MurphyA/hacker-news huggingface dataset:
by itopaloglu83 | 2025-10-22 13:02:10+00:00
Tracking will always be more profitable, because that allows you to know whom to target exactly. It’s the fundamental question of business, who are my customers etc.

Tracking should be considered equivalent to putting an electronic tracking into every customer’s pocket when they visit your brick and mortar store. Then the question of privacy becomes more obvious. It is simply not acceptable to track people this deeply and invade their privacy so much.
by retSava | 2025-10-22 13:02:24+00:00
Yeah I get that.

I'm leaning towards you in this case, since it's so strongly associated ice cream <-> dairy, but nowadays there are all kinds of frozen ice cream-ish products. But yes, a sign is often enough. Not always, since if the allergy is severe enough, you also can't risk the server not to use the same spoon as peanut ice cream, or a separate spoon but rinsed in a bucket with the others. And it's enough with one slipup.

So, for me, I take it as a positive signal that such a place is likely more aware than other places, and is more comfortable with my probing questions. Many places aren't, and yet others try to assert something they actually can't live up to.

It ain't easy, being highly allergic.
by GJim | 2025-10-22 13:02:27+00:00
> Should have been written in the law that it’s a one toggle in browser settings.

No!

For crying out loud..... The law says if you want to track me (advertisers take a bow) then in each case, you must have my explicit opt-in permission to do so. And so you should!

Having a browser toggle setting isn't explicit opt-in consent.
by arghwhat | 2025-10-22 13:02:52+00:00
> Does it make you less frustrated

No. There is no valid justification, and the suggestion otherwise suggests a lack of understanding of what exactly these rude individuals are demanding.

The very least people can do when receiving such quite extensive voluntary favors and dedication from others is to be polite and show proper gratitude and appreciation. Otherwise, they are not worth the personal and uncompensated sacrifice of time (a quite non-renewable reosurce) and personal health required for the support. They are not even worth the stress or brain cycles required for communication.

(Not saying there aren't plenty of people showing appreciation - otherwise we would have given up on FOSS entirely a long time ago - just talking about those that don't)
by zahlman | 2025-10-22 13:03:44+00:00
> Too long; didn’t read: Add this at the beginning of your “main” script.

Better yet, put it in sitecustomize.py or usercustomize.py , which are intentionally provided as hooks to customize your environment. Now you get it for all your projects, and don't have to take it out for packaging (or leave it in, I guess there are people who would do that...).

https://docs.python.org/3/library/site.html
by bryceneal | 2025-10-22 13:03:46+00:00
The author recommends using "Do Not Track", but this has been deprecated for some time. Safari and Firefox have both removed the option completely. Perhaps the author meant GPC?

For all of the security suggestions in this article I was also surprised to see the author recommending ungoogle-chromium, which has a number of security issues. See: https://qua3k.github.io/ungoogled/

The primary issue I take with the article is the chosen tone. I think there are ways that these points could have been made without being overly cynical and negative. I think speaking authoritatively throughout the article has the effect of equating the importance of subjective preferences (like the choice of which terminal emulator to include), with legitimate security concerns (bash shortcomings, migrations, firewall misconfiguration, piping curl | sh to install software).

I wouldn't use Omarchy, but I am glad it exists. It's bringing more people into the desktop Linux ecosystem, which should be positive sum. Omarchy comes off to me as a little hacky and immature, but at this stage that seems.. mostly fine? Perhaps they should be more clear about that in their marketing, but I understand the goals and I admire the enthusiasm from DHH.
by cxr | 2025-10-22 13:03:52+00:00
> I think you are missing the point of legal vs societal obligations and your analogy is equally bad

There are a lot of paragraphs in this thread laying the groundwork for this subtle strawman, but neither you nor DannyBee are addressing the real opposing position. That's the one that says there is no legal obligation and there is no social obligation. You're both treating the latter as if agreement about its existence is a forgone conclusion not in dispute. But of course it's in dispute. It's the basis of the dispute.
by heeton | 2025-10-22 13:04:34+00:00
I enjoyed seeing it described in those games :)

I'm pretty sure it was that series that also described https://en.wikipedia.org/wiki/Liquid_droplet_radiator , with the side effects of different ships having very distinct heat patterns because of their radiator patterns. And that if a ship ever had to make a turn while they were active, big glowing arcs of slowly-cooling droplets would be flung out into space and leave a kind of heat plume.
by BurnTheBoss | 2025-10-22 13:04:43+00:00
In addition to what others are saying, I think it's important to think "apples to oranges" here.

