MurphyA/hacker-news huggingface dataset:
by hypeatei | 2025-10-16 12:55:46+00:00
Voting has consequences, and burying your head in the sand is no way to deal with that. If the accusations of fascism make you uncomfortable: good. Maybe you should encourage your side to take less steps in that direction and vote for better people.

As for the pedophilia accusations: one of Trump's main talking points was releasing the Epstein files, his AG "had the files on her desk", right wing media pundits were proclaiming everything was going to get exposed and... we get nothing. He now calls it a "Democrat hoax" and tells everyone to forget about it.
by jacquesm | 2025-10-16 12:55:47+00:00
On the contrary, it is perfectly on point, the poster in fact admits further down below that it was a stupid comment. It is so confused that I can't make heads or tails of it but after some more back-and-forth (which if you had read the thread you would have known, rather than put in your uselesswords here) it became more clear: they really don't understand the comment did not make any sense.
by pooyamo | 2025-10-16 12:55:48+00:00
Binaries for dynamic libraries of tree-sitter (usually compiled with C compiler) would be smaller than that. For example this [1] .so bundle for 107 different grammars is ~137 MiB.

Unless by "compiled in", some in-lining of the C code into Rust codebase is meant.

[1] https://github.com/emacs-tree-sitter/tree-sitter-langs/relea...
by pjmlp | 2025-10-16 12:56:27+00:00
Who gets to say what is relevant is the architect driving the project implementation.

> aren't really relevant, and Rust directly helps with the other two aspects:

Not at all, because Rust code has nothing to say about what other processes do to those resources, the only thing you can do is wrap accesses in a unsafe code block and hope for the best, that nothing was corrupted.
by jeroenhd | 2025-10-16 12:56:35+00:00
> Open source is widely understood to be a specific thing

I think everyone thinks the way they understand open source is the way everyone understands open source. And yet every time an open source project, by any definition, changes their license, people debate what open source really means.

Unlike a term born with a specific definition, like "FOSS", open source doesn't really have a definition. The OSI has a definition that seems to be most popular, but that's not the only understanding of the term that is doing the rounds.

For plenty of people, open source means "source-available software". For others, it's software licensed under a subset of specific licenses (which licenses is also a subject for debate). And for some it means "software developed in a specific way that involves the community", like many Linux adjacent projects are, disqualifying corporate projects licensed under those specific licenses because they can do a Liquibase any time they want and there's very little chance a community large enough to maintain and develop the existing code will stand up when they do.

Liquibase now falls under one of the three definitions I've heard people agree about rather than two.
by Dylan16807 | 2025-10-16 12:57:30+00:00
Not exactly. If you're not modifying your version you don't need to make the source available to server users. So if you contract out the modifications, and they only give the source to you, and you give the source to nobody...

I don't know if that scheme would work but I think "not battle tested enough" is valid.

Also there's some weirdness in how the availability requirement applies at the time of editing that gives me questions, but I'm far from an expert there.
by rufus_foreman | 2025-10-16 12:57:36+00:00
>> news organizations were concerned that signing the rules conveyed agreement with them, including to a restriction that they not report on any news — even if unclassified — without official approval

Where in the memo does it restrict journalists from reporting on any news without official approval? Can you quote me the relevant section?

I see a section about "unauthorized disclosure of CNSI or CUI", but CNSI and CUI are specific classifications of information that the government is required by law to protect.
by afishhh | 2025-10-16 12:57:49+00:00
> Rust exceling at GUIs is a bit of a strech.

I strongly agree with this. In particular the Rust GUI libraries I've looked at have text layout / rendering that is nowhere near what should be considered adequate today (imo).

For example egui:

- It doesn't do any bidi reordering.

- It also doesn't do any font fallback so even if you didn't need bidi you can't render many languages without first acquiring an appropriate font somehow.

- Complex shaping is nowhere to be seen either.

- egui's italics look really terrible and I'm not sure why since I can't believe even synthesized ones have to look that bad.

