MurphyA/hacker-news huggingface dataset:
by jve | 2025-11-07 11:13:02+00:00
> The utility of Have I Been Pwned approaches zero the longer you have been on the internet, and I have been on the internet since the late 1990s.

I mean if your 1Password is green then HIBP has definitely helped.

First of all, without HIBP, you wouldn't have Watchtower.

HIBP has raised awareness on having unique passwords per site.

HIBP has achieved that multiple services now can and check if particular password is leaked or not.

Of course you could argue that since your security hygiene is so good you don't need HIBP. True. Let's pretend every people on planet will be generating unique passwords per service. Great. HIBP will have achieved enourmous job of making the planet more secure.

And still a notification if you appear in some breach that can be attributed to a service - good signal to change password.

Hats off for you cycling the password.. Have you ever ran into problems with that? Say you kinda rotated password but it no longer is accepted or something?
by evv | 2025-11-07 11:13:50+00:00
I get freaked out when I consider the future of archive.is. Thanks to the nature of the web today, it is incredibly fragile.

As the co-creator of a censorship-resistant publishing platform, I really wish we would migrate to a peer-to-peer technology. We could develop network effects on a decentralized platform with a cryptographically-provable network of trust. Most people don't realize it is possible to handle media distribution in a robust way.

I'm not just trying to shill my solution! I wish there were more competitors using these techniques to try and save the web.
by edarchis | 2025-11-07 11:14:35+00:00
Relying on a salinity differential, even between salted and unsalted, seems like a terribly small amount of energy. There are projects to put large spheres at the feet of offshore windmills to pump water in and out. That has some pressure challenges but store a lot more.

The advantage I see for the salinity difference is that you can make them a lot larger than the pumped water ones. But is worth it, I'm skeptical.
by JSXJedi | 2025-11-07 11:15:03+00:00
I’ve been a bit obsessed with YouTube’s subtle “ambient glow”, that soft, blurred backdrop behind the video player. YouTube creates it by blurring a desaturated thumbnail from their video spritesheet, but I always felt it could be done without relying on that extra service.

After a bunch of failed attempts, I finally landed on an approach I really like and packaged it up as my first npm release.

Live Demo: https://video-ambient-glow.netlify.app

It’s a pretty niche project, but if you’re into visuals, CSS filters, or performance-friendly UI polish, I’d love your thoughts and ideas.
by bartread | 2025-11-07 11:17:49+00:00
Sadly it would never work for the British Isles, that much I can guarantee you. Our weather resists all forms of prediction found to be reliable elsewhere, and I doubt AI enhancements over the next few years will make much of a dent in the problem.

I’ve tried all manner of weather services and none of them really do a really good job of any level of forecasting. They do however excel at supplying me with information I can get just by looking out the window.
by nosianu | 2025-11-07 11:18:27+00:00
Many years ago I spent two months in Odessa, Ukraine. I lived in a rented apartment not far from the pretty famous half open-air book (and CD/DVD) market (https://wanderlog.com/place/details/10511015/books-market).

I purchased a cracked Adobe product DVD there (Disclaimer: I actually had a license at the time, but didn't have it installed on that particular laptop). I had trouble installing it, so I went back. I got my money back and help installing an alternative on my laptop. Best service!

PS: Also, Odessa is very beautiful, and I say that as someone who has lived in some beautiful places. -- https://youtu.be/G-BkuEOFGKI (Odessa Walking Tour - Ukraine's Most Beautiful City in 4K -- and this is still missing the many wonderful inner courtyards, and the entire long wonderful beach and park, which would be another equally long video)
by RivieraKid | 2025-11-07 11:19:09+00:00
Why? The press release is much more useful for the vast majority of HN readers in my opinion. The paper is something you read if you want to know more so the right place for it is the comments.

In general, not referring to this specific case, scientific papers are often written for people with specialized background and are hard to understand for people without that background, even if they're otherwise smart and educated.
by soulofmischief | 2025-11-07 11:19:30+00:00
With due respect, there was no intention to start a flame war, and no intention to start a generic tangent. I calmly and directly asked awillen a question meant solely for them, regarding their comment and they responded kindly, and that could have been the end of it.

