MurphyA/hacker-news huggingface dataset:
by somenameforme | 2025-11-25 18:58:48+00:00
You have yet to offer a single coherent counter-argument or explanation. Rather you are wildly flailing with seemingly endless weak claims that mean nothing. Like here if I look it up and the ad spend was indeed growing at somewhere in the ballpark of their numbers (since their predictions are obviously going to align with trends), are you going to change your opinion? Obviously not, no more than you're going to change your opinion after realizing that a 3% decline in satisfaction was indeed a lot, or that the study did indeed make some significant effort to demonstrate causality.

Or now if you learn that economies, especially European, grow dramatically slower [1] than you seem to think, are you going to change your opinion? No, because once again you're not making a logical or rationale argument whatsoever, but behaving like somebody on the defensive desperately trying to argue against something but having no foundation beyond the dislike of a seemingly inescapable conclusion.

[1] - https://www.macrotrends.net/global-metrics/countries/euu/eur...
by NitpickLawyer | 2025-11-25 18:58:57+00:00
Because it misses the point. The problem is not the model being in a cloud. The problem is that as soon as "untrusted inputs" (i.e. web content) touch your LLM context, you are vulnerable to data exfil. Running the model locally has nothing to do with avoiding this. Nor does "running code in a sandbox", as long as that sandbox can hit http / dns / whatever.

The main problem is that LLMs share both "control" and "data" channels, and you can't (so far) disambiguate between the two. There are mitigations, but nothing is 100% safe.
by rlupi | 2025-11-25 18:59:14+00:00
A CloudFlare tunnel?

https://developers.cloudflare.com/cloudflare-one/networks/co...

Although, you may also go with a 5$ virtual host (e.g. Linode Nanode 1 GB) and wireguard to build your own tunnel (or just the 5$ virtual host to run your server)
by agentifysh | 2025-11-25 18:59:16+00:00
For instance does the wife take care of all the house chores, raising children, requiring you to participate in all activities?

I guess it really depends on the individual but Japanese definitely still seem more focused on those traditional role separations (although both couples working seem more common), Koreans used to but recent decades have become more "liberal progressive" leading to conflicts with an economy largely kept afloat by 8~10 companies and its not uncommon for some men to still manage household stuff even after their jobs and this is what I heard also to be true for Taiwanese households.

I'm not sure about Mainland but there has been shifts in these regions owing to Western media and values coinciding with lower birth rates vs areas where the traditional husband-wife roles are still intact (and also by happence more economically better off vs singles/divorced/progressive couple relationships).
by steveklabnik | 2025-11-25 18:59:40+00:00
A compiler could disambiguate, but the goal is to have parsing happen without knowing if A is a type or a variable. That is the inappropriate intertwining of parsing and semantics that languages are interested in getting away from, not continuing with.

Anyway, just to be clear: not liking the turbofish is fine, it's a subjective preference. But it's not an objective win, that's all I'm saying. And it's only one small corner of Rust's syntax, so I don't think that removing it would really alleviate the sorts of broad objections that the original parent was talking about.
by rdtsc | 2025-11-25 18:59:55+00:00
They basically advocate using R. I think it depends what they mean by "data science" and if the person will be doing just data science. If that's the case then R may be better. As in their whole career is going to built on that domain. But let's say they are on a general computer science track, now they'll probably benefit from learning Python more than R, simply because they can use it for other purposes.

> Either way, I’ll not discuss it further here. I’ll also not consider proprietary languages such as Matlab or Mathematica, or fairly obscure languages lacking a wide ecosystem of useful packages, such as Octave.

I feel, to most programming folks R is in the same category. R is to them what Octave is to the author. R is nice nice, but do they really want to learn a "niche" language, even if it has better some features than Python? Is holding a whole new paradigm, syntax, library ecosystem in your head worth it?
by paddleon | 2025-11-25 18:59:56+00:00
> R is perhaps the closest, because it has data.frame as a 'first class citizen', but most people don't seem to use it, and use e.g. tibbles from dplyr instead.

You're forgetting R's data.table, https://cran.r-project.org/web/packages/data.table/vignettes...,

which is amazing. Tibbles only wins because they fought the docs/onboarding battle better, and dplyr ended up getting industry buy-in.
by magicalhippo | 2025-11-25 19:00:03+00:00
Well I strongly disagree on that point.

