MurphyA/hacker-news huggingface dataset:
by PleasureBot | 2025-11-18 14:41:29+00:00
I can also say from personal experience this verbal confrontation like the author is suggesting can make innocuous situations devolve quickly. There was one guy in a friend group I had who I felt like I couldn't really connect with. He always seemed very awkward and only willing to engage in surface-level conversations with me compared to everybody else. I tried to (gently) ask him about it, basically like the author would suggest doing, and it turns out he did not feel like he was being awkward, surface-level, or failing to connect at all. He thought we had a real genuine, deep friendship. What I said really hurt him and there was a lot of hard feelings on his end. Needless to say we did not go back to being friends after that, and I ruined what could have been a good friendship if I had taken the time to reflect that maybe my interpretation of awkwardness or lack of connection was coming from me and not experienced by him.

It can really hurt relationships to bring up things like this if it isn't experienced by the other person, it might be all in your head.
by s1mplicissimus | 2025-11-18 14:41:57+00:00
> Fact is, most sites are better off with Cloudflare than without

Citation direly needed.

In particular I wonder: Who is that total mass of sites where you consider most being better off using cloudflare? I would be curious on what facts you base your assumption. How was the catalog of "all" procured? How are you so confident that "most" of this catalogue are better off using cf? Do you know lots of internals about how strangers (to you) run their sites? If so, mind sharing them?
by JohnFen | 2025-11-18 14:42:57+00:00
At least in my state, there is a law that restricts the location of headlights to between 22 and 54 inches from the ground. 54 inches is quite tall, though, I think that a lot of cars have roofs that are shorter than 4.5 feet. I'd love to see a much lower upper limit.

I don't think there's a limit to how bright they can be. The law limits the lights to "70 watts", which I believe is intended to limit brightness but misses the mark. I bet the law was passed back when headlights were incandescent.
by gspencley | 2025-11-18 14:43:09+00:00
My wife and I own a small theatre. We can process orders in-store just fine. Our customers can even avoid online processing fees if they purchase in-store. And if our POS system went down, we could absolutely fall back to pencil and paper.

Doesn't change the fact that 99% of our ticket sales happen online. People will even come in to the theatre to check us out (we're magicians and it's a small magic shop + magic-themed theatre - so people are curious and we get a lot of foot traffic) but, despite being in the store, despite being able to buy tickets right then and there and despite the fact that it would cost less to do so ... they invariably take a flyer and scan the QR code and buy online.

We might be kind of niche, since events usually sell to groups of people and it's rare that someone decides to attend an event by themselves right there on the spot. So that undoubtedly explains why people behave like this - they're texting friends and trying to see who is interested in going. But I'm still bringing us up as an example to illustrate just how "online" people are these days. Being online allows you to take a step back, read the reviews, price shop, order later and have things delivered to your house once you've decided to commit to purchasing. That's just normal these days for so many businesses and their customers.
by IAmBroom | 2025-11-18 14:43:33+00:00
That's a wildly stretched metaphor. Spraying a threat with a chemical weapon so powerful it will deter a hungry predator is not akin to winking at a cute girl or boy.

And if the scent gland is "part of their communication system", then a loaded 45 is part of a (domesticated, modern) human's.
by ZeroConcerns | 2025-11-18 14:43:37+00:00
Most sustained DDOS attacks will cause your hosting provider to drop you. Sure, you can recover from that in 72 hours or so, but that's not as simple as "turning on Cloudflare" at that point.

Seriously: having someone in charge of your first-line traffic that is aware of today's security landscape is worth it. Even if they require an upgrade to the "enterprise plan" before actually helping you out.
by comrade1234 | 2025-11-18 14:43:40+00:00
The one time my company suffered a denial-of-service attack we were able to get support from our colo provider to stop the attack. This was years ago and our provider has been bought a couple of times and while the company has grown the staff are more remote and fewer in number so I'm not sure if we'd get the same support today.

