MurphyA/hacker-news huggingface dataset:
by tpmoney | 2025-11-12 01:02:58+00:00
But if no bug report is filed, then only google gets the ability to "be responsible for their own security", everyone else either has to independently discover and then patch the bug themselves, or wait until upstream discovers the bug.

In no reasonable reading of the situation can I see how anything Google has done here has made things worse:

1) Before hand, the bug existed, but was either known by no one, or known only by people exploiting it. The maintainers weren't actively looking at or for this particular bug and so it may have continue to go undiscovered for another 20 years.

2) Then Google was the only one that knew about it (modulo exploiters) and were the only people that could take any steps to protect themselves. The maintainers still don't know so everyone else would remain unprotected until they discover it independently.

3) Now everyone knows about the issue, and are now informed to take whatever actions they deem appropriate to protect themselves. The maintainers know and can choose (or not) to patch the issue, remove the codec or any number of other steps including deciding it's too low priority in their list of todos and advising concerned people to disable/compile it out if they are worried.

#3 is objectively the better situation for everyone except people who would exploit the issue. Would it be even better if Google made a patch and submitted that too? Sure it would. But that doesn't make what they have done worthless or harmful. And more than that, there's nothing that says they can't or won't do that. Submitting a bug report and submitting a fix don't need to happen at the same time.

It's hard enough convincing corporations to spend any resources at all on contributing to upstream. Dragging them through the mud for not submitting patches in addition to any bug reports they file is in my estimation less likely to get you more patches, and more likely to just get you less resources spent on looking for bugs in the first place.
by tkgally | 2025-11-12 01:03:06+00:00
I hate to be the one to say this, but this article reads as though it was written by an LLM. The shallowness is one reason. Another is the lack of any individual voice that would suggest a human author.

And there are the unsupported citations and references:

The sentence “The World Economic Forum’s 2023 Future of Jobs report estimates 83 million jobs may be displaced globally, disproportionately affecting low- and mid-skill workers” is followed by a citation to a book published in 1989.

Footnote 7 follows a paragraph about Nietzsche’s philosophy. That footnote leads to a 2016 paper titled “The ethics of algorithms: Mapping the debate” [1], which makes no reference to Nietzsche, nihilism, or the will to power.

Footnote 2 follows the sentence “Ironically, as people grow more reliant on AI-driven systems in everyday life, many report heightened feelings of loneliness, alienation, and disconnection.” It links to the WEF’s “Future of Jobs Report 2023” [2]. While I haven’t read that full report, the words “loneliness,” “alienation,” and “disconnection” yield no hits in a search of the report PDF.

[1] https://journals.sagepub.com/doi/10.1177/2053951716679679

[2] https://www.weforum.org/publications/the-future-of-jobs-repo...
by bpiroman | 2025-11-12 01:03:10+00:00
I recently launched this satellite imagery tool.

https://satellitemine.com/

I work as a civil engineer in the mining industry and it can be troublesome to download satellite imagery for a particular date and cloud index. Yes, Google Earth Engine and QGIS plugins exist, but they are slow and confusing to jump back into after a period of time. SatelliteMine is simple to use and any images of your area of interest is saved to your account and can be downloaded as a geotiff.

Currently free to use with a cloud storage capped at 512MB per account. Paid plans for greater storage requirements will be provided if the demand is there. Any feedback is welcomed :)
by medell | 2025-11-12 01:03:17+00:00
I just visited China and seeing it as 3rd lowest on the list makes sense. Everything is done by QR Code with AliPay or WeChat. Even the old man selling bamboo cane for less than a dollar takes it.

Some restaurants do not take cash, period - it adds a staff member. A few places like a massage parlour I even tried to offer cash instead, and they didn’t care which leads me to believe the fees are very low. Of course, it is China so there’s no privacy.
by xg15 | 2025-11-12 01:03:22+00:00
It's also an interesting question, why, in traditional rich desktop applications, I can't say I have ever missed the ability to select and copy text from the UI chrome - whereas on the web I'd definitly miss it and in badly designed mobile apps, I often do.

