MurphyA/hacker-news huggingface dataset:
by gosub100 | 2025-11-13 18:50:21+00:00
I don't understand any scenario where a NAS drive would have a normal filesystem with plainly readable files. Not because of security (as many would expect) but because drives used in arrays are striped and intended for parallel use. They do not contain complete individual files. I know this because when you lose more than 2 drives in, e.g. a RAID 5, you lose everything.

Equally unlikely is why a storage provider would use anything OTHER than an array for any of their drives. Again, tossing security aside, it is not a viable way to store data on one filesystem. That drive could die at any time and lose all the data. So it makes no sense to store it that way.
by walletdrainer | 2025-11-13 18:51:11+00:00
> Still, it's illegal or quite bureaucratic in some places to pay up.

I can’t think of anywhere it would be illegal, but the bureaucracy is usually handled by the incident response company who are experts at managing these processes.

> It's also not granted that even with the decrypt tools you'd be able to easily recover data at scale given how janky these tools are

Most IR companies have their own decryption tools for this exact purpose, they’ve reversed the ransomware groups decryptors and plugged the relevant algos into their own much less janky tools.

> And idk... It still feels like these ransom groups could well sit on the data a while, collect data from other attacks, shuffle, shard and share these databases, and then sell the data in a way that is hard to trace back to the particular incident and to a particular group, so they get away with getting the ransom money and then selling the db latter

Very few databases will be worth even $100k, ransoms tend to run in the millions and sometimes tens of millions. There have been individual payments of over $30M. Selling the data just isn’t worth it, even if you could get away with it without sabotaging your main business. It’d like getting a second job as a gas station attendant while working for big tech in SF, possible but ridiculous.

> I don't know. I am less sure now than I was before about this, but I feel like it's the correct move not to pay up and fund the group that struck you, only so it can strike others, and also risk legal litigations.

The UK government even has a website where they basically say “yeah we understand you might need to make a payment to a sanctioned ransomware group, it’s totally fine if you tell us”. The governments accept that these payments are necessary, to the point that they’ll promise non-enforcement of sanctions. I can’t think of anywhere you’d really be risking legal repercussions if you have some reasonable IR company guiding you through the process.

I totally get the concern about funding these groups, but unfortunately the payments are so common at this point (the governments even publish guidelines! That common) that it simply doesn’t make a difference if a few companies refuse to pay.
by resfirestar | 2025-11-13 18:51:20+00:00
The way columns like this work is that the author pretends to have a rational basis for their claims that some feature of the masses' private behavior they don't like is going to destroy society, the trick being that they set the starting point of human civilization as portrayed in their narratives and on their charts at around 1950 (or even later in this example, besides the throwaway Max Weber quote from which the title is derived). This ensures that the audience can comfortably ignore the existence of previous degenerate sorts of trends, which have been sanitized by living generations' nostalgia for those cultural moments. Then, after establishing the existence of a serious threat, they try to sell the audience on their preferred solution. Back when we said "Christian" instead of "pro-social", the demand was often temperance, or sometimes a religious reform that that either seems obvious or blasphemous to modern readers. Today the sorts of people who read columnists have reverence for a political ideology instead of a god, so aside from the largely unchanged admonitions against vice, you get arguments that too much construction regulation hollows out our moral virtues. I don't really mind the admonitions against vice (though I find them uninteresting), but the government passing laws in an attempt to fix our morals has a terrible track record. We ought to stick to cold rationality whenever possible.
by toast0 | 2025-11-13 18:51:21+00:00
Probably the best option is to collude with a nonresident [1]:

> Nonresidents may import a vehicle duty-free for personal use up to (1) one year if the vehicle is imported in conjunction with the owner's arrival. Vehicles imported under this provision that do not conform to U.S. safety and emission standards must be exported within one year and may not be sold in the U.S. There is no exemption or extension of the export requirements.

