MurphyA/hacker-news huggingface dataset:
by p_l | 2025-10-22 19:34:41+00:00
A lot of the textual nature of older IETF protocols, including the CR LF line endigns, can be probably traced to how easy it was to bang out a bad implementation full of subtle problems that could be debugged by sitting an undergrad student at a teletype instead of spending time on having some binary serializer (that telecom companies definitely had money for)
by steveklabnik | 2025-10-22 19:35:16+00:00
You're welcome, and feel free to let me know how it goes. There is an adjustment period, for sure, and (in another eerie parallel to Rust) some folks try it, bounce off, and try again later, and it sticks then.

The auto-commit behavior was one of my biggest concerns when starting, but it turns out that when combined with other things, I'm a huge fan now, for example.
by apizon | 2025-10-22 19:35:38+00:00
Gut feeling I suppose ? Pricing less felt like selling it short considering I still have quite a few features and content I want to add to the app, pricing more felt too much considering it's missing aforementioned features (:

I might bump the price to $50 in a year or so if I'm satisfied with the new content/features and feel like it deserves it (only for new users, lifetime owner will get all updates for free obviously).
by danaris | 2025-10-22 19:35:44+00:00
I mean...what you say is not, in the face of it, false; however...

For the past few decades, the ways and the degree to which we have been genuinely trying (at the government level) to "progressively tax money" in the US have been failing and falling, respectively.

If we were genuinely serious about the kind of progressive taxation you're talking about, capital gains taxes (and other kinds of taxes on non-labor income) would be much, much higher than standard income tax. As it stands, the reverse is true.
by danaris | 2025-10-22 19:35:51+00:00
> Meanwhile 99% of people looking at the products don’t realize that one’s cheaper than the other because it’s going to spy on them and sell the data.

And this, plus the fact that it's so abstract and opaque what the negative consequences of that spying are, is a huge part of the problem with all of it.

We need better regulations on this, but sadly, even before the recent fascist takeover, the regulators have been largely asleep at the wheel for decades.
by luqtas | 2025-10-22 19:35:58+00:00
we have trouble defining and detecting when someone is in a flow state. or what parts of the brain are involved in grit. heck we are even tipping the begginings on how chronic pain is processed in our brain. if some drug has a greater validity than a placebo, then it's something

now a guy claiming direct correlation with trauma based on what you went through for some seconds/minutes right after you born? feels like some Freud and their charlatans type of shit not "soft science"
by lkrubner | 2025-10-22 19:37:04+00:00
Meta's mission is to build the future of human connection -- this totally makes sense if you assume they believe that the future of human connection is with an AI friend.

That https://character.ai is so enormously popular with people who are under the age of 25 suggests that this is the future. And Meta is certainly looking at https://character.ai with great interest, but also with concern. https://character.ai represents a threat to Meta.

Years ago, when Meta felt that Instagram was a threat, they bought Instagram.

If they don't think they can buy https://character.ai then they need to develop their own version of it.
by chis | 2025-10-22 19:37:05+00:00
I think it's more likely to say that this comes from a place of laziness than some enlightened peak. (I say this as someone who does the same, and is lazy).

When I watch the work of coworkers or friends who have gone these rabbit holes of customization I always learn some interesting new tools to use - lately I've added atuin, fzf, and a few others to my linux install
by bananaquant | 2025-10-22 19:37:16+00:00
I think I got the magic part. You can store all build system binaries in the VFS itself. When any binary gets executed, VFS can return a small sham binary instead that just checks command line arguments, if they match, checks the inputs, and if they match, applies the previous output. If there is any mismatch, it can execute the original binary as usual and make the new output. Easy and no process hacking necessary.
by frenchmajesty | 2025-10-22 19:37:38+00:00
You are looking at it wrong. Meta is a business. You know what they sell? Ads.

In fact, they are the #1 or #2 place in the world to sell an ad depending on who you ask. If the future turns out to be LLM-driven, all that ad-money is going to go to OpenAI or worse to Google; leaving Zuck with no revenue.

