MurphyA/hacker-news huggingface dataset:
by WorldMaker | 2025-11-24 17:31:48+00:00
The "SDK project model" did a lot to reduce that back down. They did break the BCL up into a lot of smaller packages to make .NET 4.x maintenance/compatibility easier, and if you are still supporting .NET 4.x (and/or .NET Standard), for whatever reason, your dependency list (esp. transitive dependencies) is huge, but if you are targeting .NET 5+ only that list shrinks back down and the BCL doesn't show up in your dependency lists again.

Even some of the Microsoft.* namespaces have properly moved into the BCL SDKs and no longer show up in dependency lists, even though Microsoft.* namespaces originally meant non-BCL first-party.
by Covzire | 2025-11-24 17:31:50+00:00
At the end of the day, these attacks on privacy are always in reality for keeping incompetent politicians and bureaucrat's safe from meritocracy.

Built into the onslaught of demands of backdoors are two key ideas: A) That the backdoors will only be exploitable by the authorities and that B) they're even necessary to carry out their work in stopping trafficing.

I think most people know by now the first idea is preposterous. The second idea is too. The EU should focus on better police tools and tactics that detect and track the actual movement of goods.
by bananalychee | 2025-11-24 17:31:57+00:00
Even though AVIF decoding support is fairly widespread by now, it is still not ubiquitous like JPEG/PNG/GIF. So typically services will store or generate the same image in multiple formats including AVIF for bandwidth optimization and JPEG for universal client support. Browser headers help to determine compatibility, but it's still fairly complicated to implement, and users also end up having to deal with different platforms supporting different formats when they are served WebP or AVIF and want to reupload an image somewhere else that does not like those formats. As far as I can tell, JXL solves that issue for most websites since it is backwards-compatible and can be decoded into JPEG when a client does not support JXL. I would happily give up a few percent in compression efficiency to get back to a single all-purpose lossy image format.
by matthewkayin | 2025-11-24 17:32:03+00:00
Except our resources are not so finite. At least in the first world, we have plenty of food for everyone. Grocery stores throw away millions of tons of food a year. We could use that food to feed people instead of letting it go bad, but instead children will go hungry "because a profit cannot be taken from an orange."

You're right though that there is a basic flaw in the economy that older folks don't want to talk about.
by retrac | 2025-11-24 17:32:18+00:00
I use Bluetooth with my phone and sometimes my laptop. My current hearing aids can stream directly from devices with Bluetooth LE audio; no relay dongle necessary.

But at home I often use telecoil. It's one of the killer features for hearing aids that no one seems to know about. Short-range (inches to a few feet) baseband analog radio.

I have a transmitter set up in the living room. If I come within a few feet of the couch I'll hear the television. Got another at my desktop computer in the office. I also have a loop I put around my neck when I play my electric guitar. Telecoil transmitters will plug into any standard line audio source.
by toast0 | 2025-11-24 17:32:29+00:00
> Would you buy a car with a legal backdoor that lets the builder take it back after a few years.

Plenty of people lease. One way of looking at this is that Congress has kind of said you can only lease copyright (of certain types) and the maximum lease term is 35 years. Other jurisdictions have similar things with different names.

You could get different terms, but I'm sure you need clout first. Of course, the majority of my output is work for hire and I retain no rights and can't terminate it later; oh well.
by venturecruelty | 2025-11-24 17:32:45+00:00
You have separate people called "maintainers", and they're the ones who build and upload packages to the repository. Crucially, they're not the people who write the software. You know, like Linux has been doing since forever. https://wiki.debian.org/DebianMaintainer Instead of treating your package repository like a trash can at a music festival, you can treat it more like a museum, curated by experts. Unfortunately, this isn't quite the devil-may-care attitude the Node ecosystem is so accustomed to, and will be met with a lot of whining, so it never happens. See y'all in two weeks when this happens again.
by basilgohar | 2025-11-24 17:32:47+00:00
djb has earned my massive respect for how consistent he's been in this regard. I love his belligerence towards authoritarian overreach in this regard. Him, Phil Zimmermann, Richard Stallman, and all are owed great respect for their insistence on their principles which have paid massive dividends to all of us through the freedom and software that has been preserved and become possible through them. I appreciate them immensely and I think we all owe them a debt of gratitude for their sacrifices, because they all paid a heavy price for their advocacy over time.
by wrsh07 | 2025-11-24 17:32:48+00:00
> Literally doesn't matter anymore

This is incredibly incorrect! The examples you've pointed to illustrate the smiling curve [1].

Publishers still have an enormous amount of leverage and power, and that is extremely important for other businesses operating in that space. Not everybody is an individual creator, and some creators prefer to work on small teams. You're describing this incredible transformation of the value chain (who provides value, who captures value) while missing the point!!

