2025-10-31 17:37:39+00:00
Makes sense that you'd run locally then.

But really no host you trust to not keep data? Big tech with no-log guarantees and contractual liability? Companies with no-log guarantees and clear inference business model to protect like Together/Fireworks? Motives seem aligned.

I'd run locally if I could without compromise. But the gap from GLM 4.5 Air to GLM 4.6 is huge for productivity.
by jtuple | 2025-10-31 17:38:06+00:00
I've done a few all-nighters in my 30s and 40s, and they generally feel the same as my 20s. Still get that clear headed, high focus second wind around 4am that carries through until noon or so.

But, I definitely crash harder than I did in my 20s and need longer to recover after. In my 20s, would be fine if the next night was a normal one, now it takes multiple days.

It's definitely something I try to avoid at this age, as opposed to just being standard procedure back in college.
by fm2606 | 2025-10-31 17:38:14+00:00
gpt-oss-120b is amazing. I created a RAG agent to hold most of GCP documentation (separate download, parsing, chunking, etc). ChatGPT finished a 50 question quiz in 6 min with a score of 46 / 50. gpt-oss-120b took over an hour but got 47 / 50. All the other local LLMs I tried were small and performed way worse, like less than 50% correct.

I ran this on an i7 with 64gb of RAM and an old nvidia card with 8g of vram.

EDIT: Forgot to say what the RAG system was doing which was answering a 50 question multiple choice test about GCP and cloud engineering.
by mentalgear | 2025-10-31 17:38:19+00:00
Why would ANY global business still rely on U.S. Tech? The U.S. government, through their executive orders and dissolving of the separations of powers, has demonstrated its ability to unilaterally disrupt or shut down private technology services at will. How can any business justify depending on U.S.-based tech infrastructure when its access could vanish overnight on a political whim by an unstable president?

If there is no rule of law, capital, talent and trust are flowing out of that country - for good reason.
by arionmiles | 2025-10-31 17:38:37+00:00
As I was reading through this, I came to the part that mentions the cathode-ray tube amusement device and the words instantly unlocked a long forgotten memory I had as a child reading DK illustrated books on science and tech (I can't recall what the book was called) and it's where I learnt about it being the first video game ever.

Only tangentially related to this article but it took me back!
by giovannibonetti | 2025-10-31 17:38:50+00:00
> Soon we'll have shiitake replacing transistors in our airplane and spacecraft computers, while sitting and eating ramen on the vehicles themselves. The future is shaping up to be interesting.

By the way, some people say eating meat is not going to be sustainable as more and more people become able to afford it, and fungi are a great option for providing the equivalent protein intake.
by scosman | 2025-10-31 17:40:04+00:00
Nothing open is quite as good as Sonnet 4.5 and Codex 5. GLM 4.6, MiniMax M2, Deepseek v3.2, Kimi K2 and Qwen Coder 3 are close. But those are hundreds of billions of parameters, so running locally is very very expensive.
by tr1ll10nb1ll | 2025-10-31 17:40:59+00:00
Recently talked to the founder of wavtool (acquihired by Suno which probably accelerated their work on Studio) and from my understanding, their overarching goal is to reduce to the time from concept to actual production. faster workflows, in other words.

I produce music as well on the side and I can assure you things like making beatpacks, finding the exact sound are non-trivial at times and a unified interface that lets me go fast asf without losing expression is vital.

I'm making my OSS version of this (faster than ffmpeg.wasm tho) called WAV0 - github.com/fluid-tools/wav0
by rvz | 2025-10-31 17:40:59+00:00
> I'm starting to think offshoring is better for America.

Except you are offshoring for less than the "Best and Brightest" that can be done in the US, especially at Amazon.

In fact, the most unqualified of the bottom of the barrel are being sought out because it is cheap. Not for actual skills and 'talent'.

> Because house prices are unaffordable. Should a simple house really be $2 million ?

Given that everyone believes that their house will keep going up leads me to think that thanks to AI, we are certainly going to have a 1929 style flash crash in house prices with less jobs when AI companies start declaring "AGI".
by IAmBroom | 2025-10-31 17:41:24+00:00
For whatever reason, (in the US) mouthwash contains far less fluoride than toothpaste.

