MurphyA/hacker-news huggingface dataset:
by microtonal | 2025-11-09 20:12:42+00:00
I would buy only Hue but that's because I have more money than sense, and they don't actually make smart plugs last time I looked,

Ikea makes Zigbee smart plugs with power monitoring (Inspelning) that are ~10 Euro here (probably $10 in the US). Also Zigbee does not have all the security issues, since it is purely local and will talk with whatever hub/bridge you choose, e.g. Homey, Hubitat, or if you want to go free software Home Assistant or zigbee2mqtt.

It's somewhat insane to me that people use WiFi plugs for actuating things that actuate real-life electrical devices. Even more from companies that have a bad security reputation. Zigbee or Z-Wave all the way or possibly Matter over Thread, but the only Matter device that I had (an upgraded Eve Energy plug) has been a pain.

The real problem to solve ditching TP-Link _routers_ is that all routers are uniformly fucking awful, and all you are doing is choosing your particular poison. This is especially true after Apple exited the game so long ago.

I switched to Unifi gear (Cloud Gateway Max, two of their U7 access points, and a bunch of their managed switches) and they are a dream to set up. Making VLANs, associating VLANs with SSIDs, etc. is so easy. I had a TP Link managed switch and the interface was a huge pile of crap and I saved it several times after misconfiguration by virtue of it having a serial console. I only used it for two months or so because it was so frustrating.
by Lariscus | 2025-11-09 20:12:58+00:00
That's all nice but I still don't want slop code in an application as security critical as a password manager. The correct percentage of slop code for a password manager is 0% and it’s pants on head crazy to claim otherwise.

I have dug around a bit and found a thread mastodon thread that doesn't inspire confidence[1]. KeePassXC seems completely untrustworthy at this point not only have they jumped on the AI bandwagon, they also seemingly don't know what a zero-day is. I genuinely liked KeePassXC and used it for years now I am spending my Sunday evening researching alternatives.

[1] https://fosstodon.org/@2something@transfem.social/1148367097...
by BiteCode_dev | 2025-11-09 20:13:26+00:00
The others students will get code from chatgpt way faster than from your code.

If you are afraid that people will think this code is not yours, sign your commits, it's unlikely they will take the time to clone your repo and remake it with new signatures.

But honestly, if it's such a source of stress for you, don't share it. It's ok to not share code. There is no rules that say you have to.

Just because most of us are into FOSS and open source doesn't mean we will less of you if you are not.
by n1xis10t | 2025-11-09 20:14:33+00:00
Yes, it seems to be the case. Yes, it alarms me too. The question is what can be done about it? There are supposed to be good alternatives to Google, but for whatever reason search engines keep disappearing. Here is an article that I read about that: https://archive.org/details/search-timeline

I think that before progress can be made, someone has to figure out if it really is just super hard to make a search engine (and if that’s the case maybe solutions can be found depending on what the specific problems are) or if there is something else going on. I think the only way to do that might be to try making a search engine and see what happens.
by nickpsecurity | 2025-11-09 20:14:37+00:00
I didn't think about that but you may be right. I think what might be non-debatable is that setting up the ability to work remotely definitely makes it easier to outsource someone's job. Whether that's causal or makes sense with other factors would vary company by company. Remote jobs are easier to outsource, though.

One of my friends from school has long worked in robotics. He showed me a machine he programmed to cut glass or something at a Volvo factory. I asked him about outsourcing back then. He told me his job required being physical plant to assess, program, and monitor it. He was going to stick with that over the higher-paying alternatives that he believed would be outsourced or automated more easily. Today, outsourcing only threatens work opportunities for one of us.
by throw0101d | 2025-11-09 20:14:41+00:00
> While the average outcome of indexes is probably better, the best case outcome of an individual stock is probably better.

Most stocks suck:

> We study long-run shareholder outcomes for over 64,000 global common stocks during the January 1990 to December 2020 period. We document that the majority, 55.2% of U.S. stocks and 57.4% of non-U.S. stocks, underperform one-month U.S. Treasury bills in terms of compound returns over the full sample. Focusing on aggregate shareholder outcomes, we find that the top-performing 2.4% of firms account for all of the $US 75.7 trillion in net global stock market wealth creation from 1990 to December 2020. Outside the US, 1.41% of firms account for the $US 30.7 trillion in net wealth creation.

