MurphyA/hacker-news huggingface dataset:
by lpcvoid | 2025-11-18 12:10:32+00:00
I don't, since my stuff is reachable only within the company network/VPN. If I needed to though, I would consult the BSI list of official DDOS mitigation services [0] and evaluate each one before deciding. I would not auto-pick Cloudflare.

[0] (German) https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Cyber-Si...
Show HN: Kassouf-Btc-Options – Thorp-Kassouf Option Models on Bitcoin
by dcvr | 2025-11-18 12:11:49+00:00
Inspired by Thorp and Kassouf (and G. Polya’s plausible reasoning), I’m experimenting with applying their approach to European BTC options on Deribit.

Currently focused on daily call contracts (the most liquid), I plan to build six models (calls/puts × daily/weekly/monthly expirations). The goal is to explore arbitrage strategies, mainly short straddles, by spotting overpricing in these derivatives.

Why Thorp-Kassouf? Practical, linear regression-based, and transferable to BTC options. Classical Black-Scholes assumptions may not hold for crypto, but this approach is simple yet powerful for prototyping.

Data: Historical BTC data from 2017-01-01, 5-min granularity, stored in MongoDB; processed with Python libraries (NumPy, Pandas, SciPy, Statsmodels).

Disclaimer: Not a Python expert; code evolved from a proof-of-concept. Can be optimized/refactored, focus is on modeling and insights for short-straddle strategies.

Next steps: Explore ways to “learn” when a contract fits the model.

GitHub: [https://github.com/dradicchi/kassouf-btc-options](https://github.com/dradicchi/kassouf-btc-options)

Kassouf paper: [An Econometric Model for Option Price with Implications for Investors' Expectations and Audacity](https://www.jstor.org/stable/1910443)

Feedback on modeling, reproducibility, or ideas for backtesting would be appreciated.
by esskay | 2025-11-18 12:12:35+00:00
When its back up, do yourself a favour and rent a $5/mo vps in another country from a provider like OVH or Hetzner and stick your status page on that.

"Yes but what if they go down" - it doesnt matter, having it hosted by someone who can be down for the same reason as your main product/service is a recipe for disaster.
by ArtificeAccount | 2025-11-18 12:12:59+00:00
I have had friends fail to communicate in astounding ways. Once, four of us were planning to go somewhere. A friend suggested somewhere else, I and my other friend agreed, but the fourth friend was not presnet. I told my first friend to tell the one person who was not present about the change in plans. He asks why... I tell him, well, the other guy isn't going to know we changed plans because he isn't here.

Basic communication goes a long way.
by zukzuk | 2025-11-18 12:14:23+00:00
Toronto, Canada is hands down the raccoon capital of the world. Something like 100k raccoons live in the city.

I can’t get my head around how such big animals manage to live all around us in such densely populated place. I suppose it helps that they are cartoonishly adorable.

But they are increasingly getting really, really big. It’s just a matter of time before the chonker living in my neighbour’s shed bullies me out of my house.
by lpcvoid | 2025-11-18 12:14:58+00:00
I do. But I put both into the "cloud offering off-prem for very much money" shoebox. I setup a CDN once using VPS from different hosting providers for under 100 USD a month, which I would vastly prefer over trusting anything cloud.

And yes, I know that there's sites that need the scale of an operation like Cloudflare or AWS. But 99.9(...)% of pages don't, and people should start realizing that.
by palata | 2025-11-18 12:15:06+00:00
There is a security question I have been having regarding /e/OS (and I guess Lineage as well). For at least some devices, /e/OS (and again, probably Lineage) use the Google test keys instead of their own signing keys.

Doesn't that mean that I could write an app, sign it with those keys (they are public, since they are for testing), and then have it behave like a "system" app on those devices? Isn't that how a system app proves to the system that it is, in fact, a system app?

I can understand the "I am not paranoid and I don't really mind about an evil maid attack, so I don't need to relock my bootloader". But isn't it risky to use the Google test keys to sign the whole system?