So why are they after AI? Because they are in the business of selling eyeballs placement and LLM becoming the defacto platform would eat into their margins.
by overfeed | 2025-10-22 19:37:51+00:00
> We’re not talking about an overworked nurse.

We're talking about overworked AI engineers and researchers who've been berated for management failures and told they need to do 5x more (before today). The money isn't just handed out for slacking, it's in exchange for an eye-watering amount of work, and now more is expected of them.
by p_l | 2025-10-22 19:37:59+00:00
A lot of old RFCs explicitly mention running on top of TELNET.

Additionally, as much people like to harp about "telcos focusing on connection-oriented protocols while we ran loops around them with packets", the reality is that NCP and later TCP pretty much focused on emulating serial lines around, and one of the earliest ways to access ARPAnet outside of machines directly on it was through calling into a TIP which set up bidirectional stream from your modem to a port on some host.
by interestica | 2025-10-22 19:38:10+00:00
Share yours!

I use this as a bookmarklet to grab the front page of the new york times (print edition). (You can also go back to any date up to like 2011)

I think they go out at like 4 am. So, day-of, note that it will fail if you're in that window before publishing.

javascript:(()=>{let d=new Date(new Date().toLocaleString('en-US',{timeZone:'America/New_York'})),y=d.getFullYear(),m=('0'+(d.getMonth()+1)).slice(-2),g=('0'+d.getDate()).slice(-2);location.href=`https://static01.nyt.com/images/${y}/${m}/${g}/nytfrontpage/scan.pdf`})()
by akerl_ | 2025-10-22 19:38:32+00:00
I feel like this kind of justification comes up every time this topic is on HN: that the reason companies aren't being organically penalized for bad IT/infosec/privacy behavior is because the average person doesn't have leverage or alternatives.

It's never made sense to me.

I can see that being true in specific instances: many people in the US don't have great mobility for residential ISPs, or utility companies. And there's large network effects for social media platforms. But if any significant plurality of users cared about the impact of service breaches, or bad privacy policies, surely we'd see the impact somewhere in the market? We do in some related areas: Apple puts a ton of money into marketing about keeping people's data and messages private. WhatsApp does the same. But there are so many companies out there, lots of them have garbage security practices, lots of them get compromised, and I'm struggling to remember any example of a consumer company that had a breach and saw any significant impact.

To pick an example: in 2014 Home Depot had a breach of payment data. Basically everywhere that has Home Depots also has Lowes and other options that sell the same stuff. In most places, if you're pissed at Home Depot for losing your card information, you can literally drive across the street to Lowes. But it doesn't seem like that happened.

Is it possible that outside of tech circles where we care about The Principle Of The Thing, the market is actually correct in its assessment of the value for the average consumer business of putting more money into security?
by sonofhans | 2025-10-22 19:38:41+00:00
Consider the source — the author appears to believe that trauma itself doesn’t truly exist, is not based on physical phenomena or experiences, and is largely a sales idea manufactured by the therapy industry.

This article, and others, are riddled with rhetorical bullshit. E.g., someone on Instagram said that their emotionally distant father caused trauma, so “emotional distance” is added into the causes of trauma, and this is used to diminish the power of “trauma” itself.

This is exactly as illuminating as a neurotypical arguing whether Tylenol or vaccines cause more Autism. The author’s only skin in the game is being provocative.
by all2 | 2025-10-22 19:38:55+00:00
Oof. I'm seeing lots of issues packed into this. You need good counseling. Not marriage counseling (that's a scam in most cases), but individual counseling. Even just a bro to talk to while you turn wrenches or heft iron. Just find a guy who is older than you, married, and well adjusted and talk to him. I can make some recommendations on where to find men like this, if you would like.
by d3Xt3r | 2025-10-22 19:39:06+00:00
They say their mission is "to get Framework products in front of more people" but that's a lie, because if they really wanted more people to have access to a Framework device, they should ship worldwide, or partner with a retailer with a global reach, or at the very least, let people overseas buy them using parcel forwarders / overseas credit cards.

Because as of today, Framework is out of reach for ~90% of the world's population, which makes them irrelevant, at least in my books.
by xiphias2 | 2025-10-22 19:39:11+00:00
An important advantage of aliases was not mentioned: I see everything in one place and can easily build aliases on top of other aliases without much thinking.

