MurphyA/hacker-news huggingface dataset:
by thrance | 2025-11-24 18:01:22+00:00
I don't know of any left-wing oligarchs. That almost sounds like an oxymoron. Don't get trapped in bothsideism or enlightened centrism, one sides is that much more aggressive with the lies and hate.

As for the crime stat, you can always control for such things, to an extent. If we can't trust the official statistics office, then what should we base our policies off? Vibes? There are certainly things to improve with how the stats are collected and used, but you can't just go around telling everyone they're useless and providing no alternatives.
by bpavuk | 2025-11-24 18:01:28+00:00
wait, I short-circuited here. wasn't the very concept of "libraries" created to *not* have to think about what exactly the code does?

imagine reviewing every React update. yes, some do that (Obsidian claims to review every dependency, whether new or an update), but that's due to flaws of the ecosystem.

take a look at Maven Central. it's harder to get into, but that's the price of security. you have to verify the namespace so that no one will publish under e.g. `io.gitlab.bpavuk.` namespace unless they have access to the `bpavuk` GitLab group or user, or `org.jetbrains.` unless they prove the ownership of the jetbrains.com domain.

Go is also nice in that regard - you are depending on Git repositories directly, so you have to hijack into the Git repo permissions and spoil the source code there.
by boh | 2025-11-24 18:01:30+00:00
This is bigger deal than it seems. Risk bureaucracies are hugely influential in terms of how companies/debt/equity is valued. They also tend to grow over time. This is probably a huge growth opportunity for insurance and a rock solid growth ceiling for AI use in certain industries. This is also not something that will go away. There is pretty much no political maneuvering or marketing or industry growth that will suppress it. This will lead to forced AI disclosures and insurance defined best practices that will likely not allow "hands-off" AI output without user sign off. Paradoxically this might create a moat for bigger AI firms who can keep up with the requirements.
by specialist | 2025-11-24 18:02:27+00:00
No surprise to us geeks, of course. "On the Internet, nobody knows you're a dog" and all that.

The big surprise (disappointment) to me was witnessing how "do your own research" looks in practice.

- Type in some search terms. - Open handful of the top hits. - Believe everything. - Even the obvious scams & ads.

There's something about media that bypasses most adult's innate skepticism. Like if I told some stranger (IRL) that saffron cures baldness, they'd be all GTFO. But hear it from a talk show host or read it on Facebook, well shit, it must be true.
by dehugger | 2025-11-24 18:02:41+00:00
why would old code be worth less? to me its a great achievement for a codebase to maintain stability and usability over a long timespan.

if you venture even five feet into the world of enterprise software (particularly at non tech companies) you will discover that fifteen years isnt a very long time. when you spend many millions on a core system that is critical to your business you want it to continue working for many, many years.
by BrainScroller | 2025-11-24 18:02:45+00:00
Hi everyone, I built BrainScroller because I noticed most of us don’t have a problem with screen time — we have a problem with what we feed our minds.

The app uses the same swipe we’re addicted to, but instead of random dopamine hits it delivers curated learning feeds: philosophy, history, science, world news, etc. You scroll like social media, but you keep knowledge like an encyclopedia.

This started as a personal experiment to fix my own doomscrolling habit, and it slowly turned into something real. I’m still learning a lot and improving it, and I’d love feedback from this community (especially about onboarding, feed quality, and monetization).

Happy to answer anything and show the backend if useful. Thanks!
by stOneskull | 2025-11-24 18:03:27+00:00
> "I loved my nerdy tinkering indoors so my kids must have their own Linux box by the age of 5" (instead of playing outside)

if you give them an amiga 500 with floppies (or even worse, a c64 with a datasette) i'm sure they'll be playing outside as much as they can.
by xoxxala | 2025-11-24 18:03:40+00:00
According to this survey:

"The median income of full-time self-published authors in 2022 was $12,800 from books and $15,000 total from all author-related activities. Full-time self-published authors who had been publishing since at least 2018 reported a median income of $24,000 compared to $13,700 in 2018, a 76 percent increase."