So, mouthwash before toothpaste. Or do as I do, and use mouthwash intermittently when in the bathroom, to boost the time there is fresh fluoride inhibiting bacteria on my teeth and gums.

Most importantly, don't rinse after either - same idea.
by danaris | 2025-10-31 17:42:16+00:00
Please note the distinction between "govern" and "rule."

The Democratic Party is not seeking to rule. They are seeking to have the government do its damn job.

The Republican Party is seeking to rule, but not govern: that is, they get to be in charge, but they take no responsibility for anything that happens under their rule. (Most especially Trump and his administration; Congressional Republicans are a bit less of the former and a lot more of the latter.)
by mostlysimilar | 2025-10-31 17:42:18+00:00
The article mentions using this as a means of detecting bots, not as a complaint that it's abusive.

EDIT: I was chastised, here's the original text of my comment: Did you read the article or just the title? They aren't claiming it's abusive. They're saying it's a viable signal to detect and ban bots.
by chenxiaolong | 2025-10-31 17:42:23+00:00
I wrote https://github.com/chenxiaolong/MSD for exactly that. It's a small wrapper around the Linux kernel's mass storage emulation support (CONFIG_USB_CONFIGFS_MASS_STORAGE). It can emulate a read-only optical drive, a readable disk, or a writable disk.

It is compatible with both older devices that configure USB via init scripts and newer devices that use Android's USB gadget HAL, but it does require Android 11+.
by ssl-3 | 2025-10-31 17:42:39+00:00
I don't think they're scared at all.

Instead, I think that crash-and-burn, and then blame the other guy, was the plan all along.

Deflecting all blame towards the other guy has been the standard practice for at least multiple decades now. It's not something that is kept in the pocket and used for special occasions; that play has instead been a constant in US national politics for a rather long time now.

The only new part with this administration is actively throwing monkey wrenches into the works and then acting all surprised when things break, or just failing to admit that they've broken a thing. (But they're not stupid; they knew that doing this would break stuff.)
by thih9 | 2025-10-31 17:42:43+00:00
Sure but overtime in enterprise is paid. In a startup you might get some worthless equity.

Also, in startups these things still happen more often, the culture normalizes unpaid overtime, unused PTO, etc. E.g.:

> While overtime is a reality in both startups and large corporations, the difference lies in the motivation behind it. In startups, work goes beyond traditional hours, not out of obligation, but from a genuine passion and commitment to achieving shared goals.

source: https://www.sdsolutions.tech/post/what-is-a-startup-culture
by ceejayoz | 2025-10-31 17:42:51+00:00
Yes. People hate this fact, because it feels very counter-intuitive, but 01 02 03 04 05 06 and 04 24 49 60 65 01 are equally likely.

You need more than one data point to determine if something screwy is happening. (And, again, the available set of interstellar objects is both very small (n=3) and incredibly biased towards very close ones.)
by barbazoo | 2025-10-31 17:42:52+00:00
> Fire TV players are repeatedly offered on the internet with piracy apps that are supposed to enable free access to IPTV or VoD content.

They’re so close to getting it. So close. They almost understand that this is a response to a completely unusable, expensive and user shitty experience.

Build something that integrates all streaming providers and many people will already stop pirating. But even then, people are still expected to pay rent to n different streaming companies. It just doesn’t work. They’re being too greedy.
by Ericson2314 | 2025-10-31 17:43:18+00:00
I think Eelco has in mind a separate thing that would still be a store object field. But IMO we should not do that since derives are unique, and we should instead use the "build trace" instead, which properly handles that.

As Martin Schwaighofer has discussed, it is fine and in fact good for build traces entries to have arbitrary meta data, so the "claims" being cryptographically signed are more precise. (This is good for auditing, and if something looks suspicious, having full accountability.)

So on that grounds, if eelco would like to include some "this came from this flake" information as informal metadata. (formally the key must still the resolved derivation.) That is fine with me.

---

As I linked in my other reply, see my fast-growing https://github.com/NixOS/nix/pull/14408 docs PR where I try to formally nail all this stuff down for the first time.