While the vehicle can't be sold in the US, and must be reexported after a year, there's nothing on this page that says the nonresident can't lend it to a resident for most of the year. If money isn't really a problem, buy overseas, pay a nonresident to arrive in the vehicle, and after a year, export it and sell it and repeat. Nothing on this page suggests the vehicle couldn't leave and re-enter, but that seems like asking for way too much trouble, I wouldn't be surprised if someone at the border is keeping track of VINs. Since BYDs are sold in Mexico, you don't even need to deal with shipping, just drive through the border.

It's tricky with a car that has never been sold in the US, but with something where production for the US market ended, but other markets continue, you end up with things like a 1990s VW beetle with a 1970s title. shhh

[1] https://www.cbp.gov/trade/basic-import-export/importing-car
by tptacek | 2025-11-13 18:51:24+00:00
This has been a mostly unproductive thread that has done a good job of avoiding the point of my original comment, which is that the archaisms in PGP are not merely a consequence of the GnuPG implementation, but also deeply embedded into the standard itself. I don't care if you feel like PGP is still a worthy tool (I don't think it is, but I get that we can go back and forth on that). You made (by implication) a false claim, and it was false in an important way, and it has now been falsified.
by bluehatbrit | 2025-11-13 18:51:25+00:00
This is what I'd like to see as well. These collaboration tools are really good, but I barely use them because they always assume that you and your team are using the same editor. Most of the time that's just not the case, so I've used them a handful of times but beyond that there's little opportunity.

It's probably not an issue the Zed team will experience as they're all naturally using their own editor. Hopefully it's on their radar though.
by logicprog | 2025-11-13 18:51:29+00:00
I checked out chatbox and it looks close to what I've been looking for. Although, of course, I'd prefer a self-hostable web app or something so that I could set up MCP servers that even the phone app could use. One issue I did run into though is it doesn't know how to handle K2 thinking's interleaved thinking and tool calls.
by nandomrumber | 2025-11-13 18:51:42+00:00
You have to trust somebody.

Who is F-Droid? Why should I trust them?

How do I know they aren’t infiltrated by TLAs? (Three Letter Agencies), or outright bad-actors.

Didn’t F-Droid have 20 or so apps that contained known vulnerabilities back in 2022?

Who are all these people? Why should I trust them, and why do most of them have no link to a bio or repository, or otherwise no way to verify they are who they say they are and are doing what they claim to be doing in my best interests?

https://f-droid.org/en/about/
by randomgermanguy | 2025-11-13 18:51:42+00:00
Okay thanks for saving my sanity somewhat.

And also just to nitpick/joke:

> More accurately, it is neural networks which are more "stochastic" with their predictions and decisions <...>

I would defend NNs to not even be necessarily stochastic. I had to handwrite weights for NNs in atleast two exams, to fit XOR for example ;)
by tastyfreeze | 2025-11-13 18:52:09+00:00
Single subject bill amendment. Several states require single subject bills in State legislature. The same must be required at the federal level. The pushback has always been "then nothing will get done". From where I am standing that would be a good thing. No more sneaking shit in at the last minute. Vote on every single issue. People will still try to sneak stuff in. I remember seeing a video of a Minnesota legislator admonishing his colleges for trying to do omnibus bills after they passed a single subject amendment.

To get such an amendment passed it would have to come from the States. Nobody that is already in congress is going to vote for this. It is a huge restriction on their power to spend our money.

Here is Alaska's single bill requirement: The Alaska Constitution Art II, Section 13. Form of Bills reads: Every bill shall be confined to one subject unless it is an appropriation bill or one codifying, revising, or rearranging existing laws. Bills for appropriations shall be confined to appropriations. The subject of each bill shall be expressed in the title. The enacting clause shall be: “Be it enacted by the Legislature of the State of Alaska.”
by bcrosby95 | 2025-11-13 18:52:10+00:00
I've never connected with how most people do holiday shopping. "Ill just spend $50 on something you want, and you just spend $50 on something I want, and we'll be done!"

Even more degenerate is "You tell me something I should buy, and I'll tell you something you should buy!" At that point the holidays have evolved into a justification of consumerism.

