MurphyA/hacker-news huggingface dataset:
by esseph | 2025-11-20 00:43:39+00:00
People get their identities stolen every day, and it is a super, super, super shitty process to go through depending on how deep it goes. It can change your life forever.

Having oldass OS and application versions make that a thousand times easier when you have so, so, so many CVEs you can exploit. And LLMs have been show to make this very trivial now.

All you need to do is click on the wrong pop-up, or the wrong link in your email, or tap something on your phone screen, or have a poorly configured (often from the factory) router, and the initial intrusion takes place. After that, an outbound encrypted session quickly gets setup, and congrats, now your network is acting as a residential proxy that can be sold to criminals that want to download CSAM from your IP, AI companies that will use your connection for scraping, and other elements that will either mine the data on your systems (your PII, logins, etc) and scrape your screens.

But if you don't care about your life becoming a living hell, then I can't make you.

This happens all the time, every day.

If you have a car, you maintain it. If you have a bike, you maintain it. Power tools? You maintain them. Your electronic devices also need to be maintained. They have access to your most sensitive data, and potentially private conversations.
by jachee | 2025-11-20 00:43:57+00:00
There is exactly one game keeping me from running Linux as my main OS… and that’s iRacing.

Sadly, they won’t (not can’t…) ship the flag in EOS (née EAC) that enables anti-cheat support on Linux. It would work, but they just don’t have the resources to support a whole other family of OSes.

So, between that and the abject murder of WMR for my Reverb G2, I’m stuck on Win10 for the foreseeable.
by dmurray | 2025-11-20 00:45:47+00:00
Why then does the NTSB point blame so much at the single wiring issue? Shouldn't they have the context to point to the 5 things that went wrong in the Swiss cheese and not pat themselves on the back with having found the almost-irrelevant detail of

> Our investigators routinely accomplish the impossible, and this investigation is no different...Finding this single wire was like hunting for a loose rivet on the Eiffel Tower.

In the software world, if I had an application that failed when a single DNS query failed, I wouldn't be pointing the blame at DNS and conducting a deep dive into why this particular query timed out. I'd be asking why a single failure was capable of taking down the app for hundreds or thousands of other users.
by shawneechase | 2025-11-20 00:46:11+00:00
One thing that keeps coming up when teams deploy MCP agents: the server passes local tests, but production falls apart. The root cause is usually client behavior, not the server.

MCP clients load all tool schemas into every model call. Those schemas dominate the context. After ~20–40 tools, the model’s tool-selection accuracy drops sharply — not due to reasoning limits, but because the action space explodes.

Sampling is supposed to fix the common “tool got partial info and needs clarification” problem by letting the tool call back into the LLM mid-execution. But most clients don’t support sampling, so the tool can’t ask follow-up questions and just fails.

If you’re designing for production: treat tool definitions as scarce context, split tools into smaller surfaces, and avoid any MCP client that doesn’t support sampling. Most real agent failures can be traced back to that combination.
by 8f2ab37a-ed6c | 2025-11-20 00:46:18+00:00
Couple of questions for people in-the-know:

* Does Adobe have their version of this for use within Photoshop, with all of the new AI features they're releasing? Or are they using this behind the scenes? * If so, how does this compare? * What's the best-in-class segmentation model on the market?
by ev1enet | 2025-11-20 00:48:24+00:00
Nitro is an awesome piece of software - but the RAW demosaic is sadly far behind other solutions.

I’m a long-term Nitro user, picked up a new camera (Pana S5iix) a few weeks ago and found myself really disappointed with the quality on one specific shoot. Daylight, low ISO - technically super “clean” raw files, but Nitro was struggling with detail and weird artefacts in the shadows.

I never expect DeepPRIME or Topaz level processing from it - but something about the image seemed off. Fired up an alternate software and sure enough, even with 0 corrections applied, side-by-side Nitro looked noticeably worse.

