MurphyA/hacker-news huggingface dataset:
by idiotsecant | 2025-11-24 19:08:10+00:00
It's interesting that the path from 'decide to do something' to performing the action is hundreds of ms long. It's also interesting that grabbing the data early in the process and acting on it can perform the action before the conscious 'self' understands fully that the action will take place. It's just another reminder that the 'you' that you consider to be running the show is really just a thin translation layer on top of an ocean of instinct, emotion, and hormones that is the real 'you'.
by dataflow | 2025-11-24 19:08:10+00:00
> The standard of proof for an accusation like that cannot be "you disagree with me".

How is that the standard he's applying, though? Just reading his post, it's clearly "you're blatantly and repeatedly lying, and distorting the facts, and not even addressing my arguments". Surely "you disagree with me" is not an accurate characterization of this?
by kelseyfrog | 2025-11-24 19:08:10+00:00
80% accuracy could mean 0 false negatives and 20% false positives.

My point is that accuracy is a terrible metric here and sensitivity, specificity tell us much more relevant information to the task at hand. In that formulation, a specificity < 1 is going to have false positives and it isn't fair to those students to have to prove their innocence.
by Tuna-Fish | 2025-11-24 19:08:46+00:00
Settlers 1/2 are logistics simulators. The core of gameplay is that the map consists of vertexes on which you can place flags, and then connect flags with paths. On each path there will be exactly one porter, who will carry stuff from a flag to another. Arranging your network so that goods get where they are going in a reasonable time is like 90% of the gameplay.
by modeless | 2025-11-24 19:08:56+00:00
The important thing is that all the code written by Core Devices is open source. They can't force third parties to open their code, but they're opening all of their own work. And that proprietary code is not required to use the watches. Most of them don't even have heart rate sensors, and clearly Memfault is not required. They're committing to maintaining a 100% open source version that still allows you to use the watches with minimal compromise.
by fao_ | 2025-11-24 19:08:57+00:00
Part of this is driven by necessity, for example, cellular network chips are typically binary blobs, etc. as mentioned, the heart rate sensor is a binary blob and that's likely because there are no good OSS solutions for those components.

A lot of battery firmwares are closed source, the way that they fixed this for the early pinephone was literally just staring at a memory listing and aiming a heat gun at the battery to see how it reacted when it went hot.
by vessenes | 2025-11-24 19:09:17+00:00
in the NIST Curve arena, I think DJB's main concern is engineering implementation - from an online slide deck he published:

We’re writing a document “Security dangers of the NIST curves” Focus on the prime-field NIST curves DLP news relevant to these curves? No DLP on these curves seems really hard So what’s the problem? Answer: If you implement the NIST curves, chances are you’re doing it wrong Your code produces incorrect results for some rare curve points Your code leaks secret data when the input isn’t a curve point Your code leaks secret data through branch timing Your code leaks secret data through cache timing Even more trouble in smart cards: power, EM, etc. Theoretically possible to do it right, but very hard Can anyone show us software for the NIST curves done right?

As to whether or not the NSA is a strategic adversary to some people using ECC curves, I think that's right in the mandate of the org, no? If a current standard is super hard to implement, and theoretically strong at the same time, that has to make someone happy on a red team. At least, it would make me happy, if I were on such a red team.
by CobrastanJorji | 2025-11-24 19:09:20+00:00
Tangent to your point, the Bible requires that home ownership work exactly like this. You can sell your family's home and lands, but every 50th year, the Jubilee year, the lands must be returned to your family.

The intent was to prevent permanent poverty (poverty = not owning land), and any slaves are also freed on the Jubilee (because slavery was also a poverty thing then). Today, though, it'd probably be more of a tool of a permanent ruling class, so it's probably a good thing that Jews and Christians mostly ignore that section.
by visioninmyblood | 2025-11-24 19:09:23+00:00
The model is great it is able to code up some interesting visual tasks(I guess they have pretty strong tool calling capapbilities). Like orchestrate prompt -> image generate -> Segmentation -> 3D reconstruction. Checkout the results here https://chat.vlm.run/c/3fcd6b33-266f-4796-9d10-cfc152e945b7. Note the model was only used to orchestrate the pipeline, the tasks are done by other models in an agentic framework. They much have improved tool calling framework with all the MCP usage. Gemini 3 was able to orchestrate the same but Claude 4.5 is much faster
by kstrauser | 2025-11-24 19:09:26+00:00
I'm grossly generalizing here, but it seems like OpenBSD boxes seem to be commonly used for the sorts of things that don't write a lot of data to local drives, except maybe logfiles. You can obviously use it for fileservers and such but I don't recall ever seeing that in the wild. So in that situation, UFS is fine.

