MurphyA/hacker-news huggingface dataset:
by taeric | 2025-11-13 15:15:56+00:00
I think that is basically the map I was asking for, so kudos on that. I still think it fails to capture what it means to be a rainy day. Is about like when Seattle has a snow day. If you are from a place that actually gets snow, you'd scoff at us calling it a snow storm.

I think my favorite is the few times it thunders. People would all move to windows in a sort of awe at the loud noise.
by taude | 2025-11-13 15:16:21+00:00
what kind of specs can we build a mini itx these days? I haven't looked into it, but the small form factor is a pretty big premium. I'm not sure I could build a ~ Raydon 7600xt micro itx build for less than $1K usd? (I haven't really looked, though).

For me, I'm looking at this like a nice micro itx build, and I'd probably pay up to a grand for it. (pending final specs and performance reviews, because it's kind of hard to compare it's custom chips on paper.)
by nja | 2025-11-13 15:16:22+00:00
I've used [Keycloak](https://www.keycloak.org/) in the past for "open-source Auth0" -- though I'm not sure it has ever described itself that way.

Keycloak ended up being quite extensible and powerful, but the UI and data model both sometimes made things more difficult than they had to be... this could be an interesting project to look at.

One bonus (for us) for Keycloak was that it was JVM-based, meaning it was easier to integrate our existing JVM libraries. Though its use of Hibernate was frustrating at times, heh
by xx_ns | 2025-11-13 15:16:54+00:00
Their other blog post[1] shares some more information which seems like it's relevant.

From the post:

> then i found this one:

> https://juice.hackclub.com/api/get-roommate-data?email=dont@...

> yep. no auth. just an email parameter. and what did it return?

> full names. emails. phone numbers. flight receipts. all just by passing an email address in a URL.

> i reported it through their security bounty program, made a bug fix pr (because apparently that's how you get things done around here), and maybe made the slight mistake of sharing the vulnerable endpoint in that group chat - which less than 10 people saw, for what that's worth.

The author then proceeds:

> their security bounty program states minimum payouts for this kind of thing start around $150. but exposing passport numbers (which are classed as government documents) should bump it up significantly. apparently "responsible disclosure" means "don't tell anyone, even in a private chat" so they docked the entire payout.

I'm not sure why they're being seemingly sarcastic about responsible disclosure. Yes, responsible disclosure absolutely means that you disclose this to the vendor before disclosing it to anyone else. As someone who works as a penetration tester and security researcher (both at work and in my free time), in my opinion, there should be no confusion about what responsible disclosure is. You disclosing the vulnerability in public before the vendor has had the chance to fix or apparently even triage it is not "responsible disclosure" or a "slight mistake".

[1] - https://kys.llc/blog/oops-leaked-your-passport
by culi | 2025-11-13 15:17:03+00:00
Yes it's true. Emulators still have trouble getting around DRM and console-exclusives

But think about it this way. A PC can run PS3 games but a PS4 can't. A PC can run xbox 360 games but an xbox one can't.

I think all the console-exclusives out there are more than made up for by PCs being the ultimate backward-compatible gaming system
by bitcrshr | 2025-11-13 15:17:10+00:00
Kratos is awesome, especially alongside Hydra, OathKeeper, and Keto. Super powerful combo, if not a little intimidating at first. There’s a LOT of configuration involved, but that’s to be expected if you want to host your own Auth0 replacement.

Their dynamic forms stuff is really cool too, always liked how they chose to go about that. Only complaint I really ever had is that while their docs were overall serviceable, I remember some areas were pretty lacking and I had to dig really far to find answers to some fairly common issues.
by timenotwasted | 2025-11-13 15:17:15+00:00
The market has shifted drastically since he made his big break in 2008 and he doesn't seem to be able to adapt to it, which to be honest very few do regardless. That being said I think it's highly unlikely this is the last we hear of him. He does seem to have an eye for spotting things way ahead of the curve but that's both a blessing and a curse when trying to trade on shorter time scales.
by Arnt | 2025-11-13 15:17:29+00:00
Well, the original intent was to ask the user for permission at installation time, which turned out to be a poor idea after a while. Perhaps you mean that it would have been simple to change the API in some particular way, while retaining compatibility with existing apps? If I remember the timeline correctly, which is far from certain, this happened around the same time as Android passed 100k apps, so a fairly strong compatibility requirement.
by oceansky | 2025-11-13 15:17:33+00:00
I'd just like to interject for a moment. What you're refering to as Linux, is in fact, GNU/Linux, or as I've recently taken to calling it, GNU plus Linux. Linux is not an operating system unto itself, but rather another free component of a fully functioning GNU system made useful by the GNU corelibs, shell utilities and vital system components comprising a full OS as defined by POSIX.

