MurphyA/hacker-news huggingface dataset:
by TeMPOraL | 2025-10-29 14:39:02+00:00
> I'm happy to have a bit higher friction to check my bank's balance for example.

I find this to actually be a great litmus test for the overall problem. Bank account balance is a basic piece of information that's about me, and that I need to keep track of to effectively live in our modern times. I should be able to access that information non-interactively at any time. But I can't.

Ask many banks, you'll get as many reasons for why they can't just allow me to cURL this number off an endpoint with some pre-shared credentials. Most of those reasons are bogus[0]. Now, it's not hard to identify several points where I could observe that information in-flight. There's an API that powers the app. The app itself has UI that could be queried or scrapped; some apps will even communicate this data to other apps when requested.

But good luck getting access to any of that non-interactively.

This is what all those technologies add up to. The bank says I can't have this information unless my eyeballs are physically looking at the screen displaying it - and the whole tech stack conspires to make sure I can't get it otherwise.

It's a trivial and non-critical need, but it's also exemplifying the basic user freedoms being denied to us: the ability to freely process information on my own device.

EDIT: Accessibility tools are often the only remaining workaround here, because those are uniquely hard for services to close. And as expected, accessibility became its special privilege category on modern devices, and is increasingly heavily scrutinized and limited by device vendors.

--

[0] - They're usually some kind of security or stability point, that's just a fig leaf to cover the actual reason: this is the way they can force you to interact with their app or website daily, creating an extremely valuable marketing channel for their financial products.
by alwa | 2025-10-29 14:39:08+00:00
Why yes I am! Both of those sound suited to a deliciously wide range of interpretation. I’ll raise you a pair of excellent and abject chòu dòufu served within about 5 blocks of each other (oddly enough, in a Puerto Rican section of New York)…

It seems like, in most domains of aesthetic appreciation, it doesn’t take all THAT much “trying stuff” before you get off a “bad-to-good” axis and onto a “varieties of experience” plane… (mumble mumble decommodification etc)

Then again perhaps you and I are showing our hand as people whose aesthetic preferences are not to be trusted :)
by lynndotpy | 2025-10-29 14:39:42+00:00
First is that TouchID is faster and more consistent than FaceID in my experience, but also ergonomics and presence.

With a phone with a fingerprint scanner, I can have it unlocked as I pull it out of my pocket, and I don't have to bury my face in my phone, e.g. to pay. I can unlock it while it's sitting on a desk.

Similarly with the fingerprint scanner on the Macbooks, I don't need to have my face squarely in the center in front of the screen. It's a very bad experience unlocking an iPad Pro with FaceID, but I have no problems experience unlocking an iPad Air with TouchID.

But I think I'm a minority here, so at least I can save some money when the long-rumored FaceID Macbook comes to fruition :D
by bob1029 | 2025-10-29 14:39:48+00:00
> It's not perfect but it worked for me anyway.

This is approximately my approach minus the zip bomb. I use a piece of middleware in my AspNetCore pipeline that tracks logical resource consumption rates per IPv4. If a client trips any of the limits, their IP goes into a HashSet for a period of time. If a client has an IP in this set, they get a simple UTF8 constant string in the response body "You have exceeded resource limits, please try again later".

The other aspect of my strategy is to use AspNetCore (Kestrel). It is so fast that you can mostly ignore the noise as long as things are configured properly and you make reasonable attempts to address the edge case of an asshole trying to break your particular system on purpose. A HashSet<int> as the very first piece of middleware rejecting bad clients is exceedingly efficient. We aren't even into URL routing at this point.

I have found that attempting to catalog and record all of the naughty behavior my web server sees is the highest risk to DDOS so far. Logging lines like "banned client rejected" every time they try to come in the door is shooting yourself in the foot with regard to disk wear, IO utilization, et. al. There is no reason you should be logging all of that background radiation to disk or even thinking about it. If your web server cant handle direct exposure to the hard vacuum of space, it can be placed behind a proxy/CDN (i.e., another web server that doesn't suck).
by MisterTea | 2025-10-29 14:40:05+00:00
When I was a kid we had what I think was a Ben and Jerry's puzzle we got from the gift shop after the factory tour. It wasn't a lot of pieces, something just under 200, but my brother and I would speed run putting it together until we could do it in under a minute together. We had a few others but not as fun or colorful as that one. We got a 1000 piece but can't remember what happened to that one or if we even finished it, some nature scenery I think (Might have gotten too big for our little table.)

