MurphyA/hacker-news huggingface dataset:
by CysecTools | 2025-11-01 18:33:07+00:00
Telegram bots have become essential tools for businesses, developers, and organizations worldwide. With over 800 million active users, Telegram's bot ecosystem continues to grow exponentially. However, this rapid growth brings significant security challenges that developers must address.

BotSentinel emerges as the premier solution for Telegram bot security, offering comprehensive scanning, vulnerability assessment, and protection services that help developers build secure, reliable bots.
by embedding-shape | 2025-11-01 18:33:24+00:00
> Interestingly, I wonder if the debates over the addition of C++, Python, and Perl to the base system language set were this acrimonious.

I think any projects that are run by people that see themselves as "X-people" (like Python-people, Perl-people) always have a bit "ick" reaction to new languages being added to projects they might see as part of a language's community.

So say you're a C++ developer, contributed to APT over the years, see all of it linked to the C++ community which you are part of too, and someone wants to start migrating parts of it to Rust/$NewLang. I think it might sometimes affect more for these people than just the code, might even be "attacking" (strong word perhaps) their sense of identity, for better or worse.
by siliconc0w | 2025-11-01 18:34:50+00:00
Wrote a similar PoC here: https://github.com/s1liconcow/autoapp

Some ideas - use a slower 'design' model at startup to generate the initial app theme and DB schema and a 'fast' model for responses. I tried a version using PostREST so the logic was in entirely in the DB and but then it gets too complicated and either the design model failed to one-shot a valid schema or the fast model kept on generating invalid queries.

I also use some well known CSS libraries and remember previous pages to maintain some UI consistency.

It could be an interesting benchmark or "App Bench". How well can an LLM one-shot create a working application.
by ec109685 | 2025-11-01 18:35:04+00:00
Published papers are part of the EB-1 visa rubric so huge value in getting your content into these indexes:

"One specific criterion is the ‘authorship of scholarly articles in professional or major trade publications or other major media’. The quality and reputation of the publication outlet (e.g., impact factor of a journal, editorial review process) are important factors in the evaluation”
by ytreister | 2025-11-01 18:35:16+00:00
Hey everyone — I’m actually the author of gibr!

I just wanted to say thanks for all the comments and discussion. It’s been amazing (and honestly a bit surprising) to see so many developers checking it out.

The idea for gibr came from the frustration I had when I was forced to use Jira for issue tracking and GitLab for our repos. At the time, I built an internal tool called jig that integrated the two. With a single command, it could create a branch, push it, transition the Jira issue to In Progress, and open a merge request with everything pre-filled — assignee, reviewers, description, and so on. It became really popular at my company.

I decided to take that idea further and rebuild it as an open-source tool with a plugin architecture, so it could work with any issue tracker or Git provider, not just Jira and GitLab.

If anyone has feedback or ideas for new integrations, I’d love to hear them — some great suggestions have already come in that might make it into the next release.

Thanks again for the support — this community is awesome.
by Jaygles | 2025-11-01 18:35:18+00:00
I don't think that is what the original commenter was getting at. In your case, the company is actively choosing to make changes. Whether its for a good reason, or leads to a good outcome, is beside the point.

LLMs being inherently non-deterministic means using this technology as the foundation of your UI will mean your UI is also non-deterministic. The changes that stem from that are NOT from any active participation of the authors/providers.

This opens a can of worms where there will always be a potential for the LLM to spit out extremely undesirable changes without anyone knowing. Maybe your bank app one day doesn't let you access your money. This is a danger inherent and fundamental to LLMs.
by jandrewrogers | 2025-11-01 18:35:35+00:00
The classic use case for async was applications with extreme I/O intensity, like high-end database engines. If designed correctly it is qualitatively higher performance than classic multithreading. This is the origin of async style.

Those large performance gains do not actually come from async style per se, which is where people become confused.

What proper async style allows that multithreading does not is that you can design and implement sophisticated bespoke I/O and execution schedulers for your application. Almost all the performance gains are derived from the quality of the custom scheduling.