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3710251

> Four out of every seven common stocks that have appeared in the CRSP database since 1926 have lifetime buy-and-hold returns less than one-month Treasuries. When stated in terms of lifetime dollar wealth creation, the best-performing four percent of listed companies explain the net gain for the entire U.S. stock market since 1926, as other stocks collectively matched Treasury bills. These results highlight the important role of positive skewness in the distribution of individual stock returns, attributable both to skewness in monthly returns and to the effects of compounding. The results help to explain why poorly-diversified active strategies most often underperform market averages.

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2900447

And it's not always the same 2-4% of stocks: a stock may shoot up in value, and if you're holding it at that time to can capture that, but once it has already gone up it may perform average-to-poor going forward. At that point, if you're still holding on it, it will be a drag on your (average) returns.
by smokel | 2025-11-09 20:15:16+00:00
If you're more into videos, be sure to check out Stefano Ermon's CS236 Deep Generative Models [1]. All lectures are available on YouTube [2].

[1] https://deepgenerativemodels.github.io/

[2] https://m.youtube.com/playlist?list=PLoROMvodv4rPOWA-omMM6ST...
by RealityVoid | 2025-11-09 20:15:17+00:00
It makes sense to get any job if finances force you to, but... if you're not strapped for cash, would that really be the best way to spend that time? I have absolutely nothing against hard work, and if you want to keep yourself busy, go ahead. But I feel it's an ineffective way to spend forced downtime.

Honestly, if I were hit by lack of work, I would see how much runway savings I have and then try to either take some time off, to spend with family, do some low-budget traveling, learn new professional skills I wanted to learn, try to change the niche I work in and/or contribute to some open source project.
by mattkevan | 2025-11-09 20:15:57+00:00
Hey thanks! Secrets are stored in the browser cache but not exported, so they’ll persist until the cache is cleared. If you open the site in a new browser you’ll need to re-enter the credentials.

I found I wasn’t able to add FTP support without some sort of proxy service. However I am working on wrapping it into a native Tauri app. This will have more publishing options as it’s not so constrained by what you can do in a browser.
by josephcsible | 2025-11-09 20:16:13+00:00
You don't need a tech salary to get a rewards card. What's stopping you from getting, e.g., a Wells Fargo Active Cash, Citi Double Cash, or SoFi Unlimited card? They all give 2% cash back on everything. And if you have no or bad credit, there are even debit cards that will give you cash back, e.g., PayPal Debit will give you 5% back on a category of your choice (one of restaurants, apparel, fuel, groceries, or rideshare/transit).
by leros | 2025-11-09 20:16:19+00:00
I spent some time consulting over the last few years. So many companies are laying off their US engineering teams and replacing them with offshore teams. There used to be this notion that offshore meant lower quality but it doesn't seem like that as much these days. I've worked with some Ukrainian teams for example. They're 20% the price of Americans, produce the same quality, work harder, and speak great English. It seems like a no-brainer to go offshore.
by scatbot | 2025-11-09 20:16:31+00:00
Any Forth system at it's core is essentially a stack-based virtual machine with a reprogrammable high-level assembler and a REPL. Some Forths use direct or indirect threading, others are implemented as bytecode VMs, not unlike the JVM, high-performance JavaScript engines or the Erlang VM, but that's really just an implementation detail.

People say that stack juggling is boring, but I actually find it to be a very natural way to think about computation. Forth's linear, concatenative style gives you SSA-like semantics for free, which makes it straightforward to lower into register-optimized bytecode or native code.

And once you're there, dynamic recompilation at runtime can do the rest. A naive, threaded implementation of Forth might not be performance-friendly on modern hardware, but there's nothing that prevents it from being high-performance. It just depends on how much effort you're willing to put into the implementation.
by BrenBarn | 2025-11-09 20:17:13+00:00
That's the notion of "rights" we have in the US though. It's the same with the Bill of Rights. It's true some states do go further and bestow more affirmative rights. But it's deeply ingrained in US political thought that "right to do X" means "government won't stop you from doing X", not "government will stop anyone who tries to stop you from doing X".
by tmoertel | 2025-11-09 20:17:22+00:00
> Whether intentional or not, you cannot advertise a job to only certain people based on targeting by a protected characteristic.

