MurphyA/hacker-news huggingface dataset:
by KAMSPioneer | 2025-10-17 06:39:59+00:00
So this attack is to steal my Windows password or Windows Hello credentials, but doesn't get my encryption key...? That's...not ideal, but I think you'll see it's an improvement over unencrypted disks (again, TPMs are for people who can't be bothered to set a strong password).

And again this presupposes that you can disable Secure Boot, boot a malicious OS from another drive, fool the user into entering their password, automatically reboot, enable Secure Boot, boot into the legit OS, then come back later and have the ability to boot the OS yourself and log in as the user (because again, you don't have the decryption key, you have the user's login credentials).

You are also presupposing what the TPM is bound to. I don't use Windows, but using systemd-cryptsetup I could configure a TPM to bind to the drives in the system; in this way, it will refuse to boot my legit OS while your malicious disk is installed (well, it will demand a recovery key). Again, setting off alarm bells, and if I discover the disk with my recorded credentials before you can physically access it, I can just destroy it.
by BriggyDwiggs42 | 2025-10-17 06:41:15+00:00
First off, good. I’m glad crime is down. Second, let’s say we ignore the ethical part of what they did to the chicken. Their behavior still demonstrates serious mental issues that should get treatment before they negatively impact a person, right? Also, don’t ignore the ethical issues with fucking torturing a baby animal for no reason whatsoever.
by dgb23 | 2025-10-17 06:43:33+00:00
That’s not true at all.

Over 25% of the population are foreigners and over 40% of citizens have a immigration background.

Immigrants often become more Swiss than traditional residents, whether they are from Albania, Italy, Turkey or Germany (these some of the largest groups).

In fact we have a more heterogenous, multicultural and multilingual country than most other western nations.

And it was like that since basically forever. That’s why decentralization, federalism, neutrality are deemed so important I think.
by eru | 2025-10-17 06:43:45+00:00
Showerhead can still do that.

You can pretty much put water everywhere on a human body, as long as you make sure that they can still breath.

Legs and arms and the back etc are fairly trivial to clean with a showerhead. Skinfolds are where I would expect problems.

Btw, your system doesn't need to handle all corner cases of cleaning to be useful. It needs to not hurt anyone (in all cases); handle most common cases of cleaning; and ideally alert you when it can't clean some spots.

But even a system that can't alert you is still useful for a parent, because the parent can still look over the child afterwards.
by deaux | 2025-10-17 06:44:30+00:00
> Southern Europe, Japan, and India are usually held as exemplar countries with very good natural food culture. All of them are struggling with increasing obesity.

This is a great way to show you haven't visited those places in over a decade. They lagged behind in the takeover of addictive sugary crap. Now they're catching up in the same way. Korea is another great example that you didn't mention, the exact same has happened there.

The dissonance here is that your view of them being held up as such examples is from 2005, whereas your obesity statistics on them are from 2025. As soon as you update the former view to their situation as of 2025, you'll draw the exact opposite conclusion: an exact match.
by whyoh | 2025-10-17 06:45:54+00:00
This is the ISO I used, which, according to the MS website[1], is still the latest right now: Win11_25H2_English_x64.iso (SHA256: D141F6030FED50F75E2B03E1EB2E53646C4B21E5386047CB860AF5223F102A32)

I installed it offline in a VM, Home edition, US region. Shift+F10, oobe\bypassnro worked (with a warning/error at some step, but the local account was created fine). I read somewhere that it doesn't work if you connect to the internet during setup (which is always a bad idea IMO).

[1] https://www.microsoft.com/en-us/software-download/windows11
by eru | 2025-10-17 06:47:01+00:00
You know they are adding AI to drones fighting in Ukraine (on both sides). Mostly to deal with signalling scamming that prevents remote operators from controlling the drone.

Whether you consider your opponent in a war sub-human or not is completely irrelevant to all the engineering problems you have to solve here.

Reliability is absolutely important, because you want that opposing tank or helicopter or soldier etc to no longer be opposing you. (But, of course, reliability is only one aspect, and engineers make lots and lots of trade-offs.)

