MurphyA/hacker-news huggingface dataset:
by jillesvangurp | 2025-11-01 07:57:38+00:00
I have the M4 Max. The fans never really come on unless I launch something that maxes out the GPUs, which I rarely do. I do have some software projects that use all CPUs and maxes those out while they build (all 14 of them). The fans stay silent.

This is, by far, the fastest machine I've ever had. My previous laptop was a more modest M1 mac book pro. And before that I was on a cheapo intel i5 Samsung laptop - a stop gap solution after my last intel mac died when a loose keyboard key destroyed the screen (yep the generation with the crappy keyboards, worst mac I've ever owned). That intel was of course pathetic and shit. I wasn't expecting much and it disappointed me despite that. The M1 was about 3x faster. The M4 Max is a beast. In terms of build speeds, the i5 was unusable while building and would take 15 minutes. The M1 got it down to 5 minutes (10 CPU cores that are faster than the 4 intel ones). But it didn't have enough memory so swapping slowed it down a bit. The M4 max builds stuff in around 30 seconds. No more swapping and the 14 cores are quite a bit faster than the M1 ones. Same project (but of course with a few years of development). We have more tests now, not fewer.

Otherwise it's a great laptop. Keyboard is fine. Touchpad is best in class in the industry (everything else is pathetically mediocre in comparison; it's not even close), the screen is best in class as well (contrast, colors, resolution, everything). And Apple learned it's lesson when it comes to keyboards. Most windows/linux laptops I'm aware off are a compromise between heating/cooling, lousy input and output devices, performance, design, screen quality, etc. Apple nails all of those things. Nobody else does.

High end Macs are not cheap. But for professionals it's a minor expense. If you lease a car for getting your ass to work every morning, you are probably spending 2-3x more at least than what this would cost you. And the whole point of getting to work is to open your laptop and earn a living with it. It's more important than the damn car. It's what pays for that car. I spend less than what used to be 1 hour of my freelance rate per month on this absolute monster. Maybe it's 2 hours for you if you just got started. That's still nothing on 160ish billable hours per month. Employers tend to be less enlightened of course. But if it's your choice, don't be frugal and buy the laptop you need. If a simple browser is all you need, of course get something decent looking like a mac book air or whatever. But otherwise, get the best you can afford. I've compromised once with that Samsung. I did not enjoy that.
by da_chicken | 2025-11-01 07:57:48+00:00
That's not any different than JSON, though. Injection, insecure deserialization , etc. can all exist in that format as well.

There's plenty of reasons to criticize XML, and plenty more to criticize XSLT. But security being the one you call out feels at least moderately disingenuous. It's a criticism of the library, not the standard or the format.
by rand17 | 2025-11-01 07:58:16+00:00
English is not my mother tongue, so all I can say is no, that's not how communication works (of course you can think whatever you want or your neurons conjure up, I can't argue with what you think). Discourse analysis revolves around the dynamics of speaking, speakers and conversations: gender, age, empathy, attention there are lots of factors in play that decide who speaks and how or when the other party or parties can take turn (or whether the turn is given). Taking turns is not a social contract; it's a rule in your head. You're free to decide to punish people for violating rules in your head, but depending on the level of punishment, you may end up in court.
by masklinn | 2025-11-01 07:58:37+00:00
> Consumers are happy with physical SIMs, you obtain one, you put it in your phone then you forget about it until you swap your phone.

As a consumer I was much happier with esims: I swapped provider, got the esim in the mail essentially instantly, put it in my phone, and forgot about it util I swapped phone... at which point esim transfer was part of the migration so I essentially didn't have to think about it either.
by elric | 2025-11-01 07:59:23+00:00
I have no idea what you're talking about. Graphene is my daily driver. "Manual configuration" does not ring any bells. Google OS-level integration being "absent" is a core feature, not an annoyance.

The problem with Graphene is that some app publishers are absolute asshats, they think their app is "more secure" when they require the Google verification spiel, when it is the other way around.
by imiric | 2025-11-01 08:00:30+00:00
> People are free to make their own browser if they want.