To clarify, my question was specifically about the case where you could prove that the ad system could not possibly target based on a protected characteristic (gender, in this example). The only thing the ad system could learn is a user's interest in ads for a job.

An ad system like this will show more ads to the people who are interested in them and less to the people who are not. In the case when there is a genuine difference in job interest along gender lines, the "more interested" and "less interested" groups will just happen to have different gender profiles.

So my question was: In these circumstances, if the system gives more ads for the job to the people who want them and less to the people who do not, is that gender discrimination?

EDITED TO ADD: To further clarify: I think you're arguing that if there are observable differences in job ad rates along gender lines, then it follows that the ad system is, in fact, targeting based on gender. I constructed this example to rule out that possibility: The ad system cannot target -- or take any action -- based on gender. All it knows is which users are interested in ads for a job.
by greygoo222 | 2025-11-09 20:17:43+00:00
> In fact, we can easily observe that the few adults who are at the absolute top of their game, the most skilled, the most wealthy, the most powerful... well guess what? They DO NOT use smartphones. They don't tweet. They don't have profiles anywhere.

Terrence Tao regularly posts on Mastodon, and Geoffrey Hinton on X/Twitter. Sam Altman has a huge X presence. Elon Musk, no comment.
by alephnerd | 2025-11-09 20:17:52+00:00
For most white collar jobs like tech here in the US, your out-of-pocket as percentage is income doesn't play a role in how we decide salary bands.

For a family of four, the average health plan is around $10k out of pocket from the employee along with around $20k in employer costs [0]. Yet the median American SWE salary is $187k [1] versus $66k in Poland [2], $93k in Canada [3], and $111k in the UK [4]. Either way an American ends up earning significantly more after healthcare costs and insurance.

The issue is salary expectations at the lower performance band haven't kept up with what is expected at that salary band.

> In the US that expense is very high, and is a major source of worry for working families

When benchmarked against similar peer cities in Canada [5] or the UK [6], CoL is roughly at par yet salaries are significantly higher in the US, especially when comparing peer tech markets like SF [7] versus London [8].

This is the crux of the issue - demanding 100% WFH well past the end of COVID made it hard for us to justify domestic hiring when

1. Async was successfully proven to not impact business operation

2. A reverse brain drain of all nationalities in the US during COVID meant it was easier for employers to work with them to open a hub office or GCC abroad

3. A new grad is demanding salaries that simply don't make the economics of training and hiring new grads work. At $70k-$110k it does, but not beyond that.

4. Companies have now adopted the Netflix model - by cutting low performers, we can actually give higher pay bands to employees who actually have a business impact, as can be reflected in the rise in 75th percentile tech salaries.

[0] - https://www.healthsystemtracker.org/chart-collection/how-muc...

[1] - https://www.levels.fyi/t/software-engineer/locations/united-...

[2] - https://www.levels.fyi/t/software-engineer/locations/canada

[3] - https://www.levels.fyi/t/software-engineer/locations/canada

[4] - https://www.levels.fyi/t/software-engineer/locations/united-...

[5] - https://www.numbeo.com/cost-of-living/compare_countries_resu...

[6] - https://www.numbeo.com/cost-of-living/compare_countries_resu...

[7] - https://www.numbeo.com/cost-of-living/compare_cities.jsp?cou...
by alephnerd | 2025-11-09 20:18:06+00:00
Pretty much.

The big issue with outsourcing to WITCH or EPAM was you were essentially paying $30k-50k per head but getting the lowest tier of talent becuase those companies would pay around $5k-15k salaries to maximize their margins.

As such, companies decided to just open offices in India, Poland, Czechia, etc to poach talent in those countries because people are only productive if well remunerated, and remove the middle man out of it.

