MurphyA/hacker-news huggingface dataset:
by nerdponx | 2025-10-16 17:02:05+00:00
I gave up on Firefox, sadly. I still use Thunderbird (which is apparently no longer part of Mozilla), but I couldn't deal with FF and Mozilla screwing around anymore.

I switched to Orion which has been working great for me. I'm happy to pay money for my browser and be confident that the money is actually being put towards maintaining and improving the browser.

I want Firefox to succeed, I just... can't justify it.

I wonder if they'd do better by charging $10 for a compiled binary and distributing it on Linux as an AppImage. I'd be happier to pay for that than send an unrestricted donation to the Mozilla foundation. Normally I frown on unrestricted donations, but something seems really off over there.
by just6979 | 2025-10-16 17:02:09+00:00
Because why bother if you're keeping the C? Part of the reason for moving to Go was safety by replacing the C, not just to move away from Python. I'd say the mistake was thinking Python programmers would enjoy moving to Go. I've done it, and it was not enjoyable. I wouldn't mind doing just the tight peformance things in Go instead of C... But using Go for the high-level things that Python is great at, and where the performance is not an issue, is just silly.
by JoelMcCracken | 2025-10-16 17:02:11+00:00
So, as an aside, I think consumer reports could do so much to embrace the digital era and access new generations of consumers.

My parents read it regularly, and I subscribed for a year or two about a decade ago and felt so strongly how it hadn’t seemed to change since I was a kid in 1990s. And as I’m deep in tech, I feel the lack of content and communication.
by phildougherty | 2025-10-16 17:02:43+00:00
Alexa skills are 3rd party add-ons/plugins. Want to control your hue lights? add the phillips hue skill. I think claude skills in an alexa world would be like having to seed alexa with a bunch of context for it to remember how to turn my lights on and off or it will randomly attempt a bunch of incorrect ways of doing it until it gets lucky.
by Isamu | 2025-10-16 17:02:53+00:00
Since I found this interesting I had to look this up in wikipedia:

>The call to the bar[1] is a legal term of art in most common law jurisdictions where persons must be qualified to be allowed to argue in court on behalf of another party and are then said to have been "called to the bar" or to have received "call to the bar". "The bar" is now used as a collective noun for barristers, but literally referred to the wooden barrier in old courtrooms, which separated the often crowded public area at the rear from the space near the judges reserved for those having business with the court. Barristers would sit or stand immediately behind it, facing the judge, and could use it as a table for their briefs.
by Jordan-117 | 2025-10-16 17:03:00+00:00
It was better when it has less narrative, tbh. Just surreal unsettling videos of manic toilet-heads busting into a restaurant or rolling down the street with Gmod characters doing weird shit in the background.

Last I checked, each new entry was just another boring "epic" clash between giant titans with ever-larger explosions that never fully resolve or go anywhere interesting.
by ljm | 2025-10-16 17:03:36+00:00
My running hypothesis on this is that AI is a sentient screenreader and the last thing you should be worrying about is CSS class names, IDs, data-testid attributes, DOM traversal, and all of these things that are essentially querying the 'internal state' of a page. Classes, IDs, data attributes, etc. aren't a public API and semantic elements, ARIA attributes, etc. are.

So, focus on WCAG compliance, following the spec as faithfully as you can. The style or presentation of something may change as part of a simple A/B test but the underlying purpose or behaviour would remain the same.
by gabriel | 2025-10-16 17:03:43+00:00
I would back it up a little bit and say that any EDR thing would be capable of observing the source of the functions that a program will run and detect outliers. It's a great program to write, everyone should give it a try! It can also be unexpectedly complicated to get all of the corner cases right and you'll drive yourself mad once you try to think of the ways your detection method can be circumvented.
by dredmorbius | 2025-10-16 17:03:43+00:00
On further reflection: I'd thought of raising the question of which situations cut/choose does work. Generally it seems to be where an allocation-division decision is being made, and the allocation is largely simultaneous with the division, with both parties having equal information as to value. Or so it seems to me, though I think the question's worth thinking about more thoroughly.

