MurphyA/hacker-news huggingface dataset:
by QuiEgo | 2025-11-24 18:43:30+00:00
Thank you for the clarification, that's exactly what I was trying to say :).

Perhaps another way to phrase this: in Rust, you spend more time telling the compiler how your code is expected to work (making the borrow checker happy, adding sync traits on objects you "know" are thread safe because of how you use them or assurances the underlying hardware provides, etc etc etc). In return, the compiler does a lot of work to make sure the code will actually work how you think it's going to work.

A good example is a simple producer-consumer problem. Make a ring buffer. Push the current sys clk tick count register to the ring buffer every time there's a rising edge interrupt on a GPIO (e.x. hook up a button or something to it). Poll the ring buffer in another thread and as soon as there is a timestamp in the buffer, pop it and log it to a UART.

Compare writing this in C vs Rust. In the text book implementation of a producer-consumer ring buffer, you don't need locks.

In C, this is a problem I'd expect a senior-level candidate to be able to knock out in a 60 minute interview.

(aside: I'd never actually ask a question like this in an interview, because it heavily favors people who just happen to be familiar with the algorithm, which doesn't give me enough signal about the candidate. This is borderline like asking someone to implement a sort algorithm in an interview - it just tells you they know how to google or memorize things. /aside).

(aside 2: If I did ask this, I'd be more interested how they design the thing - I'd be looking for questions like "how many events per second? How should I size the ring buffer? Wait, you want me to hook up an IRQ to a button? Is there a risk of interrupt storm from bounce or someone being malicious? Do you want me to add a cooldown timer between events? If we overflow the ring buffer, what should the behavior be? How fast can the UART go on this system - can it even keep up with the input?" - I'd be far more interested in that conversation than actually seeing them write code for this. /aside2).

In Rust, it's a bit more tricky. You'll need to give the compiler hints (in the form of Sync traits that are no-ops) to tell it you know what you're doing is thread safe. It's not rocket science, but the syntax is kind of weird and it will take some putzing around or aid from your favorite AI to get it right.

All of Rust ends up like this - you must be more verbose telling the compiler your intent. In exchange, it verifies the code matches your intent. So the up front cost is higher.

I suspect a lot of people will just pull a ring buffer off crates.io instead of figuring out the right incantations to make the compiler happy.
by delusional | 2025-11-24 18:43:40+00:00
> in Europe we already live in a completely safe society in historical and geographic terms, what more do you fucking want?

For people not to get killed, abused, and exploited? You don't sound like a "libertarian" you sound like an anarchist.

You know who has a large part of the population under global 24/7 surveillance right now? Google, Facebook, Microsoft.
by mmooss | 2025-11-24 18:43:41+00:00
> Cycling doesn't replace cars, it just reduces the cost of cars!

The quote doesn't support that. It says decongestion is most of the savings, and decongestion is fewer cars, implying bikes replace cars.

Is there something else in the article that supports it?

Someone on a bike isn't driving - it seems like a clear substitute, though it also substitutes for public transit.
by mbj111 | 2025-11-24 18:43:49+00:00
A paper published by Databricks primarily focuses on why "Kafka sucks" and what if we make the source of truth a database and watch abstractions, then cases we miss with Kafka on resiliency and consistency can be solved.

It argues that modern pub-sub systems:

fail to achieve their goal of truly decoupling writes and readers

violate the end-to-end principle

expose an ad-hoc storage abstraction with a bespoke API and limited power

relevant thread on X -https://x.com/BdKozlovski/status/1991892238335381524
by ratmice | 2025-11-24 18:43:59+00:00
My feeling is that languages with other packing models are merely less convenient, and there is no actual tangible difference security-wise. Just take C and replace "look for writable repositories". It just takes more work and is less uniform to say write a worm that looks for writable cmake/autoconf and replicate that way.

