MurphyA/hacker-news huggingface dataset:
by bigiain | 2025-10-04 01:16:34+00:00
> I think a lot of people in our world need to spend a little more time in introspection.

Sadly, I suspect most or all of the investor class of people "in our world" have done this introspection. They've checked with their peers and lawyers, and decided it's a perfectly acceptable risk to have the founders and staff of a company they're already invested in do illegal things and potentially end up in jail, if it makes the odds of that company being a 100x exit - so long as the investors and their staff are all insulated from the illegal behavior and jail time risks.
by derefr | 2025-10-04 01:17:19+00:00
I think they're talking about when merchants insist that you give them cash ("cash only"), not when buyers insist on giving cash. The usual assumption is that if e.g. a street-food cart is cash-only, it's not because they can't accept cards (it's rather trivial nowadays) but rather that 1. they don't want to pay the interchange fees, and more importantly, 2. they want to be able to cook their books when reporting revenue.
by skybrian | 2025-10-04 01:18:01+00:00
You could do it with top-level domain names alone, but that would require users to buy domain names and retain control over them forever. It means you have to trust your domain registrar and pay them fees. This is too big a burden for new Bluesky users.

You could do it more cheaply with subdomains, but then you have to trust the owner of the parent domain.

So instead, they created a new registry and a way for users to cryptographically sign their registry documents. Since this is all done behind the scenes, most users are still fully trusting the central Bluesky infrastructure. But in theory, they could migrate off of it.
by Krssst | 2025-10-04 01:18:25+00:00
Can a legitimate LTSC licence be bought by a standard user? I couldn't manage it and instead had to resort to Windows Server 2025.

It is a tiny bit of a mess to setup on gaming computers because of lack of drivers (for the drivers which cannot be downloaded from the manufacturer site, need to get a Windows 11 install, let it download/install all the drivers as needed, then use pnputil to export them and import them in Windows Server) but I did manage to find a likely-legitimate seller (referenced on the Microsoft website as a partner) selling licenses for legitimate-looking prices. The price goes up with the amount of cores, happy I didn't have a Threadripper.

Also some issues here and there (such as needing a registry change to enable clipboard history, Meta Link not supporting showing the desktop or headset audio (could maybe use the pnputil trick for that)) that I didn't have with the LTSC evaluation.
by rmccue | 2025-10-04 01:18:46+00:00
This is mostly separate to the PDS - Bluesky is more like the client here (albeit, they also currently run the PLC service). It’s part of your DID document which they manage for you mostly, but there’s ways to take ownership of your PLC DID - see Dan’s links for that.

For our non-atproto uses of the PLC directory, we have similar needs, and we’ll likely let users provide their own public key before we create their document to help solve this. We have a technical audience though, so that solution may not make sense for Bluesky - but there’s a lot of people thinking about how to improve this in the atmosphere.
by thisismissem | 2025-10-04 01:18:49+00:00
If you did hijack the DNS and say `TXT _atproto.<handle>` points to `did:web:mycontrol.example` then that's a plausible attack, I guess, against did:web, but not against did:plc. And it'd assume that software in between hasn't cached the previous mappings, which typically it has.

This is noted in the did:web spec, which isn't from Bluesky PBC / AT Protocol: https://w3c-ccg.github.io/did-method-web/#dns-considerations

I should note though, that for many implementations, that'd mean poisoning a large DNS provider like google, cloudflare or quad8, since those are the DNS servers typically queried from servers, instead of going directly to the authoritative server itself.

There's more technical details here: https://github.com/bluesky-social/atproto/tree/main/packages...
by nikolay | 2025-10-04 01:19:02+00:00
Some notable apps without fixes (which I have installed locally):

* 1Password.app

* Bruno.app

* Claude.app (oh noes!)

* Cursor.app

* Docker.app

* Dropbox Dash.app

* Dropbox.app

* Element.app

* GitKraken.app

* Graphite.app

* HEY.app (shame on DHH!)

* Keeper Password Manager.app (it's not just 1Password)

* Keybase.app

* Kiro.app (come on, AWS!)

* Ledger Live.app (crypto seems to lag behind Web 2.0 still!)