That's a subset of multi-party decisionmaking situations, though it's a useful one to keep in mind.
by bcrosby95 | 2025-10-16 17:04:30+00:00
C# isn't unique in that, and it also doesn't offer the tools required to help avoid having to dip into procedural code.

Here's things Clojure, for example, offers:

1. Structural sharing which makes you less likely to have to dig in to procedural code.

2. The transient function which takes an immutable data structure and makes it... not immutable... you can now do your procedural code, then switch back into immutability land with persistent!.

3. If the above fails, you can dip into Java.

So yeah, I vehemently disagree with C# being the best. I could kinda see it if you said F# (type safety), but C# itself? Uhhh.
by gpm | 2025-10-16 17:04:40+00:00
The thing is you aren't really asking about a "feature" of rust (as the word is used in the title of the thread), unless that feature is "the absence of data races" or "memory safety" which I think are both well defined terms† and which rust has. Rather you're asking how those features were implemented, and the answer is through a coherent design across all the different features of rust that maintains the properties.

As near as I can tell to give you the answer you're looking for I'd have to explain the majority of rust to you. How traits work, and auto traits, and unsafe trait impls, and ownership, and the borrow checker, and for it to make sense as a practical thing interior mutability, and then I could point you at the standard library concepts of Send and Sync which someone mentioned above and they would actually make sense, and then I could give some examples of how everything comes together to enable memory safe, efficient, and ergonomic, threading primitives.

But this would no longer be a discussion about a rust language feature, but a tutorial on rust in general. Because to properly understand how the primitives that allow rust to build safe abstractions work, you need to understand most of rust.

Send and Sync (mentioned up thread) while being useful search terms, are some of the last things in a reasonable rust curriculum, not the first. I could quickly explain them to someone who already knew rust, and hadn't used them (or threads) at all, because they're simple once you have the foundation of "how the rest of rust works". Skipping the foundation doesn't make sense.

† "Memory safety" was admittedly possibly popularized by rust, but is equivalent to "the absence of undefined behaviour" which should be understandable to any C programmer.
by gruez | 2025-10-16 17:04:48+00:00
>I'd like to have an app that estimates the cost of groceries, including the long term health effects of regular consumption, and interpreting early death as a cost rather than savings. For me I think ribeye would end up being cheaper than Doritos.

Someone who bothers to input everything they eat into an app (basically calorie counting) probably already has enough intuitive sense of what's "healthy" that they don't need an app that they should eat beef rather than doritos.
by akimbostrawman | 2025-10-16 17:05:23+00:00
>building useful features like tab groups

wow what an achievement. Vivaldi which has 1% of there budget had that feature for almost 10 years. Despite almost half a billion dollar budget almost all there good UI changes come years late being the last to add them for example profile management.

It is honestly embarrassing to compare Mozilla to companies like brave that actually created a private ecosystem without subsidization from there competitors.
by giardini | 2025-10-16 17:05:53+00:00
says "or found it weird I was bald."

You're bald! That explains everything! Why didn't you mention this earlier?

First off, shave your head. Now you're no longer bald and you're signaling that you are in control. Use your baldness to dominate instead of lurking.

Secondly, you seem to object to boomers, but boomers are the best thing that happened to you: boomer music, boomer drugs, boomer sex is the best! You know the boomer ethics so adopt them, take Boom to heart: become a boomer and use your baldness to pound it into your opponents!

"Boom, boom, boom

let's go back to my room,

So we can do it all night,

and you can make me feel alright!"

https://www.youtube.com/watch?v=xXMrDu7374Y
by hirvi74 | 2025-10-16 17:05:54+00:00
(Mods, I am sorry if this is getting off topic.)