What blew me away with this 9000 piece is the freakin size of it. I had this impression it was maybe 1 meter along its longest edge until the last picture of the author standing in front of it. That is huge and the assembly must require a dedicated space. Then I see people here talking of 13200 and 24000 piece puzzles... Madness!

Kinda want to put together a puzzle now...
by giraffe_lady | 2025-10-29 14:40:13+00:00
I know a vascular neurologist who says that the average age of his patients has dropped by nearly a decade in the last five years. Many more "young" (<60) men with minor strokes, and more frequent serious strokes in the 40s for both sexes. He's treated as many under 30 y/o stroke patients in the last two years than he did in the first two decades of his career. He's a few years from retirement and basically completely rattled by this sudden shift.
by drekk | 2025-10-29 14:40:31+00:00
> The NSDUH AMI and SMI estimates were generated from a prediction model created from clinical interview data collected on a subset of adult NSDUH respondents (4,912 total respondents between 2008 and 2012) who completed an adapted (past 12 month) version of the Structured Clinical Interview for DSM-IV-TR Axis I Disorders (Research Version, Non-patient Edition) (SCID-I/NP; First, Spitzer, Gibbon, & Williams, 2002), and was differentiated by level of functional impairment based on the Global Assessment of Functioning Scale (GAF; Endicott, Spitzer, Fleiss, & Cohen, 1976).
by Workaccount2 | 2025-10-29 14:40:33+00:00
This is likely the result of one of the most idiotic and bad rulings to come out of recent tech lawsuits. It's so painfully brain damaged and yet somehow has seemed to largely fly under the radar.

Google was found to have a monopoly on android with the play store (even though you can side load other stores), Apple was found to not have a monopoly with the app store.

OK. But that is not the really bad part, the really bad part came from the appellate court this past July. Google pointed out that the Apple app store was ruled not a monopoly, but somehow Google's more open system was..

The judge, I am not shitting you, said that because Apple doesn't allow competitors on their phones, they cannot be anti-competitive. Google lost the appeal.

So now, clear as day, Google needs to kick out competition to be competitive. Good job legal system.
by TYPE_FASTER | 2025-10-29 14:40:57+00:00
Also see https://www.youtube.com/watch?v=AGaiVApKfmc - "Avoid restrictions and blocks using the fastest and most stable proxy network"...they're pretty upfront with this, aren't they?

Oh, and they will sell you the datasets they've already scraped using mobile devices: https://brightdata.com/lp/web-data/datasets

This actually explains a phishing attack where I received a text from somebody purporting to be a co-worker asking for an Apple gift card. The name was indeed an employee from a different part of the large company I worked for at the time, but LinkedIn was the only possible link I could figure out that was at least somewhat publicly available information.

This should probably be required in all CS curriculum: https://ocw.mit.edu/courses/res-tll-008-social-and-ethical-r...
Show HN: Easy to use Cluster-Compute software
by pancakeguy | 2025-10-29 14:41:05+00:00
Hi HN! We're Jake, Jack, and Joe, the creators of Burla, the world's simplest cluster compute software.

Believe it or not, it's still super common for research / data-analysis teams to handoff work to Engineering because they aren't able to easily scale analyses on their own. Engineering managers we spoke with frequently attempt to onboard these teams to tools like Apache Airflow, Prefect, Dask, or Ray, but these tools come with hidden tradeoffs and complexity that researchers often struggle with on their own. This is can be very painful for engineering managers who wind up acting like highly paid support/education staff, instead of focusing their real work. It's also very painful for research teams who are often blocked waiting on engineering/devops to help them.

This is why we created Burla, it's designed to be simple enough for even complete beginners to scale python across thousands of VM's. It's open-source, works with GPU's, custom containers, and up to 10,000 CPU's in a single cluster.