* Loom.app

* Notion Calendar.app

* Notion Mail.app

* Notion.app

* Pocket Casts.app

* Podman Desktop.app

* Proton Mail.app

* Proton Pass.app (all major password manager apps are in trouble)

* Redis Insight.app

* Sculptor.app

* Simplenote.app (shame on photomatt!)

* Texts.app (although it's possibly now replaced by Beeper)

* Tonkeeper.app

* Windsurf - Next.app

* WorkFlowy.app

* itch.app

* krisp.app
by jefflinwood | 2025-10-04 01:19:06+00:00
SOAP was actually pretty easy to use, once it settled out.

For the most part, everyone used some kind of SDK that translated WSDL (Web Services Description Language) specifications to their chosen language.

So you could define almost any function - like PostBlog(Blog blog), and then publish it as a WSDL interface to be consumed by a client. We could have a Java server, with a C# client, and it more or less just worked.

We used it with things like signatures, so the data in the message wasn't tampered with.

Why did it stop getting popular? It probably really started to fall out of favor when Java/C# stopped being some of the more popular programming languages for web development, and PHP and Ruby got a lot more momentum.

The idea was that REST/JSON interfaces would be easier to understand, as we would have a hypermedia interface. There was sort of an attempt to make a RESTy interface work with XML, called WebDAV, that Microsoft Office supported for a while, but it was pretty hard to work with.

I've got some old SOAP code from 2001 here at the bottom of this article:

https://www.infoworld.com/article/2160672/build-portals-with...
by scarmig | 2025-10-04 01:19:37+00:00
> The working class abandoned democrats, not the other way around, when LBJ decided that the Civil Rights Act was a good thing, and got bipartisan support for it.

Odd, that the working class stayed with the Democrats for half a century after your claimed divergence.

It is true that progressive politics played a major role in the shift in the 2010s. But neither is that equivalent to the CRA, nor does it answer the question of why the working class reoriented around stupid bullshit. That latter, deeper issue has to do with the governing and professional classes of the US, which have shifted toward symbolic and procedural issues over broad material wellbeing, mostly because symbolic shit doesn't adversely affect professional classes' pocketbooks that much.
by escapedmoose | 2025-10-04 01:19:44+00:00
I’ve been journaling regularly all my life; I consider myself a journaling expert!

I’ve gone through dozens of hardcover Moleskines and a couple Hobonichis, and countless other random notebooks. Because I write so much and don’t want to create waste, I use fountain pens which I fill with my favorite waterproof, UV-resistant, archival inks.

These days I typically use 3 physical journals daily:

- a pocket-sized softcover sketchbook which I keep in my wallet for thoughts/drawings about town

- a larger softcover Leuchtturm for more longform writing, which I bring along when I’m feeling thoughtful

- a Hobonichi “5 year journal” which I keep at home, every morning briefly logging the main events of the previous day

3 books is probably overkill for most people. I don’t set journaling goals/expectations for myself, rather I just write when I feel the need to work something out (which is pretty well all the time). My journals get filled with random doodles, writing in all directions, ticket stubs, etc. I’m quite informal about it but I’m never without some type of notebook. I follow the maxim “an artist is a person with a sketchbook attached,” believing that the same applies to writers and journals. I’m more consistent about carrying my notebooks than I am with carrying my phone.

I also use Obsidian heavily for general PKM, and sometimes journal-type essays wind up in there if my hand is tired.

I highly recommend the nonfiction book ‘The Notebook: A History of Thinking on Paper’ for those interested in the technology of notebooks/sketchbooks, how they have evolved over time, and how people use them for various applications that most people never think of.
by alganet | 2025-10-04 01:20:44+00:00
What if I said that the ability to move the goalpost is the real trick?

Machines started to hold up casual conversation well, so we came up with more clever examples of how to make it hallucinate, which made it look dumb again. We're surprisingly good and fast at it.

You're trying to cap that to a decade, or a specific measure. It serves no other purpose than to force one to make a prediction mistake, which is irrelevant to the intelligence discussion.
by rhetocj23 | 2025-10-04 01:21:01+00:00
The costs are a weak argument. The more stronger argument for why they arent going public any time soon is that OAI in particular is a corporate governance nightmare, in which the way they transmit information about their firm and financials will have to completely change.

