MurphyA/hacker-news huggingface dataset:
by lazide | 2025-11-24 17:48:10+00:00
I think that’s more a side effect of China being the worlds manufacturing hub - which has nothing to do with their import policies, and everything to do with their export/currency policies.

There isn’t much ‘made in the USA (actually)’ at this point.

Plenty of other places have similar import policies - and still import most things from China. Like India, and well, frankly most of the world at this point.
by venturecruelty | 2025-11-24 17:48:20+00:00
Oh, agreed 100%. I find it endlessly frustrating that these same conversations happen every single time there's a supply chain attack like this, because nobody wants an _actual_ solution, they want an _easy_ solution that doesn't involve changing anything about how they work. So we just get 500 comments asking if we can solve the Halting Problem, and then everyone forgets until the next breach. It was ever thus.
by graemep | 2025-11-24 17:48:31+00:00
Multiple causes

Cost of living, accommodation in big cities in particular. ZIRP had a lot to do with this - rents rose in line with values.

Working hours and conditions that are not family friendly.

Pressure on couples with kids to both work full time, which then means a lot of money goes on childcare so they are not that much better off (but landlords and banks are happier with the lower earnings multiple anyway) - but it boosts GDP and profits so that is fine.

A benefits system that reduces payments too rapidly when people earn. It means people keep very little of what they earn. Personally I think there is a good case for UBI as the solution.

> Around 70% of children living in poverty have at least one parent in work.

That should not be happening given there is a reasonable minimum wage.

Its not a UK only problem. The article says.

> De Schutter noted that the country conformed to a pattern of increasing inequality seen in other wealthy countries.

I think a lot of it results from a shift in attitude. The people in power increasingly think poor deserve to be poor, and that they are all "gammon" (to use the British term) and untrustworthy anyway.
by ricksunny | 2025-11-24 17:48:37+00:00
More graphic content needed to get folks to click through: This is excerpted from the result of G-translating the Parisien link:

"This 27-year-old alleged trafficker is suspected of having run this drug telephone platform which, between 2023 and 2024 in Paris, collected a turnover of two million euros and is said to have caused three overdose deaths during chemsex parties."
by dghlsakjg | 2025-11-24 17:48:38+00:00
Use your own words, and understand what other phrases mean if you are using phrasing that you picked up somewhere else. Its totally fine if you don't pick up on someone else using controversial 'dog-whistle' phrasing, that's kinda the point of a dog whistle. Don't hide your meaning in implications.

If you think that high levels of Indian immigration are causing a conflict between dominant Canadian culture that relies on "high-trust" transactions because the immigrants come from a "low-trust" group that take advantage of it, then say that (or whatever it is that you actually believe). Phrasing it like OP has, leaves room for multiple interpretations. It is possible that they think this is a transition from high to low trust that Canada is making entirely independently of immigration policy. Because they chose to use ambiguous phrasing preferred by a specific polity, we are forced to interpret for ourselves.

In short: say what you mean clearly in plain language. "[this] cancellation policy only really works in a high-trust society, which at least one prominent nation seems to be backsliding on" is not clear or using plain language.
by zahlman | 2025-11-24 17:48:53+00:00
> This is not meant to be an exhaustive list, though if I’ve overlooked someone significant (perhaps actually in Nebraska?) then don’t take that as me disregarding their contributions. There are many more, but the very nature of who they are prevents listing them all. I might update this list for a while, so do get in touch.

While there are now hundreds of contributors, Behdad Esfahbod (https://github.com/behdad) is responsible for over 2/3 of commits to https://github.com/harfbuzz/harfbuzz , which is kind of a big deal (a text shaping engine used all over the place, basically anywhere that requires being precise about the layout and rendering of Unicode text). The project also cites the comic in its README, and is where my mind naturally went first.
by tetha | 2025-11-24 17:49:26+00:00
> And of course make a very limited scope publisher key, bind it to specific packages (e.g. workflow A can only publish pkg A), and IP bound it to your self hosted CI/CD runners. No one should have publish keys on their local, and even if they got the publish keys, they couldn't publish from local.