Think about it this way, if you're a dealer you want to inflate your supply right? So, if you have a street drug that is an 'upper' and you want to cut it, you need to cut it with uppers, or something that can mask an upper. That cut needs to blend in, if you're expecting something blue, and it has red in it, then you'll know its off.

Psychedelics would need to be cut with other psychedelics, but it's not as easy as mixing two things and having it come out. LSD comes as a crystal and is then put in an alcohol solution and dried on paper, there's not many things that would work that way. If the goal is to stretch your supply, you just further dilute it, and many people do.

Where there are cheaper/easier alternatives are things in the 2c family, or others that are _close_ to the experience of LSD but not, and are also more toxic.

I don't know if any of that is clear, or makes sense but
by daeken | 2025-10-22 13:04:48+00:00
I've become an unironic proponent of HE, the Human Era. For CE dates, we just add 10000 (I'm writing this from 12025). But for BCE dates, they're subtracted and it makes things so much clearer when it comes to telling how long ago something was. E.g. the sundial was invented around 6000 HE, steel was developed around 9000 HE.

Kurtzgesagt has a really great video about the subject: https://youtu.be/czgOWmtGVGs

There's also a timeline in HE that covers many major historical events: https://docs.wixstatic.com/ugd/71a711_295e365a6ec64d6ca7f87e...
by narag | 2025-10-22 13:05:04+00:00
You don't need to write the perfect law. Just write a law that has more or less the intended effect.

Imagine you write a program to do something and it doesn't work at all as expected and at the same time it causes endless annoyance to users.

A law is very similar to a program. It's software for the society. It didn't work and the authors are blaming everybody except themselves.
by blixt | 2025-10-22 13:05:05+00:00
I thought exactly the same thing. I use errgroup in practically every Go project because it does something you'd most likely do by hand otherwise, and it does it cleaner.

I discovered it after I had already written my own utility to do exactly the same thing, and the code was almost line for line the same, which was pretty funny. But it was a great opportunity to delete some code from the repo without having to refactor anything!
by a2128 | 2025-10-22 13:05:14+00:00
> Your browser becomes your personal privacy enforcer, and the law would require it to act on your behalf. Based on your one-time choice, it would be responsible for allowing or declining cookies from every site you visit. If a website tries to use a cookie with an unclear or undeclared purpose? The browser simply blocks it—no questions asked.

ChatGPT writing aside, how does the author expect browsers to do this exactly? It's not as if website developers are declaring the purpose of each individual cookie. Browser developers already added a Do Not Track header option and to the surprise of no one, it was a massive failure because websites have every incentive to skirt this stuff.

And today the GDPR law extends much more than cookies, it requires explicit consent for processing personal data in general. Your browser has absolutely no bearing on whether a website's backend will save the pages you visited, the text you entered, your IP address, and whether it shares it with 500 partners or not. This problem fundamentally requires cooperation from website developers and that's why we have the law targeting websites as it is today.
by qrush | 2025-10-22 13:05:17+00:00
I grew up close to Niagara Falls and my dad was a firefighter there for ~30 years who had to practice rappelling down the gorge to save people (which sadly happens too frequently).

His favorite story from the last time they "shut the falls off" was that they found tons of loose change in the rocks around the rapids - people were racing to get it and bringing back buckets of money. (Of course, they also found a few bodies as well...)
by Madmallard | 2025-10-22 13:05:19+00:00
If only AI was not completely and utterly useless for any unique problems for which there isn't extreme amounts of available training data. You know, something any competent programmer knows and has already known for years. And these problems end up being involved in basically every single non-trivial application and after not very long into development on those applications. If only AI didn't very readily and aggressively lead you down very bad rabbit holes when it makes large changes or implementations even on code-bases for which there is ample training data, because that's just the nature of how it works. It doesn't fact check itself, it doesn't compare different approaches, it doesn't actually summarize and effectively utilize the "wisdom of the crowd", it just makes stuff up. It makes up whatever looks the most correct based on its training data, with some randomness added. Turns out that's seriously unhelpful in important ways for large projects with lots of different technical and architectural decisions that have to make tradeoffs and pick a specific road among multiple over and over again.