Some peple are doing that[1]. It's not a matter of desire, but of the amount of effort and resources required to build and maintain the insanity of the modern web stack.

> Part of the reason google chrome won the browser wars is because they are willing to make decisions like this.

Eh, no. Google Chrome won because it is backed by one of the largest adtech corporations with enough resources and influence to make it happen. They're better at this than Microsoft was with IE, but that's not saying much. When it launched it introduced some interesting and novel features, but it's now nothing but a marketing funnel for Google's services.

[1]: https://ladybird.org/
by shswkna | 2025-11-01 08:01:04+00:00
Good question that probably shouldn’t be downvoted.

A subjective answer is, if you have been there and know this to be real from personal experience.

A more general answer would be, as long as we humans sufficiently interact with reality, we will have a respository of life experience to benchmark against.

Once we cease to do that, and are the product of a life in front of the screen, then we won’t know anymore.

Edit: This place is relatively close to where I live.
by dns_snek | 2025-11-01 08:01:31+00:00
> In the US, the Democrats as a party are center-left.

The case of US Democrats is an example of how useless the 1-dimensional classification is. They can be very socially progressive which would seem to put them well into the "left-wing" territory, but economically they're in the right-wing territory.

Economically speaking, a candidate like Sanders (considered to be too radical even by the Democrats and painted as an extremist by the Republicans) would be considered centrist/centre-left in most of Europe. He supports single payer healthcare and policies that would strengthen worker protections and improve the social safety net, but he doesn't fundamentally oppose capitalism. That's the status quo in most of Europe.
by epakai | 2025-11-01 08:02:52+00:00
I recently noticed the mom and dad TLDs. One has a lot of potential for phishing so all the big sites seem to have MarkMonitor registering their names there. You can visit ebay.mom though, and amazon.mom redirects to an inactive URL for the family program.

Curiously, dead.mom was redirecting to www.nro.gov, an org with a rather interesting secret history.
by bartread | 2025-11-01 08:02:52+00:00
Dude… no.

Firstly, it puts a huge burden of non-value-adding work onto developers and the organisations they work for.

Secondly it would lead to even higher frequency and prevalence of people inventing their own half-arsed ways of doing things that used to be in the box. Nobody would think about standard usability affordances, accessibility, etc.

Thirdly, it would simply move the attack surface into an emergent library ecosystem without really solving anything.

Fourthly, it would increase website payloads even further. Developers have historically been awful at using bandwidth efficiently (still a concern in many scenarios due to connectivity limitations and costs), and we don’t need to offer more opportunities for them to demonstrate how terrible and undisciplined they are at it.

Fifthly, not everyone wants or needs (or should!) to learn web assembly in the same way that not everyone wants or needs to learn x86/64 assembly, ARM assembly, C or Rust.

Sixthly, it would lead to a huge amount of retooling and rewriting which, yes, to some extent would happen anyway because, apparently, we all love endless churn masquerading as progress, but it would be considerably worse.

The web would become significantly buggier and more unusable as a result of all of the above.
by popularonion | 2025-11-01 08:03:28+00:00
I used to feel that way but I’m completely over it, especially going through the experience of registering a few domains for side projects recently. There are just too many already squatted.

The only other market based solution I can think of is just charging like $10,000/yr minimum per domain name and forcing the plebs to use randomly generated strings like Tor onion sites
Show HN: RememBook – remember your books using spaced repetition quizzes
by flopsa | 2025-11-01 08:08:17+00:00
Hey HN,

I love to read but hate that I forget most of what I read. The best way to consolidate long-term memory is using spaced-repetition quizzes. I built this side-project to help me with that.

Every day it generates quiz questions about your books, then track which questions you get right/wrong and ask those less/more frequently. Over time this helps cement core ideas / plots / story arcs / facts.

It's not perfect but I am finding that it's helping me retain more. Even just to stop and think about a question from a book I read a while ago is useful. If you want you can opt-in to daily email reminders via user settings.