Traditionally published commercial authors made about $10,000 more.

https://authorsguild.org/news/key-takeaways-from-2023-author...
by rtkwe | 2025-11-24 18:04:02+00:00
I wish they had included it as part of the RealID system. It would have been pretty easy to make them smart cards that could use simple public private key tech to verify IDs. Private keys go into the cards and public keys get registered with the state agency issuing the IDs. It's not perfect but it'd at least be a pseudonymous way to verify ID possession.
by pixl97 | 2025-11-24 18:04:06+00:00
While these methods may be helpful for the moment, there is no reason to think the model won't be able to train past it far faster than your average user will figure out how not to be plagued with problems caused by these methods.

In some ways we're reaching the 'game over' stage where models converge on human like input understanding, in which the only way to beat the models is to make it illegible to humans.
by perihelions | 2025-11-24 18:04:19+00:00
I didn't read it[0] as being particularly nuanced. I thought it was a fact-loose, extremist hitpiece against FOSS, containing howlers such as

> "Particularité de GraphèneOS : on peut se le procurer autant sur le darknet que sur des sites grand public." ⇒ "A distinctive feature of GrapheneOS is that it can be obtained both on the darknet and on mainstream websites."

Quoting "both sides" (so to speak) doesn't automatically create a thoughtful dialog.

[0] https://archive.is/20251119082524/https://www.leparisien.fr/... (tr. "Google Pixel and GrapheneOS: drug traffickers' secret weapon for protecting their data from the police")
by VAC-AGI | 2025-11-24 18:04:55+00:00
This is a crucial clarification about the architecture.

The MCA algorithm does not perform the majority of document retrieval; it is merely a mechanism that complements FAISS and BM25 for greater coverage. My system uses a truly hybrid retriever:

FAISS (with BGE-large-en-v1.5, 1024D) handles the primary retrieval load, pulling 60%+ documents.

MCA acts as a specialized gate. The logic is: if two retrievers miss the ground truth (GT), the third one catches it. They complement each other—what FAISS misses, MCA finds.

Pipeline Magic: Despite this aggressive union coverage (which often exceeds 85% documents), the reranker plays an equally critical role. The ground truth (GT) doesn't always reach the top 15, and the final LLM doesn't always grasp the context even when it's present. All the magic is in the deterministic pipeline orchestration.

LLM Agnosticism: The LLM (gpt-4o-mini) is only involved in the final answer generation, which makes my system highly robust and LLM-agnostic. You can switch to a weaker or stronger generative model; the overall accuracy will not change by more than ±10.
Show HN: Explore what the browser exposes about you
by coffeecoders | 2025-11-24 18:05:08+00:00
I built a tool that reveals the data your browser exposes automatically every time you visit a website.

GitHub: https://github.com/neberej/exposedbydefault

Demo: https://neberej.github.io/exposedbydefault/

Note: No data is sent anywhere. Everything runs in your browser.
by izacus | 2025-11-24 18:05:30+00:00
One thing though is - knives, fast cars and cash aren't built with deliberate motivation of thwarting the law enforcement and criminal investigations.

GrapheneOS and its systems are - you can walk through history and see that they're deliberately working on systems that defeat law enforcements efforts of collecting data from seized devices and tracking criminal networks.

This is a massive difference - even for knives and cars, you'd get into some hot water (or outright illegal behaviour) if you build them with express purpose to make them hard to find and track by law enforcement. Try making a company that focuses on cars that hide its license plates from the police and you'll see how far that will go.

This is one thing that GrapheneOS, Signal and others will need to at some point reckon with - the fact that they deliberately work at making law enforcements work harder and provide effective cover for criminals will get them into hot water. And I don't think population will stand at their side when they find that they've been helping CSAM traffickers hide their loot.

Having all that anti-governmental rhethoric won't end well for longerm survivability of these projects - which sucks for all of us.
by flag_fagger | 2025-11-24 18:05:42+00:00
> Really? Such as? Because if what you care about is the child, the child's future, even in absurdly extreme cases birth parents turn out to be better

Yeah, I’m sure people I know who were raped as children, abused and prostituded by drug addict parents and watched their siblings die from said drugs would have been immensely worse off away from pedophiles and drug addicts.

