MurphyA/hacker-news huggingface dataset:
by citizenpaul | 2025-10-14 21:38:41+00:00
Not just vulns. It is possible to simply purchase access or become a provider in the SS7 system (<$20-50k USD). SMS is basically a completely open system at this point. Cybersecurity companies do it all the time for pentesting. So do "Cybersecurity companies".

Horrifying that nearly banks still require you to use sms as a 2fa and do not offer any other alternative.

Did you really think the US Gov was OK with facebook running the biggest "encrypted" SMS system on earth. LOL of course they already had access to all the messages.
by Spooky23 | 2025-10-14 21:38:47+00:00
The system is such that there are 6,000 jurisdictions issuing ~20,000 types of birth certificates in the United States. It's a bonkers system, and relying on these breadcrumbs for a fundamental right is awful.

For 80% of people, national ID is a no brainer. The other 20% are the issue, and it's a problem that won't be solved in this framework of government in the US.
by bgnn | 2025-10-14 21:40:17+00:00
This. They gave the keys to the management of the business units and layers of managerial hierarchy under.

I did my PhD project in collaboration with NXP research which used to be the semiconductor division of Natlab. At every project meeting there were at least 2 mid level managers from 3 business units funding the projects+ 2 mid level managers from the research department + 1 engineer overseeing the technical work. So, it was 8-9 managers + 1 engineer + 1 PhD student. They were all chill and didn't roadblock anything for me, apart from all business units deciding to do their own development on the same topic because they didn't trust anyone else. So I was mostly left to myself because the money was already given but they lost interest. They were still attending the meetings as a break from the other meetings I thought.
by hylaride | 2025-10-14 21:40:18+00:00
> People and their loved ones don't want to experience death. It's often as simple as that.

People also don't want (their loved ones) to suffer, especially needlessly. (I want to also stress that I'm not advocating terminating life, though I do think it should be an option - just that this is what my grandfather wanted).

> In the US, exactly because of situations like this, that sort of thing is a lot harder today to pull off.

I've anecdotally heard that a huge percentage of US medicare costs is desperately saving elderly people at the end-stages of life instead of a more palliative (and some would argue dignified) end. This was made worse during the Terri Schiavo case when the very idea was put up as anti-life and we were warned that "death panels" would be inevitably setup. DNRs are allowed, but alleviating the suffering leading up to the end is, for both better and worse, heavily restricted.

> I'd suggest strongly in any case that you have a discussion with an oncologist if you ever get to that point. Things in medicine aren't nearly as black and white as people sometimes assume.

I've been extremely lucky that cancer hasn't been much of an experience I've had to deal with in my circles. I'm mostly pro-modern medicine and I know a lot of progress is also being made. I hope that it never happens, but if it did I'd want to be informed as possible to make my own decisions. The decisions I'd make depend so much on where I'm at. I'd be likely more willing to risk it now as I have a 7 year old to live for, than I would be in my 90s where the odds are a lot less for a comfortable experience.
by HardCodedBias | 2025-10-14 21:40:19+00:00
I don't know what you think "direct access to specialists" is.

I have concierge medicine. I have two specialist appointments scheduled both take about 3mo.

I can see my PCP within 1 day. That is good. I can have blood drawn within 1 day. That's good.

Specialists, no advantage. This makes it not overly valuable, but what do you expect for 8k extra for year (on top of very good health care)?

I don't know how to access a higher tier of health. Perhaps at 100M+ of net worth it appears. IDK.
by orochimaaru | 2025-10-14 21:40:59+00:00
I’ve heard teachers often dislike the term good or bad school district. And rightly so. The home environment that kids come from can vary. This makes a “great schools” score (or something equivalent) not a marker of the level of effort the teachers put in but rather a marker for parents to find “better peer groups” and “like minded pta”. Note I’m consciously avoiding the discussion of race here. Because in most suburban cases the good/bad doesn’t depend on race but more on income. This will obviously change if you look at urban districts.
by JumpCrisscross | 2025-10-14 21:41:17+00:00
> Do I have evidence that the polling coming out of an autocratic single party dictatorship is corrupted?

