MurphyA/hacker-news huggingface dataset:
by Jeslijar | 2025-10-24 19:35:20+00:00
Regrettably Docker has let me know they are uninterested in taking any action.

"Hello,

This does not qualify as an infringement to our Terms of Use policy. Deprecating such images and repo(s) is the responsibility of the owner and we recommend you reach out to them. Docker advises its users to opt into using images under our official programs and offerings such as Docker Official Images and Docker Hardened Images.

Thank you, Security@Docker"

In their ToU under section 6.6, they outline how they may scan images for vulnerabilities and request the owners of said packages fix it, or simply remove it from their site. They clearly do not do this though even when notified of the high criticality vulnerability.
by mostlysimilar | 2025-10-24 19:35:20+00:00
> I think freedom of speech topics are pretty closely embedded with tech and entrepreneurship whether we like it or not.

That's a useful fiction, useful until it's not. This post[1] was on the front page briefly today. These people aren't obscure or powerless, they're billionaires, embedded in the current administration, etc.

> Then I started noticing something I couldn’t ignore. Smart people I respected—especially in cryptocurrency—were casually discussing feudalism. Not as history or provocation, but as serious proposals for organizing society. “Democracy and freedom are incompatible.” “Most people aren’t capable of self-governance.” “Elite overproduction is the problem—we educated too many people above their station.”

> These weren’t fringe cranks. Peter Thiel writing that democracy and freedom are incompatible. Curtis Yarvin publishing blueprints for corporate monarchy. An entire neo-reactionary apparatus in Silicon Valley while I optimized payment systems. And they were explicit: the democratic experiment failed, constitutional constraints prevent necessary action, most people should accept subordinate roles, the intelligent few should rule.

[1] https://www.notesfromthecircus.com/p/the-coming-clash-of-civ...
by taylodl | 2025-10-24 19:35:47+00:00
I was on team "real programmers don't use these toys" at the time. I was doing a lot of low-level stuff at that time, a lot of which assembler was a necessity. I still remember when I was able to write a driver in C! That changed things!

My attitude completely changed when Visual C++ shipped. I'll never forget firing up the Application Wizard and having a full-blown Windows application in seconds! You know, the kind that we spent months learning how to do from Petzold?

Everyone wondered how long programmers would be around - like they're doing now. with AI. Well, 30 years later, and we're still here!
by seabrookmx | 2025-10-24 19:36:04+00:00
+1 for Syncthing. I've been running it for years, after my student discount for Dropbox expired (Google drive and OneDrive were just getting traction at the time).

The mobile experience last I tried was pretty rough though. I don't really need my files on my phone and I have a web interface on my home server I can use to grab them in a pinch, but it's something to keep in mind.
by AnthonyMouse | 2025-10-24 19:36:07+00:00
> This must be an essential requirement for all PC-like devices.

Why are you excluding phone-like devices? That's where it's currently the bigger problem. You can't do it at all on iPhones and Android devices malign you with locked boot loaders, attestation failures and undocumented blob drivers tied to an ancient kernel version.

> People in different regions have very different average income. As long as manufacturer scales prices accordingly, I think locking to this region might be appropriate.

It's discriminating against the poor people of any country that also happens to have rich people in it. Both the poor and rich people of that country should want it banned there for their own benefit and they're the ones who get to decide that.

> In the case if the price is already the worldwide highest one, you're right, no locking to the region is needed.

The point of prohibiting the region locking in this case is that it also allows the unlocked versions of that vendor's devices to spread across the world, making them feel the remedy. But also, it would be fine for everyone to just prohibit region locking everywhere. Price discrimination is an arbitrage opportunity and it ought to stay that way.

> I think, EU could only achieve that a non-EU-based company leaves EU.

International companies aren't "based" anywhere in particular except for on paper, but Apple has significant operations in the EU. Moreover, they sell a significant number of devices there.