Although, at the very least, perhaps we can accept forced sterilization for such people. At the least keep it from expanding.
by graemep | 2025-11-24 18:05:49+00:00
What you quote is for "walking or cycling".

I would favour walking. Its far easier to get people to do it and most people can do it. A lot of infrastructure already exists and its cheaper and easier to improve.

If you provide reasonably public transport its far easier to walk. I drive into town, then park and walk, where I currently live because busses are infrequent. I never even owned a car in London because it has good public transport (to be fair, I probably would have if I lived in a suburb and had kids).
by locknitpicker | 2025-11-24 18:05:50+00:00
> It makes me sad that to get these scalability numbers requires some secret sauce on top of spanner, which no body else in the k8s community can benefit from.

I'm not so sure. I mean, everything has tradeoffs, and what you need to do to put together the largest cluster known to man is not necessarily what you want to have to put together a mundane cluster.
OreNPMGuard v2.0.0 – OSS for Shai-Hulud 2.0 NPM supply chain attack
by ahsansmir | 2025-11-24 18:06:07+00:00
Shai-Hulud 2.0 emerged in November 2025, compromising 738 npm packages and affecting 25,000+ repositories. This is an evolution of the September 2025 attack with new attack vectors:

- Uses `preinstall` hooks (executes earlier than `postinstall`) - Creates malicious GitHub workflows with self-hosted runners - Attempts Docker privilege escalation - Targets multi-cloud credentials

OreNPMGuard v2.0.0 detects both the original and 2.0 variants, scanning for: - 1,291 unique compromised package@version combinations - Malicious hooks, payload files, GitHub workflows - Docker privilege escalation patterns - All known IoCs

Available in Python and Node.js, with GitHub Actions integration.

GitHub: https://github.com/rapticore/OreNPMGuard Threat research: https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack

If you've installed any affected packages, rotate your credentials immediately.
by pomatic | 2025-11-24 18:06:23+00:00
I had a Naida, now have a Marvel. The difference is night and day. The Marvel is hands-down the best hearing setup I have ever had (I am mid 50's, have worn aids of one type or another since I was 3 yo). Bluetooth is a game changer. The Roger On is fabulous in meetings and with computers (it appears as a USB sound device, it's far more reliable than BT for that). Battery life is fantastic, it lasts more than a day, and there's a fall back to disposable cells if required. Mobile app is a bit 'meh', but the rest is so good I can't complain!
by ed_blackburn | 2025-11-24 18:06:23+00:00
After 2008, others pressed Keynesian stimulus. The UK chose Hayek. Austerity. Councils took the hit. Services vanished. Early-years centres. Youth work. Local welfare. The safety net thinned, then tore. Families slipped through.

Then Covid. Then Ukraine. Prices surged. Wages didn’t. A decade of inflation stacked up while pay stood still. For many, that was a silent pay cut.

Truss turned strain into crisis. Unfunded tax cuts. Markets panicked. Gilt yields spiked. Mortgage costs jumped overnight. Another blow to households already on the edge.

So we end up where CNN reports: record child poverty, even among full-time workers; parents unable to cover the basics as the social architecture collapses.

Into that anger steps Reform UK. They offer a protest vote. But their plan is the same old mix: deep cuts, a smaller state, and migration as the scapegoat. The very recipe that helped bring us here.

Send help :-(
by basilgohar | 2025-11-24 18:07:00+00:00
It's something I was discussing with a friend of mine. It's very easy to spend money in the US. It's very hard to save money. We reduce friction to consumption, but we put barriers on savings. It's also just simply skipped in school. We don't teach fiscal responsibility to most kids but they are bombarded on TV nonstop with calls for consumerism and even associating that with quality of life and people. I'm not saying they're justified in wasting their money on conspicuous spending, but it's not just solely irresponsibility. There's a whole chain of bad situations that leads to the irresponsible behavior. Good mentorship when young, good parenting, good education, these all make major differentiations and none of which have to do with the individual but everything to do with the environment they grew up in, which they did not choose. By the time they are adults, there's little choice left for them to make. Why not do something that brings immediate gratification? They can't afford to move to a better place, so they choose something that makes them feel good, at least for the short term.

