MurphyA/hacker-news huggingface dataset:
by OkayPhysicist | 2025-11-26 00:15:24+00:00
Phishing is tricking someone into providing confidential information to a malicious party/site. "Don't click on suspicious links" is, IMO, an overreaction that fails to teach people the core lesson that is "Always confirm that you're providing sensitive information to the party you think you are".

Online, we've made it exceptionally easy to make those sorts of checks: a website, served over HTTPS, is coming from the url. Other systems are so, so much worse about this. Any system where unauthorized impersonation is possible is a technical failure, and the fault for abuse of that unauthorized impersonation is on the providers and designers of that system. Like phone calls. Or email.

People tend to be pretty good at differentiating between "this person can be trusted with sensitive information", and "I shouldn't trust this stranger". What they need are the tools to determine who they're talking to.
by mc3301 | 2025-11-26 00:15:55+00:00
As a software engineer in Japan... yes there are jobs here that don't require Japanese, but you'll be limited in both job- and daily-life-opportunity without it. Cool that you are learning it. I came here with zero Japanese. Now I use only Japanese all day every day at work.

Software (as well as all other industry) salaries here are pretty low, though outside of big cities, so is the cost of living.

First step, you definitely need a "COE" which is essentially your first work visa, sponsored by an employer. Once you get that one and are in Japan, it's pretty easy to switch companies.

I dunno how easy it is to do these days, but lots of people used to come and teach at "English Conversation Schools" for peanuts, with no experience. They get an "Engineer / Specialist in Humanities / International Services" visa, which is kind of a catch all for the kind of work you can do. Once they're in, with this visa, and about a years' work, switch to a industry and role that better fits them.

Note: remote, or even hybrid positions are less common here than "in the west."
by komali2 | 2025-11-26 00:15:55+00:00
> but ad blocking is definitely piracy

This is a huge escalation of an already over-stuffed term.

Equating piracy to theft was bad enough, now choosing to not view ads is also piracy, which is theft?

I try to be chill here but no, foot down, absolutely not. Blocking ads is nothing more than determing what content comes in on the wire to the computer you own, or what content is rendered in your web browser. That's it. If that means someone isn't making money when they could be, well, too bad so sad.

It's like, "if you walk past a Nike store without pausing to hear the sales pitch, you are stealing from Nike." Capitalist hellscape.
by mpyne | 2025-11-26 00:16:31+00:00
> If you're 97% over budget, are you successful?

I don't like this as a metric of success, because who came up with the budget in the first place?

If they did a good job and you're still 97% over then sure, not successful.

But if the initial budget was a dream with no basis in reality then 97% over budget may simply have been "the cost of doing business".

It's easier to say what the budget could be when you're doing something that has already been done a dozen times (as skyscraper construction used to be for New York City). It's harder when the effort is novel, as is often the case for software projects since even "do an ERP project for this organization" can be wildly different in terms of requirements and constraints.

That's why the other comment about big projects ideally being evolutions of small projects is so important. It's nearly impossible to accurately forecast a budget for something where even the basic user needs aren't yet understood, so the best way to bound the amount of budget/cost mismatch is to bound the size of the initial effort.
by sbinnee | 2025-11-26 00:16:40+00:00
What struck me most was the requirement. I've been self-hosting librechat on a raspberry pi. I was hoping to test Onyx on it, but no way. Its requirement is 4 vCPU and 10GB RAM? I wish I can take out components that resource hungry and have only the basic so that I can serve it on a less demanding server.
by umanwizard | 2025-11-26 00:16:53+00:00
Sure, but it fits the rest of mathematics "poorly" for exactly the same reasons. No working mathematician is thinking about 3 as an element of 5.

The reason ZFC is used isn't because it's a particularly pedagogical way of describing any branch of math (whether CS or otherwise), but because the axioms are elegantly minimal and parsimonious.
by Nextgrid | 2025-11-26 00:16:55+00:00
Counterpoint: it works, you just have to wait a bit, since now the server will not actually send you the video until the mandatory (pre-skip) ad’s length has elapsed.