While I failed to restrain myself from continuing to engage with what in hindsight was obvious bait by two other users, even rereading their comments now, and the comments from multiple other users agreeing that these two users were being needlessly negative and argumentative, it seems clear to me that my comments were not intended to escalate (sans my final, unnecessary comment).

I even edited a comment at one point after I absentmindedly introduced a swipe, and one of the users continued to attempt to escalate by fixating on words I intentionally removed from the conversation. And at the very end, I lost my cool and got fed up.

While I respect the decisions of the moderators on this website, I fully disagree that my original comment which you have detached deserved moderation.

I try my best to observe the guidelines, in fact you can see I mentioned them several times in this thread, as I saw several blatant, wholesale violations of them. In this case, it was an innocent question to a user that was well-received, but became a target for others.

As another user in this thread mentioned, it seems quite relevant to Hacker News for a user to raise questions about the morals and ethics around owning and running digital businesses. I saw the exchange between awillen and I as very healthy, and I appreciated their answer, it meant something to me to encounter such a perspective.

From my personal view, moderating this comment is vindicating to the two individuals who attempted to derail what could have been a very tight, focused conversation between another user and I. The user did not have an email address or I likely would have just reached out to them over email to avoid attracting negativity.
by procaryote | 2025-11-07 11:20:47+00:00
> [most used web framework, powering innumerable successful businesses]

> [literally unusable]

> [one of the most successful web apps]

> [look at how bad it is]

Your standards might be uncalibrated with reality

I use gmail every day and it's fine, apart from when they push AI features I don't want, but I can't blame that on the framework
by davkan | 2025-11-07 11:21:09+00:00
I am in support of the ICC largely and would prefer that the US were a member. Maybe we wouldn’t be living with the shame of crimes like abu ghraib if we had ratified.

Historical counterfactuals are tricky and I’m not an expert on Russia’s consideration of Rome statute ratification. I find it hard to believe that they would have ratified or not withdrawn the moment a warrant was issued for putin’s arrest.
by dotancohen | 2025-11-07 11:21:11+00:00
The value is, at least in my field, that checking for correctness is often a less tiring task than writing the code. With proper prompting, the LLM will also cover more corner cases than will a human think to cover. And to be honest, I really like the names of internal identifiers that LLM come up with. It's a skill that is notoriously lacking in software development.

Additionally, code review with the proper tools can be done relatively quickly and it's always a good idea to get a second opinion - even that of an LLM. I suppose that the human could write the code then ask the LLM for a code review - but that is not common practice.
by oskarkk | 2025-11-07 11:21:30+00:00
I think it refers to this: https://drive.google.com/file/d/1M6PMQrehmeuRU_KDd_PTKsTtVNN...

It doesn't seem very convincing in its conclusions, but has some interesting information nonetheless. I searched for some info on this doc, and it seems that its author really did hire some private investigators, I even found gofundme for it and places where the author asked for help in the early stages of their investigation. It seems they were trying to find the website owner because he hadn’t responded to requests to delete some personal things archived by a prolific stalker.
by costco | 2025-11-07 11:24:01+00:00
What do you think the probability that someone else read 15 books you also read is? It’s very unlikely unless they are all staples of a genre, part of the same series, or just extremely popular in general. 3-5 books is how much I would use on that page. I have found interesting accounts of medievalists, people who work at think tanks, etc with it.

