MurphyA/hacker-news huggingface dataset:
by elric | 2025-11-24 19:35:03+00:00
Exiting France when they feel like the freedoms of their software and their contributors are in danger seems like a perfectly reasonable response.

GrapheneOS is an open source project. They hand out great software for free. They have no obligations to do this. And they certainly have no obligation to try to "negotiate" with obviously hostile governments. They have nothing to gain from this.

> You don't burn down the house to kill a rat.

I don't see how this analogy applies here. France is the house.
by MangoToupe | 2025-11-24 19:35:26+00:00
Ok, so why do people not violently rise up against the us government? They clearly have never represented our values, and they use the pretense of sovereignty to act as if their behavior reflects our interest.

> It is not nationalism to want a sovereign nation that you have influence over, that's democracy.

So what's our excuse? Do we not have a democracy, or are we simply a contemptible people?
by lawn | 2025-11-24 19:35:26+00:00
They've made two big changes that are surely the result of the recent drama:

* The companion app is now completely open source, ensuring that the community can continue supporting the watches if Core goes under.

* You can subscribe to multiple app stores while optionally paying for services, and Core will maintain their own store. This seems to placate Rebble so they can do their thing and provide their paid services.

Seems like very good steps forward overall.
by weinzierl | 2025-11-24 19:35:26+00:00
"Grant of Copyright License. Subject to the terms and conditions of this Agreement, You hereby grant to Core Devices and to recipients of software distributed by Core Devices a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Your Contributions and such derivative works."

A few years from now we will see the usual HN thread were contributors lachrymosely complain about how their precious work was stolen by a good-turned-evil organization.
by strcat | 2025-11-24 19:35:42+00:00
That doesn't offer a way to bypass disk encryption for data protected by the per-profile lock method. GrapheneOS cannot bypass the brute force protection implemented by the secure element. Google cannot bypass the brute force protection either because they designed the Titan M2 to require the Owner user successfully unlocks in order to update it. Weaver + insider attack protection for the secure element are among our hardware security requirements (see https://grapheneos.org/faq#future-devices for a list) which are being implemented by an OEM we're working with to provide a Pixel alternative. Weaver has a table of user authentication tokens mapped to random tokens used as part of the final key derivation. The authentication token is made with a hash of the initial key derived from scrypt, then the final key derivation in TrustZone combines both with hardware-bound key derivation to get the key derivation key. Weaver implements very aggressive time-based throttling. We have the original delays documented at https://grapheneos.org/faq#encryption but it ramps up faster now.

Aside from that, people can use a strong diceware passphrase on GrapheneOS due to us massively raising the character limit from 16 to 128. This is far more usable on GrapheneOS because people can combine it with fingerprint+PIN secondary unlock instead of fingerprint-only secondary unlock. 5 attempts are allowed for fingerprint unlock and the 2nd factor PIN being entered incorrectly counts towards that so even a random 4 digit one works well. That's convenient to use with the passphrase only having to be entered 48h after the last successful passphrase unlock and after reboot.

We also won't do it and cannot be forced to do it under Canadian laws. France's laws are going to be as relevant to us as North Korean laws once we've finished replaced our OVH servers in Beauharnois, Canada with a Canadian provider. France could currently force OVH to mess with our static website or mail server but we haven't done anything illegal so it would be outrageous and a diplomatic incident due to violating Canadian sovereignty during a time period when foreign server hosting companies being subject to foreign law is already in a recent news cycle. We're not waiting around for them to hijack our website though.
by IAmBroom | 2025-11-24 19:36:11+00:00
> I wonder if one or both of us have biased vision

The more common term you're searching for is "privilege", and yes, you both have it.

Do you hang a lot in professional entertainment circles? I'm not saying she's certainly correct, but if I were to wonder what problems a mid-20s female pop star faces, I'd buy her anecdata over a 50-ish man who posts on HN.