> It's just that the power asymmetry is disappearing

This is so fundamentally untrue. Do individuals have more power? Yes! Their BATNA (best alternative to a negotiated agreement) is now "fine I can self publish and survive." That doesn't mean there's not a huge power asymmetry still. Without the blessing of Microsoft, Sony, Apple, valve it is hard to get my game featured. Can I still go viral? Of course! But listen to Zach Gage talk about the funding difference for making a game for Apple Arcade. It prefunds development and allows him to hire a team.

As for rights negotiations, even Taylor Swift had some difficulty reclaiming ownership of her masters. The power asymmetry is alive and well.

> Would you rather I delete my comment

No, I want you to read more carefully and engage with the things people are actually saying and not what you think they are saying from briefly skimming what they write.

[1] https://stratechery.com/concept/aggregation-theory/smiling-c...
by samiv | 2025-11-24 17:33:07+00:00
Don't worry we (the people in the political west) are quickly reverting back to the historical norm that was also in effect during the Victorian era. Few rich people, minimal middle class and lots of poor working class people.

After all capitalism is the same as system as slavery or feudalism. Only the names of the roles are different but the dynamics in society in terms who owns capital and who own the means/result of production and who don't, are the same in every system. (Small minority who own everything)
by BLKNSLVR | 2025-11-24 17:33:16+00:00
So we need GrapheneOS to stand their ground more than ever!

My country has this: https://www.schneier.com/blog/archives/2024/09/australia-thr...

Which kinda ruins it for everyone.

Additionally, I would assume/guess that if it's some kind of coordinated campaign involving media then there is no law to compel GrapheneOS to do this. If they're was a law then that would be the pressure, as opposed to media articles.

What that then implies is a campaign to convince the public a law is necessary, ie. they're already laying the ground work for support for the next version of a Chat Control bill.
by GeekyBear | 2025-11-24 17:33:37+00:00
Apple has already taken the US government to court and forced them to back down after the FBI demanded that they insert a backdoor into iOS.

> In 2015 and 2016, Apple Inc. received and objected to or challenged at least 11 orders issued by United States district courts under the All Writs Act of 1789.

https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_d...

This year, Apple took the UK to court and announced that they would strip encryption features from UK users before they would give in to UK demands for an encryption back door before the UK backed down.

If Graphene has the money to do so, they should fight it out in the courts.
by jacquesm | 2025-11-24 17:33:58+00:00
> Fixed that for you.

You didn't fix anything.

> Let's not assume the worst of an institution that's been fairly good for the world so far.

I'm not assuming the worst. I'm just being realistic, and I think it would be nice if CERN explicitly acknowledged the fact that what they do there could have serious implications for weapons technology.
by alistairSH | 2025-11-24 17:34:07+00:00
in the long run moving away from a policy of "as much cheap stuff for consumers as possible no matter the externalizes" will be a good thing.

That strikes me as something akin to the broken window fallacy. Tariffs are absolutely market-distorting and absolutely lead to higher prices.

We absolutely should be leveraging lower cost of labor overseas to build cheap stuff. If there is concern about other externalities (pollution, slave labor, etc) then address those directly with sanctions, targeted tariffs, or something else.

I've yet to see a good argument that overconsumption is bad (in a general economic sense). If we're overspending (not saving, or over-leveraging) then address that directly (not via tariffs). If it's a pollution argument, then address that directly. Etc.
by saghm | 2025-11-24 17:34:08+00:00
> So many times I've tried to do something in Rust the old fashioned way, the way I have always done things, and been stopped by the compiler. I then investigate why the compiler/language is being so anal about this trivial thing I want to do.. and yup, there's a concurrency bug I never would have thought of! I guess all that old code I wrote has bugs that I didn't know about at the time.

This is also my experience. I've had dozens of times over the years that I've been confused about why Rust does something a certain way, but I don't think I can recall a single one where I didn't end up finding out that there was an extremely good reason for it. That's not to say that in every one of those cases, the design choice Rust made was the only reasonable one, but in the cases where it wasn't, the situation always ended up being more nuanced than it appeared to me at first glance, and what I would have originally expected would have implicitly made a significant tradeoff I hadn't considered.

I'm having trouble finding it now, but years ago someone had a quote that ended up getting published in the language's weekly newsletter that was something like "Rust moves the pain of understanding your program from the future to the present". It's extremely apt; most of the difficulty I've seen people run into when trying to program in Rust ends up being that they're forced to consider potential issues that in other languages they could have ignored until later, and then would have had to debug down the line.
by jack_tripper | 2025-11-24 17:34:15+00:00
>Yes, but it is comparable to the pay received in Asia - especially peer developed countries like Japan, South Korea, and Taiwan.

