MurphyA/hacker-news huggingface dataset:
by benmccann | 2025-11-24 17:24:56+00:00
Hundreds of people had access to publish the Zapier SDK, so it's little surprise they were eventually compromised! (https://bsky.app/profile/benmccann.com/post/3m6fdecsbdk2u)

The e18e community are reducing dependencies in popular libraries and building tools to prevent and reduce the impact of such attacks. Join if you want to help out! https://e18e.dev/

Just this morning, after trying to make the case over the past year, we had a change landed to remove more than a dozen dependencies from typescript-eslint! https://bsky.app/profile/benmccann.com/post/3m6fcjax7ec2h
by boredhedgehog | 2025-11-24 17:25:01+00:00
The way I see it, S2 was pretty lazy. They took a system that was fairly polished already and tinkered with it without understanding how it would impact the whole, like how they made a level-up system that heavily incentivizes a degree of micromanagement the UI isn't built to support.

Or take the pig farm: Clear pros and cons in S1; in S2 it's just a bad bakery. Or the perpetually broken ship navigation, and no way to do naval invasions.
by Brian_K_White | 2025-11-24 17:26:05+00:00
Returning clothes that were worn once for an event is also widespread and common.

The problem is it's lying. It's abusing a grace to get something for nothing. Holding a room for you that you will never use is denying it to someone else who was not lying and actually does intend to complete the transaction.

So yeah, doing this doesn't explain the hotel committing their own cancellation fraud but it is exactly the cause of the hotels reaction to just not offer cancellations.

If someone wants to reserve all the options for themselves but not actually use them, that should cost something. They are getting something, and it's not free to produce, so it should cost something. Then ot wouldn't be an abuse or a minor fraud, just an honest transaction. There should be a "rent the dress" option. And what do you know, thete usually is. It's called the higher rate for the option to cancel.

But there is really no way to distinguish this kind of abuse from honest people who had plans change outside their control who you don't want to burn except by collecting and sharing data on everyone to maintain profiles and track history and behavior, and no one wants that right?
by potato3732842 | 2025-11-24 17:26:07+00:00
>Every time you earn money/spend money you are paying taxes.

>I guess busses run on fairy dust too?

Every vehicle on the roads is basically paying to be there via fuel tax (which in whole or large part is spent on the roads). Busses pass some of this cost on to their riders who's fare may be then subsidized in part or full.

I don't see why you're being so hysterical.
by helle253 | 2025-11-24 17:26:07+00:00
To be honest, I'm not sure it is a 'covert influence network'.. Or at least, that is a much more conspiratorial turn of phrase than I would use here.

It strikes me as wage arbitrage if anything, an opportunity for these engagement farmers to make very good money (relatively), an opportunity which was all-but-explicitly created by Elon Musk's payout system.

All else aside, its very funny that this is an example of a market-maker once again (un)intentionally destabilizing the social fabric they talk so much about.
by rurp | 2025-11-24 17:26:15+00:00
I used to feel that way up until about a year ago. At worst I would roll my eyes at the silliness and then move on, because this stuff rarely matters much one way or another.

But then the 2024 elections happened, along with a bunch of exit polls, voter interviews, and other data showing that a surprising (to me anyway) number of people hate this kind of virtue signalling to the point that it can sway their vote. It's very possible those swung votes have ushered in a host of harmful changes that I think do matter a great deal. So now I'm sick of this stuff, it's not only a waste of time it's actively harmful.
by chha | 2025-11-24 17:26:21+00:00
The belt packs typically do a lot more than to amplify ambient noise, they also handle RF, depending on the model decryption of the audio signal, EQ as well as other stuff. All while typically running on 2x1,5V AA batteries.

Audio gear isn't made to last long on batteries, it's made to be reliable for the hours a show typically lasts. I worked part-time as a sound tech (paid hobby) for 15+ years, and I never started a show without fresh batteries, regardless of what the indicators on the transmitters/receivers told me.
by kasabali | 2025-11-24 17:26:22+00:00
GNOME is by far the most funded Linux DE. If you think it's underfunded then other DEs are broke.