I've by now grown to like Hashicorp Vaults/OpenBao's dynamic secret management for this. It's a bit complicated to understand and get to work at first, but it's powerful:

You mirror/model the lifetime of a secret user as a lease. For example, a nomad allocation/kubernetes pod gets a lease when it is started and the lease gets revoked immediately after it is stopped. We're kinda discussing if we could have this in CI as well - create a lease for a build, destroy the lease once the build is over. This also supports ttl, ttl-refreshes and enforced max-ttls for leases.

With that in place, you can tie dynamically issued secrets to this lease and the secrets are revoked as soon as the lease is terminated or expires. This has confused developers with questionable practices a lot. You can print database credentials in your production job, run that into a local database client, but as soon as you deploy a new version, those secrets are deleted. It also gives you automated, forced database credential rotation for free through the max_ttl, including a full audit log of all credential accesses and refreshes.

I know that would be a lot of infrastructure for a FOSS project by Bob from Novi Zagreb. But with some plugin-work, for a company, it should be possible to hide long-term access credentials in Vault and supply CI builds with dropped, enforced, short-lived tokens only.

As much as I hate running after these attacks, they are spurring interesting security discussions at work, which can create actual security -- not just checkbox-theatre.
by alephnerd | 2025-11-24 17:49:51+00:00
> Not really. If you're an engineer in Asia you're in the top 5% - 10% of local purchasing power

Nope. You legitimately are not. The top 5-10% of salaries in both SK/JP/TW and Western Europe are primarily the managerial class.

And CoL is the same in SK and Japan with much of Western Europe.

> you're just average like most other white collar workers, unless you work for a US FANG.

Same in South Korea, Japan, and Taiwan. There's a reason immigration to Western Europe still remains somewhat attractive to Korean, Japanese, and Taiwanese nationals to this day - similar salaries, but a better work culture and a stronger social safety net than in much of Asia.

> This is what you get when for the past 20+ years you outsourced your entire industry to Asia for the sake of shareholder returns with no thought of the future

Europe hasn't been at the forefront of this industry since the 2000s.

Yes Infineon, ASML, IMEC, and STMicro are supposedly European domiciled, but they were heavily dependent on defense R&D due to semiconductor's dual use implications and all of them largely subsumed American subsidiaries whose leadership became their leadership. As such, these companies haven't been "European" for decades.
by fngjdflmdflg | 2025-11-24 17:49:59+00:00
More like a new plant in Iceland, after the PM of Iceland said any attack on Greenland would be a survival-threatening situation for Iceland.

To be clear I think the comments about "geopolitical stability" or whatever term we use are not as interesting as new chip plants itself. Or at least they are a bit tired by now. I also wish Japan the best and I think they are fully capable of building such a factory and I hope they do so. But to claim that the geopolitical considerations are invented is wrong. And in fact one of the reasons the Japanese government is investing in local fabs to begin with is due to national security, as mentioned in the article:

>Securing control over chip manufacturing is being seen as a national security priority, both in Japan and elsewhere, as recent trade frictions and geopolitical tensions between China and Taiwan raise concerns around the risks of relying on foreign suppliers.

So yes, viewing the entire story through a geopolitical lens is understandable.
by zackmorris | 2025-11-24 17:50:02+00:00
Here's another one: Manna - Two Views of Humanity’s Future, by Marshall Brain. It's a fairly light read, just 8 chapters:

https://marshallbrain.com/manna1

I think I've internalized these stories enough to comfortably say (without giving anything away) that AI is incompatible with capitalism and probably money itself. That's why I consider it to be the last problem in computer science, because once we've solved problem solving, then the (artificial) scarcity of modern capitalism and the social darwinism it relies upon can simply be opted out of. Unless we collectively decide to subjugate ourselves under a Star Wars empire or Star Trek Borg dystopia.

