MurphyA/hacker-news huggingface dataset:
by Propelloni | 2025-10-15 07:49:15+00:00
I have no special insights, but Sony's phones seem like a good fit. They are really easy to unlock [1], but there are virtually no mods but Lineage. Maybe because they are very stock Android and bloat-free?

They range from 300 to 1000 EUR. I personally am fond of the "lower end" and slender Xperia 5 and 10 lines and the customary 21:9 screen ratio.

[1] https://developer.sony.com/open-source/aosp-on-xperia-open-d...
by teiferer | 2025-10-15 07:50:19+00:00
> Add in the expenses of a family, which have risen dramatically the last few years, and it's easy to find examples of people who are starting to get stretched paycheck to paycheck

If you maxed out your lifestyle relative to your income then yes, that is the case. It will always be, no matter how much you make.

It's also the case for the guy stocking the shelves at your local Walmart if he maxes out his lifestyle. But if you compare both in absolute terms, there are huge differences.

Which lifestyle you have is your choice. How big of a house, what car, where to eat, hobbies, clothes, how many kids, etc. If you max that out, fine, enjoy it. But own that it was your choice and comes with consequences, i.e., if expenses rise more than income, then suddenly your personal economy is stretched. And that's on you.
by jFriedensreich | 2025-10-15 07:50:29+00:00
Every time i try to switch to a libre android i encounter the same blocker of not being able to do a full backup and restore with all app data and full control without hacky, weird third party apps that don't work, just as i can do on any linux in the world. I don't understand how the android ecosystem and everyone working on this is just ignoring the data.
by sreekanth850 | 2025-10-15 07:51:05+00:00
People often blame LLMs for bad code, but the real issue is usually poor input or unclear context. An LLM can produce weak code if you give weak instructions but it can also write production ready code if you guide it well, explain the approach clearly, and mention what security measures are needed. The same rule applies to developers too. I’m really surprised to see so much resistance from the developer community, instead, they should use AI to boost their productivity and efficiency. Personally Iam dead against using CLI tools, istead IDE based tools will give your better visibility on code produced and betetr control over the changes.
by Helmut10001 | 2025-10-15 07:51:15+00:00
I wonder if a safer approach to using MCP could involve isolating or sandboxing the AI. A similar context was discussed in Nick Bostrom's book Superintelligence. In the book, the AI is only allowed to communicate via a single light signal, comparable to Morse code.

Nevertheless, in the book, the AI managed to convince people, using the light signal, to free it. Furthermore, it seems difficult to sandbox any AI that is allowed to access dependencies or external resources (i.e. the internet). It would require (e.g.) dumping the whole Internet as data into the Sandbox. Taking away such external resources, on the other hand, reduces its usability.
by baq | 2025-10-15 07:53:07+00:00
It’d be a disaster for Intel if it sold for less than 3k, personally I think they’re aiming for break even at 5k a pop at least, and I wouldn’t be surprised to advertise 2x memory at half nvidia price, which would put it at ~15-20k? and a healthy margin which they need like oxygen now. Of course it’s all for naught if it doesn’t perform compute-wise.
by taurath | 2025-10-15 07:54:24+00:00
Is it just a thing with AI that everyone has decided that morality, empathy, compassion and human dignity mean little? I can't live with myself if I lived a life of such shameless moral depravity - I don't think societies in general can even function in such a state.

The means to get power corrupts any who would wield it. Its is all one big great race to the top of an anthill? Wouldn't it be nicer if you could live in a world where your neighbor was doing well also? Zero sum mindsets lead to zero sum worlds.
by arethuza | 2025-10-15 07:54:26+00:00
My wife was in China recently and was sending back pictures of interesting things - one came in while I was driving and my iPhone read out a description of the picture that had been sent - "How cool is that!" I thought.

However, when I stopped driving and looked at the picture the AI generated description was pretty poor - it wasn't completely wrong but it really wasn't what I was expecting given the description.
by Franklinjobs617 | 2025-10-15 07:54:50+00:00
Dude, this feedback is absolutely huge. Seriously.