Yes, that's what I'm asking for. We have this for e.g. Russia [1], North Korea [2] and Venezuela [3]. I'm asking for similar evidence out of El Salvador.

For example, did Wola reject the 2024 election ex post facto?

[1] https://www.lemonde.fr/en/international/article/2024/03/20/t...

[2] https://en.wikipedia.org/wiki/Elections_in_North_Korea

[3] https://www.theguardian.com/world/article/2024/aug/06/venezu...
by Topfi | 2025-10-14 21:41:31+00:00
Honest question, why consider the personal home, letters or spoken words at all, considering most countries around the world already have ample and far more applicable laws/precedent for cloud hosted private documents?

For the LLM input, that maps 1:1 to documents a person has written and uploaded to cloud storage. And I don't see how generated output could weigh into that at all.
by prmoustache | 2025-10-14 21:41:37+00:00
As I said earlier, I still have a smartphone with me with offline maps so I can still stop for a minute and check if I am unsure of my route.

There is a huge spectrum of possibilities between being totally unaware of where you are going and following a route turn by turn and I kind of feel I have an higher than average awarness of where I am going and where are the cardinal directions.
by CuriouslyC | 2025-10-14 21:41:48+00:00
Does this produce actual lint rules, or are you templating out lint-like replies from a LLM using a response format?

If you're doing inference, just give me a cli that's userless and free. I'm happy to use left over codex plan tokens or gemini free tokens for this, and while the idea seems interesting and I might be upsellable to more features down the line, the price/offering is a non starter.
by IshKebab | 2025-10-14 21:42:36+00:00
Punishment due to not receiving telemetry? Please, that's fantasy land stuff.

It might be a malfunction caused by his blocking, but the idea that someone in HQ was like "guys, we've got someone blocking telemetry!" "disable his vacuum, the bastard".

Or in some design meeting they were like "what do we do if a handful of privacy nerds block our telemetry?" "well.. I guess we should automatically disable their vacuums in a weird way so they repeatedly send them in for repair and it costs us loads of money".

Come on, at least try to live in the real world.
by cptskippy | 2025-10-14 21:42:39+00:00
TLS certs use to be about Identity as much as they were about encryption. There was a pay wall to being able to have encrypted communications with clients that was the equivalent of a colonoscopy over fax machine. Today that takes the form of EV Certs. Let's Encrypt democratized encryption but not identity.

Going back back to HTTP would allow for communications to be monitored by any intermediary and would be a huge step backwards in terms of privacy. Advertisers or Adversaries wouldn't need to compromise the client or the server to track you. Just ask AT&T nicely or compell Cloudflare via secret warrant.

Anonymous encryption is essential to the freedom of communication.

Identity is a wholly different problem that should be solved without being tightly coupled to encryption. And at the end of the day it's still only as reliable as the host server.
by BeetleB | 2025-10-14 21:42:46+00:00
> We will all die, so if you prevent one cause of death in old age, you will just die of another cause of death.

I can tell you're quite young :-)

Old age is pretty broad, and you really need to start worrying at some point in your 40s. Although death due to these is rare at that age, you'll likely end up knowing 1-3 people who will die of these at that age. And a lot more in the 50s.

There's a huge difference between dying in your 60s (perhaps right before retirement), and dying in your 80s. Lumping all of these people into "old age" is likely a byproduct of the same biases that cause journalism to not report on it.
by nostrademons | 2025-10-14 21:43:34+00:00
It's fascinating how these secrets are turning up in the press now. The article is (probably intentionally) vague about it's sources: they only say "Lighthouse found a vast archive of data on the deep web". But reading between the lines - does that imply that this surveillance company kept records on thousands of targets, and then left them in an open S3 bucket? Not the first time - the TM_Signal leak of upper-echelon U.S. government communications was also facilitated by an open S3 bucket that contained the message archives of everything that, say, the Secretary of Defense was messaging to the POTUS.

But it is highly ironic that these companies specialize in surveillance, tracking, and security, and then have a tendency to leave the data that they steal from others open to the Internet in a very amateurish security lapse that in turn leads to everyone stealing from them.
by dijit | 2025-10-14 21:43:41+00:00
Re: Slack; yeah, that’s not apples-to-apples for secure 1:1 messaging (it’s enterprise group chat with admins often having god-mode access anyway).