What context do you have in mind where you need a robot to shoot people?
by mrweasel | 2025-10-17 06:48:14+00:00
Just imagine if they had put the same effort into making a usable Android app, then the author wouldn't have bothered. In some sense it's negligence on Amazons part.

Years ago I dropped buying stuff on Amazon, because they can't match prices, shipping times and the site just invites scams, but I kept buying eBooks, because my old Kindle is sort of amazing. Then they started messing with the Kindle platform as well and now I just buy physical books from local retailers.
by deaux | 2025-10-17 06:50:23+00:00
> There are regions of the world that are doing better than others

It maps about 1:1 with the amount of sugary, fatty, addictive shit they're consuming. Across the globe. So do the trends. Prime example being the rising obesity rates in countries like Japan and Korea, rising at the exact same pace as the supply and consumption of above crap in those countries. They still have lower obesity rates than much of the West, at roughly the same relative difference of the amount of such crap consumed.
by BrandoElFollito | 2025-10-17 06:50:41+00:00
As a European, seeing 1.5 USD for a donut, having the cash ready, and then learning that I have to pay 1.78 because there is a hidden tax different everywhere is ridiculous.

Gone the advantage of having 1.5 ready, I need to look for the ... euuhhh ... 28 cents, or give a 2 and wait for the .... euuuhhhh ... 22 cents back.

At least here when I see 18 € for a meal, I know that this is 18 €. Not 18 + some tax + some tip = holly molly, this is an expensive meal!
by ggm | 2025-10-17 06:52:13+00:00
Always amazes me how low the walls are on number porting and sim swapping. In high GDP economies too.

The one time this played in my favour was when the MVNO I depended on closed shop while i was overseas and I was able to port back into the actual carrier they virtualised on, but only because we had a dormant account in it and knew a telephone access pass phrase. "Oh, you're already a customer" magic.
by umanwizard | 2025-10-17 06:52:25+00:00
> when it’s raining or in snow

Outside of the late summer monsoon, there is rarely serious rain in Phoenix, and virtually never snow.

Probably at least part of why the pilot program is there.

There also aren’t many 30-floor residential buildings. Phoenix is basically the quintessential American West suburban sprawl town: outside of a proportionally very small downtown it’s entirely dominated by houses and occasional 2-3 story apartment complexes.
by red369 | 2025-10-17 06:53:04+00:00
My comment is going to be like a tangent to a tangent, but since it's about Bitcoin it sort of comes back to the original topic.

I agree about digital payments, but one of the things that I found disappointingly complex about Bitcoin is needing to receive change when making a payment (https://en.wikipedia.org/wiki/Unspent_transaction_output).

I only made a few Bitcoin transactions because I found the whole experience did not feel like the future. That was a while ago now, and as other commentors have pointed out, it not seems obvious that the real value in Bitcoin lies elsewhere.
by Intermernet | 2025-10-17 06:53:16+00:00
I think we're debating around the actual core of the issue: Regulations are only as good or bad as the content of the regulations, and corrupt governments can (and do) ignore and enact regulations at their pleasure.

Ideally, regulations can promote startups and overall market competition. We do see that ideal in some Australian regulations (and I would guess in most countries) but regulations are decided by the government, and that means that their enforcement (or lack thereof) and intent is often pro-incumbent.

I still maintain that regulations on political lobbying and donations would go a long way to open up the playing field for startups. Unfortunately, I don't see any evidence of any political party in any country doing more than pay lip service to actually doing this.
by majke | 2025-10-17 06:53:40+00:00
I totally agree. Early days Cloudflare was a great example of this. We treated IP addresses as data, not as configuration. New subnet? INSERT INTO and we're done. Blocked IP? DELETE FROM, and tadam. This was a huge differentiator from other CDN's and allowed us extreme flexibility. The real magic and complexity was with automatic generating and managing HTTPS certs (days before SNI).
by gtsop | 2025-10-17 06:54:20+00:00
Completely agree with the motivation (dont like the parens)

Here is another use case i found helpful for html: i use a different, dimmer color for the closing html tags.

I now only use my own tree-sitter syntax and my own neovim highlight colors, i literally stripped all the defaults.