(IMO it's fine for heavier-write cases, too. It's just especially alright for the common deployment case where it's practically read-only anyway.)
by gcbirzan | 2025-11-24 19:10:02+00:00
I'm sure you're very familiar with the politics of both countries, but tell me...

How is Nicusor Dan a puppet of the EU? More than Calin Georgescu? The guy who actively tried to stage a coup? More than George Simion? Granted, there's no PROOF he's a Russian puppet, but he's a far right twat that has views friendly to Russia.

How is Maia Sandu and PES a puppet of the EU? And... let's look at BEP. Voronin, Russia friendly ex President, he was very against Moldova trying to get closer to the West. And Dodon? The guy who is being indicted for treason, who's a friend of Plahotniuc (he stole 1 billion dollars from banks and fled the country)? Yeah, sure, puppets of the EU, vs corrupt fucking puppets of Russia.

I know it's easy to look at this stuff from the outside and say, oh, yeah, the EU is interfering in elections, but there's a lot of history here that you obviously don't have. I like Maia Sandu more than Nicusor Dan (his positions on gay rights were disgusting a while back, he now just stopped talking about them), but compared to the obviousness of the Russian support for their opposition, I think the fact that the EU supports them is just insignificant.
by infinet | 2025-11-24 19:10:02+00:00
Another JPEG XR user is Zeiss. It saves both grayscale and color microscope images with JPEG XR compression in a container format. Zeiss also released a C++ library (libczi) using the reference JPEG XR implementation to read/write these images. Somehow Zeiss is moving away from JPEG XR - its newer version of microscope control software saves with zstd compression by default.
by stocksinsmocks | 2025-11-24 19:10:16+00:00
Family law judges, in my small experience, are so uninterested in the basic facts of a case that I would actually trust an LLM to do a better job. Not quite what you mean, but maybe there is a silver lining.

We are already (in the US) living in a system of soft social-credit scores administered by ad tech firms and non-profits. So “the algorithms says you’re guilty” has already been happening in less dramatic ways.
by CamperBob2 | 2025-11-24 19:10:48+00:00
Ferrari can only enforce those terms by refusing to sell you any more cars, though. There's not much they can do beyond that.

GM also comes to mind, where they void the warranty if you flip your new Z06 or ZR1 within 6 months. It's nothing more or less than an encumbrance on the title, and they shouldn't be able to demand that without consideration in the form of a discount. But they can, because they have monopoly power in that particular niche.

Key point is that Ferrari and Corvette are niche markets. Car customers in general wouldn't put up with it, because there's plenty of competition for their business.
by astrobe_ | 2025-11-24 19:10:54+00:00
Summarized translation:

Following the propaganda of the ministry of interior, several articles were published in press about GrapheneOS, which is described as a solution for criminals because it allows to hide things.

La Quadrature du Net [similar to the FSF with regard to defending users' rights] argues that the purpose is of course not cybercrime, but to secure and protect the privacy of its users.

The head of the anticybercrime brigade of Paris threatens of suing the developers of GrapheneOS if connections with organized crime were to be found.

The government has repeatedly tried to extend cyber-surveillance previously. They are trying to use a law designed to fight drug traffickers in order to enforce backdoors in services that use cryptography, such as Signal or WhatsApp, without any success for the moment.

---

So, it's a threat before having a proof. They also mention the arrest of Pavel Durov, who was arrested because Telegram failed to answer legal requests, which was then constructed as complicity with criminals using Telegram, but that's obviously a very different case.