Really sick and tired of these AI grifters. The bubble needs to pop already so these scammers can go bankrupt and we can get back to a rational market again.
by bradleyy | 2025-10-22 13:05:32+00:00
The Global Privacy Control (GPC) is the header that actually has enforcement behind it in the US, and there are already companies getting fined. California has partnered with several other states to broaden enforcement.

Would love something better than GPC, but in the interim, the EU should start considering it as a proper signal of (lack of) consent, obviating the need for a banner altogether.
by 542354234235 | 2025-10-22 13:05:35+00:00
>30 seconds vs 3-4 minutes on my previous laptop (14" M1 16GB) is a big deal. It was more constrained for memory (swapping) and CPU and just ran a bit slower. Still reasonable. But a 7x improvement is massive for me. Times 10 or so per day adds up to really significant time savings. If you compile stuff, run expensive test suites, or whatever: you could use a fast laptop.

This was in their original comment. So, when you say they are only arguing cost, I really have no idea what you are talking about.
by jeroenhd | 2025-10-22 13:05:40+00:00
> Small website operators would still need to be savvy enough to make sure any cookies their website served up were appropriately tagged

While enforcement is effectively nill, they already need to do that according to the actual EU "cookie law" (ePrivacy Directive rather than GDPR). If you set cookies, you have to explain to the user what they're there for.

Hilariously, many websites have no idea what the cookies their trackers set are for, and I've caught a bunch of them use language like "seemingly" and "apparently" when describing what purposes cookies actually serve.

If only browsers gave P3P[1] the attention it deserved. The protocol isn't exactly perfect and the unmistakable footprint of early 2000s XML obsession are there, but it could've prevented cookie banners from ever being accepted if only browsers had designed proper UI around an updated version of the protocol.

[1] https://www.w3.org/TR/P3P11
by 1718627440 | 2025-10-22 13:05:58+00:00
> Can we formalize that abstraction such that the prompt is an exact specification, just, at a super high level

That's another programming language. And if you think of an even higher level, where you e.g. specify, that you want to get data from a server in a format, and leave it to some other specification how to do that, that is called a program/library. You get that for free from e.g. Github or your OS repos.
by jraph | 2025-10-22 13:06:03+00:00
Browsers have no way to determine what code or cookie is tracking and what isn't, and if websites are not targeted, they don't have any incentive to tell browsers "oh, this is for tracking, and this, no, it's not for tracking".

The best we have is heuristics content blockers currently use. But heuristics are not good enough for complying to such laws because there's no guarantee they work in 100% of the cases.

It follows that such laws can't target browsers and not websites.
by array_key_first | 2025-10-22 13:06:14+00:00
Democrats can't be expected to be the only functioning people in politics and the sole thing holding society together.

When Dems lose, its Dems fault. When Dems win, its Dems fault. When repubs win, it's also Dems fault. When repubs do something bad - believe it or not, Dems fault.

Republican representatives are not stupid babies. They are grown men and women. They are intentionally fucking Americans up the ass. It's not an "oopsy!" situation.

Everyone needs to take some accountability.
by npodbielski | 2025-10-22 13:06:20+00:00
Oh you are the author.

I think we do not understand each other. Look at this: https://letsencrypt.org/docs/challenge-types/#http-01-challe...

If this is for demo, even more DNS is not necessary. Just code your web server to serve challenge for that particular Uri, and you are done. I do not think so that you need wildcard cert for the demo. Just fixed subdomain is fine. Also you do not have to wait for DNS to propagate with HTTP method.
by ValdikSS | 2025-10-22 13:06:24+00:00
Enables Multi-Gen LRU (improved page reclaim and caching policy). Prevents thrashing, improves loading speeds under low ram conditions. Requires kernel 6.1+. Has dramatic effect especially on slower HDDs. For slower HDDs, consider 1000 instead of 300 for min_ttl_ms. sudo tee /etc/tmpfiles.d/mglru.conf <<EOF w- /sys/kernel/mm/lru_gen/enabled - - - - y w- /sys/kernel/mm/lru_gen/min_ttl_ms - - - - 300 EOF
by mrtksn | 2025-10-22 13:06:29+00:00
There's not much testimonials about OneWeb(Eutelsat) but they advertise sub 100ms latency and there are articles like that: https://www.ipinternational.net/oneweb-vs-starlink-head-to-h...