I would appreciate any feedback or further ideas you might have!
by iamacyborg | 2025-11-01 08:09:09+00:00
> In the BBB there was a tax code change that says you can only write off 90% of your losses from sports betting now.

If I understand correctly that’s no longer the case as “sports betting” prediction markets are now becoming a financial product.

https://www.bloomberg.com/opinion/newsletters/2025-07-10/do-...
by zyphera | 2025-11-01 08:09:17+00:00
Hi HN — I built a simple SaaS that lets students, freelancers, and creatives create and manage online portfolios in minutes.

What it does:

Add, edit, or delete projects anytime from a clean dashboard

Lifetime access after a one-time payment (999 KES ~$8)

No coding needed — just register and start building

Perfect for developers, designers, writers looking to showcase work

Why I built this: Many struggle to showcase work professionally without coding. Wanted to create a fast, flexible system they fully control.

Links: Live Demo: https://portfolio-frontend-clinton.onrender.com/portfolio/cl... Register: https://portfolio-frontend-clinton.onrender.com/register

I'd love your feedback on the UX, pricing model, and design!

— Clinton
by jillesvangurp | 2025-11-01 08:09:25+00:00
You create your own luck. There's a difference between fatalism and pessimism. A pessimist might still choose to act despite expecting failure. A fatalist just gives up.

You create options for success through hard work. You need luck and inspiration to stumble upon the right options, and you need experience and wisdom to recognize it when you do. And you can do everything right and never get there. But without putting in the hours you likely don't create the options nor gain the wisdom to judge them correctly when you do. Don Reinertsen coined a notion of option value in his books and presentations on Lean 2.0. It's something that resonates with me. Lots of startups practice Lean 1.0 which is more like throwing out the baby with the bathwater.

> And not to piss in your cereal but having leads for $bigcorp means nothing until a deal is inked.

Very aware of that, obviously.
by jasonkester | 2025-11-01 08:09:41+00:00
Ah, shame. I always meant to expand on my little experiment here to ship 100% content pages to the client:

http://www.blogabond.com/xsl/vistacular.xml

The upside is that the entire html page is content. I defy google to not figure out what to index here:

view-source:http://www.blogabond.com/xsl/vistacular.xml

The downside is everything else about the experience. Hence my 15 years of not bothering to implement it in a usable way.
by dolmen | 2025-11-01 08:10:53+00:00
Cosmocc and Cosmopolitan are remarkable technical achievements and llamafile made me discover them.

The llamafile UX (CLI interface and web server with chat to quickly interact with the model) is great and make easy to download and play with a local LLM.

However I fail to see use cases where I would build a solution built on a llamafile. If I want to play with multiple models, I don't need to have the binary attached to the model data. If I want to play with a model on multiple operating systems, I'm fine downloading the llamafile tool binary for the platform separately from the model data (in fact, on Windows one have to download the llamafile.exe separately anyway because of a limit of the OS for executable files).

So Cosmopolitan is great tech, the llamafile command (the "UX for a model" part) is great, but I'm not convinced by the value of Cosmopolitan applied here.
by hunglee2 | 2025-11-01 08:12:11+00:00
The improvements on public sanitation in China is one of the most obvious signs of social development. When I first visited in around 2008, sanitation was definitely 3rd world - incredibly bad, even in major cities like Beijing and Guangzhuo, no need to say more!

15 years on the change has been incredible

Firstly, availability - there seem to be public toilets every 500 metres so you are never caught short. This is huge for accessibility, especially for older generation. Secondly, cleanliness - either modern + self cleaning or modern + staffed: the result is better hygiene than you find in other people's homes. Thirdly, connected. I'm not sure about this particular example but it wouldn't surprise me to see that these public toilets are connected, so that the data can be used to better understand utility and even public health. It's been great progress
by anon10484810573 | 2025-11-01 08:12:18+00:00
> Why do techies forget that the legal system exists?

Simple, the gamble is it often makes business sense to "forget". Initially it could be they are unaware of the specific law but after a certain period of time it can really only be assumed the motivation is it is more convenient to ignore it.