You totally schooled me on the shadow blocks vs. ambigrams concept. You're 100% right—I’m correcting the messaging right now. That conceptual slip cheapens the whole thing. The 3D stuff is cool, but the 2D visual design is the real puzzle.

And the technical hint? The error-diffusion approach for generating a blurry visual first? That is a game changer. My current substitution method is a dead end, and I knew it. That paper link is now my top reading priority.

Thanks for the technical roadmap, the correction, and the link to the Scott Kim auction. This is the definition of generous community input.

Back to fixing the core algorithm! Cheers.
by 1718627440 | 2025-10-15 07:54:53+00:00
In that case the ISP becomes the real website. If this is always consistent, then you are always talking with the same entity.

This only matters, when your view of the entity isn't solely determined by the domain name. For example you care when someone impersonates google.com, because you expect it to belong to Alphabet Inc., you perceive impersonating when the entity you are talking to changes. When some domain is always constantly resolved to your ISP, then that domain is owned by the ISP in your network.
by zozbot234 | 2025-10-15 07:54:55+00:00
> ..users, who will never accept anything that doesn’t let them do things like banking, shopping, mainstream social apps, etc.

Plenty of users are now buying feature phones that don't come with these features. Think of a libre phone as a uniquely user-focused, distraction-free device that still allows for a core smartphone/PDA compute featureset.
by pas | 2025-10-15 07:56:01+00:00
I asked it to generate a simple EffectTS script and it did. (It was my first piece of code using Effect, but I know a bit of Scala ZIO, so it was helpful to get started.)

Effect's docs are quite sparse/terse.

And this is usually what I found, it's good when I have a blank page. (Adding new functionality to a legacy system for example.)

But I get upset in no time when I can't really give feedback to it, as the only options are accepting/rejecting the diff or getting stuck in editing manually, but it's in some strange limbo, so usually IDE tools don't work well, and you can't chat with it about the diff, only about what it already thinks are in the files.

(And while this seems like "just" a tooling issue, fundamentally the whole frenzy soured me, I tried Cursor/Windsurf/ClaudeCode and now I'm out of fucks to give ... even though chatting about solutions and writing Markdown docs would be great for everyone, for the projects I work on, etc.)
by makkes | 2025-10-15 07:57:24+00:00
The code he provides doesn't compile and needs to be changed like so:

--- main_before.go 2025-10-15 09:56:16.467115934 +0200 +++ main.go 2025-10-15 09:52:14.798134654 +0200 @@ -13,8 +13,10 @@ slog.Info("starting server on :4000") + csrfProt := http.NewCrossOriginProtection() + // Wrap the mux with the http.NewCrossOriginProtection middleware. - err := http.ListenAndServe(":4000", http.NewCrossOriginProtection(mux)) + err := http.ListenAndServe(":4000", csrfProt.Handler(mux)) if err != nil { slog.Error(err.Error()) os.Exit(1)
by charcircuit | 2025-10-15 07:57:38+00:00
App developers can already dynamically mark their windows as secure which should prevent any other app from reading the pixels it rendered. The compositor composites all windows, including secure windows and applies any effects like blur. No apps are supposed to be able to see this final composited image, but this attack uses a side channel they found that allows apps on the system to learn information about the pixels within the final composition.
by rsynnott | 2025-10-15 07:57:45+00:00
The UK has 2.6 road deaths per 100k people per year. The US has 14.2. The discrepancy is probably mostly driven by this (though the US does also have far lower workplace safety standards).

Part of this is that Americans drive far greater distances, but even adjusted for distance, the US has about twice the deaths per km.
by sirwhinesalot | 2025-10-15 07:57:46+00:00
Current LLMs are already trained on the entirety of the interwebs, including very likely stuff they really should not have had access to (private github repos and such).

GPT-5 and other SoTA models are only slightly better than their predecessors, and not for every problem (while being worse in other metrics).

Assuming there is no major architectural breakthrough[1], the trajectory only seems to be slowing down.

Not enough new data, new data that is LLM generated (causing a "recompressed JPEG" sort of problem), absurd compute requirements for training that are only getting more expensive. At some point you hit hard physical limits like electricity usage.

