MurphyA/hacker-news huggingface dataset:
by AGI-slop | 2025-11-30 23:49:02+00:00
In 2016 Saudi Arabia was armed to the teeth by the Trump (Administration #1) to launch a huge multibillion invasion of the Yemen, bombing, cutting off food supplies, as a tactic of war, causing a famine which left over 370k people dead.

In addition the Saudi's Armed the gnocidal Jajaweed/RSF (again with US weaponry) to fight in Yemen, the same RSF who have now creating mayhem and collapse in the Sudan.

The question is, given these encyclopaedic statements about corporate responsibility, for what exactly do they count for? when Microsoft is happy to engage with this regime which:

which arms and supplies a group known to practice mass genocide/ janjaweed /rsf sponsored by Saudis * a government which practices mass starvation and invasions of it neighbour * is know for torturing and dismembering dissidents alive

What do all those links mean if it allows this?
by bbor | 2025-11-30 23:50:15+00:00
Over the past few months, I've switched a few decently-sized python codebases from MyPy (which I used for years) to PyreFly (because the MyPy LSP ecosystem is somewhere between crumbling and deprecated at this point), and finally to Ty after it left beta this week. I'm now running a fully Astral-ized (rust-ized!) setup:

1. packaging with uv (instead of pip or poetry),

2. type checking with ty (instead of the default MyPy or Meta's Pyrefly),

3. linting with ruff (instead of Jedi),

4. building with uv build (instead of the default setuptools or poetry build),

5. and publishing with uv publish (instead of the default twine)

...and I'm just here to just say that I highly recommend it!

Obviously obsessing over type checking libraries can quickly become bikeshedding for the typical project, but I think the cohesive setup ends up adding a surprising amount of value. That goes double if you're running containers.[1]

TBH I see Astral and Pydantic as a league of their own in terms of advancing Python, for one simple reason: I can trust them to almost always make opiniated decisions that I agree with. The FastApi/SQLModel guy is close, but there's still some headscratchers -- not the case with the former two. Whether it's docs, source code, or the actual interfaces, I feel like I'm in good hands.

TL;DR: This newly-minted fanboy recommends you try out ty w/ uv & ruff!

[1]https://docs.astral.sh/uv/guides/integration/docker/#availab...
by gnarlouse | 2025-11-30 23:50:20+00:00
I think most of the time when small teams say “we should do microservices” what they really mean is “we should try a service oriented architecture.” Especially if you’re doing a monorepo, it becomes fairly routine to make choices around how to consolidate like modules.

For example, I work in a small company with a data processing pipeline that has lots of human in the loop steps. A monolith would work, but a major consideration with it being a small company is cloud cost, and a monolith would mean slow load times in serverless or persistent node costs regardless of traffic. A lot of our processing steps are automated and ephemeral, and across all our customers, the data tends to look like a wavelet passing through the system with an average center of mass mostly orbiting around a given step. A service oriented architecture let us:

- Separate steps into smaller “apps” that run on demand with serverless workers.

- avoid the scaling issues of killing our database with too many concurrent connections by having a single “data service”—essentially organizing all the wires neatly.

- ensure that data access (read/write on information extracted from our core business objects) happens in a unified manner, so that we don’t end up with weird, fucky API versioning.

- for the human in the loop steps, data stops in the job queue at a CRUD app as a notification, where data analysts manually intervene.

A monolith would have been an impedance mismatch for the inherent “assembly line” model here, regardless of dogma and the fact that yes, a monolith could conceivably handle a system like this without as much network traffic.

