MurphyA/hacker-news huggingface dataset:
by mooreds | 2025-11-15 20:50:07+00:00
> For personal projects I end up avoiding AWS and instead prefer things like the Backblaze S3-compatible object storage, Vultr for VMs, and so on just to avoid the power user features that will only get in the way.

The author wrote an article about this too: https://www.theregister.com/2025/11/04/aws_genz_misery_nope/

> With that, I am curious how people who do not have an enterprise-size team to manage their AWS infrastructure navigate their offerings.

I've been a startup CTO that used selected AWS infra (s3 buckets, RDS) along with an easier PaaS solution (Heroku, in my case). So I think the answer to your question is: using some of the managed services, which are rock solid, and using easier solutions for compute or some of the more complex AWS services.

I know folks who started similarly, but then moved to AWS fully when it made business sense (in one case, because of HIPAA regulations and the cost difference between AWS and Heroku for the BAA).
by caminante | 2025-11-15 20:50:46+00:00
Picking Schumacher, Einstein, others seems unfair as they were godlike, despite competition catching up and there are limited prime years for mathematicians/athletes.

Luckey's a smart guy who would easily be on his way to millions, but got "lucky" into billions. Look closer. He committed IP theft for the tech he/Carmack sold to Facebook. He only had to pay a $50M fine in return for +$500M buyout/earnout. He's extra "lucky" because the fines and sanctions could've been a lot worse.
by msandford | 2025-11-15 20:50:53+00:00
I think that's one very reasonable interpretation. The other is "I really want these people w to come work here and they don't want to do the polygraph because it's a huge pain so I as the manager I'm going to waive it to reduce their objections to being hired".

That's something that companies do all the time, they pay people "out of band" or give them extra benefits or accelerate their vacation accrual or vesting, or one of hundreds of other things.

I agree it looks bad for sure but it isn't necessarily sinister.
by MBCook | 2025-11-15 20:51:20+00:00
I’ve never been a JS on the server person, I was used to other languages when that was developed.

Well I think I would prefer python, but simply because it’s “more traditional“ and I realize that’s specious reasoning, I prefer to use strongly typed languages whenever possible.

I would generally reach for Java since it’s the language I’m most proficient in due to my career. There’s also Go, which I played with long ago, or maybe I’d try Rust.

This is only for anything important. If I was just toying with something locally I’d probably do whatever was fastest. In that case Python or JS might be my choice for a very tiny script.
by jauntywundrkind | 2025-11-15 20:51:21+00:00
It took me so many years to stop building arrays of strings & using .join("") at the end; dozens of coworkers asking what the heck I was doing. It was just so so so much faster for so long! At a time when it mattered, that I kept at it.

Really interesting discussion here on revising the optimizations around this. Over-allocating is probably a pretty good idea! The author here seems pessimistic about static analysis to check for use, but it feels like a over-allocate default, maybe detect some easy non-changing strings via static analysis would be fine?

I felt pretty so so about the arguments against cons strings, until the last one:

> When adding to strings a few characters at a time, the size of the cons strings (20 bytes) dwarfs the amount of text being added, and the cons tree can have a size in memory that is easily an order of magnitude larger than the flat string would be.
by BoppreH | 2025-11-15 20:51:31+00:00
We also it at my work, where it's used both for mass scans of internal hosts, and scanning the same host many times during incidents/configuration changes.

And the 20s is extra annoying because it's completely unnecessary. The tool is so slow because it's thousands of lines of pure bash, manipulating individual bytes. And because it's bash, it also breaks in confusing ways when you look at it wrong[1].

[1] https://github.com/testssl/testssl.sh/pull/2429
by InsideOutSanta | 2025-11-15 20:51:40+00:00
If people think the plane is about to be flown into a skyscraper, I'm not sure a gun will stop them. There are hundreds of people on a plane and at most twenty rounds in a gun. The math isn't in the terrorist's favor.

There also isn't room to get away from angry passengers. They're probably going to overwhelm terrorists with guns relatively quickly.
by Reason077 | 2025-11-15 20:51:58+00:00
> ”AWS has so many services at this point and it feels like so many of them overlap too.”