If you delegate scheduling to a runtime, it almost completely defeats the point of writing code in async style.
by SoftTalker | 2025-11-01 18:35:55+00:00
Another vote for vanilla, learn the basics and then add packages for what you need.

I have spent my entire career using vanilla emacs with a few other packages. A lot of things, including org-mode, are included by default in modern emacs.

The problem with learning heavily customized distributions like Doom is that they won't be installed elsewhere and if you have to use emacs on another system you won't have what you're familiar with. Weigh that relative to how often that happens in your work.
by varispeed | 2025-11-01 18:35:57+00:00
This was just another terrorist attack attempt by white collar autocrats. EU failed to recognise it as such. Groups proposing such mass assault at the public belong behind bars, not to be given consideration. If someone proposed legislation for compulsory mass rape, would European Commission take it through legislative process? Unlikely. So they have a massive blind spot, or are working together to move Overton window and eventually this will pass. Dangerous times.
by robot-wrangler | 2025-11-01 18:36:38+00:00
> the idea that nothing matters has gained significant purchase

An example of an increasingly popular trend that conflates what I'd call "value nihilism" with "action/effort nihilism". There's a huge difference. Value-nihilism is kind of soul-sickness that's probably super rare in the general population and usually comorbid with stuff like dark triad or clinical depression. Action/effort nihilism, or the POV that nothing can be done to improve things, is just realism or pragmatism in a party mask.

Value-nihilism cannot be disproved or even argued with, because there's no place to stand. On the bright side(?), action/effort nihilism is a pretty simple thing to cure if you're in a leadership position. Reward effort, intentions, results, and keep the promises you make so that people can plan for their future and have agency. Stop playing corrupt and counterproductive games with politics, optics, nepotism
by embedding-shape | 2025-11-01 18:37:03+00:00
What about "no single mindset works all the time" instead? Sometimes you need to bite the bullet and just learn to live with something, sometimes you need not to, and instead fight until you can't, to get out of the situation. Different moments call for different ways of seeing situations, and maybe learning to identify what moment calls for what mindset is something we need to focus on more, rather than digging into one position that should always work.
by Wowfunhappy | 2025-11-01 18:37:24+00:00
> or receive benefits from any third-party effort for 61 more years.

...do they?

Like let's say I make a modified version of this game. Technically my modification is illegal to distribute since it contains assets I don't own the rights to. However, the creators of the original game don't own the rights to my modifications either.
by cultofmetatron | 2025-11-01 18:37:38+00:00
fast necessitates manual control -> more semantics for low level control) that need to be expressible, ie: more complex

easy to understand, maintain -> computer does more work for you to "figure things out" in a way that simply can't be optimal under al conditions.

TLDR: what you're asking for isn't really possible without some form of AGI
by uxcolumbo | 2025-11-01 18:38:01+00:00
Yes true. It's basically form over function and it's not just limited to Web UIs.

Windows 11, iOS7, iOS26 are just some example of non Web UIs, which focused first on optimizing for sales, i.e. making something look good without thinking about usability implications.

Fortunately usability testing is still pretty much a thing. Good articles here: https://www.nngroup.com/search/?q=usability+testing
by mpeklar | 2025-11-01 18:38:11+00:00
When considering this issue alongside with RFD 397, it seems to me that the problem is actually using future drops as an implicit (!) cancellation signal. This makes drop handlers responsible for handling every cancellation-related task, which they are not very good at. If a future is not immediately dropped after selecting on it, you get futurelock, and if it is, you get an async cancellation correctness problem, where the only way to try and interact with the cancellation execution flow is to use drop handlers (maybe in the form of scope guards).

Sadly, the only solution I know of is to use an explicit cancellation signal, and to modify ~everything to work with it. In that world, almost all async functions would need to accept a cancellation parameter of some sort, like a Go Context or like the tokio-utils CancellationToken, and explicitly check it every time they await a function. The new select!-equivalent would need to signal cancellations and then keep polling all unfinished cancellation-aware futures in a loop until they finished, and maybe immediately drop all non-aware futures to prevent futurelock. The entire Tokio API would need to be wrapped to take into account cancellation tokens, as well as any other async library you would want to use.