I started writting code with literally white text on a black background, and i only added new highlight groups when my brain really needed it. This way every color becomes deliberate and i gradually add in just what i need
by hyperbrainer | 2025-10-17 06:54:26+00:00
Irrelevant but spreadsheets have always struck me as one of the most beautiful pieces of software that we use. Automatically updating calculations, programming logic complex anough for most ERPs, using it is a database, easy organisation of data, graphs -- it has it all. From both a user and developer perspective, they are one of the most diverse tools on a computer. MS may make terrible software sometimes, but damn it, does Excel run the world.
by lloydjones | 2025-10-17 06:56:19+00:00
There's a cloud-based sync service (500mb of books; 10k translation chars). I'm currently storing 24 books (as I haven't moved them all across from the Kindle app yet) and I'm using 12% of this storage.

I suppose if you want to implement your own cloud-based (Dropbox? Google Drive?) storage service and circumvent the author's monetisation model, you could.
by AlexeyBelov | 2025-10-17 06:56:47+00:00
HN has issues with trolls, and trolls don't care about guidelines. Almost every time I read a comment that's clearly out of place it comes from a throwaway-like account registered like 4 months ago. And the comment history is full of such comments, so it's often not a one-off.

Despite this, HN doesn't do much about it, and creating new accounts and trolling for a couple of months is very, very easy.
by swiftcoder | 2025-10-17 06:59:35+00:00
Making the obviously-abusive bot prohibitively expensive is one way to go, if you control the terminating server.

gzip bomb is good if the bot happens to be vulnerable, but even just slowing down their connection rate is often sufficient - waiting just 10 seconds before responding with your 404 is going to consume ~7,000 ports on their box, which should be enough to crash most linux processes (nginx + mod-http-echo is a really easy way to set this up)
by elcomet | 2025-10-17 07:02:13+00:00
I don't understand all the hype for generating SVG with LLM. The task is not really useful, doesn't seem that interesting in single shot as it's really hard, and no human could do it (it would be more useful if the model has visual feedback and could correct the result).

And also, since it becomes a popular task, companies will add the examples in their training set, so you're just benchmarking who has the better text to SVG training set, not the overall quality of the model.
by anonymousiam | 2025-10-17 07:02:37+00:00
I purchased a WABI CD-ROM from Caldera (before they were bad) sometime around 1996. I guess it's been long enough now that the name can safely be reused.

https://en.wikipedia.org/wiki/Wabi_(software)

https://en.wikipedia.org/wiki/SCO%E2%80%93Linux_disputes
by hatmanstack | 2025-10-17 07:04:46+00:00
In my experience with Kiro's spec-driven approach it generated massive task lists (12+ tasks with 4+ sub-tasks each). The workflow was decent but it deleted code unpredictably and wouldn't revert changes. Being a full IDE likely diverts resources to UI edge cases rather than core reliability.

So much simpler to just iterate without the puzzle box of tasks. "a sledgehammer to crack a nut"
by eichin | 2025-10-17 07:04:47+00:00
I remember a scratch-and-sniff version, rather than just scented (in western CT, in the 1970s - they must have bulk sent them, noone in the neighborhood actually had gas service so it wasn't in with gas bills.) That's enough to find https://hackaday.com/2024/12/03/scratch-and-sniff-stickers-a... and the search https://www.google.com/search?q=scratch-and-sniff+mercaptan&... actually turns up a bunch of present-day gas vendors that will send them to you on request!
by penberg | 2025-10-17 07:04:56+00:00
You're not wrong about VC-funded database arc, but what history are you even talking about?

I am sure you understand that I have absolutely nothing to do with Scylla's licensing. I have not worked there for four years nor was I ever in a position there that I would even had that opportunity to influence such decisions.

I am also sure you understand that Scylla's development model was completely different: they had AGPL license and contributors had to sign a CLA, which is why they were able to relicense in the first place. Turso is MIT licensed and there's no barrier to contributing and, therefore, already a much bigger contributor base.

I fully understand the scepticism, but you're mistaken about the open source history of Turso's founders.
by ggm | 2025-10-17 07:05:46+00:00
So clean room the llvm analysis and work from a spec carried out of the room.

It's a really low bar to avoid, tbh. The point is that people have hobbies. And aspects of this work can look like a hobbyist "but i don't want to do it that way" view.