At that point I just stop gift exchanges. To me the point of holiday shopping is to find something they would enjoy that they never would have thought of getting themself. I know its hard, but isn't that the point? It's supposed to be a time of thoughtfulness not "let me just spend $100 and get it over with".
by PEGHIN | 2025-11-13 18:52:20+00:00
If you’ve ever opened GA4 and felt like you needed a PhD to find a simple answer — you’re not alone.

Every marketer and founder I know is drowning in dashboards and starving for insights. GA4 tells you what happened, but never why or what to do next.

We got tired of it. So we built AskGAAI — an AI analyst that connects to your GA4 data and answers plain-English questions like:

“Which traffic sources actually drove paying customers last month?” “Why did conversions drop this week?” “What should I fix first to grow faster?”

No more spreadsheets. No more guessing. Just clear, actionable insights.

Launched this week — curious how other founders handle analytics pain. Do you still spend hours digging through GA4, or have you found a better way?

https://askgaai.com
by mrguyorama | 2025-11-13 18:52:34+00:00
The company that bought mine spent two years trying to have Team A rewrite a part of our critical service as a separate service to make it more scalable and robust and to enable it to do more. They wanted to do stupid things like "Lets use GRPC because google does!" and "Django is slow" and "database access is slow (but we've added like six completely new database lookups per request for uh reasons)"

They failed so damn bad and it's hilariously bad and I feel awful for the somewhat competent coworker who was stuck on that team and dealt with how awful it was.

Then we fired most of that team like 3 times because of how value negative they have been.

Then my coworker and I rebuilt it in java in 2 months. It is 100x faster, has almost no bugs, accidentally avoided tons of data management bugs that plague the python version (because java can't have those problems the way we wrote it) and I built us tooling to achieve bug for bug compatibility (using trivial to patch out helpers), and it is trivially scalable but doesn't need to because it's so much faster and uses way less memory.

If the people in charge of a project are fucking incompetent yeah nothing good will ever happen, but if you have even semi-competent people under reasonable management (neither of us are even close to rockstars) and the system you are trying to rewrite has obvious known flaws, plenty of time you will build a better system.
by wvenable | 2025-11-13 18:52:59+00:00
Computers are too complicated for the average user. So many people have me on speed-dial to fix issues or walk them through stuff. And AI is surprisingly good at this stuff. If someone can simply say "Connect my bluetooth headphones" and the computer does it that's a big deal.

But this is balanced by the fact that we live in a world where all our software is effectively user hostile -- look for whatever means possible to extract more value from us. This is the society that we live in now.
by FrustratedMonky | 2025-11-13 18:53:04+00:00
Think of a really crappy text editor you've used. Now think of a really nice IDE, smooth, easy, makes things seem easy.

Maybe the AI being 'Nice' is just a personality hack, like being 'easier' on your human brain that is geared towards relationships.

Or maybe Its equivalent of rounded corners.

Like the Iphone, it didn't do anything 'new', it just did it with style.

And AI personalities is trying to dial into what makes a human respond.
by rtkwe | 2025-11-13 18:53:34+00:00
You're probably getting weird looks if you're phrasing it that way because there's not actually tracking of coins at an individual level, it's all balances that are fungible but the nature of the ledger allows tracking of interactions with 'tainted' wallets. NFT's were partially named non-fungible tokens because that was part of their main difference from other items/coins on the blockchain at the time.
by mrtksn | 2025-11-13 18:53:51+00:00
I'm member of the group hating to shop for clothes but love shopping most other things.

The reason I hate shopping for clothes is that I don't understand it, I feel overwhelmed and I despise trying clothes on and off. Still, I wouldn't let an AI do my clothes shopping because it doesn't solve my core problem of not knowing what to buy and trying it on.
by SoftTalker | 2025-11-13 18:54:15+00:00
I'm saying that even with the current approach to taxpayer-funded roads, operating a local bus service cannot be done at a profit to the operator if they rely on fares alone. All public transit systems require substantial funding beyond what they receive in fares. And rail lines cost even more than roads do.