Why is it exactly that you feel the opposite way?
by angelgonzales | 2025-11-24 19:36:28+00:00
This isn’t very big news. Issues occur during bring-up often. Linde’s processes are possibly so power intensive that failing over to generator power is not possible. TSMC is right to put Linde on notice since Linde should have a PFMEA and control plan to eliminate any root causes for downtime. I suspect in the long term TSMC has plans to insource this if the issue persists. Scrap happens sometimes during manufacturing, if the writer only has journalism experience and no manufacturing experience then they may not have a conceptual understanding of acceptable first pass yield. After all, the TSMC logo features failing parts!
by majke | 2025-11-24 19:36:39+00:00
> Coordinator sees Node A has significantly fewer rows (logical count) than the cluster average. It flags Node A as "underutilized."

Ok, so you are dealing with a classic - you measure A, but what matters is B. For "load" balancing a decent metric is, well, response time (and jitter).

For data partitioning - I guess number of rows is not the right metric? Change it to number*avg_size or something?

If you can't measure the thing directly, then take a look at stuff like "PID controller". This can be approach as a typical controller loop problem, although in 99% doing PID for software systems is an overkill.
by amwehrli | 2025-11-24 19:37:08+00:00
Wearing my new white pebble right now and am very happy with how open source the comeback has been. Incredibly happy with it and if you want a geeky, simple watch I really can't recommend it enough. The battery life and always on screen alone (especially at this price point) is reason enough.

Cheers to Eric for bringing back pebble in the way that he has !
by nagisa | 2025-11-24 19:37:12+00:00
The title qualifies "Android TV" with a "Streaming Box" right after. Lots of service providers supply such a box to subscribers (similarly to how ISPs provide all-in-one firewall-router-modems.) Even then these are extremely cheaply made, underpowered and largely unmaintained internet connected devices. And indeed you can purchase one such box yourself (including with piracy features as described here,) but I'd be surprised if the vast majority of these devices aren't supplied by the service providers.
by SoftTalker | 2025-11-24 19:37:19+00:00
I've used it as a mail server, a web server, and a database (postgres) server. It's also my main desktop OS. Did/does fine, but I never really stressed it. I would certainly welcome a more capable filesystem option, as well as something like logical volumes, but I can't say that ufs has ever failed me.

You'll definitely want to have it on a UPS to avoid some potentially long and sometimes manual intervention on fscks after a power failure. And of course, backups for anything important.
by balamatom | 2025-11-24 19:37:44+00:00
Fuck yeah preach.

If someone claims to be "representing" me (whatever the fuck that means)...

...even more so if they are "representing" me alongside millions of others, i.e. in a very abstract sense (what do a million people have in common? everything and nothing)...

...and especially if the "representation" is concluded in "winning" a ritual bureaucratic gauntlet which gives you the right to send organized murderers after exactly the people whom you fail to "represent"...

...then it sure sounds like we all deserve instant access to a real-time sub-second, molecular-level feed of your entire present existence before it's anywhere near a fair bargain and not a totalizing coercive arrangement.

Granted, this sounds a little unfeasible from a technical or security perspective.

Although if the global media capacity was redirected to doing primarily this, instead of inventing ever fancier narratives to distract people from paying attention to the circumstances of their own lives, it just might be able to handle the full surveillance of a few thousand global volunteers: the real exemplary humans who set the real standards in real dialog with the entirety of sovereign society. Governance by inverse big brother. Sure gonna be cheaper than all the effort that goes into convincing every subsequent generation that "democracy" is what's going on...

Alternatively, that entire exercise can be sidestepped by Dunbar-compliant representation, i.e. let's introduce a pervasive social norm that dictates the following: (1) nobody has the right to represent more than their 100 closest people in the world (2) representation doesn't stack to form multi-tiered institutions - representatives only connect horizontally in a territory-spanning mesh. so if N * 100 people vibe with your idea you'll have to either split your personality N-wise (doesn't go very far with current theories of mind) or give N-1 people the right to their own interpretation of your idea to communicate with 100 others.