Which is fully in their right, I’m not complaining, it’s not like I’m any worse off (waiting on a black screen vs waiting while some bullshit ad tells me to CoNsUmE PrOduCt!!!)
by asa400 | 2025-11-26 00:17:25+00:00
Speaking as someone in the US, I've worked at multiple companies (some startups, some small businesses, some larger) that have either outright imploded or had mass department-level layoffs inside that 1-2 year timeframe. Some of them I would have stayed at longer than 1-2 years if I had the choice. I'm not claiming it's universal by any means, but there is a lot of volatility at US businesses in my personal experience.
by stuffn | 2025-11-26 00:17:49+00:00
This sounds good as a sound bite. But barely any investigation cracks it. We don't police companies much because we have entire divisions of law enforcement who are supposed to be doing that job.

1. If a restaurant serves food that harmed people the health department is the avenue used to investigate and punish.

2. If a game company enables endangering children the FBI is the one responsible for investigating it.

etc etc.

I don't understand why people love the nanny state so much. We can't continue to make companies be the police, the stewards of truth, and justice. They demonstrated just recently, during COVID, that this was an absolute disaster. Over the last 30 years we have watched freedom erode because the average American wants to foist all responsibility onto someone else.

The nanny state is wrong which is why the OP is being downvoted.

1. It is the parent's fault for not monitoring their children. It is absolutely a reflection on poor parenting-by-proxy via video games. I don't understand why we continue to absolve parents of responsibility for everything.

2. We have legal avenues with which we have used and continue to use for the investigation of harmful things produced by companies.

3. If we cannot use (2) we should ask why - the answer is almost always follow the money.

4. Corporations should never, under any circumstance, be turned into police via lawfare.
by lukan | 2025-11-26 00:17:55+00:00
"You don't end up with a tidy hierarchy this way, but I'm not sure you'd end up with a tidy hierarchy using inheritance, either."

Well, I am sure, that all the graphic libaries I ever used, had this inheritance model. (The graphics libary I build, as well.)

The libaries I have seen, that used a different model, I did not really like and they were also rather exotic, than in wide use. But I am willing to take a look at better designed succesful inheritance free ones, to see how it can be done,.if you happen to know one ..
by CuriousRose | 2025-11-26 00:18:03+00:00
Congratulations on the beta launch, an impressive product we will consider integrating.

As a relatively new developer, I'm curious why the dependancy on React?

Was there no way to get the UI you wanted without implementing a framework like React?

We are Svelte based, so it's frustrating for us to have to drag in React for libraries like this.
Ask HN: How does one move from BigTech to more fullfilling places?
by conqrr | 2025-11-26 00:19:00+00:00
I have moved to lesser big companies but still found the talent lacking and people make lives hard for others. Especially in the Bay area. I just want to be mission driven and code, but most places the product, founder or mission and hence the people seem flawed without good incentives. Most simply chase promo and managers often take advantage of this to create a bad environment. Ignoring this behavior for long has led me to burnout with no recognition for doing good work.

At this point, I'm willing to take a paycut for more fulfilling place and a non-profit/OSS seem good places as only people aligned with mission would be likely working there. OSS has more odds of being higher quality and technical. But I have no idea how to break in.
by ZeroConcerns | 2025-11-26 00:19:22+00:00
Oh, wow, I didn't expect that the best thing I'd read about software engineering, like, this year would come out of Microsoft! Don't get me wrong: I like .NET, especially its recent incarnation, but until just now, I would have expected its robustness to be an against-all-odds under-the-radar lucky escape from the general enshittification that seems to be the norm for the industry.

Reading something like this, which outlines a coordinated effort (diagrams and even a realistic use case for agentic LLM usage and all!) to actually and effectively make things better was a breath of fresh air, even if towards the end it notes that the remarkable investment in quality will not be in full force in the future.

Even if you don't care about .NET and/or Microsoft, this is worth reading, doubly so if you're in charge of re-engineering just about anything -- this is how it's done!
by Libidinalecon | 2025-11-26 00:19:22+00:00
We need to stop painting with the wide brush of "capitalism" like this.

This is not capitalism vs socialism. You are describing neoliberalism.