The way a breakup works anywhere is that the government says "separate these business units into a separate entity or you can't operate here" and then if they don't do it, they both lose >$100B in annual revenue and cause there to be a large economic region where they don't exist which becomes a breeding ground for new competitors that can then spread into other regions. Given that choice, investors might be pretty unhappy if the executives choose that over just separating the company out into ones that collectively get to keep all of that revenue.
by mckn1ght | 2025-10-24 19:36:14+00:00
Yep, snow load is a concern, but they’re mounted at a high angle due to our latitude. That does however increase wind load, and we’re located in somewhat of a gulley that funnels wind. I saw a friend’s professionally installed ground mount buckle under a failed piece of strut so figured I’d splurge for stronger stuff where possible, especially since I’m DIYing it and looking forward to the tax credit, reducing costs to match.
by joquarky | 2025-10-24 19:36:31+00:00
> Of course OOP can be taken to extreme complexity and then lose its usefulness.

The type bike shedding that seems to inevitably occur in typescript discussions has completely turned me off of it.

Now that I'm self-employed, I just use JSDoc comments and an IDE that warns me when I break the definitions.

Much faster iteration, much easier to debug, and no wasted meetings moralizing over the use of `any`.
by superkuh | 2025-10-24 19:36:52+00:00
It's not so much that other companies support Linux. It is that they support industry standards and protocols. Apple is totally vertically integrated and they always cut corners on hardware implementation to save money. This means their hardware does not work how it should and requires custom work arounds and patches if you want to run a normal OS.

This is very different from PC hardware. It doesn't need to support linux. It just needs to not cut corners.
by vlovich123 | 2025-10-24 19:38:18+00:00
Well one problem is that filesystem in general is a terrible abstraction both in terms of usability and in terms of not fitting well with how you design network applications.

I’d say Dropbox et all is closer to a good design but their backend is insanely crazy optimized to make it work and proprietary. There’s an added challenge that everything these days is behind a NAT so you usually end up needing to have a central rendezvous server where nodes can find each other.

Since you’re looking at rsync where you want something closer to Dropbox, I’d say look at syncthing. It’s designed in a way to make personal file sharing secure.
by newfriend | 2025-10-24 19:39:11+00:00
Do you have a better way of determining which party is the "majority" in Congress? That is what we are discussing here. Whether the current makeup of Congress accurately represents the votes of the people or not.

Obviously I understand that not every person voted in the election (many are not even eligible). It is simply not relevant to this conversation, and is an often trotted out diversion meant to diminish the mandate given by the actual voters.
by otterley | 2025-10-24 19:39:15+00:00
“Linux may cache the filesystem data” means there’s a non-zero likelihood that the data in memory unless you dropped caches right before you began the benchmark. You don’t have to explicitly load it into memory for this to be true. What’s more, unless you are in charge of how memory is used, the kernel is going to make its own decisions as to what to cache and what to evict, which can make benchmarks unreproducible.

It’s important to know what you are benchmarking before you start and to control for extrinsic factors as explicitly as possible.
by mmooss | 2025-10-24 19:39:20+00:00
> What you’re advocating is appeasement.

Nope; that's the old knee-jerk insult that people use when you don't embrace aggression. Appeasement or non-appeasement has nothing to do with it, but that's the word they say to use in the flow-chart.

Many people - maybe you - are driven to conflict as an ideology, as if there is no other effective or higher power. That justifies the bad people; that's what they want you to embrace; you're helping them without realizing it.
by ratelimitsteve | 2025-10-24 19:39:35+00:00
it intuitively feels impossible because it sounds like the definition of "can pass through itself" is really "has at least one orientation where all of the sides of one instance are at most as long as all of the sides of the other instance" and then however you define an orientation an instance of a shape in orientation X should be able to pass through an instance of the same shape and size in the same orientation
by krainboltgreene | 2025-10-24 19:40:28+00:00
1. There is no downside to impeachment. It has the same impact as a strongly worded letter. 2. Nixon decided to resign and not the alternative for doing something so insane: A restoration of damages. 3. Like I said, they were overturned. I mean even the NYT was trying to figure out the result: https://www.nytimes.com/2024/04/23/nyregion/trump-trial-hush...

The reality is the system will bend itself to avoid the problem, because it's been designed to avoid that problem.
by chr1 | 2025-10-24 19:40:52+00:00
Fitting the concept of god into a cosmological model is rather easy.