[to the tune of https://www.youtube.com/watch?v=Xk4QLlV-WLQ :]

I think they tried that about 100 years ago and it worked well enough for organized metasubversive parasites to core it and wear its husk for the better part of a century. Maybe if it was started less overtly in the first place it would've worked better. But cosplaying German Idealistm to your pet serfs cosplaying worker's council doesn't really leave space for a whole lot of subtlety. If you're interested in the workings of power this is commendable, there is much to learn from just the last 150years (which are relatively well documented). They're such a cause-and-effect pinball; but like and subscribing to any of those ideologies just lets the ghost of the ball drag you along. Kinda sad that they're one of the things the Net died into, no?
by Telaneo | 2025-11-24 19:37:51+00:00
Might be an American in denial.

The 'meaningful' part of my original comment is carrying a lot of weight there. Most people are literate in the literal sense of that word, but I went to class with people who have not read a written work longer than five pages sine they went out of school, and I would not trust them to read an even vaguely complicated instruction manual without me explaining something to them. They are not literate in any meaningful sense of that word. They barely knew how to read when we took our final exams, but they did pass, since no-one wants to deal with the trouble of actually teaching them now. They're good people. The schools just failed them.

I could barely write when I got out school, in the sense that I couldn't read my own handwriting. I had to be taught anew when I learned a language that uses a different script, and that practice made my normal handwriting 10 times better.
by psd1 | 2025-11-24 19:37:57+00:00
> Obviously

That's funny. Because I lived in Peckham for a decade, and it's obvious to me that money is fucking fucking tight for a lot of working families.

It's obvious to me that zero-hour contracts have massively reduced labour power.

It's obvious to me that energy bills are crippling.

It's obvious to me that there has been galloping inflation over the last decade.

It's obvious to me that all food has become more expensive since Brexit, notably including fresh fruit and veg.

It's obvious to me that rent is increasing faster than wages, and that it's well over 50% of income for millions of households.

It's obvious to me that benefits can be speciously cut at any moment, by policy of "climate of hostility", leaving a recipient unable to cover bills for a month while they take time off work and chid care to bang their heads on the bureaucracy.

When I say "obvious", I mean it literally: these things are in plain sight. When you say it, what I understand you to mean is that you have strong preconceptions making your blind. Could you kindly not Marie Antoinette in my country, thanks ever so.
by lalitmaganti | 2025-11-24 19:38:27+00:00
> But it suggests that “human in the loop” is evolving from “human who fixes AI mistakes” to “human who directs AI work.” And that may be the biggest change since the release of ChatGPT.

I feel like I've been hearing this for at least 1.5 years at this point (since the launch of GPT 4/Claude 3). I certainly agree we've been heading in this direction but when will this become unambiguously true rather than a phrase people say?
by bcoates | 2025-11-24 19:38:36+00:00
Memory pressure (and a lot of other overload conditions) usually makes latency worse--does that show up in your system? Latency backpressure is a pretty conventional thing to do. You're going to want some way to close the loop back to your load balancer, if you're doing open-loop control (sending a "fair share" of traffic to each node and assuming it can handle it) issues like you describe will keep coming up.

This is a Hard Problem and you might be trying to get away with an unrealistically small amount of overprovisioning.
by wahern | 2025-11-24 19:38:43+00:00
That particular change improves throughput received locally. Though over the past few years there's been a ton of work on unlocking the network layer generally to support more parallelism.

For a firewall I guess the critical question is the degree of parallelism supported by OpenBSD's PF stack, especially as it relates to common features like connection statefulness, NAT, etc.
by em-bee | 2025-11-24 19:39:14+00:00
wikipedia says: The original meaning of the master's degree was thus that someone who had been admitted to the rank (degree) of master (i.e. teacher)

and

from Latin: magister, "teacher"

teaching requires mastery, not leadership, although the concepts are related because mastery is also good for leadership.

my armchair etymology suggests that master and mastery were closely related until it started to be applied to leadership as well.
by mmooss | 2025-11-24 19:39:23+00:00
This is the second time people responded to a post about GrapheneOS strategy with an argument about obligations. It's hard to even explain how vastly different those issues are. I didn't say anything about GrapheneOS's obligations; I talked about strategy and tactics to serve their goals.