You could argue that the data service is a microservice. It’s a single service that serves a single use case and guards its database access behind an API. I would reply to any consternation or foreboding due to its presence in a small company by saying “guess what, it works incredibly well for us. Architecture is architecture: the pros and cons will out, just read them and build what works accordingly.”
by Metaboat | 2025-11-30 23:50:29+00:00
Most transcription tools feel like they were designed around business models, not actual usage. High per-minute pricing, unnecessary features, multi-step onboarding, rate limits, and a long list of things you don’t need before you get the one thing you do: text. We built MetaBoat Transcription because the essentials were missing everywhere else. A transcription system should do a few things extremely well: run reliably on real GPU infrastructure handle long audio without falling apart stay cheap without surprise billing return clean, structured output let you see what’s happening inside the queue throw work at any available compute without user involvement delete the audio immediately get out of your way So that’s what we built. MetaBoat Transcription is an English-only pipeline backed by a distributed GPU scheduler that moves work to wherever capacity is available. Jobs run in disposable workers, failures resolve automatically, and the dashboard shows you every step without trying to hide the machinery. Pricing is $0.02/hr because that’s what the underlying compute actually costs — not because we’re playing margin games. It isn’t positioned as a “platform,” and it isn’t pretending to be an AI product with layers of abstraction. It’s a purpose-built system that treats transcription as infrastructure, not a luxury service. The pricing model is intentionally simple: 10 hours free per day, then $0.02 per hour after that. No tiers, no credits expiring, no fine print. We’re adding diarization, speaker identification, word-level timestamps, and streaming — not to pad a feature list, but because they make the core system more complete. If you want transcription that behaves like a well-designed backend service instead of a SaaS maze, it’s here: https://transcribe.metaboat.io Happy to hear thoughts from anyone who’s built (or fought with) similar pipelines.
by gerdesj | 2025-11-30 23:50:51+00:00
Unix starts at root, which is how nature intended. It does not change characteristics based on media - you can mount a floppy at root if you want.

Why get upset over /media vs /mnt? You do you, I know I do.

For example The Step CA docs encourage using /etc/step-ca/ (https://smallstep.com/docs/step-ca/certificate-authority-ser...) for configuration for their product. Normally I would agree but as I am manually installing this thing myself and not following any of the usual docs, I've gone for /srv/step-ca.

I think we get enough direction from the ... "standards" ... for Unix file system layouts that any reasonably incompetent admin can find out which one is being mildly abused today and get a job done. On Windows ... good luck. I've been a sysadmin for both platforms for roughly 30 years and Windows is even odder than Unix.
by movedx | 2025-11-30 23:51:32+00:00
I once upgraded a FreeBSD system from 8 to 12 with a single command. I don’t recall having to reboot — might have needed to.

Can you give that shot for me on Linux? Could you spin up a Ubuntu 14 VM and do a full system update to 24.04 without problems? Let me know how you go.

I once needed help with a userland utility and the handbook answered the question directly. More impressive was the conversation I had with a kernel developer, who also maintains the userland tools — not because they choose too but because the architecture dictates that the whole system is maintained as a whole.

Can you say the same for Linux? You literally cannot. Only Arch and RedHat (if you can get passed the paywall) have anything that comes close to the FreeBSD Handbook.

FreeBSD has a lot going for it. It just sits there and works forever. Linux can do the same, if you maintain it. You barely need to maintain a FreeBSD system outside of updating packages.

Most people who use containers a lot won’t find a home in FreeBSD, and that’s fine. I hope containers never come to the BSD family. Most public images are gross and massive security concerns.

But then, most people who use FreeBSD know you don’t need containers to run multiple software stacks on the same OS, regardless of needing multiple runtimes or library versions. This is a lost art because today you just go “docker compose up” and walk away because everything is taken care of for you… right? Guys? Everything is secure now, right?
by ggm | 2025-11-30 23:51:40+00:00
A small thing, but the mechanistic approach to bundling packages into bigger meta state, is (in my personal opinion) better than the somewhat ad-hoc approach to both writing and including things in an apt/dpkg.

If the product is python, thats what it is. there is no python-additonal-headers or python-dev or bundle-which-happens-to-be-python-but-how-would-you-know.

There is python, and there are meta-ports which explicitly 'call' the python port.

The most notable example being X11. Its sub-parts are all very rational. fonts are fonts. libs are libs. drm is drm. drivers are drivers.

(yes, there is the port/pkg confusion. thats a bit annoying.)
by arthurfirst | 2025-11-30 23:51:50+00:00
26 years of FreeBSD and counting...

IIRC in about 99 I got sick of Mandrake and RH RPM deps hell and found FreeBSD 3 CD in a Walnut creek book. Ports and BSD packages were a revelation, to say nothing of the documentation which still sets it apart from the haphazard Linux.