Many computer users run a modified version of the GNU system every day, without realizing it. Through a peculiar turn of events, the version of GNU which is widely used today is often called Linux, and many of its users are not aware that it is basically the GNU system, developed by the GNU Project.

There really is a Linux, and these people are using it, but it is just a part of the system they use. Linux is the kernel: the program in the system that allocates the machine's resources to the other programs that you run. The kernel is an essential part of an operating system, but useless by itself; it can only function in the context of a complete operating system. Linux is normally used in combination with the GNU operating system: the whole system is basically GNU with Linux added, or GNU/Linux. All the so-called Linux distributions are really distributions of GNU/Linux!
by cbondurant | 2025-11-13 15:18:11+00:00
This is rich coming from the company that scraped the entire internet and tons of pirated books and scientific papers to train their models.

Maybe if you didn't scrape every single site on the internet they wouldn't have a basis for their case that you've stolen all of their articles through training your models on them. If anyone is to blame for this its openAI, not the NYT.

Play stupid games win stupid prizes.
by taeric | 2025-11-13 15:18:18+00:00
Thats really cool, I'll have to dig into knowing why they did that and why they stopped. My gut is that the way we do DST -- by moving what timezone everyone is in -- is just not compatible with that sort of system.

I pushed for the idea as it is by far more closely aligned with solar time than what we have. That is, sun dials did this somewhat automatically for many years, no? (They, of course, also stretch how long an hour is... I am not that sadistic)
by pm215 | 2025-11-13 15:18:48+00:00
This is partly because of the UK's ticketing system, which (like airline prices) heavily discounts for people who can book ahead and travel at off-peak hours. If you're able to do that, then for instance, right now you can get a ticket from Euston to Manchester on Weds 10th December mid-morning for 35 quid. If you're really price sensitive you can get there for just 14 quid (you have to change at Crewe and take an extra hour and a half of journey time).

The downside of this pricing system is (a) everybody complains about its complexity (b) if you really do need to travel at peak time or at very short notice you're going to pay a lot (c) it's really easy to make it look like it's a terrible rip-off by quoting the anytime walkup fare for an intercity journey :-)
by thoughtpalette | 2025-11-13 15:18:57+00:00
Just to add I'm also in this boat. We have a ASUS ROG NUC in our living room and it's a pain logging into Windows (cant find an actual tutorial to skip that works) .

It's been a great entry way into gaming for my wife (lot's of cozy games) and I also play a few games from my steam backlog (Halo, Hades 2, etc). I don't feel like we're in the minority for what a couch system is used for but maybe.

The largest hurdle for steam in the living room so far has been controller support or lack of couch co-op games.
by brookst | 2025-11-13 15:19:10+00:00
100% agree with everything you said, and also Valve is a huge value prop in the cross-platform Steam store. I already prefer Steam because I have both Windows and Mac machines and generally travel with a MacBook.

Microsoft has limited Xbox to Windows buy-once, Sony has… nothing. Valve is building an ecosystem that goes from handheld deck to Windows/Mac/Linux to console to VR.

It’s been a slow burn but that is a very nice strategy.
by zahlman | 2025-11-13 15:19:31+00:00
> Though I haven't yet checked if Deno could also be run without installing.