If you do want to talk about obligations - yes, we all have obligations to our communities, societies, etc., whether we like it or not, whether we deny it or not. GrapheneOS has obligations to the open source community, to freedom, to their users and developers, etc. Defining those obligations is very difficult and I won't try, but if none of us have those obligations then who does? There's nobody else coming to the rescue, there is no authority that will take care of it for you (like parents caring for irresponsible children) - it's just you and me.
by HugoDias | 2025-11-24 19:40:30+00:00
TIL! I'll finally give Claude Code a try. I've been using Cursor since it launched and never tried anything else. The terminal UI didn't appeal to me, but knowing it has better performance, I'll check it out.

Cursor has been a terrible experience lately, regardless of the model. Sometimes for the same task, I need to try with Sonnet 4.5, ChatGPT 5.1 Codex, Gemini Pro 3... and most times, none managed to do the work, and I end up doing it myself.

At least I’m coding more again, lol
by cyrusradfar | 2025-11-24 19:40:56+00:00
I'm curious if others are finding that there's a comfort in staying within the Claude ecosystem because when it makes a mistake, we get used to spotting the pattern. I'm finding that when I try new models, their "stupid" moments are more surprising and infuriating.

Given this tech is new, the experience of how we relate to their mistakes is something I think a bit about.

Am I alone here, are others finding themselves more forgiving of "their preferred" model provider?
by lazide | 2025-11-24 19:40:59+00:00
Both of their parents certainly had that view, as does the wider society.

If you think that is very toxic, that is the tip of the iceberg.

To really put icing on the cake, they do it because they have plenty of examples of how badly people screw up their lives if someone isn’t doing that for them.

looks around at the opioid crisis in the west right now. Not that we would have anything like that going on.

There is no perfect, just different trade offs. And everyone usually cringes at the trade offs everyone else makes.
by strcat | 2025-11-24 19:41:03+00:00
They can't bypass disk encryption that way:

https://news.ycombinator.com/item?id=46038241

It does appear to be what they want from us, but it's not possible to bypass the Weaver disk encryption throttling via compromised OS updates or even secure element updates. It's fully not possible to bypass the security of a strong passphrase, which we encourage via optional 2-factor authentication support for fingerprint+PIN as the main way people unlock to make using a passphrase as the primary lock method after booting or 48h timeout much more convenient.
by rigrassm | 2025-11-24 19:42:28+00:00
> So people can't log into their bank website for a few hours, banks used to only be open for like 4 hours a day and somehow we all survived.

1. I believe it's payment processing systems not functioning properly that causes real problems for people and not simply bank websites being down. Especially given...

2. Banks being closed so much back when cash/checks were actually widely used wasn't an issue because you could just pop over to an ATM or whip out a checkbook. In today's system, every single purchase you make requires communication between the merchant, your bank, and any number of middlemen via the internet.

Yeah, cash is still used today but I've been noticing even things like school sports events have stopped taking cash all together and simply post a QR code to buy from your phone.

That is unless the school has crap cell reception (with no public Wi-Fi either!), Cloudflare shits the bed, Visa thinks you're buying porn, you locked your debit card and now can't unlock it cuz the website is down, or any one of the million things that break all the time. Replace school sports event with literally every single things that requires a financial transaction and it's easy to see how even a short outage can lead to actual harm being realized.
by dwaite | 2025-11-24 19:42:28+00:00
More of a person with IETF participation experience than as a cryptographer (I enjoy watching numbers dance but am not a choreographer):

This ( https://datatracker.ietf.org/doc/draft-ietf-tls-mlkem/ ) is a document describing how to use the ML-KEM algorithm with TLS 1.3 in an interoperable manner.

It does not preclude other post-quantum algorithms from being described for use with TLS 1.3. It also does not preclude hybrid approaches from being used with TLS 1.3.

It is however a document scoped so it cannot be expanded to include either of those things. Work to define interoperable use of other algorithms, including hybrid algorithms, would be in other documents.

