MurphyA/hacker-news huggingface dataset:
by jonathanlydall | 2025-10-29 17:52:44+00:00
Unless you pay for CloudFlare’s Enterpise plan, you’re required to have them host your DNS zone, you can use a different registrar as long as you just point your NS records to Cloudflare.

Be aware that if you’re using Azure as your registrar, it’s (probably still) impossible to change your NS records to point to CloudFlare’s DNS server, at least it was for me about 6 months ago.

This also makes it impossible to transfer your domain to them either, as CloudFlare’s domain transfer flow requires you set your NS records to point to them before their interface shows a transfer option.

In our case we had to transfer to a different registrar, we used Namecheap.

However, transferring a domain from Azure was also a nightmare. Their UI doesn’t have any kind of transfer option, I eventually found an obscure document (not on their Learn website) which had an az command which would let you get a transfer code which I could give to Namecheap.

Then I had to wait over a week for the transfer timeout to occur because there is no way on Azure side that I could find to accept the transfer immediately.

I found CloudFlare’s way of building rules quite easy to use, different from Front Door but I’m not doing anything more complex than some redirects and reverse proxying.

I will say that Cloudflare’s UI is super fast, with Front Door I always found it painfully slow when trying to do any kind of configuration.

Cloudflare also doesn’t have the problem that Front Door has where it requires a manual process every 6 months or so to renew the APEX certificate.
by jemmyw | 2025-10-29 17:53:15+00:00
You started out good with what seemed like an easy comparison, she doesn't floss, you do, she still has better teeth. But then you go on to show all the other differences, especially not always brushing twice a day, different diet, avoiding dentist, and its hard to understand the point of your post.

My wife and I have an almost identical routine and diet, we use the same brand electric brushes, always twice a day, and usually have coffee together. However, she's not had many dental problems, but I've had to go to the dentist tons this year. Oh, incidentally I also knocked my front teeth out in a cycling accident.
by keeda | 2025-10-29 17:55:19+00:00
I was thinking more about cases where consumers are ripped off by the weaponization of complicated contracts, regulations, and bureaucracies (which is what I interpreted TFA to be about).

E.g. your health insurance, your medical bill (and the interplay of both!), or lease agreements, or the like. I expect it would be much riskier to attempt to manipulate the language on those, because any bad faith attempts -- if detected -- would have serious legal implications.
by Dwedit | 2025-10-29 17:55:35+00:00
EasyPrivacy has too many false positives, and no way to report them. If you are a techie who understands what the messages mean, and can click the button to proceed to a site on a false positive, then it's fine to have it turned on. But if you are setting up ad blocking for a non-technical user, I would recommend turning EasyPrivacy off.
by nogridbag | 2025-10-29 17:55:45+00:00
The update loop occurs as a result of step 3 in which the UI updates itself from the model which then, due to a combination of developer inexperience, UI framework design/complexity, or application complexity, the UI then automatically triggers updates to the model. In my experience, this was a common defect in all applications I've seen that used various MVC style frameworks or home grown MVC architectures.

In a declarative framework, while it is still technically possible, it is very rare. The current app I'm working on is one of the largest front-end apps I've worked on (multiple years of dev). We've had a single infinite loop issue reported that was trivial to fix. We have very junior UI devs compared to teams I've worked on in the past, yet our UI defect rate is incredibly low.
by cestith | 2025-10-29 17:55:48+00:00
Your name sounds familiar. I think you may be one of the people at RedPanda with whom I’ve corresponded. It’s been a few years though, so maybe not.

A colleague and I (mostly him, but on my advice) worked up a set of patches to accept and emit JSON and YAML in the CLI tool. Our use case at the time was setting things up with a config management system using the already built tool RedPanda provides without dealing with unstructured text.

