MurphyA/hacker-news huggingface dataset:
by eru | 2025-11-24 12:05:01+00:00
I don't know, all the places I lived in (https://news.ycombinator.com/item?id=46029488) manage just fine. Must be some crazy black magic rocket science they are doing over in Germany or Britain or Turkey or Singapore or Australia to keep non-payers off their public transport.

And in many places I haven't lived but only visited, too.
by matheusmoreira | 2025-11-24 12:05:20+00:00
It's not just npm, you should also not trust pypi, rubygems, cargo and all the other programming language package managers.

They are built for programmers, not users. They are designed to allow any random untrusted person to push packages with no oversight whatsoever. You just make an account and push stuff. I have no doubt you can even buy accounts if you're malicious enough.

Users are much better served by the Linux distribution model which has proper maintainers. They take responsibility for the packages they maintain. They go so far as to meet each other in person so they can establish decentralized root of trust via PGP.

Working with the distributions is hard though. Forming relationships with people. Participating in a community. Establishing trust. Working together. Following packaging rules. Integrating with a greater dynamic ecosystem instead of shipping everything as a bloated container whose only purpose is to statically link dynamic libraries. Developers don't want to do any of that.

Too bad. They should have to. Because the npm clusterfuck is what you get when you start using software shipped by totally untrusted randoms nobody cares to know about much less verify.

Using npm is equivalent to installing stuff from the Arch User Repository while deliberately ignoring all the warnings. Malware's been found there as well, to the surprise of absolutely no one.
by anarki8 | 2025-11-24 12:06:02+00:00
> Its compilation is slow. I mean SLOW. Slower than C++. I know over years Rust became several times faster, but objectively we need it to be two orders of magnitude faster, not just two times.

I am more concerned about correctness and "zero-cost abstraction" of the end result, if sacrificing few seconds of compilation time is necessary for that - fine by me.

> It’s complex. Just as complex as C++. But C++ had legacy and Rust had not. The complexity of forcing your way through the jungle of Arc<Mutex<Box<T>>> on every single step directly impacts the quality of the logic being implemented i.e. you can’t see the forest for the trees. Once again, C++ has the same problem, so what’s the point of the language switch in the end?

So, you seem to prefer data races and dangling pointers, or? Have you tried "actors-like" channels+rayon approach if you hate mutex so much?

> Memory safety is not that sacred. In fact, for many applications malfunctioning is better than crashing — particulary in the embedded world where Rust wants to be present. You cannot get 99.999% reliability with Rust — it crashes all the time.

You again prefer UB and/or corrupted state (and call that "reliability") over required explicit checks of Result via matching. This is definition of bad code to me.

> When handling lots of mutable shared state (GUI, DB, stateful services, OS/hardware), the performance of native Rust memory model is subpar

Few boundary checks sometimes add negligible overhead, but again you need those in any language to enforce correctness, Rust just adds those automatically.
by StopDisinfo910 | 2025-11-24 12:07:05+00:00
> Maybe they resisted because it was completely ridiculous waste of engineering resources all over the country and for absolutely no tangible reason other than white people trying to feel better about themselves.

I think the resisting probably wasted more time than anything else.

We used the occasion to ensure that there was no hardcoded naming in our IaC, internal tooling and CI/CD. It was surprinsingly easy, gave us a great excuse to do some much needed clean up and now everything can work with any branch used as the main one.

Was it extremely important? Probably not. Was it worth fighting against/having a stong opinion about? Probably not either.

Sometimes, it's easier to just go with the flow and try to turn things which seem meaningless into actual improvements. If it makes the people who think it's not meaningless feel better, well, even better. It surely didn't cost me much.
by lll-o-lll | 2025-11-24 12:07:39+00:00
Yep. Non-determinism. Back in the day it was memory corruption caused by some race condition. By the time things have gone pop, you’re too far from the proximate cause to have useful logs or dumps.