A third party is packaging it for PyPI (although yt-dlp doesn't support this, nobody has properly verified it etc.) and the wheel looks to be just a monolithic executable and a "tell me the executable path" wrapper (much like the official PyPI package for uv), so I would assume it can.
by taeric | 2025-11-13 15:19:57+00:00
This is part of what I find "quaint" about the conversation. I think there is basically no argument that many states and nations could just stick to a single timezone. Essentially, the closer to the equator you are, the less you are impacted by daylight changing.

So, calling it "quaint" is wrong. But a lot of talking past each other. The shift in daylight is much more dramatic for people further from the equator.
by maratc | 2025-11-13 15:19:57+00:00
The people who check your QR code with scanners on the entrance to a shopping mall (and refuse to let you in unless the scanner shows a green mark) are not the police nor the prosecution, and I have a good case to present to a judge in any case.

"The guy who went to jail" could be unvaccinated (or even infected) and presenting other people's certificates to enter an area for vaccinated people only (e.g. hospitals) where he might have endangered other people's lives; that's something that might be deserving jail time. I was vaccinated however, and by all means had the right to enter that shopping mall; I just wasn't able to prove it to the imperfect system that was there to check.
by teekert | 2025-11-13 15:20:09+00:00
Our Dutch one is too (privatized in 1995, it's one of our biggest employers as well), we have a nice railway system but the car is generally cheaper, even when using it alone. It's always about how much money the railway system is loosing, but I don't see anybody crying about the money our roads are loosing. Isn't it all just transport infrastructure?
by martinald | 2025-11-13 15:20:52+00:00
This just isn't true on any measure (apart from affordability and true high speed penetration in some countries).

Affordability is really driven by how much the operators are subsidized by the govt. It's hard to calculate this on a like for like basis as some subsidy goes to the track operator and some to the train operator, and in eg Germany you have a hugely complex set of subsidies and fare zones in operation from various levels of government.

I don't expect the other European systems to be any cheaper - it's just hidden in the tax system instead.

Where the UK shines imo is two things. 1 is the frequency of many services. It's rare to have less than 2 trains per hour on an intercity route, and often far more.

This compares to France (outside TGV) which is atrocious. Non regular timetable with often 2-3 hour gaps on trains.

Spain (even on the high speed lines) is even worse. Some _high speed lines_ can't even manage an hourly service. This has got far better recently on high speed lines with private competition, but outside of that the timetabling is terrible.

The other is some of the ticketing options. Firstly, there is a no questions asked delay repay feature which means you get a substantial portion of the ticket refunded if there is any delay for any reason, starting at a 15minute delay. Obviously no delays are better than a refunded one, but I've had some atrocious delays in mainland europe and no option to apply for a refund.

The other is no composlary reservations (though I'm not sure how long this will last). If you have a valid ticket, you can get on. In many EU countries if a train is out of seats you don't even have the option to buy a ticket and stand. Combine this with poor timetables on many routes and it can cause huge problems if you are travelling at short notice.

Netherlands and Switzerland good for sure - better than the UK I would say. But Germany/France/Italy/Spain have a lot of issues.
by Aurornis | 2025-11-13 15:20:56+00:00
There is no reason to believe this is going to happen other than the hyper-cynical conspiracy theories.

It remains easy to disable Gatekeeper if you want. New MacBooks still allow you to install other OSes, even though that would be trivial to lock down with signed boot requirements.

So far, none of the frog in boiling water predictions have actually come true at all. It’s just people parroting the same conspiracy every time the word Gatekeeper comes up, just like we went through every time Secure Boot came up.
by salawat | 2025-11-13 15:20:57+00:00
Difference is in scale, not in kind. BBS's, Chan honeypots, chat control, dark network infiltration, MSM/FAANG & governmental manipulation are all just different ways of trying to coerce and orient different maturities and scales of technical networks. The implementation details and scale may differ, but the actors, activities, and mechanics are all the same. Without a single machine or computer in the picture, these same tactics are the fundamentals of manufacturing consent amongst a gaggle of free agents. If you only have a bunch of humans trying to organize themselves in a network, these same forces will emerge. If you can't see that, that's more a failure on your part, but I still beseech you to really bloody pay attention. It's not about tech. It's about guiding attention and shaping narrative. The tech has just made the activity and execution easier to do, more difficult to investigate, faster to get results, and is absolutely something I will until the end of my days, initiate young men and women to.