We got a lot of good use out of RedPanda at that org. We’ve both moved on to a new employer, though, and the “no offering RedPanda as a service” spooked the company away from trying it without paying for the commercial package. Y’all assured a couple of us that our use case didn’t count as that, but upper management and legal opted to go with Kafka just in case.
by yieldcrv | 2025-10-29 17:55:52+00:00
people don't exit

its just like your brokerage account, imagine if Schwab issued a stablecoin for every deposit someone made and only delete some of that stablecoin when they redeem

you'll find that people deposit and trade, they keep their balances there their entire life and beyond. when they trade, they are selling the stablecoin to someone else, someone else could redeem but they aren't either. stablecoins are liquid and useful, they have passive income capabilities while holding your principle value

so for Schwab's reporting, the balances always increase as people deposit more whenever they get their paycheck

this is what you're seeing with Tether, and all other leading stablecoins, as they grow at the same pace as they capture the same market

when actual traditional finance brokerage firms start issuing stablecoins, you'll see the same thing, the stablecoin just offers transparent real time behavior into their customer deposits

the only time stablecoin balances go down, and subsequently treasuries are offloaded behind the scenes, is when someone redeems a stablecoin for fiat currency. this isn't necessary, people don't want fiat or don't need to get fiat by redeeming it
by zerkten | 2025-10-29 17:56:17+00:00
What's the use case for this? It seems to be for situations where you might have a SaaS product, but there is some data required from a customer system. You'd expose the customer data using this relay and integrate into the SaaS. Is that the gist of it? Integration would still likely involve you giving the customer some software to expose a limited API and handle auth, logging, etc.
by dontlaugh | 2025-10-29 17:56:21+00:00
There was a time when console games would avoid disc seeks at all costs, even duplicating uncompressed assets. Compression can easily interfere with laying data out in blocks to read sequentially.

That’s not a problem with SSDs and most machines have more cores or even dedicated hardware decoders. Of course it’s also more worthwhile to compress since SSD storage is comparatively more expensive.
by MiguelHudnandez | 2025-10-29 17:56:39+00:00
When you look at the scale of the reports, you find they are much lower than Azure's. seeing a bunch of 24-hour sparkline type graphs next to each other can make it look like they are equally impacted, but AWS has 500 reports and Azure has 20,000. The scale is hidden by the choice of graph.

In other words, people reporting outages at AWS are probably having trouble with microsoft-run DNS services or caching proxies. It's not that the issues aren't there, it's that the internet is full of intermingled complexity. Just that amount of organic false-positives can make it look like an unrelated major service is impacted.
by slg | 2025-10-29 17:56:39+00:00
>You used to be able to get news that at least tried to be unbiased, that wasn't openly pushing a narrative. That made it possible to form a more accurate (though not totally accurate) view of what was actually going on.

Part of the problem with this line of thought it that a lot of bias is not intentional. There was never a moment in history in which you could pick up a newspaper with nothing but completely unbiased facts inside. Even today, most news sources aren't intentionally misleading even if they might be biased. Recognizing these inherent and subtle biases are required in order to know "what was actually going on".
by upboundspiral | 2025-10-29 17:56:40+00:00
Your post made me contemplate how other entities want to be able to attest themselves (in your case the government wants to be able to verify the identity of its citizens). Moral and legal arguments aside, the way they are going about it is a bit sloppy in that they are banking their sovereignty on a third party instead of taking the reins themselves.

Instead of mandating google/apple signed applications, they could instead implement some specification for a secure enclave (or whatever fits their needs - I doubt they need control over the entire OS meaning there is plenty of space for pushback for people that want to retain their rights and freedoms for their devices). If you add some sort of certification based on an open standard that would allow any manufacturer interested in the market to be verified that the "attestation" for specific apps or secrets works, then it would no longer enshrine the current winners (apple/google) and instead allow for a healthier market.

This would only be a good thing because it places power with the government and not a third party (something surely the government would prefer), and allows things to be more in the open.

And in an ideal world the specific locked down portion would not need to be active or interfere with the rest of the operating system to some extent, so people would not be reliant on the manufacturers for their applications and would have the freedom of installing whatever they want and using the rest of their device however they wish.
by Someone | 2025-10-29 17:56:42+00:00
> I wonder what iOS Edge does which iOS Safari doesn't do

I don’t know whether that’s right, but I read “We have a conditional access policy that requires a “compliant” device to succeed the SSO login. However, only the iOS Edge browser can prove compliance” as “our access policy does not allow logging in from Safari”. If that’s true, it’s not something Edge or Safari does or doesn’t do.
by AndrewKemendo | 2025-10-29 17:56:50+00:00
And what if all the supported OS’ in 2040 (only 15 years from now) won’t allow you to run your own LLM without some vendor agreed upon encryption format that was mandated by law to keep you “safe” from malicious AI?