I think some part of UI design degraded with the web, where there used to be a clearer distinction between "user data" and "app chrome" areas than there is today.

I'd also like if we could get back to selections of more complex data types at some point and not just treat everything as text. UI toolkits have all kinds of lists and treeviews to model selectable entities, whereas in the browser, there just a single huge wall of text for everything.
by shagie | 2025-11-12 01:03:39+00:00
It is about advertising one's (possible) shared culture. For me, my laptop is part of my professional culture and thus I try to keep it as crisp and professional in appearance as one's resume since its a bit... difficult to laptop lids in certain cases.

For my personal shared culture, that is the sort of thing that can be exposed (or hidden) on a case by case basis. My choice of t-shirt where I can button up or down depending on the context says a lot more about me than the lid of my laptop. Granted, it' one message at a time - but there are things that I've had on t-shirts that I made sure to button up before going into the office and seeing the boss (old school, and I still have it - those were durable shirts - https://www.flickr.com/photos/strihs/8536766235/ ). On the other hand, I wouldn't put https://www.spreadshirt.com/shop/design/let+me+work+on+your+... on my laptop no matter how much I agree with it.

I would be amendable to putting a square of #22b7f2 on my laptop, and that opens up an entire discussion if recognized (I'm not quite ambitious or passionate enough to color the entire laptop that color).

In another comment I linked https://imgur.com/a/jWhyBmI as my laptop lid.
by hombre_fatal | 2025-11-12 01:03:54+00:00
RFKjr and the 2019 Samoa measles outbreak comes to mind where he went to Samoa to boost vaccine hesitancy after some kids died due to a mistakenly adulterated vaccination.

https://en.wikipedia.org/wiki/2019_Samoa_measles_outbreak

This kind of messaging is why Samoa had 30% vaccination rate while nearby islands had 99% vaccination when measles infected the island later that same year.

I don’t see how you can dismiss RFKjr’s messaging. Are you claiming he has no impact on public opinion?
by BoorishBears | 2025-11-12 01:04:04+00:00
Blazor is incredibly productive.

I wouldn't use it for consumer apps because it requires a Websocket connection to maintain state and probably doesn't scale very cheaply... but for business applications or personal tools it's actually kind of insane how much functionality you get out of the box (at least by the standards of statically typed languages).

To replicate this example in Typescript, I'd probably still be installing packages in the time it took to write the 20 lines of code it contains: https://learn.microsoft.com/en-us/aspnet/core/blazor/compone...
by mhitza | 2025-11-12 01:04:17+00:00
From some brief research.

The EU seem to have less strict sanctions against Iran, specifically for specific entities, people, and services. Telecommunication is one of those services.

In theory you could get hired in an EU company that doesn't deal with an US company (for example an EU-only payment provider. If such a thing exists. (One can only hope GNU Taler will be it some day)). Though the compliance requirements might not be easy and cost you a bit to get some layers involved and fill out paperwork together with someone you'd convenie as your partner.

I'd pursue this avenue of research further if I'd where you, or another country wherein the US sanctions aren't a real factor. Best of all would be if you'd be able to emigrate and become a resident of a non sanctioned country.
by status_quo69 | 2025-11-12 01:04:23+00:00
This is such a conflicting comment for me because I agree with so much but also have so many quibbles. That said I think that the other comments cover most things, I'll just comment on b: I don't think this is a problem that a language should solve or needs to solve, since there is a new flavor of the week of network protocols every few years. off the top of my head

- REST (mentioned, but what kind of REST? Rails style REST? Just plain http resource endpoints? - GraphQL (mentioned) - gRPC - SOAP - JSON-RPC - Thrift - CGI (ok not really in the same category as the above) - Some weird adhoc thing someone created at 3am for "efficiency"

I'm actually fine with most languages deferring to their respective communities, maybe building on core libs like https://www.erlang.org/docs/17/apps/inets/http_client to handle the transport layer.