But of course, if they succeed in forcing backdoors, criminals will just use other ways to communicate (doesn't matter if they are legal or not because, well, they are criminals...) or tricks; for instance, back in the day when (analog) phone calls could be wiretapped, they were already using code words. They could use e.g. steganography tomorrow.

But we will be left with backdoors that are an unacceptable compromise on security and privacy. This is a recipe for dystopia considering that far-right parties are getting stronger in Europe, including France.
by tjwebbnorfolk | 2025-11-24 19:11:28+00:00
The costs of perfection are much, much greater. Are you willing to pay 2-3x the cost of everything to go from 99.999% to 100.0000000% uptime?

Probably the only thing in existence with 100.00% uptime are our nuclear missile command and control systems. Like, even my pen runs out of ink sometimes. It's just crazy how hard it is to have stuff work all the time.
by dang | 2025-11-24 19:11:34+00:00
Related ongoing thread:

France threatens GrapheneOS with arrests / server seizure for refusing backdoors - https://news.ycombinator.com/item?id=46035977 - Nov 2025 (244 comments)

Recent and related:

France is taking state actions against GrapheneOS? - https://news.ycombinator.com/item?id=45999024 - Nov 2025 (108 comments)
by vessenes | 2025-11-24 19:11:47+00:00
I posted above, but most of the 'really hard' bits come from the unreasonable complexity of actual computing vs the more manageable complexity of computing-with-idealized-software.

That is, an algorithm and compiler and tool safety smoke test and improvement thereby is good. But you also need to think hard about what happens when someone induces an RF pulse at specific timings targeted at a certain part of a circuit board, say, when you're trying to harden these algorithmic implementations. Lots of things that compiler architects typically say is "not my problem".
by constantcrying | 2025-11-24 19:11:55+00:00
In the end I think outlet disagreement is this:

I believe that a Chinese car of the same quality, sold for 70% of the price of a European made car, will outperform the European car in every market, where those cars compete on equal footing. You disagree with that for reasons unfathomable to me.

I believe that the European export economy is vital for its prosperity. 45% of Germany's 1 trillion+ exports are to countries outside of the EU. You believe that loosing that economy can be made up in other ways, again for reasons which are unfathomable to me.

I do not think any evidence I could provide to you could convince you otherwise. That you are lying about what I said (e.g. that cost is the only thing that matters for cars or that European products are of lower quality) makes me not want to talk to you at all.
by MaxBarraclough | 2025-11-24 19:12:28+00:00
Assuming you use Qt Widgets.

As far as I can tell, Qt Quick doesn't have anything like the same set of polished widgets that integrate nicely into the target platform. It's been this way for years, they just don't seem interested in implementing them.

https://doc.qt.io/qt-6/qtquickcontrols-examples.html
by WillAdams | 2025-11-24 19:12:58+00:00
The thing which I've always wanted to see is a knowledgebase system which uses a company's e-mail as an interface:

- new e-mail from client comes in which can't be matched to an existing project? New page in the knowledgebase

- second e-mail from client comes in w/ an attachment? It's stripped off and added to that page in the kb

- employee sends out e-mail with link to the initial version of the project? The link is added to that page

&c.

Maybe AI could make something like that work now?
by arcbyte | 2025-11-24 19:12:58+00:00
I think your point is that there is evidence that the intention of some or all of the developers and/or the organization as a whole is to make law enforcement more difficult. You go on to argue that this intention fundamentally alters how society, or at least law enforcement arms of government, should view this technology. Specifically, I take your argument to be that law enforcement should or will treat them as accomplices to some degree of the crimes they enable.
by dwaite | 2025-11-24 19:13:00+00:00
You may misunderstand how the IETF works. Participation is open. This means that it is possible that people who want the work to fail for their own reasons rather than technical merit can join and attempt to sabotage work.

So consensus by your definition is rarely possible given the structure of the organization itself.

This is why there are rough consensus rules, and why there are processes to proceed with dissent. That is also why you have the ability to temporarily ban people, as you would have with pretty much any well-run open forum.

It is also important to note that the goal of IETF is also to create interoperable protocol standards. That means the work in question is a document describing how to apply ML-KEM to TLS in an interoperable way. It is not a discussion of whether ML-KEM is a potentially risky algorithm.

