MurphyA/hacker-news huggingface dataset:
by aprilfoo | 2025-10-29 15:52:45+00:00
The EU's DMA team replied to a previous inquiry:

> [...] the Digital Markets Act (‘DMA’) obliges gatekeepers like Google to effectively allow the distribution of apps on their operating system through third party app stores or the web. At the same time, the DMA also permits Google to introduce strictly necessary and proportionate measures to ensure that third-party software apps or app stores do not endanger the integrity of the hardware or operating system or to enable end users to effectively protect security. [...]

They seem to be on it, but no surprise: it's all about Google's claims for "security" and "ongoing dialogue gatekeepers".

Freedom to use own hardware or software, no.
by marcosdumay | 2025-10-29 15:52:48+00:00
When people say "just use postgres" it's because their immediate need is so low that this doesn't matter.

And the thing is, a server from 10 years ago running postgres (with a backup) is enough for most applications to handle thousands of simultaneous users. Without even going into the kinds of optimization you are talking about. Adding ops complexity for the sake of scale on the exploratory phase of a product is a really bad idea when there's an alternative out there that can carry you until you have fit some market. (And for some markets, that's enough forever.)
by Cthulhu_ | 2025-10-29 15:52:49+00:00
Well sure, but these guidelines exist, the robots.txt guidelines has been an industry-led, self-governing / self-restrictive standard. But newer bots ignore them. It'll take years for legislation to catch up, and even then it would be by country or region, not something global because that's not how the internet works.

Even if there is legislation or whatever, you can sue an OpenAI or a Microsoft, but starting a new company that does scraping and sells it on to the highest bidder is trivial.
by NickC25 | 2025-10-29 15:53:13+00:00
Companies need to seriously stop with this. I don't care if they make money by selling that ad space, I'm not going to fucking buy a fridge that advertises to me and needs the internet. It's a fridge for god's sake.

Unless that fridge is given to me and installed in my home free of charge, and I get a monthly retainer for allowing the fridge to advertise to me.

I'm not paying for the privileged of being advertised to.
by blenderob | 2025-10-29 15:53:14+00:00
> Has this person actually benchmarked kafka?

Is anyone actually reading the full article, or just reacting to the first unimpressive numbers you can find and then jumping on the first dismissive comment you can find here?

Benchmarking Kafka isn't the point here. The author isn't claiming that Postgres outperforms Kafka. The argument is that Postgres can handle modest messaging workloads well enough for teams that don't want the operational complexity of running Kafka.

Yes, the throughput is astoundingly low for such a powerful CPU but that's precisely the point. Now you know how well or how bad Postgres performs on a beefy machine. You don't always need Kafka-level scale. The takeaway is that Postgres can be a practical choice if you already have it in place.

So rather than dismissing it over the first unimpressive number you find, maybe respond to that actual matter of TFA. Where's the line where Postgres stops being "good enough"? That'll be something nice to talk about.
by gumby271 | 2025-10-29 15:53:21+00:00
So you're saying Google is doing fuck all to protect customers on their already locked down store, right? This doesn't sound like it will be addressed by Google extending developer registration outside of their store at all if they can't even address obvious scam apps that they're already promoting. And to your point, yes, Apple probably does do a better job of maintaining their app store, that way they can prevent some of the push back on iOS being so locked down. An iPhone sounds like the right device for your father.
by eightysixfour | 2025-10-29 15:53:34+00:00
They have guaranteed returns on $185b of other people's money, and they only owe the other people the principal. That's like... the best business in the world? If it was all in 6m 2.8% treasuries they'd still be making $5.2b year for holding people's cash and running a token on the blockchain.

How greedy do you have to be to look at that and say "yeah, well they could be getting bigger returns with an actively managed portfolio?"

I'm pretty sure Tether was holding less cash than they said multiple times, and at multiple points it was just a house of cards where they were inflating the price of BTC on their own, but I'm also guessing by now they've had made enough to cover.
by bonesss | 2025-10-29 15:53:41+00:00
Kafka also provides early architectural scaffolding for multiple teams to build in parallel with predictable outcomes (in addition to the categorical answers to hard/error-prone patterns). It’s been adopted in principle by the services on, and is offered turn-key by, all the major cloud providers.