There’s fewer and fewer alternatives because the net demand is for walled gardens and curated experiences

I don’t see a future where there is even a concept of “free/libre widescale computing”
by keybored | 2025-10-29 17:56:54+00:00
People discover that they are healthy until one day (when they live long enough) that they are not.

> The point I’m trying to make isn’t to make you sympathetic. It’s to reinforce in all of the great technical minds here that healthcare billing is the most complicated spaghetti code cluster flock of a system that you’ve ever imagined. It’s far worse than any piece of software you’ve ever seen. And we all just accept the bills and pay them.

The world does not move in a positive direction at the direction and discretion of “great technical minds”. They are too busy being narrowly technically brilliant that they fail to see what a sufficiently generalist and curious 15-year-old could figure out what is the root cause. Which this post demonstrates.
by kbolino | 2025-10-29 17:57:00+00:00
Let us set aside the reasons why SSH adopted a different certificate format (namely, that X.509 is much more complex than they needed at the time).

WebPKI only realistically serves a small portion of the SSH hosts out there. This is quite different from the situation with HTTPS. Even so, this would still be very convenient and useful. As I said elsewhere, I think this is sub-5% of SSH servers.

X.509 more broadly could replace SSH certificates. Many institutional settings already have trust stores set up to include their in-house CAs. Public clouds and major hosting providers could also set up their own CAs, but they would have trouble distributing them (cf. AWS RDS, for example). Now we're probably up to 25% or so of deployed SSH servers. In the case of clouds, though, this adds a massive new exploitation vector (IP reassignment) and thus puts pressure on expiration/revocation.

The rest are going to need self-signed certs.

Between the non-WebPKI CA distribution problem and the probable predominance of self-signed certs, trust-on-first-use would still be the norm, and so relying on pre-existing trust relationships would still be necessary. We could augment TOFU/known-hosts with some kind of certificate or CA pinning rather than just key pinning, though.

So, again, while I think adopting X.509 isn't a bad idea, and makes a lot more sense today than it did in 2010 (pre-Heartbleed!) when SSH added certificates, it's not really solving the problem that SSH has much better than today's solutions, no matter how well it solves the problem that HTTPS has.
by dang | 2025-10-29 17:57:08+00:00
Just don't use genetically identical hardware:

https://news.ycombinator.com/item?id=32031639

https://news.ycombinator.com/item?id=32032235

Edit: wow, I can't believe we hadn't put https://news.ycombinator.com/item?id=32031243 in https://news.ycombinator.com/highlights. Fixed now.
by infecto | 2025-10-29 17:57:10+00:00
I too have tried them all and have settled with Cursor being the best. That said I see the current space split between folks like me who know generally what I want built and appreciate a tool that helps me get to goal quicker and on the otherwise of the spectrum, folks who want the tool to orchestrate most of the engineering. I have no opinion on which is better but for me I sit on the first camp. In that camp Cursor is by far the best tool.
by chickensong | 2025-10-29 17:57:15+00:00
I agree with your assessment, it's maybe a bit of both.

The internet has given anyone/everyone a voice, for better or for worse, both widening and shortening the feedback loop. Now LLMs are shortening the loop even more, while unable to distinguish fact from fiction. Given how many humans will regurgitate whatever they read or heard as facts without applying any critical thought, the parallels are interesting.

I suspect that LLMs will affect society in several ways, assisting both the common consumers with whatever query they have at the moment, as well as DIY types looking for more in-depth information. Both are learning events, but even when requesting in-depth info, the LLM still feels like a shortcut. I think the gap between superficial and deep understanding of subjects is likely to get wider in the post-LLM world.