I neither agree nor defend this, but I am posting just to say, it's more complicated than them being just leeches on society, like I think some comments are implying. Forgive me if I'm wrong in my assumption, but I see the argument so much without so much as a bare-minimum attempt to try to understand the others' situation.
by giobox | 2025-11-24 18:07:36+00:00
I had to go and read the docs to confirm this was true, I'm really surprised this has been removed (since Raspian Bookworm apparently). It was a ridiculously common way to configure wifi on RPis over the last decade!

It's the little paper cuts like this that really hurt on a platform who's original aims were to target the education market, there is still a mountain of tutorials online advising to drop in that file for wifi setup.
by pimterry | 2025-11-24 18:08:01+00:00
In the end, wasn't EncroChat a larger problem for the criminals than the governments?

Once it became a big enough target it got taken down, and then quietly run by the police who collected everybody's messages for months before triggering a huge round of arrests, including quite a bit of major organized crime across Europe. The dangers of centralization. They'd love another EncroChat!

Doesn't apply so much to GrapheneOS of course since they're not in the messaging platform market, but it's definitely a cautionary tale.
by teo_zero | 2025-11-24 18:08:10+00:00
Well done!

My remarks:

1) in calloc() you correctly check size*n against SIZE_MAX, but in multiple other spots you don't check size+META_SIZE.

2) the field is_mmap is useless: it can be replaced by (size>=MMAP_THRESHOLD) practically everywhere. The only corner case where this doesn't work is a large block initially backed by mmap() that's then shrunk via realloc() to under the threshold. But realloc() has other inconsistencies anyway, see next point.

3) realloc() shows the signs of a refactoring gone wild. The first if on block->size lacks a test on is_mmap, as split_block() doesn't seem to do the right thing with mmapped blocks...

4) free_list does not in fact track free nodes, as its name suggests, but all nodes, whether they are free or not. Wouldn't it be better to add a node to the list only when it's freed? I leave to you to iron out all the corner cases!
by 0xbadcafebee | 2025-11-24 18:08:27+00:00
Graphene shouldn't have to reckon with the abuse of government, we should step in and speak up for them. If having a secure device becomes criminal, only the criminals will have secure devices.

Law enforcement is being lazy by trying to rely on mass surveillance rather than espionage tactics to catch criminals. Criminals learned long ago how to work around surveillance, so this doesn't really work on them. But it does subject the public citizen to undue scrutiny and violation of privacy, which history has shown is then used against the innocent. We don't need any more reminders of how popular authoritarianism has become. And it's often used to pin a crime on an innocent person (a common police controversy), or intimidate and harass them (see FBI).

> I don't think population will stand at their side when they find that they've been helping CSAM traffickers hide their loot.

This is just one of many examples of a false rhetoric used by politicians to manipulate the public into cow-towing to mass surveillance. We cannot stand for this and must fight it at every turn. "Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety."
by hinkley | 2025-11-24 18:08:29+00:00
CI fights this. But that’s peanuts compared to feature branches and nothing compared to lack of a monolith.

We had so many distinct packages on my last project that I had to massively upgrade a tool a coworker started to track the dependency tree so people stopped being afraid of the release process.

I could not think of any way to make lock files not be the absolute worst thing about our entire dev and release process, so the handful of deployables had a lockfile each that was only utilized to do hotfix releases without changing the dep tree out from underneath us. Artifactory helps only a little here.
Show HN: I built an interactive map of jobs at top AI companies
by kalil0321 | 2025-11-24 18:08:41+00:00
I built a live interactive map that shows where top AI companies hire around the world. I collected this data for a hackathon project. Many ATS providers have a public API that you can hit with the slug of the companies to get open jobs. The hardest part was finding the companies. I tried Firecrawl but it returned around 200 companies per provider which wasn’t enough for me. Then, I tried SERPAPI but it was expensive. I ended up using SearXNG to discover companies by ATS type and fetch their job postings. This produced a large dataset of 200k+ jobs (I only use a subset as it would have taken too much time processing). A few days ago, I decided to build a visualization of the data as I didn’t know what to do with it and wanted people to benefit.

