MurphyA/hacker-news huggingface dataset:
by rollcat | 2025-11-13 15:49:32+00:00
The main problem with Linux as a platform, is that it isn't. Linux is a kernel, with a platform built on top of it. And that's the real issue: Gnome and KDE are separate platforms; but so are Ubuntu and Fedora; but so are Flatpak and Snap; etc. Depending on your application, you will have to support several combinations.

For gaming, Steam OS fixes that. You can't target "Linux", but you can target Steam on Linux.
by GeoAtreides | 2025-11-13 15:49:34+00:00
>Ban birth control pill

>Ban Abortion

Addressed in the article, but I'll reiterate here: Ceausescu's tried and failed.

Also, during Ceausescu reign, there was no social media, there was no TV, and housing was literally handed out by the regime for almost nothing.

It didn't matter. Fertility rate still went down. And the unwanted kids ended up in large numbers in the grim orphanages.
by cupofjoakim | 2025-11-13 15:49:41+00:00
It'd be cool, but I guess the hodgepodge of different solutions in that space would make it really hard. For example, many mods for GW2 don't work in linux if you're on something like Hyprland due to them having to act as overlays. Not sure if that's a wayland issue or just a typical hyprland thing though
by lrvick | 2025-11-13 15:50:04+00:00
I read it when it was first posted and my team and I have personally done a lot to address some of the more fair points like UX. Keyfork makes the UX story dead simple for key generation and backup. Keyoxide makes key discovery and trust bootstrapping dramatically easier as well.

As far as those with cryptography engineering experience that see it as useful... I mean I have designed the backend key management systems and hardware security modules for several large financial institutions and hundreds of billions of dollars of infrastructure, and have worked closely with many cryptographers who review our work, and the supply chain security engineers responsible for signing commits, packages, and reproducible builds for major linux distributions including the one I founded.

All of the above relies on PGP smartcards for signed commits, commit pushes, ssh, signed reviews, trust bootstrapping, because no other tooling or spec has that covered with multiple competing implementations to choose from as well as PGP.

The only fair point in the article still relevant today IMO is forward secrecy but any tooling that really needs that like an instant messenger would use ciphers and protocals designed for that. PGP would just be used as an identity CA to bootstrap trust in those cases if anything.
by LexiMax | 2025-11-13 15:50:26+00:00
I actually think that there were two possible outcomes. One of them involved killing the filibuster. The other was widespread unrest from all corners of the United States - the kind that that comes from all political alignments, the kind that police and untrained thugs roleplaying as peace officers are wholly unequipped to handle.

I can see how that would be unappealing to a career politician who values stability at all costs. After all, a military junta would mean that he would be out of a job with no other marketable skills. Poor guy would probably have to sell one of his properties to get by.
by zahlman | 2025-11-13 15:51:05+00:00
> Curiously, it will reject all the US coins and spit them back out.

I haven't found them to be noticeably less accepting of American coins than Canadian ones. (Small sample size; American coins in change definitely are less common than they used to be, although it does happen.)

Especially dimes. Man do they just not want to take any kind of ten-cent piece sometimes.
by cestith | 2025-11-13 15:51:11+00:00
The guidance published by the state says explicitly that a business collects the tax from the consumer as an agent of the state, and that the taxes collected belong to the state rather than to the business. If it was a tax on the business, then it could be paid later out of the business’s general funds.

Whether you believe the above or not - and I’m not going to discuss that part further, because this is all easy to find online - the fact remains that most sales taxes must be charged separately from the product price at checkout. There are, as I said, exceptions for bulk goods.
by jacquesm | 2025-11-13 15:51:19+00:00
There will be a lot more decisions like this one. For the war in Ukraine and anything immediate they will buy American stuff if there is no EU alternative (and for many things there just isn't right now, there are too many dependencies). But the tide has changed, for 'in' it is now to 'out'. It is abundantly clear the USA is no longer a dependable ally, and that it will use all kinds of strings attached to hobble what they sell to be able to exert political pressure. Besides the obvious problems with the political system internally to the USA I think it is the external effects that drive decisions like these.