Anyways, my favourite alias that I use all the time is this:

alias a='nvim ~/.zshrc && . ~/.zshrc'

It solves the ,,not loaded automatically'' part at least for the current terminal
by exprtk | 2025-10-22 19:39:15+00:00
How about trying to do the following easily with BC:

Mandelbrot fractal: https://www.partow.net/programming/exprtk/repl/index.html?$l...

Pi to 10k digits: https://www.partow.net/programming/exprtk/repl/index.html?$l...

Prime Sieve: https://www.partow.net/programming/exprtk/repl/index.html?$l...
by xg15 | 2025-10-22 19:39:28+00:00
In some way I'm as almost relieved that Yarvin's acolytes are still operating at the level of writing weird internet manifestos and faking endorsements from open source projects.

After all the talk about "dark enlightenment" and the connection to Musk and Thiel, I'd have expected Yarvin to already have an office in the White House or at least ministry of state somewhere.
by hathawsh | 2025-10-22 19:39:39+00:00
I think you're headed in a helpful direction, but I'm looking for ways to narrow the phenomenon a little more. For example, yesterday I heard from my mom, who is not into technical things, that a lot of the Internet was down. She had heard it on the news. I didn't believe it at first because that information was surprising and clearly targeted at laypeople, but soon I learned it was true: AWS us-east-1 had major issues. So my doubt was unfounded. I'd like my doubts to be more accurate.
by nsomani | 2025-10-22 19:39:43+00:00
Hi all, this is a small research prototype I built that connects Rust's MIR (Mid-level IR) to Coq, the proof assistant used for formal verification.

cuq takes the MIR dump of a Rust CUDA kernel and translates it into a minimal Coq semantics that emits memory events, which are then lined up with the PTX memory model formalized by Lustig et al., ASPLOS 2019.

Right now it supports:

* a simple saxpy kernel (no atomics)

* an atomic flag kernel using acquire/release semantics

* a "negative" kernel that fails type/order checking

The goal isn't a full verified compiler yet. It's a first step toward formally checking the safety of GPU kernels written in Rust (e.g. correct use of atomics, barriers, and memory scopes).

Happy to hear thoughts from folks working in Rust verification, GPU compilers, or Coq tooling.
by kibwen | 2025-10-22 19:40:10+00:00
I was in the market for a commuter recently and my runner-up was this bike from Bulls (German brand trying to break into the US market) with full suspension, a Bosch motor, and coming in at a staggeringly light 58 lbs (battery included) for $3300. Extremely tempting, if I hadn't managed to snag a heavily-discounted Aventon Level 2 instead. https://bullsbikesusa.com/products/iconic-evo-tr-1-750
by caymanjim | 2025-10-22 19:40:15+00:00
I don't think this is really a big deal. Plenty of others already maintain public OCI images of Minio (Bitnami is one example). So long as that's the case, there are options. I'm not familiar with Minio's licensing terms, so maybe they can put an end to that practice if they want to, but I suspect there are drop-in replacements other than the official Minio Docker Hub image.

What Minio is doing wrong here is thinking too highly of themselves. Their product is a fine implementation of S3-compatible object storage. It has some features that make it attractive for selfhosting. It's far from the only solution, though. The harder they make it to use, the more people are going to switch to easier alternatives.

A lot of companies try to lock down their popular open source/free products once they have a large market share. It always backfires.

Hashicorp did this. There's no reason to use Terraform anymore; OpenTofu is a drop-in replacement that is just as good for almost everyone, and all the community support will shift to it such that it will inevitably be far superior to Terraform.

Redis became Valkey. MySQL became MariaDB. OwnCloud became Nextcloud.

There are countless examples. Yeah, the commercial entities continue to exist. For companies that need support and contracts, there will still be a market. But they are destroying their pipeline for new customers. Why would anyone use a closed commercial project with no community contribution when there's a free, open source option that's either a 100% compatible drop-in replacement or a low-effort pivot to a functionally-equivalent solution without vendor lock-in and burdensome restrictions?