A lot of work, and you would need to do something if cancel-aware futures get dropped anyway. What a mess.
by smallstepforman | 2025-11-01 18:38:35+00:00
Any scenario where you have to atomically update 2 actors. To use a simple analogy for illustrative purposes, transferring money between 2 accounts, you need to lock both actors before incrementing/decrementing. Because in the real world, the accounts can change from other pending parallel transactions and edits. Handshakes are very error prone. Lock the actor, do the critical transaction, unlock.

In a rationale world, this works. In a prejudiced world, devs fight against locks in actor models.

Hence why I had to roll my own …
by mackeye | 2025-11-01 18:39:05+00:00
ime, the benefit of vscode over a text editor (i prefer kakoune, which has present, but low, community support vs. n?vim/emacs) was relatively seamless debug sessions. almost any other element is exceeded in an editor, to me --- the git integration of vscode is subpar, most vscode plugins i'd need have standalone counterparts (tinymist is the best example), etc. in emacs, these are exacerbated, as git integration is emacs is excellent (as i hear), and many integrations for emacs are well-maintained. what do you see as the benefit of vscode over an editor?

i haven't used cursor, and i've used clion only minimally. visual studio is quite a standup ide experience, and i'd use it were i on windows. but vscode doesn't seem particularly above the competition in terms of sheer capabilities.
by a022311 | 2025-11-01 18:40:01+00:00
There have been quite a few exploits over the years, with the most recent public CVE 2 years ago [1].

Your specific setup uses `--net=host` and this opens you up to potential vulnerabilities (see [2]).

You also shouldn't forget that containers have unrestricted network access bu default anyway. Even if your device is safe, they may be able to infect other vulnerable devices on your network.

[1]: https://docs.docker.com/security/security-announcements/#doc... [2]: https://github.com/0xn3va/cheat-sheets/blob/main/Container/E...
by kamranjon | 2025-11-01 18:40:15+00:00
“Noone made any money or got any oil from the Iraq War.”

This seems wrong?

Halliburton secured a 7billion dollar contract where they were the only allowed bidders, their subsidiary Kellog Brown & Root (KBR) was estimated to receive at least 39.5billion dollars in federal contracts.

Halliburton experienced a 80% increase in revenue by the first quarter of 2004…

Most of these contracts were “cost-plus” which meant they were guaranteed reimbursement for their costs + a guaranteed profit on top of that.

As a result of the war many oil companies including BP were awarded access and development contracts to the oil fields, with BP extracting well over 15billion dollars worth of oil.

Over 150billion dollars in oil money apparently just went missing or was “stolen”.

Also the US has maintained control over Iraqi oil revenue since the beginning of the war in 2003.

It would seem to be almost rewriting history to make such a statement…
by ChrisMarshallNY | 2025-11-01 18:40:30+00:00
That's the deal, though. Hardware companies tend to think of software as a separate cost center/profit center from hardware.

In reality, a good software/hardware meld can make all the difference (hello, Apple). In those cases, the software is "free."

I am not that familiar with Nvidia, but, from what I hear, they do good software, to go with their hardware, and have a robust developer outreach program.
by coryrc | 2025-11-01 18:40:38+00:00
The post I replied to said "If I'm doing vias, I'm nearly finished with prototyping". You're not if you're using a QFN switcher which needs heat dissipation via the center pad. There's lots of cases of prototyping where vias would be handy.

> you cannot make much more than a basic breakout board

Except, you know, all the supporting circuitry, connectors, maybe microcontroller and JTAG header which could be put on instead of bodged together with random wires -- exactly the problem this is targeted to solve.

> Just the fact that you cannot have meaningful design over ground return paths with this thing makes any moderately fast digital link unfeasible.

