MurphyA/hacker-news huggingface dataset:
by nandomrumber | 2025-11-13 10:16:44+00:00
Last year Australians reported losing AU$20 million to phishing attacks, and AU$318 million to scams of all types.

It stands to reason that financial service industry peak bodies are in conversation with governments and digital service providers, including data providers, to try to better protect users.

There are obvious conflicting goals, and the banks / governments can’t really appear to be doing nothing.

And technical users are probably most certainly lacking a representative at the table, and are the group that has the least at stake. Whacko fringe software-freedom extremists, they probably call us.
by 72deluxe | 2025-11-13 10:16:48+00:00
I am baffled by this. I wrote a cross-platform GUI for an audio signal processor in wxWidgets that rendered all of its own widgets (own Draw calls, for faders, graphic EQ, compressors, drag/drop linking of nodes for a layout, knobs, meters/scopes) and incorporated Horde3D as a 3D rendering of the arena. It ran on macOS and Windows. Another chap handled the network control code that included joining multicast groups to discover the devices, and the device itself had a series of DSPs on it with an ARM processor for drawing on the LCD and handling the network stack and interfacing between the DSP and inputs from the network. That's 2 people.

So you're saying that it is impossible for a large company to somehow use native toolkits to draw text bubbles and emojis?? Video and audio is another matter, but MSN Messenger managed 75% of this decades ago, natively.
by imtringued | 2025-11-13 10:17:55+00:00
>If you understand that Amazon is a marketplace and you take 10 seconds to read who you're buying from, it's not a problem.

The thing you're looking for is a single line of text, often in gray color, saying "Amazon" and it's usually below the "Dispatches from Amazon" "Amazon".

Unlike Ebay, Amazon puts zero effort into making sure you know who you are buying from. If you are a first time buyer, you will not look for this one line that tells you, your risk of a scam is closer to 100% than 0%.
by vitorgrs | 2025-11-13 10:18:11+00:00
It's a ram hog if you stay the tab open for a while, with ton of messages. So from time to time I need to close the tab and open again.

Huge perf issues because of this.

Also had some serious bugs for a few week. Had to let WhatsApp Web wait for completely sync for 15 minutes~ or else it just stop responding and crashes everything.
by close04 | 2025-11-13 10:18:23+00:00
> “Not having drm” is also a “for now” thing

What do you mean? My GOG offline installers should work fine with or without internet or GOG services for as long as the binaries can be executed. I can pass them on to my grandkids, if they'll ever be interested. You can own games, music, videos. You can do what you want with them, sell them, give them to family or friends. Any non-dystopian interpretation of DRM means you get to keep what you own. Changes don't apply to already owned things. When "renting" changes can apply retroactively to everything.

> everything can be appended with “for now”

Only if you're looking to be unreasonable and make any argument irrelevant. But we're trying to have a constructive conversation not shoot down everything with generic, nihilistic arguments.

You wan to look at history but so selectively that it only supports your argument. Few companies stayed faithful to the customer without fault especially when the visionary leader and owner retired, or they hit hard times. The norm is for them to pull a bait and switch as soon as the profits looked too good to pass. When Gabe is out it could go either way, slowly or all at once.
by p00dles | 2025-11-13 10:19:02+00:00
Interesting that GLP-1s might have different effects on cancer _incidence_ vs. cancer _survival_.

A different study "GLP-1 Receptor Agonists and the Risk of Thyroid Cancer" was published in the Diabates Care journal in February 2023*

The conclusion of the 2023 study: "we found increased risk of all thyroid cancer and medullary thyroid cancer with use of GLP-1 RA, in particular after 1–3 years of treatment."

I wonder what the mechanistic hypothesis could be for GLP-1s increasing thyroid cancer _incidence_ (the probability of thyroid cancer occurring in patients taking GLP-1s) but increasing colon cancer _survival_ (the probability of surviving in patients taking GLP-1s who have colon cancer).

Of course there are numerous important differences across the studies (cancer type, France vs. USA data, etc.), I'm just curious about a why this might be the case.

