MurphyA/hacker-news huggingface dataset:
by bigyabai | 2025-11-19 17:33:31+00:00
That was 10 years ago. Since then, Apple has admitted to the government forcing them to cover-up backdoors: https://arstechnica.com/tech-policy/2023/12/apple-admits-to-...

Apple has since confirmed in a statement provided to Ars that the US federal government “prohibited” the company “from sharing any information,” but now that Wyden has outed the feds, Apple has updated its transparency reporting and will “detail these kinds of requests” in a separate section on push notifications in its next report.
Show HN: Virtual SLURM HPC cluster in a Docker Compose
by ciclotrone | 2025-11-19 17:33:45+00:00
I'm the main developer behind vHPC, a SLURM HPC cluster in a docker compose.

As part of my job, I'm working on a software solution that needs to interact with one of the largest Italian HPC clusters (Cineca Leonardo, 270 PFLOPS). Of course developing on the production system was out of question, as it would have led to unbearably long feedback loops. I thus started looking around for existing containerised solutions, which were always lacking some key ingredient in order to suitably mock our target system (accounting, MPI, out of date software, ...).

I thus decided that it was worth it to make my own virtual cluster from scratch, learning a thing or two about SLURM in the process. Even though it satisfies the particular needs of the project I'm working on, I tried to keep vHPC as simple and versatile as possible.

I proposed the company to open source it, and as of this morning (CET) vHPC is FLOSS for others to use and tweak. I am around to answer any question.
by VintageRobot | 2025-11-19 17:34:11+00:00
> A lot of this goes away when you stop spending so much time on social media, which is a very poor reflection of "reality."

It mainly "too much time of political social media". You can always tell.

What you find is that a lot of people will be repeating talking points and/or catch phrases without putting much thought into it. A lot of this is fed to them by people who are essentially evangelists and many of these people I am convinced are given they talking points, because they all say the same thing at roughly the same time.

> Prominent figures on social media change their minds all the time, but they'll re-sculpt their reality around the basis that they were always right anyway

They can do that if they are getting a decent turnover of new viewers. That doesn't work too well when their fanbase is declining.

If you look into the UFO land which is the worst for this and the most obvious because often the claims are ridiculous. What often happens is that someone will be outright exposed for being a fraud e.g. someone proves that a video was fake. They will then disappear for a few months or maybe a few years. During that time, many more new people would have filtered into the community and many won't look into that person's background.
by javierbuilds | 2025-11-19 17:34:42+00:00
Most “cofounder hunts” fail because they’re basically people with an idea trying to recruit someone to fix everything for equity. Engineers know this. They avoid it.

Cofounder Hunt works differently: it’s a page where you offer equity in exchange for completing concrete bounty-style tasks.

No vague promises, no “join my revolution,” just clear deliverables with real ownership attached.

Why this works better:

You prove you’re serious by putting equity on the table. Contributors prove themselves by shipping, not pitching. Both sides see real value before talking about partnerships. No one wastes time on endless “let’s hop on a call” chats. If traditional cofounder hunting feels like dating apps for startups, this is closer to GitHub meets equity: small tasks, real progress, and partnerships that form because both sides already built something together. Move first, ship something, and let the right people join through real work — not wishful thinking.
by vlovich123 | 2025-11-19 17:34:54+00:00
A lot of these questions bely a misunderstanding of how it works - bot management is evaluated inline within the proxy as a feature on the site (similar to other features like image optimization).

So during ingress there’s not an async call to the bot management service which intercepts the request before it’s outbound to origin - it’s literally a Lua script (or rust module in fl2) that runs on ingress inline as part of handling the request. Thus there’s no timeout or other concerns with the management service failing to assign a bot score.

There are better questions but to me the ones posed don’t seem particularly interesting.
by Havoc | 2025-11-19 17:35:03+00:00
Keeping the site up makes sense as a default. Thats what their real business customers needs so that has priority.