“Happens only once every 100k runs? Won’t fix”. That works until it doesn’t, then they come looking for the poor bastard that never fixes a bug in 2 days.
by constantcrying | 2025-11-24 12:07:58+00:00
What you are saying is just not true. Frances car industry is dying. Renault is a small company, not even in the top 10 and Stellantis is doing extremely poorly, also affecting Italy's car industry. Within a decade or so COMAC will have a competitive passenger plane, seriously threatening Airbus market share.

Germany's entire industry is currently dying since it is impossible to have a cost competitive manufacturing industry while having some of the highest energy prices in the world.

Your entire comment looks at the current status quo, not at the continuous downward trend or the abyss which awaits if Stellantis or VW Group get pushed out of the market by Chinese competition.

Do you think Germany or France will continue to have a car industry, when China makes cars or the same quality for 70% of the price? Because that is currently the reality.
by jordanpg | 2025-11-24 12:08:00+00:00
Organizations above a certain size absolutely cannot help themselves but publish this stuff. It is the work of senior middle managers. Ark Fleet Ship B.

I work in a corporate setting that has been working on a "strategy rebrand" for over a year now and despite numerous meeting, endless powerpoint, and god knows how much money to consultants, I still have no idea what any of this has to do with my work.
by bazoom42 | 2025-11-24 12:08:06+00:00
> I would first ask what happened such that Denmark owns Greenland in the first place

I think there is some misunderstanding of the issue here. While Greenland isn’t fully independent, many domains, including social services and child protective services in Greenland are managed by Greenland itself, not by Denmark.

But the controversial tests described in the article did not happen in Greenland - They happened in Denmark, but they were considered unfairly biased aginst Greenlandic parents living in Denmark.
by cheschire | 2025-11-24 12:08:30+00:00
Losing audio in front of a certain house may be related to devices I’ve noticed my own neighbors beginning to use, which are those high pitched audio emitters that ward off voles etc. We don’t have that issue in our neighborhood and especially in front yards so I suspect it’s to keep dogs from pausing in their yard.

In any case it’s a periodic high pitched burst. I wonder if that was what caused your issue with the phonaks. Seems like it would be a rather common issue in suburbs that should be considered in hearing aid design.
by eamonnsullivan | 2025-11-24 12:09:00+00:00
This is an important point that I missed and didn't mention: My work and school life were really hard and chaotic. This is so intrinsically part of me that I didn't even notice, but has generated a lot of stress on me and my family. I guess getting treatment would have saved me a lot of that. I wonder if it is worth it, as a 62-year-old and probably within 5/6-ish years of retirement?
by BlackFly | 2025-11-24 12:09:23+00:00
I think this really depends on your industry.

If you cannot give a patient life saving dialysis because you don't have a backup generator then you are likely facing some liability. If you cannot give a patient life saving dialysis because your scheduling software is down because of a major outage at a third party and you have no local redundancy then you are in a similar situation. Obviously this depends on your jurisdiction and probably we are in different ones, but I feel confident that you want to live in a district where a hospital is reasonably responsible for such foreseeable disasters.
by throwawayffffas | 2025-11-24 12:09:26+00:00
> Upon execution, the malware downloads and runs TruffleHog to scan the local machine, stealing sensitive information such as NPM Tokens, AWS/GCP/Azure credentials, and environment variables.

That's a wake up call to harden your operations. NPM Tokens, AWS/GCP/Azure credentials have no reason to be available in environments where packages may be installed. The same goes for sensitive environment variables.
by Dr4kn | 2025-11-24 12:09:58+00:00
People that walk or bike are also more likely to do small shopping locally. This benefits the local economy and gets less money to international big box retailers, which generally pay less taxes.

If you drive by a small market you often won't park your car to go there. Cars and trucks destroy streets fast. Having less of them keeps repairs less frequent. Infrastructure for walking and biking can exist for multiple decades or even millennia
by p2detar | 2025-11-24 12:10:07+00:00
> Meanwhile the EU

What do you think the EU is? It's not a country, not a federative union. These things need a lot of discussions and synchronization among member countries, it does not work otherwise, so it takes time. I also hold the opinion that time is a resource the EU does not have, so it badly needs to reform itself - its framework no longer works for this "new age".
by andreidbr | 2025-11-24 12:11:45+00:00
I see this sort of thing, plus additional broad-spectrum check-ups recommended in a lot of podcasts, particularly those geared towards being more efficient/productive.