I kept catching myself wanting to ask simple questions like “show only research roles in Europe” or “filter for remote SWE positions” (and had plenty of free ai credits) so I added a small LLM interface that translates natural language into filters on the map.

The map is built with Vite + React + Mapbox. Live demo: https://map.stapply.ai GitHub (data): https://github.com/stapply-ai/jobs

Would love feedback, ideas for improvement, or contributions.
by csallen | 2025-11-24 18:08:54+00:00
This is the fixed pie policy, which assumes there's a limited amount of wealth to go around. And therefore, any time somebody gets "too much" of it, the conclusion is they must be why others have less.

This is not true.

And it's important to understand that it's not true, because understanding a problem is the key to helping solve it.

In pre-agricultural times, the average person was lucky to own a few dozen items. Today, the average person in a developed Western country owns a few thousand goods. Western households possess over 100,000 goods on average. There's vastly more wealth than ever. Especially if you multiply these numbers by the massively expanded population of Earth compared to prehistoric times.

Therefore, it's necessarily the case that wealth can be created and not merely stolen or shared.
by martin-t | 2025-11-24 18:09:27+00:00
A threat is not a debate.

But really, the point GP was trying to make (IMO) is that all western democracies are very obviously sliding towards authoritarianism. They are building tools which, even _if_ they don't abuse them now, will be available to any future government and with time, the probability of one of them being non-democratic is 1.
by csallen | 2025-11-24 18:09:40+00:00
Both. Today's rich are wealthier than the rich of the past, but today's poor are also wealthier than the poor of the past.

It's also the case that quality of life differences have shrunk between the two groups, not because life has worsened for the rich, but because it's improved for the poor. Bill Gates' car, music, TV shows, phone, pants, meals, etc. aren't that much better than the average person's, today.
by kelseyfrog | 2025-11-24 18:09:41+00:00
The Oatmeal gave it away in the first 10%. If you like it until you find out it's AI, then it's not about the art, it's about the viewer, their judgement, preference, and opinion, not something intrinsic to the piece.

That's fine, but every attempt to then justify that judgement, preference, or opinion, in a way that does reflect an intrinsic aspect of the piece is a lie, a post hoc rationalization that cannot withstand the simple fact that it was liked as a thing in itself before it's story of creation was known.
by ncr100 | 2025-11-24 18:09:41+00:00
I'm unsure whether it's appropriate to trust Le Parisien's equivalencies.

Q: Do they have a track-record of intellectual honesty?

Equivalencies are powerful, and dangerous if mis-handled.

E.g. this is worrying [from the article]: "A unique feature of GrapheneOS is that it can be obtained both on the dark web and on mainstream websites." Le Parisien is calling out GrapheneOS's availability on the "Dark Web" as significant, in the context of "Drug Trafficker's Secret Weapon". Banned books can also be acquired on the Dark Web, and banned books are not illegal, yet, in mainstream democracies. So Le Parisien's equivalency, here, is misleading.
by zahllos | 2025-11-24 18:10:10+00:00
Sure. I'm not American either. I agree, maximum scrutiny is warranted.

The thing is these algorithms have been under discussion for quite some time. If you're not deeply into cryptography it might not appear this way, but these are essentially iterations on many earlier designs and ideas and have been built up cumulatively over time. Overall it doesn't seem there are any major concerns that anyone has identified.

But that's not what we're actually talking about. We're talking about whether creating an IETF RFC for people who want to use solely use ML-KEM is acceptable or not - and given the most famous organization proposing to do this is the US Federal Government it seems bizarre in the extreme to accuse them of backdooring what they actually intend to use for themselves. As I said, though, this does not preclude the rest of the industry having and using hybrid KEMs, which given what cloudflare, google etc are doing we likely will.
by peppersghost93 | 2025-11-24 18:10:59+00:00
You should consider touring Appalachia, especially eastern Kentucky. The poverty there will make you think you're in a third world country.

https://www.ohchr.org/en/press-releases/2018/06/contempt-poo...

I grew up in this area. My parents didn't have electricity until they were teenagers. (I'm 32 for reference.)