MurphyA/hacker-news huggingface dataset:
by yjftsjthsd-h | 2025-10-30 05:00:52+00:00
> For the Android comparison, GrapheneOS is the only privacy and security hardened OS included in the comparison. DivestOS used to be included before it was discontinued. An OS not including Google Mobile Services and branding itself as private based on that is a much different thing than a privacy and security hardened OS. Which other Android-based hardened OS could be included in the comparison?

I was arguing on the other axis. It's got good coverage of OS options, but the list of features is indistinguishable from someone saying "okay, this is what GOS does; how do others compare to each of its selling points?"

> None of the operating systems listed in the comparison include app accessible root access.

There is a difference between not shipping something by default, and being actively hostile to it.

> Giving unconstrained root access to a huge portion of the OS including the application layer including a GUI application for managing firewall rules is not a well secured to implementing it.

Agreed, that would be foolish. Thankfully, nobody is suggesting that. Just use a permission prompt, like every android root solution has for... over a decade? I don't think I've ever seen anyone not putting root behind a permission prompt, actually.

> RethinkDNS is a good example of an app providing support for local filtering via the VPN service app feature without losing the ability to use a VPN. RethinkDNS supports using a WireGuard VPN or even multiple chained WireGuard VPNs while doing local filtering of both DNS and arbitrary connections.

AFAICT, RethinkDNS demonstrates the problem quite nicely. On, say, my laptop, I can configure arbitrary VPNs and firewall rules, and I can configure them independently. Android conflates them such that - if not using root to work around the official way - your firewall app and your VPN app must be the same app. It's nice that RethinkDNS has specifically added wireguard support to its firewall app, but the fact that they needed to is a symptom of a poor design.
by Joel_Mckay | 2025-10-30 05:01:41+00:00
There are stories of when near perfect mirrors entered trade. Some stories are sweet, and others rather macabre:

https://www.japanpowered.com/folklore-and-urban-legends/mirr...

Technology tends to influence cultures in subtle ways few remember a generation later. =3

https://en.wikipedia.org/wiki/The_Most_Dangerous_Animal_In_T...
by llanowarelves | 2025-10-30 05:02:08+00:00
Or you could say it the other way around: Even leading scientists are susceptible to letting emotions get the best of them and double-down defending their personal investments into things.

"A scientific truth does not triumph by convincing its opponents and making them see the light, but rather because its opponents eventually die and a new generation grows up that is familiar with it." - Max Planck.
by ActorNightly | 2025-10-30 05:04:25+00:00
Yep.

AWS is a money printer because it enables companies to make a lot more money without hiring multiple 200k a year engineers to manage infrastructure that comes with scale. And that is also considering that the company will actually have to find competent people to do the work.

With AWS, if you wanna scale, you just use your credit card without worrying about anything.
by rasz | 2025-10-30 05:05:45+00:00
Great hack from very talented hacker. Steve Markgraf is the author of High Speed Data Acquisition over HDMI https://github.com/steve-m/hsdaoh Capturing raw data using super cheap USB3 HDMI Video Capture dongles. Up to 175MB/s with Pico2 as the sender https://github.com/steve-m/hsdaoh-rp2350

Sadly 100Mbit might be the limit for bitbanging ethernet. While 1Gbit uses easily reachable 125MHz clock it also does full duplex requiring echo cancellation and I dont see an easy way around external PHY. The next PICO challenge is implementing GRMII PHY support for that sweet $1 RTL8211 1Gbit. I havent seen that done yet.
by zdw | 2025-10-30 05:06:59+00:00
Depends where you are in the industry - the hyperscalers specifically have budget to afford a team to write P4 or other SDN code to manage their networks in production, so they're probably the biggest beneficiaries.

Lower end, it did make programmability more accessible to more folks and enabled whitebox switches to compete against entrenched players to a far greater extent than previously possible. Again, hyperscalers are going to be the main folks who buy this kind of gear and run SONiC or similar on it, so they can own the full switch software stack.