The catch being that I have yet to see a billionaire speak out against the dangers of performative economics once machines surpass human productivity or take any meaningful action to implement UBI before it's too late. So on the current timeline, subjugation under an Iron Heel in the style of Jack London feels inevitable.
by rootnod3 | 2025-11-24 17:50:03+00:00
I mean, I definitely love that OpenBSD is the "reference" implementation of PF, but the network performance definitely lacks a bit and UFS is quite outdated and prone to errors on outages. ZFS has the upper hand there and FreeBSD's network performance.

And adjusting from the reference PF to the minor differences on FreeBSD's version is not too bad.

I agree, FreeBSD + PF is a damn good combo.
by drekk | 2025-11-24 17:50:18+00:00
I volunteer my time with Food Not Bombs. 20% of American children do not know where their next meal is coming from. Many are simultaneously overweight and malnourished, because the foodstuffs the US government subsidizes are calorically dense but nutritionally destitute.

Food banks, subsidized school meals, and SNAP/EBT prevent what would otherwise be children starving to death. As it stands though, the relief is insufficient. Many children from food insecure households have stunted growth and lifelong learning impairments from insufficient protein, calcium, etc.

Source: https://www.ers.usda.gov/topics/food-nutrition-assistance/fo...
by naasking | 2025-11-24 17:51:01+00:00
I will be posting a minimal example on the forums about this soon once I actually finish the project. Here [1] is the last issue that I had. The issue of getting the needed cutout on that forum post was one problem, but the much deeper issue was how a later operation broke the model in an unrecoverable way once it was removed. To me, that speaks to something deeply broken in FreeCAD's core use of Open Cascade, and I've noticed minor variations on this theme, like when undo operations sometimes don't really undo things and leave sketches broken. less common these days, but it's weird that it was ever a thing.

> Is DynamicData still properly supported in 1.x? Looks like it might be. Never really used it; I use a minimal mix of Spreadsheet (mostly for Configuration Tables) and VarSets.

I used to use Spreadsheets but they just didn't scale, ie. every little addition and modification to the spreadsheet caused very slow global recalculations. DynamicData is a little better on this for some reason, but not much. I like the expression engine they use, but it's not good at only re-evaluating the dependencies that have changed. They should really be using FRP-like signals.

Anyway, I don't want to come across as too negative as FreeCAD is pretty good overall, but these tiny nuisances will continue to hold it back until they're sorted. It is looking better though.

[1] https://forum.freecad.org/viewtopic.php?p=848289#p848289
by kouteiheika | 2025-11-24 17:51:17+00:00
> Poisoning: Panic Safety in Mutexes

This is one of the biggest design flaws in Rust's std, in my opinion.

Poisoning mutexes can have its use, but it's very rare in practice. Usually it's a huge misfeature that only introduces problems. More often than not panicking in a critical section is fine[1], but on the other hand poisoning a Mutex is a very convenient avenue for a denial-of-service attack, since a poisoned Mutex will just completely brick a given critical section.

I'm not saying such a project doesn't exist, but I don't think I've ever seen a project which does anything sensible with Mutex's `Poisoned` error besides ignoring it. It's always either an `unwrap` (and we know how well that can go [2]), or do the sensible thing and do this ridiculous song-and-dance:

let guard = match mutex { Ok(guard) => guard, Err(poisoned) => poisoned.into_inner() };

Suffice to say, it's a pain.

So in a lot of projects when I need a mutex I just add `parking_lot`, because its performance is stellar, and it doesn't have the poisoning insanity to deal with.

[1] -- obviously it depends on a case-by-case basis, but if you're using such a low level primitive you should know what you're doing

[2] -- https://blog.cloudflare.com/18-november-2025-outage/#memory-...
by unethical_ban | 2025-11-24 17:51:20+00:00
Green account with a low-effort sarcastic comment. Worthy not only of downvotes, but public derision.