Yep. I’ve also always found it frustrating how so many of them have names like “Snowball”, “Kenesis”, “Beanstalk”, “Fargate”, “Aurora”, etc, which don’t give you any real clue what they do.
by nosianu | 2025-11-15 20:52:11+00:00
Maybe?

As an espresso drinker with a good machine and grinder, and lots of variety with mostly Italian beans, it depends, as the OP already indicated. I only buy low or at most middle caffein content beans to begin with, but you can get high caffeine beans for espresso easily. Easiest method: Increase the amount of Robusta.

Good vendors should have things like caffein content in their product description. I mostly buy from an online vendor that lists the exact roast date and also shows caffein content for each product (https://www.espresso-international.com/ - their only disadvantage is the use of some pretty light GRAY for most text, another topic, too many websites do this for reasons I cannot understand).

Many years ago, when I still lived in the Bay Area, the Cappuccino I got at a certain Berkeley coffee shop always made my heart go BOOM BOOM BOOM. Whatever concoction they brewed certainly had very high caffein (and I hated it, but the place was great). The ones I make myself now I can drink at 10 pm and be completely fine (I only drink 2-4 max espresso per day, and can easily drink zero if I'm away and have no access to good espresso, so I'm not addicted and just "used to it").

Sometimes I compromise and buy medium caffein beans when it's something good, but those I can feel just a little.

All of that just means you have to exert some control over which beans you consume, if you want to keep caffein low. On the plus side, if you stick to 80%-100% Arabica (the rest Robusta) it's not hard at all. If you like mixes with high Robusta ratio it gets much harder. Caffein free roasts exist though (examples: https://www.espresso-international.com/decaffeinated-coffee), but that choice severely limits your options.
by jchw | 2025-11-15 20:52:48+00:00
Shrugging it off as just being large because it contains the "standard library" ignores that many JS language features necessarily use native objects like symbols or promises, which can't be entirely implemented in just JavaScript alone, so they are intrinsic rather than being standard library components, akin to Go builtins rather than the standard library. In fact, in actual environments, the browser and/or Node.JS provide the actual standard library, including things like fetch, sockets, compression codecs, etc. Even ignoring almost all of those bits though, the spec is absolutely enormous, because JavaScript has:

- Regular expressions - not just in the "standard library" but in the syntax.

- An entire module system with granular imports and exports

- Three different ways to declare variables, two of which create temporal dead zones

- Classes with inheritance, including private properties

- Dynamic properties (getters and setters)

- Exception handling

- Two different types of closures/first class functions, with different binding rules

- Async/await

- Variable length "bigint" integers

- Template strings

- Tagged template literals

- Sparse arrays

- for in/for of/iterators

- for await/async iterators

- The with statement

- Runtime reflection

- Labeled statements

- A lot of operators, including bitwise operators and two sets of equality operators with different semantics

- Runtime code evaluation with eval/Function constructor

And honestly it's only scratching the surface, especially of modern ECMAScript.

A language spec is necessarily long. The JS language spec, though, is so catastrophically long that it is a bit hard to load on a low end machine or a mobile web browser. It's on another planet.
by nekevss | 2025-11-15 20:53:15+00:00
That may be fair. The better wording may even be specification compliant, but none of the Boa maintainers made this post (we found out about it after the fact).

We, the maintainers, could probably sit down some day and try to triage the failures into a documented txt file, but the overhead on that might make it hard to maintain for an open source project. Plus a large amount of the failures are just new specification features that nobody has implemented yet.
by pu | 2025-11-15 20:53:44+00:00
Hi HN,

I’ve released a new USB Power Delivery sink stack for embedded devices called pdsink:

• USB-PD Rev 3.2, SPR and EPR modes. • Platform-agnostic C++ core. • Reference: FUSB302B + FreeRTOS. • MIT license.