A good place to start is the Wendy Brown book Undoing the Demos. The subtitle is "Neoliberalism's Stealth Revolution"

There is no way to change and fight back against something when we are so confused what we are even fighting against.

No one is really against market prices. They are against these insane, distorted, neoliberal ideas that apply the efficient market hypothesis, "the market is always right" to non-markets. Or using the efficient market hypothesis as a pseudoscientific moral justification for bad behavior.

Most importantly is that there are a ton of people that actually believe this bullshit.

If a process causes number to go up then the process must be morally good because "the market is always right". Obviously, if the process was morally bad number go down because "the market is always right". This is the 21st century American religion.

Railing against "capitalism" just causes those hypnotized by neoliberalism to completely tune out before you even get to the ism in "capitalism".
by throwaway2037 | 2025-11-26 00:21:19+00:00
I hear this so much from Python people -- almost like they are paid by the word to say it. Is it different from Perl, Ruby, Java, or C# (DotNet)? Not in my experience, except people from those communities don't repeat that phrase so much.

The irony here: We are talking about data science. 98% of "data science" Python projects start by creating a virtual env and adding Pandas and NumPy which have numerous (really: squillions of) dependencies outside the foundation library.
by lucb1e | 2025-11-26 00:23:12+00:00
That's all great but what prevents the OS from reading the /dev/input/* device that corresponds to the touchscreen while they enter that password? Or, XKCD#1200 style ("they can get my browser and app data but at least they can't get my disk password") reading all data after 'disk' unlock

Assuming Canada is like most countries and there exists an agency (or laws can be passed to create an agency) which has the authority, optionally after running it by a judge, to compel an entity to secretly implement a backdoor of their choice and they hand such an order to Google, Shiftphone, GrapheneOS, LineageOS, Samsung, or anyone else that is operating within their jurisdiction. Not meaning to single you out, but needing to trust your OS' updates does seem fundamental for a practically workable threat model. Unless you trust your vendor to prefer going out of business and destroying the keys on the way out, over implementing a backdoor for 1 user and tripping the warrant canary (many people will have that level of trust in GrapheneOS but not, say, Samsung; it's a tall ask of any vendor though)
by jauntywundrkind | 2025-11-26 00:23:25+00:00
I love this soo much. I strongly hope some day the web can do some of the hypercard like thing of showing off what is is, having pages have a structure that's meaningful and also conveyed into the page itself.

This is such a neat simple direct experiment in bringing the user and the page together, in that vein.

Side note: I have DarkReader extension (must have for me), and there's half a page of it's gobbledygook at the top, lol.

Side note 2: I went to share this link, & wanted to copy the subtitle out. But the subtitle is in a <meta name="description" content="..."> , which renders via a ::before psuedo-selector. Which makes it non-selectable. That is a bit of a regression in functionality for the user that is unfortunate, with how this page renders itself.
by minimaxir | 2025-11-26 00:23:41+00:00
One of my tests for new image generation models is professional food photography, particularly in cases where the food has constraints, such as "a peanut butter and jelly sandwich in the shape of a Rubik’s cube" (blog post from 2022 for DALL-E 2: https://minimaxir.com/2022/07/food-photography-ai/ )

For some reason ever since DALL-E 2, all food models seem to generate obviously fake food and/or misinterpret the fun constraints...until Nano Banana. Now I can generate fractal Sierpiński triangle peanut butter and jelly sandwiches.
by throwaway2037 | 2025-11-26 00:23:42+00:00
> There's a number of structures that I think are missing in our major programming languages. Tables are one. Matrices are another.

I disagree. Most programmers will go their entire career and never need a matrix data structure. Sure, they will use libraries that use matrices, but never use them directly themselves. It seems fine that matrices are not a separate data type in most modern programming languages.
by dafelst | 2025-11-26 00:24:17+00:00
Your argument was that XML compresses really well, which indicates that compression ratio is your evaluation metric. I just suggested a simple way to improve your metric.

My position is that compression ratio is a largely meaningless metric in this instance, so using it as a method for justifying the use of XML (as inferred from "XML compresses really well") is also meaningless. That does not translate to "XML is bad for XMPP", I actually think it is fine, it means "XML compresses really well" doesn't add anything much in the way of justification.