Do you have any desire, or idea, on how to curb cyber-agitprop from enemy nations? Is living in a world with rampant, effective, agitprop on the internet with zero reaction the least of all evils?
by ai_critic | 2025-11-24 17:51:27+00:00
No problem!

The big thing--usually missed by most folks, especially engineers whose intuitions and experience are correct but in the wrong domain--is that you don't balance a country's budget like you do a household's. The scale is different, the incentives are different, the problems and tools are different.

Of course, to confound things, it's entirely possible that we should treat a country's balancebook like a household's, and it's just the dumb luck of near 3/4 of a century that we've gotten away with assumptions like mine. :)
Show HN: I built an app - Success Motivation for Builders
by hackingmonkey | 2025-11-24 17:51:33+00:00
A few years ago my mum wrote a book on success quotes (she also has another version with short stories about how famous/notable figures achieved success) think Einstein, Picasso, etc. She's not great at marketing or promo so I decided to turn the content into an app. Besides helping her, I felt an app would be a better way for people to absorb this kind of material today and a way to scale wisdom using technology.

What makes this app different from others is our context feature, which provides personal and historical context behind the author's quote, explaining the meaning and wisdom behind it; turning it into more than just a motivational app. (This feature is paid btw, but I'm happy to share promo codes for anyone interested in trying it out.)

We released just a couple days ago; posting here because I figured HN might have people genuinely interested in this kind of content. Hope you find it useful! :)
by whimsicalism | 2025-11-24 17:51:44+00:00
From your article:

> Hospitals are incentivized to diagnose malnutrition by the Inpatient Prospective Payment System, which uses Medicare Severity Diagnosis‐Related Groups to identify a “payment weight.” When severe malnutrition is included on a patient's diagnosis list, a major complication or comorbidity (MCC) classifier is almost always added to the hospitalization claim. 5 Adding an MCC classifier increases reimbursement

If you look at the table, there is almost no relationship between income and likelihood of being marked as a malnutrition case by the hospital receiving reimbursement. (top 25% of income = 20% of cases, bottom 25% of income = 30% of cases).

The median age of these people with severe malnutrition is 70 years old. This is completely consistent with the claim I made around dementia, especially when you consider these people are repeatedly hospitalized oftentimes.
by GeekyBear | 2025-11-24 17:51:45+00:00
> Apple can and does comply with subpoenas for user information that it has access to.

When we are talking about data stored on a company server, you have no choice when you are served a valid warrant.

That's why Apple went all in on the concept of keeping sensitive data off their servers as much as possible.

For instance, Apple Maps never stored the driving routes you take on Apple's servers, but does remember them on your device.
by pixl97 | 2025-11-24 17:52:06+00:00
I was about to say, tricks like this work for a bit, and then are useless pretty quickly. Generally they make a lot more problems for the humans attempting to access the system at the end of the day.

Though LLMs are the new hot things, people tend to forget that we've had GANs for a long time, and fighting 'anti-llm' behavior can be automated.
Show HN: I built an interactive HN Simulator
by johnsillings | 2025-11-24 17:52:43+00:00
Hey HN! Just for fun, I built an interactive Hacker News Simulator.

You can submit text posts and links, just like the real HN. But on HN Simulator, all of the comments are generated by LLMs + generate instantly.

The best way to use it (IMHO) is to submit a text post or a curl-able URL here: https://news.ysimulator.run/submit. You don't need an account to post.

When you do that, various prompts will be built from a library of commenter archetypes, moods, and shapes. The AI commenters will actually respond to your text post and/or submitted link.

I really wanted it to feel real, and I think the project mostly delivers on that. When I was developing it, I kept getting confused between which tab was the "real" HN and which was the simulator, and accidentally submitted some junk to HN. (Sorry dang and team – I did clean up after myself).

The app itself is built with Node + Express + Postgres, and all of the inference runs on Replicate.

Speaking of Replicate, they generously loaded me up with some free credits for the inference – so shoutout to the team there.