[1]: If this happens, one side effect is that local models will be more than good enough. Which in turn means all these AI companies will go under because the economics don't add up. Fun times ahead, whichever direction it goes.
by roenxi | 2025-10-15 07:58:25+00:00
There also seems to be a misconception about what failing an audit means. If you have an organisation spending an ungodly amount of money in ways it can't track ... you would expect all the services for its own members to be gold plated.

Organisations with bad budget discipline aren't usually short on benefits. What disadvantages are there for them to provide the best conceivable services? Nobody expects them to be able to justify the spend.
by ggm | 2025-10-15 07:58:29+00:00
Much though aspects of IPR displease me as a consumer, I think this is the right response and I am stunned by how piss weak government and rights agencies responses have been.

It's hard to put a lock on the game now, but it's tempting to suggest any and all major ai funds should be made to put significant cash into escrow for future legal restitution because if I was a creator and saw my moral and legal rights swept up in this, I'd want my legals on the case.
by bilekas | 2025-10-15 08:00:25+00:00
It's not exactly a new technique but it's effective for most super targeted attacks, honestly it seems if you were this inclined to be able to get a specific app on the users phone, you might as well just work off the Android app you've already gotten delivered to the users phone. Like Facebook.

Throw a privacy notice to the users "This app will take periodic screenshots of your phone" You'd be amazed how many people will accept it.

> Did you release the source code of Pixnapping? We will release the source code at this link once patches become available: https://github.com/TAC-UCB/pixnapping

It's not exactly impossible to reverse what's happening here. You could have waited until it was patched but sounds like you wanted to get your own attention as soon as possible.
by p_l | 2025-10-15 08:01:17+00:00
Which one? We first had the flurry of third party work (Brook, Lib Sh, etc), then we had AMD "Close to Metal" which was IIRC based on Brook, soon followed with dedicated cards, year later we got CUDA (also derived partially from Brook!) and AMD Stream SDK, later renamed APP SDK. Then we got HIP / HSA stuff which unfortunately has its biggest legacy (outside of availability of HIP as way to target ROCm and CUDA simultaneously) in low level details of how GPU game programming evolved on Xbox360 / PS4 / XBox One / PS5. Somewhere in between AMD seemed to bet on OpenCL, yet today with latest drivers from both AMD and nVidia I get more OpenCL features on nVidia.

And of course there's the part of totally random and inconsistent support outside of the few dedicated cards, which is honestly why CUDA the de facto standard everyone measures against - you could run CUDA applications, if slowly, even on the lowest end nvidia cards, like Quadro NVS series (think lowest end GeForce chip but often paired with more displays and different support that focused on business users that didn't need fast 3D). And you still can, generally, run core CUDA code within last few generations on everything from smallest mobile chip to biggest datacenter behemoth.
by Dylan16807 | 2025-10-15 08:01:33+00:00
> If you're seriously arguing this, you're very close to flirting with eugenics and the like.

Please don't be so eager to reject eugenics that you end up being anti-science. The idea that some percent of intelligence is genetic is entirely reasonable, not something to refuse to consider.

And there's good evidence too: https://en.wikipedia.org/wiki/Heritability_of_IQ
by walthamstow | 2025-10-15 08:02:06+00:00
I agree there is no such thing as a "British accent", though I'm lucky that my mockney lilt is considered to be one, but Dutch, Danish and Yorkshire are very similar for historical reasons so it's somewhat understandable for you to be detected as Dutch in this app.

I find Danes speaking Danish to sound like a soft Yorkshire accent, and the vowels that Yorkies use are better written in Danish, like phøne.
by zozbot234 | 2025-10-15 08:02:40+00:00
> LineageOS has huge problems since the mandatory eBPF requirements of late Android versions

It's a mixed bag. The eBPF requirement makes it harder to support newer AOSP versions on very old downstream kernels (you now need a close-to-mainline port, like what pmOS aims to provide) but because it is a requirement, it will make it easier for newer devices to run a more up-to-date kernel starting from the available downstream sources.
by ifwinterco | 2025-10-15 08:03:06+00:00
I see this narrative a lot from Americans who often hold the EU/Europe (also often conflated when they're not the same thing) as some kind of utopia when it comes to stuff like that.