*https://diabetesjournals.org/care/article-abstract/46/2/384/...
by YeGoblynQueenne | 2025-11-13 10:19:12+00:00
Rather, in the sense that during a Resolution-refutation proof, every time a new Resolution step is taken, the number of possible subsequent Resolution steps either gets smaller or stays the same (i.e. "decreases monotonically"). That's how we know for sure that if the proof is decidable there comes a point at which no more Resolution steps are left, and either the empty clause is all that remains, or some non-empty clause remains that cannot be reduced further by Resolution.

So basically Resolution gets rid of more and more irrelevant ...stuff as it goes. That's what I mean that it's "the polar opposite of brute force". Because it's actually pretty smart and it avoids doing the dumb thing of having to process all the things all the time before it can reach a conclusion.

Note that this is the case for Resolution, in the general sense, not just SLD-Resolution, so it does not depend on any particular search strategy.

I believe SLD-Resolution specifically (which is the kind of Resolution used in Prolog) goes much faster, first because it's "[L]inear" (i.e. in any Resolution step one clause must be one of the resolvents of the last step) and second because it's restricted to [D]efinite clauses and, as a result, there is only one resolvent at each new step and it's a single Horn goal so the search (of the SLD-Tree) branches in constant time.

Refs:

J. Alan Robinson, "A computer-oriented logic based on the Resolution principle" [1965 paper that introduced Resolution]

https://dl.acm.org/doi/10.1145/321250.321253

Robert Kowalski, "Predicate Logic as a Programming Language"

https://www.researchgate.net/publication/221330242_Predicate... [1974 paper that introduced SLD-Resolution]
by liampulles | 2025-11-13 10:19:15+00:00
I think ultimately agents are a tool. They are a very powerful tool, but they require expertise to use effectively.

It is encumbant on us as devs to use this tool and understand it.

The invention of the chainsaw did not eliminate the lumberjack as a profession. Lumberjacks learned how to become more productive with this dangerous new tool.
Most useful tips for founders that have to make first sales for their SaaS
by cbenjumea | 2025-11-13 10:19:27+00:00
I'm building an EdTech SaaS in Spain (vocational guidance for high school students) and need to get my first 3-5 paid customers.

I've got: - Working product - Some interest from a municipality - No existing customers/case studies

What actually worked for you to close those critical first sales?

Especially interested in: - How did you find the right first customers? - Free pilot vs. paid from day 1? - What convinced them to say yes? - How long from first contact to signed agreement?

Any tactical advice appreciated.

Best, Christian
by bloak | 2025-11-13 10:19:36+00:00
I don't know the history of it but I noticed that the currency of the Netherlands, before they switched to the euro, consistently used quarters:

Coins: 0.05, 0.10, 0.25, 1, 2.5, 5 Bank notes: 10, 25, 50, 100, 250

OK, there seems to be a gap there, but no coin or bank note is worth 2 * 10^X.

https://en.wikipedia.org/wiki/Dutch_guilder

Is there another currency that consistently prefers 2.5 * 10^X to 2 * 10^X?
by croemer | 2025-11-13 10:19:36+00:00
Actual title is "Android developer verification: Early access starts now as we continue to build with your feedback"

Two key announcements:

> we are building a new advanced flow that allows experienced users to accept the risks of installing software that isn't verified.

> We are using your input to shape a dedicated account type for students and hobbyists. This will allow you to distribute your creations to a limited number of devices without going through the full verification requirements.
by vlovich123 | 2025-11-13 10:20:02+00:00
I think your threat model is incomplete. You’re far more likely to have your card cloned and pin stolen through a fake terminal. I’ve actually had that happen to me vs 0 times have I had fraudulent transactions due to a stolen card.

Tap/dip payment is non cloneable even by a fake terminal. Outside the US tap+pin/dip+pin is even common but banks for some reason really are averse to requiring Americans to add a pin to credit cards.
by fingerlocks | 2025-11-13 10:20:07+00:00
Huh? JSON? Did you insert executable preamble bytes and chmod the file to execute or something? Where is this file? Can you post a link?

My work issued MacBook is incapable of running unsigned binaries enforced by the MDM kext, and I do all sorts of development all day long. Occasionally I have to resign a precompiled dylib if it was compiled on a coworkers machines, but that’s it. I have never seen anything like you’re describing.
by vintagedave | 2025-11-13 10:20:41+00:00
> a seasoned UX researcher like Don Norman

I get a real sense from some UX designers that following what he says is uncool. The vibe I get is one of how some people don't want to follow older people, with that 'we will do what we think best' sort of attitude. As thought UX is based on fashion not on concrete principles.
by maratc | 2025-11-13 10:20:42+00:00
> Try faking a digital ID.