What would actually stop this is writing compilers and build systems in a way that isolates builds from one another. It's kind of stupid that all a compiler really needs is an input file, a list of dependencies, and an output file. Yet they all make it easy to root around, replicate and exfiltrate. It can be both convenient and not suffer from these style of attacks.
by alephnerd | 2025-11-24 18:44:09+00:00
> That doesn't change that people here want those cutting edge manufacturing and job opportunities the US has. They don't want to be stuck competition with China in commodity widgets like cars or low margin 16nm-65nm microcontrollers

You can't build an ecosystem for bleeding edge work without an even larger pipeline of non-bleeding edge and even legacy workflow. For example, it's 14nm that pays the bills for TSMC - not 5nm/7nm.

And much of the entire Taiwanese electronics industry is largely coalesced around legacy nodes and low value work as well.

> There's a limited market for ASML machines

Made in American using American IP by a US DoE JV.

> high bureaucracy, strong unions, private companies slowly moved jobs elsewhere where it's cheaper to do business, no unions, less environmentalism, less labor protections, etc

Yet European Biopharma and chemicals engineering remains competitive despite having similar issues as a similar capex heavy industry with a significant IP component. It's really just an institutional issue.
by 7jjjjjjj | 2025-11-24 18:44:18+00:00
I think there's a difference here.

If I right click save and get a webp, it was probably converted from JPG. Very very few images are uploaded in webp. So getting a webp image means you've downloaded an inferior version.

JXL doesn't have this issue because conversion from jpeg is lossless. So you've still gotten the real, fully-quality image.
by pm | 2025-11-24 18:44:19+00:00
I don't think wpa_supplicant.conf has been used for sometime, as they moved to cloud-init for bootstrapping. It requires the network-config file instead, the format of which is documented on the cloud-init documentation page.

I happen to have been experimenting with this for the past few weeks, and the most persistent issue was getting wi-fi to work correctly. It's quite a common issue, with any number of hacks. I offer my own network-config below, though I've only tested it with provisioning Ubuntu Server on the RPis so far (I have two 3B+s).

network: version: 2 renderer: networkd wifis: wlan0: regulatory-domain: "AU" dhcp4: true dhcp6: false optional: false access-points: "<access-point-name>": password: "<password>"

The important parts are:

1. The renderer, as the default is NetworkManager, which doesn't work correctly with RPis (at least on Ubuntu Server). It may work with RPiOS, but I haven't tested it yet.

2. The regulatory domain, the lack of which is what disables wi-fi in the first place. I forget how much testing I did with the format, but I believe it must be uppercase (I don't remember about quoting the string, however).

3. Disabling IPv6 may be relevant, though unlikely. It was just in a working configurations I found; I just haven't had time to confirm it. The relevant line in my user-data file is as follows:

bootcmd: - sysctl net.ipv6.conf.all.disable_ipv6=1

The rest of the configuration is standard, though I purposefully made the wi-fi non-optional so I could confirm that wi-fi worked (my only Internet at the moment is through my iPhone hotspot, which was another source of issues, but that's a whole other story).

NB. According to someone else, the imager has the respective command line options for user-data and network-config, which I didn't know.
by idogrady | 2025-11-24 18:44:47+00:00
Hi HN,

We've been quietly running a significant amount of capital through prediction markets, primarily Polymarket, for the last year. Our core conclusion? Prediction markets are currently a quantitative playground. The "wisdom of the crowd" narrative breaks down when the crowd is slow, emotional, or not incentivized to track niche, high-signal data.

We initially built a set of internal scripts to target these temporary pricing inefficiencies. Now, we're releasing the underlying engine as PolyTools—a dedicated, systematic intelligence platform for traders looking for an algorithmic edge beyond simple news consumption.

You can check out the live platform here: [Insert your live URL here: https://polytools.market/]
by tadfisher | 2025-11-24 18:45:16+00:00
> Go is also nice in that regard - you are depending on Git repositories directly, so you have to hijack into the Git repo permissions and spoil the source code there.

That in itself is scary because Git refs are mutable. Even with compromised credentials, no one can replace artifacts already deployed to Maven Central, because they simply don't allow it. There is nothing stopping someone from replacing a Git tag with one that points to compromised code.

The surface area is smaller because Go does locking via go.sum, but I could certainly see a tired developer regenerating it over the most strenuous of on-screen objections from the go CLI.
by johnisgood | 2025-11-24 18:45:16+00:00
> Astra is a web server runtime for Lua (5.1-5.4), Luau and LuaJIT written in Rust with native support for Teal.