On the one hand, good for those that can afford it, but I do hope they're not uselessly occupying the machine & labs, thereby making it hard to people who need them for relevant medical reasons.
by kalaksi | 2025-11-24 12:12:38+00:00
Thanks for the context. I don't really know the Taiwan situation well.

My main gripe was mostly around the perceived reasoning that ethnicity or culture of some people would make it more okay to try to annex, or invade, anything.

> When it comes to Japan in particular, the deepest desire in many Chinese hearts is for Japan to start a war first—so China can finally settle the historical score once and for all. But even in that scenario, turning Japan into “part of China” is not on the table.

From GP. That is also a bit worrying to me. Who decides what's the fair "historical score"? But mostly, people shouldn't desire for war or use past wars as a reason for new wars. This is more complicated than ethnicity or culture, but it's dangerous and people should just learn to let go or it never stops.

False flag attacks are a thing and have been used many times as a pretext for an attack. Russia has done it. Russia also often uses history as an excuse for new wars. I'm sure it's always possible to dig out some rationalization. The result is mostly more suffering of innocent (who might not have even been born during the cited conflict).
by brigandish | 2025-11-24 12:13:10+00:00
An approach I learnt from a talk posted to HN (I forget the talk, not the lesson) is to not depend on the outside project for its code, just lift that code directly in to your project, but to rely on it for the tests, requiring/importing it etc when running your own tests. That protects you from a lot of things (this kind of attack was not mentioned, afaic recall) but doesn’t allow bugs found by the other project to be missed either.
by ivell | 2025-11-24 12:13:39+00:00
> This does not mean that China is going to go to war over them, certainly it won't go to war with India.

Then why make a claim? Claims are made to prepare the domestic audience so that when war comes there is home support for the action. It is not made lightly.

The Chinese are definitely taking action in the South China Sea. It is not just words.
Show HN: WireMD – Design Wireframes in Markdown
by akonan | 2025-11-24 12:13:56+00:00
Hi HN! I built WireMD, a text-first wireframing tool that lets you design UIs as fast as you can type.

The core idea: wireframes should be version-controlled, reviewable in PRs, and editable without leaving your code editor/markdown editor.

Outputs in multiple formats including for example html (different styles), tailwind and json

Curious what HN thinks about the syntax design and whether this fills a gap in your workflow!
by lanthissa | 2025-11-24 12:15:30+00:00
sounds smart, but this a false premise because its not zero sum and theres this magical thing called taxes that allow you to reap the benefits of a more productive system.

If you have free public transit and that enables more economic activity or more disposable income to be funneled into services that boost the tax rake of the city the gains can offset the cost. This is an equation none of us have the info to do as randos online and its pointless to claim otherwise.

and even if your point was true free buses are a partial subsidy to low income people like you suggest in nyc its busses are a predominantly taken by low income individuals (source https://blog.tstc.org/2014/04/11/nyc-bus-riders-tend-to-be-o... subway nearly everyone, and ride share has their own tax as well.
by gsf_emergency_6 | 2025-11-24 12:16:18+00:00
He takes reals to be "stretch" and imaginaries to be "rotate". As in, real space, not an abstraction like "complex plane".

Then the imaginary unit becomes, not just rotation by pi/2 but a "basis vector" for rotation.

Putting on my physicst/engineer hat. this identifies rotations with the axis of rotation, which points outside the plane. (Disclaimer: this is not exactly how the author thinks about it.)

(In contrast. The basis vector of "stretches", btw which include 180-degree rotations, stay in the plane:)

The math is not novel but the perspective is.

Now this can be generalized to 3D rotations, whence you think of (the unit) quaternions as 3 independent axes of rotations.