Fake users I would agree should be filtered, but I don’t think filtering out users who gave it a bad review is necessarily the intended behavior. If I put in 3 semi obscure Russian history books, I am presumably looking for someone who is an expert in Russian history to see what else they read. In that case I don’t care if they didn’t like one of the books or not. Approximate matches would require something like LSH or cosine similarity of average input book embedding against average embedding of read books of every user which I think wouldn’t work well anyone for retrieving anyone with a moderately long interaction history.
by UltraSane | 2025-11-07 11:24:10+00:00
Did you assume I'm Israeli? I'm not. I'm an agnostic.

the people ranting about Israel committing genocide in Gaza all happily ignore Article 7 of the Hamas charter that quotes a hadith: "The Day of Judgement will not come about until Moslems fight the Jews (killing the Jews), when the Jew will hide behind stones and trees. The stones and trees will say O Moslems, O Abdulla, there is a Jew behind me, come and kill him." This is explicitly about killing Jews, not just opposing Zionism or dismantling a state. Combined with the charter's call to eliminate Israel and "liberate" all of Palestine through armed struggle, this effectively calls for the violent removal or elimination of Jews from the territory
by teamonkey | 2025-11-07 11:24:35+00:00
Gaming has always been about exploiting human psychology. It's about making people have fun, fun is a psychological state and dopamine release is intrinsicly linked to that.

That doesn't mean that it has to be bad or destructive! Fun is a positive thing, and most game designers I've met from across the industry are in it because they just want to make people have fun.

Dopamine release is a bit of a curio, really. You don't make design decisions based on optimising dopamine release; there's no way of doing that. But it's interesting to know the physiological reasons why people think that things are fun, and it's useful evidence when building a framework such as Raph's.
by foofoo12 | 2025-11-07 11:25:01+00:00
> Send fun emails

Yes, do that. Also a tangent: remind me why you're sending me an email if you haven't sent one in many months.

Sometimes I see an interesting project that hasn't launched. They just have an "sign up for news updates".

Then 12 months later I get a standard news email and I have no clue what it is and ignore it.

At least start your email with something like "Hey, 12 months ago you signed up for the mega cool electron thunder splitter. We've launched!"
by codegrappler | 2025-11-07 11:25:20+00:00
2FA most commonly thwarts server-side compromised passwords. An API can leak credentials and an attacker still can’t access the account without the 2FA app, regardless of which app that is. The threat vector it does open you up to are a) a compromised device or b) someone with access to your master password, secret key and email account. Those are both much harder to do and you’re probably screwed in either case unless you use a ubikey or similar device.
Show HN: ParsOS NEXT, a GUI OS Simulator in Python
by Amirali1390 | 2025-11-07 11:26:02+00:00
ParsOS-NEXT is a robust and highly functional Mobile Operating System Simulator built entirely in Python. It features a polished graphical user interface (GUI) implemented with Pygame, including modern visual elements like blur effects and smooth animations. Also it has a web browser and it's support simple application downloading with .PRS format from file manager.
by inavida | 2025-11-07 11:26:02+00:00
My interpretation of the abstract is that humans are pretty good at judging how difficult a problem is and LLMs aren't as reliable, that problem difficulty correlates with activations during inference, and finally that an accurate human judgement of problem difficulty (*as input) leads to better problem solving.

If so, this is a nice training signal for my own neural net, since my view of LLMs is that they are essentially analogy-making machines, and that reasoning is essentially a chain of analogies that ends in a result that aligns somewhat with reality. Or that I'm as crazy as most people seem to think I am.
by ChrisMarshallNY | 2025-11-07 11:27:34+00:00
In my case, I'm a bit obsessed. I'm "on the spectrum," and that helps me to concentrate and understand stuff.

Also, I just like doing this stuff. My work is also my hobby. There's not that many things that I'd rather be doing.

I have also had a very good venue for doing volunteer work, and that has always provided a driving force.

Of course, now that I'm retired, I have the time.
by razighter777 | 2025-11-07 11:27:42+00:00
I think the focus should be on tools with high surface area that enforce security bounadaries. Especially those where performance is not so important. Like sudo, openssh, polkit, PAM modules. It would be make a lot more sense than these half-baked rust rewrites that just take away features. (I'm biased I personally had a backup script broken by uutils) I think rewrites in rust need 100% bit for bit feature parity before replacing the battletested existing tools in c userland. I say this as someone who writes rust security tools for linux.
by sjw987 | 2025-11-07 11:28:06+00:00
How frequently does this case scenario realistically come up?