Just because we're in the infancy of wide HDR adoption and thus experience some niggling issues while software folks work out the kinks isn't a good reason to just wholesale forego the feature in such a crucial piece of infrastructure.

Sure, if you don't want HDR in the browser I do think there should be a browser option to let you achieve that. I don't want to force it on everyone out there.

Keep in mind the screenshot you showed is how things looked on my Windows until I changed the auto-HDR option. It wasn't the browser that did it, it was completely innocent.

It was just so long ago I completely forgot I had changed that OS configuration.
by andrew_gs | 2025-11-25 19:00:09+00:00
I have 10 year old twin boys, they play roblox with their friends from school, and they have a lot of fun. Importantly though they don't use the in-game chat, they fire up a group voice call on messenger kids and chat to each other through that while playing their games.

They play in the lounge and I can keep a bit of an eye on what they're doing.

Most of roblox is a trash fire, but there a couple of games that seem pretty fun when used as an activity for the kids to get together and chat and play.
Show HN: Secure private diffchecker with merge support
by subhash_k | 2025-11-25 19:00:28+00:00
Built a minimal diff checker with merge feature.

1. Supports 25K+ lines.

2. Character level instant diff.

3. Diff merge feature.

4. Share able links.

5. 100% secure, all diff computation happens in browser.

No other website offering high quality diff checker and merge feature with just browser only implementation.

Please review the website in detail and share feedback.
by BizarroLand | 2025-11-25 19:00:44+00:00
Holy crap.

I bought right after this curve hit, like the day after. I went into Microcenter for a new PC w/64gb ddr5. The day before, their kits were ~$189. The day I bought they were $360. Now the same kit on Newegg is $530.

It's been 2 weeks.
by AlexandrB | 2025-11-25 19:01:00+00:00
> Not possible for things like transport infrastructure

It depends what you define as a system. Arguably a lot of transport infrastructure is a bunch of small systems linked with well-understood interfaces (e.g. everyone agrees on the gauge of rail that's going to be installed and the voltage in the wires).

Consider how construction works in practice. There are hundreds or thousands of workers working on different parts of the overall project and each of them makes small decisions as part of their work to achieve the goal. For example, the electrical wiring of a single train station is its own self-contained system. It's necessary for the station to work, but it doesn't really depend on how the electrical system is installed in the next station in the line. The electricians installing the wiring make a bunch of tiny decisions about how and where the wires are run that are beyond the ability of someone to specify centrally - but thanks to well known best practices and standards, everything works when hooked up together.
by ArcHound | 2025-11-25 19:02:04+00:00
Who would have thought that having access to the whole system can be used to bypass some artificial check.

There are tools for that, sandboxing, chroots, etc... but that requires engineering and it slows GTM, so it's a no-go.

No, local models won't help you here, unless you block them from the internet or setup a firewall for outbound traffic. EDIT: they did, but left a site that enables arbitrary redirects in the default config.

Fundamentally, with LLMs you can't separate instructions from data, which is the root cause for 99% of vulnerabilities.

Security is hard man, excellent article, thoroughly enjoyed.
by nashashmi | 2025-11-25 19:02:06+00:00
Looking at example 5:

:root { --color: blue; } div { --color: green; } #alert { --color: red; } * { color: var(--color); } <p>I inherited blue from the root element!</p> <div>I got green set directly on me!</div> <div id='alert'> While I got red set directly on me! <p>I’m red too, because of inheritance!</p> </div>

Excuse my negativity, but this is messed up. I am trying to rationalize whyyyy???.

It seems every object is given variables (--abc). And then there are global variables and local variables. I guess this is the "cascading" feature. var is a function computed at the time of instantiation. And refers to local variables first. Then looks at global variable. Inheritance comes from ?? The p tag seems it is not root so therefore it is not blue.