Not really. If you're an engineer in Asia you're in the top 5% - 10% of local purchasing power. While if you're an engineer in UK, Belgium, Germany, Sweden, etc you're not that wealthy by local standards, you're just average like most other white collar workers, unless you work for a US FANG.

>This is what EU member states like Denmark provide for the biopharma industry

Not just Denmark, but bio/pharma is a protected and state sponsored industry in most EU countries, unlike software, electronics and electrical engineering which has been treated as a race to the bottom industry.

> The issue is, the talent density for large swathes of electronics and computer engineering just doesn't exist in the EU anymore.

"Oh no, if it isn't the consequences of my own actions". This is what you get when for the past 20+ years you outsourced your entire industry to Asia for the sake of shareholder returns with no thought of the future.

Munich is still a strong tech hub for electronics with Apple, Rhode & Schwarz and others developing RF and semiconductors there, but it can't hold a candle to the sci-fi work being done in SV or even Israel.
by baklavaEmperor | 2025-11-24 17:34:44+00:00
If people are concerned about foreign interference, it’s worth noting that Twitter’s ID-verification pipeline runs through AU10TIX. The company is founded in Tel aviv by an ex Israeli military person and maintains core operations and engineering in Israel, which is where part of the verification flow is processed. That creates a direct data-flow path for sensitive government IDs outside the U.S. for no real reason, and most users have no idea this is happening. I do not want a foreign government to have access to the address of all American verified users on Twitter.
by DrierCycle | 2025-11-24 17:35:01+00:00
Are there superficial details?

I almost always glean details in masterful metasurveys and monographs buried in the syntax that only emerge later. Learning is as much about the unconscious parallels. There are too many examples of this that LLMs would have zero access to, since it's an agrammatic kind of secret code that makes ideas come to life.

The idea we have any need to summarize based on the thinnest ideas of knowledge building: checklists, bullet-points, generic plain english ideation, says that learning is in collapse in favor of expediency that precedes info collapse.
by moomin | 2025-11-24 17:35:12+00:00
Friend of mine was gathering survey results for a kids programme in London. They take council estate kids to events and do childcare and a bunch of other stuff. When asked what they liked best, the kids kept talking about the food and how you could even have seconds. Meanwhile we’ve got food banks up and down the country struggling to keep up with demand. I know families with three kids to a room smaller than the one my youngest fills with books. I can assure you pretty is very real in London.
by whimsicalism | 2025-11-24 17:35:25+00:00
> provide incentives for marriage, which is associated with higher fertility rates.

Not causally it isn’t.

I disagree with this entire social project, babies aren’t interchangeable and I don’t want to encourage more children from people whose primary blocker was child support payments. Need to encourage people who are doing well supporting themselves to have more children rather than squeezing out the tenth from two-timing Jimmy.
by petee | 2025-11-24 17:35:34+00:00
Wish I could, but I never learned c++! Maybe now could be the time lol Maps are a great idea, and even better if you can incorporate terrain height and obstructions.

With a map you could also plot out the safety perimeter. Every jurisdiction is different, for example in my state if I recall it was something like 100' feet per inch of shell size, and the fire mashals would use a wheel to confirm it.

A random other thought might be to offer the user estimates for number and length of squib and control cables for the various rack runs
by ghurtado | 2025-11-24 17:35:51+00:00
I think they were using "writing Rust" in the most strict sense: the part of the development cycle that involves typing the majority of the code, before you really start debugging in earnest and really make things work.

But their point is that "developing Rust" (as in, the entire process) ends up being a similar total effort to C, only with more up front "writing" and less work on the debugging phase.
by kstrauser | 2025-11-24 17:35:56+00:00
I’d like to see a study showing 1) people aware of this issue and 2) for whom it swung their vote to the right. That’d have to be, what, 10 complete idiots? “Well, I was going to vote for A, but some of B’s supporters asked if I would please be considerate, and that’s a bridge too far.”
by throw0101a | 2025-11-24 17:36:20+00:00
> But what would it mean for a government to save money over decades?

* https://en.wikipedia.org/wiki/Social_Security_Trust_Fund

The SSA had actually been collecting 'extra' money (from Baby Boomers) for awhile now and putting off to the side, but that extra income stopped a while ago, and the trust fund where it was stored was being tapped to keep benefits up.

The "shortage" in Social Security that is sometimes in the US news is the estimated time when the 'extra' funds run out, and benefits will only be covered in cashflows.

And this is not sudden thing: many government pension systems in the world are facing similar situations. The politicians in the US have not done anything about (for decades), whereas Canada did decide to change their system:

* https://en.wikipedia.org/wiki/Canada_Pension_Plan#1998_refor...