CSS has been doing this for years and it's been doing it very well. So I am kind of disappointed that we don't have equally powerful tools in the general Rust ecosystem. Even just considering text layout / rendering libraries, only `cosmic-text` has an API that is somewhat in the right direction[1], but even it fails simply because I don't see a way to insert a button (block element) in-between the text[2].

Note that I'm not just hating on egui here, egui is amazing. Afaict it is the most complete GUI library for Rust and it's great to be able to make GUIs this easily. However I can't just not point out that it is, in fact, not perfect and doesn't truly "excel" at GUIs.

Also I have no idea how inline layout looks in other established GUI libraries like GTK and Qt so maybe I'm complaining about something that is not available most places outside a browser. If anyone knows, it would be interesting to learn how well they compare here.

[1] CSS inline layout is so complex that even this is a decent achievement, since it is not reasonable to expect most CSS features out of new Rust libraries with a significant time disadvantage.

[2] This is non-trivial because bidi reordering should happen on the whole paragraph not only on both sides of the button, so the inline layout API must handle non-text blocks in text.
by mitjam | 2025-10-16 12:58:25+00:00
Special booster: New product liability in EU for software. If your software is in any way related to commercial activity (eg. consulting or having been created as part of paid work), yproduct liability kicks in.

Best but not 100% secure way to protect yourself is to donate the software to a well meaning non profit. If you control the non-profit, the barrier might not hold, if you don't control it, it's not your software anymore.

Update: Thinking of it: AGPL might at least offer some protection as many integrators shy away from using software with this license.
by bryanlarsen | 2025-10-16 12:58:29+00:00
That sounds lovely, actually.

Before Microsoft added TCP/IP to Windows, there were third party ports of the BSD TCP/IP stack to Windows. The winner ended up being Trumpet Winsock, until Microsoft wisely used the same winsock API for their own implementation and embraced and extinguished.

Those ports would still have occurred even if the BSD TCP/IP stack was GPL'd.
by rsrqa1 | 2025-10-16 12:58:46+00:00
Microsoft has subverted projects like CPython by hiring mediocre core developers who have built out their power over the years. Microsoft has coerced other projects to move to GitHub so they could steal and launder the copyright in their LLMs. Multiple Microsoft GitHub CEOs have mocked open source and resistance to the code laundering.

Microsoft "open" source projects like VSCode exist to lock in developers, surveil developers and steal their IP. Developers should become dependent on GitHub, Copilot and stolen code until the open source ecosystem can finally be destroyed.

The entire thing is a big EEE that is beginning to pay off because of LLMs (we can still resist by moving off GitHub and rejecting LLM code theft).
by gen220 | 2025-10-16 12:58:57+00:00
FWIW the question about green card holders is not a what-if hypothetical.

https://www.npr.org/2025/04/01/nx-s1-5339698/green-card-hold...

I have a friend who’s been in the U.S. for 12 years and has been a green card holder for at least half that time. His siblings are citizens and minors. He and his parents are in the middle of being slow-motion deported, because the immigration courts are claiming his original application was fraudulent due to him being a national security threat. There is no new information or evidence that wasn’t in their original application. They just don’t like his country of origin and the high school his dad went to in the 70s. The whole family is trying to draw out the case so his siblings can finish high school before they’re deported.

These stories are everywhere. You can call them “anxiety” and try to ignore it, but this is not manipulation — it’s how this regime works. When they exhaust one layer of the vulnerable they have to go one rung higher up the ladder.
by pankalog | 2025-10-16 12:59:34+00:00
Some years ago I researched the whole credential stuffing ecosystem for a course paper at uni.

Credential Stuffing is (or at least was) a gigantic market, and it is one of the biggest headaches for the biggest pay-walled services, like Netflix, HBO, Prime, etc.