Ofc, the traditional Indian outsourcing companies like TCS [0] and HCL [1] have also begun pivoting away from Software outsourcing towards becoming end-to-end chip design companies, Infosys pivoting to becoming an end-to-end MedTech company [2], and Wipro becoming an aviation and defense manufacturer [3][4] because of a mix of Indian government subsidizes and Taiwanese, Japanese, and American FDI.

[0] - https://www.tataelectronics.com/semiconductor-foundry

[1] - https://www.reuters.com/world/india/india-approves-hcl-foxco...

[2] - https://www.infosys.com/services/engineering-services/insigh...

[3] - https://wiproaerospace.com/

[4] - https://www.wiproinfra.com/
by malux85 | 2025-11-09 20:18:26+00:00
When you’re a junior it’s natural to overvalue your code, because you’re still learning this incredibly complex thing called programming, and that code took a lot of effort to produce!

But the actual truth is that the code itself is nearly worthless. The important thing is who you became when you wrote it. You learned interface abstraction, api design, how to debug, how to execute it in your head, the tooling, and most importantly you got that spark of pure joy when it finally worked.

If others copy your code they get none of that, they only get the little worthless bit, they might win a battle (cheat on an assignment) but they will loose the war (they don’t grow or experience joy) so don’t worry about it, they will flake out, while you grow and reach for even greater things!
by wahnfrieden | 2025-11-09 20:18:44+00:00
I was mistaken. GPLv3 only offers a provision to require it. Firefox also requires that the name be treated as a protected trademark. I don't know how clearly one gains rights to names of open sourced projects with typical trademark policy though. I've tended to change the name on my own forks if I am not forking just to contribute upstream, out of caution for trademark (even if unregistered) and general reputational hazards of becoming a public face for someone else's project under their chosen name.

edit: Looks like the reality is quite complex: https://google.github.io/opencasebook/trademarks/#license-te... this goes into detail on each popular license
by caminante | 2025-11-09 20:18:54+00:00
Based on the parent's confirmation, this is the implicit reason.

They're screening job-hoppers as a "rule of thumb" that shrinks the candidate funnel at the cost of losing out on 100x programmers or 1-10x programmers that can commit to 2y.

I don't get the cost-benefit other than time and a lack of need for 100x programmers.
by pogue | 2025-11-09 20:19:44+00:00
Yes, I would use first generation antihistamines like those sparingly as they are anticholergenic. It's more of a long term concern rather than for occasional use.

For the low dose melatonin, Life Extension brand sells patented MicroActive formula of fast release/slow release melatonin in a 1.5mg dosage and a 6 hour time released 300mcg version. It's a quality brand and those are the dosage ranges I would recommend sticking around.

I have seen the insanely high 30mg+ amounts being sold and that's ridiculous. If you need that much, there's other factors going on. I would look into reducing caffeine intake, doing proper sleep hygiene (google it), and talk to a doctor/get a referral to a sleep specialist if it's an ongoing thing.

But, also look into l-theanine, glycine/magnesium glycinate, valerian root extract, passionflower, lemon balm and things of that sort for occasional sleeplessness or trouble falling asleep. (Visit examine.com & ergo-log.com and search for these ingredients on there to see all the references, how they work, and for more info.)

Natural isn't necessarily better, but I would recommend those any day over Z drugs, antihistamines and a lot of other rx sleep drugs. Make sure you're buying a quality brand though.

Finally, please don't give melatonin to children...

Parents give kids more melatonin than ever, with unknown long-term effects https://arstechnica.com/health/2025/04/melatonin-for-kids-sa...
by eternityforest | 2025-11-09 20:19:46+00:00
What do those systems do that UV/PyPi doesn't?

Usually arbitrary binaries stuffed in Python wheels are mostly self contained single binaries and such, with as little dynamic linking nonsense as possible, so they don't break all the time, or have dependency conflicts.

