MurphyA/hacker-news huggingface dataset:
by jodrellblank | 2025-10-04 21:17:22+00:00
> "Look, here's a program: print "Hello" Do you see any warts in it? No?"

Yes. It's Python 2's print statement, in PythonWiki's PythonWarts[2] page. And it counters a lot of your claims:

- It was right there from the beginning, it wasn't designed in later.

- It may have been good design at the time when Python was a teaching language, and did appear on its own over time as the world and Python's use cases changed around it.

- It wasn't added as a workaround to keep backward compatibility.

- It is a single line of code, as small as you could reasonably get, and still warty.

> "A wart can be documented. [A wart] is a deliberate quirk that deviates from the program's original design"

It was your point that "x is not a wart because it's documented to work that way". How does the article's "Haskell .. built in String type is bad data structure for storing text" 'deliberately deviate' from Haskell's original design? How does sqlite "tables being flexibly typed by default" deliberately deviate from SQLite's original design? On that PythonWarts page "Explicit self in methods" is Python's original design. It's you who has come up with some personal defition of wart that nobody else is using.

> "I mentioned Unix tools as an example of this, since they're by far the most reliable tools I use"

That's orthogonal to their wartiness. And incidentally that should make you suspicious. By the blog post's reasoning, tools are far more likely to be (warty + reliable) than (wart-free + reliable) since the latter relies on them being designed perfectly and not changed and in an environment which isn't changing or to have a design that lets them be changed very flexibly. All those are unlikely and difficult, whereas the former (warty+reliable) can apply to anything, and probably does.

> "Just because you don't like the design doesn't mean that the software has warts."

And just because you like the design doesn't it's wartless.

> "In contrast, using unstructured text streams as the universal interface means that programs written 40 years ago can interoperate with programs written today, without either author having to add explicit support for it"

Unix/Linux shell streams are not unstructured text streams. That's why tools like `cut` exist, because the text has structure. And null bytes can be used as record separators because the stream is not text. And it's why "interop between tools only works if structured I/O is supported by each tool" applies - each tool can only read the byte streams that are within the ad-hoc informally specified half of a common serialization standard. It's not that I don't like this, it's that I don't like people spreading Linux propaganda about how this is wartless and brilliant when it's barely good enough even for tasks of the 1970s and should be in a museum.

[1] https://wiki.python.org/moin/PythonWarts*
by charcircuit | 2025-10-04 21:17:54+00:00
I'm sayint it because it doesn't cause harm. If you allowing fuzzy stuff like that to be harm does not make sense to me and is a slippery slope. The examples of "harms" the article uses are that law enforcement could enforce the law (which is not a harm), or that law enforcement could commit harm using information (which is already illegal). I wasn't alive in the 60s so I can't relate to your example. "Human rights" are not a linear thing. There is no reason to adopt one because another company has it. It should be decided by the people of the country themselves without inside influence.
by oscaracso | 2025-10-04 21:17:55+00:00
Do you think it is charity? The PI hires a student and the student works for them, typically 3-5 years on a salary of around $35,000, often very extensive hours. If the student is talented and dedicated you can conduct more and better research than if they are not. A large proportion of the most talented and dedicated candidates will not be American. It is not a 'huge favor' it is a mutually beneficial arrangement.
by godelski | 2025-10-04 21:18:30+00:00
> but it's not going to solve the problem

I believe I explicitly stated just as much.

I want to stress that this is a highly complex problem that needs to be solved and that means we need to break it down into smaller manageable tasks. You're not going to change everything overnight, a single person won't change things, nor will a single action change things. There's no clear definitive objective that needs to be solved to sole this problem. Nor is there a magic wizard in the tower that needs to be defeated.

In other words, I gave you my explanation for why I think this can be a step in the right direction (in a sister comment I said even more if you want to read that). But you have complained and given no alternative. Your only critique is that it does not solve the problem in one fell swoop. That was never an assumption I made, it is not a reasonable assumption to make (as you yourself are noting), and I explicitly said it is not an assumption being made. Do not invent problems to win an argument. All you've done is attempt to turn a conversation into an argument.

> it would be a step in the right direction, but only a single step.

