MurphyA/hacker-news huggingface dataset:
by ploxiln | 2025-10-17 17:54:42+00:00
> I am a consumer who is concerned about evil maid attacks

This is seriously the least likely way for you to be hacked. Much more likely is that an auto-update is downloaded and run from a hacked server, or you sometimes use pip/npm/etc to install dependencies for some software project and get malware that way, or you get tricked into opening a zipped document in an email that ends up having executable code because industry-standard doc viewers and OSes try to be too smart ...

> Secure boot never stopped me from doing anything I wanted with my hardware.

But, you may have done a lot of things that it should have stopped you from doing. For 5 to 10 years a bunch of utilites for monitoring temperatures and fan speeds and controlling RGB lighting etc have used the signed "winring0" driver to be able to poke arbitrary hardware registers of various chips over various low-level busses (i2c etc), just a couple months ago this "winring0" driver was blacklisted, identified as malware, and quarantined by Windows Defender. There's other solutions that these tools have shifted to, like "PawnIO" and custom signed drivers.

On the topic of Framework, you can use "ectool" to control fan behavior and charging behavior etc of the environmental controller chip, but for many years you had to disable secure-boot for this thing to be able to poke that chip. About a year ago I recall a forum conversation where someone was intent on porting this tool to use winring0 on windows so that they did not have to "endanger" their system by disabling secure-boot. I really didn't think there was any point, because if winring0 lets you bypass protections that secure-boot relies on, it's just a big charade.

Many signed third-party windows drivers have been found vulnerable to enabling arbitrary memory poking somehow, which theoretically lets you bypass any protections that secure-boot intends to provide. They eventually get updated and old versions blacklisted, but there's always a bunch and there's always more. And remember Logo-Fail? Letting people update the boot logo, without re-signing with their own key loaded into their system?

And if we look at the other discoveries by Eclypsium, the theme here is debug and repair tools. Do you want debug and repair tools to be allowed without disabling secure-boot?

It turns out that lots of people, maybe most people, expect to be able to do things with their laptop, which secure-boot really shouldn't allow. For practical reasons we tend to just go ahead and get that signed with some Microsoft key and allow it. There's a real theater to thinking secure-boot is super important and you're super-secure, while expecting and depending on functionality which really means that secure-boot has been compromised in 100 different ways. I just turn it off, it just makes things more complicated.
by brendanmc6 | 2025-10-17 17:54:46+00:00
I've abandoned Next.js and React for Elixir / Phoenix. I am able to build a perfectly pleasant user experience with just a sprinkle of vanilla JS via Phoenix hooks.

The fact that I have been able to build a multi-user collaborative editor experience without a single additional dependency is incredible. I previously worked for a well-established and well-funded React team who had this feature on their roadmap for half a decade but still find it too daunting to implement.

Phoenix was a great reminder that a lot of the "frontend engineering" we find ourselves doing as React developers just isn't necessary with the right backend. It's HORRIFIC to look back at all the yakshaving I've done in my career already. Wrangling types (GraphQL, codegen libraries), wrangling queries and data-fetching (react-query, SWR, server components), fiddling with middleware (serverless functions, getStaticProps, CDNs). I've seen teams outright abandon testing because the hours they invested just weren't catching any of the bugs that mattered.

I'm not doing any of that anymore. I'm spending that time refining the core data model, improving test coverage, thinking about go-to-market and making money.

Phoenix may not be a good choice if your product has reached that level of maturity and product-market fit where you really should care about "microinteractions", fine-tuned animations, or advanced use-cases for an SPA like offline support and highly-optimistic UI. But I would argue that even mature products don't truly need these things. Just look at the GitHub UI. I've spent a truly astronomical number of hours in that UI and never wished I had WYSIWYG text editing, or animated skeleton UIs, or the dozen other things that the React community tells us we need.
by vonneumannstan | 2025-10-17 17:54:46+00:00
>If anything, the prices have reflected less than 20% of Capex projections, so the market clearly thinks OpenAI / Stargate / FAANG's capex plans are BS.