In reality, while it is nowhere near as bad as in the US, but there are school shootings and similar issues on a semi regular basis across Europe. Guns are still guns and humans are still humans unfortunately
by 1718627440 | 2025-10-15 08:03:35+00:00
I use Mozilla Firefox and have never experienced that. It's a bit seldom to find websites not automatically redirecting to https:// though. You can try http://repo.mysql.com/ . Sure, the browser has that icon in the URL bar saying that the connection is unsecure. It does also show a big warning, if something with the certificate is wrong and enforces HSTS (which I don't like). But an unencrypted connection works just fine.

I'm not using other browsers often, so I my perception is maybe skewed, but I wouldn't have expected them to block http and if I would see that, I would perceive that as a bug.
by 0_____0 | 2025-10-15 08:03:58+00:00
About 6 weeks into a cross country bike tour, I spent a rest day eating all day. I think I ate 4 massive burgers and a large supreme pizza. Probably somewhere around 6000 calories.

A week prior, I ran out of food in the mountains. I finally got to a store, bought a loaf of bread, a pack of Oscar-Meyer bologna, a pack of cheese slices, two sodas, and a red bull. When I left the bench near the store, I had a few slices of bread left.

When you put out incredible amounts of energy, you can eat a fairly incredible amount of food. I don't understand where the food goes, it really doesn't feel like you should be able to eat that much volume but you can.
by saagarjha | 2025-10-15 08:04:10+00:00
> On POSIX systems, in theory, we can just update the files in place. Except for dynamically loaded assets, this should work just fine. The OS treats file locking as advisory and open file descriptors are irrelevant, so even if the file is running you overwrite it in place and the user will get the freshest version on the next launch.

If you do this on macOS, and your code is codesigned, you are setting yourself for pain. Instead you should replace the file entirely so the file gets a new vnode.
by atraac | 2025-10-15 08:04:35+00:00
I'm a fairly happy Fastmail user but as someone who now works in two timezones, I'm kind of disappointed with its calendar. Especially that they advertise with 'Email and calendar made better' slogan. There's still no way to display two timezones like Google Calendar does, there's still no 'book a slot link' feature, it consistently forces meetings to be added to main Fastmail calendar and not the one I set as default. It's overall very disappointing, to the point where I still have to rely on Google for calendar for work-related things. If you read up on reddit they are notoriously ignoring all community feature requests. My subscription ends next year and I'm still questioning whether I want to continue. Desktop app is the last thing it needs.
by john_the_writer | 2025-10-15 08:04:39+00:00
Yeah.. I always remind myself of the netscape browser. A lesson in "if it's working to mess with it" My question is always the reverse. Why try it in Y new language. Is there some feature that Y provides that was missing in X? How often do those features come up.

Company I worked for decided to build out a new microservice in language Y. The whole company was writing in W and X, but they decided to write the new service in Y. When something goes wrong, or a bug needs fixing, 3 people in the company of over 100 devs know Y. Guess what management is doing.. Re-writing it in X.
by fsflover | 2025-10-15 08:06:22+00:00
> The hope is that the M2-M5 won’t be that different from the M1 models - after all, Apple doesn’t want to spend their money reinventing the wheel

From the Asahi Linux website, M2 is sufficiently similar to M1, while M3 and M4 won't likely be supported soon due to significant differences.
by matthewcanty | 2025-10-15 08:07:01+00:00
I’d be interested in defining my business using a DSL but then ultimately I’d want that to be translated into a UI.

I’d love to simply map all the relationships between stock, assets, tools like invoicing, APIs all in a place like this.

But I have to agree I think CLI alone would result in it being usable by only me.

EDIT: just wanted to add I’m interested in where this project goes.
by Zardoz84 | 2025-10-15 08:07:09+00:00
My little experience with AI coding, using copilot on Eclipse, was mixed... Context: I work with an old Java source code that uses Servlets and implements his own web framework. There is a lot of code without tests or comments.