You can with a 4-layer version, which is brought up in the video as one of the obvious improvements to make/try, and you would need/want the vias at least to route the other signals around your high-speed traces.
by WarOnPrivacy | 2025-11-01 18:40:42+00:00
> It was just different,

If you accept the details I offered, I can accept this an honest opinion on your part. Just as I am the only one of us who can factually speak to the details of my childhood, you are the only one who can factually state your opinion.

Your opinion would seem to be fairly unique, however.

Conversely, I have never met (nor heard of) anyone (else!) who believe that these two utterly desperate experiences are similar.

A childhood entirely spent in one tightly-restricted, adult-poulated, adult-curated space after another. A childhood spent with continual access to adult-free time to travel and free range in a manner, reflective of what children have had throughout history.

All that said, I will accept that you believe these two types of childhoods are just different (eg: on the whole equitable in a way neither of them are absolutely preferable over the other).

If that works for you, we would seem to be done.
by renewiltord | 2025-11-01 18:40:43+00:00
Life’s pretty good, guys. It’s been good when I was a little child playing in the mud. It was good when I was on my one hour ride to school. It was good when I first cut my flesh to the bone and watched my dad sew it up. It was good when a girl I had a crush on didn’t feel that way about me.

It was good when I nearly failed Algebraic Geometry because I didn’t have what it took. It was good when I almost didn’t get an internship out of uni because I procrastinated till Jan of the year. It was good when I moved to SF with $25 in my bank account.

It was good when I lived on a couch off Air Bed And Breakfast. It was good when a car hit me on my motorcycle. It was good when I was robbed.

Life is just good. Because the alternative is oblivion.
by kamikazeturtles | 2025-11-01 18:40:57+00:00
> Also, the largest theft in human history surely has to be the East India Company extracting something like 50 trillion from India over 200 years, right?

I never understood these sorts of statements. I feel historical events maybe after the Victorian age can claim to be theft, otherwise it's just empires and conquest.

Adjusted for inflation, wouldn't Alexander the Great's plundering of Persia, which at the time comprised 40% of the world's population, be the greatest theft in human history, using your logic?
by Razengan | 2025-11-01 18:41:04+00:00
Something I thought about long ago was that it would be better/easier to divide user accounts into "personas": different sets of public-facing IDs, settings etc.

This could be done at every level: the operating system, the browser, websites..

So if you don't care about the website knowing it's the same person, instead of having multiple user accounts on HN, Reddit, you could log into a single account, then choose from a set of different usernames each with their own post history, karma, etc.

If you want to have different usernames on each website, switch the browser persona.

At the OS level, people could have different "decoy" personas if they're at risk of state/partner spying or wrench-based decryption, and so on.
by AnthonyMouse | 2025-11-01 18:41:21+00:00
If you don't record every conversation that happens in a private home, you can't retroactively wiretap them "only sometimes". If you don't open and scan everyone's mail, you can't go back and read the ones they've already received "only sometimes".

Why is that a problem? Then you just don't do it at all. Society can survive two people being able to have a private conversation.
by Konnstann | 2025-11-01 18:41:32+00:00
The problem arises when there's outside pressure to use the tools, or now you're maintaining code written by someone else through the use of the tools, where it could have been good enough for them because they don't have to deal with downstream effects. At least that's been my negative experience with AI coding assistance. You could say "just get a new job" but unfortunately that's hard.
by digianarchist | 2025-11-01 18:42:54+00:00
I have a particular disdain for the profanity-laden slop that is works penned by Mark Manson. He's not alone as most "self-help" books are trash reads that only serve as some form of cathartic release to their readers.

That's not to say all books in the genre are useless. I have recommended Cal Newport's works before but they very much suffer from "this 300 page book could have been a blog post" levels of verbosity.
by ashton314 | 2025-11-01 18:43:00+00:00
I maintain a pretty popular Emacs starter-kit called Bedrock. [1] I suggest starting with it, or at least taking a look at it to get some ideas!