Many of the startup companies in the SDN space did have successful exits into larger players - for example Nicira into VMWare, Barefoot (Tofino switch chip) and Ananki (the ONF 4G/5G spinoff) into Intel. Also, much of the software was developed as open source, and is still out there to be used and built on.
by forgotoldacc | 2025-10-30 05:08:08+00:00
You can go to China and see it for yourself. The USSR made itself inaccessible to foreigners for the most part, but you can hop on a train and visit nearly any place in China freely. It's pretty easy with their extensive train system.

I see a lot of cope with "c-China is lying! It's not really that good!" But lots of tourists such as myself have been all over the country, and tbh, I think the "propaganda" undersells it a bit. I thought there was no way it could be as nice as the travel videos I saw, but it was even better.
by quantified | 2025-10-30 05:08:57+00:00
Separation of data and algorithm is so useful. I can't really comment on how your senior is doing it, but in the area of numeric calculations, making numbers know anything about their calcs is a Bad Idea. Even associations with their units or other metadata should be loose. Functional programming provides such a useful intellectual toolkit even if you program in Java.

Sorry to learn, hope you don't get scar tissue from it.
by olgs | 2025-10-30 05:09:09+00:00
One of my first job out of school was as a sales support for the then bleeding edge NT 3.1 MIPS box for a company in Canada. Fond memories of loading stacks of 1.44 floppy disks for NT 3.1 and mangling ARC paths (Advanced RISC Computing, boot firmware). This was pre-internet and documentation was often hard to come by, incomplete etc.

I remember demoing the machines to astonished clients by running a stupid number of Clock apps on the desktop without a hitch.

Fun times.
by tomhow | 2025-10-30 05:09:39+00:00
Please don't fulminate on HN. A sentence like "Actually nuts to me the degree to which European policymakers do not even begin to understand" is inflammatory rhetoric of the kind we're trying to avoid here on HN. The question of how countries/economic unions can funtion most effectively is a topic worthy of serious discussion, but these discussions can be far more fruitful it they're approached with curiosity rather than rage.
by ActorNightly | 2025-10-30 05:11:16+00:00
The thing is, when it comes to AWS, its not like everyone is going to suddenly migrate off because of a DNS issues. If a company that runs on AWS is not making money, its very likely that their competitors are neither. So more optimized solutions are not really worth it.

In a perfect world, everything would have a unique IPV6 address, and we wouldn't need DNS. Instead of NAT, you would just have any computer/vm that wants to be connected to the internet tacked on to existing address space, and then instead of DNS record being synced, you just use the address directly, and routing would take care of everything.
by andsoitis | 2025-10-30 05:12:43+00:00
> > Quality and purity untested

> Not true for everyone, or perhaps even most playing in this space.

> Every batch friends of mine have ordered has been independently tested for purity and dosing. Random batches also tested for sterility.

Yes, you have to test it because the quality and purity what you get isn’t tested.

When someone sells something and they make a statement about the product (e.g. “tested”), they don’t mean the customer has to test it.
by udave | 2025-10-30 05:14:23+00:00
I find the distinction between queue and pub sub system quite poor. A pub sub system is just a persistent queue at its core, the only distinction is you have multiple queues for each subscriber, hence multiple readers. everything else stays the same. Ordering is expected to be strict in both cases. The Durability factor is also baked in both systems. On the question of bounded and unbounded queue: does not message queues also spill to disk in order to prevent OOM scenarios?
by yjftsjthsd-h | 2025-10-30 05:15:33+00:00
> In corpo-world. Everyone is using Windows. If they are using Linux it would be through a VM or WSL. I guarantee none of those people are using Linux at home.