The KKK was founded in Pulaski, TN, which is about an hour from where I was raised. It wasn't until July, 2021 that the bust of the founder of the KKK (Nathan Bedford Forrest) was removed from the state capitol building. It's now been relocated to the 'TN State Museum' which was magically opened mere days after the bust was removed.

I could provide countless more examples of things I have heard, read, and witnessed, but I am certain you do not need any more examples, and honestly, even thinking about it all really depresses me.
by artikae | 2025-10-16 17:06:37+00:00
A Gc<T> that can't give you a pointer inside seems almost unusable in the context of Rust. Pointers are not a narrow use case; references are pointers.

Rust APIs are largely built around references. If you were to put a Vec<T> (dynamic array) into a pointerless Gc<T>, you would be almost entirely unable to access its contents. The only way to access it would be swap it with an empty Vec, access it, then swap it back a-la Cell. You wouldn't even be able to clone the Vec without storing a dummy version in its place during the call.

https://doc.rust-lang.org/stable/std/cell/struct.Cell.html#m...
by screye | 2025-10-16 17:06:38+00:00
> as an excuse to justify layoffs and other activities that transfer wealth and power from employees to management and shareholders

Video game employees (programmers) are famously overworked, layoff prone and have little say in executive matters. I can't imagine how PE could make things worse.

The video game industry has been in an odd place for a while. The 2020s haven't produced many reliable AAA hits.
by close04 | 2025-10-16 17:06:45+00:00
I am talking about the 4 rules posted by GP above [0] from FSF’s definition of free software, after selectively removing the part that wasn’t aligned with their point, then calling that part “moot”. I was not talking about the content of the article. The comment thread starting at the link below will provide all the context.

[0] https://news.ycombinator.com/item?id=45604819
by vector_spaces | 2025-10-16 17:07:03+00:00
I hope that you recognize that your casual-outsider evaluation of the assortments of these stores is deeply flawed and not based on actual data. If you think about it even just a little bit, you'll recognize that it wouldn't make sense for a supermarket in one of the highest median income cities in the country to have assortment parity with a chain targeting cost conscious shoppers. The devil here is in the long-tail, which is definitionally less visible to you as a shopper, and in fact may not exist at all for certain retailers -- especially those targeting cost-conscious shoppers.
Show HN: Streaming Structured Output Is Still Broken
by chrissdot | 2025-10-16 17:07:05+00:00
Structured output has become a de facto expectation for LLM APIs, but streaming that structured output is still a mess. A big miss, streaming partial results in parallel can nearly double agent throughput.

OpenAI, Anthropic, and Gemini handle streaming structured responses, but each breaks developer expectations differently: missing parsed results, losing final token stats, or adding unnecessary boilerplate.
by mcherm | 2025-10-16 17:07:16+00:00
Yes. Just like C++ "const" is a type system construct that assumes all other code is C++ (or at least cooperates with the C++ code by not going around changing random bytes).

As far as I can tell, ANY guarantee provided by ANY language is "just a language construct" that fails if we assume there is other code executing which is ill-behaved.
by fujigawa | 2025-10-16 17:07:39+00:00
I chuckled at his indignance over how these things are legal and how easily you can buy them. Chinese will sell you anything to make a buck. It's just business. You can go on Amazon right now and buy a high power 1kW FM transmitter, drop shipped, and set up a flamethrower pirate radio station on a rooftop of your choosing. The cherry on top is they are likely super low quality with crazy spurious emissions.

Of course the FCC will probably be up your ass in half an hour if you tried it; the point is the equipment is readily available in a few clicks, no questions asked.

Don't get me started on the instantly-blind-yourself-and-everyone-else lasers you can buy on eBay (they'll sell you matching counterfeit laser goggles too).
by sarchertech | 2025-10-16 17:07:47+00:00
>Okay, I'm confused why you bring free software or the free software definition into this at all then if you're just picking and choosing what parts of the original statement/bulletin you care about and what parts you choose to disregard, on top of disregarding the original movement and organization founded at its inception.