So don't stop after one step.

> That's a disastrously fallacious set of presuppositions.

Read more carefully. I did not say "use AI" I said "outsource to AI". There is a huge difference in these two things.

Do we need to fight or can we actually have a discussion to help figure out this problem together? You do not need agree with me, contention can be beneficial to the process, but you do need to listen. I have no interest in fighting, so I'll leave the choice to you.
by toomuchtodo | 2025-10-04 21:19:17+00:00
High voltage system inspection and certification was $2k the last time I had one done. Not cheap, but also a potential deficiency that should be able to be identified by a buyer before purchase via VIN.

Take the car to a Supercharger as part of the test drive? You will get an explicit message related to a VIN blacklist when attempting to charge, but if you’re not aware, you won’t know.
by pedalpete | 2025-10-04 21:19:29+00:00
The problem with blog feeds is the action required by the user to decide what blogs to follow, and then the desire to go to a different app to read them.

But this strikes me as a problem that can be solved, and potentially already has been.

If I go to a newsreeder the first time, it's empty. I have to decide what to follow.

If you can get me to add a few blogs of interest, you start understanding what I want to read.

I can then subscribe and follow, just like I would on twitter, and you can present new stuff to me, so I'm never showing up without something new.

I suspect this is something like what substack is doing, but that means all the blogs have to be on substack.

I never go to substack to browse, I go there when a link sends me there.

If there was a service that I as a blog-writer can submit my feed to, and that service is managing the promotion of my blog to the right readers, that would be a benefit, and I wouldn't feel locked in.

I'm sure this has been done, why did it fail?
by sparky4pro | 2025-10-04 21:20:04+00:00
Tried to use Swift outside Xcode and it’s a pain. Especially when writing CLI apps the Swift compiler chocked and says there is an error, mentioning no line number. Good luck with that. Also the Swift tooling outside Xcode is miserable. Even Rust tooling is better than that, and Swift has a multi billion dollar company behind it. What a shame…
by leakycap | 2025-10-04 21:21:21+00:00
Advanced Data Protection, where Apple does not keep a copy of your encryption keys (essentially), was removed in the UK.

The UK seems to now want Apple to decrypt/provide access to encrypted iPhone backups. This is where your device backs itself up in a restorable format to the cloud, including passwords and private data. Since Apple has a way to decrypt non-ADP iCloud data, UK wants it.
by monero-xmr | 2025-10-04 21:21:52+00:00
I have been following this thread for a long time. The UK is poor, simply put, but it has taken a long time to realize it. But the chickens are coming home to roost now. The blame is primarily the rich and immigrants. The real problem is socialism and heavy taxes, plus a denigration of entrepreneurs and business owners. They will learn, once everything has gone to utter shit
by m-schuetz | 2025-10-04 21:23:07+00:00
I've used Qt, Swing and JavaFX, and found all of them absolutely terrible. Qt might have at least led to some good results, but it's fairly bad to use and deploy. Especially if you want to use the latest Graphics APIs, which worked pretty badly back when I last used Qt in 2016. I much prefer Electron, or imgui for C++. I'll happily sacrifice some features so long as I dont have to use Qt.
by Krei-se | 2025-10-04 21:23:14+00:00
This is fearmongering. My mails always got resent after some hours or a day. It's absolutely NOT possible to tell if the problem is on your side, senders side or somewhere in between why a mail is not delivered once and no standard server config would simply toss it.

Host your own mail. I get 99% deliverability with 0 repuation since i do dkim and spf correct.

Don't be distracted by the "complexity" - if you config right it's totally doable.

Gives you actual private caldav too btw
by prerok | 2025-10-04 21:23:17+00:00
Out of bounds exception is ok to crash the program. User input error is not ok to crash the program.

I could go into many more examples but I hope I am understood. I think these hard-coded definition of ranges at compile time are causes of far more issues than they solve.