I've spent way too much time on this thread already, so take what you will from it, it is all you from here on out, I am done here.
by mmooss | 2025-11-26 00:24:22+00:00
Here's the paper:

van der Molen, T., Spaeth, A., Chini, M. et al. Preconfigured neuronal firing sequences in human brain organoids. Nat Neurosci (2025).

https://doi.org/10.1038/s41593-025-02111-0

https://www.nature.com/articles/s41593-025-02111-0
by sfRattan | 2025-11-26 00:25:23+00:00
There was a period I can recall, maybe 2010 to 2020 most prominently, when a subset of HN readers strongly preferred the mobile Wikipedia site, even on desktop, and would always use ".m" linking to Wikipedia articles in comments threads. This also seemed to happen in reddit threads during that decade.

I sort of remember some of the older MediaWiki desktop themes looking worse than the mobile theme, but it was never enough for me personally to try always using the mobile site at the time. I do still strongly prefer old.reddit.com... For as long as that portal continues to exist.
by Nextgrid | 2025-11-26 00:25:42+00:00
Piracy involves obtaining media content for free for which you should normally pay for, as a result of someone sharing the media meant for their own personal use to the general public.

YouTube does not ask for payment, it sends the video data you want alongside some bullshit you’ll ignore and waste precious human time doing so.

Ad blocking just involves offloading the ignoring to the computer, as it should, since computers are meant to automate menial tasks.
by gorgoiler | 2025-11-26 00:26:25+00:00
If you’re in the Bay Area next month then The Dillinger Escape Plan are bringing the Calculating Infinity circus to town(s):

https://www.theregencyballroom.com/events/detail/?event_id=1...

This is enormously off topic but if one person sees this and ends up not missing the show then it was worth mentioning. I think there’s a reasonable crossover between math, discrete math, hacking, and mathcore :)
by martinald | 2025-11-26 00:27:38+00:00
Problem is though Python is slow at runtime. May not matter for many use cases, but I've worked with a lot of startups that suffered terrible reliability problems because they chose Python (or Rails, or Node to some extent) and the service cannot handle peak time load without a lot of refactoring and additional app servers.

Depending on your framework Python is at best ~3x slower (FastAPI) and at worst ~20x (Django) than asp.net on the techempower benchmarks, which maps pretty well to my real world experience.
by balderdash | 2025-11-26 00:29:36+00:00
You’ll never get near the pay, but there are tons of companies, while profit motivated, have much more interesting missions than selling ads to people, that are starved for talent. I’m not saying you’re going to find the most talented colleagues, but your ability to make a large impact is massive in a space that is huge. As just one example industrial non-destructive testing is perfect example, critical to aerospace, nuclear energy and other critical infrastructure, means that at the end of the day these companies are preventing disaster. There is a ton complexity around the physics of radiography, ultrasound, etc, and a ton need of modernization around the software around these technologies.
by amluto | 2025-11-26 00:29:56+00:00
Too bad that Intel chips more or less reserve the right to take LLVM’s nice output and make it non-constant-time anyway. See:

https://www.intel.com/content/www/us/en/developer/articles/t...

Sure, you could run on some hypothetical OS that supports DOITM and insert syscalls around every manipulation of secret data. Yeah, right.
by robot-wrangler | 2025-11-26 00:30:01+00:00
>> I would consider the R code to be slightly easier to read (notice how many quotes and brackets the Python code needs)

Oh god no, do people write R like that, pipes at the end? Elixir style pipe-operators at the beginning is the way.

And if you really wanted to "improve" readability by confusing arguments/functions/vars just to omit quotes, python can do that, you'll just need a wrapper object and getattr hacks to get from `my_magic_strings.foo` -> `'foo'`. As for the brackets.. ok that's a legitimate improvement, but again not language related, it's library API design for function sigs.
by spartanatreyu | 2025-11-26 00:30:14+00:00
Compare the 1.25 video thumbnails shown on the apple tv app to the thumbnails on Steam's big picture mode (designed for people sitting on a couch far away from a tv):

1. https://emilio-gomez.com/wp-content/uploads/2016/03/steamos-...