But an opt in „id rather you deleting data/disable than send me a 100k bill“ toggle with suitable disclaimers would mean people can safely learn.

Thats way everyone gets what they want. (Well except cloud provider who presumably don’t like limits on their open ended bills)
by vivzkestrel | 2025-11-19 17:35:06+00:00
Instead we need a startup that builds over every cloud provider. Think of a web server for example. AWS has EC2, GCP has its own equivalent and Azure has its own and so on. What if we had a startup that virtualizes a layer on top of these such that we AWS has an outage, you lose 1/3rd of your operating capacity, when Azure has an outage you lose 1/3rd of your operating capacity. In order for you startup s virtual webserver to go down, all of AWS, GCP and Azure wil have to go down simultaneously. Basically build on top of everyone s cloud service into one single unified virtual layer that offers end products to consumers. A 6GB RAM server that the end consumer purchases has 2GB of RAM running on AWS, 2GB on Azure and 2GB on GCP. I am sure we can also strategize something along the same lines for a database server with the added question of the database sharding strategy at play
by JohnMakin | 2025-11-19 17:35:35+00:00
I have been a small content creator for 10 years now. I've been hampered a lot by actively discouraging these types of parasocial relationships - every now and then I'll get a gaggle of followers that spend entirely too much time on my crappy content or my personality/posts and I get extremely weirded out to the point I want to stop doing it entirely. Everyone tells me I'm doing it wrong, but I swear, 10 years ago it wasn't as much of a thing to create a cult around yourself on social media or streaming platforms. Now it's the primary monetization path.

I've even gone so far to say to more than one person, "look, I like and appreciate you really like my content or my personality, but, you don't know me at all, I don't know you, and honestly, we're not friends, no matter how much you want that to be the case. That isn't to say I dislike you, but you need to be more realistic about the content you consume, and if this hurts your feelings a lot, I'm sorry, but this content probably isn't for you."

Then there's the type of content creator that gets a following by being a huge jerk to their fans - I don't like that either. I just tell them to treat it like a TV show. It's not real, the character in the show doesn't know you or like you. Unfortunately for today's youth and media landscape this is an utterly foreign concept.
by kazinator | 2025-11-19 17:35:36+00:00
You seem to be referring to a reference counting scheme that is retrofitted into a language, where the application has the responsibility of indicating where, in an application-defined type, the references are to other objects.

That can be true of garbage collection also; it can be bolted on in a way that the application is responsible for providing a handler for traversing objects during marking.

(Of course, it is vastly less likely that a marking traverser would be doing anything other than its job of recursing or otherwise indicating pointers to be traversed, whereas finalization routines will mix the downing of references with other resource clean up.)
by arifiqbal81 | 2025-11-19 17:35:43+00:00
Thanks for the detailed writeup and explaining the root cause in details

However, I have a question from a release deployment process perspective. Why was this issue not detected during internal testing ? I didn't find the RCA analysis covering this aspect. Doesn't cloudflare have an internal test stage as part of its CICD pipeline. Looking the description of the issue, it should have been immediately detected in internal stage test environment.
by ElectricalUnion | 2025-11-19 17:35:54+00:00
> Auto-editing them risks breaking zero-trust boundaries and traffic-inspection paths.

How are you inspecting zero-trust traffic? Not at the gateway/VPC level, I hope, as naive DPI there will break zero-trust.

If it breaks closed as it should, then it is working as intended.

If it breaks open, guess it was just useless pretend-zero-trust security theatre then?
by arjie | 2025-11-19 17:36:01+00:00
They have all the primitives. I think it's just that people are looking for a less raw version than AWS. In fact, perhaps many of these users should be using some platform that is on AWS, or if they're just playing around with an EC2 they're probably better off with Digital Ocean or something.

AWS is less like your garage door and more like the components to build an industrial-grade blast-furnace - which has access doors as part of its design. You are expected to put the interlocks in.