Let's take a completely different example: size of a field in a database for a surname. How much is enough? Turns out 128 varchars is not enough, so now they've set it to 2048 (not a project I work(ed) on, but am familiar with). Guess what? Not in our data set, but theoretically, even that is not enough.
by esskay | 2025-10-04 21:23:40+00:00
What shop? What on earth are you on about? Every single business in the entirety of the UK charges 3% more to cover virgin giving away cheaper flights? Use your words as this sounds nuts. Credit card rewards aren't exclusive to the UK so I can't work out what on earth you are talking about. If you are suggesting the UK as a whole pays 3% more on every single CC transaction then your argument becomes even more odd as you'd be contradicting your original point.
by larkinrichards | 2025-10-04 21:24:07+00:00
How do you define "minor accident" -- perhaps it was a "minor" accident because no one was injured and no other party was involved?

Last time I bought a car, I found the one I wanted with the note that it had been in a minor accident. I paid for the carfax, and learned that it had some damage and repairs, and had somehow traveled across the country in the process. Limited details, except, the accident had occurred in Florida. $10 later I had the police report. It was a 4wd car and suffered 2 broken axles & broken drive train. not minor in any way.
by m11a | 2025-10-04 21:24:36+00:00
Right. IIRC, the acquiring bank would send an authorisation advice to the issuer when it comes back online. An auth advice is like notice that a payment happened, the issuer doesn’t really get a say in rejecting it (as it does for an authorisation). For the most part, anyway.

If that transaction brings the customer into a negative balance, it’d be between the bank and customer to figure that out. Especially if the customer has no overdraft facility and isn’t supposed to be able to go negative, and isn’t able to easily recover the payment, or the customer is considered vulnerable, then the bank will often just swallow the loss.
by t43562 | 2025-10-04 21:25:03+00:00
My productivity level in C is medium. In rust I'm competely blocked because I want to create a global variable and absolutely none of the described ways in the docs or stackoverflow work for my example. Should I give up on this "bad idea".....well I cannot because I can't accept not understanding why this is not working when people say it can.

Compared to C the situation is outlandishly, even hellishly impossible to understand. If I can't understand this one thing then I feel there's no point in continuing so I must stay and battle it till I get it or give up completely. I don't think I've ever hit anything like this in any other language I've ever learned.
by michaelt | 2025-10-04 21:25:06+00:00
> But if it's pushed to all users, wouldn't we expect a researcher to notice?

Think of the security a games console has - every download arrives encrypted, all storage encrypted, RAM encrypted, and security hardware in the CPU that makes sure everything is signed by the corporation before decrypting anything. To prevent cheating and piracy.

Modern smartphones are the same way.

We can't expect independent researchers to notice a backdoor when they can't access the code or the network traffic.
by hmng | 2025-10-04 21:25:07+00:00
My first email usage was at University, pre-WWW. After that I briefly used some ISP email service, but that was on a time of very limited storage and POP only accounts, so I started hosting my own email even before having an always-on internet connection, using a relay and dynamic DNS to receive email when online. Now a days, I use a small VPS to route and receive email, but final destination and storage is on my home server. Over the years, I had, like others here, to ask Outlook and other providers to unblock my IP or domain, but it has been rare.

I really don’t want to live in a world where only two or three companies run email for the entire world, and this is my little act of resistance.
by FollowingTheDao | 2025-10-04 21:25:33+00:00
Awesome for you and props! Let me tell you, doctors will gaslight patients who cure themselves because it is some kind of mental disorder they have I cannot figure out. They said THE EXACT SAME THING to my friend who also cured his UC with diet. "Well, you never had it because if you did you could not cure it." He is a Dentist and he literally yelled at them because he knew how unscientific it was what they were saying.

I am a FUT2 non-secretor who suffered with IBS-D for years. I had to cure myself as well. Very strict diet and high seaweed (it contains fucose (not fructose)). Not one doctor cares. I tell you, it is a mental disorder.
by leakycap | 2025-10-04 21:25:58+00:00
> nobody has ADP turned on

This isn't the type of question I normally ask people, so it sounds like you've made a bad guess here and are treating your own assumption as fact. You are incorrect; I have ADP turned on.

> Apple provides the data to the Five Eyes without a warrant.

Source? Or are you assuming here, too?

> The fact that ADP is offered as an option is irrelevant.