Not trying to criticise Lineage and /e/OS here: I'm hoping that someone knowledgeable about this will be able to help me understand the actual risks.
by shevy-java | 2025-11-18 12:15:06+00:00
> A software engineer may be slicing and dicing nanoseconds

People typically live only once, so I want to make the best use out of my time. Thus I would prefer to write (prototype) in ruby or python, before considering moving to a faster language (but often it is not worth it; at home, if a java executable takes 0.2 seconds to delete 1000 files and the ruby script takes 2.3 seconds, I really don't care, even more so as I may be multitasking and having tons of tabs open in KDE konsole anyway, but for a company doing business, speed may matter much more).

It is a great skill to be able to maximize for speed. Ideally I'd love to have that in the same language. I haven't found one that really manages to bridge the "scripting" world with the compiled world. Every time someone tries it, the language is just awful in its design. I am beginning to think it is just not possible.
by kragen | 2025-11-18 12:15:27+00:00
Latency and throughput are not interchangeable, and it is entirely normal to do millions of subroutine calls per HTTP request, so even if latency is your only concern, a subroutine call operation with a latency ten thousand dollars faster than the HTTP request might still be too slow.

Latency is not interchangeable with throughput because, if your single 8-core server needs to serve 200 HTTP requests per second, you need to spend less than 40 core-milliseconds per request on average, no matter whether the HTTP clients are 1ms away or 1000ms away.
by directevolve | 2025-11-18 12:15:42+00:00
Charity navigator quantifies overhead. EA tried to quantify impact. To understand the difference, consider two hypothetical charities. Charity A has $1 million/year in administrative costs, while charity B’s costs are only $500,00/year.

Based on this, charity navigator says charity A is lower-ranked than charity B.

Now imagine that charity A and B can each absorb up to $1 billion in additional funding to work on their respective missions. Charity A saves one life for every $1,000 it gets, while B saves one life for every $10,000 it gets.

Charity navigator wouldn’t even attempt to consider this difference in its evals. EA does.

These evals get complex, and the EA organizations focused on charity evals like this have sophisticated methods for trying to do this well.
by kakacik | 2025-11-18 12:16:26+00:00
Its only an issue because people don't want to compromise on location, aka they want the most convenient place possible (because they 'deserve it'?), but half of other folks living and working in the area want exactly the same. And it doesn't really matter if we talk about SV or some other big enough city anywhere else, they all share the same situation.

And commute is unacceptable, for some even 20 mins according to same topic being discussed also here ad nausea.

Btw having a house is a luxury basically anywhere in the world, not sure why the baseline expectation is that its some UN-enforced basic human right. I for example lived, live and will live in apartments only which cost less than 50% of similarly-sized house and derive life satisfaction other things than gardening and constant upkeep of property. Really not getting this want-luxury-as-baseline mindset.
by belter | 2025-11-18 12:16:27+00:00
Its actually way more than monthly... It seems nobody does outages like Cloudflare...

https://www.cloudflarestatus.com/history?page=8

https://www.cloudflarestatus.com/history?page=7

https://www.cloudflarestatus.com/history?page=6

https://www.cloudflarestatus.com/history?page=5

https://www.cloudflarestatus.com/history?page=4

https://www.cloudflarestatus.com/history?page=3

https://www.cloudflarestatus.com/history?page=2

https://www.cloudflarestatus.com/history?page=1
Cloudflare is down and causing outages at X, OpenAI
by paulwilsonn | 2025-11-18 12:16:32+00:00
Another multi-platform outage strikes, as Cloudflare suffers issues and triggers downtime on popular websites like X (formerly Twitter), as confirmed by the official Cloudflare Status page.

It started around 6:00 AM ET, when Cloudflare's support portal provider started "experiencing issues", and saw the degradation of Elon Musk's social platform, alongside popular video games like League of Legends reporting issues via downdetector.
by mettamage | 2025-11-18 12:17:00+00:00
Probably high functioning autism. They go through a process like this, and is in part why they are high functioning in the first place because they solve their problems with their intellect and train whatever else is necessary.

Though, research shows that autistic people among themselves do have empathy. So it’s not as if they don’t but it’s because they tend to communicate differently. It’s called the double empathy problem, if I recall correctly.
by mosselman | 2025-11-18 12:17:39+00:00
Cloudflare provides some nice services that have nothing to do with cloud or not. You can self-host private tunnels, application firewalls, traffic filtering, etc, or you can focus on building your application and managing your servers.

I am a self-host enthousiast. So I use Hetzner, Kamal and other tools for self-managing our servers, but we still have Cloudflare in front of them because we didn't want to handle the parts I mentioned (yet, we might sometime).

