MurphyA/hacker-news huggingface dataset:
by TZubiri | 2025-10-22 10:01:13+00:00
Port knocking is a very hacky technique that was used:

1- In the 90s were security was whatever

2- In modern days as a way to keep your logs squeaky clean ( although you get 99% there with custom ports)

3- As a cute warm up exercise that you code yourself with what's available in your system. (iptables? a couple of python scripts communicating with each other?)

It's not a security mechanism, and downloading external dependencies or code (especially if vibecoded) is a net loss (by a huge margin).

It's also a waste of time to overengineer for the reasons noted above, I've seen supposedly encrypted port knocking implementations. It feels as if someone had a security checklist and then a checklist for that checklist.
by willis936 | 2025-10-22 10:01:23+00:00
The chassis net should be passed through the cable shield and the power isolated to force the current return through the cable in case power ground is bonded to chassis (which is commonly done, not sure why, I prefer a 1MOhm standoff). While not perfect this link is concise and provides handles to the relevant specs.

https://www.brainboxes.com/faq/power-isolation-in-poe-ethern...

Yeah, TVS before any other silicon junction. It's nice to throw a single-use medium or slow blow SM fuse before the TVS to open circuit in device faults.

This is going to be individual preference. I like the density and low design risk of fully integrated solutions like Microchip's PD70224. As long as you spec your FETs appropriately you can't go wrong with TI or AD options (VDS of at least 100 V, ID of at least as much current as you want to cram through with healthy headroom, RDSon that makes you happy, VGS that's compatible with the datasheet charge pump, size and cost that doesn't make you weep). When in doubt, stay very close to the datasheet's design.

I just saw that the PD70224 is not recommended for new designs. What an awful day to have eyes.

Oh, it's been superseded by the PD70288. Much lower RDSon, but a huge 8x8 package. The charge pump is mysteriously gone and there is now a UVLO of 24V. This is more PoE-specific, which is less generally interesting to me.

If only someone would sell me an ideal diode full bridge rectifier IC with integrated FETs, OCP circuit breaking, UVLO, OVLO, a fault flag, control input, and current monitor, I'd never buy a different power entry IC.
by andrepd | 2025-10-22 10:01:41+00:00
- Buy on the darkweb. Marketplaces exist with established vendors, open forums, feedback, customer support, escrow... I could write a long text about how this is an infinitely better way to do things for all concerned than to "force" non-violent people to interact with violent drug traders and adulterated products, but let's leave that for now. You can pay with Monero for untraceability.

- Test what you get. Some stuff being sold as LSD might actually be another synthetic psychedelic, potentially dangerous (unlike LSD). So test: even in jurisdictions in which LSD is banned, you can easily buy tests; for LSD, this would be Erhrlich's reagent. If it tests positive, and since there's no reason to have LSD and an adulterant (unlike other drugs such as cocaine), you're safe.

Of course, this is what my friend told me.
by pjmlp | 2025-10-22 10:01:42+00:00
At the edge of 50, similar experience.

Additionally in many countries, being a developer is an office worker like everyone else, there isn't SV lottery level salaries.

In fact, those of us that rather stay programmers beyond 30 years old are usually seen as failure, from society point of view, where is our hunger for career and climbing up the ladder?

Now the whole set of SaaS products, with low code integrations, that were already a bit depressing from programmer point of view, are getting AI agents as well.

It feels like coding as in the old days is increasingly being left for hobby coding, or a few selected ones working on industry infrastructure products/frameworks.
by greatgib | 2025-10-22 10:01:54+00:00
Something really scary in France right now is that you can see really clearly how most mainstream media are used for propaganda.

Since a few days, there is an abundance of cover and articles in most major newspaper here with propaganda and repeated lies supporting him. It's hard to imagine but non stop. You have everyday interviews of his family saying that it is an injustice, that he did nothing, that the judgement was rigged, that he was a great men that served France and so should not be treated like everyone else. Article about how sad the poor family is. Number of articles repeating friends of him verbatim s that the judgement was fake.