I'd say if anything the market is massively underestimating the scale of their capex plans. These things are using as much electricity as small cities. They are well past breaking ground, the buildings are going up as we speak.

https://www.datacenterdynamics.com/en/news/openai-and-oracle...

https://x.com/sama/status/1947640330318156074/photo/1

There are dozens of these planned.
by corbet | 2025-10-17 17:54:58+00:00
We do try to spell things out and/or link them in LWN articles to make the context available, but some things we just have to assume.

Additionally, spelling out "Berkeley Packet Filter" is not going to help any readers here; BPF is far removed from the days when its sole job was filtering packets, and that name will not tell readers anything about why BPF is important in the Linux kernel.
by DiogenesKynikos | 2025-10-17 17:55:04+00:00
Do you think it's reasonable to support someone who tried to strip tens of millions of Americans of their citizenship by executive order, in blatant violation of the 14th Amendment?

How about supporting someone who tried to overturn the results of the 2020 Presidential election by every means at his disposal?

This is actually a clear case where you have to take a stand. "Well, I like some other things he's done" is not a valid answer here.
by lesuorac | 2025-10-17 17:55:06+00:00
> For me personally, I feel like advertising is directly at odds with quality journalism.

I think we've seen so many useless ads that this is effectively true but it really doesn't need to be.

Think about say Golf magazine. Is the average reader going to say, why are there advertisements for ball finding glasses in there? They'll probably be annoyed when every copy has one but to see various gadgets that could be helpful in your hobby is nice. Especially because they explain why you might want them and often how they work.

Then think about a TV advertisement. Some guy has a grill and stuff starts flying on screen and eventually they sip from a can of Bud Light. If I drink Bud Light is the entire neighbor going to show up in my backyard? There's really no information gained here except that a liquid product called Bud Light exists and that I should "drink responsibility".

The concept of advertising is useful and should be desirable however the current way it's done is often neither. There's a million things out there and the only way to find them out is by being shown them.
by dghlsakjg | 2025-10-17 17:55:09+00:00
Tesla, Honda, Nissan, Chevy, Fiat and Volkswagen have all produced cars with resistive heat in the past decade (not an exhaustive list, just a list that I could find on the first page of search results). So no, not an exclusively American thing.

Heat pumps are expensive, complex, prone to warranty claims, and subject to additional regulatory control (refrigerants). Resistive heating is cheap and simple.

I'm guessing that the development costs for a heat pump that is good enough for automotive use is well into 8 figures, and would probably take at least a year to fully test.

Given all those constraints, it makes a tremendous amount of sense that many cars were built with resistive heating.
by thewebguyd | 2025-10-17 17:55:15+00:00
That's what it seems like.

Instead of getting court orders and ordering ISPs to block the sites, the UK is pushing off the responsibility for age verification onto the companies/site owners whether they are actually under UK jurisdiction or not.

Because if instead the UK just managed it internally, and started ordering ISPs to block, they'd be criticized foor being like China, and the citizens would start placing their blame on the government instead of the private companies that are pulling out of the market.
by brailsafe | 2025-10-17 17:56:02+00:00
You build your own framework in some sense, it's a good learning exercise. Modern component frameworks can be anywhere from highly abstract to relatively light weight. If you're mainly using something like Vue, you just need to figure out where and when to update the dom, where to store data temporarily, etc..

Things get unwieldy at a certain scale when you don't have something like Typescript regardless of whether you have a framework, but you could start by building up small bits of the frontend stack from scratch. I learned how to do a bunch of manual raw js stuff from scratch originally, then did some professional work with YUI at a huge scale which was probably as close to an event driven frontend system as you can get. Start by figuring out how to listen for url changes, make a network request library from scratch, store data somewhere.