Seems like it is a web server runime only?

Hmm, the website is confusing because: https://astra.arkforge.net/docs/latest/std/serde.html

Although even on https://astra.arkforge.net/docs/latest/std/crypto.html it mentions it is for web servers. ("During development of your web servers [...]")

So ultimately it indeed is for webservers, and the utilities are, too.

> Rather a wrapper over it with Rust libraries being available for use. Batteries included essentially

Any Rust libraries? Are there code snippets for random Rust libraries unrelated to webservers?
by gsempe | 2025-11-24 18:45:23+00:00
I have a French website of place cards https://marqueplace.com that is up for more than 4 years but that I barely updated. I’m investigating an easy and cheap way to create alternative designs. It’s all about creating simple designs that can be print in a flat card design. It’s very close to what you did. Obviously the immediate focus is Christmas and New Year’s Eve
by ecshafer | 2025-11-24 18:45:38+00:00
In my CS undergrad I had Doug Lea as a professor, really fantastic professor (best teacher I have ever had, bar none). He had a really novel way to handle homework hand ins, you had to demo the project. So you got him to sit down with you, you ran the code, he would ask you to put some inputs in (that were highly likely to be edge cases to break it). Once that was sufficient, he would ask you how you did different things, and to walk him through your code. Then when you were done he told you to email the code to him, and he would grade it. I am not sure how much of this was an anti-cheating device, but it required that you knew the code you wrote and why you did it for the project.

I think that AI has the possibility of weakening some aspects of education but I agree with Karpathy here. In class work, in person defenses of work, verbal tests. These were corner stones of education for thousands of years and have been cut out over the last 50 years or so outside of a few niche cases (Thesis defense) and it might be a good thing that these come back.
by tjwebbnorfolk | 2025-11-24 18:46:20+00:00
Every HN comment seems to say the same thing: downtime is inexcusable and the centralization of these services is ruining the internet.

I still don't see the big deal. 12 hours of downtime once every couple years isn't the end of the world. So people can't log into their bank website for a few hours -- banks used to only be open for like 4 hours a day and somehow we all survived. Twitter is down? Oh what a tragedy. Customers get some refunds, Cloudflare fixes the issue, and people move on with life.

Cars still break down occasionally after 100+ years of engineering for reliability and safety. The power still goes out every now and then. Cook on the stove. The cost of making everything perfect all the time just isn't worth it.

I run my own servers on my own network and do not use Cloudflare. My stuff goes down too. And it's "decentralized" in the way you think the internet "should" be, which entails its own risks. So what do you all want, exactly? A public lashing of every developer at Cloudflare who pushes a bug to prod? A congressional investigation? I just don't understand the outrage here.

Stuff breaks occasionally. Get used to it, and design accordingly.
by fn-mote | 2025-11-24 18:46:23+00:00
> programmed with $X in a hot summer night in the late 90s and he hasn't had a look at $X ever since

Oh, I’m all in agreement with this but there’s another side to this:

Programmer worked with a product from the company back in ‘00 enough to know it is a piece of shit and the whole company culture is bullshit and band-aid fixes. They know they can still find similar bugs to the ones they reported, just using the new shiny API that got tacked on.
by threethirtytwo | 2025-11-24 18:46:32+00:00
But then you have the tragedy of the commons. As a central dictator, yes you want to preserve your government, and you act in ways that do this because you are the direct owner.

But in a democracy where you are one government official among many many other officials, one small corruption change that benefits yourself individually hardly effects the overall government. It is rational for you to do small damage to the overall government and gain a reward that benefits you disproportionally. It is the MOST logical action.

But then every government official acting rationally in aggregate causes the overall government to become extremely corrupt and that is the tragedy of the commons. Rational action in aggregate becomes irrational. Government needs to be separate from private business.