If nobody is assigned to GNOME bugs it's because developers were more interested in redesigning some app or rewriting some APIs than fixing bugs.

jwz explained it 25 years ago: https://www.jwz.org/doc/cadt.html
by jonathanlb | 2025-11-24 17:26:28+00:00
> Have you tried the non-over-the-ear cochlear devices?

No, I have not, but from what I've heard, the sound processing isn't as strong because with the BTE (Behind the ear) models, the microphone is unobstructed and can pick up sound coming from the front. With the all-in-one devices, the microphone sits slightly behind the head and has a horizon (and hair) obstructing the audio.

If I'm wrong and the sound processing is actually decent, I'll be willing to give it a shot provided my insurer decides to carry Med-El.
by michaelbuckbee | 2025-11-24 17:26:39+00:00
All I could think looking at the (amazing) dioramas was how much time they could save with something like the EufyMake Printer that could print out all the textures they're making by hand (or 3d printing).

Adam Savage review: https://www.youtube.com/watch?v=SD8r1UBwLL0
by jandrese | 2025-11-24 17:26:51+00:00
I find OpenSCAD to be decent, if somewhat tedious, when making mechanical parts but extremely limiting if you want to work with organic shapes. Even mechanical shapes that just avoid sharp edges require a fair bit of effort. One thing I do like about it is how it encourages users to parameterize their models just by the nature of the language. Pretty much everything I make in OpenSCAD has a list of named parameters at the top I can later tweak if I need to shrink or enlarge some aspect of it.
by venturecruelty | 2025-11-24 17:27:10+00:00
Because it is not a serious ecosystem run by serious people. Do you know what serious people do? They have package repositories with people called "maintainers", who are, crucially, trusted members of a community who don't write the software they package. "Oh but that's GATEKEEPING!", they screech. Yes, that's the entire point. Gatekeeping prevents shit like this from happening. There's a reason why this doesn't happen to Debian, but JavaScript developers get defensive and mean when you suggest that maybe the equivalent of a public S3 bucket isn't the best way to host a package repository.
by wahern | 2025-11-24 17:27:59+00:00
> Prior to that issue Rust was using something much worse, pthread_mutex_t

Presumably you're referring to this description, from the Github Issue:

> > On most platforms, these structures are currently wrappers around their pthread equivalent, such as pthread_mutex_t. These types are not movable, however, forcing us to wrap them in a Box, resulting in an allocation and indirection for our lock types. This also gets in the way of a const constructor for these types, which makes static locks more complicated than necessary.

pthread mutexes are const-constructible in a literal sense, just not in the sense Rust requires. In C you can initialize a pthread_mutex_t with the PTHREAD_MUTEX_INITIALIZER initializer list instead of pthread_mutex_init, and at least with glibc there's no subsequent allocation when using the lock. But Rust can't do in-place construction[1] (i.e. placement new in C++ parlance), which is why Rust needs to be able to "move" the mutex. Moving a mutex is otherwise non-sensical once the mutex is visible--it's the address of the mutex that the locking is built around.

The only thing you gain by not using pthread_mutex_t is a possible smaller lock--pthread_mutex_t has to contain additional members to support robust, recursive, and error checking mutexes, though altogether that's only 2 or 3 additional words because some are union'd. I guess you also gain the ability to implement locking, including condition variables, barriers, etc, however you want, though now you can't share those through FFI.

[1] At least not without unsafe and some extra work, which presumably is a non-starter for a library type where you want to keep it all transparent.
by saghm | 2025-11-24 17:28:09+00:00
Yeah, this pretty much summarizes my experience. In most situations, the actual information I need to share between different contexts is quite small, and using a channel ends up being pretty clean. There are still times I need an actual reference counted wrapper around a mutex, but they're the exception rather than the norm, and even then, there are often ways you can reduce the contention (e.g. if `T` is a type you can clone, and you only need a snapshot of the current state of the data rather than preventing changes while processing based on that snapshot, you can just clone it, drop the mutex guard, and then proceed without needing to worry about borrows).
by rvz | 2025-11-24 17:28:29+00:00
"Richest" means nothing in 2025, given the UK has a great track record of not understanding what they have and selling off their prized companies and assets overseas. This decline has only accelerated since then, beyond poverty.