The people that made a living out of it were stuffing millions or billions of credentials (sourced from database leaks) in the most popular services, hoping to then sell the accounts for small amounts of money, like a dollar for a Netflix account with a 10-day warranty. It's a numbers game at heart with a substantial technical aspect, where you need to optimize your checker code to essentially send properly formatted requests that can't be intercepted and don't arouse suspicion, and then you had an ecosystem of "methods" that are certain request-response chains that make your login request look like it's from a real person. People needed to figure out advanced methods to not invoke a CAPTCHA check, which is cost-prohibitive, but not impossible to solve automatically (AI wasn't a thing back then). You then have to buy millions of proxies that are able to route the requests from different IPs so that you're not sending millions of requests from a single IP. Checkers had reached a point where, depending on your proxies, were performing 10,000 or even 20,000 checks per minute. Multithreading was the cornerstone of these technologies, as a simple 2vCPU VM was already bottlenecked by proxy speeds.

Back when I looked into it, it was the wild west, as SSO and other technologies just weren't a thing yet. Companies would become fads of this credential stuffing scene, and it would take a dev team an entire sprint just for them to make a login page that was able to at least force a CAPTCHA check for each single request, and that's IF they had the proper monitoring tools to notice the gigantic spike in login requests. Having a valid account to a service like Ebay where you can then order whatever you want with the linked credit-card, you can understand how big of a security issue this is.

I haven't looked at it recently, but I assume that this has become vastly more difficult for the common-place services like streaming providers and digital goods marketplaces. SSO, IAM platforms like Keycloak, and advanced request scanning techniques have evolved. I'm guessing things have become substantially better, but it's always going to be a big issue for those smaller websites without a dedicated dev team or without at least someone maintaining them.
by timschmidt | 2025-10-16 12:59:57+00:00
I've been working with egui for a couple years. Written maybe a dozen applications with it doing various things from image manipulation to 3D graphics. As I've said elsewhere in the thread, I haven't run into anything I wasn't able to accomplish with it.

Immediate mode has it's detractors, but in practice I've found it remarkably flexible, the resulting code relatively clean, and egui gets out of the way when I want to do something like blit fast graphics to a memory mapped area of the screen. Responses have been positive.
by mawadev | 2025-10-16 13:00:10+00:00
I use liquibase at work because there was a large marketing campaign saying this was the standard for db schema versioning in the java world. Now that I look at flyway, it seems to be a tiny bit better... I had mixed results with liquibase, if you don't use the xml changeSets you are in for a ride and its not that easy to do a simple diff on two databases. It kinda works but feels iffy...

During my frustrations I read blogposts saying you can implement schema version changes easily by yourself and I kind of see it... You have to do the thinking by yourself anyway when you declare changeSets?
by V__ | 2025-10-16 13:00:21+00:00
I think Google calls it remarketing and it goes through Google Tag Manager. You can "tag" visitors how you want (duration, action, page scroll, etc.). It's just a javascript call to the API which you can trigger however you like.

You wouldn't necessarily want to track conversions for retargeting, since depending on your product or service, a second buy might be unlikely. But someone who checks out multiple product pages or articles on your site might be interested and buy in the near future. That of course are also actions bots could easily do.
by Moomoomoo309 | 2025-10-16 13:00:44+00:00
The article explains it pretty well. If you want to understand it better, watch the first video, then skip 20 videos, repeat, and you'll see the development over time as it morphs into what it's become now (I.E: watch episode 1, 21, 41, 61). I also dismissed it at first, but as the article points out, there's a lot more to it than it looks.
by kelas | 2025-10-16 13:01:46+00:00
julia is cool, hands down.

only typical k binary will be less than 200kb and doesn't need stdlib. it still needs a few syscalls, but we're working on that.

and julia has this small and insignificant dependency called llvm. i bullshit you not:

kelas@prng ~ % cd /opt/llvm-project kelas@prng llvm-project % du -hd0 14G . kelas@prng llvm-project %
by jraph | 2025-10-16 13:02:05+00:00
What you call puritanism is a fight for user software freedom to be recognized as a fundamental right.