If we agree that everything we see is described by physics, then everything including us is simply a computation. And in principle someone can build a machine to carry out such a computation.

People in such a machine will be more or less like us, and the creator of that machine will be exactly like god, outside of space and time, omnipotent, omniscient but having to run the simulation to see what everyone does.

From this point of view creating universe 6000 years ago and making it look billions of years old does not look that insane, just a workaround for finite machine time.

So the main disagreement is not about existence of god, or materialism vs idealism, but whether a human is equivalent to a computation or not.
by king_geedorah | 2025-10-24 19:41:18+00:00
Rather interesting solution to the problem. You can't test every possibility, so you pick one and get to rule out a bunch of other ones in the same region provided you can determine some other quality of that (non) solution.

I watched a pretty neat video[0] on the topic of ruperts / noperts a few weeks ago, which is a rather fun coincidence ahead of this advancement.

[0] https://www.youtube.com/watch?v=QH4MviUE0_s
by cauliflower2718 | 2025-10-24 19:41:44+00:00
+1, I am also big user of PGMs, and also a big user of transformers, and I don't know what the parent comment talking about, beyond that for e.g. LLMs, sampling the next token can be thought of as sampling from a conditional distribution (of the next token, given previous tokens). However, this connection of using transformers to sample from conditional distributions is about autoregressive generation and training using next-token prediction loss, not about the transformer architecture itself, which mostly seems to be good because it is expressive and scalable (i.e. can be hardware-optimized).

Source: I am a PhD student, this is kinda my wheelhouse
by philrox | 2025-10-24 19:41:55+00:00
Built a Hyrox training plan database last year after my friends & I spent weeks researching plans. Started with a no-code tool but refused to pay $130/year, so I rebuilt it myself with Claude Code. 20-30 hours total and it was my first real web project (python background).

Runs on Vercel free tier, costs nothing beyond the domain: https://www.hyroxtrainingplans.com/

Not perfect, but it's live and people use it.
Show HN: Check what is hogging your disk zpace
by azisk1 | 2025-10-24 19:42:48+00:00
Hello world! I would like to share that I have created a simple open-source Python CLI app to check what's hogging all the disk space! You can install it with pip. It's like space but Zpace.

pip install zpace

and find the big files consuming your disk space. Be it apps, virtual environments, machine learning models etc. Just run

zpace

Once you find one, that you can say "bye" to, just run

rm -rf /i_dont_need/this/file/right_now

to get rid of it.

It was born out of frustration while lack of disk space prevented me to use my laptop properly. It has been very useful to me so far. I hope that it can be useful to you as well. Feel free to check it out.

Currently tested on MacOS only
by zalusio | 2025-10-24 19:43:13+00:00
Obviously, this has the vulnerability that you can take a picture of a computer monitor with it, showing whatever you want to.

Apple could really make an interesting product here where they combine the LIDAR data with the camera data, cryptographically sign it, and attest to it as unmodified straight from the camera. Can it still be faked? Yes, but it's much harder to do.
by mochomocha | 2025-10-24 19:43:33+00:00
I know nothing about photography, but I'll just comment on this point:

> (I'm guessing this is a CM4/CM5) is a disaster for a camera board. Nobody wants a 20s boot every time you want to take a picture, cameras need to be near instantaneous.

You can boot an RPI in a couple hundred milliseconds.
by mycodendral | 2025-10-24 19:44:00+00:00
If by ‘go after’ you mean investigate, then yes, officers should investigate people based on their words when those words suggest a possible lead in a crime. That’s basic police work.

I’m not saying the state should punish someone for words. I’m saying from a risk-assessment standpoint, speech that signals hostility to enforcement naturally places a person in an adversarial category. It’s not moral judgment, it’s operational triage.
by lazide | 2025-10-24 19:44:00+00:00
Fascists already ‘know’ that violence is inevitable. By accusing the opposition of it first, they delay it and get the upper hand.

Read up on appeasement and tell me it isn’t applicable. [https://en.wikiquote.org/wiki/Neville_Chamberlain]. It is exactly what you are proposing.