Since most of that "digital ID" manifestations are just pixels on a screen, these are not a problem to fake pixel-perfect.

I did some limited travel during the COVID era, including areas that did not want to recognise my country's digital vaccination certificate. I presented them with a pixel-perfect picture of their own country's digital vaccination certificate. It's easy to copy from a screen of a friend, and it's not complicated to create your own Apple Wallet pass that looks like the one you want.
by theothertimcook | 2025-11-13 10:21:05+00:00
These are not all iconic voices, people definitely but what about:

Bootsy Collins, Snoop Dogg, Gilbert Gottfried , Arnie, Christopher Walken, Matt Berry....

Imagine the cast of Futurama voice acting the Bhagavad-Gita, or Vincent price reading twilight, this is the cutting edge shit the world needs.
by mdasen | 2025-11-13 10:21:59+00:00
I think few people are using the Win32 APIs directly and Microsoft has been shifting their stuff a bunch.

WPF (Windows Presentation Foundation ) had been the recommendation a while back, but then Microsoft started pushing UWP (Universal Windows Platform). Both of those have been succeeded by WinUI 3. UWP has been deprecated. WPF is alive, but more in a maintenance mode while WinUI 3 takes over the future. Oh, and WinForms were popular, but now not.

There's definitely been a lot of shifting and I think that's caused a lot of annoyance in the developer community - especially as Microsoft ships JS/WebView2 based apps instead of dogfooding their own stuff. If you hang out in the dotnet subreddit enough, you'll definitely see Windows devs annoyed at Microsoft's mercurial attitude toward their desktop frameworks and seeming lack of direction/interest - as their big new things are JS/WebView2.
by wtcactus | 2025-11-13 10:22:02+00:00
> "If I wasn't a US citizen, and my goal wasn't to gain official, above-board citizenship in an EU-member nation by way of doing work as a programmer, system administrator, or other such similar job, then I imagine I would have an easier time getting in, yes. For example, if my place of residence was in a low-cost-of-living country and my intent was to take whatever odd jobs I could get and use the excess to establish a nice nest egg back home, I imagine I'd have a much easier -if far more precarious- time."

Interesting, it's almost like you are telling us you have it better there in the USA. Hypocrisy at its best...
by Aachen | 2025-11-13 10:22:16+00:00
The others answered the question, but I wanted to add that this is "new English" to me as well (also non native though). I first saw it in chats with mostly teenagers in ~2021, where I've also learned "let's go" isn't about going anywhere at all (it means the same as w)

This is the first sign we're getting old :) new language features feel new. The language features I picked up in school, that my parents remarked upon, were simply normal to me, not new at all. I notice it pretty strongly nowadays with my grandma, where I keep picking up new terms in Dutch (mainly loan words) but she isn't exposed to them and so I struggle to find what words she knows. Not just new/updated concepts like VR, gender-neutral pronouns, or a new word for messages that are specifically in an online chat, but also old concepts like bias. It's always been there but I'd have no idea what she'd use to describe that concept
by sunaookami | 2025-11-13 10:22:53+00:00
This is a classic example of a fake apology: "We regret that this incident has caused worry for our partners and people" they are not really "sorry" that data was stolen but only "regret" that their partners are worried. No word on how they will prevent this in the future and how it even happened. Instead it gets downplayed ("legacy third-party","less than 25% were affected" (which is a huge number), no word on what data exactly).
by likium | 2025-11-13 10:23:27+00:00
Some PM: users are locked in to our ecosystem; they can't load other apps after ours! /s

But for real, the average number of apps people downloading get fewer year over year. When the most popular/essential apps take up more RAM, this effect will only exacerbate. RAM prices have also doubled over the last 3 months and I expect this to hold true for a couple more years.
by rf15 | 2025-11-13 10:23:59+00:00
It's 3, surely; Even if the companies crash, the people leading them won't - they will have extracted an absurd amount of cash, and when the crash comes they're like "oh we paid ourselves millions for our good work, we couldn't possibly see the crash coming. It's nobodies fault! Anyway let's get our bankruptcy proceedings over already, the company doesn't have remotely as much worth left anyway"
by prodigycorp | 2025-11-13 10:24:20+00:00
If i was a customer id be pissed off, but this is as good as a response you can have to an incident like this.