1. It's important for people to understand how OSI co-opted the goodwill and some of the ideas from the Free Software movement.

2. I think they have some good ideas even if I don't agree with all of them.

>If you're hoping to rebrand source available software, why not call it something other than _free software_ if you want to do a rebranding? You could propose similarly internally consistent principles and attempt to cultivate a community. Call it 'fair source' or 'managed availability' or something. Refer to the 'freedoms' as rights, instead. You'd convince a much larger group and wouldn't have to pretend that principles for commercialization wasn't considered in 1985.

I'm just a guy with 3 kids under 5 and not enough time to run any kind of rebranding project. I'm just angry that whenever someone launches a project that is more free than proprietary software but that isn't OSI approved, 90% of the comments are about why it isn't free or isn't open source.

I could publish a new project on hacker news and call it "fair source" and then explain how fair source isn't free software, but it's like free software with an extra restriction.

The 5 freedoms:

-1: You can't distribute this software if your name ends in "ezos".

0-4 same as the rest.

I guarantee you 90% of the comments would be attacks on the license (even if -1 was something reasonable). And it would start off with negative goodwill. Most people haven't actually read the 4 freedoms or the OSD, most people just follow the zeitgeist and it says Open Source == good, everything else == bad.

I do not think that a group financed primarily by big tech should have this kind control on the goodwill doled out by the community. But they do. I think that the more people that understand that the better.
Show HN: CLI to Test Supabase RLS Policies
by rodrigotarca | 2025-10-16 17:08:01+00:00
I'm seeing how many vibe-coded apps using Supabase there are nowadays that don't even test their RLS policies and that's a pretty terrifying thought.

Half these apps could have their entire DB exposed to public and nobody would know until it's too late. Recently an app leaked 13k users' data because of broken RLS.

So I built a CLI to test RLS policies before prod:

- Introspects your DB schema - Simulates different roles (anon, authenticated, custom JWT claims) - Tries CRUD operations on every RLS-enabled table - Wraps everything in transactions with ROLLBACK (no actual data changes) - Generates snapshots you can diff in CI

It's not a substitute for proper security reviews (attackers will always find crafty exploits). But it catches the obvious messups before they leak user data.

https://github.com/Rodrigotari1/supashield

What's your RLS testing workflow? What edge cases am I missing?
by thewebguyd | 2025-10-16 17:08:38+00:00
Kind of what it sounds like to me.

> “Effectively, what the role does is offer assurance to the customers or potential customers of that organization that their data, their information, their technology, the infrastructure, the platform itself, can be trusted as those customers adopt it,”

Like, protecting your customer's data should be assumed and the default. That you would need what's effectively another PR executive to communicate that and "offer assurance" just sounds like marketing speak for "We are doing the bare minimum, but we need our customers to think we do more than we actually do to keep theri data safe."

Just sounds like the CISO's personal PR mouthpiece and like you said, someone else to take the fall when they get breached.
by Anamon | 2025-10-16 17:08:44+00:00
That sounds fine, but I wouldn't expect you'd still be at 2× to 3× then. Maybe closer to 1.2× to 1.3× (although studies seem to show it's more often actually 0.9×). Coding is already barely 10% of the work, the agents won't help much with the other parts, and now you have a whole load of additional things to check and potentially fix, which you didn't have to before because they're obvious to a human mind.
by pdonis | 2025-10-16 17:08:54+00:00
I'm not sure it's true that rich people, on average, consume such a small percentage of their income. Think of all the rich people who end up having to declare bankruptcy--because they've spent so much on consumption that they've used up all their riches.

It's true, though, that on average, rich people consume less of their income than poor people, because they save or invest a portion of it instead, simply because they can. That's a good thing. Our current tax system discourages people from saving and investing, and encourages them to consume. Then something bad happens and we wonder why there's nothing saved to tide us over.