Calling it a mistake is a very narrow look at it. Just because it goes down every now and then, it isn't a mistake. Going for cloud or not has its trade-offs and I agree that paying 200 dollars a month for a 1GB Heroku Redis instance is complete madness when you can get a 4GB VPS on Hetzner for 3,8 a month. Then again, some people are willing to make that trade-off for not having to manage the servers.

Cloud servers have taught me so much about working with servers because they are so easy and cheap to spin up, experiment with and then get rid of again. If I had had to buy racks and host them each time I wanted to try something, I would've never done it.
by galangalalgol | 2025-11-18 12:18:03+00:00
The best practices I adopt for rust avoid the use of mutex whenever possible precisely because of how easy a deadlock is. It turns out it is always possible. There are entire languages the disallow any mutable state, much less shared mutable state. The question becomes how much performance are you willing to sacrifice to avoid the mutex. By starting with no shared mutable state and adding it when something is too slow, you end up with very few mutexes.
by us0r | 2025-11-18 12:18:21+00:00
I thought the same until I started looking:

Name Server: NS-225.AWSDNS-28.COM Name Server: NS-1411.AWSDNS-48.ORG Name Server: NS-1914.AWSDNS-47.CO.UK Name Server: NS-556.AWSDNS-05.NET

At least for DNS. Data center appears to be Lightedge.
Show HN: SecuriScan – Open-source Chrome extension for passive security analysis
by ashish_sharda | 2025-11-18 12:18:23+00:00
Built this to scratch my own itch. Wanted something lighter than Burp Suite for quick security checks during development.

It analyzes: - Security headers (CSP, HSTS, X-Frame-Options) - Cookie security flags - Vulnerable JS libraries (jQuery, Angular, Lodash with CVE info) - Mixed content - Basic XSS patterns - Sensitive data exposure in source

Everything runs locally in the browser. No data sent anywhere. Exports HTML reports.

Chrome Web Store: https://chromewebstore.google.com/detail/securiscan-web-secu...

Also launched on Product Hunt today if you want to check it out there. https://www.producthunt.com/posts/securiscan/maker-invite?co...

Feedback welcome. Planning to add more vulnerability signatures in v1.1.
by never_inline | 2025-11-18 12:18:45+00:00
I was surprised to see the mention of ritual drink of Vedic people.

It turns out to refer to a drug in fiction which is named after the Vedic ritual drink.

Original Vedic "soma" is indeed more like a drink of inspiration and ecstasy, with myths similar to the norse "Mead of poetry".

"somasya tA mada indraS cakAra" - "In the exhilaration of soma, Indra has done these great deeds" - is a rig-vedic refrain.
by magicalhippo | 2025-11-18 12:19:26+00:00
> different threads are more likely to write to mutex bytes/words in different cache lines

If you got small objects and sequential allocation, that's not a given in my experience.

Like in my example, the ints could be allocated one per thread to indicate some per thread status, and the main UI thread wants to read them every now and then hence they're protected by a mutex.

If they're allocated sequentially, the mutexes end up sharing cache lines and hence lead to effective contention, even though there's almost no "actual" contention.

Yes yes, for a single int you might want to use an atomic variable but this is just for demonstration purposes. I've seen this play out in real code several times, where instead of ints it was a couple of pointers say.

I don't know Rust though, so just curious.
by gxnxcxcx | 2025-11-18 12:19:33+00:00
There's a minority of people wealthy enough to grease everything with money or really powerful connections. In a conversation involving people doing their own shopping and eating at places where you are presumed to take your tray to the bin I wasn't even thinking about them.

Those who lack that surplus wealth are "leaving money on the table", so to speak, by not caring about others. That's dumb.