Theres also plenty of money washing around in private markets so no need to go public. Staying private is an advantage.
by toplinesoftsys | 2025-10-04 01:21:51+00:00
The core principle of Pipe is that it is not trying to replace text-based languages. There will always be areas where text is better. What Pipe is doing is visualizing structures on top of textual languages. It means that mouse manipulations in Pipe are going to be significantly less intensive because Pipe does not try to implement x=x+1 visually (I think it is the key mistake in majority of existing VPLs including LabVIEW and hence physical fatigue). What Pipe does is encapsulating non-visual code that does x=x+1 into a reusable visual element.

Also, AI can generate textual code calculating x=x+1. It means we mostly do not even need to touch textual code - AI will do it for us perfectly. All we need to do is converting AI-generated code into visual components for composing visual workflows.

To sum up, AI and visual programming create a perfect synergy: AI generates code and visual programming composes generated fragments into visual components. This should minimize physical efforts needed to manipulate visual workflows as devs are going to work only on high (visual) level of abstractions while AI will be providing low (text-based) abstractions.
by Krssst | 2025-10-04 01:22:24+00:00
> There's multiple services dedicated to monitoring / "repairing" windows update, scheduled tasks to enable those, and further tasks to repair everything completely if anything is modified.

Sounds like we'd need some resident anti-virus-like software dedicated to enforcing the user's choices on the OS.

(but definitely do your updates so as to not become part of a botnet. Too bad the security updates must come with unneeded feature updates)
by pessimizer | 2025-10-04 01:22:57+00:00
It's horrible and useless. An "open source" printer should allow someone to open a factory and mass produce them. I shouldn't have a dependency on the designer on something marketed as open source. That's no different than normal. You could never reasonably prevent people from making one-offs anyway, not that it's cost-efficient, or would ever be worth doing.

Attribution license it. Name it TheOpenPrinter@Patreon.com and force manufacturers to engrave it on each one. Don't pull nonsense. Crowdfunding imo sounds like they're planning to be unsuccessful at actually making them, and just to make a living off failing to make them for a year or two.

How about just getting the design tight, modular, and small-shop ready, and not even attempting to mass produce them? Leave that to the experts.
by phil21 | 2025-10-04 01:22:59+00:00
It’s quite common in the US everywhere I’ve lived. Every tradesman I’ve used outside of large companies will offer a large discount for cash if you ask about it. They will likely not be the first to initiate though at a certain level of customer, since the social expectations change at a certain level of wealth.

This is almost always in a portion of the invoice written up at around half the agreed amount, and the rest in cash. Or for smaller jobs just on the side with no paperwork involved outside of a firm handshake.

This is the norm for the lower end of the trades. If you’re dealing with a single owner company with a few employees I’d be very surprised if they would not be willing.

Yeah, once you get into “real companies” that are charging upper middle class rates on million dollar properties it changes.

I haven’t had trades work done in Mexico, but considering all my visits were effectively cash only transactions I’d be pretty surprised if it wasn’t at least as common as in the US.
by dkhenry | 2025-10-04 01:23:08+00:00
I tried to go the litestream route on Fly.io, but there is too much that needs to be done to get it working. Specifically I was hoping scaling would be a lot easier, but master election kept breaking for me causing the whole app to not be able to come online. I just moved to Fly's managed postgres and called it a day.

Their managed postgres has gotten better, but its still a little sparse, so after about 6 months using it I am going to just take my DB to either Supabase or Planetscale.
by magicalhippo | 2025-10-04 01:23:57+00:00
I'm going off your post here.

1. I hijack the DNS entry so "_atproto.ruuuuu.de" TXT record now returns "did=did:web:iam.evilhacker.de" to the the actor doing the at protocol resolution.

2. To get the DID, the actor doing the at protocol resolution downloads the DID from "https://iam.evilhacker.de/.well-known/did.json", which I have full control over.

3. In the DID document, I put "alsoKnownAs": ["at://ruuuuu.de"], along with my own public key.

Wouldn't this make the actor doing the resolution associate me with your handle?