As a consumer of compiler products it doesn't have to matter to me, nor as a user of compilers. It's only observations reading the comments and the article which brought this to mind: llvm is proof by example and is a different kind of open source, it's not a barrier I would struggle to pierce, for my own personal view of code licences.

(I'm old enough to have read the gnu manifesto when it first published btw)
by zer0zzz | 2025-10-17 07:06:15+00:00
https://tidbits.com/2025/10/09/how-to-turn-liquid-glass-into...

I really don't like what it does to certain transparent drop downs for certain apps as well as the control center.

But It does seem nice to do it on a per app basis (ie "defaults write com.apple.finder com.apple.SwiftUI.DisableSolarium -bool YES")

https://tidbits.com/2025/10/09/how-to-turn-liquid-glass-into...
by tgsovlerkhgsel | 2025-10-17 07:06:47+00:00
Isn't ingress free at AWS? You'd have to find a way to generate absurd amounts of egress traffic - absurd enough to be noticed compared to billions of HTTP requests. 2B requests at 1 KB/request is 2 TB/month so they're likely paying a double-digit dollar amount just for the traffic they're sending to you (wtf - where does that money come from?).

But since AWS considers this fine, I'd absolutely take the "redirecting the entirety of the traffic to aws abuse report page" approach. If they consider it abuse - great, they can go turn it off then. The bot could behave differently but at least curl won't add a referer header or similar when it is redirected, so the obvious target would be their instance hosting the bot, not you.

Actually, I would find the biggest file I can that is hosted by Amazon itself (not another AWS customer) and redirect them to it. I bet they're hosting linux images somewhere. Besides being more annoying (and thus hopefully attention-getting) for Amazon, it should keep the bot busy for longer, reducing the amount of traffic hitting you.

If the bot doesn't eat files over a certain size, try to find something smaller or something that doesn't report the size in response to a HEAD request.
by jalapenos | 2025-10-17 07:06:55+00:00
One thing I wish I could distill into the minds of the young is that elders are not your friends.

Elder generations do this to you, while also pricing you out of owning your home, while they post their utterances of self-indulgent sense-of-superiority delusional "I'm wiser than you all" crap all over the internet.

They'll also put you first in the trench to get machine gunned, if any conflicts - which they precipitate - eventuate.

Meanwhile they've set up nice socialised pension and medical care systems for themselves, sucking your blood until the day they die.

By default, members elder generations should be assumed to be scum until they prove otherwise.
by athrowaway3z | 2025-10-17 07:08:29+00:00
The data might be a graph, but we're interested in conceptual units of data / abstraction.

Organizations as a whole need to talk the same language. "We have the data somewhere, somehow - so figure it out" doesn't work when communicating.

A good proxy measurement is how fast it takes two random employees to talk about the same thing. It's the effective knowledge transfer speed after taking into account the data density / compression.

The infinite many views of a graph don't compress.

Or more practically, any graph will continuously evolve a set of 'common views' that an organization understands and uses.
by bayindirh | 2025-10-17 07:10:44+00:00
IBM published its initial BIOS code in a manual bundled with the PC. Having any knowledge of it, even if you don't implement it verbatim makes you tainted, and makes you guilty in any of the subsequent cases.

This is why Black Box Reverse Engineering Exists.

Same is true for console reverse engineering. No self respecting reverse engineer reads code leaks from official console development. Otherwise they'd be in a legal hot water.

This is serious stuff and there's no blurry line in this.
by burnt-resistor | 2025-10-17 07:11:24+00:00
> People on a temporary visa should not be given mortgages anyway.

Uh did you think that through?

> Are the banks dumb? If they leave you're never going to recoup the balance.

Maybe you believe someone will pack a house into a suitcase when they leave or that foreclosure isn't a thing.

From a capitalist perspective, encouraging guest workers to take on fixed collateralized debt is an excellent anchor to reduce turnover, in addition to holding their workers' visas hostage and nudging them to start families. The result is cheaper, compliant workers who won't unionize, strike, or complain about abuse. As long as it's kept secret and doesn't make it to social media or the legacy news. It's similar to students loans and personal debt in that way because it keeps people tethered to a job they might hate.
by tick_tock_tick | 2025-10-17 07:11:32+00:00
> Europe isn't that poor and many chunks of Asia have a lot of wealth now.