Only if you think no one uses it.
by zvr | 2025-10-04 21:26:11+00:00
I've been using a Unihertz Jelly (2?) for years. Some of the usual apps are a little tricky in such a small screen, where the keyboard takes up a large portion of visible space, but overall it's a great solution for someone who wants a small smartphone.

The battery kept getting worse after recharging, so I eventually replaced it with a new one -- and everything was back to normal.
by fuzztester | 2025-10-04 21:26:24+00:00
True.

I dabbled in some of them during some periods when I took a break from work. And also some, during work, in my free time at home.

Pike, ElastiC (not a typo), Icon, Rebol (and later Red), Forth, Lisp, and a few others that I don't remember now.

Not all of those are from the same period, either.

Heck, I can even include Python and Ruby in the list, because I started using them (at different times, with Python being first) much before they became popular.
by nobody9999 | 2025-10-04 21:26:43+00:00
>Because the question was whether I'm commenting in good faith.

Perhaps others have asked that question. I have not. Rather, I'm asking a different question:

Why should we believe that Flock is operating in good faith?

Especially given the anti-democratic (small 'd') and likely illegal stuff they pulled in Evanston[0].

That's not a rhetorical question.

[0] https://news.ycombinator.com/item?id=45382434
by supz_k | 2025-10-04 21:27:44+00:00
Self Plug-in: We are currently beta testing Hyvor Relay [0], a self-hosted alternative for sending emails. We are focusing more on observability (monitoring DKIM/SPF, periodically querying DNSBLs) and DNS automation.

A simple docker compose up can get a reasonably working setup [1]

[0]https://github.com/hyvor/relay [1]https://relay.hyvor.com/hosting/deploy-easy
by gmartone | 2025-10-04 21:28:41+00:00
SEEKING WORK | WORLDWIDE | REMOTE Fractional CPO / CTO with 10+ years of experience building and scaling digital products across SaaS (B2B & B2C), AI platforms, and marketplaces.

My focus is on product strategy, user experience, and data-driven decision making — helping early-stage startups define vision and roadmap, and scale-ups optimize for growth and retention.

I work closely with founders to:

Translate business goals into clear product roadmaps

Lead product discovery and experimentation cycles

Build cross-functional alignment between product, tech, and design

Mentor product and tech teams toward autonomy and high performance

Available for fractional leadership, product advisory, or interim CPO/CTO roles

Linkedin: https://www.linkedin.com/in/giovanni-martone-55a06861/ Email: giovanni.martone@gmail.com
by GauntletWizard | 2025-10-04 21:28:47+00:00
Many of them are using their subreddits for submarine promotion. Here's a public example: https://www.reddit.com/r/SeattleWA/comments/547wxd/comment/d...

There's much worse that's "pure speculation", because a few thousand unemployed losers that nonetheless have six figure incomes aren't suspicious at all. See the kerfuffle when the mod of r/antiwork went on Fox News, where several of the other power mods alluded to their true incomes and professions (they know what they are - PR people) when trying to boast about how they'd have done better.
by jkestner | 2025-10-04 21:28:47+00:00
You’re right. It’s a luxury to have the space away from the problem to think about it systemically. Certainly, part of the work is to learn from each other.

Will surveillance cameras in low-income areas (if that’s where they’ll put them) mean that the police will be more responsive to crime in those areas? If the police are already not responsive in supposedly high-crime areas, what’s the underlying cause? Would the Black Panthers have felt the need to have armed patrols in their neighborhoods if the police could’ve put up a surveillance system?
by throawy | 2025-10-04 21:29:11+00:00
It's ADP. That's why Apple didn't reinstate ADP in the UK. The UK wants a backdoor for UK users of ADP.

And there are plenty of UK users of ADP - those who got in before it was banned still have it.

From the article:

> After the U.K. government first issued the TCN in January, Apple was forced to either create a backdoor or block its Advanced Data Protection feature

> the US claimed the U.K. withdrew the demand, but Apple did not re-enable Advanced Data Protection

> The new order provides insight into why: the U.K. was just rewriting it to only apply to British users
by Jtsummers | 2025-10-04 21:29:21+00:00
> Out of bounds exception is ok to crash the program. User input error is not ok to crash the program.

