MurphyA/hacker-news huggingface dataset:
by rafabulsing | 2025-11-24 12:37:59+00:00
I really do think that would be annoying enough to snap a good amount of people out of the mindless autoscrolling loop. There's a reason why companies love 1 click buying, for example. At scale, any extra interactions costs real money. The example of the ad is a good one where that's already a kind of high friction interaction, so one extra click is not that much more annoying, but that's not the case for the vast majority of interactions.

Granted, some people will certainly have a higher tolerance for this kind of enshittification. If companies find that the amount of money they can extract from highly targeting a given amount of users is greater than the amount of money they can make from more numerous but less targeted users, then they could choose to go down that path. That's a function of how tolerant the average user is of the confirmation prompts, and how much more money they can make from a targeted user.

We can't control that last variable, but we ultimately could control that first one. If we find that a simple confirmation prompt is not annoying enough for as many people as we'd like, we could make the confirmation prompts more annoying. Maybe make every confirmation prompt have to be shown for at least 5 seconds. Or require a cooldown between multiple confirmations. Or add captcha like challenges. And so on.

In the limit, I think you'd agree that if you had to wait 24 hours before confirming, that would probably be enough to dissuade almost everyone from going through with it, to the point most platforms would try to not have any personalization at all. (I wouldn't be happy with this end result either)

I think even a single, instant confirmation prompt would be enough to cause a sizeable difference. Maybe not enough. Maybe you're right, and it would make barely any difference at all. Then I'd be totally in favor of these more annoying requirements. But as a first step, I'd be happy with a small requirement like this, and progressively making requirements stringier if it proves not enough.
Ask HN: How do you spot AI writing?
by allanmacgregor | 2025-11-24 12:38:25+00:00
More and more of the articles I read and content that comes across my feed seem to be AI-generated. I like to think that I have a pretty keen eye to spot AI-generated articles, but it's more of a gut feeling.

There are some pretty obvious, lazy articles that are easy to spot: listicles, no substance, etc. But as AI tools get better and better, I'm curious what everyone else is doing to keep up?

Cheers!
by piotr_bulinski | 2025-11-24 12:38:42+00:00
We recently did evaluation of different ways of building a cross-plarform desktop app as a Go team. We have built a PoC with Wails and Fyne, and we love Fyne. After a week from making a decision to go with Fyne, we are now 90% done and already running first alpha tests with users (who also love the simplicity of it). Devs like the ease of development and a ton of dependencies we don’t need to worry about, since Fyne is a lot leaner than Wails.

Just my 2 cents ;)
by masfuerte | 2025-11-24 12:38:57+00:00
In my experience services aren't failing due to a lack of redundancy but due to an excess of complexity. With the move to the cloud we are continually increasing both redundancy and complexity and this is making the problem worse.

I have a cheap VPS that has run reliably for a decade except for a planned hour of downtime. Which was in the middle of the night when no-one cared. Amazon is more reliable in theory. My cheap VPS is more reliable in practice.
by only2dhir | 2025-11-24 12:39:13+00:00
I’ve just launched a free, privacy-focused password security tool designed for both developers and everyday users who want stronger, safer passwords — without compromising privacy.

What this tool does

Analyzes password strength using deep security rules Detects weak patterns like: • keyboard sequences • repeated characters • l33t substitutions • dictionary words Calculates brute-force cracking time Generates a secure, human-readable alternative password Provides multiple personalized improvement suggestions NEW: Save generated passwords securely — fully encrypted in your browser using AES with your key Your key never leaves your device (no storage, no logs, no tracking) 100% Privacy-First

Encryption happens client-side, in your browser Your secret key is never stored or transmitted Hosted over secure HTTPS You remain in complete control of your data
by prmph | 2025-11-24 12:39:47+00:00
Exactly, there is no easy solution to these problems.

The solutions that are effective also involve actually doing work, as developers, library authors, and package managers. But no, we want as much "convenience" as possible, so the issues will continue.

Developers and package authors should use a lockfile, pin their dependencies, be frugal about adding dependencies, and put any dependencies they do add through a basic inspection at least, checking what dependencies they also use, their code and tests quality, etc.