I do have hope for the garbage in, garbage out aspect though. The early/current LLMs were trained on plenty of garbage, but I think it's inevitable that will be improved.
by _DeadFred_ | 2025-10-29 17:57:33+00:00
Funny, every company prior to around 2010 the owners felt the pain of the employees and were seen as at least partially human. Sure post 2010 an anti-societal cohesion element of 'maximum extraction now' has taken over the ownership and political classes trying to speedrun societal breakdown/collapse, but that was not the norm or acceptable (you would have even be ostracized from the ownership/capital class) for all of my life prior to 2010.
by drdaeman | 2025-10-29 17:57:41+00:00
No offense taken. What's naive and and why do you think so?

I totally recognize almost nothing of the sort is currently offered on consumer market. You need to have skills and time, or hire someone with skills and time, to make a system like that. It's already possible today though. And I don't see any reason why the situation has to remain bad like this forever.
by fabian2k | 2025-10-29 17:57:51+00:00
The absolutely outrageous thing is that apparently they are instructed to ignore all other evidence of citizenship if that app says someone is not a citizen. So even if you have your birth certificate ready, doesn't matter.

This is completely lawless.

From the article:

> He also said “ICE officials have told us that an apparent biometric match by Mobile Fortify is a ‘definitive’ determination of a person’s status and that an ICE officer may ignore evidence of American citizenship—including a birth certificate—if the app says the person is an alien.
by bell-cot | 2025-10-29 17:58:02+00:00
> Do you think...?

Most don't. A few (and more of the swing voters) care somewhat. Good reason to not spend (waste) time getting picky on the details, eh?

> But why...?

Some combination of social signalling/performance - "look at my uber-ultimate loyalty to the anti-Israel cause!!!" - and an ancient human tendency to exaggerate for emotional emphasis. Anecdote: Back in the 1900's, one of my nieces routinely referred to her kid sister as the "spawn of the devil" and similar. Why? Until the birth of the younger, the older niece had been the baby of the family, and had her own bedroom. Plus normal sibling rivalry. Fast-forward 2 decades from that - and the two nieces were on perfectly friendly terms. The older one both got the younger one a nice office job, and was happy to have the younger one babysit her own small children.
by IG_Semmelweiss | 2025-10-29 17:58:45+00:00
What we have is not insurance.

What we have is all-you-can-eat ferrari care

Insurance is what i have when i drive my car , or get water damage insurance for my house.

The monster we have today is not insurance. Instead, it is the frankenstein born out of the womb of bureaucrats and politicians influenced by money. Decades of tinkering politicians without a clue, messing around with the relationship between the doctor and patient, responding to voting patterns of the electorate, led us to today.

Unless you blow it up, (and it will blow up, just like it happened in sweden) there's no solution, except paying more for ferrari all-you-can eat.
by infecto | 2025-10-29 17:58:45+00:00
Sounds like you have a network problem. Did you try checking the network diagnostic in settings? They default to http2 which can throw a wrench in some corporate networks.

I would be willing to bet money your issue is on your side. I am a daily user since the beginning and cannot recall when I have had issues like you describe unless it was related to my corp network.
Show HN: I built an open-source Grokipedia because Elon Musk forgot to
by vmath20 | 2025-10-29 17:58:57+00:00
I built an open-source client version of Grokipedia.

It transforms raw Grokipedia pages into a structured, navigable wiki experience with AI chat, mindmaps, and intelligent citations, while maintaining near-instant load times through aggressive caching (it currently only supports the ~800,000 articles that Grokipedia has indexed).

Live at: https://deepgrokipedia.com

Repo Link: https://lnkd.in/eywUy9i3
by aj_hackman | 2025-10-29 17:59:23+00:00
Every port I've done to a new hardware or software platform has shaken loose at least a handful of bugs or assumptions that were well worth ironing out. And in the case of a port to Apple Silicon, you get a very fast development environment at the end of it. This library also helped with 90% of the work:

https://github.com/DLTcollab/sse2neon
by dmitrygr | 2025-10-29 18:00:31+00:00
'Katz v. United States' was quite clear - you have no expectation of privacy in public. Anyone may photograph you and use said photos. Do I like it? No. But that is the current caselaw in USA.