Personally I’d expect some kind of internal interface to abstract away and develop reusable components for such an external dependency, which readily enables having relational data stores mirroring the brokers functionality. Handy for testing and some specific local scenarios, and those database backed stores can easily pull from the main cluster(s) later to mirror data as needed.
by petronic | 2025-10-29 15:53:50+00:00
Author here -

Apple quietly introduced a native container runtime in macOS 26—and it doesn’t look like Docker/Podman under the hood. Instead of running all containers inside a single Linux host VM, Apple’s CLI (“container”) spins up a lightweight VM per container via Virtualization.framework. That means each container gets its own kernel, IP, ext4 block storage, and explicit CPU/memory limits. On M3+ Macs, you can even expose nested virtualization (I put a VM in your Container!) It’s OCI‑compatible (your existing Docker/Podman/Kubernetes images work), and Rosetta 2 even lets you run amd64 images on Apple Silicon.

I benchmarked Apple’s runtime (v0.5.0) against Docker/Colima on an M1 Pro (32 GB, macOS 26.0.1). I measured image pulls, cold/warm starts, lifecycle ops, parallel starts, file churn, plus stress‑ng, fio, and 7zip.

A few takeaways: Startup: sub‑second starts as advertised; “container system start” returns instantly (no host VM spin‑up).

CPU/Memory: competitive or slightly favorable to Apple in stress‑ng and 7zip; memory tests consistently leaned Apple.

I/O: Fio (the flexible I/O tester!) flipped the story—Docker performed substantially better on randomized reads and mixed RW.

Clickthrough to the post to find exact commands, scripts, and full outputs, plus charts comparing Apple vs Docker/Colima.
by triceratops | 2025-10-29 15:53:56+00:00
> a tenfold increase in GDP represents a very conservative estimate of how much full automation could increase economic output. If this modest increase were reflected proportionally in US tax revenues we could resolve all current Social Security funding shortfalls

This would require a fundamental rewriting of Social Security funding law. Right now it's funded solely by payroll taxes. Read: mass automation will be utterly devastating for Social Security because there will be no paychecks to withhold taxes on.

If the author's predictions actually come to pass, it will look a lot like a wealth tax. The current political and economic elites are extremely allergic to anything resembling that.

> Progressive income taxation is a central pillar of government revenue in most high-income countries around the world. If the rich could effectively coordinate to eliminate income redistribution, they would have abolished this system long ago

Hopelessly naive. Rich people are rich because of their assets. Not their income.
by marginalia_nu | 2025-10-29 15:54:03+00:00
ESNI/ECH nominally exists, but it's not really seeing very widespread deployment. Last I checked Caddy was the only web server/reverse proxy that fully supports it. The rate of adoption is glacial.

My point is that there really hasn't been a point where domain level traffic information has been truly anonymous. Whether this is an oversight or state actors have made the outcome a reality, I have no idea. Probably a bit of both.
by tracker1 | 2025-10-29 15:54:09+00:00
I'm literally working for a local govt agency (via contracting company). I'm not sure that anything is being actively monitored so much as it's' blocking a number of sites (anything AI), upload sites, etc. As well as blocking POST actions to non-whitelisted sites/apps.

I've also seen similar configurations in Banking environments having done work for three major banking establishments over the years. The exception was when I was on a platform security team that managed access controls. Similarly at a couple of large airlines.
by Annabella_W | 2025-10-29 15:54:12+00:00
This week was full of bold claims that need bringing down to earth. This newsletter covers:

Google’s new “quantum advantage” claim and why the 2019 precedent makes me skeptical.

Starcloud’s plan for data centers in space and its fundamental engineering fallacies.

The laser rainbow that offers tiny chip solution for the ever growing datacenter bottleneck.