I much prefer the local-first workflow, and I split my time editing roughly evenly between my M1 iPad and M4 Mac. Nitro was an absolute game-changer for my workflow as I could dump photos to my iPad right after a show, cull and get preliminary edits delivered in the cab home, then seamlessly switch to my “big” setup. Guess I need to buy a laptop now :(
by mandevil | 2025-11-20 00:48:32+00:00
Yeah, ROCm focused code will always beat generic code compiled down. But this is a really difficult game to win.

For example, Deepseek R-1 released optimized for running on Nvidia HW, and needed some adaption to run as well on ROCm. This was for the exact same reasons that ROCm code will beat generic code compiled into ROCm, in the same way. Basically the Deepseek team, for their own purposes, created R-1 to fit Nvidia's way of doing things (because Nvidia is market-dominant) on their own. Once they released, someone like Elio or AMD would have to do the work of adapting the code to run best on ROCm.

For more established players who weren't out-of-left-field surprises like Deepseek, e.g. Meta's Llama series, mostly coordinate with AMD ahead of release day, but I suspect that AMD still has to pay for the engineering work themselves while Meta does the work to make it run on Nvidia themselves. This simple fact, that every researcher makes their stuff work on CUDA themselves, but AMD or someone like Elio has to do the work to move it over to get it to be as performant on ROCm, that is what keeps people in the CUDA universe.
by 0x457 | 2025-11-20 00:48:40+00:00
Early Arduino were all AVR 8-bit, at the time it was already on the way out. There were no shifts in industry to those chips.

People who got Arduino, either:

- blinked some LEDs and forgotten about it

- switched to esp32 and/or stm32

- esp32 and esp8266 move is funny because people started buying esp8266 to add Wi-Fi to their arduinos and then realized that they can just throw away arduino all together. - switched to cheap clones that offer more - quick connect for that not only want to blink LEDs, but also have some cool graphs to look at (like temperature and humidity) - boards that specifically designed for their use case (i.e. battery and eInk connectors and circuitry required)

Arduino is inconsequential to industry as whole or even to hobbyist using it.
Did smartphones make us look down? Could AR glasses help us look up again?
by Tech_Social | 2025-11-20 00:48:45+00:00
In 2006, I remember my flip phone and T-Mobile was my network. I remember social media use wasn't really embedded in phones at the time. The early precursors to that obviously being AIM, Yahoo Messenger, and MSN Messenger, depending on your phone of course. When smartphones really took off, which I'd argue would be 2008 to 2009 (I know iPhone camera out 2007), social media in its very prehistoric form started to rise. Now I want to be clear here. I am talking about social media through our handheld devices. Forums were already alive and brewing at that point.

As the use of social media grew over the following decade, we stopped looking up and always looked down. By 2017 (Musically) which is what I remember TikTok being formally, started turning social media into a 100% my life through a phone experience instead of actual interaction.

I bring all this up because I have recently grown more optimistic about the evolution of social media. I was never a downer on the topic but I noticed it really took us out of any given moment. I recently started using glasses with a built-in display and I started to wonder if social media, might actually become more social if our glasses are doing the recording instead of our phones.
by afavour | 2025-11-20 00:48:54+00:00
> Workday, Inc. (NASDAQ: WDAY), the enterprise AI platform for managing people, money, and agents, today announced it has entered into a definitive agreement to acquire Pipedream, a leading integration platform for AI agents

Pipedream indeed!

It blows my mind that every company has decided to call itself an “AI platform” but it blows my mind even more that the stock market apparently believes them when they say it. Workday was an HR platform five years ago. It still an HR platform today.
by ddxv | 2025-11-20 00:48:54+00:00
They should be removed from Apple and Google and given to an organization that manages the apps like a repository. Apple and Google can still have seat(s) on the board and likely would provide funding. Then 'app stores' can be built on top of the architecture with 30% cut, nice UIs and user protections. But the core repository of apps is free to use by any company/individual.
by jijijijij | 2025-11-20 00:48:59+00:00
I mean, it's obviously ineffective for the stated goal of proving authenticity to other users, so using a VPN must really be quite effective at tainting Twitter's data collection to let them go to such lows. And it's not just Twitter... VPNs seemingly really piss off a lot of data businesses. Quite the advertisement. And ironically going "bareback" now feels way more compromising than ever before.
by fsckboy | 2025-11-20 00:50:31+00:00
>a larger proportion of "chancers", people who are only in tech to "get rich quick"