Almost none speaking about the facts, the grounds for his sentence, the big number of other trials against him that are running. And also the other definitive convictions he got. Like for attempting to bribe a head prosecutor to get insider info about his case. Using a prepaid line opened with a fake name...

But what you see in the end is that 90% of medias in France belongs to a few wealthy families that are friends with him.
by fjfaase | 2025-10-22 10:01:54+00:00
I wonder how this fits with the results from dora.dev that CI/CD is the most effective way to develop software. Is working on a single branch without feature branch and without mandatory code reviews even more effective? Or is it due to practices in CI/CD?

Maybe developers spend more time on reviewing and testing their code when they commit directly to the main branch, then when they know someone else is going to review tge code en perform the merge? How bad is a bug when it is caught the same day?
by abujazar | 2025-10-22 10:02:06+00:00
Nowadays public facing client IPs are often shared by thousands of users behind CGNAT. IP based firewall rules are useful when the peers have their own static IP address, but provide no real security when the IP address is shared.

This is vibe coded security through obscurity, i. e. quite useless. Use Tailscale or a self hosted VPN.
by CaptainOfCoit | 2025-10-22 10:02:26+00:00
I'm also not a native English speaker, but ditched seems to mean:

> to get rid of something or someone that is no longer wanted:

They were considering two contracts, with two different companies, and were in talks with both of them. If they stop considering one of those contracts/companies, wouldn't it be accurate to say they "ditched" that bid/contract then?

I guess the misleading part could be that "ditched" might implicitly imply they were already using Starlink, but the "ditched" used in the title is actually about the contract, not established service?
by ignoramous | 2025-10-22 10:02:36+00:00
The time.After function creates a channel that will be sent a message after x seconds.

Or, will it? https://github.com/golang/go/issues/24595

... even though the value is nil, the type of the variable is a non-nil interface... Go "boxes" that value in an interface, which is not nil. This can really bite you if you return interfaces from functions

Bit me when I was noob. These days, I fail build if ireturn fails.

go install github.com/butuzov/ireturn/cmd/ireturn@latest ireturn ./...

Go 1.25 introduced a waitgroup.Go function that lets you add Go routines to a waitgroup more easily.

sync.WaitGroup(n) panics if Add(x) is called after a Done(-1) & n isn't now zero. Unsure if WaitGroups and easy belong in the same sentence. May be they do, but I'd rather reimplement Java's CountDownLatch & CyclicBarrier APIs in Go instead.

When you embed structs, you also implicitly promote any methods they contain ... Say, for instance, you embed a time.Time struct onto a JSON response field and try to marshal that parent ... Since the time.Time method has a MarshalJSON() method, the compiler will run that over the regular marshalling behavior

#£@&+!
by chrisco255 | 2025-10-22 10:03:09+00:00
> the US did quite a lot of questionably legal invasion campaigns

The U.S. is a sovereign country, and Congress approved all the actions in Iraq and Afghanistan for better or worse, and it was bipartisan.

Renaming Department of Defense to Department of War is something like the opposite of doublespeak. It's more honest, isn't it?

> He re-hashed Biden's negotiations and takes credit for it. Classic Trump.

No. The entire Gaza situation erupted under Biden's presidency. As did the Ukraine invasion. The Biden presidency was completely powerless to stop any of this from occurring. Biden, the same guy that bumbled through sentences and lost track of topics in the presidential debate and was replaced by his own party's superdelegates in 2024 after he won the state primaries, had nothing to do with this.

> What "negotiations"? We don't live in times any more where kings can distribute pieces of land and the people living on it at will - no matter what Trump thinks he is.

There's 185 countries on planet earth. Many of them are run by literal kings and some of them are run by king-like figures. The U.S. absolutely isn't one of them, but when it comes to international politics, the duly elected President is the negotiator-in-chief. This follows in a long history of deal-making, going all the way back to President Jefferson and the Louisiana Purchase from France.