Without the analogy, the way you do this on AWS is:

1. Set up an SNS queue

2. Set up AWS budget notifications to post to it

3. Set up a lambda that watches the SNS queue

And then in the lambda you can write your own logic which is smart: shut down all instances except for RDS, allow current S3 data to remain there but set the public bucket to now be private, and so on.

The obvious reason why "stop all spending" is not a good idea is that it would require things like "delete all my S3 data and my RDS snapshots" and so on which perhaps some hobbyist might be happy with but is more likely a footgun for the majority of AWS users.

In the alternative world where the customer's post is "I set up the AWS budget with the stop-all-spending option and it deleted all my data!" you can't really give them back the data. But in this world, you can give them back the money. So this is the safer one than that.
by monerozcash | 2025-11-19 17:36:13+00:00
This needs more information. 5TB is far from "BIG" when it comes to cloud backups.

You can probably get away with google drive+rclone+borg/restic/whatever, but it will be rather clunky. Backblaze might be a nicer backend to use.

I use rsync.net with borg, but not sure about your budget. Their 1TB lifetime plan is very competitive though.
by bhubert | 2025-11-19 17:36:45+00:00
I use .NET at $job, and have been running arch for the last few years, without any problems. I also have two collegues using Apple silicon, also no problems there.

The official aspnet core web framework is (in my opinion) good enough that you don't need anything 3rd party.

The GUI story is not a good one though, and if I were to write a GUI program I'd reach for Avalonia (3rd party, free).

I use Rider as IDE, but there are multiple other options.

With the recent performance improvements (Span, Memory, Intrinsics, etc) it's possible to write quite performant C# these days, and with low GC pressure.

You can read an overview of what's new with the language (although missing C#14 which was released days ago) here: https://learn.microsoft.com/en-us/dotnet/csharp/whats-new/cs...
by mschuster91 | 2025-11-19 17:37:17+00:00
> look at the uptime of card networks, stock exchanges, or airplane avionics.

In fact, I'd say... airplane avionics are not what you should be looking at. Boeing's 787? Reboot every 51 days or risk the pilots getting wrong airspeed indicators! No, I'm not joking [1], and it's not the first time either [2], and it's not just Boeing [3].

[1] https://www.theregister.com/2020/04/02/boeing_787_power_cycl...

[2] https://www.theregister.com/2015/05/01/787_software_bug_can_...

[3] https://www.theregister.com/2019/07/25/a350_power_cycle_soft...
by AbstractH24 | 2025-11-19 17:37:22+00:00
> You can respond, anyway. ;-)

Well, since you asked ;-)

I'd agree with you, more or less. I don't find it horrendous necessarily. But I find the focus to be far more on the articles than the conversation. Most of my comments are just me screaming into the void.

Its a different business model though, HN isn't trying to increase your session time as much as possible. I find the UI to actually discourage conversation and interaction.
by crazygringo | 2025-11-19 17:37:29+00:00
What dev tools has Google shut down?

Colab is still going strong. Chrome inspector is still going strong.

They've never released a full-fledged IDE before, have they? Which I don't count Apps Script editor as one, but that's been around for a long time as well.

I think it's much more likely that Google believes this is the future of development and wants to get in on the ground floor. As they should.
by runtimesec | 2025-11-19 17:37:36+00:00
Analysis of 24k open source vulnerabilities and 572 public exploits shows that CISA’s KEV list contains only 69 of them. Eighty eight percent of vulnerabilities with working exploit code are not included. The data suggests that KEV lags far behind real exploitation activity, especially as AI tooling accelerates exploit creation within minutes of disclosure.
by cubefox | 2025-11-19 17:37:38+00:00
I guess back in the day, PC RPGs like Ultima were more targeted toward high-IQ nerds, while JRPGs were targeted toward kids or more average adults.

Nowadays RPGs are pretty much always as accessible as the JRPGs of old. Or more accessible, as even random encounters and turn-based combat are increasingly perceived as not streamlined enough.