And I guarantee that you're wrong, because I work a corporate job where I have to put up with Windows and am 99% Linux at home. (The other 1% is *BSD and illumos.)
by dadoum | 2025-10-30 05:18:31+00:00
It probably doesn't, as you practically never need Xcode for simple apps. From my experience, currently, you need Xcode to compile storyboards (NIB/XIB files) and bundle Assets.car (macOS BOM files); and compile Xcode projects, btw. I may be missing another important feature used in a lot of apps but otherwise for the most part you can build an iOS app without Xcode (or even macOS).
by gwillen85 | 2025-10-30 05:18:53+00:00
So on constraints:

they're definitely on the roadmap but not in the alpha yet. The syntax like CREATE CONSTRAINT ON (n:Person) ASSERT n.email IS UNIQUE is designed to work, and we've got the error handling infrastructure in place, but the actual enforcement logic is planned for v0.2.0 and beyond. Same goes for relationship constraints - the foundation's there with schema validation, but the complex constraint types are coming in future versions.

Indices are similar - we've got the query planner logic ready to use them, and label indexing is partially implemented as a foundation. Property indexes are definitely planned, with basic support in v0.2.0 and composite indexes following in v0.4.0. The current alpha focuses on getting the core Cypher operations (CREATE/MATCH) solid before layering on the optimization features.

The roadmap shows: v0.2.0 (Q1 2026): Property indexes and basic constraints v0.4.0 (Q3 2026): Advanced indexing (composite, spatial) v1.0.0 (2027): Full constraint support

For now, you can enforce constraints at the application level or use raw SQLite constraints on the backing tables if you need that functionality immediately. The alpha is really about proving the core graph operations work end-to-end before adding the enterprise features.
by Ferret7446 | 2025-10-30 05:19:21+00:00
That "accumulated baggage" is though not entirely mostly knowledge and progress won through sweat and tears from many mistakes over many lifetimes.

There's a reason we moved on from paper tape to visual displays, and then from line editors to freeform buffer editors. We didn't abandon paper tape due to "baggage", we did it because it sucked and was inefficient.

Though certainly, I agree with studying and learning from history. It doesn't hurt to know how to use ed, especially since it doesn't take long to learn.
by overfeed | 2025-10-30 05:20:26+00:00
California is home to 1 in 8 Americans, and likely a much higher fraction of AI researchers, users and partner organizations to OpenAI (like Nvidia). The California AG has plenty of leverage beyond blocking/reversing the conversion. What leverage will OpenAI have after "leaving"[1] the California?

1. They're guaranteed to have an engineering office in the SF Bay. Not many of those folk will agree to relocate to Texas/Miami.
by woile | 2025-10-30 05:20:44+00:00
There are a few things missing I think.

I think kafka makes easy to create an event driven architecture. This is particularly useful when you have many teams. They are properly isolated from each other.

And with many teams, another problem comes, there's no guarantee that queries are gonna be properly written, then postgres' performance may be hindered.

Given this, I think using Kafka in companies with many teams can be useful, even if the data they move is not insanely big.
by tomhow | 2025-10-30 05:21:05+00:00
> You and other DEI virtue signaling white knights are engaging in the worst racism of all.

A comment like this is completely unacceptable on HN. The guidelines make it clear that we expect better than this here:

Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.

Comments should get more thoughtful and substantive, not less, as a topic gets more divisive.

When disagreeing, please reply to the argument instead of calling names. "That is idiotic; 1 + 1 is 2, not 3" can be shortened to "1 + 1 is 2, not 3."

Please don't fulminate. Please don't sneer, including at the rest of the community.

Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith.

Eschew flamebait. Avoid generic tangents. Omit internet tropes.

Please don't use Hacker News for political or ideological battle. It tramples curiosity.

https://news.ycombinator.com/newsguidelines.html
by zzo38computer | 2025-10-30 05:22:02+00:00
I agree, but it is not good enough. They should also need to actually check for malware and other problems with their own app store, in addition to allowing loading your own unverified (or that you verify yourself in a different way) software if you want to do too (perhaps with the option to configure this, as you mentioned).

(I do not use iPhone nor Android and I won't, even if they do fix these problems.)
by AnthonyMouse | 2025-10-30 05:22:15+00:00
> That's not a current Xbox One or PS5 exclusive. Peggle 2 is an Xbox 360 game.

It's a game that was originally released for Xbox One and is still a console exclusive.

> The game data on Xbox 360 discs can only be read from the Xbox 360 DVD drive. Xbox 360 was jailbroken so that the games can be extracted and downloaded from the discs.