"What a person knowingly exposes to the public [...] is not a subject of Fourth Amendment protection." - Justice Potter in 'Katz v. United States'
by carlosbaraza | 2025-10-29 18:00:38+00:00
This is nice. I liked Cheetah for grunt work that I want to get out quickly and is not too hard. The speed is really awesome. A model that would run at even higher speeds like the OSS models at groq/cerebras would really be workflow changing, because the slowness of SOTA models really breaks the flow. I find myself taking a ton of breaks and getting distracted while I wait for a model to complete a task (e.g. just now).
by pavel_lishin | 2025-10-29 18:00:43+00:00
> In November 2022, Bending Spoons agreed to acquire Evernote.[19] The acquisition was concluded in January 2023.[20] In July 2023, Evernote laid off all of its existing staff and announced it would relocate to Europe to be closer to Bending Spoons' headquarters.[21]

Damn.
by nemothekid | 2025-10-29 18:00:50+00:00
>We now save over $1.2M / yr and we expect this to grow, as we grow as a business.

Am I just naive? How is a uptime SaaS product saving over a million year on managed colo vs AWS? Was every API route in it's own EC2 instance?

AWS is expensive sure, but over a million dollars a year? For this product specifically?.

I got some clarification from their earlier posts and it looks like they were intentionally avoiding any AWS platform features:

>Our goal was to avoid reliance on AWS or any proprietary cloud technology.

>When we were utilizing AWS, our setup consisted of a 28-node managed Kubernetes cluster. Each of these nodes was an m7a EC2 instance. With block storage and network fees included, our monthly bills amounted to $38,000+. This brought our annual expenditure to over $456,000+.

I just think if you are going to deploy on AWS, then treat it AWS like managed-colo, then your bill is going to be high. I understand how that seems unfair, but AWS isn't really in the business of selling virtual machines. If you sit down and ask yourself how you got here, it just seems like you committed yourself to wasting money. If I knew I just needed some linux boxes from the start, there are better choices than AWS.
by soiltype | 2025-10-29 18:00:50+00:00
> Consumers won’t pay for anything online

I think we should note that this is a situation created by the businesses more than the consumers. By offering "free" products they drove paid products out of the market. They didn't have to do that. But if I'm going to be as fair as possible, it's only regulation that could have stopped such a niche feom being exploited. One business or another would have eventually figured it out.
by anjel | 2025-10-29 18:01:09+00:00
The US is not nearly as far down that path as is, for example, China. But two forces are at play here: 1. Near-term concern: F-Droid is getting too popular for Google's comfort and Android revenue ambitions 2. Longer term goal: Control. Much of Chinas's social credit scoring is mediated by their phones. Not an issue yet here in the US but assuredly, if not explicitly on the current's government's list of aspirations. A completely managed device with no freedoms (like f-Droid et al,) is antithetical to a more restricted (managed) device.
by jjice | 2025-10-29 18:01:09+00:00
Yeah looks like they're back on M5.

dang saying it's temporary: https://news.ycombinator.com/item?id=32031136

$ dig news.ycombinator.com ; <<>> DiG 9.10.6 <<>> news.ycombinator.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54819 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;news.ycombinator.com. IN A ;; ANSWER SECTION: news.ycombinator.com. 1 IN A 209.216.230.207 ;; Query time: 79 msec ;; SERVER: 100.100.100.100#53(100.100.100.100) ;; WHEN: Wed Oct 29 13:59:29 EDT 2025 ;; MSG SIZE rcvd: 65

And that IP says it's with M5 again.
by kragen | 2025-10-29 18:01:12+00:00
I already had KiCad installed, so I uninstalled it to see how long it would take. It took me 51 seconds to clone the repo and reinstall KiCad. I thought this wasn't too bad.

But the joke was on me — when I tried to open the PCB file, KiCad said: "KiCad was unable to open this file because it was created with a more recent version than the one you are running. To open it you will need to upgrade KiCad to a version dated 12/29/2024 or later."

So I now think your position is reasonable. Also I think I need to upgrade Debian.