It's gotten to the point where this Labour government is considering an IMF loan given the dire state of the countries finances.

I predict that the UK will become a third world country by the end of 2038 if they don't reverse this urgently.

The advancement of AI, the UK is again behind and "AGI" or "ASI" will make their decline 1000x even worse before at least 2030.
by thewebguyd | 2025-11-24 17:28:35+00:00
> It’s all so foreign and it feels like the vibe shift happened overnight.

The cultural zeitgeist around the internet and technology has changed, unfortunately. But it definitely didn't happen overnight. I've been witnessing it happen slowly over the past 8-10 years, with it accelerating rapidly only in the last 5.

I think it's a combination of special interest groups & nation states running propaganda campaigns, both with bots and real people, and a result of the internet "growing up." Once it became a global, high-stakes platform for finance and commerce, businesses took over, and businesses are historically risk averse. Freedom and openness is no longer a virtue but a liability (for them).
by mikkupikku | 2025-11-24 17:28:47+00:00
Do you really believe there are a million destitute starving wet and unclothed children wandering around outside in the UK? Obviously there is some gross exaggeration going on, like most of those million are "cold" because they have worn out hand-me-down jackets and maybe go without dinner sometimes, mostly because their parents are junky pieces of shit who can't be bothered to open a box of slop for the kid even though they're on government programs to pay for the food.
by jyoung8607 | 2025-11-24 17:29:06+00:00
> That’s a function of the website, not the browser.

That's hand-waving away quite a lot. The task changes from serving a copy of a file on disk, as every other image format in common use, to needing a transcoding pipeline more akin to sites like YouTube. Technically possible, but lots of extra complexity in return for what gain?
by pscanf | 2025-11-24 17:29:10+00:00
Adding my own to the list: https://github.com/superegodev/superego (Warning: still an alpha.)

Distinctive points:

- It exposes the "database metaphor": your data is organized in collections of documents, each collection having a well-defined schema.

- It's all local in an app (no server component to self-host).

- It has an AI assistant on top that you can use to explore / create / update.

- It allows you to create small personal apps (e.g., a custom dashboard).

- It allows you to sync data from external sources (Strava, Google Calendar, Google Contacts.)

Cons:

- The database metaphor is quite "technical". A "normal" user is not comfortable with the idea of creating their own collections, defining a schema, etc. In fact, right now I only have developers and techies as a target audience.

- It's not optimized for any one use case. So, for example, as a notes-keeper Notion is obviously much better.

- It's still in early stages (I'm working on it alone), so:

- There's no mobile app yet. - It doesn't yet support syncing between devices. - There are just 3 connectors to sync from external sources.
by whimsicalism | 2025-11-24 17:29:43+00:00
Essentially nobody in the US (except the very elderly with dementia) dies from malnutrition. This would make the malnutrition profile of the US very unusual relative to other developing countries with similar rates of malnutrition as we claim on self-id survey.

The reality is that, compared to other constraints (like housing), food is widely available in the US and even if you are really struggling you can generally get food.

Our surveys classify many families making >$100k as food insecure. [0][1]

0: https://cosm.aei.org/wp-content/uploads/2024/03/Economic-Cha... 1: https://cosm.aei.org/why-the-usda-is-justified-in-ending-the...
by Sanygeek | 2025-11-24 17:29:52+00:00
This is the exact feeling I had. My 2019 intel MacBook Pro has 12 cores, 32gb ram and a 1TB hard drive. Yet, most consumer web apps like Gmail, Outlook and Teams are excruciatingly slow.

What is surprising is that a few years ago, these apps weren’t so terrible on this exact hardware.

I’m convinced that there’s an enormous amount of bloat right at the application framework level.

I finally caved and bought a new M series Mac and the apps are much snappier. But this is simply because the hardware is wicked fast and not because the software got any better.