Package managers should enforce namespacing for ALL packages, should improve their publishing security, and should probably have an opt-in verified program for the most important packages.

Doing these will go a long way to ameliorate these supply chain attacks
by matheusmoreira | 2025-11-24 12:40:09+00:00
Recognizing pharmaceutical industry bias does not mean you can throw the baby out with the bathwater by claiming they "invented" ADHD to sell drugs. The fact drug companies want to sell drugs does not imply ADHD is fake. The fact teachers can't cope with hyperactive kids messing up their classes does not imply ADHD is fake.

Those attitudes are merely annoyances in a professional setting. It just means we have to undo the damage they cause. The amount of people helped by medications and therapy is substantial and cannot be ignored.

Christ. These discussions remind me of one of my professors. He used to claim ADHD was a made up disease too. He also used to say vitamin D deficiency was a drug company scam. Then I was diagnosed with ADHD and hyperparathyroidism secondary to vitamin D deficiency. It's as if god himself wanted me to be living proof that he was full of shit.
by orwin | 2025-11-24 12:41:13+00:00
You're talking about Paris here, not France. Even 'big' cities like Rennes or Nantes I never had to wait more than a week or two, and in the small city I live in I usually get appointments within a week (but I'm in a high QOL area so we might have a large concentration of specialists), and never out of pocket. But yes, in some areas you will have to drive up to two hours before finding a specialist.
by prmph | 2025-11-24 12:41:19+00:00
There is no easy solution to these problems.

The solutions that are effective also involve actually doing work, as developers, library authors, and package managers. But no, we want as much "convenience" as possible, so the issues continue.

Developers and package authors should use a lockfile, pin their dependencies, be frugal about adding dependencies, and put any dependencies they do add through a basic inspection at least, checking what dependencies they also use, their code and tests quality, etc.

Package managers should enforce namespacing for ALL packages, should improve their publishing security, and should probably have an opt-in verified program for the most important packages.

Doing these will go a long way to ameliorate these supply chain attacks.
by rafabulsing | 2025-11-24 12:41:20+00:00
That's a good point. As I pointed out, I'm ok with global state (total votes, how recent is a post, etc). Randomness could be thought as a kind of global state, even if it's not reproducible. As long as it's truly random, and not something where user A is more likely to see it than user B for any reason, then I'm fine with it.
by daimajia | 2025-11-24 12:41:22+00:00
Great suggestions! I love the B2B angle - weekly themed PDFs for schools/organizations is something I hadn't fully considered.

For now keeping it free to build user base, but definitely thinking about premium tiers for: - Custom theme uploads - Organization licensing - Curriculum-specific content

The Cloudflare crawl protection is a good call too. Already using R2, so makes sense to add that layer.

Thanks for the thoughtful ideas - this is exactly why I posted here!
by potato3732842 | 2025-11-24 12:41:26+00:00
A mechanic/storage lien is simply a way to get title without the cooperation of whoever the last guy in the database as having title is. It doesn't solve stupid government rules.

What's legal per the law is a tiny fraction of what you can put on a DMV form and have the form get past the clerk and process properly which itself is a tiny fraction of what the cops will go after.
by bko | 2025-11-24 12:41:51+00:00
I don't get your comparison to VC model. Sure it's temping to sell $10 for $5 and many VCs fund this business for a while. But the difference is there isn't an infinite backstop. It's not really new or innovative to give things away from "free" and fund it through some other means. But that's the problem. There's a disconnect with the service and what it costs.

You should charge roughly what it costs to operate because that's information. People should ask why it costs so much. People should consider alternatives. Trying to remove prices is like fighting climate change by removing thermometers.
by auggierose | 2025-11-24 12:42:21+00:00
Why did the other developer who passed you the bug not make an estimate then?

I understand the urge to quantify something that is impossible to quantify beforehand. There is nothing wrong with making a guess, but people who don't understand my argument usually also don't understand the meaning of "guess". A guess is something based on my current understanding, and as that may change substantially, my guess may also change substantially.