A better comp might be old-school Skype pre-Microsoft: client-server backbone (after ditching full P2P), tight client/network control, no E2EE, yet no major leaks despite heavy scrutiny.

It worked for millions in a “good enough” threat model without pretending to be bulletproof. Secure messaging apps that default to client-server (like Telegram’s non-secret chats) are similar. They pay lip service to groups but prioritise 1:1, and the security theatre of optional E2EE doesn’t change the core trust calculus.

If you don’t trust the provider, don’t trust their code. Simple as.
by matthewdgreen | 2025-10-14 21:44:18+00:00
I have enormous privacy in my home. I can open up any book and read it with nobody logging what I read. I can destroy any notes I take and know they'll stay destroyed. I can even visit the library and do all these things in an environment with massive information access; only the card catalog usage might get logged, and I probably still don't have to tie usage to my identity because once upon a time it was totally normal to make knowledge tools publicly-accessible without the need for authentication credentials.
by unethical_ban | 2025-10-14 21:44:22+00:00
The existence of environmental protection is fine, the existence of CAFE fscked up perverse incentives is a problem.

Having some labor quality of life concerns, making sure we aren't being undercut as a national security issue is fine. Having the chicken tax, destroying investments in solar energy and electric grids and EV charging is not.

We have bad manufacturing incentives in this country, our government wants the US to fail at solar, and the Chinese are playing to win.
by westurner | 2025-10-14 21:44:40+00:00
ptcpdump: https://github.com/mozillazg/ptcpdump :

> ptcpdump is a tcpdump-compatible packet analyzer powered by eBPF, automatically annotating packets with process/container/pod metadata when detectable. Inspired by jschwinger233/skbdump.

awesome-ebpf > Tools: https://github.com/zoidyzoidzoid/awesome-ebpf#tools

opensnitch is an egress firewall that displays PIDs: https://github.com/evilsocket/opensnitch

edgeshark: https://github.com/siemens/edgeshark :

> Discover and capture container network traffic from your comfy desktop Wireshark, using a containerized service and a Wireshark plugin.

Looks like it's possible to select containers from a GUI form with edgeshark. Perhaps something similar for process selection?
by JumpCrisscross | 2025-10-14 21:45:28+00:00
> No unique lead on robotics, except the largest fleet of self driving cars by several orders of magnitude

Not correct to call advanced driver assist self driving when we have an actual self-driving fleet in Waymo.

> experience in mass produciton and vertical integraiton

This remains Tesla's sole actual advantage. If (probably when) someone else beats them up the tech tree, chances are Tesla could beat them to scale.

> a much more ambitious Optimus program than the causal headlines would have you know about

The talent bleed at Tesla (specifically, Optimus) contrasts with e.g. SpaceX's virtual monopoly on aerospace talent excellence in America, possibly broader. And it shows. SpaceX routinely does the unprecedented. It's been years since Tesla did anything first.

(If I had to look at Musk's portfolio, SpaceX is where his soul is. It, Neuralink and xAI are where his heart is. X f/k/a Twitter was a clusterfuck from the get go, but it makes sense as a data pump for Grok, and he has fun with it so whatever. Boring Company has quietly failed, and may need to be acquired into SpaceX to rescue investors. Tesla increasingly looks like it's out of touch, too. My guess is he waits for the valuation to temper and then merges it into a private xAI.)
by anarticle | 2025-10-14 21:45:38+00:00
I was a product of DoDDS system: https://www.nytimes.com/2023/10/10/us/schools-pandemic-defen...

Somehow I ended up with a really high end education system, and went to public school my last few years. As I get on in age, I realize that school systems vary so wildly it is shocking.

I thought that English was taught in a specific way letters -> phonics -> words -> sentences, but it appears that was abandoned for "Whole Language" approach which upon reading sounds insane to me!

Some of my younger friends (young millennial, early Z) have real issues "sounding out words", and I guess that is the effect of no phonics.