If you want to give it a try signup here: https://burla.dev/signup, and we'll send you a personalized instance with some free compute today!
by fer | 2025-10-29 14:41:25+00:00
I really, really want to use Helix but I want to share bindings with VSCode/IntelliJ, and all the plugins that promise them have lots quirks, exceptions and various gaps. I know it's never gonna be 100%, but sometimes simple stuff is broken (x to select line in Helix, selected line+newline in the latest plugin I tried).
by ge96 | 2025-10-29 14:41:33+00:00
Moto G Power 5G 2024

It is a cheap phone I think I got it new at $160 and that's the thing it has 8GB of RAM, the pictures are subpar (blurring) but other than that it works for me, multi-app non-game

This is on Verizon but yeah it'll just install new games and say "Enjoy these new apps" I'm like wtf I think most recently one of the games it installed is Mahjong

edit: apparently it's MotoApps doing it
by instagraham | 2025-10-29 14:41:37+00:00
Hi, sorry for the unrelated reply, but I wanted to ask you about a comment you made 6months back about archiving Gamasutra posts. I came across it while searching HN for "gamasutra".

I'd bookmarked a lot of Gamasutra articles over the years and am kinda bummed out that I can't find any of them now that the site has shifted. You mentioned having a collection of their essays? Is there any way to share or access them?
by shepardrtc | 2025-10-29 14:41:49+00:00
I think you're missing a more human point: people dislike the effect of hiring and firing thousands of people with zero consideration. They hire thousands because it makes management look like they're ramping up to solve problems, and then they fire this many people because it makes management look like they're cutting costs to be more efficient. It's all about management keeping up the illusion that they're "on top of things", when in reality they're just playing number games.

There's empathy involved in the revulsion toward this kind of process. Please take time to consider that not everyone fired is a $300k/year rockstar programmer who can just as easily walk over to Meta or Google for a job. I know of people who have uprooted their lives and work under the idea that if they do a good job they'll stay on, when in fact the reality is more like gambling and they could be fired at any point.
by rob74 | 2025-10-29 14:42:21+00:00
There are words that can have several Artikel, sometimes depending on regional differences (e.g. Austrians have different preferences than Germans), sometimes because of multiple meanings of a word. In that case, I would expect the game to accept all valid answers. But I got the impression that all words were singular, so "der" would be the only valid option for "Ausländer". I had a similar issue with "Geschwister", where I picked "das" (correct according to https://www.duden.de/rechtschreibung/Geschwister), but the game expected "die" (which IMHO only makes sense for the plural form). Looks like it needs a bit more QA :)
by dylan604 | 2025-10-29 14:42:41+00:00
No, you're old man yells at clouds with the entire comment. Someone likes something you don't prefer, and want to share that with the internet. That's great, but you have to know that someone will call you out on it.

Some people like blue, some people like red. Some people like audiobooks, some prefer reading actual books. Some people like to go to movie theaters, some prefer to wait for the movie to watch at home. Some people like cilantro.

The internet is a big place. There's room for multiple ways of skinning the cat without preventing any of the other ways.
by cardanome | 2025-10-29 14:42:50+00:00
"Superhuman" gives me the creeps as a German.

I know it has a positive connotation with super heroes in US culture but for me it sounds like Übermensch. Especially as it is the direct opposite of "subhuman".

Plus outside of tech bro circles, people either actively hate generative AI or are at least super annoyed by the over-hype of it. Duolingo went all in on AI and got a huge shitstorm.

Branding your company on a current hype that might either burst soon or/and leave lots of people unemployed is maybe not a wise decisions.
by unsupp0rted | 2025-10-29 14:43:19+00:00
I have a person in my family who does "..." typing for 15 seconds to 5 minutes just to say "Okay, if you're busy, I'm going to the grocery store".

I didn't need that information.

You just sit there looking at "..." for an indeterminate amount of time not knowing if you can move on.

Frustrating.