Again, maybe I'm missing something here. It just seemed to me this would allow me to hijack your posts when they are federated.
by tverbeure | 2025-10-04 01:24:03+00:00
I almost always prefer text over video, but this video on the same subject is fantastic: https://www.youtube.com/watch?v=h7apO7q16V0. I watch it at least once every year.

Also, the title of the blog post (and by extension this HN post) is IMO not really correct: it's not about the DFT but specifically about the FFT.
by jonahbenton | 2025-10-04 01:25:31+00:00
They were trying to solve both enterprise integration and user app deployment. In another example of "worse is better", HTTP/REST (ish) for the former and browsers for the latter won. Just so much easier and good enough. That browsers and HTTP were the same "platform" of course helped. COM/DCOM/SOAP/CORBA and others were just way way too much work.

Relatedly, nobody really does REST as Roy F initially defined, which is now referred to as HATEOS. Also too much work.

If you haven't read the Worse is Better paper, definitely worth it. Top 5 all time.
by bnewbold | 2025-10-04 01:26:25+00:00
DNS poisoning is a concern in some situations, but not always.

The common case with at:// strings is to put in the DID in the "authority" slot, not the handle. In that case, whether resolving a did:plc or did:web, there are regular HTTPS hostnames involved, and web PKI. So the DNS poisoning attacks are the same as most web browsing.

If you start from a handle, you do use DNS. If the resolution is HTTPS well-known, then web PKI is there, but TXT records are supported and relatively common.

What we currently recommend is for folks to resolve handles server-side, not on end devices. Or if they do need to resolve locally, use DoH to a trusted provider. This isn't perfect (server hosting environments could still be vulnerable to poisoning), but cuts the attack surface down a lot.

DNSSEC is the current solution to this problem. But we feel like mandating it would be a big friction. We have also had pretty high-profile incidents in our production network caused by DNSSEC problems by third parties. For example, many active US Senators use NAME.senate.gov as a form of identity verification. The senate.gov DNS server uses DNSSEC, and this mostly all worked fine, until their DNSSEC configuration broke, which resulted in dozens of senators showing up in the Bluesky app as "invalid handle". This was a significant enough loss of trust in the DNSSEC ecosystem that we haven't pushed on it since. I think if we saw another application-layer protocol require it, and get successful adoption, we'd definite reconsider.
by chlorion | 2025-10-04 01:26:54+00:00
I use org mode files, a small build script and git.

The build system just invokes emacs and compiles org documents to HTML, and installs them in /var/www/${site}. I have a git update hook on the server that invokes the build script when I push updates.

Originally I did just rsync over HTML files though, but I like the new setup a lot.
by shirro | 2025-10-04 01:27:11+00:00
UV doses sufficient to cause erythema, mild sunburn, will trigger programmed apoptosis(programmed cell death) and if you don't have some other sensitivity to UV and do have psoriasis (another chronic autoimmune disease) after the sunburn has subsided you can get substantial reduction in the size and severity of skin lesions in many cases. The reset can sometimes last for awhile. This is well known and is the basis for natural (sun) and medically administered (uvb light) treatments.

In no way is UV caused DNA damage good for a person in any dose. The effectiveness of this treatment has nothing to do with vitamin D generation or hormonal changes as far as I know. You have to damage your skin to somehow reset the immune system and get the result. It is a bargain with the devil as I think are many radiation based therapies. That doesn't mean they aren't useful.
by behnamoh | 2025-10-04 01:27:59+00:00
Jules can add all it wants and I will still not use it simply because it's a Google product and Google doesn't know how to make products in the past 20 years.

Also, why the heck are Google's offerings so fragmented?! We have `gemini`, `jules`, and we also have two sets of different Gemini APIs (one is more limited than the other), and no API is entirely OpenAI-compatible.

Come on Google...
by kcplate | 2025-10-04 01:28:58+00:00
> It's not so bad for the person who's brain is turning to mush

Well Alzheimer’s was torture for my father every single day before he passed. My grandmother had it too and all throughout the beginning he knew what was coming and how difficult it was going to be for both him and all of us. Even through to the end during the fleeting moments of almost clarity, he agonized over “not being able to think like I used to”

If you could ask someone who has it, I seriously doubt their answer would be “it’s not so bad”.
by rhetocj23 | 2025-10-04 01:29:43+00:00
Someone I know uses chatgpt a lot. Not because they find it incredibly valuable. But because they want to stick it to the VC's funding OAI and increase their costs with no revenue.