They can only be read from a drive with the right firmware to read them. It doesn't have to be done on the official console and it works for the newer Xbox consoles too:

http://wiki.redump.org/index.php?title=Disc_Dumping_Guide_(M...

> Every game shown by XWine1 has been a game that was on the 360 or also already available for PC.

This is because the number exclusive games is so small.

> I'm sure some of the top selling exclusives on PlayStation and Xbox have had high demand to be played on PC.

It's about aggregate demand. Someone has to implement that console's APIs on a PC, at which point it can play all the games, or if they implement part of the API then all the games that use that subset of the API. This happens quickly if there are thousands of exclusive games that everybody wants and not quickly if there are tens of exclusive games and people only really want like two of them.

> It's only useless on Windows because Windows hasn't fully committed to trusted computing yet.

It's still useless because "trusted computing" doesn't actually work. Any vulnerability in any part of the system can be used to extract everything, and new vulnerabilities are discovered on a regular basis. Several of the vulnerabilities have allowed extracting the keys from the TPM in popular hardware, so pirates can already get as many hardware keys as they want from any of those devices and patching them after the fact doesn't deprive them of any of the keys they've already extracted. And the vulnerable devices are essentially all of them, so if you tried to block every model that could have had its keys extracted your actual customers won't be able to view your content.

> It works as intended. Free Linux can only decode Widevine L3, so you are limited to a lower quality stream. Chrome OS supports L1.

And the pirates have both the L3 and L1 streams. If that's working as intended then it's useless, isn't it?

Unless its actual purpose is to lock people into platforms from megacorps so the megacorps can extract a thick percentage from the actual content creators by monopolizing the distribution path.
by GolfPopper | 2025-10-30 05:22:16+00:00
>*"conservatives have been running that playbook since the New Deal"

I think one of America's many failures is allowing a radically revolutionary right-wing (that is currently headed full speed to fascism) to keep calling themselves "conservatives" when that label is about as incorrect as can be. They don't "conserve" anything. They're not actually reactionary, although they often pretend to be. They are not trying to be defenders of Chesterton's Gate[1]. They're radicals, who want to reshape society to their own whims and prejudices. And they ought to be address and treated as such.

1. https://www.chesterton.org/taking-a-fence-down/
by beloch | 2025-10-30 05:25:39+00:00
How much of this is the result of reversing the deforestation caused by the Great Leap Forward and other anti-nature policies of the mid twentieth century?

It's not a bad thing if this is mostly just restoring forests ravaged by bad policy, but it's a bit odd to compare this reforestation, quantitatively, to what's going on in countries that didn't have a "war against nature".
by yjftsjthsd-h | 2025-10-30 05:26:03+00:00
> Ideally, major manufacturers would all contribute to AOSP to make sure that it runs well with their devices. And then we could install the "AOSP distro" we want, be it GrapheneOS or LineageOS or whatever the fuck we want.

I was under the impression that we got that with GSI, including that Google required a device to support GSIs in order to be certified or something like that. Am I misremembering?
by businessmate | 2025-10-30 05:27:33+00:00
By August 2026, under the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), enterprises that use AI-generated data to make commercial, reputational, or financial decisions will need to demonstrate that such data is verifiable, traceable, and reproducible.

This is more than a compliance deadline. It marks the first time in corporate history that data credibility itself becomes a regulated asset—subject to audit, assurance, and potential impairment.

Most organizations are unprepared. Many have spent the past two years building strategy atop opaque “AI visibility” dashboards that cannot reproduce their own outputs. Once the Act’s enforcement phase begins, that data will not simply be risky—it will be inadmissible.
by grumpy-de-sre | 2025-10-30 05:27:42+00:00
Colon cancer is an interesting one, Hank Green [1] recently covered a new paper [2] that showed a massive reduction in colon cancer risk for folks that engaged in moderate, regular, exercise. The authors speculated that mechanical stress leading to increased shedding might play an important role.