Ironically, Denmark itself does have a king!
by simiones | 2025-10-22 10:03:24+00:00
The biggest problem with Starlink's proposed solution would be that it would have been B2C - people in Greenland would talk to other people in Greenland through Starlink's satellites. That would put communication inside Greenland at the whims of another foreign power, which is a whole different level of loss of sovereignty than getting communication with the rest of the world cut off.
by seec | 2025-10-22 10:03:37+00:00
I just replaced a quite cheap Windows laptop that was over 10 years old for an old person. It was just fine. The only reason it got replaced was because the battery was completely dead and being so old you couldn't find the part.

Not that it matters because it got replaced by a laptop costing 1/3 of the cheapest MBA. Mac users are delusional about the longevity of Apple stuff and have a distorted worldview where PC users change their hardware every 2 years or so. They don't and my experience is that it's completely the reverse (hence the massive 2nd hand market for Macs).
by gnfargbl | 2025-10-22 10:03:51+00:00
No high horse here, I promise you. I'm not French and I didn't know much in detail about Sarkozy before this, but being convicted of taking political campaign donations from the architect of the Lockerbie bombing is more than enough to make me think he's not a good guy. If you tell me he did a lot of other bad stuff as well, I believe you.

I'm just pointing out that the golden rule requires us to offer human rights even to people who we might think are scum. Because that's the only way to secure those rights for ourselves.
by fransje26 | 2025-10-22 10:04:14+00:00
Mostly the former.

The current sentence is for the illegal financing of his presidential campaign to the tune of 50 million euro, which is well above the legal cost cap. Although the amounts are benign compared to the amount of bribery seen in the US presidential runs, it is still unfair democratically and should be punished harshly accordingly. Interestingly, this case isn't motivated by financial greed, as in bribery for his own financial interests, but by power, i.e., help win the presidential election.

It should be noted that most of the bigger parties are known to have "alternative" accounting tricks so you can be certain that they also don't fully respect the funding cap, but they probably get away with differences (that we know of/suspect) of a few (tens of?) percent.

Sarkozy was not only well, well above that, with order O(200%), it was also done with money coming from a known dictator: Gaddafi. This brings a lot of interesting additional ethical questions to the table. Such as: what was the quid pro quo expected from such a payment? Or: what role did it play in Sarkozy ordering the bombing of Libya?

It could also be considered politically motivated in the sense that the judges themselves are not a-political (and it's fully in their rights to have a political opinion) and that some of the high-profile cases in the past have been handled by judges of a different political leaning. And without putting the impartiality of the justice system into doubt, some questions have been raised when some of the judges were a bit too vocal in the criticism of their political opponents.

And in parallel, although the judiciary system in France theoretically acts independently from the executive branch, the zones of influence are a bit murky and there are some indirect ways through which some pressure can be exerted onto the judges to facilitate, or in other cases slow down some cases.

So you could be certain that such a high-profile case was not done without the go-ahead of the executive. In that sense, it can be considered politically motivated.

Which doesn't mean Sarkozy shouldn't go to prison. He absolutely should. But please also clean-up all the other crooks, and go strongly after those that enriched themselves at the cost of the country. There are plenty of them, with lots of low-hanging fruit.
by CodesInChaos | 2025-10-22 10:05:25+00:00
electricity_is_life's comment on reddit seems to explain it:

> Not sure if this is what happened to you, but one thing I ran into a while back is that even if you return Cache-Control: no-store it's still possible for a response to be reused by CloudFront. This is because of something called a "collapse hit" where two requests that occur at the same time and are identical (according to your cache key) get merged together into a single origin request. CloudFront isn't "storing" anything, but the effect is still that a user gets a copy of a response that was already returned to a different user.

> https://stackoverflow.com/a/69455222

> If your app authenticates based on cookies or some other header, and that header isn't part of the cache key, it's possible for one user to get a response intended for a different user. To fix it you have to make sure any headers that affect the server response are in the cache key, even if the server always returns no-store.