And her pedigree or whatever gave her those aristocratic ways didn't save her from mild ostracism at the end of the story, so... That's social capital she left on the table. That's also kinda dumb even if she had enough money/power to enable god mode. It's even dumber if she didn't have it.
by TylerE | 2025-11-18 12:20:16+00:00
Perhaps the best example I can think of is the whole situation

InstallShield is....massive crapware and actually generated 16 bit installers way way after anyone was using 16bit PCs. Nobody notices until, I think it was W8 or W10 dropped support for running 16bit executables (something about dropping the subsystem that supported them.
by ArcHound | 2025-11-18 12:23:01+00:00
Seems like so, these submissions from them look related, but not quite it:

- [Sorry I broke the server](https://news.ycombinator.com/item?id=9052128)

- [New attempt at mobile markup](https://news.ycombinator.com/item?id=10489499)

- [Clickable domains and QoL](https://news.ycombinator.com/item?id=10223645)

- [New features and a moderator](https://news.ycombinator.com/item?id=12073675)

- [Thanks to thehodge and littlewarden, this site is up today](https://news.ycombinator.com/item?id=28472350)

Maybe one day. Seeing all of these big providers stumbling, an article about HN staying on top of everything would surely resonate.
by recursivedoubts | 2025-11-18 12:23:22+00:00
Money is a public good, its value is a social construct and its supply should be managed in the interests of society at large. The current private debt-money system is the core political and economic problem facing us.

The social credit movement (completely different than the Chinese concept) is interesting in this regard:

https://en.wikipedia.org/wiki/Social_credit
by rincebrain | 2025-11-18 12:23:35+00:00
Eventually, almost any organization distorts from its nominal goal to self-perpetuation.

As the numbers get larger, it becomes easier and easier to suggest that the organization's continued existence is still a net positive as you waste more and more on the organization bloating.

It's also surprisingly hard to avoid - consider how the ACA required that 85% of premiums go to care, and how that meant that the incentives became for the prices to become enormous.
by darkwater | 2025-11-18 12:24:12+00:00
> Is Cloudflare your domain registrar? In that case, yes I think you should think about being less dependent on them.

And why I should overthink my architecture now? If I had to manage redundant systems and keep track of circular dependencies I just could keep managing my infra the old way, no?

I'm being sarcastic here, obviously, but really one of the selling point for cloud back in the day it was "you don't have to care about those details". You just need to care about other details, now.
by gloosx | 2025-11-18 12:24:18+00:00
CoPilot for BIOS

Integrated CoPilot chip, mandatory to install Windows

CoPilot for mouse movements. Just ask where you want to move your mouse next, agent does the job.

CoPilot which will entertain you while windows updates are installing

CoPilot-assistant to install Chrome browser

CoPilot for windows registry

Master-CoPilot to control all other copilots

CoPilot which will play games and watch movies instead of you, then give you 5-minute summaries to save your time
by theshrike79 | 2025-11-18 12:24:23+00:00
Codex is good when you have a clear spec and an isolated feature.

Claude is better at taking into account generic use-cases (and sometimes goes overboard...)

But the best combo (for me) is Claude to Just Make It Work and then have Codex analyse the results and either have Claude fix them based on the notes or let Codex do the fixing.
by patates | 2025-11-18 12:24:23+00:00
It says it's been trained from scratch. I wonder if it will have the same undescribable magic that makes me spend an hour every day with 2.5. I really love the results I can get with 2.5 pro. Google eventually limiting aistudio will be a sad day.

Also I really hoped for a 2M+ context. I'm living on the context edge even with 1M.
by fusl | 2025-11-18 12:24:25+00:00
Unfortunately Anubis doesn't help where my pipe to the internet isn't fat enough to just eat up all the bandwidth that the attacker has available. Renting tens of terabits of capacity isn't cheap and DDoS attacks nowadays are in the scale of that. BunnyCDN's DDoS protection is unfortunately too basic to filter out anything that's ever so slightly more sophisticated. Cloudflare's flexibility in terms of custom rulesets and their global pre-trained rulesets (based on attacks they've seen in the past) is imo just unbeatable at this time.
by DustinKlent | 2025-11-18 12:24:55+00:00
Alignment has a lot more to it than simply which answers an AI provides. In the future when agents are commonplace and when AI can do things in the physical world, alignment will be especially important because it will dictate how the AI chooses to accomplish the goals humans set out for it. Will it choose to accomplish them in a way that the human requestor does not want and did not anticipate, or will it choose to accomplish them in a way any human with common sense would choose?