A ‘solar panel’ for the eye that can restore lost vision.
by hotpotat | 2025-10-29 15:54:14+00:00
I have an out-there hypothesis I’d want to test. Much of the population has one or more MTHFR mutations, which can increase homocysteine if left untreated and that’s been linked to increased risk in stroke. Treatment includes more B vitamins. I wonder if the declining nutrition in foods and lack of B vitamins has anything to do with this.
Tell HN: Twilio support replies with hallucinated features
by haute_cuisine | 2025-10-29 15:54:36+00:00
I was investigating some bug with our voice system and asked support where I can find some debugging information and event logs.

They told me where I should go in the interface to see that and reassured that they checked logs and this event exist.

It turned out these features and information doesn't exist anywhere in the interface and impossible to retrieve in any way. The support message with hallucinated features is mostly AI written.

CEOs tell us AGI is around the corner but in reality it just unreliable information and AI can't even restock the vending machine.
by tencentshill | 2025-10-29 15:55:13+00:00
You can see where the traffic is coming from, so can't the ISPs send out letters to the residential customers affected and at least tell them "you have an infected device on your network"? Seeing as most residential customers use the ISPs own router, they should even be able to specify which device is compromised and sending out the DDOS traffic. It would still be difficult to separate from legitimate, consensual residential proxies.
by dmos62 | 2025-10-29 15:55:21+00:00
Argh, I lost my reply due to a hiccup with my distraction-blocking browser extension. I'll try and summarize what I wanted to say. I'll probably be more terse than I originally would have been.

I appreciate your thoughtful reply. I too think that our viewpoints are very similar.

I think you hit the nail on the head about how it's important that positivity doesn't become an excuse for inaction or ignorance. What I want is a positivity that's a rally, not a withdrawal.

Instead of thinking of power as something that imposes itself on people (and corrupts them), I like to think that people tend to exhibit their inner-demons when they're in positions of power (or, conversely, in positions of no-power). It's not that the position does something to them, but it's that they prefer to express their preexisting disbalance (inner conflict) in certain ways when they're in those circumstances. When in power, the inner disbalance manifests as a villain; when out-of-power, it manifests as a victim.

I think it's important to say "we", rather than "us and them". I don't see multiple factions with fundamentally incompatible needs. Basically, I think that conflict is always a miscommunication. But, in no way do I mean that one should cede to tyranny or injustice. It's just that I want to keep in mind, that whenever there's fighting, it's always in-fighting. Same for oppression: it's not them hurting us, but us hurting us: an orchestration between villains and victims. I know it's triggering for people when you humanize villains and depassify victims, but in my eyes we're all human and all powerful, except we pretend that the 1% is super powerful, while the 99% are super powerless.

I had a few more points I wanted to share, but I have to run. Thanks for the conversation.
by kuhsaft | 2025-10-29 15:55:38+00:00
Which is the same as root-of-trust attestation.

Which is better:

- Having applications provide kernel-level software to provide attestation.

- Or having the OS provide root-of-trust attestation, but also requiring signed binaries, and preventing global root privilege escalation.

The third option would be neither, but players want some sort of anti-cheat.
by Groxx | 2025-10-29 15:55:54+00:00
yeah, I took one look at it and said "great, so add some cost tracking and kill requests before they exceed it" because like. obviously. it's similar to exposing a SQL endpoint: you need to build for that up front or the obvious results will happen.

which I fully understand is more work than "it's super easy just X" which it gets presented as, but that's always the cost of super flexible things. does graphql (or the ecosystem, as that's part of daily life of using it) make that substantially worse somehow? because I've dealt with people using protobuf to avoid graphql, then trying to reimplement parts of its features, and the resulting API is always an utter abomination.
by embedding-shape | 2025-10-29 15:55:55+00:00
Make it P2P and content-based, instead of location-based like the current web. Content could be served from anywhere, so DDoS stops being an effective method, and shared peer quality could propagate across the network to ban bad actors quickly.

I spend about 30 seconds thinking about this, so this is clearly the perfect solution with zero drawbacks or tradeoffs.
by Flere-Imsaho | 2025-10-29 15:56:16+00:00
> You could have hundreds of contributors, all using agents, working on different modules, according to existing spec and tests

The current problem with "Linux on phones" is the locked down nature of the hardware. For example, looking at PostmarketOS's support device list [0], sensors, Wifi, even phone calls don't work. Would what you're saying enable faster implementation of those support modules? (This would be really cool if possible).