your complaint was Unassailable Hacker® jwz's complaint about HN more than 10 years ago here's a link (many on HN complain that this is NSFW https://cdn.jwz.org/images/2024/hn.png since there are rarely complaints here that anything else is NSFW, I'd suggest people feel insulted by the message)

the thing that has actually changed since jwz's disgust is the site is now flooded by socialism, the antithesis of get-rich enthusiasm
by al_borland | 2025-11-20 00:50:58+00:00
From what I’ve heard, Google makes more on Premium subscribers than from ad-watchers. This should incentivize Google to get as many people on Premium as possible. The content is the same, Premium or not, so if they want more people to sign up, they need to give the users features worth having.

In terms of content. Very little of what I watch is must-see. It’s just something to kill time. Right now I’m watching some guy jump a bicycle through two moving truck trailers. If this was cable in the 90s, I’d probably be watching How It’s Made. These things are essentially interchangeable for me.
by bilbo0s | 2025-11-20 00:51:02+00:00
I wouldn't call them "adversaries" yet.

But the fundamental point of your comment is well taken. There are a lot of nations out there who have clearly begun to see the lack of sustainable safety in being called an "ally" by the US.

Of course, we're only in the first year of the new US foreign policy posture. Who knows where we'll be by year 4? Who's even to say this new environment won't last longer than 4 years?

Just a lot of uncertainty out there. And that uncertainty is why we see people, organizations and nation states move to protect themselves.

It should, if no one panics, lead to a new balance. A new normal.

Should.
by caminanteblanco | 2025-11-20 00:51:04+00:00
>The seven highway workers and inspector on the Key Bridge at the time were not notified of the Dali’s emergency situation before the bridge collapsed. We found that, had they been notified about the same time the MDTA Police officers were told to block vehicular traffic, the highway workers may have had sufficient time to drive to a portion of the bridge that did not collapse. Further, we found that effective and immediate communication to evacuate the bridge during an emergency is critical to ensuring the safety of bridge workers.
by array_key_first | 2025-11-20 00:51:07+00:00
Well you can't just replace a word with a different word and then act like things are the same. If you do choose to do that, you, at the very least, have to explain how 'automobile repair' and 'regulations' are analogous.

Because in my mind, they are not. There are many, many people ideologically opposed to regulation. I've never met anyone ideologically opposed to auto repair, or even just opposed in general.
by tombert | 2025-11-20 00:51:08+00:00
My dad complained about StarBasic being different enough from VBA to where he'd be forced to port over large amounts of his spreadsheets over. He also uses the paid version of Mathtype to do his equation editing, which I'm not sure would work in Linux even if Word did run on Wine, at least not the direct integration.

I am drawing a blank over what my mom was complaining about but I do recall that it was valid. Something to do with Word.

It's tough for me to give full rebuttals to any of this, because I don't really use any WYSIWYG stuff for documents anymore and just use Typst or LaTeX/Pandoc for everything now. That works fine on Linux but of course that's understandably a non-starter for most people.

At this point I think the only thing I could realistically do to get them to switch, and I doubt it would be successful, would be to convince them that Winboat would be fine.
by Telaneo | 2025-11-20 00:51:29+00:00
Given that there's a 'Disable RCS' toggle (and a 'Resend as SMS' toggle for that matter) that seems to re-enable SMS and eliminate the RCS weirdness, this doesn't really seem to be true. I guess it could be in the future when carriers disable whatever path SMSes are currently going through, leaving you only with RCS that might still be borked.
by teddyalbina | 2025-11-20 00:54:08+00:00
Green threads in Java are only there because the async model implementation of the JVM is trash, don't even talk about generics

Also, Java didn't move for a very, very, very, very, very, very, very, long time because nobody cares. It took Microsoft to reinvest in it, and make things moving. Basically they took a bunch of C# specifications and translate them to JSR format.