Not all techies are like this.

Until the regulatory system corrects this calculus it will keep happening. Reputational costs or social costs sure wont correct it in this day and age.
by troupo | 2025-11-01 08:13:58+00:00
> Kitchen sink software is bad software.

Ah yes. That's why Chrome bravely refuses to be a kitchen sink. It only has a small set of available APIs like USB, MIDI, Serial, Sensors (Ambient Light, Gyroscopes etc.), HID, Bluetooth, Barcode detection, Battery Status, Device Memory, Credential Management, three different file APIs, Gamepads, three different background sync APIs, NFC...
by cepera | 2025-11-01 08:14:02+00:00
>Nim unfortunately has a toxic Dictator at the top, and his subordinates defend his behaviours. While this continues nobody should take Nim seriously.

I can mention just exactly the same pattern with one widespreaded OS that anyone is taking seriously.

And I know one very popular and often mentioned systems programming language with "community" driven design process with inclusive and stuff which is in some kind of stagnation without BDFL (async fragmented ecosystem without C++ burden of 40 years of legacy).

Why do you think that "welcoming" is a must for successful IT projeсt?
by unscaled | 2025-11-01 08:17:10+00:00
I wish I could upvote this more. I can totally understand GP's sentiment, but we need to dispel the myth that results are just checked exceptions with better PR.

I think the first issue is the most important one, and this is not just an implementation issue. Java eschewed generics on its first few versions. This is understandable, because generics were quite a new concept back then, with the only mainstream languages implementing them then being Ada and C++ - and the C++ implementation was brand new (in 1991), and quite problematic - it wouldn't work for Java. That being said, this was a mistake in hindsight, and it contributed to a lot of pain down the road. In this case, Java wanted to have exception safety, but the only way they could implement this was as another language feature that cannot interact with anything else.

Without the composability provided by the type system, dealing with checked exceptions was always a pain, so most Java programmers just ended up wrapping them with runtime exceptions. Using checked exceptions "correctly" meant extremely verbose error handling with a crushing signal-to-noise ratio. Rust just does this more ergonomically (especially with crates like anyhow and thiserror).
by DyslexicAtheist | 2025-11-01 08:17:31+00:00
Marcus Hutchins¹:

-----------------------------------------------

LMAO. Kevin Beaumont roasted that "80% of ransomware attacks are now powered by AI" paper² so hard that MIT appears to have deleted it (link was working as recently as a day ago). The paper was so absurd I burst out laughing at the title. Then when I read their methodology I laughed even harder.

They basically took a sample of ransomware attacks then tried to figure out how many "used AI". Their definition of "used AI" was basically "the threat actors are known to use AI for anything in any capacity".

Their definition of "AI powered" was already dubious. But what's even more hilarious, they never even explained how they concluded that a threat actors was "using AI".

Many of the threat actors they cited as "using AI" were ones I personally tracked as part of my day job and can testify did not use AI.

Furthermore, they claim to have analyzed attacks across 2023-2024, but several ransomware groups they cited as "definitely using AI" died out prior to 2023. One even died out before the first GPT model was released.

While this specific claim and incident is especially egregious, it's only a small part of a growing trend. For a while now, tech companies have been disguising marketing blog posts as academic research, sometimes even publishing it via respected journals.

It's very hard to get people to take cybersecurity seriously when we have a bunch of cracked out corporate marketing bozos posting nonsense "research" to scientific journals.

-----------------------------------------------

¹ https://www.linkedin.com/posts/malwaretech_lmao-kevin-beaumo...

² https://web.archive.org/web/20250708174552/https://cams.mit....
by fragmede | 2025-11-01 08:17:58+00:00
It's an open secret by now that OpenAI and SpaceX have already minted hundreds of millionaires, and in California (SpaceX has a large socal office) they'll end up paying 50.5% tax (CASDI+others). (AMT is a whole other thing.) The amount of service they get for that is enough to turn anyone Republican, however.
by bartread | 2025-11-01 08:18:17+00:00
Yeah… on the one hand I don’t care about XSLT, haven’t used it in more than 20 years, and never intend to use it again.