For fascists, there is no place they won’t go, or bridge they won’t cross, because they’re fundamentally driven by fear and insecurity. Fear and insecurity they themselves create through their actions. It’s an insatiable hunger.

It’s why inevitably, tanks are the only thing that works.

Or are you under the impression the opposite approach is winning?

Surrendering just speeds up the consumption, because the only thing they actually respect is fear of consequences. Which is why they work so hard to avoid them. Because they know, deep down, they are inevitable - and will be terrible.

Unless they kill or control anyone who can actually apply them first, anyway.
by cool_dude85 | 2025-10-24 19:44:17+00:00
I think the risk is that there is some systematic difference between those who chose to participate and the overall population of public Montessori kids. For instance, maybe those with high incomes disproportionately chose to participate, and Montessori strengthens learning for this group, but if we could measure the whole population the result is more mixed. It can't be a fully RCT if there's some kind of opt-in provision (which is not to say that an opt-in provision is bad, or a study that is not fully RCT is irrelevant).
by DNF2 | 2025-10-24 19:45:33+00:00
> 2. (minor compared to Overleaf) typst compiles faster.

I would argue that this isn't minor. At least in my opinion, it makes a big difference.

Overleaf, already 3 pages into a document, with a couple of TikZ figures, was getting slow, as in multiple seconds wait for each save.

Typst, on the other hand (Tinymist in VS Code) is really realtime. Text updating within some tens of milliseconds, and figures included in far below a second. It really _feels_ instant, and to me that changes the experience a lot.
by Dylan16807 | 2025-10-24 19:45:42+00:00
I didn't tell you that. I said "Go ahead if it feels more nostalgic or right to you, and I wish you luck in finding what you want."

So I hope you have a nice day too but also I hope that you don't keep a wrong idea of my comment in your head.

I wasn't being fake and patronizing, there are reasons to want that, it's just that those reasons aren't usually original authorial intent.
by maieuticagent | 2025-10-24 19:46:26+00:00
Consider pivoting from hardware sales to verification-as-a-service. Your camera could be the universal input device for identity verification (less creepy than Worldcoin's Orb), insurance claims, real estate documentation, and legal evidence. Think transaction fees per verification, not one-time camera sales. The consumer angle is weak - most people won't buy specialized hardware to prove their vacation photos are real. But enterprises would absolutely pay for a solution that reduces fraud, accelerates claims processing, or enables compliant remote verification. Dating apps would pay for "verified real person" badges. Banks would pay for remote account opening. Stop trying to create a problem and start solving the expensive problems that already exist:

Identity verification for financial services, social platforms, and gig economy (KYC/AML compliance) Professional tools for insurance, real estate, law enforcement, and healthcare documentation Enterprise authentication-as-a-service model
by sdairs | 2025-10-24 19:46:54+00:00
Thanks for clarifying; I'm not trying to take anything away from you, I work in the OLAP space too so it's always good to see people pushing it forwards. It would be interesting to see a comparison of totally cold Vs hot caches.

Are you looking at distributed queries directly over S3? We did this in ClickHouse and can do instant virtual sharding over large data sets S3. We call it parallel replicas https://clickhouse.com/blog/clickhouse-parallel-replicas
by wat10000 | 2025-10-24 19:47:50+00:00
If you were designing a command-line interface from scratch, you'd definitely make it so that the command prompt gets displayed consistently and reliably after each command terminates, regardless of what garbage it spewed. The only reason we see anything different is because UNIX systems happened to grow that way, and everything gets crammed through an interface that was originally designed to show characters on physical paper.

With the design we actually have, the shell is the only thing in the chain that could reset the TTY state and ensure that the prompt gets displayed consistently each time, and it should. I wouldn't go so far as to say that I expect it to (my expectations for computers are not high in general) but it ought to.
by bayouborne | 2025-10-24 19:48:04+00:00
It's hard to over-estimate the tectonic impact the idea of spreadsheet had on the microcomputer scene at the time. Overnight 'programming' came to the masses. Someone with a problem (almost any kind of problem, scientific, financial, statistical, etc) could sit down, and easily start describing sequential flow, numerical manipulation and a ton of other things. It was the second coming of the International Business Machine.
by gwd | 2025-10-24 19:48:30+00:00
> The systemd developers have a long history of reinventing the wheel and trying to force it on everyone. We only put up with them because they do some difficult work that nobody wants to do.