Before that they port Rx from .NET Framework, to Java and Javascrit.
by theandrewbailey | 2025-11-20 00:55:53+00:00
Yes, WipeOS does secure erasing, and can do some mild diagnostic tests (something like MemTest86, but not as extensive). WipeOS can format a bootable USB drive to boot WipeOS if PXE doesn't work for whatever reason (BIOS doesn't support it, bug with NIC, etc). It should be possible to create an ISO from said USB drive, but I'm the only one who uses iVentoy. I haven't made that ISO because I don't mind swapping the ethernet cable during the ~10 seconds it takes to reboot.
by array_key_first | 2025-11-20 00:56:12+00:00
This is just a belief about code, and one of many. Another belief is that code and computer systems are inseparable, and the most straightforward and simple code is code that leverages and makes sense for it's hardware.

As in, you can pretend hardware doesn't exist but that doesn't actually change anything about the hardware. So, you are then forced to design around the hardware without knowing that's necessarily what you're doing.

Exhibit A: distributed systems. Why do people keep building distributed systems? Monoliths running on one big machine are much simpler to handle.

People keep building distributed systems because they don't understand, and don't want to understand, hardware. They want to abstract everything, have everything in it's own little world. A nice goal.

But in actuality, abstracting everything is very hard. And the hardware doesn't just poof disappear. You still need network calls. And now everything is a network call. And now you're coordinating 101 dalmatians. And coordination is hard. And caching is hard. And source of truth is hard. And recovery is hard. All these problems are hard, and you're choosing to do them, because computer hardware is scary and we'd rather program for some container somewhere and string, like, 50 containers together.
by gerdesj | 2025-11-20 00:56:16+00:00
Blast. Soz.

I've been using Windows since v1 or perhaps 2 - we had a "CAD" workstation at school back in the day. It was a RM Nimbus with a 80186 (yes!) in it. I own a Commodore 64 from 1984ish (still have it - it now has USB).

I also recall using telnet to access the internet (gopher, WAIS etc) and being asked by my boss in 1994ish to investigate this www thing that was making waves.

I found it after a lot of navigation through menu systems. This is a discussion about the real differences by Sir TBL: https://www.w3.org/History/1992/WWW/FAQ/WAISandGopher.html

My report was: it looked pretty much the same as the rest, which shows exactly how prescient I was! To be honest, back then it was hard to tell what on earth was going on in a telnet session. At the time I could get at a sort of hyperlinked system on my telly (CEEFAX) and there were other similar systems around the world.

In hindsight, I think graphics cemented the www's dominance. I remember discovering the Mosaic browser and leaving telnet at around the time when a MS President (yes the speccied one) decided the web was not going anywhere), and thinking "fuck: that's the future".
by dzonga | 2025-11-20 00:56:26+00:00
lack of new blood is what kills an ecosystem.

the ever infusion of new blood is what made Javascript & Python to be in top 3 languages today. Even though things like Ruby were easier for some. Ruby not being easily installed on windows back then stopped new blood as well.

for language designers / framework designers -- make your stuff easy for beginners then it easily grows.
by todd_austin | 2025-11-20 00:57:26+00:00
I created Mojo-V.

For me, I see Mojo-V more like FHE than a TEE, for three primary reasons: 1) Like FHE, the tech is applied to variables and computation that doesn't touch protected variables is not affected. TEEs protect processes. 2) Like FHE, Mojo-V lacks software, timing, and microarchitectural side channels. TEEs are riddled with side channels. 3) Like FHE, no trust is extended to software because it cannot see the data it is processing. TEEs require that clients trust that the attested software has their best interests in mind.

Public key signing is like SGX, the vendor signs the public to certify that it is from real Mojo-V hardware.
by mrguyorama | 2025-11-20 00:57:59+00:00
Importantly, Russia fully expected to have access to those dollars during a war with the west, as that was the entire reason of stockpiling them in the first place, but Russia's central bank was not informed ahead of time that they were invading Ukraine and was completely unable to move the money before the west reacted.