I see the same happening with choices about other suppliers. The EU is a very large trading partner to the US and what is happening right now is unprecedented in the last 75 years or more. The damage to our future world order is incalculable and the fact that it all seems to be by design bothers me greatly.

The lyrics of Alan Parson's 'Children of the moon' have been spooking through my head lately.
by toomuchtodo | 2025-11-13 15:51:30+00:00
Paper:

Rising Cognitive Disability as a Public Health Concern Among US Adults - https://www.neurology.org/doi/10.1212/WNL.0000000000214226 | https://doi.org/10.1212/WNL.0000000000214226 - October 21st, 2025

https://news.ycombinator.com/item?id=45916870 - November 2025
Ask HN: Has AI changed how your approach software architecture and design?
by Syntaf | 2025-11-13 15:51:34+00:00
Pretty open ended question, but curious if any folks here have shifted their views or approaches to software architecture & design with the prevalence of AI / LLMs in the workplace now.

Personally, I've found that the paradigm of "sharp knives in the drawer" can lead to some pretty nasty output from LLMs; it's felt to me like the higher the ambiguity the higher the variance in quality.

This has shifted my approach to A&D:

* Always enforce strict contracts, i.e. the ONLY way to do X is through Y.

* Fail loudly and fail often, assumptions and fallbacks only encourage AI to make larger assumptions.

* Boring is better, the less magic you implement the easier it is for LLMs to understand and extend.

Anyone else have some nuggets of truth they'd want to share as it pertains to A&D + AI?
by redwall_hp | 2025-11-13 15:52:41+00:00
Its specs seem on par with the PS5 Pro, and this doesn't even have a price or a shipping date yet.

The PS5 is already about five years old, has had a slim release and a PS5 Pro. The PS6 announcement is probably a year away, with a 2027 or 2028 release.

Valve is launching a last-gen console, probably at a price that won't be competitive, right before the PS6 comes out.
by xnorswap | 2025-11-13 15:53:12+00:00
I remember reading an article in the journnal of the RSS about whether it was actually less safe or whether it was just statistical clustering.

I don't however remember the conclusion!

I've tracked down the article to https://academic.oup.com/jrssig/article-abstract/4/1/15/7029... but I don't have access.
by jacquesm | 2025-11-13 15:53:26+00:00
These are excellent practices.

Such data is a liability, not an asset and if you dispose of it as soon as you reasonably can that's good. If this is a communications service consider saving a hash of the ID and refusing new sign ups with that same ID because if the data gets deleted then someone could re-sign up with someone else's old account. But if you keep a copy of the hash around you can check if an account has ever existed and refuse registration if that's the case.
by bofadeez | 2025-11-13 15:53:41+00:00
In the case of an email validation service, yeah they must have a huge quantity of infrastructure and then throttle it sufficiently to fly under e.g. proofpoint blacklists. But I don't think you can get big discounts on IPv4 so it's just a variable cost, not fixed.

My opinion is that all SaaS pricing will trend to price of compute as vibe coding + open source alternatives with one-click deployment converge
by ProllyInfamous | 2025-11-13 15:53:54+00:00
Even presuming pieces weren't falling off, every time I see one of these my first thought is how did this pass safety standards (e.g. the sharp corners/blades/edges; pedestrian-strike setups).

Now add on flying corners/blades/edges ... even less enthused.

----

I finally drove in a Rivian — and while I prefer the hybrid drivetrains — it was exceptionally nice. As an American, I can't wait for BYD to offer test drives here.
by Forgeties79 | 2025-11-13 15:54:03+00:00
You don’t have to argue with me about it. Feel free to dismiss my opinion. But I encourage you to go do a cursory search online about this and see what comes up.

I never said it can’t be done, just that it’s ill-advised given the limitations and specific hardware requirements to make it work stably/consistently. You yourself said “with the right hardware,” which is doing a lot of heavy lifting.

Valve doesn’t stand by it as a desktop OS currently. Whenever it comes up, people almost always instruct folks to go to bazzite. What I am excited for is what they have planned for the steam machine because it’s hard to imagine that an updated version of steamOS built for desktops isn’t coming.
by rollcat | 2025-11-13 15:54:05+00:00
The main appeal of a console (for both consumers and developers) is that's it's a "stupid" and "fixed" device. Your game either runs well on it or it doesn't, but you can always count on this remaining consistent prior to shipping it.