It's described as slightly worse than Starlink, which makes sense because the orbits are not that different to warrant 20 orders of magnitude performance difference.

Where do you get the 1s latency number?
by safety1st | 2025-10-22 13:06:34+00:00
It's OK for people to want cheap stuff. But to me when I see the insistence that to get it cheap it has to be made somewhere else, I think that belief comes from cynicism and from ignorance of history.

Like, the whole story of the Industrial Revolution is that we invested continually in technology, training, process and plant, and the cost of producing things as measured by both dollars and labor decreased by orders of magnitude. It never stopped. It kept on working right up until we stopped trying and shipped production overseas. In fact even though they have cheaper labor and don't care as much in some of these overseas locations, usually it STILL happens. Technology, training, process, machinery, all get better, per unit cost of production just keeps on falling. Bring it back to America and focus on these four things and it will happen in America again too.

The failure to see this comes from putting the bean counters in charge. A bean counter can't model innovation. They don't know if and when a 10x cost reduction is going to happen somewhere in the industry and then spread. It's not their job to know, and they don't care. They see they can slash a cost by 20% right now by sending those jobs and factories offshore so that's what they do.

In most industries in America today the cost of production is still getting cheaper, but what's ballooning is management and administrative costs. They've grown so much that consumer prices are actually going up even as the cost of the essential process of producing the thing has gone down. That's the bean counters replicating.

It's all smoke and mirrors and lies. The forces that drove industrialization never stopped working. End the IP regimes, actually make stuff again, fire the bean counters, create competition for the consumer dollar in places where it was all acquired and consolidated into oblivion. The innovators will step in, deploy the next generation of plant, train the next generation of workers, stuff will get cheaper, and wages will actually be decent to boot because new and better processes create demand for new and scarcer skills.
by westurner | 2025-10-22 13:06:44+00:00
Here's this from my setup_windows.ps1 powershell script for maintaining windows: https://github.com/westurner/dotfiles/blob/develop/scripts/s... ;

powershell.exe -executionpolicy unrestricted -file ./setup_windows.ps1 -InstallPSWindowsUpdate powershell.exe -executionpolicy unrestricted -file ./setup_windows.ps1 -UpdateWindows powershell.exe -executionpolicy unrestricted -file ./setup_windows.ps1 -InstallWSL powershell.exe -executionpolicy unrestricted -file ./setup_windows.ps1 -InstallChoco powershell.exe -executionpolicy unrestricted -file ./setup_windows.ps1 -InstallChocoPackage

So then the regular tasks are -UpdateWindows and -UpdateChocoPackages :

powershell.exe -executionpolicy unrestricted -file ./setup_windows.ps1 -UpdateWindows powershell.exe -executionpolicy unrestricted -file ./setup_windows.ps1 -UpdateChocoPackages
by watree | 2025-10-22 13:07:38+00:00
Thanks so much! Really appreciate the kind words. Great question about the technical approach. You're on the right track thinking about the headers and caching - but the actual "magic" is a bit different than re-encoding. We're using a managed pool of authenticated accounts to access the clean versions directly from Sora's servers, to ensure compliance with laws and regulations. You're absolutely right that details matter - we spent a lot of time optimizing the request flow, connection pooling, and error handling to make it feel instant and reliable. Appreciate you spreading the word! Would love to hear feedback as more people try it out. We're keeping it free for casual use (3 removals/day) so people can test it risk-free.
by Semaphor | 2025-10-22 13:07:43+00:00
> About the best we have browser side is a mode where all cookies are cleared at browser exit.

No. The best we have are adblockers and scripts like consent-o-matic.