Having explained it, I think about it better, but this really messes up how I thought of CSS. CSS is where the second stanza overwrites the first stanza. Yet global and local variables really hurts my head. A few complex CSS files later, it is bound to be unusable to determine result without getting a computer program to help.
by rogueparitybit | 2025-11-25 19:02:16+00:00
It uses the existing FF container functionality, so uBlock should not be affected. I also use uBlock and haven't noticed anything bizarre. Maybe you just used YouTube right before a necessary update to uBlock's filters got loaded.

Regarding login, it's a struggle with any container addon. But I like how this one makes it easier. It streamlines it a bit because you can right click the page and go to Auto Containers -> Exclude tab from domain exclusions, then login as normal and add each intermediate domain to the container's URL patterns. It would be nice if the dev could add a way to record all intermediate domains and add them at the end; sometimes I miss one or two due to an auto-redirect.
by inanutshellus | 2025-11-25 19:02:33+00:00
I don't think it's as-different-as-it-used-to-be for men and women now but I agree with the sentiment.

Becoming an engaged father shifted my perspective on who I am, changed opinions on societal matters, and made me feel like the person I was -- despite, from a young age, spending non-trivial amounts of time on contemplating morality and society and considering myself as a youth to be "mature for my age" -- was a selfish git.

I went from "c'mon what's the harm"-ing naysayers to "HEY think big picture! LONG term!" on SO many aspects of life.

The man I was would not get along with the father I am.

Your statement won't be popular, but I agree that, statistically-speaking, it's an overt intellectual "next stage".
by stevenjgarner | 2025-11-25 19:02:50+00:00
Did some research on the yields of the nuclear weapons placed in Cuba during the Cuban Missile Crisis which apparently are now well-known, largely due to information released by Soviet officials and military historians in the decades following the Cold War (specifically in the early 1990s).

While the United States was unaware of the sheer number of warheads at the time (estimating far fewer or none operational), it is now confirmed that approximately 158 nuclear warheads were on the island.

The yields for these specific weapon systems were as follows:

1. Strategic Ballistic Missiles These were the weapons that triggered the crisis—long-range missiles capable of striking deep into the continental United States.

a) SS-4 Sandal (R-12) Missiles

Yield: ~1 Megaton (1,000 kT)

Status: There were roughly 36 to 40 of these missiles in Cuba. The warheads were present and could have been mated to the missiles within hours. A 1 MT explosion is roughly 60–70 times more powerful than the bomb dropped on Hiroshima.

b) SS-5 Skean (R-14) Missiles

Yield: ~1 to 2.3 Megatons (1,000–2,300 kT)

Status: The nuclear warheads for these missiles did arrive in Cuba, but the missiles themselves were blocked by the quarantine (blockade) and never reached the island.

2. Tactical (Battlefield) Nuclear Weapons This is the category that most alarmed historians and officials when it was revealed in the 1990s. The U.S. did not know these were present or operational. If the U.S. had invaded (as was being debated), local Soviet commanders had pre-delegated authority (later rescinded) to use these against American landing forces.

a) FKR-1 (Meteor) Cruise Missiles

Yield: 5 to 14 Kilotons (kT)

Status: There were approximately 80 of these warheads. These were ground-launched cruise missiles intended for coastal defense and could have been used to strike the U.S. Naval Base at Guantanamo Bay or incoming amphibious fleets.

b) Luna (FROG) Artillery Rockets

Yield: 2 Kilotons (kT)

Status: There were 12 of these warheads. These were short-range battlefield rockets intended to destroy troop concentrations on the beachheads.

c) IL-28 "Beagle" Bombers

Yield: ~28–30 Kilotons (kT)

Status: There were 6 nuclear bombs (likely the RDS-4 type) specifically for these light bombers. The aircraft were capable of striking targets in Florida or regionally.

[1] https://www.tandfonline.com/doi/full/10.1177/009634021246436...

[2] https://history.state.gov/historicaldocuments/frus1961-63v10...

[3] https://www.atomicarchive.com/history/cuban-missile-crisis/m...

[4] http://www.cubanmissilecrisis.org/background/frequently-aske...

[5] https://nsarchive.gwu.edu/briefing-book-special-exhibit/cuba...

[6] https://www.cfr.org/blog/twe-remembers-secret-soviet-tactica...