If Steam Machine gains enough foothold, it will be treated like a console. It won't run the latest title in 4K@120, but the title will still run great on default settings.
by walletdrainer | 2025-11-13 15:54:29+00:00
Probably? They have pretty professional customer service pages.

However they don’t really need to because there are plenty of documented cases, and the incident response company you hire will almost certainly have prior knowledge of the group you’re forced to deal with.

If they had a history of fucking over their “customers”, the IR team you hired would know and presumably advise against paying.
by ukuina | 2025-11-13 15:54:48+00:00
At 0:52 in their demo video, there is a grammatical inconsistency in the agent's text output. The annotations in the video are therefore suspected to be created by humans after the fact. Is Google up to their old marketing/hyping tricks again?

> SIMA 2 Reasoning:

> The user wants me to go to the ‘tomato house’. Based on the description ‘ripe tomato’, I identify the red house down the street.
by kccqzy | 2025-11-13 15:55:14+00:00
That sounds like an excellent idea. However I think rail transport depends more heavily on quality infrastructure. If a state doesn’t maintain its roads well and allow potholes to develop, it is probably rare for that to cause a fatal accident (I’ve heard of potholes causing damage to cars but not deaths). But improperly maintained rails lead to derailments and deaths.
by estimator7292 | 2025-11-13 15:55:14+00:00
Really? I'd assumed it was just a commercial failure because Valve tried to replace an analog stick with a trackpad that performs worse in almost every way.

Pretty much everyone I know bought one, tried it for a while, and determined that the trackpad simply did not work well enough. It's a really cool device and I've been trying for years to actually use it. It's great hardware, but the ergonomics and UX is really just not good.
by short_sells_poo | 2025-11-13 15:55:21+00:00
I'd argue that subsidizing the railway system from the taxes is inherently a better way to pay for it. In the UK, the trains are ridiculously expensive out of pocket. They are vastly more expensive than in Switzerland (a really high CoL country), which as you say is a much better run system at the same time.

The total costs might be the same, but if paid out of the taxes, the cost is distributed progressively. People who earn more will pay more to keep the trains running. In the UK, the cost is regressive by definition, because the portfolio manager who earns 1 million pounds a year will pay the same expensive ticket fare that the nurse who earns 40k a year, but for the PM it's a trivial expense. And the portfolio manager can work from home, or just drive in to work if they fancy, the nurse cannot. The nurse is forced to use an aging, unreliable and at the same time really expensive train.

And the service itself is positively atrocious even in London when it comes to any non-mainline route. It's a complete tossup whether the trains will have severe outages due to strikes, engineering works or the frequent signal failures.
by walletdrainer | 2025-11-13 15:55:22+00:00
Their incentives are well known. You don’t have to trust them to assume that they will act rationally.

Picking up hundreds of thousands at best (very few databases would be worth so much) when your main business pays millions or tens of millions per victim simply isn’t worth it, selling the data would jeopardise their main business which is orders of magnitude more profitable.

Absolutely no IR company will advise their clients to pay if the particular ransomware group is known to renege on their promises.
by mindcrime | 2025-11-13 15:55:49+00:00
I tried OpenCode and want to like it, but there were major issues[1] running it in Konsole (and most other Linux terminals that I tried). So I gave up on that for now. I spent a little bit of time evaluating Codex and that seems OK. But so far, to the extent that I use any "coding agent" it's usually GHCP in Agentic mode. But truth be told, I still mostly code directly and just use Copilot for automated completions. Maybe eventually Codex or one of these other agents will win me over. I'll be happy to try OpenCode again if they fix the terminal issues.

[1]: https://github.com/sst/opencode/issues/2697
by arbol | 2025-11-13 15:55:49+00:00
> I mean, you're connecting to your primary database potentially on another continent?

Atlas AWS was actually setup in Ireland. The data transfer costs were coming from extracting data for ML modelling. We don't get charged for extracting data with the new contract.

