MurphyA/hacker-news huggingface dataset:
by dizzant | 2025-11-11 20:41:52+00:00
To be clear, I'm not disagreeing with antirez at all. I feel his argument in my bones. I am a smart programmer. I want simple, powerful systems that leave the kid gloves in the drawer.

The unfortunate reality is that a large cadre of people cannot handle such tools, and those people still have extremely valuable contributions to make.

I say this as a full-time research engineer at a top-10 university. We are not short on talent, new problems, or funding. There is ample opportunity to make our systems as simple/"pure" as possible, and I make that case vigorously. The fact remains that intentionally limiting scope for the sake of the many is often better than cultivating an elite few.
by zeroCalories | 2025-11-11 20:42:00+00:00
Personally, I don't mind burning some time to interview for free. But I expect the company to also burn the time of their own engineers as well. It displays a degree of commitment and seriousness from them about this meeting. I'm never going to let them yank my chain and dance for them when all they've done is send an email. But I'm also not desperate for work, so it's a good filter for me to know what kinda dogshit work culture you've got.
by zrn900 | 2025-11-11 20:42:50+00:00
This is an Angloamerican thing - especially British - propagandizing and hating pigeons to the extent of calling them 'flying plague' and whatnot. Its not seen elsewhere in the world, even in the Mediterranean. You can still find major city squares full of pigeons as a policy, where people go to see the pigeons or feed them.
by pbopps | 2025-11-11 20:43:25+00:00
Hi everyone,

I just launched AllPub on Product Hunt a week ago and got some great traction. Now looking to refine based on community feedback from HN.

The Problem: Developers who write technical content waste hours manually copy-pasting articles between Dev.to, Hashnode, and other platforms. Formatting breaks. Tags are different. Summaries need adjustment. It's just tedious.

What I Built: AllPub connects to your Notion workspace. Write your article. Our AI generates 5 title options, hashtags, and platform-specific summaries. Hit publish and it goes to Dev.to and Hashnode simultaneously with correct formatting.

Current Status: Free beta. No paywall yet. I want feedback before I monetize.

What I am looking for:

Is this actually solving a real problem you face?

What features would make this essential for your workflow?

What's missing?

Would you pay for this? At what price point?

Try it free: allpub.co (no credit card required)

https://www.producthunt.com/products/allpub?utm_source=twitt...

Would love to hear what the HN community thinks.
by cestith | 2025-11-11 20:43:33+00:00
It’s a security issue for a stream type almost nobody uses. It’s a little like saying your graphics program in 2025 is exploitable by a malformed PCX file, or your music player has a security bug only when playing an Impulse Tracker module.

Sure, triage it. It shouldn’t be publicly disclosed within a week of the report though, because the fix is still a relatively low priority.
by somat | 2025-11-11 20:43:45+00:00
I run a 5600, I am not super familiar with the rest of the g-shock line but the straps do appear to be the weak point of the whole thing. I found an adapter that allows me to use nato style nylon webbing straps. I mainly wanted it so I could replace the straps easier, but I have not had a strap break yet. A word of caution and a recommendation. The first adapter I got was also made of resin and broke in about the same amount of time the resin straps did(~ year) I found a company called ritchie strap that sells a steel adapter which has so far lasted ~ 6 years.

On the needed adapter, webbing straps are intended to feed directly through the strap pins but g-shocks tend to have a very narrow and tight strap attach pitch(16mm), the webbing does not fit well and I wanted a wider 24mm strap. I do not want to be to damming, I think the narrow pitch is intended to be stronger than a wide pitch but it does make things inconvenient for us g-shock with webbing strap connoisseurs.
by shaftway | 2025-11-11 20:43:59+00:00
The way I look at it, the longer you stay in a high risk investment, the more opportunities there are four your investment to go sideways (aka you lose your investment).

I see it as similar to flaky tests. Let's say you work on a codebase with ~100,000 tests. About 1% are flaky, where the average flaky test fails 0.1% of the time. On the surface that sounds like it's pretty low risk, but once you do out the math your unit tests will only pass about 36% of the time. Maybe a 0.1% flaky rate is acceptable, but not at that scale.