[0] https://en.wikipedia.org/wiki/PostmarketOS#Supported_device_...
by layer8 | 2025-10-29 15:56:22+00:00
Google would eventually manage to completely block that. For example, have the app be encrypted for download from the Play Store for the individual Google-approved device key, and the device’s firmware will decrypt and run the app in a way so that the user can’t get hold of the decrypted app blob, and hence can’t possibly run it in any other (non-Google-approved) environment.

The bottom line is, the only way to ensure user freedom here is by regulation/legislation.
by larusso | 2025-10-29 15:56:24+00:00
Well in a big city sounds can be deceiving. Also depends how trained your hearing is. I guess I would have a hard time in case I end up going blind. In any case, what I meant is, that I use my eyes, and by that also turn my head, to look over my shoulder to check for cars etc. In most cases it’s best to have eye contact with a car driver who currently takes a turn to make sure their actually seeing you.
by delegate | 2025-10-29 15:56:46+00:00
I'm very skeptical about such a future. The 'world' is already high tech. We're already drowning in products and entertainment.

At the same time, a million people talk to chatgpt about suicide each week, there's an epidemic of loneliness, mental health issues, wars, famines, pollution, climate change and the list goes on.

Work is not just about earning wages. A lot of people find a sense of purpose, a sense of belonging, community, pride and joy in the work they do. For many it's also about the hierarchy, the title, the career ladder, etc.

I for one don't see how more automation / tech is going to fix the fundamental problems that the previous waves of automation have left behind.
by PeterCorless | 2025-10-29 15:57:07+00:00
Correct. Redpanda is source-available.

When you have C++ code, the number of external folks who want to — and who can effectively, actively contribute to the code — drops considerably. Our "cousins in code," ScyllaDB last year announced they were moving to source-available because of the lack of OSS contributors:

> Moreover, we have been the single significant contributor of the source code. Our ecosystem tools have received a healthy amount of contributions, but not the core database. That makes sense. The ScyllaDB internal implementation is a C++, shard-per-core, future-promise code base that is extremely hard to understand and requires full-time devotion. Thus source-wise, in terms of the code, we operated as a full open-source-first project. However, in reality, we benefitted from this no more than as a source-available project.

Source: https://www.scylladb.com/2024/12/18/why-were-moving-to-a-sou...

People still want to get free utility of the source-available code. Less commonly they want be able to see the code to understand it and potentially troubleshoot it. Yet asking for active contribution is, for almost all, a bridge too far.
by adamtulinius | 2025-10-29 15:57:15+00:00
I remember doing 900k writes/s (non-replicated) already back on kafka 0.8 with a random physical server with an old fusionio drive (says something about how long ago this was :D).

It's a fair point that if you already have a pgsql setup, and only need a few messages here and there, then pg is fine. But yeah, the 96 vcpu setup is absurd.
by Airyisland | 2025-10-29 15:57:17+00:00
Got disappointed with Bento.me, so I decided to build my own — AirTips (https://a.coffee/).

demo: https://a.coffee/becool

--------

I also implemented developer features include:

* The ability to set page layout data via API, enabling dynamic data updates.

* Support for configuring a webhook, which will send notifications when a donation is received.

The project is still in a testing and rapid iteration stage — if you encounter any bugs, please report them and they will be fixed promptly.

--------

updated:

I have generated a list of invite codes:

hn001 hn002 ... hn100
by weego | 2025-10-29 15:58:19+00:00
It’s natural to feel anxious as we approach the inevitable automation of all human labor

This is sell-side idealist thinking and blurred view of reality. We're not approaching it, we're not even seeing metrics to suggest that any sub-division of any business is making serious progress there at all.