The autocomplete, I find it useful. Specially doing menial, very automatic stuff like moving stuff when I refactor long methods. Even the suggestions of comments looks useful. However, the frequency with it jumps it's annoying. It needs to be dialed down somehow (I can only disable it). Plus, it eats the allowed autocomplete quota very quickly.

The "agent" chat. It's like tossing a coin. I find very useful when I need to write a tests for a class that don't have. At least, allows me to avoid writing the boiler player. But usually, I need to fix the mocking setup. Another case when it worked fine, it's when helped me to fix a warning that I had on a few VUE2 components. However, in other instances, I saw miserable falling to write useful code or messing very bad with the code. Our source code is in ISO8859-1 (I asked many times to migrate it to UTF8), and for some reason, sometimes Copilot agent messes the encoding and I need to manually fix all the mess.

So... The agent/chat mode, I think that could be useful, if you know in what cases it would do it ok. The autocomplete is very useful, but needs to be dialed down.
by hinkley | 2025-10-15 08:07:17+00:00
Those definitely make them less wrong, but still leave you hanging because most functions have side effects and those are exceedingly difficult to trace.

The function that triggers GC is typically not the function that made the mess.

The function that stalls on L2 cache misses often did not cause the miss.

Just using the profiler can easily leave 2-3x performance on the table, and in some cases 4x. And in a world where autoscaling exists and computers run in batteries that’s a substantial delta.

And the fact is that with few exceptions nobody after 2008 really knows me as the optimization guy, because I don’t glorify it. I’m the super clean code guy. If you want fast gibberish, one of those guys can come after me for another 2x if you or I don’t shoo them away. Now you’re creeping into order of magnitude territory. And all after the profiler stopped feeding you easy answers.
by aperture147 | 2025-10-15 08:07:33+00:00
CF used to encouraged people to move to Workers instead of using Pages. They recently removed the message in their landing page that said so (just checked, you could visit Wayback Machine to verify), so I guess Pages will still be available anyway. Btw the best thing that Pages gives out is allowing people to use different domain from another domain registry when Workers force user move their domain to CF.
by piker | 2025-10-15 08:08:17+00:00
That's super interesting. Tritium is signed and notarized (as is required) and uses the clean second-binary approach on all platforms, so I never ran into this. One thing that did come up was the requirement to use `ditto` rather than a standard unzipping utility to preserve some macOS-sensitive metadata.

[EDIT: the post has been updated for this point. Thanks so much. https://tritium.legal/blog/update#3.]
by somenameforme | 2025-10-15 08:08:21+00:00
If people were being imprisoned for "having a tattoo or mouthing off at an authority figure" there wouldn't be 90%+ approval, and way more of the population would be imprisoned. It's easy to create a lawless dystopia. It's also easy to create a 'over-lawed' authoritarian dystopia. Neither tend to be much liked by the population. The balance is in cracking down hard on criminality while avoiding overstepping that into complete authoritarianism. I think one of the easiest ways to measure this is simply by looking at approval ratings and so, for now at least, El Salvador is very successfully maintaining that balance.

---

Actually you just sent me down a rabbit hole watching videos of modern El Salvador. Here [1] is a great one with some dude just interacting with the locals, and discussing the changes. Lol, I seriously want to go there now. It looks like an amazing place to visit.

[1] - https://www.youtube.com/watch?v=sISlhyuuDXg
by denkmoon | 2025-10-15 08:08:59+00:00
The question is why is a desktop app needed in the first place? Is it worth the effort for the number of people who want it, given they can achieve the same thing with zero effort from the developer by pressing a few buttons? What special feature is achieved here? You can use fastmail offline using the browser, you can make sites into "apps" for your taskbar or dock in windows and macos (are we making electron apps for linux hyprland ricers?), and you can set the fastmail website as the default email client. The audience here seems to be "people who want to use the fastmail webmail client but don't want to use it in their regular web browser and don't know how to achieve that with the built in tools"?

Fastmail are an awesome developer, JMAP is great, their mobile apps are great and actually offer some reason to exist, and I like their ethos as far as I can tell. None of this detracts from the fact making an electron app that does nothing other than shell a website, in nearly every case, is a waste of time.