DJB regularly acts like someone who is attempting to sabotage work. It is clear here that they _are_ attempting to prevent a description of how to use ML-KEM with TLS 1.3 from being published. They regularly resort to personal attacks when they don't get their way, and make arguments that are non-technical in nature (e.g. it is NSA sabotage, and chairs are corrupt agents). And this behavior is self-documented in their blog series.

DJB's behavior is why there are rules for how to address dissent. Unfortunately, after decades DJB still does not seem to realize how self-sabotaging this behavior is.
by alach11 | 2025-11-24 19:13:14+00:00
This is the biggest news of the announcement. Prior Opus models were strong, but the cost was a big limiter of usage. This price point still makes it a "premium" option, but isn't prohibitive.

Also increasingly it's becoming important to look at token usage rather than just token cost. They say Opus 4.5 (with high reasoning) used 50% fewer tokens than Sonnet 4.5. So you get a higher score on SWE-bench verified, you pay more per token, but you use fewer tokens and overall pay less!
by erohead | 2025-11-24 19:13:50+00:00
Good question! (I am the Pebble founder)

When factories restart, not all of the workers who were working there before actually come back to work. Some of them stay in their hometowns or they get other jobs. This means that restarting the production line actually means retraining people on how to assemble the product. There is also an entire supply chain behind the assembly line that takes time to restart. Think of all the sub-components like plastics, metal components, etc. that need to be built at respective factories. It takes time to ship them to the primary factory for final assembly and test.

After the product gets assembled, there are several stages of testing, like gluing, environmental testing, final assembly test, and packaging, that take time as well. Then the product has to be shipped to the fulfillment center, packaged, labeled, and then shipped out. Each step time, and the process needs to completely re-start after CNY.
by techblueberry | 2025-11-24 19:13:58+00:00
What possible solution could prevent this? The best students are learning on their own anyways, the school can't stop students using AI for their personal learning.

There was a reddit thread recently that asked the question, are all students really doing worse, and it basically said that, there are still top performers performing toply, but that the middle has been hollowed out.

So I think, I dunno, maybe depressing. Maybe cynical, but probably true. Why shy away from the truth?

And by the way, I would be both. Probably would have used AI to further my curiosity and to cheat. I hated school, would totally cheat to get ahead, and am now wildly curious and ambitious in the real world. Maybe this makes me a bad person, but I don't find cheating in school to be all that unethical. I'm paying for it, who cares how I do it.

People aren't one thing.
by 0xWTF | 2025-11-24 19:14:14+00:00
Sonova (Phonak's parent company) bought Sennheiser and you can now buy their Sonite R at Costco for $1600. If you have recent Phonaks, you'll recognize the design immediately. They also have an array of peripherals: https://www.costco.com/f/-/sennheiser-brand-showcase
by martin-t | 2025-11-24 19:14:31+00:00
It's a law of nature that they will _try_.[0] That's why people should always have ways of defending themselves, whether it's with courts or guns.

[0]: This is not a figure of speech - many anti-social traits which result in NPD, ASPD and their subclinical versions[1] are genetic. There is literal evolutionary pressure to exploit others.

[1]: Meaning the trait is sufficiently pronounced to be harmful to others but not enough to be harmful to the person having it so it's not diagnosed as a disorder.
by DaveZale | 2025-11-24 19:14:39+00:00
Wouldn't it be cool if a .org could be established and funded by older wealthier folks that directly provides mortgages to the young, without the greedy bankers involved? Sometimes when I was earning free crypto on coinbase in exchange for learning about new coin offerings, I sensed the foundations for new, very low cost, "zero trust" systems for finance that would not involve the current high-profit monopolist bankster systems. Maybe it's just a question of when. What reason is there for a gap of 3% or more between a certificate of deposit, and what is charged in interest to a new home buyer? It's a staggering difference, hidden in plain sight, that keeps the young in debt to the mortgage banking induustry.
by daft_pink | 2025-11-24 19:14:42+00:00
I think smartphones are a special case, because they generally cannot run public facing services that open up ports and are specifically designed to be hardened for ipv6 and designed to work in conjunction with the carrier's ipv6 firewall/network.