> As a user, systemd has improved my productivity tremendously.

Both can be true at the same time. Particularly in the beginning, there was a long string of really important things that used to Just Work that were broken by systemd. Things like:

1. Having home directories in automounted NFS. Under sysv, autofs waited until the network was up to start running. Originally under systemd, "the network" was counted as being up when localhost was up.

2. Being able to type "exit" from an ssh session and have the connection close. Under systemd, closing the login shell would kill -9 all processes with that userid, including the sshd process handling the connection -- before that process could close the socket for the connection. Meaning you type "exit" in an interactive terminal and it hang.

It's been a while since I encountered any major issues with systemd, but for the first few years there were loads of issues with important things that used to Just Work and then broke and took forever to fix because they didn't happen to affect the systemd maintainers. If you didn't encounter any of these, it's probably because your use cases happened to overlap theirs.

Yes, systemd and journalctl have massively simplified my life. But I think it could have been done with far less disruption.
by scythe | 2025-10-24 19:48:39+00:00
Pragmatism would be not worrying about solar rooftops and small-scale solar as an outcome at all. It's cheaper to build solar at large scale, for basically the same reasons associated with scaling up anything else. The primary reason that there has been a boom of small-scale DIY solar is that the energy utilities are so corrupt that random individuals are keeping up with them.
by elchananHaas | 2025-10-24 19:48:39+00:00
TLDR - this RNG is completely and totally broken.

First, I don't think the error term is contributing much to the solution. It almost never affects the high bit. In addition, it isn't fed back into updating the secret vectors, so I think an analysis can pretend it doesn't exist.

The nonlinear step where each value is squared looks questionable to me. You will only produce quadratic residues (https://en.wikipedia.org/wiki/Quadratic_residue) when you square the numbers. This roughly halves the number of possibilities.

So what this really boils down to is this:

You have a matrix G and a vector s and a prime p. You repeatedly compute s' = Gs (Hadamard) Gs mod p. Each time you run this step you are projecting into a space with dimensionality (p/2)^N from a space p^N. My guess is that most operations will get trapped into short cycles.

Using you example values, after 10 iterations it gets to [9, 16, 13, 8]. This then repeats with a cycle length of 20. Given 4 values with p = 17 you could get up to 83520 values before repeating.

In some random tests, 6 values with p=97 enters a cycle at iteration 3802 even though there were 832,972,004,929 values.

6 values with p=271 enters a cycle at iteration 166,684 even though there were 396,109,944,105,121 values.
by kingstnap | 2025-10-24 19:48:46+00:00
There are many many problems with attention.

The softmax has issues regarding attention sinks [1]. The softmax also causes sharpness problems [2]. In general this decision boundary being Euclidean dot products isn't actually optimal for everything, there are many classes of problem where you want polyhedral cones [3]. Positional embedding are also janky af and so is rope tbh, I think Cannon layers are a more promising alternative for horizontal alignment [4].

I still think there is plenty of room to improve these things. But a lot of focus right now is unfortunately being spent on benchmaxxing using flawed benchmarks that can be hacked with memorization. I think a really promising and underappreciated direction is synthetically coming up with ideas and tests that mathematically do not work well and proving that current arhitectures struggle with it. A great example of this is the VITs need glasses paper [5], or belief state transformers with their star task [6]. The Google one about what are the limits of embedding dimensions also is great and shows how the dimension of the QK part is actually important to getting good retrevial [7].

[1] https://arxiv.org/abs/2309.17453

[2] https://arxiv.org/abs/2410.01104

[3] https://arxiv.org/abs/2505.17190

[4] https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5240330

[5] https://arxiv.org/abs/2406.04267

[6] https://arxiv.org/abs/2410.23506

[6] https://arxiv.org/abs/2508.21038