As an aside, funnily enough you can get JVM <-> BEAM interop via https://www.erlang.org/doc/apps/jinterface/jinterface_users_... I don't necessarily recommend it but it's possible
by gregw2 | 2025-11-12 01:05:01+00:00
I agree with your comment that getting feedback is different to making the final decision.

But I'm not sure the real problem fits solely in your two buckets.

I've been in recent situations where there is a less-technical person charged with making the "final decision" and a lot of other senior people in the room who don't all /have/ to agree. But the degree of "why not do it this way?" questioning+discussion will grow with the number of meeting participants (and/or worse, the # of meetings before a decision is made if it is not settled in one meeting and then new stakeholders arrive and have their own thrashing out to do.) And even with one final decider, you can end up a bit still with "Design By Committee" decisions when the final decider goes along with the group consensus or doesn't have a strong point of view on an issue.
by BobaFloutist | 2025-11-12 01:05:41+00:00
> you quite literally cannot conceive of in your current mental state.

I'm open to considering the possibility that I can't conceive of it in my current mental state if you're open to considering the possibility that I can.

The dogmatic way some people speak about the life changing potential of psychedelics is reminiscent of how other people speak of religion. It sounds compelling, but the more detail they go into, the more I grow suspicious that maybe this person just wasn't particularly imaginative in the first place.

I'm not saying that's the case! But it's difficult for me when people are asking me to be open minded (about the possibility that there are insights and truths that I'm literally incapable of accessing without psychoactive substances, which most people agree aren't capable of creating anything that isn't, to a greater or lesser extent, already present in your brain) but use language that categorically deny possibilities outside of their experience (there must be such insights, and no human is capable of arriving there without psychoactive aid, because they personally didn't).

I don't know, I know it's a bit childish for me to feel this way, but it also doesn't feel unreasonable.
by ajross | 2025-11-12 01:06:00+00:00
> Valve is the only company I know of [upstreaming fixes for open source software]

Sorry, that's ridiculous. Basically every major free software dependency of every major platform or application is maintained by people on the payroll of one or another tech giant (edit: or an entity like LF or Linaro funded by the giants, or in a smaller handful of cases a foundation like the FSF with reasonably deep industry funding). Some are better than others, sure. Most should probably be doing more. FFMpeg in particular is a project that hasn't had a lot of love from platform vendors (most of whom really don't care about software codecs or legacy formats anymore), and that's surely a sore point.

But to pretend that SteamOS is the only project working with upstreams is just laughable.
by scuff3d | 2025-11-12 01:06:39+00:00
I'm just trying to figure out what the last paragraph of your previous comment means. So asked bluntly, what did you mean?

Edit: Ah, I see what you mean. My bad. I thought you meant "normalizing" the trans issue in general, not the request. I see why you got annoyed.

What's your objection to the request?
by echend | 2025-11-12 01:06:53+00:00
UPDATE: I'm pulling back from seeking Western partnerships.

Multiple commenters have explained that even the "contractor + equity" structure violates sanctions and is illegal. I genuinely didn't understand this - I thought it was a gray area. It's not.

I'm not asking anyone to break the law or take legal risk. That was naive on my part.

Based on helpful suggestions in this thread, I'm now focusing on: - India (no sanctions, large tech industry) - UAE/Dubai (open to Iranian nationals) - Turkey (regional tech hub) - Singapore (need to research legality)

If you're from one of these countries and interested in partnership, feel free to reach out: EchenDeligani@gmail.com

To everyone who took the time to explain sanctions compliance: thank you. This thread educated me on things I clearly didn't understand.

The technology still works. The market still exists. I just need to find it in the right geography.
by robot-wrangler | 2025-11-12 01:07:32+00:00
I think the modern unix'y thing to do here is always send all messages intended for the user to stderr (regardless of whether they are actually errors), and always respond with machine-friendly JSON on stdout by default. AFAIK there's no downsides to this.. you can still have color on stderr, you can still draw sixel pictures or whatever. Meanwhile pipes and redirection still work as expected.