Even just members of this forum, through my observation of how they operate over the last decade are prone to the same forces. It isn't alien. Quite the contrary. Most bloody human thing on the planet. People organizing against other people. Tale as old as time. We have the manual. It is in use. It isn't perfect. It can be worked around. But you have to know about it to do it. The first step is learning. The second step, is resistance. There cannot be the second without the first.
by mindslight | 2025-11-13 15:21:02+00:00
Well fucking said. In order to be leaders, you actually have to start trying to lead. Not just putting on a temporary show where you tried "really hard" to stop those big mean Republicans from hurting healthcare, before going back to business as usual.

As far as the filibuster, let the Republicans kill it and make it very clear they're responsible for this anti-Constitutional corporatist agenda being rammed up our asses. When the other party is doing things for which the only check is for them to eventually hang, you don't sign off on it with your own names!

FWIW I'm not a progressive. I'm a libertarian. Pan-party, people are fed up with this fucking government. In fact that's why they voted (again!) for this New York con artist promising to somehow magically fix everything. It was plainly a stupid choice, but the frustrated desperation driving it is understandably real.
by charlie-83 | 2025-11-13 15:21:33+00:00
I find it hard to believe that charging people is the only way to stop people people from making multiple/spam accounts. It seems like it's just the easiest and most profitable. And, if it is the only option, then why does an account that has been paying Apple $90 a year for a decade still need to keep paying them: it's seems unlikely to be a spam account at that point.
by mlyle | 2025-11-13 15:21:36+00:00
I think the argument here is not really where one should draw the line and whether transpiler should be a different word...

I think the argument centers on how transpilers are often justified as being something quite different in difficulty than writing a whole compiler -- and in practice, nearly the whole set of problems of writing a compiler show up.

So, it's more like, don't use the distinction to lie to yourself.
by lrvick | 2025-11-13 15:21:40+00:00
> I presume you can get a shell utility to pipe your key in and get that mnemonic version out if you'd like.

Not possible as GnuPG does not expose access to the cryptographic seed.

That said a mnemonic you generate and backup with keyfork is entirely compatible with GnuPG should you still want to use it as a client for keyfork-provisoned smartcards.

You can also use that same mnemonic to generate any other cryptographic keys you want for any purpose, including Age.
by taeric | 2025-11-13 15:22:04+00:00
Right, and that I think is far easier to deal with than you realize. Easier if you don't try it in 1 hour jumps twice a year. But basically every animal already has to deal with the shift due to the nature of actual sunlight. And we do just fine by that.

(I should add that I have also never used an alarm clock. The shift from DST has never really been difficult to manage. Only was hard when I would be awake, but not leave for work/school on time because I forgot to update the clock.)
by voxic11 | 2025-11-13 15:22:12+00:00
I wasn't able to find any states where this is the case. They all appear to have rules that say you can only be issued a state ID or a state drivers license but not both at the same time. Additionally federal REAL ID rules have the same requirement for REAL ID compliant identification.

https://legalclarity.org/can-you-have-a-non-driver-id-and-a-...

https://www.ecfr.gov/current/title-6/chapter-I/part-37/subpa...

So I think the only way to have a government ID card and a separate drivers license is to get a passport card and a state drivers license.
by jMyles | 2025-11-13 15:22:15+00:00
It's not just AI scrapers, it's the entire concept of the internet.

The internet _wants_ to copy bytes. That's what it does. Right now you're reading this because bytes were copied from my local machine to the HN server, and then to a cache, and then to your machine.

Copying bytes is, in some low-level sense, the entire function of interconnection in the human species.

The idea of trying to bolt-on little machines to restrict the flow of bytes at every vector of network connectivity, just to satisfy some abstract claim of "property" - it's completely nuts. It's never going to work. Tomorrow it will work worse than it does today, and every day going forward until states realize that the laws they want to enforce around this concept are simply not possible on the internet.