Imo one of the beautiful things we now get along with frameworks is a host of independent build tools that make the feedback loop of testing changes nearly instant and loosely coupled from your code.
by LeifCarrotson | 2025-10-17 17:56:16+00:00
I'm in the same boat, or was until I finally caved last year and got my wife a 5 year old vehicle, everything else has had >150k miles and >10 years.

I will say that my '03 Pontiac Vibe GT, at 280,000 miles, no longer has all the horses it did when it was younger. There's still a kick from 6000 to 8200 RPM, but I'm increasingly reluctant to hit that redline once a month to "keep it fresh" like I used to. The gradual compression loss and increased leak-down rate aren't that bad, but it might be 25% fewer horses, I guess. Man, I love that car and that engine. I ought to get it a new set of rings, get the cylinders bored out smooth, and give it fresh bearings. Sadly, the rust that's appearing on the body like a cancer probably makes that not worthwhile...

The good news for electrics is that those older motors will remain almost exactly as powerful as they day when they were new for decades.

Obviously, the fuel tank is still the same size it's always been, but range is not as much of a concern on a gas vehicle because gas stations are everywhere and you can fill up rapidly.

I personally hope that this becomes less of a concern as charger density improves year over year - in particular, as EVs become ubiquitous, landlords will start including L2 chargers in apartment parking complexes. Once everyone can charge in a garage overnight, range anxiety is hugely less important.
by lemonwaterlime | 2025-10-17 17:57:26+00:00
First, I decide if I think the app will have lots of client-side interaction. As a shorthand, the question is “Does my idea seem like a spreadsheet, Google Maps, or a video game with lots of interactive clicking?”

If the answer to that question is “No”, then I’m not conceptualizing a SPA and don’t need a framework.

If the answer is “Yes”, I’d ask where I think that interaction will manifest in the experience and if I can isolate it.

If I am not looking at a SPA use-case, then my focus is on using vanilla HTML and Modern CSS with a tiny bit of javascript (as a scripting language versus as a programming language [1]). Then the remainder of the focus is on data modeling (CRUD), auth flows, and business logic development (what the application will do).

Beyond vanilla HTML, Modern CSS, and a tiny amount of javascript, if I need further client-side interactivity, I would consider something like htmx.

If I need interactivity beyond that, then we’re into SPA territory, but at this point the requirements and application have evolved to that point since we initially said we weren’t building that kind of thing.

Overall, the idea is to progressively iterate on the application, keeping the architecture and dependencies reigned in and aligned with the core objectives.

[1] JavaScript as scripting vs programming language: what I mean by this is JavaScript as a language with many warts is not so bad if its scope is kept small. I believe the issues with JavaScript arise when it is pushed to do too much. This then leads to needing to use Typescript as a matter of pragmatism. I aim to never get to the point of using so much JavaScript that I then need Typescript. I would say using it as a scripting language (to fill in gaps that Modern CSS and HTML cannot handle today) greatly minimizes the need for this progression.
by cestith | 2025-10-17 17:57:46+00:00
I’m not sure I agree with all the points made in the article. They are written and presented well enough, but it’s woefully incomplete to declare a single choice for all instances.

They chose only a handful of languages against which to compare, for one. Picking your targets based on the arguments you want to make is kind of disingenuous. Those are pretty popular but Cue, KCL, XML, XSLT, RCL, Dhall, ELCL, LTSV, Hocon, CCL,HCL, and UCL among others that all have their own communities and their own sites talking about their benefits for configuration and sometimes also for data interchange.

There’s no discussion about how much configuration your project needs and whether objects in your configuration are a benefit.

There’s nothing about what the other tools in your stack already use. Often it’s simpler to stick to as few formats as possible for a single stack.