I really wish consumer apps cared less about user retention and focused more on user empowerment.
by Reubachi | 2025-11-24 17:30:13+00:00
I think it's simpler than that. IE; not a vanity thing for his ego or pettyness for the sake of being petty,

Entity owns an IP, Entity doesn't want another entity to own it for risk to the IP. (the other entity being a globally publicly owned historic aggregator of IPs for sake of short term profits)

DIsney is doing the same in reverse with the Muppets/Henson Properties. Don't do anything with it beyond semi-annual short projects to retain the IP.
by bluescrn | 2025-11-24 17:30:17+00:00
The UK government spends £1.3 trillion per year.

The total wealth owned by UK billionaires is estimated at a small fraction of that (£300b?). Even seizing all of it isn't going to solve anything long-term (but will create new long-term problems)

Billionaires are a symbol of unfairness, but eliminating them won't make a significant long-term difference to those at the bottom. Unless they're put out of work as all that wealth, mostly tied up in companies, is liquidated.
by n4r9 | 2025-11-24 17:30:24+00:00
The study's methods and definitions are described on page 10 of the full report, which can be downloaded PDF from their website: https://www.jrf.org.uk/deep-poverty-and-destitution/destitut...

It boils down to whether people can afford basic essentials like shelter, heating, lighting, and clothing. They do check their income levels. Maybe some people would lie about this, but I don't know why they would.
by zahllos | 2025-11-24 17:30:39+00:00
Indeed. Dual_EC was a NOBUS backdoor relying on the ECDLP. That's fair.

My point was more that it looked suspicious at the time (why use a trapdoor in a CSPRNG) and at least the possibility of "escrow" was known, as evidenced by the fact that Vanstone (one of the inventors of elliptic curve cryptography) patented said backdoor around 2006.

This suspiciousness simply doesn't apply to ML-KEM, if one ignores one very specific cryptographer.
Ask HN: Scheduling stateful nodes when MMAP makes memory accounting a lie
by leo_e | 2025-11-24 17:30:40+00:00
We’re hitting a classic distributed systems wall and I’m looking for war stories or "least worst" practices.

The Context: We maintain a distributed stateful engine (think search/analytics). The architecture is standard: a Control Plane (Coordinator) assigns data segments to Worker Nodes. The workload involves heavy use of mmap and lazy loading for large datasets.

The Incident: We had a cascading failure where the Coordinator got stuck in a loop, DDOS-ing a specific node.

The Signal: Coordinator sees Node A has significantly fewer rows (logical count) than the cluster average. It flags Node A as "underutilized."

The Action: Coordinator attempts to rebalance/load new segments onto Node A.

The Reality: Node A is actually sitting at 197GB RAM usage (near OOM). The data on it happens to be extremely wide (fat rows, huge blobs), so its logical row count is low, but physical footprint is massive.

The Loop: Node A rejects the load (or times out). The Coordinator ignores the backpressure, sees the low row count again, and retries immediately.

The Core Problem: We are trying to write a "God Equation" for our load balancer. We started with row_count, which failed. We looked at disk usage, but that doesn't correlate with RAM because of lazy loading.

Now we are staring at mmap. Because the OS manages the page cache, the application-level RSS is noisy and doesn't strictly reflect "required" memory vs "reclaimable" cache.

The Question: Attempting to enumerate every resource variable (CPU, IOPS, RSS, Disk, logical count) into a single scoring function feels like an NP-hard trap.

How do you handle placement in systems where memory usage is opaque/dynamic?

Dumb Coordinator, Smart Nodes: Should we just let the Coordinator blind-fire based on disk space, and rely 100% on the Node to return hard 429 Too Many Requests based on local pressure?

Cost Estimation: Do we try to build a synthetic "cost model" per segment (e.g., predicted memory footprint) and schedule based on credits, ignoring actual OS metrics?

Control Plane Decoupling: Separate storage balancing (disk) from query balancing (mem)?

Feels like we are reinventing the wheel. References to papers or similar architecture post-mortems appreciated.
by ViewTrick1002 | 2025-11-24 17:31:22+00:00
I love it when 45% having an simultaneous outage is acceptable for nuclear power but dealing with renewable variability is a dealbreaker.

The logical inconsistencies are amazing.

You do know that a 90% averaged capacity factor and simultaneous outages of 45% doesn’t have to be a disjoint set?

Yes. Way way easier, cheaper and faster using renewables and maybe all storage.