Privatizing such services and maintaining affordable fares is a complete non-starter. It cannot be done.
by zaphar | 2025-11-13 18:54:20+00:00
Yes. That they have a large impact does not change the fact that not I nor anyone in my close circle uses it for that. It has been relegated to a specialized domain and use case. I have no use for maintaining a signing key. All the communications I need to secure and verify identity use a different technology for it. The fact that some tools I run might use it in the background is entirely abstracted away for me and they could get swapped by something else without me once noticing.

My point still stands.
by parpfish | 2025-11-13 18:54:21+00:00
consumables are the way to go. as a receiver there's no long-term clutter or obligations.

and depending on the type of consumable, there's the possible of getting to share/partake in it with the gift-giver and you've turned your consumable-gift into a no-obligation experience which is another nice type of clutter-free gift.
by pfdietz | 2025-11-13 18:54:35+00:00
Estimates for sputtering of dust grains are much faster than this.

Granted, there is also growth of dust grains. But surfaces from which atoms can be ejected by UV photons will erode.

Some notes: https://www.astro.princeton.edu/~draine/dust/Draine_IPMU_Lec...
by overfeed | 2025-11-13 18:54:37+00:00
> It is likely that the reader will be implemented into a phone / tablet app so will be pretty ubiquitous eventually.

They may wind up ubiquitous, but reader usage will be determined by the officers in the field, on a case by case basis. Take a look at jurisdictions where body cameras are mandated but are turned off, or intentionally obstructed.
by marssaxman | 2025-11-13 18:54:40+00:00
Gen-z is locked out because the economy is tanked. That certainly sucks. It sucked in 2001, and it sucked again in 2009, and it'll probably keep sucking like this for another couple of years. But AI is just the excuse: companies always grow if they can, because not growing would yield the advantage to their competition. Blaming it on AI lets them explain it away without saying anything which might scare investors.
by IshKebab | 2025-11-13 18:54:49+00:00
It depends. It definitely opens faster and the general UI seems a bit faster, but open a largish file (a few MB) and VSCode will easily out-perform Zed because it doesn't have that fancy CDRT thing.

In my experience VSCode is plenty fast. Use it with no extensions and you will have zero problems with performance (though memory use isn't great). The real problems come when you have extensions, especially because it's often impossible to attribute performance issues to them because they can often do a lot of work all in the same "extension host" process.
by insane_dreamer | 2025-11-13 18:54:51+00:00
Looks very cool, and of course it's nice to basically have Slack inside of Zed.

But personally, what I want in a Code Editor / IDE, is to be the very best experience at writing code and working with code projects. That is what will save me time and make the coding experience better.

Collaborative features are nice but not essential since there are other tools out there. It's not likely to move a team away from Slack (though if it's self-hosted, it stands a chance).

I'm not yet at the point where I can rely solely on Zed for python coding. I mostly use Zed because I like new initiatives, especially open source ones, and it's fast and responsive. But PyCharm is still better for python development at this point, with its one black mark being endless indexing on large codebases / dependencies, and I find myself falling back to it regularly. I would argue that the priority should be to achieve parity as a _code editor / IDE_, and then we can talk about other shiny new features.
by brulard | 2025-11-13 18:55:11+00:00
Oh, I wanted to escape the Kratos hell by migrating to Keycloak and you say Kratos was created to actually be a better alternative? Well I have to say I had a very hard time implementing browser flows, configuration is a mess, not everything working through yaml configs works as env var. Documentation is a mess. All in all, it took months what should have been weeks at most. Sorry for the negativity, but it is one of the software pieces I really wish I have avoided.
by spankibalt | 2025-11-13 18:55:14+00:00
> "[...] every marketer intuited that a home computer would be used for storing recipes. It never happened."

Storing recipes "never happened"? Rubbish! Even famous cook Casey Ryback used his Apple Newton to store recipes, as evidenced in the 1995 documentary Under Siege 2 [1].