I attend a lot of events, and most of the time, I just quickly whip out my phone and scan the QR code (which is usually on a lanyard around their neck).

We can both acknowledge the action taking place (which I believe is important for spam prevention / security / politeness), follow up later, and it takes 1/2 seconds. With this, I would be walking around wondering if the connection was saved or not and checking my phone, which is about the same time cost as just scanning the QR code.

The business card exchange or QR code scan exchange, I think, is important to create a legitimate link. I hate it when I go to events and people scan my QR code from a distance to hit me with cold calls and spam later (usually flip it the other way while not interacting with potential clients), which is sort of how this idea sounds, but weighted towards the spammers side.
by ChrisMarshallNY | 2025-11-07 11:29:06+00:00
Did he yell "They LAUGHED at me at Heidelberg! They said I was mad. MAD!"?

It is a very fundamental shift, though. The whole "Dark Energy/Matter" hypothesis has always seemed to me, to be a bit of a "Here, there be dragonnes" kind of thing, but I am nowhere near the level of these folks, so I have always assumed they know a lot that I don't.
Ask HN: What's the Deal with XMPP
by ekjhgkejhgk | 2025-11-07 11:31:04+00:00
I just recently discovered XMPP, and why isn't it more widely used?

Last time I went exploring into free messaging alternatives I looked into Matrix. I looked into Matrix again, and it's still terrribly slow. XMPP on the other hand is snappy. Despite this, XMPP is still more widely used than Matrix (not to mention whatsapp/signal/telegram). Why is this? Is there some downside I'm missing?
by hmstx | 2025-11-07 11:32:05+00:00
> The best way to experience this is at one of the top festivals. The second best way is at a club.

I would respectfully disagree and swap these, unless the festival is something like Freerotation. Festivals tend to bring out the more consumer friendly, hands-in-the-air side, and more often than not, force everyone to condense their sets, losing a lot of the "storytelling", risk-taking and deeper cuts.

What remains of techno has largely rotted in the last 5+ years due to the high-visibility, high octane arms race "business techno" festival energy, for example.
by anotheryou | 2025-11-07 11:33:15+00:00
Do I get this right?

- they concentrate salt water once to get "heavier than sea water" brine. Hope not chlorinated.

- it's then a closed system shuffling between bottom and top tank(s)

- everything floating is soft, so no strong forces unless a wave crashes on top

- advantage of ocean: "free standing" within height/depth margins, free water for initial fill

And really not visible in the video:

- the disk you see floating is a V shaped bladder with the storage in the V below surface and floatation sprinkled all around and segmented in to "cake wedges".
by port11 | 2025-11-07 11:34:11+00:00
Some cities in Europe have famously tried to place a ceiling on the price of a square meter, to varying degrees of success. The German federal government has notoriously reversed Berlin's decision to do so.

Since land belongs to everybody and to no one, perhaps we should let the government decide what to do with it. Or at least promote more co-op housing and land trusts.
by latexr | 2025-11-07 11:34:15+00:00
> Giving an app’s AI free rein to look through photos on your device feels a little invasive

“A little”? You might as well start writing the followup article where everyone’s photos were leaked despite Tinder claiming they wouldn’t store any of them. Or will it be an article about how they sold the information from your photos to advertisers? This is a breach waiting to happen, from someone you already know you can’t trust due to all the past shadiness.
by evv | 2025-11-07 11:35:35+00:00
Utilizing p2p tech is not illegal. It is illegal to redistribute copyrighted content without authorization- and we are working to build this into the protocol so that peers will respect copyright by default. People can redistribute at their own risk. I'll be the first to admit that this is complicated, and we have a long way to go in this regard.

Plus, the vast majority of people will just use the web frontend, with a peer on the server. Most peers can be hosted by content creators and tech-savvy friends+family.
by Lichtso | 2025-11-07 11:35:43+00:00
> I honestly cant't think of any good examples where game mechanics and stories interacted in a way that gave you significant agency while still being fun. I'd love to be given contra-examples though.