So this is why you have to be careful about usage numbers. The only true meaningful number is about those who are contributing towards revenue. Without that OAI is just a giant money sink.
by Krssst | 2025-10-04 01:29:44+00:00
> It’s available for $238 from CDW.com or less from resellers.

Tried a while ago and my purchase was rejected as I wasn't a company (and also entered dubious location info since they only supported the US which I don't live in, probably leading to taxes issue. But the main reason they gave was that the purchase was reserved to companies).
by timschmidt | 2025-10-04 01:30:19+00:00
> The reason to care about compile time is because it affects your iteration speed. You can iterate much faster on a program that takes 1 second to compile vs 1 minute.

Color me skeptical. I've only got 30 years of development under the belt, but even a 1 minute compile time is dwarfed by the time it takes to write and reason about code, run tests, work with version control, etc.

Further, using Rust as an example, even a project which takes 5 minutes to build cold only takes a second or two on a hot build thanks to caching of already-built artifacts.

Which leaves any compile time improvements to the very first time the project is cloned and built.

Consequently, faster compile times would not alter my development practices, nor allow me to iterate any faster.
by pessimizer | 2025-10-04 01:30:43+00:00
Uber didn't invent anything, they drove taxis out of business then jacked up the prices, squeezed the workers, and now everybody is riding around in regular people's crappy cars for more than a cab cost. And now I need a phone and to maintain my relationship with these two crappy companies rather than to wave at the street (which is what I used to do to get a ride.)

That was literally what everybody said would happen.
by array_key_first | 2025-10-04 01:30:58+00:00
Economic theory in western nations is so hilariously skewed towards free market capitalist think that obvious models are just straight up missed, or sometimes obviously wrong conclusions are drawn. Most economics start with the understanding that the answer or cause is something about free market forces, and then work backwards.

For example, when talking about the economics of healthcare (or anything else, but lets start with healthcare), the conversation is approached from the get-go under the assumption that:

1. Healthcare is already a free market.

2. It is possible for healthcare to be a free market.

1. is just not true. Healthcare, in the US and and all developed nations, is not a free market. But, economists will just assume it is, because they assume everything is a free market, and then apply free market dynamics. Basically, they skip step 1, and go to step 1000.

And, for number 2, it's very debatable. IMO no, healthcare cannot be a free market, just by virtue of what healthcare is as a service. But that's debatable, I won't get into it.

Point is, we immediately start our economic understanding based off assumptions on top of assumptions that come from free market thinking, thinking around IP, thinking about consumer knowledge, thinking about access, etc.

We make absolutely wild and unsubstantiated claims for free, and nobody checks them.
by bradgessler | 2025-10-04 01:33:03+00:00
Yeah, something that’s messed up that they don’t think is messed up is running `fly console` fires up another instance, which isn’t attached to the same volume, so you have to run `fly ssh console —pty`

It’s certainly not intuitive. It would be awesome if they sweat these details, but their deal is “here’s a bag of sharp knives”, which is good for some use cases.
by Jordan-117 | 2025-10-04 01:33:05+00:00
Most of the world already seems drifting towards far-right authoritarianism based on "just" run-of-the-mill cost-of-living increases and resentment towards economic elites (and a lot of that is lingering, never-healed fallout from the 2008 crisis). I dread to see what the reaction will be to a genuine global crash right now.
by thisismissem | 2025-10-04 01:33:22+00:00
That is a risk for did:web, just as loosing control of your domain is a risk; The did method that is most widely used on AT Protocol is did:plc, which is https://web.plc.directory/

There's also did:webvh which isn't yet supported by AT Protocol, but may provide some better security, but is likely still susceptible to DNS poisoning.

However, the resolution of handle to DID happens at many different layers in the stack, so you'd have to manage to attack all of them at once. Handle resolution isn't something that typically happens on the end-users' machine, but rather on a server running a PDS, Relay or AppView. Those environments tend to be much harder to carry out DNS poisoning attacks.