Weirdly enough that's the same mechanism hypothesized to play a partial role in why breast feeding is also associated with a reduced cancer risk.

Fascinating, weird, stuff.

1. https://www.youtube.com/watch?v=4RXSX93mvg8

2. https://www.nejm.org/doi/pdf/10.1056/NEJMoa2502760
by ActorNightly | 2025-10-30 05:28:02+00:00
>and you have to keep up with everybody who ship twice as much code as before

The competitive nature of this regard was always there, it just took a pause during Covid hiring.

FAANG in mid 2010s used to be fairly competitive.5-10% of the people that got the in-person interview got the offer. The stories you heard about work load and stress and PIPs weren't so much about how the expectation was, it was more along the lines of the bottom line of developers who never developed the skill set to be effective at work just couldn't keep up with the people that did.

Companies still grew, so people were still building stuff, and if you knew any of the "top" developers, you saw they weren't stressing. Partially, they enjoyed the work they did and weren't working for the FAANG paycheck only like the majority of people. But mostly its because when it came to doing the work, the biggest advantage that they had is they had the ability to independently figure shit out. This is where "knowing how to code = knowing how to google" and "copy pasting stackoverflow" memes came from. Whereas people that didn't were always slow because they a) were only doing what they have been taught without any interest of actually learning things, and b) they relied on others a lot for guidance.

Then came the covid hiring craze when interest rates were low and companies invested a shit ton of money into products. People needed to get hired. Standards slipped. Lots of people with very low skill got hired that should never have been.

Now, the competitive edge is back on, except this time, its about how to use LLMs. Contrary to popular belief, LLMs take skill to use, not everyone can vibe code services into production. Prompt engineering is very real. To get LLMs output good quality code you have to guide them quite a bit. If you don't have a set of personal prompts you use to get LLMs to do stuff, you are behind.

Thats the nature of the game where new grads can make 100k out of college. That money isn't free. Learn to play the game or don't play at all.
by caymanjim | 2025-10-30 05:28:23+00:00
There's a completely irrational knee-jerk reaction to curl|sh. Do you trust the source or not? People who gripe about this will think nothing of downloading a tarball and running "make install", or downloading an executable and installing it in /usr/local/bin.

I will happily copy-paste this from any source I trust, for the same reason I'll happily install their software any other way.
by JumpCrisscross | 2025-10-30 05:28:24+00:00
> As a member of humanity as a whole, they are supposed to be operating for my benefit

No. The common good refers to “what is shared and beneficial for all or most members of a given community” [1]. There is no individual claim to benefit.

You can feel misled. Sort of like when a visionary promises something you want and then fails to deliver. But that doesn’t mean you were materially misled, which means you aren’t owed anything.

> they should have been paying taxes on every dollar they brought in

We don’t tax investment in America.

[1] https://en.wikipedia.org/wiki/Common_good
by mercutio2 | 2025-10-30 05:28:26+00:00
Wow! I just spent a good chunk of time last week setting up headscale and split horizon SSL behind my network, and I expected I was going to just expose a Wireguard UDP port, but discovered no, it’s DERP or nothing. DERP has been OK, but I think just exposing a UDP port on my local network is better.

If we’re really confident in the security of that UDP client, that is. I feel very comfortable exposing a Wireguard bastion, time will tell how secure whatever protocol tailscale is serving, here, will be.
by zzo38computer | 2025-10-30 05:29:24+00:00
> I disagree. The Android security model is better than the Linux one.

In some ways it probably is, but it still isn't that good in my opinion (although some of the problems have to do with the way the settings and controls are working rather than the security model itself, there are also problems with the security model itself too). (I think there are other problems with Android (and other operating systems) too.)
by JumpCrisscross | 2025-10-30 05:30:21+00:00
> Independence is neither a fixed condition nor a universal status for all purposes

This is true of all law. That doesn’t mean “people aren't even on the same page as to what” it means.

> Your document makes my exact point, not yours. You are out of your depth

It doesn't and probably not. How many boards have you been on? Public companies? Non-profit? Have you litigated a shareholder lawsuit under Delaware law?