So, every now and then I think about at least putting our assets on a cdn with the option of using it in the case of a ddos attack but then I see things like today and the recent Aws problems and I just get the feeling I should keep everything close.
by herbst | 2025-11-18 14:43:52+00:00
I get constantly attacked.

Usually it's big actors like Facebook, Azure and OpenAI who bombard my servers without any respect or logic. I need to update my access rules constantly to keep them away (using Cloudflare) Sometimes it's clustered traffic, more classic DDoS, from China, Russia or America. That I could easily filter with the DDos protection from my hosting (which is cheaper than cloudflare anyway)

What should I do if not Cloudflare to block with "complex rules" that is strong enough to survive hundreds of concurrent requests by big companies?
by llm_nerd | 2025-11-18 14:44:06+00:00
I have several tiny blogs behind Cloudflare. I'm not going to change a thing because of an exceptional event happening, and I think knee-jerk pontificating or being reactionary is extremely unproductive.

And DDOS is hardly my concern, and was never the reason I went to CF in the first place, so the whole foundation of this seems to be a strawman.
by marcosdumay | 2025-11-18 14:44:41+00:00
> while still keeping their coal/methane plants running

Methane, yes. The coal plants are being slowly shut down, as they are too expensive to run even after they were paid for.

You also seem to ignore the huge amount of utility-level PV farms and generation-side storage built recently. You are technically correct in that renewables don't fit everywhere, but that's again a common propaganda phrase because they fit the places where almost everybody lives, and long distance transmission already solves the problem for most people outside of that area.
by cubefox | 2025-11-18 14:45:02+00:00
In an interview with Lex Fridman, John Carmack said that in retrospect, Quake was too ambitious in terms of development time, as it both introduced network play and a fully polygonal 3D engine written in assembly. So it would have been better to split the work in two and publish a "Network Doom" first and then build on that with a polygonal Quake.

Which seems to imply that the network stack was about as difficult to implement as the new 3D engine.
by mapt | 2025-11-18 14:45:11+00:00
Do we enforce it?

At all?

It isn't just retrofits that are a problem, it's brand new cars.

It's not just about not wanting to be uncomfortably blinded by lasers shooting into your eyes at night. (Lasers well under 3000 lumens!). It's that this kills people. Frequently. It's a form of assault with hundreds of dead victims and thousands of injured victims a year.
by Aachen | 2025-11-18 14:45:27+00:00
Where I live, it's customary to let other drivers know by flashing your brights when they're blinding you or if there's some other issue with their vehicle like a broken tail light or such. Maybe less now that you can't easily change the bulb yourself but as a principle

In recent years I've started being unable to tell who's intentionally blinding traffic and who's just got misconfigured lamps (shining at eye level instead of angled down at the road). It used to be feasible to also let people know when their lights are misconfigured, I'd probably decide 1 warrants a signal across several hours of driving (also because of avoiding collateral targets), but the most recent time I drove, I think there was always at least one car in sight that had the issue. It's completely constant. It was worsening a few years ago but it's really getting out of hand now, in Germany and the Netherlands at least. Some people's lights are even piercing by day! Thankfully that is quite rare yet
by WesolyKubeczek | 2025-11-18 14:45:41+00:00
...or piss those guys enough that they will call police on you for blinding them and creating a road hazard, or someone unhinged enough gets pissed off and will follow you, after which your behind will dearly regret buying such a long LED bar.

This is the same kind of useful advice as the one to brake check those whose driving style you don't like very much, fight (real or perceived) road hazard with deliberately creating more hazard.
by greengreengrass | 2025-11-18 14:46:04+00:00
> you are by definition moving _away_ from single point-of-failure

Depends on the frame of reference of “single point-of-failure”.

In the context of technical SPOFs, sure. It’s a distributed system across multiple geographies and failure domains to mitigate disaster in the event any one of those failure domains, well, fails.

It doesn’t fix that technology is operated by humans who form part of the sociotechnical system and build their own feedback loops (whose failures may not be, in fact are likely not going to be, independent events).