Long term investing plays the same numbers game. Let's say you invest in a risky stock for ~3 years, where "risky" means it has a 0.1% chance of failing in any given day. There's a ~36% chance you win, but you'll probably lose.
by mrexroad | 2025-11-11 20:44:18+00:00
I applaud their intent to be repairable, but would really like to see a commitment to open sourcing the software under specific conditions (time, EoL, acquisition, closing down, etc).

> “Is Knokke open, repairable, and long-term supported?”

> “Absolutely. We're committed to building a scanner that lasts decades. All schematics and repair manuals will be publicly available, replacement parts can be purchased directly, and the software will remain supported for as long as possible.”
by toast0 | 2025-11-11 20:44:24+00:00
> There is no technical limitation keeping you from serving HTTP traffic from Erlang/Elixir, but from my own experience it isn't a pleasant experience.

I would be interested in what was unpleasant? I've run inets httpd servers (which I did feel maybe exposed too much functionality), and yaws servers and yaws seems just fine. maybe yaws_api is a bit funky, too. I don't know the status of ACME integration, which I guess could make things unpleasant; when I was using it for work, we used a commercial CA, and my current personal work with it doesn't involve TLS, so I don't need a cert.

> you can probably even share Erlang's equivalent of file descriptors across servers (haven't tried, correct me if I'm wrong)

Ports are not network transparent. You can't directly send to a port from a different node. You could probably work with a remote Port with the rpc server, or some other service you write to proxy ports. You can pass ports over dist, and you can call erlang:node(Port) to find the origin node if you don't know it already, but you'd definitely need to write some sort of proxy if you want to receive from the port.
by jsnell | 2025-11-11 20:44:31+00:00
It seems like you might misunderstand what CVEs are? They're just identifiers.

This was a bug, which caused an exploitable security vulnerability. The bug was reported to ffmpeg, over their preferred method for being notified about vulnerabilities in the software they maintain. Once ffmpeg fixed the bug, a CVE number was issued for the purpose of tracking (e.g. which versions are vulnerable, which were never vulnerable, which have a fix).

Having a CVE identifier is important because we can't just talk about "the ffmpeg vulnerability" when there have been a dozen this year, each with different attack surfaces. But it really is just an arbitrary number, while the bug is the actual problem.
by turnsout | 2025-11-11 20:44:44+00:00
When it comes to the light source, it's a huge missed opportunity. The next wave of film scanning involves capturing Red, Green and Blue separately (separate narrow-band LEDs) to better isolate C-41 layers and counteract crossover on the image sensor. And yes, it should have an IR pass as well, for dust removal.

With that said, I'm happy to see new film products released in 2025/2026. Hopefully this is just the first at-bat.
by robocat | 2025-11-11 20:44:53+00:00
> went to a psychiatrist to be evaluated for ADHD

It almost sounds like you were anxious?

Anecdotally I see a high correlation between taking antianxiety meds and having health issues that require doctoring. Plus I see a lot of abnormal self-diagnosis of ADHD going on in my social circles.

Rationality is hard when it comes to labels.
by aaronrobinson | 2025-11-11 20:45:02+00:00
The philosophy resonates with me. I even built a spaced repetition app myself while in Brasil a couple of years ago. I started with lists based on things like kitchen stuff etc. you’ve inspired me to resurrect it.

By the way, it’s a bit slow - maybe you’re getting increased traffic from the HN post.

The submit button needs to deactivate after being pressed the first time otherwise you end up pressing it multiple times and it’s like that scene from Toy Story with all the Martians in the machine.

Good luck with it!
by johnnyanmac | 2025-11-11 20:45:10+00:00
It's a bit futile with the current structure. But if you really gave me the keys, I'd make sure we cut out Firefox to the properly nonprofit side of Mozilla. And then I'd probably have to fire a lot of people. Anything that isn't laser focused on improving the browser is slashed. No vpn services, no privacy services. It's a browser, with docs to maintain to keep a browser running. There's still too many problems to solve to branch out to more.

Monetization definitely isn't easy. It'd be a mix of donations, fundraising, and corporate deals that align with the mission. With a very lean team it should be sustainable, though. The goal is to become an objectively better experience than any other browser, and there's still a lot of jank to work on to achieve that.
by zahlman | 2025-11-11 20:45:30+00:00
> Not my job.