The comment about using a good SERVER mobo like supermicro is on point --- I managed many supermicro fbsd colo ack servers for almost 15 years and those boards worked well with it.

Currently I run FreeBSD on several home machines including old mac minis repurposed as media machines throughout the house.

They run kodi + linux brave and with that I can stream anything like live sports.

Also OpenBSD for one firewall and PFSense (FreeBSD) for another.
by josephg | 2025-11-30 23:51:55+00:00
Except ChromeOS and webOS are both based on linux, which is written in normal, fast C.

The computer on my desk cost about $3000. If all my programs ran twice as slow, thats sort of like removing $1500 of my computer away. Could I get away with a $1500 computer? Probably. But I'm not going to be happy about it.
by JumpCrisscross | 2025-11-30 23:51:56+00:00
> what stats back up “tariff-ravaged economy”? S&P is essentially at an all-time high

Production is good, you're right. Where Trump is feeling electoral pain is in cost of living. It's why the U.S. has started lifting "tariffs on bananas, coffee and dozens of other food-related items" [1].

[1] https://www.wsj.com/economy/trade/trump-tariff-exemptions-fo...
by a_bonobo | 2025-11-30 23:52:25+00:00
Bioinformatics has biostars :) https://www.biostars.org/

The difference to linkedin is that biostars has 'in-domain experts' only; the postdocs, the staff bioinformaticians, etc. those are not the people who will hire you. The people who will hire you are on linkedin.
by gishh | 2025-11-30 23:52:34+00:00
I graduated high school in 2005. I had been making and running websites and forums (phpbb anyone?) since 1998…ish?

I went to a solid state college, started my degree in EE, bounced around a bit, landed on comp sci, almost failed out, and now (given that story) I’d never have been hired anywhere.

As it turned out, it the value I provided to my first job was… significant? I kept solving problems, usually with zero code and just technical suggestions.

I loved going to college. I loved everything about it. I wish I could do it again. I learned nothing.
by gf000 | 2025-11-30 23:52:49+00:00
> Wayland despite receiving huge amounts funding

Citation needed

> Even for the simplest tasks you have to deal with a dbus infested portal maze

The simplest task is displaying a buffer, or changing a buffer, or handling events, and absolutely none of them have anything to do with dbus whatsoever. Also, have you seen an X11 desktop environment like KDE or Gnome? I recommend looking at all the dbus messages that are in flight there at any time.
by 8organicbits | 2025-11-30 23:53:01+00:00
The LastPass hack is a good example of that happening. Weak master passwords and a smaller number of KDF rounds, made the situation worse.

Realistically, most users benefit from using a reputable cloud-based password manager, and should focus on securing it with a strong password and MFA. You should also change your passwords if your password manager is breached.

The open letter tries to steer us towards reputable guides, linking to this one by EFF: https://ssd.eff.org/module/choosing-the-password-manager-tha...
by mc32 | 2025-11-30 23:53:11+00:00
I don’t see much upside either other than a regime change that brings some semblance of mediocrity back to the country. Currently millions of Venezuelans languish somewhat unwanted in other LatAm counties. They’d jump at going back home to be part of the rebuild — which can happen. Before Chavistas it was the richest country in LatAm and they can absolutely regain that title with even a mildly competent government.
by JumpCrisscross | 2025-11-30 23:53:25+00:00
> 4 decades of James Bond, Tom Clancy, Homeland, Zero Dark Thirty

Not really. See [1]. A competent clandestine service lets one achieve foreign policy goals without going to war.

But more to the point, pretending everything one doesn't like is an elite conspiracy is self defeating. If you want to gut the CIA, convince voters to hate it.

[1] https://news.ycombinator.com/item?id=46101045
by joegibbs | 2025-11-30 23:53:30+00:00
There's no sign that it's AI at all, not that you could tell with something like Nano Banana Pro. They're calling a thing with 4 fingers AI slop when it's a character with 4 fingers, it's a paranoid witch hunt - all about protecting artists until the art style is a little too close to AI or there's some minor flaw that could be construed that way.