SPOFs also need to contemplate the resilience and independence of the operators of the system from the managing organisation. There is one company that bears accountability for operating CF infra. The pressures, headwinds, policies and culture of that organisation can still influence a failure in their supposedly fully distributed and immune system.

For most people hosting behind Cloudflare probably makes sense. But you need to understand what you’re giving up in doing so, or what you’re sacrificing in that process. For others, this will lead to a decision _not_ to use them and that’s also okay.
by dylan604 | 2025-11-18 14:46:20+00:00
From within this own topic, there are clues:

https://news.ycombinator.com/item?id=45951713

Sure, all of the elements were captured, but not in a single image released as the final image. If you look at a search for “solar transit”, none of them have as much detail in the sun as this one. That’s evidence of comping the sky diver onto his mosaic. It’s similar to when people come in a full moon over itself when captured in a wide angle image. Yes, the moon was there and it is just updated with something with more detail and better exposure, but it’s not a single image possible to capture without comping. Maybe it’s not as obvious to someone less familiar with astrophotography, but that just makes the sin that much worse.

At the end of the day, it’s a great artistic shot, but it nothing more than the same level of effort to make a modern Marvel movie
by pjmlp | 2025-11-18 14:46:37+00:00
With "Works best with Microsoft Linux" stickers, it wouldn't be WSL 2.0 only.

That we already have today, and really WSL is only good enough for me to not bother having VMWare or Virtual Box, as I have been doing since switching back into Windows (during Windows 7 heyday) as main laptop OS.
by Aurornis | 2025-11-18 14:47:00+00:00
I don’t know, but I will say that this team that was hired into our company was so hyperfocused on any numbers they planned to use for performance reviews that it probably didn’t matter which service you chose to measure the website performance. They’d find a way to game it. If we had used the internal devops observability tools I bet they would have started pulling back logging and reducing severity levels as reported in the codebase.

It’s obviously not a problem at every company because there are many companies who will recognize these shenanigans and come down hard on them. However you could tell these guys could recognize any opportunity to game the numbers if they thought those numbers would come up at performance review time.

Ironically our CEO didn’t even look at those numbers. He used the site and remembered the recent outages.
by igneo676 | 2025-11-18 14:47:13+00:00
I'm reminded of a rather unpopular statement made by Mark Shuttleworth

> Don’t trust us? Erm, we have root. You do trust us with your data already. You trust us not to screw up on your machine with every update

By using Windows, you're impicitly trusting Microsoft and every update they make and that it won't screw things up. If you've somehow stuck around past the integrated ads, screwy install process that forces you to have an online account, and the thousands of other papercuts then you shouldn't be surprised to find some other user hostile move has taken place.

Good luck with that I guess
by bofadeez | 2025-11-18 14:47:20+00:00
Yeah markets are disconnected from fundamentals. Conduct causal inference with any fundamental metric on forward returns and you'll see they have almost zero predictive ability. That supports the efficient market hypothesis, as do many many other observations.

If you could simply "value the market" in some analytical way, then any simple neural network would (universally) approximate it. Instead you see the vast vast majority of machine learning quant funds fail. Here are the specific details as to why: https://www.youtube.com/watch?v=BRUlSm4gdQ4
by swiftcoder | 2025-11-18 14:47:35+00:00
> > Keep your domain name registrar, DNS service provider and application infrastructure provider separately.

> Fair point but you also get exposed if the dns provider has an outage

The usual workaround here is to put two IP addresses in your A record, one that points to your main server on hosting provider A, and the other to your mirror server on hosting provider B.

If your DNS provider goes down, cached DNS should still contain both IPs. And if one of your hosting providers goes down as well, clients should timeout and then fallback to the other IP (I believe all major browsers implement this).

Of course this is extra hassle/cost to maintain, and if you aren't quite careful in selecting hosting providers A and B, there's a good chance they have coordinated failures anyway (i.e. both have a dependency on some 3rd party like AWS/Cloudflare).
by basch | 2025-11-18 14:47:52+00:00
Its absurdly slow (like multiple minutes to get the login page to fully load for the login button to be pressable, due to catchpa...), but I was able to log into the dashboard. It's throwing lots of errors once inside, but I can navigate around some of it. YMMV.