Repo: https://github.com/pdsink/pdsink

Motivation: available PD stacks usually come with at least one hard constraint: • vendor lock-in / NDA / no public sources, • tied to a specific OS or framework, • incomplete feature set on the sink side (e.g. no EPR), • corner cases where behaviour doesn’t fully match the spec, • or they are difficult to extend to new TCPC / MCU combinations.

pdsink is an attempt to cover the most common “sink” (power consumer) use case with a small, readable stack that is easy to adapt to different platforms and controllers. People who deal with PD in practice may find the layering and extension model interesting compared to existing solutions.
by nick238 | 2025-11-15 20:54:51+00:00
Feels like server developers should include turnkey configurations where you just give maybe a year/quarter and compatibility target (secure, medium, loose).

Needing to cha-cha your salsas, 128 to the 256 to the 1305...picking SSL ciphers is the biggest cargo-cult thing ever. I have no clue what I am doing.
by cryptonector | 2025-11-15 20:55:20+00:00
> Only by some definitions of poverty—crucially, definitions that beg the question of rational wealth distribution.

What do you care about wealth distribution? Why should anyone? As long as we each can a) not be poor, b) prosper, c) live our lives in peace, none of us should care that someone else is wealthier (or less so) than us.

"But wealth inequality!!" is just moving the goal posts: so poverty has gone down and has been going down, but you can't be satisfied with that, not even if it goes to zero. No, you want something else: power -- total power.
by martin-t | 2025-11-15 20:56:04+00:00
It does not work to produce a society where people are actually the ones holding power and where laws side with those in the right - i.e. the current legal system anywhere does not represent a consistent moral system and is not even close.

You're right it's too strong as a general statement but it was in response to a specific issue - those in power wanting to take yet another bit of power from the general population - (this time and in this particular country) by banning VPNs.

People always vote based on the most pressing issues to them - immigration, taxes, abortions, LGBT rights (random list which is different in every country). Minor issues fall between the cracks until they become so bad they become pressing to enough people.

> "Let's just give up" is the only conclusion I can see. Hardly useful.

Then you're reading it wrong. I listed specific issues - the solution is to find solutions to those issues.

Here's a couple suggestions I'd like to see gamed out and tested:

- The right to vote not as a function of age but a test of reasoning ability and general knowledge.

- Limiting the amount of time a person can perform politics (including professional lobbying) to 5-10 years.

- Splitting laws into areas of expertise and potentially requiring tests to prove understanding to gain the right to vote on those areas for both the general population and politicians.

- Replacing FPTP with more nuanced voting systems.

These are just a few random suggestions described briefly. When I do this, people start nitpicking and then I have to reply with obvious solutions to surface issues - I encourage everyone to instead think how to make this work (yes, in an adversarial environment) instead of just trying to shoot it down.
by skeledrew | 2025-11-15 20:56:12+00:00
It is.

> Quite a stretch if you ask me. And again, not relevant to adult sites blocking VPNs.

With the workaround I outlined, adult sites can no longer be aware of all VPNs in order to block them, if things do get that far. And you can be sure the ones the measure is supposed to "protect" will gain access to scripts/apps for said workaround.
by thaumasiotes | 2025-11-15 20:56:52+00:00
> There are good ROI, efficiency, and philosophical reasons to want to abolish TSA, but it seems naive to say there is zero value and their mere existence has not deterred anyone.

Are you familiar with the TSA's measured efficiency? It's not naive at all to say that, below a certain detection threshold, the deterrence value is zero.

Compare https://www.loweringthebar.net/2015/06/tsa-successfully-pass... .

You'll notice that what I actually said was "[the TSA doesn't] do anything", which is accurate in a context of accident prevention. I didn't call them imperfect. I called them useless directly. It isn't the case that they do some good work and some bad work. They don't do anything that is useful in any degree.
by JumpCrisscross | 2025-11-15 20:56:54+00:00
> Or maybe Korea could be like India...and not be part of it

Sure. That comes with costs. Cost that may not make sense for Korea, which is a defense exporter globally and within the American-led Pacific alliance.

(Operating a nuclear shipyard and supply chain is incredibly expensive. It's would also be a high-value target for Pyongynag.)

> your native country

Is this a troll account? (EDIT: 4 months old. Peeked through comment history. All flamebait and racism. Flagged.)

> a loophole seoul doesn't need

You're using the word "need" ambiguously. It's a loophole Seoul benefits from. It gets the benefits of being an NPT signatory and alliance member. And it gets nuclear submarines.