Apart from that it's not bad for the environment. The water usage is tiny compared to e.g. alfalfa or almonds, and the energy usage is minuscule compared to running a dryer, air conditioner or car. These people are playing Fortnite on a GPU for hours - an RTX 4070 uses 200W and an A100 250W for a few seconds to generate some prompt.
by IgorPartola | 2025-11-30 23:53:38+00:00
I can’t speak for whole communities but my interest in FreeBSD has been renewed over the past couple of years. It has been a very solid OS for a long time and the tight integration between the kernel and core userland has meant that it is sometimes more performant than some popular Linux distros. But its UX has not always been amazing. Seems like lately they have really improved that. Plus ZFS and root on ZFS in particular is very nice.

I would actually be interested in running it in some production environments but it seems like that is pitted against the common deploy scenarios that involve Docker and while there is work on bringing runc to FreeBSD it is alpha stage at best currently.

Still, if you just want an ssh server, a file server, a mail server, it is a great OS with sane defaults and a predictable upgrade schedule.
by movedx | 2025-11-30 23:54:11+00:00
Lovely stuff. The industry would be so much better off if the family of BSDs had more attention and use.

I run some EVE Online services for friends. They have manual install steps for those of use not using containers. Took me half a day to get the stack going on FBSD and that was mostly me making typos and mistakes. So pleased I was able to dodge the “docker compose up” trap.
by tom_alexander | 2025-11-30 23:54:13+00:00
To be fair, GCC's design was motivated by the same thing as the license. They intentionally didn't modularize GCC so that it couldn't be used by non-free code.

> Anything that makes it easier to use GCC back ends without GCC front ends--or simply brings GCC a big step closer to a form that would make such usage easy--would endanger our leverage for causing new front ends to be free.

https://gcc.gnu.org/legacy-ml/gcc/2000-01/msg00572.html
by wavemode | 2025-11-30 23:54:41+00:00
To be fair, this letter is about information security, not privacy.

Maximizing privacy is a somewhat different goal, and recommendations for how to do so would differ from person to person. Some people really don't care about privacy. And for some other people, adblocker and tracking-blocker software is sufficient for their privacy needs. Whereas for certain people in certain parts of the world, literally the only way they can browse the Web safely is with Tor running on a temporary TailsOS drive.
by josephcsible | 2025-11-30 23:55:03+00:00
Almost every question on the quiz is misleading.

> Does TLS protect all protocols from layer 2 to layer 7, prior to using something that enjoys TLS?

The right answer is "no", but this unnecessarily scares people, since everything important that needs to be protected still is.

> How do you verify that client isolation is enabled on an Untrusted (Public) WiFi network before joining?

You can't, but that's not something you need to verify or worry about.

> Where do you draw your confidence from that an Untrusted (Public) WiFi network is suitably configured, managed and secure before joining it?

This makes it sound like you need such confidence, when in fact, it's only the endpoints (your device, and whatever server you're connecting to) that need to be suitably configured, managed and secure. If they are, the network could be actively hostile and you're no worse off than if you were just offline.

> On an Untrusted (Public) WiFi network without client isolation, can one client directly attack another client's device?

If such attacks are cause for concern, then the real reason is the vulnerability on your device that it's exploiting, not the network not being isolated.

> Can the average user detect if their device is being attacked on an Untrusted (Public) WiFi network?

The average user can't detect that under any circumstances, but this question unfairly makes it sound like there's some characteristic of public WiFi that makes them not able to detect it.

> Select all attacks that can occur on Untrusted (Public) WiFi:

> ARP spoofing

Harmless due to TLS.

> DNS manipulation

Ditto.

> Port scanning of your device

If you have dangerous ports open on your device, that's a "your device" problem, not a "public WiFi" problem.

> Certificate solicitation via captive portal

Is this a made-up term? I can find zero references to certificate solicitation attacks.

> MAC address collection

Modern devices randomize their MAC address for each new network they connect to.

> Traffic timing and volume analysis

That's a thing you can do, but how is it an "attack"?

> Certificate pinning can prevent Attacker-in-the-Middle (AITM) attacks for TLS/HTTPS connections. Does certificate pinning protect your device's protocols and services that do not use certificate pinning?

Regular CA verification already prevents MITM attacks. The only thing certificate pinning does is make it harder for you to legitimately inspect your own apps' traffic.