And you know who will celebrate that? Musicians like me. Nobody will be happier to see a lubricated copying machine become the human identity more than people who are trying to get their music out there, and trying to be inspired by the music of others.
by antonvs | 2025-11-13 15:22:21+00:00
You didn't answer the question. You wrote that you "align with USA on war with Venezuela for political reasons." You think it's justified to declare war on another country because of internal corruption?

There has absolutely been enough well-documented corruption in the current US administration for someone with that mindset to say that a forcible "regime change" in the US is justified. Your position is purely a "might makes right" one with no moral basis.

Edit: you should watch the movie "Team America: World Police". It might help you understand exactly how ridiculous this idea of a country appointing itself as a global enforcer of its own ideals[*] is.

[*] Ideals that are invariably corrupt and/or hypocritical in the first place.
by sheepscreek | 2025-11-13 15:22:23+00:00
Basically you nailed it. I am an amateur “application developer” but I have 20+ years of software engineering experience, including many - building complex web applications. The thing I did 15 yrs ago isn’t even something a typical dev would be able to do. So even though it’s not what I have done a lot, I feel I am qualified enough to comment on it.

A bit like - a history teacher (me) commenting on an anthropology paper.
by yomismoaqui | 2025-11-13 15:22:46+00:00
You can do no-downtime deploy of a web service with:

- Kamal

- Docker compose with Caddy (lb_try_duration to hold requests while the HTTP container restarts)

- Systemd using socket activation (same as Docker compose, it holds HTTP connections while the HTTP service restarts)

So you don't have to buy the whole pig and butcher it to eat bacon.
by ethmarks | 2025-11-13 15:23:05+00:00
What if the minification is inseparable from the transpiler? Like what if it converts the SCSS into some weird graph representation, applies the transpilation features (variables, mixins, etc) on that graph representation, then converts the graph representation into minified CSS? At no point in the process was it ever human-readable CSS. I don't know enough about the internals of transpilers to know if they actually do anything like this, but one could imagine a hypothetical program that does.

And furthermore, what if you run Prettier on the minified output, turning it into readable CSS? The pipeline as a whole would input SCSS and output formatted CSS and therefore would be considered a transpiler, but the subprogram that does all of the SCSS heavy lifting would input SCSS and output minified SCSS, making it not a transpiler.

P.S. I love your username
by zamalek | 2025-11-13 15:23:15+00:00
The largest hurdle that a Steam console will face isn't kernel-level anti-cheats or somesuch. The real problem is far more idiotic: platform exclusives. Console gamers stereotypically care that their platform has a game that others do not, I have no idea how the reasoning works, but exclusives are a major talking point for OEMs and gamers alike.

While PC likely has the most exclusives by a ridiculously large margin, it probably has the fewest AAA exclusives.
by falcor84 | 2025-11-13 15:23:38+00:00
I'm probably neurodiverse, so ymmv, but I really couldn't care much less about how people are doing; it's a very small part of my idea of a good conversation. What I want is to bounce ideas off of each other, and so the answer is no: I can't get the same experience or learning from just reading a book or being in a lecture - I want that back-and-forth where I'm the one talking about 50% of the time.
by Gormanu | 2025-11-13 15:23:49+00:00
Bold move from Google — finally admitting the Play Store has a trust problem.

Verification sounds great on paper, but if this turns into “prove you’re a real dev by jumping through 12 forms of bureaucracy,” it’ll just push more talent to sideloading and open platforms.

Still, if Google actually nails this — transparent, fair, and fast — it could be the first time in years Android feels safer without feeling locked down. That’d be a plot twist I’d love to see.
by pkilgore | 2025-11-13 15:24:05+00:00
If you do anything in America that results in a stored record it's possible it will be released in discovery and a lawyer will read it. This happens all the time, and has happened for hundreds years.

It's not like the NYT will be published this shit in the news. Their lawyers and experts will have access to make a legal case, under a protective order. I'm not going to lose my law license because I'm doing doc review and you asked it something naughty and I think it's funny.

Courts and lawyers deal with this stuff all the time. What's very very weird to me is how upset OpenAI is about it.

They look like they are hiding something.