> experts in a domain that maybe is out of your depth

We're in the bot detection space so we need to be able to run our own infra in order to inspect connections for patterns of abuse. We've built up a fair amount of knowledge because of this and we're lucky enough to have a guy in our team who just understands everything related to computers. He's also pretty good at disseminating information.

Thanks for reading!
Show HN: SnipKey v5.0 – Free Keyboard Extension
by pompeii | 2025-11-13 15:56:02+00:00
This release is a big one — packed with tons of improvements!

What’s new: • Bulk editing + snippet creation • Easier, improved tag management • Support for Liquid Glass • Brand new search for fast snippet management • Improved visuals + clearer setup guidance

And as always: 100% free No ads No tracking No subscriptions the only IAP are for tips if you want to support the development (or just leave a review)

For this update, I went fully AI — built the workflows and automation using AI agents (Claude Code). Built with SwiftUI / Swift.

Most of these updates came directly from user feedback via Canny (super useful tool for collecting and prioritizing suggestions — not sponsored, just sharing).

Next step: I’m planning to open source the entire project, so the community can help it grow with new features, fixes, and ideas.

Would love to hear what you think about this version — and if you’ve got feature ideas for v5.1 or thoughts on the open-source direction!
by dabluecaboose | 2025-11-13 15:56:07+00:00
> The one issue I see is that it only has one HDMI port, so you couldn't connect two screens without a dongle.

Stretching the definition of a "dongle", but the page does specifically say "Ready for all the peripherals and monitors you can throw at it" so I'm assuming some amount of USB-C daisychaining is supported
by julik | 2025-11-13 15:56:11+00:00
Most European railways require a driver to have done some route familiarization for most routes, which tends to work fairly well. What does not work very well is that the UK has very patchy and antiquated train safety systems (AWS / TPWS are somewhat rudimentary and deployed - by far - not everywhere) and signaling. Even speed restrictions in the UK are placed very, very tightly and you better know them by heart because they didn't get placed with the idea that the driver must have sufficient time to reduce speed / react between where they get a warning signal and where the restriction comes into effect.

I suspect the move from public to private ownership did adversely affect the upgrades of those, as well as electrification on several key routes.

If I remember correctly they do not even have something as basic as an electronic coursebook - which became mandatory in Germany in the 90s already. And at least in NL if you have a set of routes in a certain direction / route set - drivers would get route familiarization both for the main routes and for the bypasses.
by elcritch | 2025-11-13 15:56:28+00:00
The US already cracked down on mixer Tornado Cash [1]. Wouldn’t surprise me if they (try to) follow suit on privacy coins as well.

There’s a chance there’s enough political influence by libertarian/crypto folks in the US to push back though.

On the other hand, the transparency of bitcoin could be a boon in ways as well. Currently only governments, large banks, some multinationals can track large transfers of money. Bitcoin levels the playing field and enables internet sleuths to uncover government or corporate corruption.

1: https://home.treasury.gov/news/press-releases/jy0916
Show HN: MetaKwik – Free AI meta description generator with intent matching
by maymoonty | 2025-11-13 15:57:34+00:00
Hey HN,

I built MetaKwik, a free meta description generator.

The problem: Google rewrites 63% of meta descriptions because most don't match search intent.

The solution: Generate 5 descriptions, each optimized for a different intent (transactional, informational, commercial, navigational). Each gets an "AI-resilience score" that predicts if Google will rewrite it.

Tech stack: Spring Boot + Ollama (Mistral). Runs locally = $0 API costs.

Try it: https://metakwik.com

Open to feedback and questions!
by anamax | 2025-11-13 15:57:35+00:00
> Since bits aren't addressable, they don't really have an order in memory.

Bits aren't addressable in the dominant ISAs today, but they were addressable by popular ISAs in the past, such as the PDP-10 family.

The PDP-10 is one of the big reasons why network byte order is big-endian.

That said, I forget whether the PDP-10 was big-endian or little-endian wrt bits.
by VikingCoder | 2025-11-13 15:57:40+00:00
Next question in my head...

Can we use one Steam Machine to drive, say, 4 to 16 Steam Frames.

Multiplayer gameplay, like Goldeneye. With the convenience that all of the state is in memory in one process, so there's no networking layer in the gameplay logic itself.