Bedrock differs philosophically from Doom et al. in that Bedrock is meant to be as simple as possible. There's no magic, no extra package management system (looking at you Doom) to break or confuse. By default, it doesn't install any 3rd-party packages—it just sets better defaults. Recent versions of Emacs can do a lot, but the defaults are painfully outdated. Bedrock fixes that. It's basically a vanilla Emacs experience without some of the cruft carried over from the previous century.

Bedrock also comes with a curated set of packages to enhance Emacs beyond better defaults. You can load these into your config as you begin to need them. List here: [2] If you are looking for a set of "modern" packages, this is it. I do pretty well keeping up in this space, and a lot of these (esp. Vertico, Consult, Corfu, etc.) seem to be accepted as the de-facto best replacements for older packages like Helm, Ivy, etc. (That said, I should add some config for Casual—very neat package to help with seldom-used features of Emacs.)

Bedrock is meant to be understandable: clone it once, and then tweak from there. You'll find a lot of forks of Bedrock on GitHub as people have forked it and then built their own config on top.

I'm working on updating Bedrock for Emacs 31. There won't really be that many changes, so like, don't wait for 31 to start your Emacs journey, but know that Bedrock is actively maintained and that the packages I've curated for it are the best I could possibly find. :)

Oh, also, if you search "best Emacs packages", my blog post [3] will come up on the first page on basically every search engine I've tried. ;)

Happy hacking!

[1]: https://codeberg.org/ashton314/emacs-bedrock

[2]: https://codeberg.org/ashton314/emacs-bedrock#extras

[3]: https://lambdaland.org/posts/2024-05-30_top_emacs_packages/
by quitit | 2025-11-01 18:43:01+00:00
Normal content is 1000 nits, peak is 1600 nits.

Contrast is significantly poorer on the Air display, and HDR is already in your own photos if you have a modern smartphone, so the idea that it’s niche or irrelevant is a naive take.

The perceptual difference between sdr and hdr isn’t a minor bump, it is conspicuous and driver of realism.

If one cares about the refresh rate of their screen, then they’d trivially notice the improvement that high nit displays provide.
by tmtvl | 2025-11-01 18:43:23+00:00
Start by just opening it up and clicking on 'tutorial'. After that check out Options->Manage Emacs Packages and see if anything interests you. After that check out Melpa (<https://melpa.org>). Finally you can check out what other people do, for example Prot (<https://protesilaos.com/emacs/dotemacs>), you can look at Doom's source,...

You're basically about to go on a journey to a country you've never been, so my recommendation is to just read up about it and see if you find some things you want to experience.
by 1vuio0pswjnm7 | 2025-11-01 18:43:30+00:00
Perhaps there is an argument to be made that this is a reason "computer security" should not be delegated to a third party, such as an advertising services company like the ones in Silicon Valley, Redmond or Seattle

The reasoning is that the company, being concerned with online advertising and reach,^1 has the incentive to ensure that the software becomes popular with the largest possible number of users, perhaps even achieving monopoly power. According to traditional HN commentary, this makes the company and its software a preferred target for exploits by virtue of its popularity

1. Online surveillance practices to potentially support targeted advertising services, where the companies wantonly collect enormous quantities of data about millions of people, also makes them a target for exploits, e.g., "data breaches"

Consider an alternative status quo where computer owners, i.e., software users, have many options to choose from, including many operating systems, browsers, "app stores", "platforms", and so on

None of the options may be necessarily better choices for "security" for technical reasons^2 but the fact that those who target software from a small number of advertising services juggernauts with millions of users ("lucrative targets") are denied access to such lucrative targets, because the lucrative targets do not exist, is an improvement to "security" overall

2. But some may compete and attempt to distinguish themselves on this basis

In this alternative status quo there would likely be requirements that software be compliant with open standards and interoperable, allowing computer users to write, edit, compile, install and choose whatever software they desire, from any source, including their own brain, i.e., they might choose to write, compile and install their own software on their own computers