- timely response

- initial disclosure by company and not third party

- actual expression of shame and remorse

- a decent explanation of target/scope

i could imagine being cyclical about the statement, but look at other companies who have gotten breached in the past. very few of them do well on all points
by imiric | 2025-11-13 10:24:27+00:00
Thank you for the candid reply, and I apologize for my hostile tone.

To be honest, I don't think there's anything you/they can do, other than heavily rebrand or shut the project down. I find the entire premise of a commercial product and company branding themselves in support of (or in opposition to) a political situation morally deplorable. It is taking advantage of a current conflict and people's political leanings for their own financial gain. It doesn't matter if the people behind it are directly involved in the conflict or not—it's a cheap marketing ploy.

It would be no different if the "Big Tech AI" companies they criticize promoted their products in support of Israel with Jewish-friendly branding. Biases are one thing, but basing your entire product on them is entirely different. It is tasteless regardless of which side does it.

This is the first I've heard of it, but your Tech for Palestine endeavour gives off similar vibes. I'm sure you mean well, but this is not the way to help people going through a difficult time.

But then again, I'm just a rando on the internet. Good luck.
by jagged-chisel | 2025-11-13 10:24:43+00:00
If they want fungible engineers, yes. They don’t want to pay extra for an expert in wxWidgets and Horde3D. They don’t want to wait while that expert’s replacement comes up to speed on Horde3D. They don’t even want to wait for any existing engineers to learn these two technologies.

They know web, they can manage web - web is “less risky.”
by rmhsilva | 2025-11-13 10:24:50+00:00
Flok Health | Engineering (multiple roles) | ONSITE Cambridge UK

Flok builds and runs explainable AI (not LLM-based) physiotherapy clinics. We currently operate in the UK healthcare system.

We’re a real clinical service, built on software solving hard problems across expert systems and real-time video streaming, providing treatment for (chronic) back pain, and soon, other common conditions. Flok is both a "clinic" and a consumer product company, so we can make our patients' experience as good as possible.

Recent article about us on the BBC: https://www.bbc.co.uk/news/articles/cy4y9xm1eejo

We also recently gained class 2a medical device certification for our technology: https://www.digitalhealth.net/2025/10/ai-powered-physiothera...

Our core languages: Python, Typescript, Rust.

Read more and apply at https://www.flok.health/careers or find me online and DM me!
by josephg | 2025-11-13 10:24:50+00:00
Yep. Chrome contains:

- HTML rendering - which is insanely complex to do efficiently for arbitrary web apps.

- Video conferencing software

- A graphics engine. Used for rendering web content, canvas2d, webgl, webgpu and video encoding & decoding for a bunch of formats. It also has a bunch of backends (eg CPU, Metal, Vulcan, etc)

- JS, and every feature ever added to JS.

- WASM compiler, optimizer & runtime

- Memory manager, process isolation per tab, and all the plumbing to make that work.

- The Inspector - which contains a debugger and most of an IDE for JS, WASM, CSS and HTML.

- So much interop. Like chromecast support, http1, http2, quic, websockets, webtransport, webrtc, javascript remote debugger protocol, support for lots of pre-unicode text formats, DoH, webdriver, and on and on.

- Extension support

- Gamepad drivers, web bluetooth, webserial, midi support

What am I missing? Probably lots of stuff. I have no idea how much each of these components contributes to browser bloat. But all up? Its a lot. Chrome is bigger than most complete operating systems from a decade or two ago. Browser vendors have to pick between fast, simple and fully featured. Chrome sacrifices simplicity every time.
by cambaceres | 2025-11-13 10:25:44+00:00
I'd love to but I can't be too specific due to the personal stuff I shared in the original comment.

It's a system that helps services companies within a certain industry to digitalize all their paperwork, report to the national goverment agencies etc. They do a lot of manual work which can be digitalized easily.