Exempting basic necessities from sales tax is how you prevent it from putting too much of a burden on poor people; most of what they consume is going to be basic necessities (or at least it should be, if they're rational), so it wouldn't be taxed.
by eqvinox | 2025-10-16 17:09:12+00:00
> why people continue to misunderstand this befuddles me.

You might want to check whether your befuddlement is due to your own misunderstanding of the topic. How many switching regulators have you built? We aren't living in fixed AC transformer days anymore, even the shittiest PSU won't behave like you're making it out. The legally required PFC will already prevent it just by itself, before the main 400V DC/DC step-down even gets its hands on the power. And why are you even mentioning 3V/5V? Those rails only exist for compatibility, modern systems run almost entirely off the 12V rails; even SATA power connectors got their 3.3V (it's not 3V btw) pins spec'd away to reserved by now.
by fsflover | 2025-10-16 17:09:32+00:00
Discussion: https://news.ycombinator.com/item?id=45586339

And, again, no mentioning of the only phone running an FSF-endorsed OS, https://www.fsf.org/news/fsf-adds-pureos-to-list-of-endorsed....

Not even Mobian is mentioned, https://news.ycombinator.com/item?id=45607535, while Ubuntu Touch is. I can't get it.
by hunterpayne | 2025-10-16 17:09:40+00:00
Fun fact, the overhead for a DB query (not including the network latency) is about 250 microseconds (or 0.25ms). And a typical DB kernel can do at least 16MB/core second of throughput. So that 30ms query I would expect is scanning several GB of data to find its results. Try doing that yourself and your latency would probably grow into seconds. Systems programming is hard...

PS moving from stateful processing to something with a distributed cache is moving from RAM to network. That's at least a 10x drop off in throughput.
by AndrewStephens | 2025-10-16 17:10:22+00:00
As a site owner, the best thing you can do for your users is to serve all your resources from a server you control. Serving javascript (or any resource) from a CDN was never a great idea and is pointless these days with browser domain isolation, you might as well just copy any third party .js in your build process.

I wrote a coincidently related rant post last week that didn't set the front page of HN on fire so I won't bother linking to it but the TL/DR is that a whole range of supply chain attacks just go away if you host the files yourself. Each third party you force your users to request from is an attack vector you don't control.

I get what this proposal is trying to achieve but it seems over complex. I would hate to have to integrate this into my build process.
by lotsofpulp | 2025-10-16 17:10:30+00:00
>And we can't build a corporation with a goal more than two quarters out

Yet that is what all the corporations at the top of the market cap lists have done over the previous 30 years. You think Nvidia, Apple, Microsoft, Amazon, Alphabet, Meta, TSMC, and a multitude of others only have goals 2 quarters out?

Pharmaceutical businesses where the trials take 5 and 10+ years to bring a medicine to market don't have long term goals? Oil businesses that need a decade to build and cultivate an offshore field. There are so many other examples.
by danielscrubs | 2025-10-16 17:10:34+00:00
Insane stuff. The headline doesn’t do it justice.

” This student described getting a phone call from their country's chief negotiator who said, "I know you told me not to budge on anticircumvention, but the USTR tells me that if we don't give them this, they will block our agricultural exports. I'm sorry." Country by country, the world fell into line.”
by aw1621107 | 2025-10-16 17:10:59+00:00
Because given the work needed to actually get a feature into the standard I'd assume there's at least some demand motivating the addition.

I'd also be a bit hesitant about claiming that nobody is using said features. It's quite possible that the "new" feature is actually "just" a standardization of something that exists in practice. WG14 is hardly a stranger to that kind of thing, from what I understand; it wouldn't surprise me if something similar occurs for the Fortran/COBOL working groups as well.
by Imnimo | 2025-10-16 17:11:11+00:00
I feel like a danger with this sort of thing is that the capability of the system to use the right skill is limited by the little blurb you give about what the skill is for. Contrast with the way a human learns skills - as we gain experience with a skill, we get better at understanding when it's the right tool for the job. But Claude is always starting from ground zero and skimming your descriptions.