I guess it's because it's so culturally ingrained that it's hard to separate. The chase for money and business is entirely cultural. Money is paper and it's all fantasy stuff and the reason why we value it is solely because of culture. Government ideally needs to be seperate from this culture and have a more militaristic based honor structure where the incentive is to guard the citizenry. Government needs it's own cultural values. Easier said than done, practically every government official IS a private citizen and they all face the same misaligned incentives.
by renewiltord | 2025-11-24 18:46:42+00:00
I haven’t been recently. I was in Hong Kong last just before the pandemic and my parents have been to China recently. It’s quite an advanced place but they happily prefer the US to China still.

I have a friend I met last year who lives in China and he’s looking to move to Singapore. So I’m not super informed but also I think I have enough anecdotal knowledge that someone showing me a GDP chart won’t convince me life is better there.

But we may go in a few months after we take our daughter to her ancestral Taiwan. Then I’ll see for myself.

Many Indians told me India is rapidly approaching the West once and I went there for a friend’s wedding and they were right but in the sense that Andromeda is approaching us at 120 km/s: it’s fast but the gap is big in standard of living.

So I’m a bit hesitant to believe this stuff. I’ll see for myself.
by rickdeckard | 2025-11-24 18:46:48+00:00
Really interesting read, but I wonder if the character design everyone associates with the story isn't still owned by Disney even after termination. As I understand the original work is a written novel (and not a graphic novel), and I assume Disney designed the characters.

Otherwise ("creative works" based on the original material also transfer to the author of the original material) would mean that the author suddenly owns the MOVIE as well...
by potato3732842 | 2025-11-24 18:47:22+00:00
A submarine needs to be light to be neutrally buoyant in order to fly though the water properly. Otherwise you have a bathyscaphe, which has some other not nice failure modes (in addition to the "implodes if you f it up" one) and are much less maneuverable and arguably the whole system is less durable more costly for high tempo operations. "Just build a tube strong enough and big enough to not need all that" is a better answer, if you can pull it off.
by jroseborough | 2025-11-24 18:47:31+00:00
Prompt your idea and MoreMinds turns it into a startup ready to pitch.

Workspaces do your user and market research, propose and manage your business model and projections, and any prompted changes dynamically update your pitch deck and landing templates.

Meaning you stay go-to-market ready with any small or major pivot.

Bonus: Track leads and generate outreach all within your dedicated Leads dashboard, you get one per idea.

Last thing, you can share your workspace for collaboration, now anyone can help you move your startup idea forward; be it help with outreach or product messaging.

All in MoreMinds.
by ImPostingOnHN | 2025-11-24 18:47:50+00:00
> So all someone who is being abusive has to do to force me to be stand there and be abused by them is to call me corrupt?

In this example, rectifying concerns is your job, so yes, you have to do it, even if 1 of the 7 parties who hold the concern is a jerk*. Officials can't dispense with rules and procedure just because their feelings are hurt.

If you are actually corrupt**, it isn't abuse. If you aren't, it still isn't abuse. Even if it is abuse, and you deal with it sanctions, you must still rectify the substance of the concerns upheld by 6 other parties.

* 1/7 would be a pretty desirable jerk/total ratio, in my experience

** (and officially behaving differently based on personal animus makes one so)
by bravoetch | 2025-11-24 18:47:58+00:00
There's a top tier DEFCON talk by the Lavabit email guy. He explains where the line is for access to phones and other encrypted information. I'll try to summarize -

1 - Law enforcement have actual information about the probable contents of your phone (like an incriminating filename will do). They can reasonably expect to get a warrant and access to your stuff.

2 - They don't know what's there at all, and have no probable indication of the contents, and in this case they cannot expect access because they would just be going fishing.

Having said that - backdoors are bad.
by ch_123 | 2025-11-24 18:48:01+00:00
> The average American now holds onto their smartphone for 29 months, according to a recent survey by Reviews.org, and that cycle is getting longer. The average was around 22 months in 2016.

As someone who makes enough money to buy a new phone every year if I wanted, I typically upgrade my phone (iPhone for what it's worth) every 4 years. My experience is that this is about as long as it takes for enough new features to accumulate to make me excited about an upgrade. By the end of this 4 year period, my phones are in a sufficiently good state to be sold, or passed on to a family member.