[7] https://nsarchive2.gwu.edu/NSAEBB/NSAEBB449/

[8] http://history.state.gov/milestones/1961-1968/cuban-missile-...
by crote | 2025-11-25 19:02:50+00:00
> Name one Rust realworld app older than 5 years that is in this category.

Your "older than 5 years" requirement isn't really fair, is it? Rust itself had its first stable release barely 10 years ago, and mainstream adoption has only started happening in the last 5 years. You'll have trouble finding any "real-world" Rust apps older than 5 years!

As to your actual question: The users of Ferrocene[0] would be a good start. It's Rust but certified for ISO 26262 (ASIL D), IEC 61508 (SIL 4) and IEC 62304 - clearly someone is interested in writing mission-critical software in Rust!

[0]: https://ferrocene.dev/
by tptacek | 2025-11-25 19:03:10+00:00
No, what I'm saying has only to do with the substance of his claims, which I now think you don't understand, because I laid them out straightforwardly (I might have been wrong, but I definitely wasn't making a tone argument) and you came back with this. People actually do work in this field. You can't just bluster your way through it.

This is a "challenge" with discussing Bernstein claims on Hacker News and places like it --- the threads are full of people who know two cryptographers in the whole world (Bernstein and Schneier) and axiomatically derive their claims from "whatever those two said is probably true". It's the same way you get these inane claims that Kyber was backdoored by the NSA --- by looking at the list of authors on Kyber and not recognizing a single one of them.

What do you think about Bernstein's arguments for SNTRUP being safe while Kyber isn't? Super curious. I barely follow. Maybe you've got a better grip on the controversy.
by RodgerTheGreat | 2025-11-25 19:03:45+00:00
There are a number of dynamic languages to choose from where tables/dataframes are truly first-class datatypes: perhaps most notably Q[0]. There are also emerging languages like Rye[1] or my own Lil[2].

I suspect that in the fullness of time, mainstream languages will eventually fully incorporate tabular programming in much the same way they have slowly absorbed a variety of idioms traditionally seen as part of functional programming, like map/filter/reduce on collections.

[0] https://en.wikipedia.org/wiki/Q_(programming_language_from_K...

[1] https://ryelang.org/blog/posts/comparing_tables_to_python/

[2] http://beyondloom.com/tools/trylil.html
by int_19h | 2025-11-25 19:04:20+00:00
Python includes logging, and packages generally use it. It's far from perfect, but it's important to have at least a standard interface so that all components use it in concert. When you have a proliferation of logging libraries with no standard, other packages either don't do any logging at all, or do it in idiosyncratic ways that are hard (or impossible) to integrate.
by SAI_Peregrinus | 2025-11-25 19:04:39+00:00
Cargo defaults to downloading from `crates.io` but can easily be configured to get its dependencies elsewhere. That could be an alternative registry run by a Linux distribution or other organization, or even just overriding paths to dependencies to where local copies are stored. I'd expect a distro like Debian to mandate the use of an internal crate registry which mirrors the crates they're choosing to include in the distro with the versions they're choosing. This adds supply chain attack opportunities in the same way that adding any software adds supply chain attack opportunities, the use of `cargo` instead of `curl` to download sources doesn't change anything here.
by sillywalk | 2025-11-25 19:05:14+00:00
Related / Past discussions:

https://news.ycombinator.com/item?id=9737156

( How Naughty Dog Fit Crash Bandicoot into 2MB of RAM on the PS1) 934 points|ekianjo|10 years ago|247 comments

https://news.ycombinator.com/item?id=32663433

How Crash Bandicoot hacked the original Playstation (2020)

325 points|agomez314|3 years ago|71 comments

Crash Bandicoot: An oral history https://www.polygon.com/2017/6/22/15820540/crash-bandicoot-a...

https://news.ycombinator.com/item?id=14613982

152 points|Tomte|8 years ago|40 comments
by foota | 2025-11-25 19:05:24+00:00
It's interesting to me to think about a possible system where people in say roblox can only chat with each other by exchanging physical keys somehow. This way, they would be able to chat with their peers from school etc., without the danger or need for as much supervision.

I don't necessarily think this is technologically feasible or something that would be accepted, but I think it's an interesting idea.
by feydaykyn | 2025-11-25 19:05:26+00:00
Don't be so dismissive! In practice...