Minio is shooting themselves in the foot. Most people don't give a crap what's backing their object storage, so long as it works.
by eastbound | 2025-10-22 19:41:16+00:00
Took a gap year at 26, farming. I’m not surprised that I got superlean. But for the first time since I was 13, I didn’t eat my words. My stress went down, but I could finally spell out words with full vowels (I usually just say the consonants). I’m also generally low self-esteem, low recognition, low hope, and for a short time I was easily dating, hopeful and it was easy to take strong decisions.
by amyamyamy2 | 2025-10-22 19:41:42+00:00
I really disliked The Body Keeps the Score. But at the same time, I think it's probably useful for people who have been traumatized to make sense of their experiences.

I also think that for a traumatized person, it probably doesn't make that much of a difference whether or not their body is different because of the trauma, or they're traumatized because of their body - they are experiencing these reactions and trauma responses, and they're looking for a solution. Somatic experiences might help them.

To be honest, reading the book was more helpful than critiquing whether or not my testosterone levels were too low as a 11-year-old, or if I had elevated inflammation because of my diet. Perhaps I'm biased.
by walkabout | 2025-10-22 19:42:05+00:00
Notably, Aurelius (at least—I’m less well-read on Epictetus and others) allows that there are automatic reactions that we can’t, realistically, control. It’s the unintentional, but controllable, maintenance of negative feelings that Stoics aim to consciously tamp down, mostly by breaking the habit of falling into those patterns of thinking in the first place. I think triggered feelings and reactions due to PTSD would tend to fall under the former, though surely a stoic approach might help reduce ongoing harm from those, as it does with more mundane things like being angry at other drivers on the highway. I mean, something in one’s attitudes and ways of thinking must be able help, and if not, guess we better stop bothering with therapy, so it’s not outlandish that stoic practice might improve even that kind of problem, though it may not be the right tool to attack the root of it.

The idea that stoicism even aims to eliminate all negative emotions, or that it blames all of them on the person experiencing them, isn’t really what I’ve found.
by quantified | 2025-10-22 19:42:19+00:00
Seems scaremongering. The only cases of espionage clearly described were dudes.

> at a business conference on Chinese investment risks hosted last week in Virginia, two attractive Chinese women showed up and attempted to gain entry. “We didn’t let them in,” he said. “But they had all the information [about the event] and everything else.”

Nothing there to say why these women were considered spies. Lack of a ticket?

Honeypotting probably does happen. But there's no real meat to this writeup, just an unattractive guy getting linkedin requests from attractive Chinese women.
by AmbroseBierce | 2025-10-22 19:42:44+00:00
There is also a strong likelihood that psychiatric findings get outdated quickly given the rapid evolution of culture, tech, communication and society in general, just 30 years ago internet was just for a few nerds and tech enthusiasts, just 3 years ago you couldn't make the computer realistically pretend to be your lover over chat messages, the landscape in which psychology has to exist that has little to do with it is so ever changing that maybe it was always bit silly to expect it to be a hard science.
by mikece | 2025-10-22 19:43:48+00:00
I'm a US military veteran and nobody is paying me to speak one way or another about any of this. I just see the minimization and avoidance of war as preferrable to bullets flying and people dying. Yes, that is happening now in a limited context (Ukraine and Russia) but and I hope that comes to an end before it spills over to a full and formal NATO vs. Russia (and China?) engagement.
by theshackleford | 2025-10-22 19:43:50+00:00
> I don’t think any of that is necessary for me to extract your data.

I’ve not much interest in what anyone thinks in this regard, but I would be very interested in what one can prove is possible.

There is a whole lot here of “I could just this and I could just that.”

If you can “just” do all those things, I expect you’ll have no difficulty in executing this and providing evidence and data to support your assertions of ease of data exfiltration.

I’m not saying you’re incorrect, this is something I’d like to see anyone show concretely because I keep seeing that it’s apparently so simple to do and almost impossibly difficult to prevent that we should be overflowing with evidence to this surely already?
by blobbers | 2025-10-22 19:44:03+00:00
My professor in college said he designed grain silo software control algos to prevent mold but maximize water retention (weight) in corn.