The idea that a typical person is expected to upgrade their phone every 2 years or so is almost incomprehensible to me.
by jmward01 | 2025-11-24 18:48:07+00:00
True freedom, of any kind, requires freedom to say things and think things in private. I sometimes think horrible things and even discuss them with my friends. I need that space to work out issues. Without a truly safe space I would eventually go mad as I suspect many people would. The other part of this is that a basic requirement of freedom is trust with accountability. It means we allow things that may be harmful but if things go bad we hold those responsible accountable after the fact. It also means we may not catch all the bad guys and that is OK because the alternative is that everyone turns into a bad guy when we prevent people from doing things in case they will be bad. There is a balance here but the position that a govt will always have access to all private individual (acting in a private capacity) communications is not anywhere near a reasonable balance.
by mmooss | 2025-11-24 18:49:03+00:00
It's not XOR; you can do both. Most people who cycle also walk at times.

Why exclude cycling? You're range is ~5x walking - in the time and effort required to walk a mile, you could easily cycle 5 miles.

It doesn't have to be a universal panacea to be valuable. Walking isn't possible for everyone, including some who can cycle, and it's not useful for longer distances like 5 miles, ~2.5 hrs walking or 30 min cycling slowly.
by blintz | 2025-11-24 18:49:13+00:00
There was lots of public scrutiny of Kyber (ML-KEM); DJB made his own submission to the NIST PQC standardization process. A purposely introduced backdoor in Kyber makes absolutely no sense; it was submitted by 11 respected cryptographers, and analyzed by hundreds of people over the course of standardization.

I disagree that ML-KEM is "obviously weaker". In some ways, lattice-based cryptography has stronger hardness foundations than RSA and EC (specifically, average -> worst case reductions).

ML-KEM and EC are definitely complementary, and I would probably only deploy hybrids in the near future, but I don't begrudge others who wish to do pure ML-KEM.
Show HN: Axe - A Systems Programming Language with Builtin Parallelism and No GC
by death_eternal | 2025-11-24 18:49:25+00:00
I'm writing a compiler for a systems language focused on concurrency and parallelism. It’s a re-engineering of a prior work, with an explicit emphasis on memory management and type safety, plus first-class parallel primitives at the language level.

The language is now capable of compiling a substantial portion of its own source code to tokens using a single-pass C back-end. The self-hosted compiler includes a handwritten lexer and a parser, with an arena-based allocator to support fast compilation and eliminate GC complexity.

The primary goals for the project are: First-class parallel and concurrent constructs built directly into the language, strong static memory and type guarantees, and a toolchain suitable for building high-performance software

Example:

def main() { parallel local(mut arena: Arena) { arena = Arena.create(1024); val tid = Parallel.thread_id(); val result = worker(ref_of(arena), tid); println $"Thread {tid} computed {result}"; Arena.destroy(ref_of(arena)); } }

You can find the repository here: https://github.com/axelang/axe
by yesfitz | 2025-11-24 18:49:44+00:00
Models are typically smaller scale/scope... So a "real urban center" could probably easily provide service that smaller cities can't.

As to why Iowa City doesn't run on Sundays and Federal Holidays:

The University is about half the population of the city. The University runs a separate "Cambus" system[1] (that the community can also use) and after-hours routes for students[2].

We're also still in relatively early days of finding out how Iowa City residents use public transit when there's no barrier. For instance, they stopped running the downtown shuttle and reduced the number of stops downtown[3] because downtown is relatively dense, walkable, and student-heavy (i.e. mostly young, healthy, ambulatory people) and served by the University.

There's also a growing interest in adding service to nearby towns and adding Sunday service, even if it's in a limited capacity.

1: https://transportation.uiowa.edu/cambus/cambus-service-calen... 2: https://safety.uiowa.edu/nite-ride 3: https://www.icgov.org/Home/Components/News/News/2165/390
by SoftTalker | 2025-11-24 18:49:58+00:00
Yet companies insist on enabling unattended upgrades at least for "security" patches, which have introduced breakage or even their own vulnerabilities in the past (Crowdstrike was a recent dramatic example).

OpenBSD will just tell you that maintaining an LTS release is not one of their goals and if that's what you need you'll be better served by running another OS.