I found this opportunity by just randomly throwing out in a big community that I build software and is looking for ideas, and some guy answered that ended up being my business partner for 3 years now. We are not rich from it but earn like $2000 each a month after tax which is quite a lot for us since we live in a country where healthcare, schools, parental leave etc are covered by taxes. And we dont need to put more than a few hours a month on support. I have put in basically all my spare time for 2 years to get to this point though, the biggest reward is not the money but the process of sitting through the nights being completely in the zone and building this stuff knowing that it will be great :D
by jacquesm | 2025-11-13 10:25:51+00:00
Job well done! I tried reverse engineering the encryption on Yamaha's midi files. I thought it would be super complex but it turned out to be ridiculously easy. It's funny when you're preparing mentally for some long slog and turns out to be an hour at best. In case you're interested: they used a fixed block of 256 bytes that they xor'd the data with in a cyclic fashion.
by metalman | 2025-11-13 10:26:06+00:00
greenlands glaciers are many thousands of cubic kilometers/miles in volume, and the issue is that with a collapse of the gulf stream, the melting might stop, and Iceland and the rest at the "meeting"

https://www.arctictoday.com/iceland-sees-security-risk-exist...

are waking up too the quite real possibility of things getting to cold for there countrys to be habitable.

melting.

https://nsidc.org/sea-ice-today

and the current they are concerned with

https://www.ospo.noaa.gov/products/ocean/sst/contour/
by Aerbil313 | 2025-11-13 10:26:09+00:00
> A psychedelic medicine company Mindstate Design aims to precision engineer mental states in order to heal mental health problems such as depression. Their plan is to create combinations of chemicals that reliably produce the exact necessary healing states — without the “hit and miss” “heal or bad trip” randomness of individual psychedelics.

> And to discover these they use a LLM-based platform that ingests tens of thousands trip reports online and combines with receptor/chemical interaction data (including affinities).

That's wild.
by ControlStack | 2025-11-13 10:26:10+00:00
This isn’t just about glue — it’s about turning the ocean into a surveillance surface. Bio-inspired, heat-activated, biodegradable, and designed to stick to submarines, sharks, and sensors without a trace. DARPA doesn’t fund “marine conservation” tech. They fund invisible control. The real breakthrough? It works better in water than air. A quiet revolution in physical-layer warfare. https://archivethecontrolstack.substack.com/p/archive-007-da...
by saidchihabi | 2025-11-13 10:26:20+00:00
Haha, yes, that's intentional. I used to use Claude every day and love their design, so I replicated it. But what I don't love about Claude is it taking money from Zionist VC and collaborating with pretty much anybody who is willing to make them a buck. Again, our whole point here is not to say their design sucks—it's their political stance and company mission that sucks.
by jonathanstrange | 2025-11-13 10:27:04+00:00
That's by far not good enough. Google's reasoning is principally flawed.

First of all, there is principally no good reason why adult people should be patronized by Google or other companies and kept from installing the software they want to install. Limitation of numbers just means that I cannot publish my .apk and let users install it freely. However, anyone who is allowed to smoke, drink alcohol, or get a motorcycle, should also be allowed to install whatever application they want. It's a matter of basic individual freedom.

Second, the majority of reasonable users cannot be restricted from using their device as they wish just because a small minority falls for scams. A minority of people also drink themselves to death, die in motorcycle accidents, or smoke. There is nothing wrong with taking risks and taking responsibility for one's own life. We don't need for-profit corporations to hold our hands.

Third, if they believed their own arguments, then they'd make certain functions such as intercepting SMS messages and installing a custom keyboard subject to stricter requirements with potential developer verification and keep the OS open and free otherwise. This would be a piece of cake since the technical infrastructure is already there on Android. The fact that they don't clearly indicates they're hypocrites and want to control users and developers, make 3rd party app stores harder or impossible, control which apps they "allow" as part of anti-competitive behavior, and possibly extract some extra cash from developers in the future.

It's a pity how private computing is destroyed and that's the reason we all have to use inferior web apps until browsers are closed down in the same way in the name of security theater.
by Flamehaven | 2025-11-13 10:27:11+00:00
I released v1.1.0 today.

This update includes a path-traversal fix, FastAPI/Starlette security patches, request-ID tracing, rate limiting, LRU+TTL caching (<10ms hits), and a full set of Prometheus metrics. It’s noticeably more stable than the previous version.

The project is still lightweight and fully self-hostable, which remains a core focus. Thanks!