Or are you suggesting that we should stave off renewable implementation, continuing with the current emission, and wait until the 2040s for new built nuclear power to come online?
by dylan604 | 2025-11-24 17:31:30+00:00
we've gotten into adding verbosity levels in logging where each logged event comes with an assigned level that only makes it to the log if it matches the requested log level. there are times when a full verbose output is just too damn much for day-to-day debugging, but is helpful when debugging the one feature.

i used to think options like -vvv or -loglevel panic were just someone being funny, but they do work when necessary. -loglevel sane, -loglevel unsane, -loglevel insane would be my take but am aware that most people would roll their eyes so we're lame using ERROR, WARNING, INFO, VERBOSE
by moritzwarhier | 2025-11-24 17:31:31+00:00
It is exactly this.

Suno music is the modern equivalent of sample packs that are like Lego blocks, to allow people to quickly throw together cliches.

It can pass for OK music and good musicians sometimes use stuff like that, too.

But it's much closer to these soulless "London Authentic Jungle" loop sample packs or to "Dance eJay" than to a musical instrument.

I also feel it's not very similar to generative electronic music, which is about control and experimentation in a very different way (generating cliches with generative synths is hard, apart from some ambient drones or meditative arpeggios).

Suno and similar tools are designed to generate cliches from... text.

It doesn't matter that it incorporates AI and does stuff that was thought impossible a couple of years ago.

It's still a pastiche of cliches and not a musical instrument.

And the comic is nice!

Others mentioned sampling and synthesizers here, and I can't think of a comparison that I'd consider more misplaced.

Good sampling is really creative.

And bad sampling is the same as a bland, commercial cover version of a song. Many people don't bother to differentiate, but sampling and cover versions are very different things, and it's rare for both to appear together in one good song.
by mothballed | 2025-11-24 17:31:39+00:00
And also provide incentives for marriage, which is associated with higher fertility rates.

Recently after dropping no-fault divorce, more onerous child support laws, "red flag" and other temporary protection orders that can be obtained on little more than a mere one-sided claim (David Letterman famously had one against him for "sending coded [abusive] messages through the television"), alimony that relies on old timey presumptions a divorced partner can't work, etc, the calculus is looking ever more desperate.

Nowadays marriage still has most the downsides, but the upsides are looking less and less. And even more, the contract can totally change out from under you, you are basically agreeing to a vague contract that society can arbitrarily change at any moment and all the meanwhile scream "you agreed to this" no matter that it was unilaterally changed by a 3rd party to the contract and the playout of the actual terms of the contract hidden within places like family court where it's literally illegal to release the proceedings that allow one to make a rational decision upon ("think of the privacy of the children").
by steppi | 2025-11-24 17:31:48+00:00
Just a couple of corrections.

Let's take the Fundamental Theorem of Calculus as an example[0]:

f'(x) = lim_{h->0} {f(x + h) - f(x)} / {h}

This isn't the Fundamental Theorem of Calculus, it's the usual definition of the derivative of a function of a single real variable. The Fundamental Theorem of Calculus establishes the inverse relationship between differentiation and integration [0].

Unless you're Ramanujan, every mathematician has spent hours banging their head against a literal or metaphorical wall (or both!)

Ramanujan was no stranger to banging his head against the wall. My impression from Kanigel's The Man Who Knew Infinity is that his work ethic and mathematical fortitude were as astonishing as his creativity. For much of his career, he couldn't afford paper in quantity and did his hard work on stone slate, only recording the results. This could make it seem like his results were a product of pure inspiration because he left no trace of the furious activity and struggle that was involved.

From The Man Who Knew Infinity:

When he thought hard, his face scrunched up, his eyes narrowed into a squint. When he figured something out, he sometimes seemed to talk to himself, smile, shake his head with pleasure. When he made a mistake, too impatient to lay down his slate pencil, he twisted his forearm toward his body in a single fluid motion and used his elbow, now aimed at the slate, as an eraser. Ramanujan's was no cool, steady Intelligence, solemnly applied to the problem at hand; he was all energy, animation, force.

[0] https://en.wikipedia.org/wiki/Fundamental_theorem_of_calculu...