(Euler angle and Euler formula become muddled :)

There's also the "rotational derivative" (angular velocity) bit which is THE THING worth mulling over. I think is the really novel bit (again. perspective, not math-- but I have not worked out his [degree] arithmetic )

(He calls it the fundamental equation in the video)

The physicist gets reminded of Legendre transforms (think <p,q> (- H)), where p here means angular momentum :)

It will be most cool if he can use this style to explain the "Feynman belt trick" without symbols or animation :)

https://en.wikipedia.org/wiki/Tangloids

https://en.wikipedia.org/wiki/Plate_trick#The_belt_trick
by oddish-tv | 2025-11-24 12:16:59+00:00
I’m the author. I wrote this piece because a lot of discussions around LLM-based systems focus on prompts or model benchmarks, while the real complexity starts at the system level: how components interact, how failures propagate, how to evaluate behavior over time, and how to keep nondeterministic elements inside a predictable architecture.

The article tries to map this landscape and highlight patterns that seem essential when building anything more serious than a single-model call: • where unpredictability actually comes from • how architecture shapes reliability • why evaluation is harder than it looks • and what guardrails or control layers help keep the system stable

If anyone is working on similar problems or wants to challenge any of the points — happy to discuss, compare approaches, or clarify specific sections.
by embedding-shape | 2025-11-24 12:19:40+00:00
> If we're talking about Node.js, there's a long list of dependencies by default.

But that's not true? I initialize a project locally, there is zero dependencies by default, and like I did five years ago, I can still build backend/frontend projects with minimal set of dependencies.

What changed is what people are willing/OK with doing. Yes, it'll require more effort, obviously, but if you want things to be built properly, it usually takes more effort.
by amiga386 | 2025-11-24 12:19:58+00:00
An example: Java Maven artifacts typically name the exact version of their dependencies. They rarely write "1.2.3 or any newer version in the 1.2.x series", as is the de-facto standard in NPM dependencies. Therefore, it's up to each dependency-user to validate newer versions of dependencies before publishing a new version of their own package. Lots of manual attention needed, so a slower pace of releases. This is a good thing!

Another example: all Debian packages are published to unstable, but cannot enter testing for at least 2-10 days, and also have to meet a slew of conditions, including that they can be and are built for all supported architectures, and that they don't cause themselves or anything else to become uninstallable. This allows for the most egregious bugs to be spotted before anyone not directly developing Debian starts using it.
by prmph | 2025-11-24 12:20:53+00:00
> People use Node because of the availability of the packages, not the other way around.

That is not why I use Node. Incidentally, I also use Bun.js, and pnpm for most package management operations. I also use Typescript instead of raw JS.

I use Node and these related tools fundamentally because:

- I like the isomorphism of the code I write (same language for server and client)

- JS may have many warts, but IMO it has many advantages many other languages lack, it is rapidly improving, and TS makes it even more powerful and the bad part parts manageable. One ting that has stuck with me over the many years of using JS/TS is just how direct and free-of-ceremony everything is. Want a functional style? It supports it to some extent without much fuss. Want something akin to OOP? You can object literal with method-style function, "constructors" that are regular functions, even no-fuss prototypical inheritance, if you want to go that far. Also, no need for any complicated dependency injection (DI), you can just implement pure DI with regular functions, etc. I don't get why you hate JS/TS so much.

- I use Bun.js as an alternative to Node that has more batteries included, so that I can limit my exposure to too many external packages. I add packages only if I absolutely need them, and I audit them thoroughly. So, no, although I may use some packages, I am not on the Node ecosystem just because I want to go on a package consumption spree.

- I use pnpm for installing and managing package, and it by default prevents packages from taking any actions during installation; I just get their code.
by LoganDark | 2025-11-24 12:21:06+00:00
> Checkout how hard customers punish blackouts from the grid - both via wallet, but also via voting/gov't.

What? Since when has anyone ever been free to just up and stop paying for power from the grid? Are you going to pay $10,000 - $100,000 to have another power company install lines? Do you even have another power company in the area? State? Country? Do you even have permission for that to happen near your building? Any building?