On the other… I’m still a bit uncomfortable with the proposed change because it reads as another example of Google unilaterally dictating the future of the web, which I’ve never liked or supported.

Feeling quite conflicted.
by TeMPOraL | 2025-11-01 08:19:17+00:00
> breaking encryption and chatcontrol

The two are not equivalent issues; the first one is ill-formed as stated.

Cryptography is a tool of control. It's "dual-use", in the same sense like a knife or nuclear fission is - its moral valence depends on who is wielding it, and to what end.

In the context we're discussing, encryption is being used against the people. Working encryption is in fact needed to make chat control work - it's fundamental to it, the same way it is to Developer Verification and Safetynet/Remote Attestation. It would be great if EU decided to break that set of encryption applications. Alas, chat control only wants to break E2EE on messages, and uses encryption elsewhere to guarantee E2EE stays broken.

A more general comment about this thread, and related ones in the past: people really need to stop thinking about "encryption" and "security" as inherently good. They're not. Most of the social problems with computing, the attempts at user disempowerment and disenfranchisement, persist because they apply cybersecurity solutions.

The core question of security is always: who exactly is being secured, and from who.
by sfRattan | 2025-11-01 08:20:30+00:00
> To my tastes these days Gnome Shell and associated GTK3/4 apps (see Gnome Circle), plus Flathub, are easily the most consistent and pleasant desktop app experience around.

I generally agree with this, with respect to the apps. There are a few dead simple Gnome apps I've found are great to use, but it's just as easy to use them from another desktop environment. I'm inevitably going to have both Gnome and KDE libraries installed, even if I'm using neither desktop environment, and the sheer amount of storage and memory on modern machines makes that just fine. So I don't look at those apps as a selling point of Gnome per se. But you're absolutely right: Gnome's sleek, tiny little applications are often very well designed and useful. It's more the desktop environment around them that irks me every time I try it.

> I don't run it (yet), but Fedora Silverblue is the future (for consumers running desktop Linux). I believe this in my heart.

I also agree here about atomic distros. They're the future. I'm running Kinoite on most of my machines now and am loving how stable and out-of-the-way it is. The size of the frequent updates was a bit shocking at first, but I have gigabit Internet now so...

¯\_(ツ)_/¯
by jama_ | 2025-11-01 08:20:49+00:00
I don't see myself as that averse. To me, if they found a clever domain hack, or if the name is such that the TLD is part of it (like https://teenage.engineering) - sure, go for it. Happy to see it actually! Gives it character and shows that a modicum of thought was put into the choice. For the website of my gamedev team (called secret industries) I was happy to see .industries being a TLD. Quite long, but easy to remember if you remember the name.

For personal use, as long as the TLD has a decent enough reputation to use with email (https://www.spamhaus.org/reputation-statistics/), I'd be fine with almost whatever, too. I personally use a ccTLD, but things like Jeff Gerstmann's site (https://jeff.zone) are fun. There are tons of other examples, this one just came to mind first.

What does feel dodgy and fake to me is when I see a known name with the new gTLDs. Sometimes SaaS have their landing/marketing site on a different TLD than the app itself. If you find both via web search, that looks weird to me.

The city TLDs and highly specialized or non-English ones (like .kaufen, .whoswho, .abogado) and the tons and tons of paid subdomains are so rare that they always seem out of place.
by phaker | 2025-11-01 08:21:04+00:00
1. It's a hobby in your own right. The nasty is not that bad, back in the day the annoying thing was how fiddly it was but the community thought of better ways like etching with a sponge. You can get better boards made online but that applies to all hobbies.

2. In most of US/EU you get them for $5 in up to _two weeks_, or in two days for $5+$2X or more which adds up quicklyand can be more than the rest of the project. Even next day shipping loses out badly to making it yourself in ~30 minutes, turns into two days delay unless you're lucky to have an idea in the morning and time to work on it in the next afternoon, a lot of the time i see people bodging things i'd make another board for because it's just easier.