No need for content/feature negotiations.. machine readable just defaults to JSON unless there's a --format flag for something else. And if you add that on the generation-side of the pipe, you just need to remember to put it on the consumer-side.
by Anon4Now | 2025-11-12 01:07:42+00:00
During Covid, my business slowed way down, and I took a part time job at a gas station convenience store (because selling cigarettes made be essential). The store was in a suburb of Portland with an average household income in the top 10 of Oregon, but there were also a lot of trade workers, undocumented immigrants, and generally a good mix of income levels.

Some relevant observations:

- Lower income customers used cash much more than higher income.

- Men used cash way more than women, with the exception of retirement-age women buying their smokes / wine / beer.

- Undocumented workers almost always used cash. Most were paid in $100 bills on Fridays, so they were probably paid under the table.

- Phone tap-to-pay was almost exclusively iPhone. In fact, I don't think I ever saw an Android user pay by phone tap.

- A surprising number of people didn't realized they could just tap to pay instead of running the chip.

- If the till ran out of pennies for change, no one gave a shit.
by amluto | 2025-11-12 01:08:08+00:00
I would even go one step back in the process. Make it possible to rapidly build factories in the US. And don’t idle that capacity — consider how quickly China brings factories online and how rapidly they could scale weapons production by shifting production of car factories to weapons factories.

This is, of course, a hard problem to solve, but solving it would be quite valuable for the US even without any wars.
by hollowturtle | 2025-11-12 01:09:13+00:00
Except native date pickers still sucks on desktop, i really dislike the chrome version on macos and can't say nice things to the firefox one. Also browsers behave differently when trying to validate the date entered in the input, if you listen for on change event, chrome fires it as soon as a valid year is entered except if want to type 2025 starting with the 2 would result in 0002 on the input and... that's a valid year, what you do validate or not? wait for blur event to check the final entered date?
by tim333 | 2025-11-12 01:09:45+00:00
>Windows is easily replaced for the truly average person who spends their entire computer use inside a Chromium browser nowadays

Maybe I'm out of touch but I don't know anyone for whom that's true. They all use either games or Office or Photoshop type stuff.

I mean you can replace it but all the options - mac, linux or chromebooks have friction.
by tpmoney | 2025-11-12 01:09:58+00:00
What's "strictly legal or required" of Google here is absolutely nothing. They didn't have to do any auditing or bug hunting. They certainly didn't have to validate or create a proper bug report, and there's no requirement whatsoever that they tell anyone about it at all. They could have found the bug, found it was being actively exploited, made their own internal patch and sat quietly by while other people remained vulnerable. All of that is well within what is "strictly legal or required".

Google did more than what is "strictly legal or required", and what they did was submit a good and valid bug report. But for some reason we're mad because they didn't do even more. Why? The world is objectively a better place for having this bug report, at least now people know there's something to address.
by credit_guy | 2025-11-12 01:10:14+00:00
That is not a guarantee. We look at WW2 and think that what happened then will happen at any other time. But in WW1 the US had to borrow rifles from France. WW1 was a total disgrace as far as the US military industrial complex was concerned. I know I'm committing a bit of a sin, today marks the 107th anniversary of the end of WW1 and that end was possible because of the US involvement. But, uncharacteristically for the US, it was the manpower, not the arsenal of the US that decided the end of that war. And, yes, even at that time the US was the largest economy of the world.
by Litost | 2025-11-12 01:10:18+00:00
Do you mean the Andromeda Strain by Michael Crichton [1] (also a movie) and I seem to remember it being a good watch when I last watched though that might be a good 15 years ago. The idea was novel enough it's stuck with me since and I do often joke with people about it, especially given from what I gather that certain types of funghi can now digest certain types of plastic [2].

[1] https://en.wikipedia.org/wiki/The_Andromeda_Strain

[2] https://www.shroomer.com/mycoremediation-plastic-eating-mush...
by echend | 2025-11-12 01:10:27+00:00
I understand the skepticism completely.