---

Though the AWS docs seem to imply that no-store is effective:

> If you want to prevent request collapsing for specific objects, you can set the minimum TTL for the cache behavior to 0 and configure the origin to send Cache-Control: private, Cache-Control: no-store, Cache-Control: no-cache, Cache-Control: max-age=0, or Cache-Control: s-maxage=0.

https://docs.aws.amazon.com/AmazonCloudFront/latest/Develope...
by scott_w | 2025-10-22 10:05:45+00:00
>> Kramnik should be held accountable for making Danya's life hell the past year

OP is not blaming him specifically for Danya's death. Irrespective of that, Kramnik is behaving like a total cunt and treated Danya like absolute shit for no reason beyond his own pathetic delusions.

Naroditsky isn't even the youngest person Kramnik has bullied: he's doxxed fucking children and accused them of cheating.

I watched Hikaru's YouTube video this morning and it's clear that Kramnik's accusations were getting to all of his victims. Naroditsky was giving Kramnik's opinion weight, whether he took his own life, or passed of other causes.

So yes, Kramnik needs to be shunned and frozen out of the chess world and any decent company for the way he's behaved.
by jraph | 2025-10-22 10:05:54+00:00
The title of the HN submission might look a bit misleading. It's easy to misinterpret it and think MinIO stops being open source (which would be a bigger deal IMHO).

I think this would be better: "MinIO stops distributing free Docker images"

---

See also the relevant README section: https://github.com/minio/minio?tab=readme-ov-file#source-onl...
by maxloh | 2025-10-22 10:06:47+00:00
Yeah. They also created a open source test suite for S3 clones.

This is a set of unofficial Amazon AWS S3 compatibility tests, that can be useful to people implementing software that exposes an S3-like API. The tests use the Boto2 and Boto3 libraries.

https://github.com/ceph/s3-tests
by eptcyka | 2025-10-22 10:06:50+00:00
Nobody signed any service level agreements, the docker images were provided on good will. If this is business critical for you, consider paying someone to solve this problem for you. Maybe even consider paying for a F/OSS solution so you are not the only one funding what should be a community effort.

I do concede that they could’ve done a better job communicating these changes. But they don’t have to.
by throwaway290 | 2025-10-22 10:07:22+00:00
Interesting

> i'm starting a new trend: ask every person that is so certain about the negative outlook how big their short position is. so how big is your short position? please let us know.

To me people with short positions likely be bending the truth. To you they are honest. Funny

There's a reason why investing must be declared in many situations. and it is because they are a conflict of interest not proof of honesty
by jinkylist | 2025-10-22 10:07:24+00:00
>I cannot imagine how this is used seriously when there is something like Ceph available.

Adopting Ceph is adopting a Ceph engineer, any use-case with the need and funding to run Ceph on production would easily be able to pay for commercial licenses and/or contribute majorly to this or their own fork. They work in different ball-parks entirely
by mschuster91 | 2025-10-22 10:07:45+00:00
> Thankfully, the world isn't made just from "the west", so I guess its not the end for the humanity - yet.

"Humanity" as in "the species homo sapiens sapiens", yes, that will survive.

But "humanity" as in "societies ruled by foundational human rights and democracy"? Not if Trump's USA, China, Russia and Modi's India have their will.
by lazide | 2025-10-22 10:08:26+00:00
The alternative is… what? ‘Defending’ against the use of Em-dashes by LLMs? Or people reacting to that?

You might as well be sweeping a flood uphill.

Tilting at windmills at least has a chance you might actually damage a windmill enough to do something, even if the original goal was a complete delusion.
by NitpickLawyer | 2025-10-22 10:08:39+00:00
> The agent consists of three nested agentic loops, shown below. Each loop executes an LLM to produce one step of reasoning and a tool invocation. The tool is executed and the outputs are attached to the agent's context. The outermost agent loop is an orchestrator that repeatedly calls the two other agents, the build-fixer agent and the test-fixer agent. The build-fixer agent tries to build a particular target and makes modifications to files until the target builds successfully or the agent gives up. The test-fixer agent tries to run a particular test and makes modifications until the test succeeds or the agent gives up (and in the process, it may use the build-fixer agent to address build failures in the test).