And yet I'll miss this frustration so much someday and I never allow myself to forget this fact.
by 1oooqooq | 2025-10-29 14:43:31+00:00
Exactly. this is the margin aws trives from.

they sell "you don't need a team"... which is true om your prototype and mvp phase. and you know when you grow you will have an ops team and maybe move out.

but in the very long middle time... you will be supporting clients and sla etc, and will end up paying both aws AND an ops team without even realizing.
by lasfter | 2025-10-29 14:44:13+00:00
I wrote my thesis on this! Application-specific system design can get you orders of magnitude performance improvement, as well as better scalability/fault tolerance properties. I focused on graph analytics, but it's reasonable to think it applies more broadly.

Definitely true that application-specific design is often not worth the investment though. Chasing that 1000x improvement can easily cost you a year or two.
by jraph | 2025-10-29 14:44:20+00:00
> you can fight for anything

I suppose your mean't you "can't".

I know, m'y life is full of compromises because of my various political opinions.

> https://puri.sm/posts/the-danger-of-focusing-on-specs/

I agree and I intend to keep my current phone at least ten years (and I hope it will be able to run Linux at some point, it's very close!), but the Librem was released with outdated specs and that was 5 years ago. It was released with outdated specs because then current hardware was not free software friendly. However, producing outdated hardware today is a huge environmental concern for me.

That current hardware is non-free software friendly is a huge concern as well, and both concerns go by hand: we are absolutely building huge piles of e-waste just because of proprietary / closed hardware.

Anyway; the Librem 5 has been a fantastic thing for the development of Linux mobile. We also won't go anywhere with phones such as the Librem 5 to make Linux mobile a reality for the general public.
by bossyTeacher | 2025-10-29 14:44:21+00:00
>The old react docs used to quip that react was the v of mvc

I remember this! Vue was meant to be the same thing (I suspect Vue's name comes from "view"). It was meant to be super light and then they started adding more and more non-core tools until they went full Angular. Which is ironic as Angular's full on batteries was always used against it
by shaneqful | 2025-10-29 14:44:23+00:00
I used to have a Jolla phone which ran a pretty cool linux OS on it but it only worked because it had an alien dalvik android vm so I could still run apps like those from my bank, whatsapp etc..

It's nearly impossible to live in the modern world without either an iphone or android without making some major sacrifices e.g. I'd love to not use whatsapp but it's not an option because all of my friends and family use it
by happymellon | 2025-10-29 14:44:32+00:00
> that's the only conceivable useful difference over Containers

But thats a massive difference.

I have work profiles and a personal profile. I have password manager profiles for clients (clients will provide their own PM logins to segregate their access) which are different between them, and having separate profiles is huge.

Containers are great, especially for crappy websites that use your sessions for tracking which page you are on, but they are no where near powerful enough.
by adastrapa | 2025-10-29 14:44:33+00:00
agreed, tinkering in my experience is either understanding how something works, or fixing something that is broken, or, building something new entirely (and in my mind all of these are hardware based) and usually involves disassembling things into their constituent components, whether or not you're supposed to. I also don't think tinkering is required for taste, I think being exposed to things, exploring things you're interested in, and questioning things is how you develop taste, which is also highly subjective.
by zer00eyz | 2025-10-29 14:44:48+00:00
> Nobody is hiring generalists nowadays.

What?

I throw up in my mouth every time I see "full stack" in a job listing.

We got rid of roles... DBA's, QA teams, Sysadmins, then front and back end. Full Stack is the "webmaster" of the modern era. It might mean front and back end, it might mean sysadmin and DBA as well.
SVG phishing campaign targets Ukraine
by Stasshe | 2025-10-29 14:44:57+00:00
Fortinet’s FortiGuard Labs has published a detailed analysis of a phishing campaign targeting Ukrainian organizations. The attackers used an unusual SVG file as the initial infection vector, which ultimately led to the deployment of Amatera Stealer (information-stealing malware) and PureMiner (a stealth crypto-miner).

The SVG file triggered a password-protected archive containing a CHM file that launched a loader called “CountLoader,” enabling fileless execution, process hollowing, and DLL side-loading.

This combination of stealer + miner, delivered through an SVG-based chain, shows a growing sophistication in phishing campaigns, especially those aimed at critical sectors.