Europe is that poor and while lots of Asia has wealth not by comparison.

> Yet America's appetite and more importantly capability of absorbing all manner of goods remains unimpaired...how?!

We are just that much richer. It's honestly mind-blowing how much more money the average American has then anyone and everyone.
by LarsDu88 | 2025-10-17 07:14:05+00:00
This sounds a bit like copium. There's more than one AI based technique for generating images, and its almost trivial to ask an ai to both come up with an original art style and to generate images in what it says to be original.

There are AIs that come up with working mathematical proofs now and they are getting better at it. Your perception of the current SOTA is about 18 months out of date
by fainpul | 2025-10-17 07:14:07+00:00
Remember when it was illegal to export strong cryptography from the US? There was no law to restrict that, so they just made something up. It basically went like this:

Problem: we can't make cryptography exports (software exports) illegal

-> what actually IS illegal to export?

-> munitions!

-> let's just declare that cryptography is "munitions"

-> problem solved

https://en.wikipedia.org/wiki/Export_of_cryptography_from_th...
by teekert | 2025-10-17 07:15:54+00:00
I have to say that I usually only download ebooks illegally when the DRM stops me reading them!

I only have Linux machines at my disposal and I have a PocketBook. The device is nice, but the store is truly abysmal. Often there is some adobe based DRM on books I want to buy and I never got it to work with my ereader.

I just gave up and pirate them now, unless there is a DRM free version (authors like Ruther Bregman and Cory Doctorow provide them.)

It used to be quite easy to strip DRM from kindle books, with my old kindle keybaord, so in the past I always bought a lot of ebooks from Amazon. But now I can't get them on my device anymore. A true shame, the Amazon ebook store really has all the books.

This whole situation p**es me off enough to not feel bad about pirating.
by geokon | 2025-10-17 07:16:54+00:00
I think you're mixing things up. People don't need to have the same language at all. Compression can happen by "users" at a higher level when interacting with the data model. The data model itself does not need to encode this.

HR may want to look at employees from one view and your accountant might want to look from an entirely different one. They communicate with people in their own field using their own compression. You don't need to settle on one abstraction for everyone.

The data-model designers need to communicate with each other.. sure.. but it's their job to think in a non-compressed way about the data model.
by jamesblonde | 2025-10-17 07:17:13+00:00
I was expecting a discussion of the foundations of data modelling: star schema vs snowflake schema data models vs one big table. The benefits of 3NF vs when you have to denormalize.

This underlying choice of data model actually does define your destiny. What I think the author was thinking of is domain modelling and correct entity identification, which is also important. It's a layered approach - and if you ignore the foundations (the actual data model), you hit limitations higher up.

For example, in real-time AI systems, you might want users to provide a single value (like an order number) to retrieve precomputed features for a model. With Snowflake Schema data models, it works. But for Star Schema data models, you have to provide entity IDs for all tables containing precomputed features - which leads to big problems (the need for a mapping table, a new pipeline, and higher latency).

Reference: https://www.hopsworks.ai/post/the-journey-from-star-schema-t...
by _glass | 2025-10-17 07:17:50+00:00
Yes, this is so true for me. Especially when I had this revenge arc, where I knew I could be good. Most of my strengths came later. Now people think that I am talented in that stuff, but there's always hard work behind it, and I was mostly the worst in class. But there was always a shining light in sight, where I knew I could, and that it is a good pathway.
by KingOfMyRoom | 2025-10-17 07:18:10+00:00
You have a great way of demystifying things. Thanks for the insights here!

Do you think a non-programmer could realistically build a full app using vibe coding?

What fundamentals would you say are essential to understand first?

For context, I’m in finance, but about 8 years ago I built a full app with Angular/Ionic (live on Play Store, under review on Apple Store at that time) after doing a Coursera specialization. That was my first startup attempt, I haven’t coded since.

My current idea is to combine ChatGPT prompts with Lovable to get something built, then fine-tune and iterate using Roo Code (VS plugin).

I’d love to try again with vibe coding. Any resources or directions you’d recommend?