My profile (including api tokens,) and websites pages all work, the accounts tab above website on the left does not.
by throaway1975 | 2025-11-18 14:48:00+00:00
We don't need a "crackdown..." which I never supported in any comment? You seem to be lumping me in with some "people," that you have a problem with, I suggest you take up your problem with them. We need education, and checks on the gigantic corps that have 0 interest in anything but profit. That includes creating addictions which is not debatable, it's been admitted by many engineers who worked for smartphone companies.

My entire comment was about simply spending LESS time on the internet (while growing up in the 90s). If you never had a problem with it, good for you. Lots of people do. Digital Id's are a huge leap from my comment and have nothing to do with anything im talking about. Or do you usually jump down the throats of people who say things which in some possible, tangental way could offend you?

And in any case, I already know parents my age who aren't giving their kids computers and phones till they're adults, and I think this will eventually become, roughly, the new normal. They didn't need to be "forced," by "people like me," they just drew from their own experience and made a decision.

"Falsely suggest," well I was clearly meaning "your" in the general sense, not in your specific case, but thanks for being specific! I too have no smartphone...but I'd guess that 95% of people do! And they keep it in their pocket, all the time, because they "need it!"

Finally...I never said anything about what adults should do. I mentioned my own experience as a kid. We protect kids from lots of stuff.
by ZeroConcerns | 2025-11-18 14:48:03+00:00
> total mass of sites where you consider most being better off using cloudflare?

Most. A lot of simple sites are hosted at providers that will be taken down themselves by run-of-the-mill DDOS attacks.

So, what will such providers do when confronted with that scenario? Nuke your simple site (and most likely the associated DNS hosting and email) from orbit.

Recovering from that will take several days, if not weeks, if not forever.
by looperhacks | 2025-11-18 14:48:24+00:00
> Yes, it is of course in Germany forbidden to kill an invading predatory species - even on your property. This is Germany 2025.

Raccoons can and are hunted in Germany, what are you talking about? The federal laws regarding hunting don't mention them and thus allow states to decide. I haven't checked every states local laws and executive orders, but I'm not aware of any that don't allow hunting raccoons.
by juancn | 2025-11-18 14:48:34+00:00
This has been done many times in many places.

Argentina did it last in 2001 or so (several parallel currencies were issued by different provinces: https://es.wikipedia.org/wiki/Cuasimonedas -Spanish only-).

When the central government fails, in many cases local governments attempt anything to keep functioning.

It does work, but the cleanup is messy.
by andsoitis | 2025-11-18 14:48:44+00:00
> African American artist mother

I had no idea Alex Karp was black.

Anyhow:

> On CNBC’s Squawk Box, he shook both fists simultaneously as he railed against short sellers betting against Palantir, whose share price has climbed nearly 600% in the past year: “It’s super triggering,” he complained. “Why do they have to go after us?”

This and a few other sections make me wonder how much introspection the guy has and whether he ever concedes that he is wrong.
by pdimitar | 2025-11-18 14:48:48+00:00
> But why not simply write the code that needs to be fast in C and then use call it from Ruby?

Because often that's a can of worms and because people are not as good with C as they think they are, as evidenced by plenty of CVEs and the famous example of quadratic performance degradation in parsing a JSON file when the GTA V game starts -- something that a fan had to decompile and fix themselves.

For scripting these days I tend to author small Golang programs if bash gets unwieldy (which it quickly does; get to 100+ lines of script and you start hitting plenty of annoyances). Seems to work really well, plus Golang has community libraries that emulate various UNIX tools and I found them quite adequate.

But back to the previous comments, IMO both bash and Ruby are quite fine for basic scripting... if you don't care about startup time. I do care in some of my workflows, hence I made scripts that pipe various Golang / Rust programs to empower my flow. But again, for many tasks this is not needed.
by jstimpfle | 2025-11-18 14:48:58+00:00
Sorry, I don't find that convincing but rather construed. This still seems like "constructor" type code, so the final object is not ready and locking should not happen before all the protected fields are constructed.