I think “the only choice” is a pretty big claim given these drawbacks, but it’s a pretty informative article for what it covers.
by galangalalgol | 2025-10-17 17:57:53+00:00
This is the key insight I believe. It is inherently unpredictable. There are species that pass the mirror test with a far fewer equivalent number of parameters than large models are using already. Carmack has said something to the effect that about 10ksloc would glue the right existing achictectures together in the right way to make agi, but that it might take decades to stumble on that way, or someone might find it this afternoon.
by sudo_gopnik | 2025-10-17 17:57:55+00:00
Historically - it's actually NOT normal. Link and quote below that examines this with graphs but, the crux is that we have accepted higher inflation in order to achieve stable inflation that is predictable.

"For the pre-Fed period (1790-1913), the average annual inflation was 0.4 percent with a coefficient of variation of 13.2. During the period 1941-2016, these figures changed to 3.5 percent and 0.8, respectively. If we look at the post-Volcker era (1988-2016), annual inflation was 2.2 percent on average with a coefficient of variation of 0.4." -

Source: https://www.stlouisfed.org/publications/regional-economist/s...

Also recommend Debt: The First 5000 Years (David Graeber) and Capital in the Twenty-First Century (Thomas Piketty) which cover this and more on how current concepts of finance and capital post-1914 are incredibly different from the majority of human civilization.

I think a broader historical/anthropological approach is helpful here to understand why those tradeoffs were made.
by jacobr1 | 2025-10-17 17:58:11+00:00
It is a focus, data, and benchmarking problem. If someone comes up with good benchmarks, which means having a good dataset, and gets some publicility around, they can attract the frontier labs attention to focus training and optimization effort on making the models better for that benchmark. This is how most the capabilities we have today have become useful. Maybe there is some emergent initial detection of utility, but the refinement comes from labs beating others on the benchmarks. So we need a slideshow benchmark and I think we'd see rapid improvement. LLMs are actually ok at a building html decks, not great, but ok. Enough so that if we there was some good objective criteria to tune things toward I think the last-mile kinks would get worked out (formats, object/text overlaps). the raw content is mainly a function of the core intelligence of model, so that wouldn't be impacted (if you get get it to build a good bullet-point markdown of you presentation today it would be just a good as a prezo, but maybe not as visually compelling as you like. Also this might need to be an agentic benchmark to allow for both text and image creation and other considerations like data sourcing. Which is why everyone doing this ends up building their own mini framework.

A ton of the reinforcement type training work really just aligning the vague commands a user would give to the same capability a model would produce with a much more flushed out prompt.
by kstrauser | 2025-10-17 17:58:16+00:00
That's different in that it prosecutes citizens of those countries for things done outside their borders, not unrelated people doing things elsewhere.

America will prosecute Americans for doing certain things that are illegal inside America outside its borders. As another example, if you take a boat to international waters and kill someone on it, you're going to get arrested and prosecuted when you get home.

America will not arrest or prosecute someone from the UK visiting Thailand as a sex tourist.
by zrail | 2025-10-17 17:58:50+00:00
I have a Unifi Protect system and am generally pretty happy with it. The biggest problem I have is similar in spirit to the Ring problem: remote access is required to get push alerts from the mobile app.

Unifi had an issue at the end of 2023 where users could access consoles they didn't own through remote access: https://www.theregister.com/2023/12/15/ubiquiti_camera_priva...

If I (or more specifically my spouse) could work the mobile app without SSO I'd be thoroughly satisfied. As it stands I have some regrets.
by hinkley | 2025-10-17 17:59:03+00:00
Most of the bandwidth of a drive is out at the edge of the platter, so you don’t want to make them smaller in order to improve the seek time or make the read arms thinner to stack more platters. Which increases capacity less dramatically each time anyway.

There’s an old trick though that if you want a faster drive, only partition part of the space on each drive and thus reduce the average seek time. What one could do is make the axle bigger, shorten the arms, make them a little thinner and add another platter. But the next one is only 9% and that’s if you don’t take 9% off the area to accomplish it. Otherwise you get the same space but faster seek time.
by pdmccormick | 2025-10-17 17:59:08+00:00
That seems like a lot of money. How quickly can sustainable capacity be built up in terms of building power plants, data center construction, silicon design and fabrication, etc.? Are these industries about to experience stratospheric growth, followed by a massive and painful adjustment, or does this represent a printing press or industrial revolution like inflection point?