I can make a guess right now on any bug I will ever encounter, based on my past experience: It will not take me more than a day to fix it. Happy?
by brainwad | 2025-11-24 12:42:46+00:00
I am generally anti-copyright; but it's not really a pro-creator policy to curtail copyright; it's pro-consumer.

> If everything older than, say, 35 years were suddenly in the public domain, available to be distributed by any of the distribution companies, and Hypothetical Media Corp had half the back catalogue that they used to, then surely that would make big conglomerates less interested in buying up Hypothetical Media Corp?

Doesn't your first point contradict this? If almost all the value of copyrighted works comes in the first few years, then no, curtailing copyright terms doesn't discourage buyouts, because the buyout is going to be mostly justified on the recent works held by the purchased company, not the residual value of its old works.
by noduerme | 2025-11-24 12:42:49+00:00
I hope it remains so. I felt an affinity from even before I stepped off the train from Munich. It's a funny story - my passport was examined by German police in the bar car of the train. My passport was not in order and they were radio calling to see whether to haul me back to Munich and detain me. I played for time as the border approached. The bartender was Czech, and he watched all this quietly. As soon as we stopped at the last town on the border, the police decided to tell me to have a nice trip, and he took me into the store room on the train, opened the window and poured shots and lit a cigarette for me as we crossed the border and said "fucking Germans. Welcome to Czechia... anything is possible!" And immediately I fell in love with the country. I would say, God bless that bartender on the train but almost everyone I met in the next year in Prague was equally kind and wonderful.

I can't speak for all Jewish people, but yes we are raised reading history to understand the way that threats can build up over time, and the multiple masks that threats can wear. For me, personally, I see this as an affinity to all small, powerless but free people... Kurds, Taiwanese, Ukrainians, Tibetans, Yazidis... particularly those who don't evangelize but simply want to be left alone to prosper and live in peace with their own people. Czechs are similar to that as the most "western-facing Slavic people" and I grew up in America enthralled by Vaclav Havel as a beacon for individuals and every small nation wanting freedom.

You are of course right that this history of persecution raises one's antennae and evokes horror at anything that seems to favor totalitarian modes of thinking. But the Czechs level of paranoia made me laugh sometimes, maybe because it was so similar.
by TrackerFF | 2025-11-24 12:42:55+00:00
I've tried using Suno studio for aiding my writing/production. I mainly play guitar and bass, and a pretty mediocre keyboard player. Drums I can play some, but programming drums is infinitely easier for me when I write music home. I also have a home studio in the basement where I can record all instruments (drums included).

My first motivation to try out Suno, was that since I'm programming drums and laying OK keys, maybe Suno will do better? And, yes, sure did. I still record everything else, and I'm the "driver" when it comes to the creative direction.

But, still, you only get so much freedom. Best approach has been to record some idea of a track, feed it to Suno, and hope that it'll come up with something close (but better) than what you can. I feel zero musical accomplishment from generating the tracks, but the end result sounds better than the tedious job of programming instruments yourself. So, not much different than pulling tracks from a sample pack.

From a one-man band perspective, it works well. But of course there are many concerns, both ethically and otherwise.

With that said, I've listened to a lot of purely Suno made music generations, and it all sounds extremely polished and extremely average. Average in the sense that it sounds like the average of the music it has been trained on. My first prediction was that modern country would be the first victim of this, fact being that for the past 10 years modern country has sounded like mindless AI slop, but made by humans.
by throw0101a | 2025-11-24 12:42:56+00:00
> It’s clear that ipv6 adoption is not what it should be if they launched a protocol with clearer benefits to the end user.

The "end user" has no idea about TLS 1.3 or many other things. It's the techies that work behind the scenes that make the changes 'on behalf' of everyone else.

And IPv6 traffic is, according to Google, the majority of traffic it sees in many countries (including the US at >52%):

* https://www.google.com/intl/en/ipv6/statistics.html#tab=per-...