It seems to consistently work really well for binaries, although it would be nice to have first class support for integrating npm packages.
by AdrianB1 | 2025-11-09 20:21:01+00:00
You can consider it a branch. It has all sorts of advantages like tax avoidance (you pay them the expenses - salaries and office cost - and zero profits to pay taxes on), you can fire them all if you want, especially if it is fairly small and replaceable. And you can sell the dream of promotion space in a large company, but they will almost never get that. And you cut the middleman and keep the money.
by lateforwork | 2025-11-09 20:21:37+00:00
Sleep experts say it is not possible to draw conclusions about melatonin from this study's findings — it did not prove cause and effect. A more likely explanation of the results is that insomnia itself could be to blame. In that case, melatonin would be an “innocent bystander”.

Source: https://www.nytimes.com/2025/11/05/well/melatonin-heart-heal...
by kbaker | 2025-11-09 20:22:25+00:00
This section

https://github.com/WICG/email-verification-protocol/blob/mai...

could easily be done by malicious JS, an ad script, or the website itself, and then as the RP gets the output of 6.4) email and email_verified claims.

I'm guessing that this proposal requires new custom browser (user-agent) code just to handle this protocol?

Like a secure <input Email> element that makes sure there is some user input required to select a saved one, and that the value only goes to the actual server the user wants, that cannot be replaced by malicious JS.
by jefc1111 | 2025-11-09 20:23:17+00:00
It's so weird to me that this comment is so rare in these discussions. Linux / not Linux ... depends on the kid and what their interests are. I have two kids, one of whom I have exposed to Linux as I figured they'd get a kick out of it (which they did). But for the other I can tell they wouldn't really care much about the OS.

Same goes for adults. I'd advocate for Linux to some of my friends & family but not others.

Kids are all individuals!! Parenting should be flexible and personal.
by HarHarVeryFunny | 2025-11-09 20:23:20+00:00
In many companies there is little flow of real information from the bottom up. Upper management only hears what everyone understands they want to hear.

If the top down message is "this is the direction, make it work", and people further down in the hierarchy understand that the boss doesn't want to hear that his plan (e.g. hire the cheapest to save money) isn't working, then he is not going to hear it.
by thisisit | 2025-11-09 20:24:10+00:00
A friend, senior engineer, was laid off sometime ago. He was replaced with an offshore junior dev. The strange thing was that he was located offshore as well. What actually happened was that his company had to pay 50-60% of US salaries and RSUs etc to hire and retain talent at these offshore centers. They decided that was too costly and hiring an outsourcing outfit to pay 10% of US salaries instead.

With AI even dumb people feel smart - thanks to the overconfident answers, I am expecting this to be race to the bottom. Even the highly skilled offshore employee is not safe. Middle managers crunching numbers and looking at the bottom line might be convinced that if AI + less experienced but cheaper "human in the loop" can produce "similar" result at 10-20% of the original cost then that is worth it. I am personally dealing with such middle managers nowadays day in and day out. They seem blown away by Copilot demos and keep pushing "savings" and don't seem to understand AI hallucinations at all.
by tasuki | 2025-11-09 20:24:45+00:00
> He threw a sieg heil

Obviously very bad. I can't understand how people can think Elon was "just waving".

> has been videoed doing "paper beats rock" with agents which is a white supremacist dog whistle.

This is woke nonsense: I was accused of bad things in the past. I did quite innocent things and was accused that my behaviour was a dog whistle for racism. I'm as racist as the next guy (I fail the white-bad black-good test) but consciously very much attempt to be less so!
by pogue | 2025-11-09 20:24:45+00:00
They're both first generation antihistamines and work as agonists on the H1 receptor, causing sedation. There's no reason to choose one over the other for a first time user, but they can cause rapid tolerance. So, I'm guessing the only reason they offer both is if you'd become tolerant to one of them and can no longer fall asleep on it.

https://en.wikipedia.org/wiki/H1_antagonist#First-generation...
by Jean-Philipe | 2025-11-09 20:25:15+00:00
Yeah sure wordpress.com or geocities are not self hosted - but you had much more control over your content. People would just link to other blogs they like or comment on their guestbook / comment page. People would host php-forums. In each friends circle (school or hobby groups) there was always at least one kid who would be tech enough to host some php app on a shared hosting, and people would actually use it. But just self-hosting was not really my point, it was the degree of control that used to be common. I'd argue even myspace was much better than what we have today.