1. [https://starringthecomputer.com/feature.html?f=23]
by rtkwe | 2025-11-13 18:56:47+00:00
I think there'd be a fair amount of interest though I'm not sure how tightly bills returned for destruction are monitored for known serial numbers like that so I'm not sure if anyone could notice. But if they are I think it'd trigger some interest at least just to figure out where you might have gotten it from.

Anyone know if there's a monitoring program for serial numbers of interest?
by kdazzle | 2025-11-13 18:56:48+00:00
I’m curious about the resilience bit. Are you planning on some sort of active-active setup with mongo? I found it difficult on AWS to even do active-passive (i guess that was docdb), since programatically changing the primary write node instance was kind of a pain when failing over to a new region.

Going into any depth with mongo mostly taught me to just stick with postgres.
by CrackerNews | 2025-11-13 18:56:53+00:00
The keyword of that study is consciousness, which I'd consider a separate goal than an "intelligence". LLM proponents are aware that their architecture lacks many parts of what constitutes a complete brain, and there's other AI researchers who disagree that LLMs will lead to either AGI or consciousness. I largely consider these tangential to the topic. A neural net simulation of a virtual reality does not need consciousness as it has to model the consequences of agentic actions.
by illwrks | 2025-11-13 18:57:00+00:00
I try and frame things from an agency perspective.

Agencies are like a production line, they need raw materials coming in; clients with cash, armed with opportunities, scraps of ideas or formed briefs to be worked on. They need this business so they can generate the output and keep the lights on.

AI is everywhere and everything for a lot of people now. You can be sure that Exec’s are asking their teams how are we using AI, how is it helping the business grow etc. However there’s so much AI news, it’s moving so quick and seeping into everything that difficult (from a naïeve client point of view) to know what’s fantasy and what’s reality.

So my perception is… agencies do the sifting and maintain visibility of what is real or not because they have to start drumming up future sales and business, and AI is hot right now.

Perhaps they have some training in CoPilot etc, or with some experience of creating a model, maybe they have integrated something small with something big. It may even be that being ann angency they have a more open way of working that a corporate does, and that’s the sell.

Anyway, the sales teams will proclaim themselves experts because they have to sell.
by potato3732842 | 2025-11-13 18:57:07+00:00
That's misleading. They don't test for pedestrian safety as part of the normal tests. But they test for it generally, not specific to any model and use those results to inform their rules about what can and can't be sold. Same story with rollover testing.

This is why hood ornaments mostly died and flip up headlights fully died. The NHTSA doesn't write rules that ban specific features. You can do anything it meets the requirements. You can make brake hoses out of woven spaghetti if you want. It'll probably cost you a lot to get them to a performance point where they meet the rules though.

Furthermore, the NHTSA doesn't do most testing. The testing must be done and the testing needs to meet NHTSA standards but the OEMs are free to DIY it or outsource.
by axiolite | 2025-11-13 18:57:38+00:00
Sounds like a lot of projecting... The U.S. doesn't have single-payer healthcare therefore it's a dystopian hell-scape where everyone hates each other.

> “sucks to be them”

There are large swathes of the US where I would be shocked to hear anyone express that sentiment. There are other parts where I would not be shocked, but then the US is 10X bigger than Canada so you do get to pick and choose which version you'd like to be part of.
by jmcphers | 2025-11-13 18:57:50+00:00
I used a super-cheap Chinese smartwatch (Amazfit Bip S) for years and recently switched to the Pebble. The Bip's battery lasted forever and it did check a lot of feature boxes, but overall it was clunky to use and not in any way hackable.

I switched to a Pebble 2 Duo recently and while the features are comparable on paper (multi-week battery life, reflective display, basic health tracking, etc.), everything is just nicer on the Pebble. The software is thoughtful and fun and there are tons of third-party apps, so it can do all kinds of things the Bip could never do.

There really isn't a huge market for this kind of thing; most people, including nerds, want a watch with a brightly colored screen and tons of health metrics and service integrations. I imagine Pebble will stay a boutique brand this time around.