The 'real' holdouts are enterprise companies and corporate networks as evidenced by the fact that IPv6 usage goes up on weekends (i.e., when most people aren't at work on said corporate networks). See also:

> Chances are if you use the Internet on your smartphone, you are connecting via IPv6. According to the Internet Society’s 2018 State of IPv6 Deployment,[1] 80% of smartphones in the US on the major cellular network operators use IPv6 and major mobile networks are driving IPv6 adoption with Verizon Wireless at 84%, Sprint at 70%, T-Mobile USA at 93%, and AT&T Wireless at 57%. Plus, some mobile networks are taking the step to run IPv6-only to simplify network operations and reduce costs.

* https://www.arin.net/blog/2020/01/16/mobile-edge-of-the-inte...

Being able to connect your smartphone to the Internet seems like a clear benefit to the end user IMHO. Would hate to see what every mobile phone being behind CG-NAT would be like.
by somerandomqaguy | 2025-11-24 12:43:03+00:00
They already are investing in the JSDF. The JS Chokai is in San Diego right now being equipped with Tomahawk cruise missles, but AFAIK the plan is to equipped all 8 Kongo class destroyers with those missles.

And that's just one part of the expansion. But the short version is that the JSDF isn't staying a defensive only institution.
by vessenes | 2025-11-24 12:43:23+00:00
it's a double edged sword -- media companies are generally franchise/lifetime hits oriented businesses - they pay (and generally lose, per investment, btw) for a shot at a hit.

On the one hand, imagine they could only negotiate rights to monetize that hit for, say, one year, and then this termination right kicked in. What do you think would be the top offer they could make an author?

The fraction of creatives that are great creatives and also great marketers/producers/runners of media companies is small, really small. So, creatives have an incentive to have a system where some amount of time is contractable. And media licensors rely on this hits-based model to fund all their development and betting on things that don't work out. And also to fund their jets and cool Bel-Air homes.
by WJW | 2025-11-24 12:44:09+00:00
Depends on the definition of miracle I guess. There's all sort of unintuitive shit going on in the quantum world, but we can make it happen so reliably that it's hardly a miracle anymore. Wikipedia defines a miracle as "an event that is inexplicable by natural or scientific laws and accordingly gets attributed to some supernatural or praeternatural cause". But we understand "how" quantum mechanics quite well, even if the behavior described by the equations is not very intuitive to humans.
by toast0 | 2025-11-24 12:44:19+00:00
> Take Myanmar as an example: if we were the US, it would be simple – send in troops, install a pro-China regime, done. But we’re not America, and we can’t do that without the entire Western media tearing us apart.

The way to do it, is to propose a UN coalition invasion. Or to quietly provide arms to the side you like more (which never backfires).
by codedokode | 2025-11-24 12:45:12+00:00
My code editor works in a sandbox. It's difficult because Linux doesn't provide it and one has to write it manually using shell scripts, random utilities. For example, I had also to write a limited FUSE emulation of /proc to allow code editor work without access to real /proc which contains lot of unnecessary information.

And if it's a "professional" setting, the company could hire a part-time developer for writing the sandbox.
Show HN: Mintlify Ignored This Feature Request for 6 Months. Here's My Solution
by SamTinnerholm | 2025-11-24 12:45:20+00:00
Mintlify users have been begging for pre-filled API playground fields for months. The GitHub discussion has people literally saying "I just lost two hours of my day banging my head against this issue." (https://github.com/orgs/mintlify/discussions/759) The problem? When you click "Try it" in Mintlify's playground, every field is empty, even though your OpenAPI spec has perfectly good example values sitting right there. Your developers have to manually type or copy-paste data just to test a single endpoint. It's 2025. This is insane.

So we built madrasly. Run

npx madrasly your-spec.json output-dir

and you get a fully interactive API playground with all fields pre-populated from your OpenAPI examples. Path parameters, query params, request bodies—everything just works. One command, zero configuration, and your developers can actually test your API without wanting to throw their laptop. Check out the live demo or grab it from GitHub. If Mintlify won't fix it, we will.