As much as it is socioeconomic divide, a nice part of DoDD schools is that the corporal's kids and the general's kids all go to the same school. To be fair, they are usually well funded and have career teachers, along with what is shaped like a national curriculum. The reason for this is if you move, and you will in the military, you can continue grades easily without having to interrupt your path.

Ex: in DoDD school, 9th grade had "world history", which didn't coincide with my 10th grade move to public school which required "American history" in 9th grade, so I was held back(!) in history to take American with 9th graders when I was in 10th grade.

Education, for the basics, in my mind should not deviate too hard from what we have learned over the years. It is fun and exciting to experiment with "new methods" but pretty much everyone I know that had common core or new math or xyz new 21st century teaching method is abysmally behind both in speed and skill from people that were taught in more traditional methods.

It's very bad in the ~20yo segment from HS no college. My mom works at a deli shop and people don't understand fractions. Let alone fraction<->decimal conversions on the scales. She is in complete disbelief this is real. (She is 68, retired, and still works because she wants to be useful!)
by giantg2 | 2025-10-14 21:45:40+00:00
You could also just cap it 49 or 54 years old. A lot of medical research does this when looking into things like cancers. It gives a pretty good indication of whats going on during early and prime year without as much longevity bias or 'old age/natural causes' deaths skewing the data. If you make it fully age weighted then you might adjust away things like murder for the 35+ crowd, or overinflate things like SIDS, drowning, and childhood cancers.
by Fade_Dance | 2025-10-14 21:45:45+00:00
Having had direct experience with a system like that, my anecdotal experience was that the affluent school still has more than enough money (anecdotal), while the poorer surrounding school districts were critically underfunded (not quite as anecdotal, newspaper stories from the time, etc).

That's not to say that the program wasn't helping, but the mere existence of such a program isn't enough to equalize that variable. Of course the points you bring up are important factors in education as well.
by itsnowandnever | 2025-10-14 21:46:18+00:00
as far as I'm aware, we have no idea other than that they didn't do much at one time. we can only deduce little modifications were done semi-regularly by the ancient pre-historic version of open source contributors. they had to lift 10+ ton limestone blocks and move them into place. but there's ample evidence of them trying to lift those blocks out of the quarry and failing, thus leaving behind broken would-be pillars of limestone for 12,000 years. the best assumption is just that they had tons of wild cereals and gazelle to munch on so these people were able to work on this persistently over many generations. they had no social hierarchy or need for labor at all, so they had all the free time in the world to use stone age tools to build structures that rivaled the greeks 9,000 years later
by conductr | 2025-10-14 21:46:44+00:00
I’ve been doing this a long while, but I’m finding it harder as more devices share my WiFi credentials with each other without my permission/consent/or even knowledge.

I recently moved into a new home and decided to take the opportunity to replace everything; it’s been surprising how many things are just coming to life. TVs, vacuums, kitchen appliances, etc. Some of my new TVs won’t even let me use the microphone on the remote until I give it my WiFi password. It’s quite ridiculous the world we’re creating for ourselves.
by cognisent | 2025-10-14 21:46:45+00:00
This is exactly how it is at my husband's high school: no penalties, no consequences, unlimited turning in of work until the end of the quarter. Didn't finish it all and ended up with a D or lower? Doesn't matter, because you can't be held back anyway.

Let's not even get into how kneecapped teachers are in classroom management. A student reported him for pointing at them and touching them when he was never fewer than 3 feet away pointing away from them. The students know they have the power now, and they're definitely not going to be told what to do.
by theshrike79 | 2025-10-14 21:46:56+00:00
I imagine LLMs as an endless stream of consultants, each can work only one day (context).

Every day you need to bring them up to speed (prompt, accessible documentation) and give them the task of the day. If it looks like they can't finish the task (context runs out), you need to tell them to write down where they left (store context to a memory, markdown file is fine) and kick them out the door.