> Despite no special prompts or other optimizations, early tests were very encouraging, successfully fixing failed tests 30% of the time. CogniPort was particularly effective for test fixes, platform-specific conditionals, and data representation fixes. We're confident that as we invest in further optimizations of this approach, we will be even more successful.

Jesus. They used gemini-flash! on a google-scale problem, and got promising early results. On real problems with real data! Granted, the problem suits itself to automated testing better than other problems (it helps having something to migrate from, you kinda know the "ground truth" or expected behaviour).

Absolutely bananas that this is possible, and with such a "cheap" model.
by arghwhat | 2025-10-22 10:09:54+00:00
There is absolutely nothing malicious or suspicious about deciding not to provide docker images or binaries. Doing so does not hide or guard you against CVE's, which are entirely unrelated to such optional processes.

Building minio is not only trivial, but is standard procedure - the latest release is in my distributions standard package repo, and they would not use prebuilt binaries. If you want that dockerized, the Dockerfile is shorter than the command-line to run said container. Dealing with Docker themselves, the corporation that has famously gone on a tax collection spree, is however quite the pain in the arse for a company.

I can't stand the entitlement people (everyone, not one particular person) feel when they are provided things for free. Sure, minio is run by a corporation these days and this applies a bit more to smaller FOSS projects, but the complaint is that the silver spoon got replaced with a stainless steel one. You're still being fed for free, despite having done nothing for it.

</rant>
by p0w3n3d | 2025-10-22 10:10:37+00:00
This is exactly what happened in Poland 1950-1989. We had no goods because government was too strong, too blind to see that there are stock shortages, (also goods were exported to Russia), so every person had their "kartki" - vouchers for food but there was no food. You could "buy" meat with them each week but not more often, but they were rendered useless because there was not enough meat. People were creating a second internal market and trading with each other, which in the turn was forbidden and people were persecuted. That's the communism yo
by NeverCap | 2025-10-22 10:10:49+00:00
Missing critical lecture content? Struggling to review hours of recordings before exams? Spending more time rewinding than studying? This comprehensive guide solves these problems with a proven transcription workflow used by thousands of successful college students.

### Why Transcription Matters Research shows that 67% of undergraduate students struggle to keep up with lecture content in real-time. Transcription addresses this by creating searchable, reviewable text records of class content—improving retention by 42% for students with learning differences and reducing comprehension gaps by 58% for non-native speakers.

### What Makes This Guide Different Unlike generic transcription tutorials, this resource is built specifically for the college student experience. It addresses unique challenges like: - Navigating complex recording laws across different states - Working within student budgets ($0-25/month solutions) - Handling technical terminology in STEM courses - Processing dozens of hours of content per semester - Balancing accuracy needs with time constraints

### Comprehensive Coverage: 8 Detailed Chapters

*Chapter 1-2:* Legal foundations and ethical guidelines (with state-by-state recording laws and professor permission email templates)

*Chapter 3:* Tool selection framework comparing 15+ services across accuracy, cost, features, and use cases

*Chapter 4:* Recording techniques for lecture halls, seminars, and online classes—plus audio quality optimization tips

*Chapter 5:* Processing workflows including AI enhancement, custom vocabulary setup, and batch transcription strategies

*Chapter 6:* Organization systems using proven frameworks (Cornell Method, mind mapping, topic clustering)

*Chapter 7:* Advanced applications like creating personal course search engines and AI study assistants

*Chapter 8:* Troubleshooting guide answering 30+ common questions

### Bonus Resources Included Email templates for requesting recording permission Cost-benefit analyses with real calculations Decision trees for choosing the right tool Custom vocabulary examples for major subjects Step-by-step tutorials with screenshots Comparison matrices for quick reference

### Who This Guide Helps Whether you're a pre-med student drowning in anatomical terminology, an international student processing lectures in a second language, a student with ADHD seeking accommodation tools, or simply someone who wants to study more efficiently—this guide provides actionable solutions.

*Ready to stop missing important lecture content and start studying smarter?* Dive into the complete guide below.