The risk was known and expected. The risk that (hilariously) wasn't planned for was the risk that Putin is that fucking stupid.
by jsheard | 2025-11-20 00:58:09+00:00
> Take the ROCm specification, take your CUDA codebase, let one of the agentic AIs translate it all into ROCm

...sounds like asking for a 1:1 mapping to me. If you meant asking the AI to transmute the code from NV-optimal to AMD-optimal as it goes along, you could certainly try doing that, but the idea is nothing more than AI fanfic until someone shows it actually working.
by raw_anon_1111 | 2025-11-20 00:58:27+00:00
s3 access is blocked from an EC2 by default unless you give the attached IAM role access to S3.

Then it is still blocked unless you add a NAT gateway or Internet gateway to the VPC and at a route to them.

If you are doing all of this via IAC, you have to take a lot of steps to make this happen. On the other hand, if I’m using an EC2 instance to run an ETL job from data stored on S3, I’m not putting that EC2 instance in a subnet with internet access in the first place. Why would I?

And no you don’t need internet access to access the EC2 instance ftom your computer even without a VPN. You use System Manager Session Manager.

I do the same with lambda - attach then to a VPC without internet access with the appropriate endpoints. Even if they are serving an API, they are still using an API gateway
by nyrikki | 2025-11-20 00:58:42+00:00
For the crowd I ran in the lack of real branching and the need to use DirState or Queues for selective commits made Mercurial feel too much like p4, where git felt so freeing, especially with spikes etc...which would be forever in the repo with Mercurial etc...

> This ground rule meant that a mass insertion of b'' prefixes everywhere was not desirable, as that would require developers to think about whether a type was a bytes or str, a distinction they didn't have to worry about on Python 2 because we practically never used the Unicode-based string type in Mercurial.

> In addition, there were some other practical issues with doing a bulk b'' prefix insertion. One was that the added b characters would cause a lot of lines to grow beyond our length limits and we'd have to reformat code.

I wonder if their line length was arbitrarily 80chars or some silly serial terminal like limit.

> It is now 2020 and Python 2 support is now officially dead from the perspective of the Python language maintainers. Linux distributions are starting to rip out Python 2. Packages are dropping Python 2 support in new versions. The world is moving to Python 3 only. But Mercurial still officially supports Python 2

To me it doesn't matter what pain points there were between 2/3, or that it was even python.

That is just the classic way any modernization effort fails. IMHO those failures are almost completely tool agnostic and are cultural failures.
by PrairieFire | 2025-11-20 00:58:49+00:00
Pretty sure that was the case. I heavily use Tailscale at work and have been working steady on multiple VNC connected clients over Tailscale Wireguard tunnels without issue. Just wrapped it up for the day and hit the ‘ol watering hole (hackernews) to see this. I didn’t connect/disconnect or have to use the portal during that time period, but my in place connections were fine.
by fsniper | 2025-11-20 00:58:54+00:00
I suppose all comes down to who runs the leading (or any) investment companies. Money people are not known to be technically literate enough for not being fooled by magic (any sufficiently advanced technology).

They are facinated by llms that they are pouring down money to AI related companies. Can you blame them? Can’t deny, I am also fascinated by llms.
by bilbo0s | 2025-11-20 01:00:09+00:00
>China has no serious alternative to Treasuries

Someone should tell the Chinese that, because they've been a net seller of US treasuries for some time now. They are clearly at a minimum diversifying right now. I'm sure if you ask some people they will say "diversifying" isn't a strong enough word for the velocity of the changes we're seeing. "De-linking" is the popular word these days for what's going on. Truth, as always, is likely somewhere in the middle.

Obviously we can't see all that goes on inside China, but we have 100% visibility on what's happening with US treasuries. Regarding the whole picture, just from what is publicly reported, it certainly seems like China is betting on what appears to be, themselves. Maybe that's a good market in the future and they make out like bandits? Maybe it's a bad market and they take significant hits? Not really sure anyone can say with certainty right now?

If I was forced to bet, I'd say it will pay off, but not as big as they think. Probably big enough to not really need the West though. Which is a strategic win I suppose?