Apparently when you're in the bulk business, selling water is a good business, but if you lose x% of your water in your corn you're out an equivalent portion of your revenue.

If the corn goes moldy, you may be out more. Hence the optimization.
by shkkmo | 2025-10-22 19:44:56+00:00
> there is no psychiatric body of work that is impervious to criticism. Not a single piece of psychological science is 100% true.

The scientific process is rarely perfect and levels of average levels of rigour vary between disciplines.

However, there are quite significantly varying levels of quality and rigour in psychological studies. Your criticism seems framed to ignore this and groups the charlatans in with the actuap scientists.
by akerl_ | 2025-10-22 19:44:59+00:00
> To balance monitoring and auditing requirements with other system needs, event logging requires identifying the subset of event types that are logged at a given point in time. For example, organizations may determine that systems need the capability to log every file access successful and unsuccessful, but not activate that capability except for specific circumstances due to the potential burden on system performance.

It's possible that some compliance regimes exist that mandate keeping logs of all unsuccessfully authentication attempts. There's surely a compliance regime out there that mandates every possible permutation of thing.

But the far more common permutation, like we see with NIST, is that the organization has to articulate which logs it keeps, why those logs are sufficient for conducting investigations into system activity, and how it supports those investigations.
by p_l | 2025-10-22 19:45:15+00:00
It's not that Microsoft controls the issuance, it's that their keys are pretty much guaranteed to be installed and thus getting your keys signed with their CA means you can use the pre-existing trust roots.

They are also the one party that is forcing freedom-enabling but formal standard breaking ability of resetting Platform Key, because Microsoft actually documents (or used to) a process to deploy systems signed with your own key as part of the highest security deployment documentation for enterprise customers
by nicklaf | 2025-10-22 19:45:21+00:00
> Van der Kolk lost his job due to pretty extensive sexual misconduct, so I think he's a pretty poor person to hold up as a hero.

I was curious about this accusation, so I read a bit about the scandal. [0]

It seems you are actually talking about Joseph Spinazzola, the executive director of Van der Kolk's trauma center, who was fired for sexual misconduct while Van der Kolk was on sabbatical. Van der Kolk was fired two months later, not for sexual misconduct, but for denigrating and bullying employees.

[0] https://www.boston.com/news/local-news/2018/03/07/allegation...
by ux266478 | 2025-10-22 19:45:26+00:00
> because we, by statute and by culture, do not do that. So they have an asymmetric advantage when it comes to sex warfare.

Off the top of my head I can think of the multiple failed assassination attempts on Fidel Castro that used literal femme fatales. It's one of the oldest tricks in the book. What's the point of saying (and printing) something so ludicrous?
by vlovich123 | 2025-10-22 19:45:30+00:00
Yeah that’s what I meant. I bet you the build must be invoked through a wrapper script that interposes all executables launched within the product tree. Complicated but I think it could work. Skipping steps correctly is the hard part but maybe you do that in terms of knowing somehow the files that will be accessed ahead of time by that processes and then skipping the launch and materializing the output (they also mention they have to run it once in a sandbox to detect the dependencies). But still, side effects in build systems seem difficult to account for correctly; I bet you that’s why it’s a “contact us” kind of product - there’s work needed to make sure it actually works on your project.
by walkabout | 2025-10-22 19:45:38+00:00
Stoicism specifies that one needs right acts, in addition to right thoughts. It’s far less passive than e.g. Russell (though I love Russell, and I even love The History of Western Philosophy in which he levels these criticisms, while many others seem to dismiss it) describes it, though treating it as purely an internal-mindset thing is certainly easier and I think a lot of people in-fact only apply those parts.
by submeta | 2025-10-22 19:45:57+00:00
This says more about Meta than about where AI is heading. For me personally my work, my life has transformed dramatically, literally, since 2022, since OpenAI launched ChatGPT and what followed then. I feel like having a dozen assistants who help me levarage my skills exponentially, do tedious work, do things I never had the time and resources to do. I see it in my salary, in the results I produce, in the projects I can accept and do.

My life after LLMs is not the same anymore. Literally.