2. https://preview.redd.it/new-big-picture-mode-is-finally-publ...
by gffrd | 2025-11-26 00:30:18+00:00
> and devoid of children

YES! This is a big piece of it. Fewer kids + more of them wanting to be inside / parents wanting them to be inside = less kids to play with = even less likelihood of them wanting to play outside.

This is like social media in reverse: nobody wants to be inside, but some people are only inside, so everybody is inside.
by dabluecaboose | 2025-11-26 00:30:30+00:00
Nozzle engines absolutely have to account for the external pressure. The optimal pressure as the exhaust leaves the bell should be as close as possible to ambient for full thrust.

If the pressure at exhaust is higher than ambient, the exhaust pushes outward against the ambient pressure and you get huge exhaust plumes, and lost efficiency.

Conversely, if the pressure at exhaust is lower, the ambient pressure pushes the exhaust inward into shock diamonds[1] and you, again, lose efficiency.

Engine bells specifically yield their max efficiency at one external pressure/altitude. The reason you see shock diamonds is most often from ground-level testing (or takeoff) of engines that perform best at altitude.

[1] https://en.wikipedia.org/wiki/Shock_diamond
by tourmalinetaco | 2025-11-26 00:31:09+00:00
Legally? No. However, due to their alteration of search results anything that becomes the top is effectively an endorsement regardless of whether it was chosen by the black box or their employees. They already remove legally operating websites they disagree with. Since they’re selective editors with multiple lost antitrust suits, the only thing we as consumers can do is criticize. Especially as most of these companies top the charts due to SEO spam and not genuine traffic.
Show HN: Tripnly Lisboa City Pass – 5 Days for 1€
by alper_aydin | 2025-11-26 00:31:31+00:00
We’ve been building a fully digital city pass for Lisbon that you can use right away without downloading an app. You can explore 50+ attractions, museums, tours and local experiences with a single pass. For December, I set the price to 1€ for 5 days so people can try it without friction.

Promo code: TRIPNLY-LOVES-YOU

What’s different about this project: – It works entirely in the browser, no signup barriers. – It’s built to serve both tourists and locals, not only visitors. – It combines a city card, discounts, and a loyalty system in one tool. – My goal is to experiment with how digital passes can improve city exploration and support small local businesses.

I’d really appreciate feedback from the HN community — on the UX, the idea itself, the onboarding flow, or anything that feels confusing. Happy to answer questions and discuss the technical side as well.
by renewiltord | 2025-11-26 00:31:52+00:00
I've tried to explain this to people repeatedly and they don't get it. They're always like "oh no the AI scraper is slamming my website it's ruining everything". Um, maybe configure your web browser to not send me data if you don't want me 'scraping' your website. It's literally your server's choice to send me data. I'm just asking from a few IPs. If you want to send data to all of them that's your server's choice.

But I think people don't get the fact that they can just request payment or only send to authenticated users from authorized IPs and so on. Instead they want to send to all IPs without payment but then get upset when I use a bunch of IPs without paying. Weird.

I'm trying to read a bunch of stuff. The entire point of a computer is to make that easy. I'm not going to repetitively click through a bunch of links when a bot can do that way faster.
by rogerrogerr | 2025-11-26 00:32:41+00:00
Can anyone convince me this is truly an effect of AI, and not just pullback from the mass hiring during and following ZIRP in 2021-23ish? I understand either cause makes it a bad time to be a junior, but would like to hear the argument _against_ "AI is taking our jobs".

(I suspect some very junior jobs have genuinely been taken by AI, but it seems to me that the driving factor is still a return-to-mean after ZIRP).
by OkayPhysicist | 2025-11-26 00:34:14+00:00
Unless you think "most programmers" === "shitty webapp developers", I strongly disagree. Matrices are first class, important components in statistics, data analysis, graphics, video games, scientific computing, simulation, artificial intelligence and so, so much more.

And all of those programmers are either using specialized languages, (suffering problems when they want to turn their program into a shitty web app, for example), or committing crimes against syntax like

rotation_matrix.matmul(vectorized_cat)