You implicitly claim (in a snarky way) that the actions taken against Mr. Peters were justified. So yes, it absolutely is your job, if you intend for others to take you seriously (https://duckduckgo.com/?q=burden+of+proof+philosophy).

> You're welcome to draw your own conclusions from the public record as I have.

I have. They oppose yours.

> The Foundation laid it out pretty clearly when they suspended him

No, they absolutely did not. The claims made by the Code of Conduct Work Group did not stand up to even basic scrutiny. I have already cited that link repeatedly within the thread, and contrasted it with Mr. Peters' analysis (https://tim-one.github.io/psf/crimes.html).

To take just one example, as an objective matter of fact, not only did he not "use" the "potentially offensive language or slurs" referred to, he did not even write them out. (Also, I disagree that the word in question is a "slur".) He also as an objective matter of fact did not claim that the skit was funny, but rather that SNL generally was funny in that time period. And even that claim had a clear ironic meaning; the underlying point was that social norms change over time, which was relevant to the discussion.

There is simply no way that any reasonable person who is paying attention could come to the conclusion that this was somehow endorsing the use of such language. The only reasonable underlying logic I can fathom for the objection is "when discussing an incident where someone used a naughty word, thou shalt not provide information that might assist the reader in figuring out what word it was". But I can't fathom a good moral reason for that, nor can I fathom a reading of the Code of Conduct which actually supports that.

I can make similar arguments about every single point on the list. The findings were utterly absurd, and the action unjust.

For that matter, in private discussion (as well as from some of what is said on the above-linked site) I have determined that Mr. Peters is in fact far more sympathetic to the social views of the Code of Conduct Work Group than I am. (I consider a large part of their expressed worldview to be frankly unjust and bigoted.)
by ryandrake | 2025-11-11 20:45:38+00:00
COVID should have been a slam-dunk country-uniting event, like 9/11. I didn't like GWB at all, but he and his staff managed to (briefly) unite Americans and get us all working in one basic direction[1]. If we actually had a respectable statesman in charge when COVID hit, we might have actually all come together to do the right thing. But, instead we had a belligerent clown who wasted no time before making it partisan and urging defiance and division. Absolute tragedy.

1: Unfortunately, that direction was a series of ridiculous overseas wars, but that's besides the point.
by elliotto | 2025-11-11 20:46:02+00:00
The title of the post is 'the kind of company I want to be a part of'. This presents a more abstract philosophical question of what one should do and how one should be. I clicked the article expecting a piece about social utility, intellectual stimulation, or the role of firms in an increasingly complex moral environment.

Instead the author posited a point about pluralizing nouns.

This is the Californian ideology - do not engage with fucking anything at all, because we're all getting rich off pluralizing nouns.
by tensor | 2025-11-11 20:46:07+00:00
Millions of people died from covid. It's not the flu. Vaccines don't just "maybe" reduce the impact, they DO reduce the impact. It's extremely well documented. Even now, with the milder strains of covid that are common, it still reduces your chance of hospitalization and death by 57%.

https://www.cbc.ca/news/canada/kitchener-waterloo/covid-effe...
by ta2112 | 2025-11-11 20:47:16+00:00
> that’s why CD music had a sample rate of 22000 Hz. Modern sound cards however tend to use sampling rates twice as high - 44100 Hz or 48000 Hz or even 96000 Hz.

Not exactly the point of the article, but this is all sort of wrong. CDs use a sample rate of 44.1 kHz per channel, not 22 kHz. I'd hazard this cuts down on rounding errors from having only one sample per 22kHz range. DAT used 48 kHz I believe to align evenly with film's 24 frames per second. 96 kHz is commonly used for audio today, and the additional accuracy is useful when editing samples without producing dithering artifacts within human hearing range.
by SR2Z | 2025-11-11 20:47:22+00:00
Google is a significant contributor to ffmpeg by way of VP9/AV1/AV2. It's not like it's a gaping maw of open-source abuse, the company generally provides real value to the OSS ecosystem at an even lower level than ffmpeg (which is saying a lot, ffmpeg is pretty in-the-weeds already).

As to why they bother finding these bugs... it's because that's how Google does things. You don't wait for something to break or be exploited, you load your compiler up with santizers and go hunting for bugs.