Feel free to star us on GitHub! We also offer free hosting on our website (no paid tiers available). madrasly.com.
by vessenes | 2025-11-24 12:45:24+00:00
It doesn't, in practice. Consider the NPV of year 36 with, say, a 10% discount rate. It's low. Also, having watched directly some fairly famous friends deal with property coming up on the 35 year mark, media companies are adept at tying in other deals, finally getting projects financed, cutting a deal for a different project with some agreements made about the original property.. You can imagine.
by tmvnty | 2025-11-24 12:45:38+00:00
Not aware of any NPM native ways but here are few community tools:

- https://socket.dev/blog/introducing-socket-firewall - https://github.com/lirantal/npq - https://bun.com/docs/pm/security-scanner-api

source: https://github.com/bodadotsh/npm-security-best-practices?tab...
by pfdietz | 2025-11-24 12:46:40+00:00
You are describing "dry" annealing there. This has not been applied anywhere, as it requires removing and reinstalling the internal support structures inside the reactor vessel.

A somewhat lower temperature "wet" annealing process has been applied to two test reactors. I don't think it's been applied to any full scale power reactors.

https://www.nrc.gov/docs/ML2428/ML24282A716.pdf
by exceptione | 2025-11-24 12:47:10+00:00
My motto wrt language choices: "It's the standard lib, stupid!"

My ultra hot take: there are only¹ two² programming ecosystems suitable for serious³ work:

- .net (either run on CLR or compile as an AOT standalone binary) - jvm

The reason why is because they have a vast and vetted std lib. A good standard lib is a bigger boost then any other syntactic niceties.

__ 1. I don't want other programming languages to die, so I am happy if you disagree with me. Other valid objection: some problems are better served by niche languages. Still, both .net and java support a plethora of niche languages. 2. Shades of gr[e|a]y, some languages are more complete out of the box than others. 3. cf «pick boring tools»
by jollyllama | 2025-11-24 12:47:17+00:00
Hell no.

You need standalone dependencies, like Tailwind offers with its standalone CLI. Predators go where there prey is. NPM is a monoculture. It's like running Windows in the 90's; you're just asking for viruses. But 90% of frontend teams will still use NPM because they can't figure anything else out.
by L1nefeed | 2025-11-24 12:47:20+00:00
I wrote this after wasting hours trying to get ChatGPT to help with systematic ideation.

The core problem: chatbots are conversationalists, not systematic thought partners. No separation between creative generation and analytical validation.

The article breaks down why this matters and how separating divergent thinking from convergent analysis transforms AI brainstorming.

Curious if others have hit similar walls with unstructured AI ideation.
by killerstorm | 2025-11-24 12:47:34+00:00
There's a model of computation called 'interaction nets' / 'interaction calculus', which reduces in a more physically-meaningful, local, topologically-smooth way.

I.e. you can see from these animations that LC reductions have some "jumping" parts. And that does reflect LC nature, as a reduction 'updates' many places at once.

IN basically fixes this problem. And this locality can enable parallelism. And there's an easy way to translate LC to IN, as far as I understand.

I'm a noob, but I feel like INs are severely under-rated. I dunno if there's any good interaction net animations. I know only one person who's doing some serious R&D with interaction nets - that's Victor Taelin.
by newpavlov | 2025-11-24 12:47:36+00:00
While I agree that dependency tree size can be sometimes a problem in Rust, I think it often gets overblown. Sure, having hundreds of dependencies in a "simple" project can be scary, but:

1) No one forces you to use dependencies with large number of transitive dependencies. For example, feel free to use `ureq` instead of `reqwest` pulling the async kitchen sink with it. If you see an unnecessary dependency, you could also ask maintainers to potentially remove it.

2) Are you sure that your project is as simple as you think?

3) What matters is not number of dependencies, but number of groups who maintain them.

On the last point, if your dependency tree has 20 dependencies maintained by the Rust lang team (such as `serde` or `libc`), your supply chain risks are not multiplied by 20, they stay at one and almost the same as using just `std`.
by matkoniecz | 2025-11-24 12:47:52+00:00
Do you mean

> Protocol on Prohibitions or Restrictions on the Use of Mines, Booby-Traps and Other Devices as amended on 3 May 1996 (Protocol II to the 1980 CCW Convention as amended on 3 May 1996)

or some other document? IIRC for start it does not have article 18.

I am quite confused by your weird unusually formatted citation style.