Other countries are facing debates (France, Denmark, etc).
by jacquesm | 2025-11-24 17:36:41+00:00
In theory there is no difference between theory and practice, but in practice there is.

> If they haven’t, it would be ethically dubious for you to not report it.

I can report all I want, someone needs to act on that report for it to have an effect.

There are people out there who think that some static analysis tool plugged into their CI/CD pipeline is the equivalent of a code audit.
by shlip | 2025-11-24 17:36:55+00:00
Just to be clear about what is really happening right now;

There were three articles from newspapers (Le Figaro, Le Parisien) known for their rightist, pro-cops, opinions, and owned by billionaires (LVMH/Arnault, Dassault). In those articles, GrapheneOS is associated with bad actors purpotedly using it as a way to obfuscate their activities.

A comment was made by Johanna Brousse, Chief of French Cybercrime Unit, stating she would not refrain from pursuing the publishers if links were found with a criminal organization and they refused to cooperate with the justice system.

Another claim from a police investigator equates GrapheneOS usage to illegal activity.
by basilgohar | 2025-11-24 17:36:59+00:00
I think it's established that NSA backdoors things. It doesn't mean they backdoor everything. But scrutiny is merited for each new thing NSA endorses and we have to wonder and ask why, and it's enough that if we can't explain why something is a certain way and not another, it's not improbable that we should be cautious of that and call it out. This is how they've operated for decades.
by skissane | 2025-11-24 17:37:04+00:00
> Making it a requirement is basically out of question

Why? If there’s the political will, it is doable. There are Australian gun manufacturers (e.g. Lithgow Arms, owned by Thales)-and if none of them are willing to cooperate, the government can always start their own gun manufacturer. Indeed, Lithgow Arms was founded in 1912 as a government-owned arms manufacturer, and remained in public hands until the Australian federal government sold it to Thales in 2006.
by lbhdc | 2025-11-24 17:37:28+00:00
Not who you asked, but I have a similar setup. I can run everything I need for local development in that image (db, message queue emulator, cache, other services). So, setting things like environment variables or running postgres work the same as they do outside the container.

The image itself isn't the same image that the app gets deployed in, but is a portable dev environment with everything needed to build and run my apps baked in.

This comes with some nice side effects like being able to instantly spin up clean work environments on my laptop, someone elses, or a remote vm.
by dbaman | 2025-11-24 17:37:36+00:00
But is that first point really true?

If a document is used to train an LLM, that means that an AI checker would be more likely to give a false positive that the document is written by AI?

I guess it depends on the AI checker.

I would think that that LLM, after generating the fragment "When in the course of.." would just be a bit more likely to generate "human" as the next word, yes?
by kittikitti | 2025-11-24 17:38:05+00:00
There were many decades where phones didn't have back doors. Now, it's the opposite case in the most dystopian way. It's concerning that all phones are required to have back doors for law enforcement and the enforcement is severe. I know several people who have a corrupt "cop they know" that they can regularly contact for favors. Why is it so out of the ordinary to distrust law enforcement when they have these tools?
by embedding-shape | 2025-11-24 17:38:42+00:00
> NPM is too insecure for production CLI usage.

NPM was never "too insecure" and remains not "too insecure" today.

This is not an issue with npm, JavaScript, NodeJS, the NodeJS foundation or anything else but the consumer of these libraries pulling in code from 3rd parties and pushing it to production environments without a single review. How this still fly today, and have been since the inception of public "easy to publish" repositories remains a mystery to me even today.

If you're maintaining a platform like Zapier, which gets hacked because none of your software engineers actually review the code that ends up in your production environment (yes, that includes 3rd party dependencies, no matter where they come from), I'm not sure you even have any business writing software.

The internet been a hostile place for so long, that most of us "web masters" are used to it today. Yet it seems developers of all ages fall into the "what's the worst that can happen?" trap when pulling in either one dependency with 10K LoC without any review, or 1000s of dependencies with 10 lines each.

Until you fix your processes and workflows, this will continue to happen, even if you use pnpm. You NEED to be responsible for the code you ship, regardless of who wrote it.
by venturecruelty | 2025-11-24 17:39:09+00:00
Sure it is: don't do it. It's not like there isn't automated tooling for this, but you can also like... I don't know, look at your diffs and not commit secrets? I've never committed a secret before, and I've been working with AWS for ten years now. But I don't "git commit -a" and I triple-check my diffs.
by ants_everywhere | 2025-11-24 17:39:10+00:00
That was when he had the legal expertise of the EFF to help him make his case. Later he decided to represent himself in court and failed

> This time, he chose to represent himself, although he had no formal legal training. On October 15, 2003, almost nine years after Bernstein first brought the case, the judge dismissed it....

https://en.wikipedia.org/wiki/Bernstein_v._United_States