Yeah this one is kind of trivial, but if the bug-finding infrastructure is already set up it would be even more stupid if Google just sat on it.
by foltik | 2025-11-11 20:47:23+00:00
The “Telepathy Tapes” aren’t new information. They repeat a setup already tested under controlled conditions: facilitators know the answers and guide participants through non-telepathic cues, usually without realizing it. When those cues are blocked, the “telepathy” disappears. Scientists did the rational thing, tried to replicate the effect, and it failed.

Absence of evidence isn’t proof of absence, but when every controlled test comes up empty, that’s the result. You might as well call a magician’s card trick new evidence for magic.
by aborsy | 2025-11-11 20:47:31+00:00
I’m not sure if this is good advice.

The problem is that tech fashions and job market change rapidly every few years. And it takes a long time to specialize in an area. If you’re lucky and happen to be in the right place at the right time, sure, specialization works for you. Otherwise, there can be no job for you as a specialist. If you start early, who knows what the job market will look like a few years from now, let alone a couple of decades.

It’s a bad environment. It might be time for a universal income.
by jeroenhd | 2025-11-11 20:47:43+00:00
A lot of their research involves stuff they personally benefit from if they were secure. ffmpeg, libxml2, various kinds of mobile device firmware, Linux kernels and userspace components, you name it.

Their security team gaining experience on other projects can teach them some more diversity in terms of (malware) approaches and vulnerability classes, which can in turn be used to secure their own software better.

For other projects there's some vanity/reputation to be gained. Having some big names with impressive resumes publicly talk about their work can help attract talent.

Lastly, Google got real upset that the NSA spied on them (without their knowledge, they can't help against warrants of course).

Then again, there's probably also some Silicon Valley bullshit money being thrown around. Makes you wonder why they don't invest a little bit more to pay someone to submit a fix.
by ssalmon74 | 2025-11-11 20:47:50+00:00
Gravitational Pull" is the solution!

Instead of the "Collaboration Sucks" approach, we need to apply Gravitational Pull. For every key project, the Driver defines three essential stakeholders (e.g., Tech Lead, Business Owner, Target User) who form the "Quantum Sync Circle."

Everyone else is noise. This prevents endless discussions and focuses accountability right where it belongs.
by dean0x | 2025-11-11 20:48:08+00:00
just plug this in to your CLAUDE.md or AGENTS.md ;)

## Codebase Analysis **Before analyzing unfamiliar codebases**, use skim for efficient context: ```bash # Get architectural overview (60% reduction) skim src/ --mode structure # Get API surface (88% reduction) skim src/ --mode signatures # Get type system (91% reduction) skim src/ --mode types When to use: - First time exploring a repository - Understanding service architecture - Mapping API boundaries - Analyzing type relationships Install: npm install -g rskim or cargo install rskim
by coldtea | 2025-11-11 20:48:54+00:00
>It reminds me of when everyone was afraid of BPA

That's still the case.

>And what defines a “microplastic”? There’s so many different types of plastics that all have different effects on the body

It's not that hard to constrain it to synthetic organic polymers (aka plastics) that are small enough (smaller than 5.0 mm).

Even if there are some exceptions also considered plastics, this already covers 99% of the ones to worry about.

And the effects we worry about are from the presense of millions of hard synthetic micromaterials like that in the bloodstream, organs, and even the brain.

That's enough of a concern for the whole class, before we start to care about them "all having different effects on the body" (which is barely a given).
by culi | 2025-11-11 20:49:02+00:00
Not just Firefox. Safari doesn't have it either. Not usable in a professional context.

I've been following the bugzilla issue for it for years now but there hasn't been any real progress on it. I don't think it'll happen until we can get it to an interop.[0] Speaking of which, interop 2026 is still taking suggestions[1] and I don't see any proposal for these inputs

[0] https://wpt.fyi/interop-2025

[1] https://github.com/web-platform-tests/interop/issues?q=is%3A...
by thewebguyd | 2025-11-11 20:49:11+00:00
Now spec it with 32GB of RAM, and try to get a bulk discount for ordering 1,000 of them. Try to get the price of said 32GB M4 Airs down to ~$700/laptop or less.

Not going to happen with Apple.