Your phrasing is malicious. It waves off a 40 year fight from many reasonable people as extreme and ridiculous, or as religious-like.

Did you expect me to answer "no, nothing else than puritanism" to your question?

Well, I won't.
by daft_pink | 2025-10-16 13:02:39+00:00
I think AI has problems with law related tasks like taxes, because there are so many words of art. Taxes are essentially just laws and because laws and regulators and courts eventually define words in very very specific narrow ways and sometimes in different ways from one code section to another code section, AI has a lot of trouble using these very very narrow definitions.

Honestly, I think humans have trouble with this as well.
by mcny | 2025-10-16 13:03:34+00:00
In context of GNU and FSF, when we say free software, we always mean free software with the basic freedoms

Freedom 0: The freedom to use the program for any purpose. Freedom 1: The freedom to study how the program works, and change it to make it do what you wish. Freedom 2: The freedom to redistribute and make copies so you can help your neighbor. Freedom 3: The freedom to improve the program, and release your improvements (and modified versions in general) to the public, so that the whole community benefits.

If you do price segmentation and prohibit billion (trillion?) dollar companies such as Amazon.com from using it, it is no longer free software
by nancyminusone | 2025-10-16 13:03:38+00:00
It's just something dumb to pass the time. When I was a kid we had Charlie the Unicorn, Potter Puppet Pals and YouTube Poops.

If you feel morally panicked by Skibidi Toilet, you are old and out of touch (which is fine). It's the same as it's always been.

Edit: Well, not /just/ something dumb. Completely forgot about the associated lore some of these had, which makes them even more like Skibidi Toilet. I guess there's a whole category of "dumb things with underlying narratives." Filthy Frank is another one that comes to mind.
by immibis | 2025-10-16 13:03:50+00:00
It means you'll either to go to gulag or you'll become supremely wealthy. Possibly both, first the latter, then the former when you outlive your usefulness.

Which is better than just being a normal person who goes to gulag with no wealth.

You saw it on a smaller scale before. Supporters of the current regime would get paid a lot for a while, then promptly forgotten about. Remember Steven Crowder complaining that 50 million dollars was too little - but where is he now? He's irrelevant. That was before they had gulags.
by bluGill | 2025-10-16 13:04:03+00:00
Jobs did a lot of useful things, but he was not an inventor and so has nothing to show. He was really good at forcing people to perfect the inventions of others which is a useful thing. Cray-1 is an invention, and better known than the inventor. So it is the right decision for both.

You can of course debate which is better and there are hundreds of other choices that could be put on either coin - both humans and inventions. I would probably pick different things (not people) for both - but this is a reflection of my biases and not some universal truth.
by hoistbypetard | 2025-10-16 13:05:37+00:00
Thanks. I hadn't followed that concern.

I think a plain read of the license would make it clear that the "distribution" obligation occurs when you make it available on the network to your users (regardless of whether you modified it yourself or paid a contractor to do so), but I'm not a lawyer, so sometimes what looks like plain text to me can have a specific meaning that doesn't make sense to me.
by fkyoureadthedoc | 2025-10-16 13:06:40+00:00
Neither does developing software given we've all been doing it for ages despite the M5 not existing, still nice to have though.

Plus you get more longevity, I'll keep my M4 iPad Pro until doesn't get OS updates anymore. I still feel no impetus to update my M1 laptop despite it being 4 years old.
by immibis | 2025-10-16 13:07:07+00:00
As I understand, it's very roughly comparable to BGP.

It's not the same protocol of course and doesn't do the same thing, but it's used in the same scenarios and has a similar level of security and importance.