The question is whether the hand-holding approach makes certain types of games impossible now. For example, if an old RPG derived its appeal from executing successful note-taking, the game can't be made approachable by taking out the note-taking requirement (e.g. with automatic quest logs, quest markers, in-game hints etc) without removing the core of the gameplay.

Though I'm sure there are many other clunky aspects that could be streamlined today without loss.
by FLHerne | 2025-11-19 17:37:38+00:00
If I'm understanding it right, the idea is that the DNS configuration for company-staging.com is identical to that for company.com - same IPs and servers, DNS provider, domain registrar. Literally the only differences are s/company/company-staging/, all accesses should hit the same server with the same request other than the Host header.

Then you can update the DNS configuration for company-staging.com, and if that doesn't break there's very little scope for the update to company.com to go differently.
by AnthonyMouse | 2025-11-19 17:37:54+00:00
The obvious problem with studies like these is when they're from the period in history when the attitude towards regulatory costs was that the cost/benefit of any particular rule should be ignored and the total number of rules should only increase over time. Especially so when the study is from France, where these attitudes are even more entrenched and on top of that the program is centrally planned -- not the thing known for bringing efficiency -- and where higher efficiency is regarded as a cost because you're losing union jobs or lucrative contracts and the one paying is the taxpayer or the ratepayer, who has less influence over the government than the unions or construction companies.

Whereas what you want is multiple companies building these things on an assembly line, where you can plop the components out of a truck already approved and ready to be turned on.
by shagie | 2025-11-19 17:38:09+00:00
The amount of integration between the system and the wifi modem, the frequencies that it can broadcast on, and the regulations for that part of the spectrum.

You'd be quite challenged to make your wifi modem connect to an access point a few miles away. Phones do it all the time. A phone may be broadcasting with as low as a milliwatt when near a transmitter to a few watts when further away ( https://en.wikipedia.org/wiki/Wireless_device_radiation_and_... ). Wifi has a much smaller range of acceptable broadcast power available (and at the most powerful end of acceptable is less than a phone).
by anonymousiam | 2025-11-19 17:38:36+00:00
Having done lots of network booting over the years, here are a few of my lessons learned:

PXE is a big improvement over the boot EPROMs that we needed to install on our NICs back in the day. Those would get an address via DHCP and then TFTP the boot image, and boot it.

I've had some trouble with PXE boot that's been caused by STP. If your PXE boot server has, or is behind a bridge with STP turned on, it can prevent the client from booting. I think this has something to do with the STP "learning state", but turning off STP on the bridge can solve the problem, as long as you're sure that you will not be creating any network loops on the affected interfaces.

There's also a new "https boot", which is supposed to be a PXE replacement, but TLS certs have time validity windows, and some clients may not have an RTC, or might have a dead CMOS battery, and those might not boot if the date is wrong.
by pklausler | 2025-11-19 17:39:02+00:00
Even a short summary of the Wake can suffice to get you started. You're never going to understand it all, and that's okay, but even a brief chat with a Wake fan can give you the basic clues of its structure and the HCE/ALP Shem/Shaun dualities. I think it's a mistake to spend time with guidebooks than with the text itself if you want to read it for pleasure as opposed to writing a thesis on it. At least, postpone the guides until after your first trip once around.
by colesantiago | 2025-11-19 17:39:06+00:00
> Bunny has raised money from VC which indicates it’s going the “Wall Street” path.

Yet it is an available alternative to Cloudflare that is not on Wall Street (a public company).

If you want to do this 100% yourself there is Apache Traffic Control.

https://github.com/apache/trafficcontrol

> Anubis is a bot firewall not a CDN.