So you validate user input, we've known how to do that for decades. This is a non-issue. You won't crash the program if you require temperatures to be between 0 and 1000 K and a user puts in 1001, you'll reject the user input.

If that user input crashes your program, you're not a very good programmer, or it's a very early prototype.
by yoavm | 2025-10-04 21:29:26+00:00
No, Jules was able to usually edit the code blind and get things working. If they didn't, the customer saw it on the automatic environment created for the PR, told Jules and Jules fixed it. I think I saw one task or maybe two in which Jules actually ran the HTTP server, set up Postgres, ran all the migrations and created a superuser, only to then write some Playwright code that it used to login and take some screenshots.

In other words, so far it didn't feel like including a database will provide us with much, but I am playing with the idea of creating a tiny mock database and including it in the repo, as the real database is around 15GB and contains passwords and names.
by Animats | 2025-10-04 21:29:28+00:00
Towards the end of the posting, it turns out this is a plug for HTMX.[1]

So, is HTMX any good? Do people use it?

The primary mechanism of HTMX seems to be that you click on something, which causes the server to return HTML which is then shoved into the current HTML at the selected point. Is that a good primitive?

[1] https://htmx.org/
by godelski | 2025-10-04 21:29:34+00:00
Direct link for easier access: https://halodetect.com/capability/emergency-keyword/

How does keyword detection work? HALO Smart Sensor listens for preloaded distress keywords and triggers real-time alerts when detected, ensuring quick emergency response without recording conversations. What keywords can HALO detect? HALO Smart Sensor comes preloaded with distress keywords and can be updated with additional phrases to fit specific security needs. Does HALO record conversations? No, HALO Smart Sensor ensures privacy by only detecting keywords and aggression patterns without recording audio or storing voice data.

Quite vague... and seems ripe for abuse

I can understand if there were emergency keywords like yelling "Help" or "Call 911" and extremely limited phrases like that. Essentially a voice activated fire alarm. But uploading new keywords and not being explicit of what keywords trigger the thing is really not a good look. If you can upload arbitrary words then there is no meaningful difference between spying. The thing has an occupancy sensor and it's not like it is hard to combine that data with camera data. What are the keywords? If a kid talks about someone else smoking a joint does that trigger the system? Where are kids going to get some safe place to talk about things without fear of surveillance?

The words keywords being hidden just furthers concerns of surveillance. If you can't know what words you can't use then you have to be very cautious with your speech, least you set off false positives and get in trouble. This really is too far.

HOLY FUCK! THEY *SUGGEST* YOU INSTALL THESE THINGS IN BATHROOMS! How is anyone okay with that? It's way more than a smoke detector! https://halodetect.com/blog/school-bathroom-vandalism/
Show HN: Boilerplate auth server implementing RBAC
by farhan0167 | 2025-10-04 21:29:37+00:00
I've spent the last few weekends building an auth server that comes with a basic RBAC framework. Usually when I start working on a project, I generally tend to re-use the same framework and writing the same auth logic, so I thought of creating this boilerplate.

The concept is straightforward- you generally have some micro-service made up of resources, and each resource has some action(read,write,delete,update). This makes up the permission slug: service.resource.action. These permissions are then attached to roles defined in your system. This project encapsulates this user,role,permission management and enforecement for your FastAPI applications.
by sureglymop | 2025-10-04 21:30:24+00:00
Wow! I was just about to comment how email is the one thing where I wish something that didn't follow the unix philosophy existed. Exactly due to this, it is easy to set up a mail server but it is hard to think of all the things around it: spam, fishing, dmarc, dkim, spf, etc.

This looks really nice, especially also for saas projects.
by Krei-se | 2025-10-04 21:30:51+00:00
I have a writeup in german about self-hosting current and with debian trixie on https://krei.se/Doc

If you do it yourself and do it correct it's a pleasure. I have automatic updates with automatic reboot, tailored systemd to make sure all is well and status reports per mail - total bliss, easy 2-3 years, with trixie now even 5 until you have to touch it again.

It's mature software.

Host yourself! The peace of mind and control is totally worth it.