And both are peer to peer - you can agree with one of your peers to secure your BGP session, but it won't have much impact on the global network, of which your BGP sessions are only a small part. There was a talk recently released from DEFCON33 about the phone system, where it was mentioned that to bypass authentication, spammers seek out carriers with old TDM systems which can't support authentication, and might even be their main customers. This is like that. All of your peerings may be secure, but if you start blocking calls you got relayed from 4 networks away with incorrect metadata, you can't tell if it's fake data or if one of those intermediary networks messed up the metadata on a legitimate call, and you will block legitimate calls and lose customers. Networks are weird systems where politics, not specifications, dominate.
by Flimm | 2025-10-16 13:07:18+00:00
If you're talking about free-as-in-freedom software, promoted by Richard Stallman and the FSF, then they have always been clear that Free software must not forbid commercial usage or require payment. Vendors are perfectly free to sell copies of Free software if they wish, but the license cannot forbid making copies and derivatives, even for commercial usage. See:

https://www.gnu.org/philosophy/free-sw.en.html#selling
by fxwin | 2025-10-16 13:07:48+00:00
German newspaper "Die Zeit" has a few videos where they get art/cultural critics to watch and comment on modern meme culture which i find quite entertaining. Here is the video about Skibidi Toilet: https://youtu.be/z-oAtxjnDlQ?si=FjpcVJxMoLv537RZ (Audio is mostly german, but the subtitles are quite accurate from what i can tell).

Also recommend this one with "German Brainrot": https://www.youtube.com/watch?v=-mJENuEN_rs
by gen220 | 2025-10-16 13:08:42+00:00
Which minorities are being arrested and deported and detained?

Non-citizens are a minority of people residing in this country (<15% of the population). This includes everything from people who immigrated here illegally, to asylum seekers, refugees, visa holders, and green card holders. And they’re being scapegoated for “crime”, unemployment, inflation, “domestic terrorism” (participating in protests).
by ATiredGoat | 2025-10-16 13:08:42+00:00
After years of work, The Labyrinth of Time’s Edge has officially reached its 4,000th handcrafted room. Built entirely in QBasic by me, the game is a massive interactive world part retro experiment, part love letter to imagination itself. Every room, description, and interaction has been written by hand, forming what might be one of the largest text adventure projects ever built from scratch. No AI, no random generation just pure storytelling, creativity, and a deep respect for the golden age of DOS adventures.
by sofixa | 2025-10-16 13:09:40+00:00
There is a world of difference between not having to declare taxes, and having an industry of tax filers.

In France you have to declare taxes, but everything known to the tax authorities is pre-filled, leaving you to add any special incomes/deductions that didn't come trough regular channels that get automatically reported.

You still have tax consultants to help you optimise if there are higher revenues, but it's a very niche service.
by sampo | 2025-10-16 13:09:43+00:00
> Radiation scans revealed at least 22 plants in the industrial zone were contaminated. The Indonesian taskforce did not name the 21 other production facilities, but said they would immediately undergo decontamination procedures conducted by Indonesia’s nuclear agency.

https://www.theguardian.com/world/2025/oct/09/radioactive-sh...
by ab5tract | 2025-10-16 13:10:04+00:00
My intuition is that if there’s no 2 dollar coin to go with it, there’s no way for it to gain practical traction.

In the US, change is already an annoying factor because sales tax is rarely included in eg, 4.99. So no one is jumping up and down to go from five slices of paper to five rattling coins.
by tirant | 2025-10-16 13:10:21+00:00
ELSTER is available but it is extremely complicated to use. Not even my Tax advisor uses it directly. You must be the first person I’ve heard that uses it directly.

For me not worth to use it having extremely good tools like the offering from WISO.

In my opinion a complicated tax law is a direct attack from the State against low and middle income population. If you have low income and poor education you will not be able to make use of the tax law to increase your available income, something that high income citizens do daily.

In this case we have to thank the free market to provide really easy tools for less than €30 so middle and low income citizens can start at least to take advantage of the tax law.

I’ve lived in multiple countries and always did my tax report myself. And the German situation is so blatantly designed, compared to other countries, to benefit only a very small portion of the population.

Not only that, If the amount of man/hours that the whole country of Germany spends doing taxes would be spent on productivity gains or just normal work, the country would become immediately the richest country in the world. Instead, it’s just wasted effort and work.