Clearing cookies does mostly clear cookies, tracking goes far beyond that. Clearing cookies has always been a red herring enabling adtech submarines like "I don’t care about cookies".
by ValdikSS | 2025-10-22 13:08:04+00:00
It's kind of solved since kernel 6.1 with MGLRU, see above.

Dirty buffer should also be tuned (limited), absolutely. Default is 20% of RAM, (with 5 second writeback and 30 second expire intervals), which is COMPLETELY insane. I limit it to 64 MB max usually, with 1 second writeback and 3 second expire intervals.
by ethersteeds | 2025-10-22 13:08:06+00:00
I'll admit I read only the summary linked at the beginning, so I surely skipped over minutae that might have lost me. That said, I disagree with this and gp: the conclusion strikes me not as gatekeepy but reasonable and humane to inexperienced users:

> In fact, it is Omarchy that complicates things further down the line, by including a number of unnecessary components and workarounds, especially when it comes to its chosen desktop environment. The moment an inexperienced user wants or needs to change anything, they’ll be confronted with a jumbled mess that’s difficult to understand and even harder to manage.

> If you want Arch but are too lazy to read through its fantastic Wiki, then look at Manjaro, it’ll take care of you. [...]

> On the other hand, if you’re just looking to tweak your existing desktop, check out other people’s dotfiles and dive into the unixporn communities for inspiration.

That strikes me as very fair. I don't think it's gatekeeping to say that setting users up with a "distro" that eschews package management for a pile of curl|sh invocations is a bad idea for which there are much better approaches.
by rldjbpin | 2025-10-22 13:08:12+00:00
the OP is quite an interesting team to watch regarding open-weights* voice-related efforts. this is a nice read to understand the core of their approach.

quite unfortunate, however, their approach to accessibility. unmute [1], which uses the approach discussed in this post, runs quite well with claimed feature of adapting to any voice provided you have a 10 second recording. this is not made available to public at all, despite an issue raised since july. [2]

given the pace of the industry, it is a shame that we need to look elsewhere for using an otherwise well-designed tooling.

[1] https://news.ycombinator.com/item?id=44109610 [2] https://github.com/kyutai-labs/unmute/issues/99
by sothatsit | 2025-10-22 13:08:21+00:00
I would blame ad providers more than individual website owners. From my experience, ad providers have made it very difficult to serve their ads unless you use an ad-supported cookie consent manager. I tried to write my own simple cookie consent form and gave up after realising how obscenely complicated TCF is. And since most ad-compatible cookie consent banners are provided by the ad companies themselves, you kinda just get stuck with bad options. I even tried to pay for a commercial cookie consent manager but it wasn’t supported by my ad provider.

If I had more time I probably could have figured it out. But unfortunately I’m just running a hobby project and do not have weeks to spend on this. The revenue from the ads is what pays for hosting. I imagine lots of websites are in a similar boat.

I would love if there was a simpler option that could respect people’s privacy more, be less annoying, and that would still allow websites like mine to survive by running ads. Targeting browsers instead of websites could have been that option.
by AlexandrB | 2025-10-22 13:08:36+00:00
> Maybe back in the 90s, it was okay to wait 2-3 seconds for a button click, but today we just assume the thing is dead and reboot.

My experience is the exact opposite. If anything 2-3 second button clicks are more common than ever today since everything has to make a roundtrip to a server somewhere whereas in the 90s 2-3s button click meant your computer was about to BSOD.

Edit: Apple recently brought "2-3s to open tab" technology to Safari[1].

[1] https://old.reddit.com/r/MacOS/comments/1nm534e/sluggish_saf...
by adev_ | 2025-10-22 13:08:48+00:00
> So you could be certain that such a high-profile case was not done without the go-ahead of the executive. In that sense, it can be considered politically motivated.

Not really. It is more complex than that.

There is two systems within the system for the "penal" (judiciary) in France:

- Le parquet, with a "procureur" who indirectly under the influence of the executive power.

- The "Juge d'Instruction". They are independent judges called only for complex affairs that are in charge of proof gathering and with more or less free hands.

Sarkozy affairs landed in the second system.

Politicans tend to hate the second systems for obvious reasons.

It is worth to notice that Sarkozy himself tried to reform the system and remove the "Juge d'instruction" entirely but ultimately failed.