Then GOTO 10, get the next one in.
by tracker1 | 2025-10-14 21:47:01+00:00
First day at a new job: There's a bug in the password check at login... anyone who enters a valid user id can login... (on error resume next)

Oh, and variables like a1...a34, etc. and the passwords themselves... Database table [Phone2] ... why/how/wtf?!? Nobody knows. That was a godawful mess I will never forget.
by matthewdgreen | 2025-10-14 21:47:12+00:00
With an attorney you have a clear sense of when you pass outside of that privilege. With a friend or colleague you have a social sense of what's going to remain confidential, plus memories aren't perfect. "Preserving, recording and reporting every word" is not the same as any of these things. This cannot be the world we all have to live in going forward; it's not safe or healthy.
by egeres | 2025-10-14 21:47:21+00:00
All three (GB10, GB200 and GB300) are part of the Blackwell family, which means they have Compute Capability >= 10.X. You could potentially develop kernels to optimize MoE inference (given the large available unified memory, 128Gb, it makes the most sense to me) with CUDA >= 12.9 then ship the fatbins to the "big boys". As many people have pointed out across the thread, the spark doesn't really has the best perf/$, it's rather a small portable platform for experimentation and development
by johnwatson11218 | 2025-10-14 21:47:26+00:00
I just got a project running whereby I used python + pdfplumber to read in 1100 pdf files, most of my humble bundle collection. I extracted the text and dumped it into a 'documents' table in postgresql. Then I used sentence transformers to reduce each 1K chunk to a single 384D vector which I wrote back to the db. Then I averaged these to produce a document level embedding as a single vector.

Then I was able to apply UMAP + HDBSCAN to this dataset and it produced a 2D plot of all my books. Later I put the discovered topic back in the db and used that to compute tf-idf for my clusters from which I could pick the top 5 terms to serve as a crude cluster label.

It took about 20 to 30 hours to finish all these steps and I was very impressed with the results. I could see my cookbooks clearly separated from my programming and math books. I could drill in and see subclusters for baking, bbq, salads etc.

Currently I'm putting it into a 2 container docker compose file, base postgresql + a python container I'm working on.
by EntropyRaider | 2025-10-14 21:49:20+00:00
@IcePic thanks for noticing! i thought i mentioned my proof pack somewhere and that had Dickens in it but ill go ahead and update my post with these recognizd benchmarks. only the big ones, and nothing under 5mbs thank you again.

ill post the a bunch later bud.

Empire Compression Artifact — enwik8

File enwik8 Full Size: 95,374,000 bytes Compressed File: enwik8_BD546196-RCC Size: 40,040,000 bytes

SHA256: 638700C8306DF6F5FD72C2E8B42E1BBF729E448F8D8D0F9F2354DA988A44D335

Compression Results: Space saved: 58.01% Final file: 42.0% of original size remains

Compression speed: 10.83 MB/s (total elapsed: 8.80 seconds, hashing excluded)

Manifest log: speed_round_20251014_131812.txt

SHA256 (manifest): (optional — run Get-FileHash on the log for extra auditability)
by jsmith45 | 2025-10-14 21:49:22+00:00
BBFC's rulings have legal impact, and they can refuse classification making the film illegal show or sell in the UK.

over in the US, getting an MPAA rating is completely voluntary. MPAA rules do not allow it to refuse to rate a motion picture, and even if they did, the consequences would be the same as choosing not to get a rating.

If you don't get a rating in the US, some theatres and retailers may decline to show/sell your film, but you can always do direct sales, and/or set up private showings.
by citizenpaul | 2025-10-14 21:50:18+00:00
The problem with onsite or colo is always the same. You have to keep fighting the same battle again and again and again. In 5 years when the servers need replaced even though you have already proven it saves orders of magnitude in costs.

I've never once been rewarded for saving 100k+ a month even though I have done exactly that. I have been punished by having to constantly re justify the decision though. I just don't care anymore. I let the "BIG BRAIN MBA's" go ahead and set money on fire in the cloud. It's easier for me. Now I get to hire a team of "cloud architects" to do the infra. At eye bleeding cost increases for a system that will never ever see more than a few thousand users.
by torginus | 2025-10-14 21:50:28+00:00
What I find slightly amusing is I strictly remember education people writing scathing articles about the 'No Child Left Behind' policies and how mechanistic and cruel was it towards children, and how could these evil fascists controlling education reduce children to simple numbers.

Now it's getting praised in retrospect.

I'd wager this article is written if not necessarily by the same people, but most definitely by the same kind of people writing those previous critiques.