The most technically interesting part of the app is how the comments work. You can read more about it here, as well as explore all of the available archetypes, moods, and shapes that get combined into prompts: https://news.ysimulator.run/comments.html

I hope you all have as much fun playing with it as I did making it!
by SkiFire13 | 2025-11-24 17:53:01+00:00
Not having a convenient package manager doesn't mean you don't need the functionality that's otherwise offered by third-party packages, it just means that you either need other means to obtain those third-party packages (usually reducing the visibility this dependency!) or implement them yourself (sometimes this is good, but sometimes this can also be very bad for security. Your DYI code won't get as many eyes and audits as the popular third party package!).

Must read: https://wiki.alopex.li/LetsBeRealAboutDependencies
by estebank | 2025-11-24 17:53:18+00:00
I'm currently abroad with a notification for "November Pixel Drop update available" that appeared the day following my arrival. I believe I had already installed the November update back home earlier in the month. Every time I go back home, a couple of days later I get an update too.

I'm not claiming to know of any foul play, but it has happened several times, enough for me to notice. If it was related to time of the month, it wouldn't be as consistent. It might be that you need specific combination of phone, configuration and network provider for this to happen. Maybe I've been p0wnd, but I've noticed this behavior since at least the Nexus line.
by VAC-AGI | 2025-11-24 17:53:24+00:00
Hello everyone, thank you for the intense feedback over the last hour.

I see two main concerns emerging, and I want to be completely transparent:

1.so Files and IP Protection The core MCA algorithm is compiled to protect the IP while I seek $100k Pre-Seed funding. This is the "lottery ticket" I need to cash to scale. I did not retrain any model. The system's SOTA performance comes entirely from the proprietary MCA-first Gate logic. Reproducibility is guaranteed: you can run the exact binary that produced the 80.1% SOTA results and verify all logs.

2. Overfit vs. Architectural Logic All LLM and embedding components are off-the-shelf. The success is purely due to the VAC architecture. MCA is a general solution designed to combat semantic drift in multi-hop, conversational memory. If I was overfitting by tuning boundaries, I would have 95%+ accuracy, not 80.1%. The 16% failures are real limitations.

Call to Action: Next Benchmarks I need your recommendations: I am looking for the toughest long-term conversation benchmarks you know. What else should I test the VAC Memory system on to truly prove its generalizability?

GitHub: https://github.com/vac-architector/VAC-Memory-System

I appreciate the honesty of the HN community and your help in validating my work.
by embedding-shape | 2025-11-24 17:53:59+00:00
> and a company can’t magically turn all employees into perfect developers

Sure, agree, that's why professionals have processes and workflows, everyone working together to build the greatest stuff you can.

But when not a single person in the entire company reviews the code that gets deployed and run by users, you have to start asking what kind of culture the company has, it's borderline irresponsible I'd say.
by victorbjorklund | 2025-11-24 17:54:16+00:00
I love building different types of apps, But I don't usually build any of the low level building blocks like graphics, graphics, engines, or even web frameworks in themselves. and I guess for some people they would say that is not really your product if you're just building an app in React, but you're not the one building the framework. If you just wipe coding then yeah, sure, you are not building anything. but if you're just using AI to build out the boilerplate and then you're doing the rest of the work I would say you're building. You're not building all the details, but neither are you if you are using React or any kind of abstraction over, I guess, assembly.
by munificent | 2025-11-24 17:54:30+00:00
You're correct that you no longer need to go through one of the big five publishers to get your book in front of readers.

But Doctorow also says:

> or just one company that controls all the ebooks and audiobooks

And this is largely true. I don't think there's any viable path for self-publishing success right now that doesn't go through Amazon.
by jkrems | 2025-11-24 17:55:10+00:00
They didn't deploy the code. That's not how this exploit works. They _downloaded_ the code to their machine. And npm's behavior is to implicitly run arbitrary code as part of the download - including, in this case, a script to harvest credentials and propagate the worm. That part has everything to do with npm behavior and nothing to do with how much anybody reviewed 3P deps. For all we know they downloaded the new version of the affected package to review it!