For now. If we support alternatives they can grow into an open source CDN.
by BuckRogers | 2025-11-19 17:39:10+00:00
I just looked up his political views. Because I never cared about them before, to say the least. He's right wing in general which for half of us, probably the majority at this point but we're just less vocal about it, is a good thing. I generally don't just outright disassociate from people with opposing political views to mine though as you suggested there. But I have seen that and it's most often a behavior I see on the left. For whatever reason. Perhaps intolerance of diversity of thought.
by Nextgrid | 2025-11-19 17:39:23+00:00
Devil’s advocate: I operate the equivalent of an online lemonade stand, some shitty service at a cheap price offered with little guarantees (“if I fuck up I’ll refund you the price of your ‘lemonade’”) for hobbyists to use to host their blog and Visa decides to use it in their critical path. Then this “lemonade stand” goes down. Do you think it’s fair to blame me? I never chose to be part of Visa’s authorization loop, and after all is done I did indeed refund them the price of their “lemonade”. It’s Visa’s fault they introduced a single point of failure with inadequate compensation schedules in their critical path.
by 4MOAisgoodenuf | 2025-11-19 17:39:31+00:00
The vast majority of undocumented immigrants arrived legally and are visa overstays, which is NOT a criminal violation but rather a civil violation.

For most of America's history it wasn't even illegal to enter the US without prior authorization. The law that made it a crime to enter the US without authorization (8 U.S.C. § 1325) was specifically created in the 20's to restrict immigration by race. And the violent enforcement of this law has really only ramped up in the last few decades.

It is very strange to see many people in the US (and in this thread) accept the current enforcement framework as simply a set of static rules that just happen to be here, and not a relatively recent phenomenon that was enacted and enforced for a project of racial prejudice.
by foresto | 2025-11-19 17:39:42+00:00
> It has nothing to do with being a multi-billion dollar corp.

Cloudflare is the multi-billion dollar corporation. It has everything to do with that, because they are the primary cause, and their resources and position make them by far the best equipped to solve it.

> Criticizing when there's no other solution isn't very useful, is it?

Of course it is. Without criticism, the growing problem goes unacknowledged and allowed to persist. It should instead be continually called out until it is prioritized, and some of those billions should be spent on researching a solution. (Similarly, a company found to be dumping waste into a river should be held responsible for cleaning up the mess they created. Even if that turns out to be expensive or difficult.)

Expecting a single affected person to solve it for the big corp that caused it is unrealistic. And blaming the victims because they use VPNs or disable cookies is... unhelpful.
by VintageRobot | 2025-11-19 17:40:15+00:00
> The friend who saw conspiracies everywhere built a following. Then an audience. Then a 7-figure income stream.

That person is almost certainly a grifter. If I was dishonest enough to do it, I would to.

It isn't that difficult if you are reasonably articulate, look reasonably tidy and can upload a 20 minute video once day to get an audience. A lot of these people are simply choosing a "side" and then repeating the talking points.

There are people that make 10-20k a month just reading the news and many of them aren't even good at doing that.
by janaagaard | 2025-11-19 17:41:01+00:00
> Lately, I see a lot of drivers who turn on their brights and just leave them on and this includes cars with the older halogen and even incandescents. This is a change in behavior.

I suspect this is because more and more people don’t know how to turn it off and/or don’t know what the blue indicator on the dashboard means.

As you mention, Tesla model 3 seems to be the worst offender. Could this be caused by a bad interface in that car? How does the brights indicator look in a model 3 and you turn off the brights?
by stronglikedan | 2025-11-19 17:41:20+00:00
If I'm paying a company that chose Cloudflare, and my SLA with that company entitles me to some sort of compensation for outages, then I expect that company to compensate me regardless of whose fault it is, and regardless of whether they were compensated by Cloudflare. I can know that the cause of the outage is Cloudflare, but also know that the company that I'm paying should have had a backup plan and not be solely reliable on one vendor. In other words, I care about who I pay, not who they decide to use.
by toast0 | 2025-11-19 17:41:36+00:00
> If someone sent an email threatening someone else, the court should not present that email incorrectly as raw HTML code.

If there was no text/plain alternative, showing the HTML would be acceptable evidence of their crime. Sentencing guidelines for sending mail without a text/plain alternatives aren't established, but I think 1 year for the user and 10 years for the software developer is fair.