Would anyone like to found a startup doing high-security embedded systems infrastructure? Peter at my username dot com if you’d like to connect.
by codeclimber | 2025-10-17 17:59:11+00:00
Time is measurable, but they're measuring the wrong interval. Speed to first draft means nothing if every subsequent change takes longer because the code is unmaintainable. The technical debt from slop compounds: you're not saving time, you're borrowing it at a terrible interest rate.

In the long run, the LLM that produces less slop per request wins.
by Goofy_Coyote | 2025-10-17 17:59:34+00:00
I don’t think they’re scared, I think they know it’s a lose-tie game.

If you’re correct, there’s not much reward aside from the “I told you so” bragging rights, if you’re wrong though - boy oh boy, you’ll be deemed unworthy.

You only need to get one extreme prediction right (stock market collapse, AI taking over, etc ), then you’ll be seen as “the guru”, the expert, the one who saw it coming. You’ll be rewarded by being invited to boards, panels and government councils to share your wisdom, and be handsomely paid to explain, in hindsight, why it was obvious to you, and express how baffling it was that no one else could see what you saw.

On the other hand, if predict an extreme case and you get it wrong, there’s virtually 0 penalties, no one will hold that against you, and no one even remembers.

So yeah, fame and fortune is in taking many shots at predicting disasters, not the other way around.
by fluoridation | 2025-10-17 17:59:50+00:00
That's how it goes in my experience with the used market, for anything, really. People go online, browse around the listings to get a feel of the prices, and post a price based on that. That's a mistake. The prices that are easy to find and most common are for the items that aren't moving. When someone finally posts an item at a price that buyers are willing to pay it usually gets sold in a few days, if it's something in demand.

I've only ever found good deals on used stuff by pure chance or by watching the market over weeks. It takes both patience and decisiveness, otherwise someone else swoops in before you.
by ben7799 | 2025-10-17 18:00:27+00:00
Another reason that this matters (which is artificial) is that at least in the US so many car owners are on "permanent car payments".

They never pay off their cars and trade them in on another one and just keep making payments without really ever owning a car outright. And increasingly as prices have gone up they are trading cars in that they are underwater on, rolling old debt into the next loan!

If you're in this category of insane financial ignorance trying to appear rich but actually being "car poor" of course this resale is a huge problem. But for anyone who buys a car outright or pays off their loan and then drives the car for many years it's not a problem at all whether you bought new or took advantage of the massive depreciation and bought a lightly used one for a great price.
by zamadatix | 2025-10-17 18:01:07+00:00
People saying that usually mean it as "AI is here and going to change everything overnight now" yet, if you take it literally, it's "we're actually over 50 years into AI, things will likely continue to advance slowly over decades".

The common thread between those who take things as "AI is anything that doesn't work yet" and "what we have is still not yet AI" is "this current technology could probably have used a less distracting marketing name choice, where we talk about what it delivers rather than what it's supposed to be delivering".
by martin-t | 2025-10-17 18:01:38+00:00
> Once told an editor in-writing three times not to add something and he did it right before publishing.

This should be illegal.

If people were able to propose laws and vote on them directly, it would be, be a landslide.

The number of people who benefit from this is tiny compares to the number who are harmed. But it's nearly impossible to pass things like this because people vote for parties and are therefore several levers removed from influencing actual laws.
by diath | 2025-10-17 18:01:41+00:00
The online stores that sell these usually are also reputable websites that have been selling anabolic steroids for years. There's a forum that discusses various vendors with people sending samples and posting lab results with content/purity. I don't think any of these reputable sources would then try to sell bunk weight loss drugs, because once found out, the word would quickly spread in the bodybuilding circles and people would just buy from competition instead.