We can debate the costs and benefits. But Seoul wasn't coerced into building a nuclear submarine. Put plainly, it's unclear what security benefits it gets from one given it doesn't project into blue waters.

> You act like america is doing korea a favor

Within narrow confines, it is. Within broader confines, it's acting as the senior security partner. That obviously involves a cession of sovereignty. Same goes for Pakistan vis-a-vis China, or Belarus with Russia.
by cryptonector | 2025-11-15 20:56:57+00:00
> It's still goddamn evil how bad we are at distributing resources

How. How on earth is it evil if you or I have a bit more wealth than the other? Who gives a flying fuck, except... except those who seek power. Total power. You can't have peace as long as you or your preferred leaders are not in total power, and you won't let the rest of us have peace either.
Show HN: Gustup – A simple demo to choose restaurants together
by alexroselli93 | 2025-11-15 20:57:06+00:00
Hi HN, I built a very early demo called Gustup. It lets a group choose a restaurant together: - Create a group - Invite friends via WhatsApp or a simple link - Set preferences, allergies, budget, audience and age - A basic algorithm shows restaurants in the selected radius

This is an early prototype. Feedback is welcome.

Demo: https://gustup.com GitHub: https://github.com/alexroselliar-commits/gustup-demo
by crystal_revenge | 2025-11-15 20:57:23+00:00
> required to get a "Secret" clearance, you had to list everywhere you'd lived for the past N years, N >= 10 as I recall and give a non-family person who could testify you lived there. You had to list all the organizations you belonged to.

As a former federal government employee, all of this is also required as part of the standard background check. People will show up in a black sedan and interview your neighbors, all you past employers and people who knew you at each residence. This happened for me and I’ve never had any real security clearance (nor required it).

Just because it’s work doesn’t mean it’s rare. My father and most of his coworkers all had TS clearance in the 90s. It required flying out to Dallas (if I recall correctly) for the polygraph. Lots of work but very common.
by bccdee | 2025-11-15 20:58:03+00:00
> Karl Marx said that in the first stage of communism there would be a required period of dictatorial control

Not that it particularly matters, but he didn't say that. Marx never set down specific ideas about how a communist or proto-communist society should organize itself. He thought history was a natural progression of inevitable forces and was more interested in establishing the inevitability of communism (ha) than in describing specifically what a post-capitalist society would look like. (Misleadingly, he did use the phrase "dictatorship of the proletariat," though not to describe any type of dictatorial government.)

The whole "vanguard party of elites ruling by fiat" thing was Lenin's idea. Lenin though the working class wasn't educated enough to lead itself, so a ruling Communist Party should act as a steward on their behalf. Naturally, this idea was popular with people like Lenin and Mao, since it justified their being elevated to the status of authoritarian dictators.

> more like premeditated dictatorship

Lenin's communist party was, in theory, meant to represent the public. The pitch was never, "time for our prescribed period of temporary authoritarian dictatorship." Like any other political party, the Communist party was supposed to be democratically selected and represent the public. Obviously it quickly became corrupt and snuffed out the democratic elements, but any government is vulnerable to that sort of thing.

No, I think the USSR's descent into authoritarianism was very much an "it won't happen here" phenomenon, save perhaps for the fact that the Tsar's monarchy had only just ended and authoritarianism would have been nothing new to Russia.
Show HN: Devhunt.be – A transparent job platform for developers in Belgium
by ChrisThib | 2025-11-15 20:58:08+00:00
Hi HN,

I’m a Belgian full-stack dev building DevHunt, a new job platform focused only on developers in Belgium.

The problem:

Recruiters spam devs with irrelevant roles

No salary transparency

Companies struggle to find qualified devs

No real signal on candidates’ actual skills

What DevHunt does:

Only relevant, transparent job opportunities (salary + stack visible)

Developers opt-in, no cold outreach

Recruitment pipeline

Built-in candidate testing → devs can take short skill assessments to provide real signal

Rails + React + Inertia.js

This post is only to collect early feedback and signups for the waiting list. The platform is not open yet.

Join the waiting list here: www.devhunt.be

Happy to answer questions!