How about this: I'll do a live Zoom session where I: - Deploy the entire stack locally - Walk through the code - Show the admin panel, monitoring, databases - Answer any technical questions - Prove this is real

Schedule: [pick a time in next 24 hours] Zoom link: [create one]

Anyone who's skeptical is welcome to join and grill me.

If it's a scam, this should expose it quickly.
by sholladay | 2025-11-12 01:11:15+00:00
This sounds like a really good excuse to not bear any responsibility for anything other than what you want to work on. PR reviews will mean nothing; they will all be rubber stamps or style nits because no one else will understand the code other than the owner. Your bus factor will be crazy low.

Collaboration sucks because of the way it is done, not because it has to. Pointless meetings for decision making that should be async. Brainstorming over Slack when that's what a meeting is actually good for. Looping people in to collaborate at the end instead of at the beginning. This is all possible to fix.

What I do is have everyone work in pairs. Pairs are small enough that communication is easy and there's no design-by-committee. But there's always someone to have your back and help when you get stuck or bogged down (e.g. decision fatigue), which happens plenty even to senior engineers. The pair starts and finishes work together, which mostly eliminates the need to loop someone else in randomly and needing to explain the thinking and background context, because they can bounce ideas off of each other and leverage each other's different areas of expertise. Whatever the end result is of that collaboration is treated as a finished unit of work, it's already been looked at closely by two people, it doesn't need a complicated approval process. The automated tests run, the release manager looks for any obvious mistakes, and then it ships.

The hardest nut to crack is the "who is the driver and who is the navigator" problem. I find that it is best to leave that up to the pair to work out for themselves, since it depends on the personalities involved. But with some guidance to not step on each other's toes. Working on the same line of code at the same time constantly is clearly the "too much collaboration" extreme that the article's author dreads. It's better if one person designs while the other codes, or one works on the logic while the other does the TypeScript types, etc. Usually the pair struggles with this for a week or two and then they develop a groove and it's rarely a problem after that. Spontaneous or infrequent collaborators never reach that groove, hence it can be inefficient and frustrating. Long-term pairs get to know each other and then work fast and smooth.
by monero-xmr | 2025-11-12 01:11:33+00:00
If you have life insurance, and you die of, say, cancer, they will go through all of your credit card transactions. You agreed to it. If you died of a car accident, maybe they go through it too, just to see if you were purchasing excessive amounts of alcohol. They won’t necessarily deny the entire claim, but they may deny as a gambit, then negotiate it down with your estate in a settlement.

At a minimum buy all vice purely in cash. Bars, alcohol, nicotine, marijuana, and anything that could hint at a certain lifestyle. Also protects you in civil lawsuit and divorce.
by snowwrestler | 2025-11-12 01:11:51+00:00
You’re for sure exceeding the linear resolving power of 35mm film at 40MP or 64MP.

However, a Bayer-filtered sensor has lower color resolution, since each pixel only sees one color. So the pixel shift really helps quite a bit here since the sensor (and Bayer array) are shifting relative to the film multiple times per exposure.

High-quality film scanners maintain color resolution by using linear sensors without Bayer filtering. But they’re slow and expensive.
by shagie | 2025-11-12 01:11:58+00:00
Seattle: https://undergroundtour.com

Buried ships of San Francisco - https://www.nps.gov/safr/learn/historyculture/buried-ships-o...

https://www.baylightscharters.com/bay-lights-charters-blog/w...

> Delgado received his first big assignment back in 1978 while working for the National Park Service: excavating and studying the remains of the Niantic, one of the first whaling vessels that brought gold-seekers to the area. It had been discovered near the Transamerica Pyramid at the corner of Clay and Sansome streets. After being left behind during the Gold Rush, the ship had been repurposed to serve as a storeship, saloon, and hotel until its demise in an 1851 fire.

Consider that https://maps.app.goo.gl/tYjaESQXss2KhHXQA used to be sea level.

As mentioned else comment, things were torn down and that served as the foundation for the next building.