And you can't peak at the other players' screens.
by kuschku | 2025-11-13 15:57:53+00:00
See that's what the intent system was originally designed to prevent.

Your QR reader requires no media permission if it uses the standard file dialogs. Then it can only access files you select, during that session.

Similarly for the camera.

And in fact, it should have no network access whatsoever (and network should be a user controllable permission, as it used to be — the only reason that was removed is that people would block network access to block ads)
by nothrabannosir | 2025-11-13 15:57:55+00:00
> softwareC # available in nixpkgs, but because nixpkgs maintainers are hardline purists it takes 15 minutes to compile from source and ain't nobody got time for that

Which package is that? Is it proprietary but source available? Any free software which is built from source is built by hydra and available from the binary cache to downstream users.
by jacquesm | 2025-11-13 15:58:03+00:00
> But I don't know anyone here who would say "it can never happen". Security is never an absolute.

Exactly. I think it is great for people like you to inject some more realistic expectations into discussions like these.

An entity like Amazon is not - in the longer term - going to escape fate, but they have more budget and (usually) much better internal practices which rule out the kind of thing that would bring down a lesser org. But in the end it is all about the budget, as long as Amazon's budget is significantly larger than the attackers they will probably manage to stay ahead. But if they ever get complacent or start economizing on security then the odds change very rapidly. Your very realistic stance is one of the reasons it hasn't happened yet, you are acutely aware you are in spite of all of your efforts still at risk.

Blast radius reduction by removing data you no longer need (and that includes the marketing department, who more often than not are the real culprit) is a good first step towards more realistic expectations for any org.
by soulofmischief | 2025-11-13 15:58:20+00:00
The entire SimpleMobileTools situation left such a bad taste in my mouth. No upfront communication, it had to be discovered in a GitHub issue thread after people started asking questions.

It was shady as fuck on Kaputa's part, especially given ZipoApps is an Israeli adware company, a.k.a. surveillance company, and given Israel's track record with things like using Pegasus against journalists/activists or blowing up civilian-owned beepers, this should automatically be a major security incident and at least treated as seriously as the TikTok debacle.

Kaputa should be extremely ashamed of himself and outted from the industry. I and many others would have gladly paid a yearly subscription for continued updates of the suite instead of a one-time fee, but instead of openly discussing such a model with his userbase, he went for the dirtiest money he could find.
by 0xbadcafebee | 2025-11-13 15:58:47+00:00
> Here's how we managed to cut our costs by 90%

You could cut your MongoDB costs by 100% by not using it ;)

> without sacrificing performance or reliability.

You're using a single server in a single datacenter. MongoDB Atlas is deployed to VMs on 2-3 AZs. You don't have close to the same reliability. (I'm also curious why their M40 instance costs $1000, when the Pricing Calculator (https://www.mongodb.com/pricing) says M40 is $760/month? Was it the extra storage?)

> We're building Prosopo to be resilient to outages, such as the recent massive AWS outage, so we use many different cloud providers

This means you're going to have multiple outages, AND incur more cross-internet costs. How does going to Hetzner make you more resilient to outages? You have one server in one datacenter. Intelligent, robust design at one provider (like AWS) is way more resilient, and intra-zone transfer is cheaper than going out to the cloud ($0.02/GB vs $0.08/GB). You do not have a centralized or single point of failure design with AWS. They're not dummies; plenty of their services are operated independently per region. But they do expect you to use their infrastructure intelligently to avoid creating a single point of failure. (For example, during the AWS outage, my company was in us-east-1, and we never had any issues, because we didn't depend on calling AWS APIs to continue operating. Things already running continue to run.)

I get it; these "we cut bare costs by moving away from the cloud" posts are catnip for HN. But they usually don't make sense. There's only a few circumstances where you really have to transfer out a lot of traffic, or need very large storage, where cloud pricing is just too much of a premium. The whole point of using the cloud is to use it as a competitive advantage. Giving yourself an extra role (sysadmin) in addition to your day job (developer, data scientist, etc) and more maintenance tasks (installing, upgrading, patching, troubleshooting, getting on-call, etc) with lower reliability and fewer services, isn't an advantage.