No company that's big enough is paying sticker price for windows laptops.
by kevinob11 | 2025-11-11 20:49:20+00:00
"Instead of the "Collaboration Sucks" approach, we need to apply Gravitational Pull. For every key project, the Driver defines three essential stakeholders (e.g., Tech Lead, Business Owner, Target User) who form the "Quantum Sync Circle." - this sentence had me so freaked out with all of its buzz words, but man I think I really strongly agree with it. I love the inclusion of target user!
by necovek | 2025-11-11 20:49:22+00:00
As clearly stated, most users of ffmpeg are unaware of them using it. Even them knowing about a vulnerability in ffmpeg, they wouldn't know they are affected.

Really, the burden is on those shipping products that depend on ffmpeg: they are the ones who have to fix the security issues for their customers. If Google is one of those companies, they should provide the fix in the given time.
by jsnell | 2025-11-11 20:49:48+00:00
Security is adversarial. It doesn't matter whether the users intentionally use the vulnerable codec. What matters is whether an adversary can make the users to use it. Given the codec is compiled in by default on Ubuntu, and given that IIUC the bug would already be triggered by ffmpeg's file format probing, it seems pretty likely that the answer to that is yes.
by johnnyanmac | 2025-11-11 20:49:56+00:00
If there's anything that the Steam and Apple cult has taught me, it's that people will forgive a LOT as long as they feel like they are being appealed to. Both companies had their fair share of culture war issues, but it's water off a ducks' back as long as they respond fast, offer a basic apology, and then continue to push out exciting features.

Mozilla has had 13 years to do that post Eich and they just don't. Every step forward has an asterisk to it if you dig a little.
by notatoad | 2025-11-11 20:51:03+00:00
>In diseased tissue samples of people with chronic illnesses (IBD [6], Dementia [7], heart disease [8]), microplastic prevalence is significantly higher than healthy tissue.

this is very much not the same thing as "microplastics cause chronic illness", even though it's worded in a way that clearly wants to make you think that.
by dragonwriter | 2025-11-11 20:51:06+00:00
> Some Americans do think that the Electoral College is not that democratic.

"democratic" and "elected" are entirely different adjectives.

The system for electing the US President is very much not democratic, and still the President is very much elected. (Though its less undemocratic than it used to be, when the electors themselves were not generally directly elected by the voters.)

There are indirect elections that are reasonably demoocratic despite being indirect (the PM in some, but not all, parliamentary systems), there are elections that aren't based on anything like a general citizenry at all—e.g., Papal elections. For a leader to be elected is certainly not a sufficient condition for their position to be held democratically (it may be a necessary condition, though.)
by raincole | 2025-11-11 20:51:13+00:00
> Is the science not clear enough yet

No.

https://www.nature.com/articles/d41586-025-00405-8

(https://web.archive.org/web/20250211144614/https://www.natur... if you need)

https://pubmed.ncbi.nlm.nih.gov/39900298/
by zrn900 | 2025-11-11 20:51:16+00:00
> You've voted for the people who elect the European Commission

And they 'magically' approved a short list of US-lobby-backed unelected personas for leadership positions, who are pushing everything ranging from the chat control law to this privacy-killing 'deregulation', while ruining Eu's trade relationships with everyone from China to Africa to boot.
by isr | 2025-11-11 20:51:55+00:00
Well, to continue that timeline. "Big Tech" freezes their version to the last gpl'ed version, and each commences their own (non-trivial effort) to make their own version (assuming the last gpl'ed version was not feature-complete for all their future uses).

And of course, they won't share with each other. So another driver would be fear of a slight competitive disadvantage vs other-big-tech-monstrosity having a better version.

Now, in this scenario, some tech CEO, somewhere has this brilliant bright spark.

"Hey, instead of dumping all these manhours & resources into DIYing it, with no guarantee that we still won't be left behind - why don't we just throw 100k at the original oss project. We'll milk the publicity, and ... we won't have to do the work, and ... my competitors won't be able to use it"

I quite like this scenario.
by wolfgang000 | 2025-11-11 20:51:55+00:00
I don't want to look at my iPhone every time I need to unlock it, for example, when I am riding my motorbike, the helmet would block my face. This isn't a problem when I use Touch ID because I can use fingerless gloves. Another case is when I need to discreetly check my phone for a moment, like when I am in a meeting or a dinner.

I don't have anything against Face Id, BUT I just don't see why they eliminate the sensor and remove the option.