Compare that to a home network where, printers are shared, iot devices have open ports, computers and nas share drives. IPv6 may address the needs of cellular carriers and devices, but it doesn't adequately address the needs of small local networks connecting to the internet.
by neilv | 2025-11-24 19:15:08+00:00
You're responding to the words "grab" and "take", and leading up to an argument in which wealth is created, by a Great Man, who deserves the wealth and power that He created, or else He wouldn't have incentive to create wealth?

People can collaborate to create wealth that they share.

The problem is when someone says "I am so great, that I deserve more wealth and power than other people".

Because of a bad experience in kindergarten, or because their parents told them that.
by nyrikki | 2025-11-24 19:15:33+00:00
You can run pods, with podman and avoid the entire k8s stack or even use minikube on a machine if you wanted to. Now that rootless is the default in k8s[0] the workflow is even more convenient and you can even use systemd with isolated users on the VM to provide more modularity and seporation.

It really just depends on if you feel that you get value from the orchestration that full k8s offers.

Note that on k8s or podman, you can get rid of most of the 'cost' of that virtualization for single placement and or long lived pods by simply sharing a emptyDir or volume shared between pod members.

# Create Pod podman pod create --name pgdemo-pod # Create client podman run -dt -v pgdemo:/mnt --pod pgdemo-pod -e POSTGRES_PASSWORD=password --name client docker.io/ubuntu:25.04 # Unsafe hack to fix permissions in quick demo and install packages podman exec client /bin/bash -c 'chmod 0777 /mnt; apt update ; apt install -y postgresql-client' # Create postgres server podman run -dt -v pgdemo:/mnt --pod pgdemo-pod -e POSTGRES_PASSWORD=password --name pg docker.io/postgres:bookworm -c unix_socket_directories='/mnt,/var/run/postgresql/' # Invoke client using unix socket podman exec -it client /bin/bash -c "psql -U postgres -h /mnt" # Invoke client using localhost network podman exec -it client /bin/bash -c "psql -U postgres -h localhost"

There is enough there for you to test to see that the performance is so close to native sharing unix sockets that way, that there is very little performance cost and a lot of security and workflow benefits to gain.

As podman is daemonless, easily rootless, and on mac even allows you to ssh into the local linux vm with `podman machine ssh` you aren't stuck with the hidden abstractions of docker-desktop which hides that from you it has lots of value.

Plus you can dump a k8s like yaml to use for the above with:

podman kube generate pgdemo-pod

So you can gain the advantages of k8s without the overhead of the cluster, and there are ways to launch those pods from systemd even from a local user that has zero sudo abilities etc...

I am using it to validate that upstream containers don't have dial home by producing pcap files, and I would also typically run the above with no network on the pgsql host, so it doesn't have internet access.

IMHO the confusion of k8s pods, being the minimal unit of deployment, with the fact that they are just a collection of containers with specific shared namespaces in the general form is missed.

As Redhat gave podman to CNCF in 2024, I have shifted to it, so haven't seen if rancher can do the same.

The point being is that you don't even need the complexity of minikube on VM's, you can use most of the workflow even for the traditional model.

[0] https://kubernetes.io/blog/2025/04/25/userns-enabled-by-defa...
by johnisgood | 2025-11-24 19:15:56+00:00
I know, I am just saying even in the documentation it mentions that they are implemented because it is good / useful for web browsers.

You should totally implement BLAKE2b and ChaCha20. FWIW, BLAKE3 is in Rust already.

Additionally, these features seem to be highly related to web servers, IMO. Not exclusively so, but still.
by guerby | 2025-11-24 19:16:17+00:00
We migrated to a linux nftables based firewall.

I never liked iptables, but nftables is pretty nice to write and use.

And with one "flowtable" line added to your nftables.conf you can even in theory have faster routing when conntrack is active

https://thermalcircle.de/doku.php?id=blog:linux:flowtables_1...
by bawolff | 2025-11-24 19:16:26+00:00
> I don't understand what you're trying to say. Mozilla said over a year ago that they would support JXL as soon as there's a fast memory safe decoder that will be supported.

Did they actually say that? All the statements i've seen them have been much more guarded and vauge. More of a, maybe we will think about it if that happens.