- You cannot prevent your child to login and play at least 15mn (without manually resetting the password in the kid account) - combine this with the fact you cannot prevent changing the password reset email on the child account, and in practice you cannot prevent your child from using roblox - You cannot prevent gift card to be used - There's no way to trace gift cards usage at all - Roblox will remove controls at some ages without warning you - Deleting your kid account is a fight (it's been two weeks and roblox is asking me proof of ownership I cannot give since they don't exist) - You cannot prevent fear of missing out - You cannot control pay to win games - You cannot prevent your child face to be scanned and shared for "age control" - Same for your own face - Probably more...

Oh and don't forget there's absolutely no way to prevent your kid to have multiple accounts, and have a parallel life you know nothing about.
by GCA10 | 2025-11-25 19:06:10+00:00
So a while back, I was interviewing business people still active in their 80s and 90s -- as part of a very intriguing project that got cut short but did produce some fascinating notes. I remember asking one 95-year-old guy still serving (competently) on a bank board if there was anything that he did better now than when he was in his 60s.

His answer: "I'm a better writer."

The Cambridge research cited in this study categorizes late-life changes in brain function as nothing but declining capability, all the way down. My guess is they are mostly right. But I'm intrigued by the notion that some of that elder erosion might lead to new clarity about how everything fits together.
by cowpig | 2025-11-25 19:06:20+00:00
> No, local models won't help you here, unless you block them from the internet or setup a firewall for outbound traffic.

This is the only way. There has to be a firewall between a model and the internet.

Tools which hit both language models and the broader internet cannot have access to anything remotely sensitive. I don't think you can get around this fact.
by Froztnova | 2025-11-25 19:06:37+00:00
This feels like an incredibly normal thing though? Kids oftentimes want to do things that are highly stimulating and "fun" in substitute for things that are more rewarding, often to the point of obstinance.

And I don't want to defend Roblox, their laissez faire attitude towards predators abusing their platform is abhorrent and disgusting. But this anecdote is about as old as civilization.
by yorwba | 2025-11-25 19:06:56+00:00
European companies have been plenty successful at monetizing their innovations. If you look at OECD statistics https://goingdigital.oecd.org/datakitchen/#/explorer/1/toolk... in the industry of "Computer programming, consultancy, and information service activities" Europe produced slightly more than the US in 2022, and the EU28 produced slightly less. Of course that means the US has a larger tech sector on a per-capita basis, but the difference isn't huge. If you think European companies are bad at monetizing technology and have a difficult time flourishing, you're probably narrowly focusing on the domain of large American tech companies (consumer products with strong network effects). Here, there are no European equivalents because those are winner-takes-all markets, and taking two companies with the same market penetration in the US vs. any European country, the US company has much higher revenue and hence more capital available for expansion. That's part of how Facebook steamrolled various European social networks. Investors know this too, so even before the winner is decided, they're reluctant to bet on European startups in such markets. On the other hand, there are plenty of B2B niches where network effects are much less strong and European companies are doing fine.
by somat | 2025-11-25 19:07:28+00:00
For those that don't know soft updates are a clever method to prevent filesystem corruption.

Journaling: write the journal, write the filesystem, in event of sudden power outage either the journal will be partially corrupt and discarded or the filesystem will be corrupt and the journal can be replayed to fix it, the problem is that now you are duplicating all metadata writes.

Softupates: reorder the writes in memory so that as the filesystem is written it is always in a consistent state.

So softupdates was a clever system to reduce metadata writes, perhaps too clever, apparently it had to be implemented chained through every layer of the filesystem, nobody but the original author really understood it and everyone was avoiding doing filesystem work for fear of accidentally breaking it. And it may not of even worked, there were definitely workloads where softupdates would hose your data.(I am not exactly sure, But I think it was a ton of small metadata rewrites into a disk full) So when someone wanted to do work on the filesystem but did not want to deal with softupdates, obsd in characteristic fashion said "sure, tear it out" It may come back, I don't know the details, but I doubt it. It sounds like it was a maintenance problem for the team.

Journaling conversely is a sort of inelegant brute force sort of mechanism, but at least it is simple to understand and can be implemented in one layer of the filesystem.