-- Chris
by chongli | 2025-11-15 20:58:27+00:00
Try a different translation [1]:

All the amenities, in fact, of life, supreme hilarity, and relaxation from toil, can find no word in our language to characterize them better than this. Even in the very honours, too, that are bestowed upon successful warfare, salt plays its part, and from it, our word "salarium" is derived. That salt was held in high esteem by the ancients, is evident from the Salarian Way, so named from the fact that, by agreement, the Sabini carried all their salt by that road. King Ancus Martius gave six hundred modii of salt as a largess to the people, and was the first to establish salt-works.

The rewards of successful warfare, including salt, bestowed on soldiers. That is payment! King Ancus Martius also used salt as payment.

[1] http://www.perseus.tufts.edu/hopper/text?doc=Perseus:text:19...
by o11c | 2025-11-15 20:58:45+00:00
TCP has another unfixable flaw - it cannot be properly secured. Writing a security layer on top of TCP can at most detect, not avoid, attacks.

It is very easy for a malicious actor anywhere in the network to inject data into a connection. By contrast, it is much harder for a malicious actor to break the legitimate traffic flow ... except for the fact that TCP RST grants any rando the power to upgrade "inject" to "break". This is quite common in the wild for any traffic that does not look like HTTP, even when both endpoints are perfectly healthy.

Blocking TCP RST packets using your firewall will significantly improve reliability, but this still does not project you from more advanced attackers which cause a desynchronization due to forged sequence numbers with nonempty payload.

As a result, it is mandatory for every application to support a full-blown "resume on a separate connection" operation, which is complicated and hairy and also immediately runs into the additional flaw that TCP is very slow to start.

---

While not an outright flaw, I also think it has become clear by now that it is highly suboptimal for "address" and "port" to be separate notions.
by JumpCrisscross | 2025-11-15 20:58:50+00:00
> No. America is doing itself a favor. Not south korea.

You realise a deal can be both?

> you are saying that korea is not a sovereign state like iran but a vassal

False dichotomy. Korea is not as sovereign as the US, Russia or China because it's not a global nuclear power. Whether Seoul or Tehran are functionally more sovereign is an interesting question that isn't easily answered.

> Maybe the US could protect korea (see: Israel) and send billions of taxpayer dollars to korea

...do you think we don't?
by accrual | 2025-11-15 20:59:08+00:00
I agree, even on fast hardware there is a lot of unnecessary delay trying to take a screenshot.

My old workflow from the Win2k/XP days was: Print Screen, Win + R, type mspaint, Enter, Ctrl+V, Ctrl+S, Enter, done. Still feels faster than watching my screen fade in and out for the snipping tool.
by FWKevents | 2025-11-15 20:59:34+00:00
SOLO FOUNDER; OVERWHELMED, BUT ON THE BRINK OF SUCCESS AFTER THREE YEARS You are coming in to the organization at a fantastic time. There is a lot of buzz in the events industry about our new AI Agent, GotchaFinder.ai. GotchaFinder, operating on the freemium model, spots hidden fees in dense hotel contracts and advises users what to do about it. Users who sign up for gotchafinder are also signed up on eventnation.com. The business model is to build a community of event planners on eventnation, ultimately selling event vendor and venue subscriptions on the back of that success. We are 6 months away from a traunch of seed funding, with the goal being sale of the company within 5 years. You would be working 2 hours a day as a community manager and a social media marketing person. You would work for equity. Upon sale of the company, the estimated value for the hours you accrue in 2026 will be between $50/hour to $100/hour. Please contact founder, Faith Keiser, at info@eventnation.com to apply and for more information.
by nekevss | 2025-11-15 20:59:59+00:00
So this is a bit loaded. Short answer: it can.

Long answer: first, `fetch` is a runtime feature, and Boa is first and foremost an engine. So `boa_engine` -- the core project crate -- does not support `fetch` out of the box.

That being said, we do have a `boa_runtime` crate. This crate is not currently a full runtime, but it is a collection of runtime features that have been implemented and can be registered onto the context. `fetch` is one of the features that has an implementation completed in `boa_runtime`, and it does use reqwest if I'm remembering correctly. If you're interested to see some example code of registering features, you can look at our CLI code as an example :)