Moreover, in the not so distant future if there is an AI that is acting totally autonomous and independent of human requests for long periods of time, weeks or months or longer, and it's doing good important things like medical research or environmental restoration, alignment will be incredibly important to ensure every single independent decision it makes is done in the way its designers would have intended.
by xslvrxslwt | 2025-11-18 12:25:59+00:00
I was arrested by Interpol in 2018 because of warrants issued by the NCA, DOJ, FBI, J-CAT, and several other agencies, all due to my involvement in running a DDoS-for-hire website. Honestly, anyone can bypass Cloudflare, and anyone that want to take your website down - will take it down. It's just that luckily for all of us most of the DDoS-4-hire websites are down nowadays but there are still many botnets out there that will get past basically any protection and you can get access to them for basically $5.
by ralferoo | 2025-11-18 12:26:06+00:00
From Google (AI slop at top of search results): "Chunnel" is not a real movie but a fictional film from the TV show Seinfeld. It is depicted as a disaster movie about an explosion in the Channel Tunnel...

Weird hearing that name now though. Around that time, everybody referred to it as the "Chunnel", but I don't think I've heard it as anything but the "Channel Tunnel" since maybe 2000. I suspect even that usage is now limited to only taking cars on the train from Folkestone. Every time I've travelled on it as a regular passenger from London, it's just been referred to as the Eurostar without any mention of the tunnel at all.
by buildfocus | 2025-11-18 12:26:24+00:00
My impression is that Grok is very rarely used in practice outside of a niche of die-hard users, partly because of very different tuning to other models, and partly the related public reputation around it.

https://firstpagesage.com/reports/top-generative-ai-chatbots... suggests 0.6% of chat use cases, well below the other big names, and I suspect those stats for chat are higher than other scenarios like business usage. Given all that, I can see how Gemini might not be focused on competing with them.
by jmmcd | 2025-11-18 12:26:54+00:00
About ARC 2:

I would want to hear more detail about prompts, frameworks, thinking time, etc., but they don't matter too much. The main caveat would be that this is probably on the public test set, so could be in pretraining, and there could even be some ARC-focussed post-training - I think we don't know yet and might never know.

But for any reasonable setup, if no egregious cheating, that is an amazing score on ARC 2.
by gpderetta | 2025-11-18 12:27:00+00:00
In C++ (with a bit of help from boost).

bool transfer(boost::synchronized<Account>& sync_from, boost::synchronized<Account>& sync_to, int amount) { auto [from, to] = synchronize(sync_from, sync_to); if (from->withdraw(amount)) { to->deposit(amount) return true; } else { return false } }

Hopefully synchronized will make it into the standard library at some point, in the meantime it is not terribly hard to write it yourself if you do not want a boost dependency.
by xslvrxslwt | 2025-11-18 12:27:50+00:00
Because of 2018 operation "Power OFF" but it's still pretty easy to take anything down.

Hetzner has the WEAKEST DDoS protection out of ANYTHING out there - Arbor sucks.

Send me your website url and I'll keep it down for DAYS and whenever you cry to hetzner I'll just fry it again, it's that easy and that's why they're the cheapest - because everyone ran away from them back then.
by gpderetta | 2025-11-18 12:28:34+00:00
CPS can trivially deadlock for all meaningful definitions of deadlock.

Would you consider this a mutex?

async_mutex mux; co_await mux.lock(); /* critical section */ co_await mux.unlock();

What about: my_mutex mux;

{ std::lock_guard _{mux}; /* critical section */ }

where the code runs in a user space fiber.

Would you consider boost synchronized a mutex?

Don't confuse the semantics with the implementation details (yes async/await leaks implementation details).
by sylware | 2025-11-18 12:28:43+00:00
LOL, it is the other way around: do you have sources that selling software is not legally entitled to technical support?

And proton/wine is unreliable in time (I know) as compat can be broken at the first unfortunable patch proton side or game side, hence compat can be broken way after the 'refund period'. This is 101 playing a game nowdays: those patches DO happen.

To be that much dishonnest and hypocrit: are you an AI?
by whstl | 2025-11-18 12:29:04+00:00
But the problem is not admiring good looks if they're natural, or expecting someone to be truthful, or anything of the sort that might or might not theoretically happen.

The problem is clearly with the bullying. And the assumptions around character. And basically using "changing yourself" as a proxy for hallucinating all sorts of completely unrelated bad characteristics. And the rationalizing around it.

It's the same for behavior: people are fine with the behavior of "naturally charming" people but as soon as someone mentions "learning how to do it" people immediately jump to conclusions and call it manipulative.