Full report: https://www.fortinet.com/jp/blog/threat-research/svg-phishing-hits-ukraine-with-amatera-stealer-pureminer
by hedora | 2025-10-29 14:45:24+00:00
Reason to use AWS from the article:

> You do not have the appetite to build a platform team comfortable with Kubernetes, Ceph, observability, and incident response.

Has work been using AWS wrong? Other than Ceph, all those things add up to onerous half time jobs for rotating software engineers.

Before gp3 came out, working around EBS price/performance terribleness was also on the list.
by einsteinx2 | 2025-10-29 14:45:25+00:00
Fair point, though it does seem to be more common in the Rust community to the point that it’s become a bit of a meme.

Related funny anecdote, I recently saw a Show HN post title that made sure to mention the thing was written in Rust, but forgot to mention what it actually did. Priorities lol.

I’m sure it sounds like I’m a Rust hater or something, but I’m really not. I like a lot of the new Rust tools being created and use a few myself (ripgrep, fd, and bat immediately come to mind but I’m sure there are more I’m using). I just find the almost religious fervor of the Rust community amusing.
by TeMPOraL | 2025-10-29 14:45:36+00:00
Because SMS is not considered a secure 2FA mechanism anymore, and hasn't been for a while. If that's the default for that bank, and not GP going out of their way to pick a legacy access path, then they're about a decade behind what's considered industry standard -- which today is querying a second factor not just per login, but also per important operations (money transfers, dispositions, changes in settings), with the second factor being by default a smartphone with hardware and software integrity verified via remote attestation.
by lm28469 | 2025-10-29 14:46:00+00:00
I have a feeling these things will spend 99% of their processing time reading other LLMs outputs.

Resumes written by LLMs and read by LLMs

PR summaries written by LLMs and read by LLMs

Emails written by LLMs and read by LLMs

...

Everything could just be a few bullet points... these things were already 90% posturing and trying to sound fancy by using convoluted sentences and big words, now that it's been automated what's the point
by elicash | 2025-10-29 14:46:05+00:00
On the topic of learning German with games, the recommendation I've seen before is that many games have language options and depending on the type of game you can learn a lot that way just because you spend SO many hours in it.

So the Sims, I'd guess, is probably a good example for building vocabulary. Edit: example https://dasboudicca.substack.com/p/i-learned-german-and-siml... (This writer has lots of game learning reviews)
by dylan604 | 2025-10-29 14:46:19+00:00
Just yesterday there was a post to one of Geerling's pages where he posts the transcript to a video he's made. He could have just made a text blog and not spent the extra effort of making a video, but that's not what he does. Instead, he went the extra step to make the content available in text only. He could have just as easily left it as video only. (yes yes, creating a text only transcript of video in today's world is trivial, but an extra step nonetheless as it still needs to be added to his CMS to make the webpage)
by embedding-shape | 2025-10-29 14:47:00+00:00
AFAIK, there is no security scanning on the metro/"tube" in Spain either, it's on the national train lines.

Edit: Also, after looking it up, it seems like London did add temporary security scanners at some locations in the wake of those bombings, although they weren't permanent.

Russia is the only other European country besides Spain that after train bombings added permanent security scanners. Belgium, France and a bunch of other countries have had train bombings, but none of them added permanent scanners like Spain or Russia did.
by torginus | 2025-10-29 14:47:26+00:00
I'm pretty sure they keep internal internal checksums at various points to make sure the data on disk is intact - so does the filesystem, I think they can catch when memory corruption occurs, and can roll back to a consistent state (you still get some data loss).

But imo, systems like these (like the ones handling bank transaction), should have a degree of resiliency to this kind of failure, as any hw or sw problem can cause something similar.
by etothet | 2025-10-29 14:47:52+00:00
I recently went into an Apple store to try the new 3’s with my 2’s ready for a side-by-side comparison. I had heard mixed reviews about sound quality, fit, and the ANC. I was prepared to hear at best an incremental improvement, but boy was I surprised. To my ears, the sound stage is so much wider and the ANC is noticeably better. The fit is definitely different though and it took a bit of trial and error to get the correct size tips.