Too many people are hyping something that will not happen in our lifetimes and we risk looking beyond the terrible state of large global economies, poor business practice and human exploitation on mass scales to a place we will never see. It's more fun to try and shape future possibilities for large profit that we'll probably never have to justify, than attempt to deal with current realities, and thus go against the grain of investment trends today, for an uncertain benefit.
by bparsons | 2025-10-29 15:58:20+00:00
His argument of GDP gains being distributed somewhat equitably relies on the assumption that healthy democracies continue to exist, and that those democracies are structured in such a way that would allow for the distribution of those GDP gains.

Aside from the ability to cast a ballot, the only other power that normal people have in our political economy is the ability to withdraw their labour. If AI replaces all labour, that already vanishing power completely disappears.

I could see countries like Norway having strong enough institutions to ensure that the benefits get shared in a reasonable way.

In places like the US or Russia, I have a difficult time imagining anything other than the creation of a dozen trillionaires. The US can't even agree on basic universal healthcare. Do you think that President Vance or Newsom are going to divert profits from Google and OpenAI to give to normal people?

A far more likely scenario would be the growth of a permanent underclass. Silicon valley would rather see 150 million people living in tents than agree to a higher rate of taxation.
by losvedir | 2025-10-29 15:58:31+00:00
Maybe I missed it in the design here, but this pseudo-Kafka Postgres implementation doesn't really handle consumer groups very well. The great thing about Kafka consumer groups is it makes it easy to spread the load over several instances running your service. They'll all connect using the same group, and different partitions will be assigned to the different instances. As you scale up or down, the partition responsibilities will be updated accordingly.

You need some sort of server-side logic to manage that, and the consumer heartbeats, and generation tracking, to make sure that only the "correct" instances can actually commit the new offsets. Distributed systems are hard, and Kafka goes through a lot of trouble to ensure that you don't fail to process a message.
by dugidugout | 2025-10-29 15:58:52+00:00
I too have had positive experience switching layouts for RSI (cubital tunnel specifically). While I am a bit skeptical on some of the more subtle claims by ergonomic enthusiasts, simply being more intentful around wrist posture seems to do me wonders. It may be more of a case where engaging in the niche is serving some broader truth, but I too directly associate my related journey to funny looking keyboards!

FWIW, all a doctor did for me was affirm my self-diagnosis and life-style adjustments. Surgery in this area looked quite grim on my last purview so I am not sure a doctor would serve much for most in this regard.
by embedding-shape | 2025-10-29 15:58:56+00:00
Growing up in the 90s in Sweden, we definitively were taught that "Übermensch" ("Övermänniska" in Swedish, literally "Above Human") was something the Nazis promoted during their time, together with demoting "Untermensch". Maybe that's wrong, and if so I thank you for the correction, but "Superhuman" does give me similar vibes regardless, not because of the exact wording, but because of the ideas/concepts.
Show HN: Secure Extensions Marketplace for Chrome,Edge,Firefox,VSCode,NPM
by minche | 2025-10-29 15:59:17+00:00
BrowserTotal provides a secure extension marketplace that looks and feels just like the official vendor stores (e.g. Chrome Web Store or Firefox Add-ons). Users can browse extensions through BrowserTotal’s interface, which acts as a live mirror to the vendor’s marketplace. This means the extension listings, descriptions, and visuals are identical to the original store from the user’s perspective. The key difference is that BrowserTotal’s security analysis engine is transparently injected into the session, enabling real-time scanning of the extension before you install it. In other words, you get the same marketplace experience, but with an extra safety layer added behind the scenes.
by modo_mario | 2025-10-29 15:59:28+00:00
The first time this really hit for me was when i had to jump trough so many hoops to get the at the time most popular controller (ps3 controller) at the time to work with a windows pc due to microsofts hardware signing bullshit.

I could order the most random stuff from aliexpress and it would work but not the competitions controller at the time.
by brudgers | 2025-10-29 15:59:48+00:00
Charitably, even though it is not what you or I would do, the pull request could be a best good faith effort of a real human being.

So to me, it's less about being ridiculous (and "ridiculous" is a fighting word) and more a simple "that's not how this team does things because we don't have the resources to work that way."

Mildly hurt feelings in the most likely worst case (no food for a viral overtop tweet). At best recruitment of someone with cultural fit.