> Do most personal computers have the same security controls as corporate managed devices (hardened OS builds, EDR, MDM, DLP, defense in depth)?

DLP, etc. is security against the user, so it's a good thing that personal devices don't have such things.

> What percentage of Untrusted (Public) WiFi networks do you estimate undergo regular security audits and penetration testing?

Again, it doesn't matter, since a well-configured device would be fine even on an actively malicious network.
by pjjpo | 2025-11-30 23:55:13+00:00
Made the switch recently too, I only use the windows box for gaming so went with bazzite-kde. Games were up and running in no time, though I am still noodling over getting Japanese IME working in one though haven't given it any effort yet.

Other issues were Bluetooth dongle not being compatible though I happened to have one that is. Ironically the old one doesn't seem to have the same temporary connection issues I was seeing on Windows. And also fingerprint reader is probably in the worst spot, "compatible" but not functioning, i.e. can enroll a print but never recognize it.

All-in-all I'm fine with it, especially once the IME works. But there are still too many issues to recommend to users that want a working experience out-of-the-box, which should be most users.

Unfortunately I am somewhat skeptical on how things will improve. One issue I see is there are way too many forks, many versions of wine, even the xiv launcher I use is a fork. There was a fork of libfprint that I was curious to try but in the end avoided given the sensitive nature of the library. Appreciate the enthusiasm, but it doesn't seem like moving towards a stable state when there is so much forking happening.
by RantyDave | 2025-11-30 23:56:19+00:00
"a thousand-day uptime shouldn’t be folklore"

I reboot a lot. Mostly I want to know that should the system need to reboot for whatever reason, that it will all come back up again. I run a very lightly loaded site and I highly doubt anybody notices the minute (or so) loss of service caused by rebooting.

Pretty sure I don't feel bad about this.
by tgsovlerkhgsel | 2025-11-30 23:56:53+00:00
Even the high-res version (20 MB) of the Bremen image seems to be about 17-25m per pixel based on the 50m wide airport runway being about 2-3 pixels wide in the image.

Copernicus browser claims 10x10 meter pixels (which seems to be correct) but the actual resolution of the radar is supposed to be 5m-x-20m for the standard IW mode. I assume "high resolution" here means the data should have 5m x 5m resolution (Strip Map mode) which in Copernicus browser claims 3.5x3.5m pixels.
by kingstnap | 2025-11-30 23:57:20+00:00
No but mainly because passing actual data through the context is janky and expensive. So it's only useful as a one of at most.

This whole idea of doing unsupervised and unstructured work with unstructured data at scale with some sort of army of agents or something sounds ridiculous to me anyway. No amount of MCP or prompting or whatever is going to solve it.

Like if interesting problems are on the boundry of obvious and chaotic this is just like some janky thing that's way too far into the chaotic regime. You won't go anywhere unless you magically solve the value function problem here.
by nothrabannosir | 2025-11-30 23:57:26+00:00
Number 2 would be quite damning regardless of anything else, so if there's a lead for that definitely let us know. Assuming it's just nr 1, though: I think I see what you mean but at that point, I guess.. don't hate the player, hate the game? Bit overboard to call it "extortion".

And, yeah, if you're a >$tn company going into the EU, or even just giving out shares, I agree: consult lawyers :) sound advice. In fact they probably did.

On its face, I don't see a problem. If the situation is as insidious as you describe, I definitely agree with you. But then that's the story. Not TFA.
by JumpCrisscross | 2025-11-30 23:57:42+00:00
> US military is privately shitting its pants about how weak they are in this proxy war

What? Our 90s air defences are shooting down Russia's bleeding-edge missiles. We're withholding Tomahawks because Putin throws a hissy fit every time it comes up because Russia's newest, shiniest air defence systems--the ones it has been selling for hundreds of millions of dollars to Iran and Venezuela--have been getting potted by homemade Ukranian SEAD tactics.

Ukraine has exposed weaknesses in our drone arsenal. I bet China (or Venezuela) would have preferred to have encountered those weaknesses directly, but that's what you get for fucking around.

Trump probably isn't a Russian asset. And the U.S. military isn't shitting itself over a spent conventional power.