Rimworld and The Sims. Both are procedural story writers.

> I felt railroaded into comically absurd black/white choices

I agree: All these AAA titles essentially are movies where you get tons of "agency" in choices which are irrelevant to the story, but the main plot is hard scripted into a few predetermined paths.

Until we have full generative AI as game engine the only alternative remains the procedural approach mentioned in the beginning.
by LRVNHQ | 2025-11-07 11:38:24+00:00
The overwhelming majority of people who work around 40 hours a week have plenty of free time.

"I don't have freetime" is usually a tell sign that people either don't know how to manage their time / prioritize free time activities, or have made choice that they refuse to see as choice but as obligations instead (which implicitely just means they prioritize this activity a lot)
by williamdclt | 2025-11-07 11:38:46+00:00
> React released hooks in early 2019 before Covid, and after that things don’t really change much at all.

Server-side components became a thing, as well as the React compiler. And libraries in the React (and JS at large) ecosystem are pretty liberal with breaking changes, a few months is enough to have multiple libraries that are out-of-date and whose upgrade require handling different breaking changes.

React Native is it own pit of hell.

It did slow down a little since a few years ago, but it's still not great.
by Jotalea | 2025-11-07 11:39:45+00:00
apparently everyone has made their own, some better, others worse. but here's my implementation (not as full-featured as this one but it does the job): https://github.com/Jotalea/FRIDAY

it's inspired on F.R.I.D.A.Y. from the Marvel Cinematic Universe, a digital assistant with access to all of the (fictional) hardware.
by shevy-java | 2025-11-07 11:39:47+00:00
I would not call it a "piracy" streaming site.

I would call it a hero-site. That's what they are - they are heroes for unrestricting information.

Take ublock origin. Now, many say it is an ad-blocker; the ublock origin author says the extension is a generic content blocker. I agree with that but I go further: I call ublock origin a hero-blocker, or better, a heroic blocker. It blocks unwanted things in general. For similar reasons I think the term "piratebay" is old. It made more sense in the 2000s. Now I would call it herobay.

People may wonder about those terms, but I think it is important to use better terms than old terms. The old terms often were hijacked by the law system and mega-corporations with their own particular interests. It is time that the people re-define the law. Law should serve the people.
by vanderZwan | 2025-11-07 11:40:41+00:00
Eh, good enough for me. Pretty sure placebo won't cut it with the severe allergy of my family members so we can just try and see.

(if it does have an effect then I wouldn't be surprised if it also matters if the nettles were regionally sourced or not - IIRC there were some studies suggesting that that mattered for the effectiveness of honey helping with seasonal allergies or not)
by grazulex | 2025-11-07 11:41:54+00:00
BackMark transforms plain Markdown files into a powerful task management system designed specifically for "vibe coding" - seamless human-AI collaboration. Unlike traditional tools, BackMark treats AI as a first-class team member with dedicated spaces for planning, documentation, and self-review.

Every task is stored as a simple .md file with YAML frontmatter - future-proof, Git-friendly, and completely portable. No databases, no cloud, no vendor lock-in.
by port11 | 2025-11-07 11:41:56+00:00
> Acknowledging a mistake, no matter genuinely or not, doesn't solve the situation. It just makes victim feel good a bit.

This feels very wrong to me, I'm sorry, but I'd be very pissed if you told me such a thing in a personal context. Reminds of Stanley from The Office, who claims he never apologised to any of his wives.
by heisenbit | 2025-11-07 11:42:38+00:00
It is a question of probability and effort. My personal estimation rule for my type of projects is it takes 3 times longer from my prototype to something I‘m comfortable having others use it and another factor to get to an early resemblance of a product. A recent interview I read an AI expert said each 9 in terms of error probability is the same effort.

Most software written does not serve a serious nation level user base but caters to so a relatively small set of users. The effort spent eradicating errors needs to be justified by the effort of workarounds, remediation work and customer impact. Will not be fixed can a rationale decision.