There may be other situations where you have an object in a specific state that makes it effectively owned by a thread, which might make it possible to forgo locking it. These are all very ad-hoc situations, most of them would surely be very hard to model using the borrow checker, and avoiding a lock would most likely not be worth the hassle anyway.

Not sure how this can help me reduce complexity or improve performance of my software.
by bayindirh | 2025-11-18 14:49:25+00:00
I believe so, but I need more evidence in either direction to give it a definitive answer, but why companies recall cars to fix their brightness levels if they are not enforced?

> It's not just about not wanting to be uncomfortably blinded by lasers shooting into your eyes at night.

I mean, being uncomfortably blinded creates the risk of being dead already. I believe I made it clear that it's dangerous.
by gwbas1c | 2025-11-18 14:50:11+00:00
I once quit a job because it was toxic. At the time, I was saving so I could start a business, but the environment became so toxic that I needed to walk out much earlier than planned.

My "6 month" runway ended up lasting a lot longer, mostly due to the stock market taking off. I ended up living off of interest for 18 months. By the time I admitted to myself that I wasn't much of an entrepreneur and needed to go work for someone else, I hadn't taken too much out of savings. I also had straightened out my head quite a bit, so I was able to figure out what kind of salaried jobs made me happy. (And paid enough for me to live a good life and save.)

I really encourage you to see if there's a way to adjust your finances so you can live more cheaply, save, and then live off of your interest for a period of time to get your head straightened out.
by throwaway150 | 2025-11-18 14:50:18+00:00
> one DDOS won't kill your business

I see many people saying this but be honest, do you know this for sure or are you just guessing? I've experienced DDoS so I know I'm not just guessing when I say that if your website gets DDoSed your hosting service would just take your website down for good. Then good luck running circles around their support staff to bring your website back up again. Maybe it won't kill your business but it'll surely create a lot of bad PR when your customers find out how you let a simple DDoS attack spiral out of control so bad that your host is refusing to run your website anymore.
by thr0w | 2025-11-18 14:50:21+00:00
> But if you’re down, Spotify is down, social media is down… then “the internet is broken” and you don’t look so bad.

In my direct experience, this isn't true if you're running something even vaguely mission-critical for your customers. Your customer's workers just know that they can't do their job for the day, and your customer's management just knows that the solution they shepherded through their organization is failing.
by subhadipmitra | 2025-11-18 14:50:35+00:00
Author here. This is an RFC for open AI consent standards, not a product announcement.

The thesis: Training data lawsuits, agent security vulnerabilities, and user lock-in are architectural problems. We're trying to regulate AI without infrastructure to regulate.

I documented four standards:

- LCS-001: Consent tokens for training data (with attribution + compensation)

- LCS-002: Digital twins (user-owned, portable AI profiles)

- LCS-003: Agent permissions (capability-based security to prevent prompt injection exploits)

- LCS-004: Cross-agent memory (shared context with privacy controls)

The specs are on GitHub: https://github.com/LLMConsent/llmconsent-standards

Hardest unsolved problems I'm wrestling with:

1. Attribution in neural networks (influence functions are expensive/imperfect)

2. Enforcement without regulatory pressure

3. Whether L2s are really cheap enough for this use case

I'd especially value criticism on:

- Does LCS-003 actually prevent the "confused deputy" agent exploits?

- Is the digital twin evolution protocol (LCS-002) realistic?

- Better alternatives to blockchain for decentralized verification?

Happy to answer questions. Looking for serious technical feedback, not validation.
by Aachen | 2025-11-18 14:50:48+00:00
Despite the "I need this in the sticks" responses here, I think the most common answer is the silent group that didn't ask for it but it just comes with the car. This group is silent anyway, they didn't have the issue/need but also won't complain about the extra light, whereas a few other people did and so you can just make 1 size fits all with no repercussions (besides perhaps selling more replacement lamps)