There is no MTI (mandatory-to-implement) once these are documented from the IETF directly, but there could be market and regulatory pressures.

My suspicion is that this is bleed-out from a larger (and uglier) fight in the sister organization, the IRTF. There, the crypto forum research group (CFRG) has been having discussions on KEMs which have gotten significantly more heated.

A person with concern that there may be weaknesses in a post quantum technique may want a hybrid option to provide additional security. They may then be concerned that standardization of non-hybrid options would discourage hybrid usage, where hybrid is not yet standardized and would likely be standardized later (or not at all).

The pressure now with post quantum is to create key negotiation algorithms are not vulnerable to theoretical post quantum computer attack. This is because of the risk of potentially valuable encrypted traffic being logged now in the hopes that it could later be targeted by a post-quantum computer.

Non-negotiated encrypted (e.g. just using a static AES key) is already safe, and signature algorithms can be updated much closer to viable attacks to protect transactional data.
by insane_dreamer | 2025-11-24 19:42:31+00:00
Possibly it was, though I don't think Elon Musk is an ideologue in the Project2025 sense. Rather, he saw an opportunity to "solve government" and bought an election to do so, and then it didn't turn out the way things he wanted (turns out "solving government" is not a technical problem to be fixed by bringing in a bunch of Monster-fueled trigger-happy coders).

If it was his goal, it doesn't make much sense as to why -- it doesn't advance Elon's other stated goals in any way.
by Bender | 2025-11-24 19:42:54+00:00
Not my repo. This is modeled after the decrypting scene in the movie Sneakers. [1a][1b] Seems appropriate to link given the interest in Cool Retro Term. [2]

[1a] - https://www.youtube.com/watch?v=F5bAa6gFvLs [video][3 mins]

[1b] - https://www.youtube.com/watch?v=coDtzN6bXAM [video][3 mins]

[2] - https://news.ycombinator.com/item?id=46036895
by GenerWork | 2025-11-24 19:43:48+00:00
I wonder what this means for UX designers like myself who would love to take a screen from Figma and turn it into code with just a single call to the MCP. I've found that Gemini 3 in Figma Make works very well at one-shotting a page when it actually works (there's a lot of issues with it actually working, sadly), so hopefully Opus 4.5 is even better.
by F3nd0 | 2025-11-24 19:43:51+00:00
In context of the parent comment, 'only 20% improvement' is not super exciting, 'compared to the pain of dealing with yet another new image format'.

You raise a good point, though; WebP certainly did (and continues to do) well in some areas, but at the cost of lacking in others. Moreover, when considering a format for adoption, one should compare it with other candidates for adoption, too. And years before WebP gained widespread support in browsers, it had competition from other interesting formats like FLIF, which addressed some of its flaws, and I have to wonder how it compares to the even older JPEG 2000.
by tialaramex | 2025-11-24 19:43:59+00:00
> This means SRW locks on Windows, and futex-based locks on Linux, some BSDs, and Wasm.

Note that the SRW Locks are gone, except if you're on a very old Windows. So today the Rust built-in std mutex for your platform is almost certainly basically a futex though if it is on Windows it is not called a futex and from some angles is better - the same core ideas of the futex apply, we only ask the OS to do any work when we're contended, there is no OS limited resource (other than memory) and our uncontended operations are as fast as they could ever be.

SRW Locks were problematic because they're bulkier than a futex (though mostly when contended) and they have a subtle bug and for a long time it was unclear when Microsoft would get around to fixing that which isn't a huge plus sign for an important intrinsic used in all the high performance software on a $$$ commercial OS...

Mara's work (which you linked) is probably more work, and more important, but it's not actually the most recent large reworking of Rust's Mutex implementation.
by tyleo | 2025-11-24 19:44:12+00:00
NYTimes had a podcast today about how the autism category—which used to mean something closer to nonverbal or mentally disabled—had broadened and includes a lot more people now but with symptoms that aren’t at the same severity.

I feel like that’s true for a lot of these categories. I feel like severity of illness is really important when talking about mental disorders since the spectrum is so wide.