The same is true for internet service, although personally I'd gladly pay $10,000 - $100,000 to have literally anything else at my location, but there are no proper other wired providers and I'll die before I ever install any sort of cellular router. Also this is a rented apartment so I'm fucked even if there were competition, although I plan to buy a house in a year or two.
by ret2plt | 2025-11-24 12:21:28+00:00
You couldn't own slaves in London in 1845, and in any case the name derives from the "Master of the household", so if you want to be mad about it, you should call it sexist, not racist. Or you could just be chill, stretch the meaning a bit and say the couple together are the masters of the household. But, now I'm curious: Where do you draw the line? You don't like git master branches and master bedrooms, but what about other uses? You can have a master key, master record, master a skill, create a masterwork, be a master to an apprentice, join the toastmasters, be a master of ceremonies at a formal event, you can dress up for comic con as Master Yoda, Master Chief, or Dumbledore (the Headmaster of Hogwarts), you can be a Master Chief in the US Navy, be the dungeon master for a game of D&D, get a Masters' Degree and so on. Which of these things are in your opinion bad and should be renamed?
by cnnlives8472 | 2025-11-24 12:21:31+00:00
> You have to wait half a lifetime?!

I know you meant average age, but no one knows how long they’ll live. Even those given a death sentence by a doctors can survive or die at any time, just like the rest of us.

With regard to the article and as a former artist, the RIAA was scary to me, once I learned about it. It makes sense why even though most bands play covers, almost no one records their covers, and the thought of getting a lot of plays is a little scary.

(Note: Statistically, people don’t live forever.)
by zephyrrd | 2025-11-24 12:21:54+00:00
Hi guys! I just released a beta version of Pixeli, a lightweight open-source CLI for merging images into clean, customizable layouts. It’s perfect for creating image grids, Pinterest-style masonry collages, or contact sheets, all tailored for your specific project use case. For more details, check out the complete documentation.

Some basic features include:

- Merge images into grids or masonry layouts - Set per-image aspect ratios, gaps, background color, and captions - Shuffle images for random layouts - Supports JPG, PNG, WebP, SVG, and AVIF - Works with npx, no installation required

This project was created with love and submitted to Hackclub Midnight at https://midnight.hackclub.com

Let me know what you guys think or if you spot any problems :) always do appreciate some constructive criticism
by Meekro | 2025-11-24 12:22:53+00:00
Worth noting that these foreign accounts are pretty small. The biggest foreign pro-MAGA account mentioned in the article is "MAGA NATION" with ~400k subs, with the others being in the 10k-100k subs range.

Contrast that with legit pro-rightwing accounts: @tuckercarlson (17M), @benshapiro (8M), @RealCandaceO (7.5M), @jordanbpeterson (6M), @catturd2 (4M), @libsoftiktok (4.5M), @seanhannity (7M).
by markdog12 | 2025-11-24 12:23:03+00:00
"Yes, re-opening.".

> Given these positive signals, we would welcome contributions to integrate a performant and memory-safe JPEG XL decoder in Chromium. In order to enable it by default in Chromium we would need a commitment to long-term maintenance. With those and our usual launch criteria met, we would ship it in Chrome.

https://groups.google.com/a/chromium.org/g/blink-dev/c/WjCKc...
by danaris | 2025-11-24 12:23:14+00:00
Just to emphasize what the sibling comment said:

You call the described actions "illegal", but under the law of the land as it stands today, nothing the President does is illegal if he can make even a vague claim to be doing it as an official act of the Office of President.

To be clear, this is wrong, terrifying, and needs to be overturned, but it is the law of the land, since the SCOTUS decision that made it so.

Assuming we can get to a place where Democrats hold power in our government once again, until we can get the absolute mess that the Republicans have made cleaned up in its entirety, it would be not merely irresponsible, but catastrophic for the Democrats to fail to use every tool at their disposal, including things that are only legal because the Republicans thought they would never have to give up power, in order to achieve that end.

The alternative is to fall back into fascism, which should be seen as unacceptable by absolutely anyone with a conscience.
by roudaki | 2025-11-24 12:23:47+00:00
I noticed on our own agentic setups that there are very few actual scenarios being executed. I suggested implementing some type of monitoring so you can replace 99% of most used workflows with normal python and activate AI calls if something new happens. until that new thing repeats few times and you translate that to code to. that has to be carreer in itself. you can turn a lot of AI apps into profitable and fast internal apps