MurphyA/hacker-news huggingface dataset:
by cogman10 | 2025-11-01 13:32:26+00:00
I don't think you can rule out international government pressures to keep these OSes vulnerable.

I agree that not caring happens a lot in the industry. Plenty of places where you'd think security was a high priority shockingly it isn't. Instead, C-levels will dedicate just enough resources to pass security audits clients demand and not a a penny more.
by asa400 | 2025-11-01 13:32:31+00:00
In SQLite, transactions by default start in “deferred” mode. This means they do not take a write lock until they attempt to perform a write.

You get SQLITE_BUSY when transaction #1 starts in read mode, transaction #2 starts in write mode, and then transaction #1 attempts to upgrade from read to write mode while transaction #2 still holds the write lock.

The fix is to set a busy_timeout and to begin any transaction that does a write (any write, even if it is not the first operation in the transaction) in “immediate” mode rather than “deferred” mode.

https://zeroclarkthirty.com/2024-10-19-sqlite-database-is-lo...
by Esophagus4 | 2025-11-01 13:32:56+00:00
You need a mix - a team of only stars will fail, and a team of only mediocre members will fail.

You want one or two stars, chemistry among the whole team, and good fundamentals.

Good sports examples: the LA Dodgers, 90s Chicago Bulls (a few stars, a few normal players, good fundamentals, and great chemistry)

Bad sports examples: the 2023 Mets with Verlander and Scherzer (both overpaid divas with bad attitudes that hated each other), the current Yankees (a few stars, no fundamentals or discipline)
by lazide | 2025-11-01 13:33:03+00:00
I still can’t figure out what you’re trying to actually say.

‘Move to Europe’ isn’t a political solution for the US.

And right now we have clear examples of a US federal gov’t trying to stomp on state and city level rights - which is why we are talking? And a historical civil war, where one group imposed rules on the other.

Which of course is going to happen if you have diverse economies and ideas of what is acceptable and try to weld them together under one government. Which is what you are proposing.

What do you think is going to happen if you try to get Egypt, China, Russia, France, Brazil, USA, India, etc. to actually have a common set of enforced rules?

And in both the Russian and Chinese ‘federal systems’ it’s absolutely expected they will.

The EU is the only one I can think of where there isn’t a common military - for example - and that one is far from proving the test of time.
by kibwen | 2025-11-01 13:34:01+00:00
If you want to find out the status of something, the best bet is to go to the Rust Zulip and ask around: https://rust-lang.zulipchat.com/ . Most Rust initiatives are pushed forward by volunteers who are happy to talk about what they're working on, but who only periodically write status reports on tracking issues (usually in response to someone asking them what the status is). Rust isn't a company where documentation is anyone's job, it's just a bunch of people working on stuff, for better or worse.
by jrs235 | 2025-11-01 13:34:04+00:00
From my understanding, the last budget bill passed (called the big beautiful bill by some) had changes to section 174. Specifically that software R&D could once again be immediately fully expensed in the year incurred rather than amortized over several years SO LONG AS its a US based expense. Non US based R&D expenses still need to be amortized, and over an ugly 15 year period.

What significant changes to section 174 were made in the big beautiful bill?

Key Changes The bill created a new Section 174A that restores immediate deductibility for domestic research and experimental (R&E) expenditures, largely reversing the Tax Cuts and Jobs Act requirement that had forced companies to capitalize and amortize all R&E expenses starting in 2022.

Domestic vs. Foreign Treatment:

Starting with tax years beginning after December 31, 2024, businesses may immediately deduct domestic R&E expenditures in the year they are paid or incurred

Foreign R&E expenditures must continue to be capitalized and amortized over 15 years under the original Section 174

Retroactive Relief Options:

The new rules permit taxpayers to deduct previously capitalized and unamortized domestic R&E expenditures over a one- or two-year period, and small businesses may opt to apply new Section 174A going back to 2022 and file amended returns. Eligible small business taxpayers (generally those with average annual gross receipts during the preceding three years not exceeding $31 million) can retroactively expense R&E expenditures for taxable years beginning after December 31, 2021, by filing amended returns.

Alternative Treatment: Taxpayers may still elect to capitalize and amortize domestic R&E expenditures over a period of not less than 60 months, or elect to amortize them over a 10-year period.

This represents a major win for businesses conducting research and development, as the 2022-2024 capitalization requirement had created significant tax burdens and compliance complexity.
by reillyse | 2025-11-01 13:36:53+00:00
The fact that people expect a data object, as argued by the author, is a very strong argument in favor of having one.

Onboarding new programmers to your codebase and making the codebase simpler for developers to reason about is a massive non-functional benefit. Unless you have a very strong reason to do things otherwise, follow the principle of "least surprise". In fact vibe coding adds another layer to this - an LLM generally expects the most common pattern - and so maintenance and testing will be orders of magnitude easier.
by mnky9800n | 2025-11-01 13:37:04+00:00
Yes and it’s obvious the only reason is because making more money is better than only making enough money. This is probably why gameplay has changed so much to where every deck is some combo blah blah. Like most of the older deck formats are gone. Like look at the decks when they published the 1999 Grand Prix winning decks and compare them to today. Like it had mono green stompy next to these fiddly urza combo decks. I dunno I’m just sad the game sucks now. I had a lot of fun playing with friends when I was younger.

https://mtg.fandom.com/wiki/World_Championship_Decks/1999
by Marshferm | 2025-11-01 13:37:24+00:00
Actually, narrative explanations like the vampire book are exponentially the most reductive. Cause/effect, story. On the other hand, evolution is billions of hours of trial end error making footsteps of niche evasion.

Gotta think big, stories are puny both in terms of explanation load and their total existence in evolutionary time. They are fun over the dinner table but that’s about as definitive as they get.
by ot | 2025-11-01 13:37:59+00:00
> It kind of doesn’t matter if there are users [...] The point is that PCG is better

No that's not the point that the article makes and that I'm questioning, it says "everyone shrugged" which implies consensus, and I'm asking for evidence of that consensus, not of the objective quality of the two generators.

Also I don't think that that paragraph is even close to demonstrating "objectively better": the author of PCG pointed out one arbitrary metric, minimum state size, where PCG beats old variants of xorshift* on a statistical test suite, and in the meantime much better variants have come out. That metric is meaningless since everyone uses much bigger state anyway.

RNGs are a tricky subject, there isn't a singular measure of quality, statistical tests are necessary but not sufficient. The best testament to RNG quality is wide adoption, which builds confidence that there aren't undiscovered failure modes.
by Max-Ganz-II | 2025-11-01 13:37:59+00:00
> Not willing to start any discussion on the matter, but you may want to know about massacres ukraine did in it's eastern side.

This is a Russian narrative.

> After all, the russian invasion wasnt that unprovoked at all

This also is a Russian narrative.

It seems to me you have been from some source been absorbing Russian material.

Putin is a dictator. A few years after he came to power in 2000, Russia was once again living in fear; you did not speak out. If you did, fines, prison, penal colonies with death and violence, or now and then being thrown out of windows.

It looks from material being produced by Putin, the State and the military Russia by about 2010 was looking to take Ukraine.

Putin had his man running Ukraine - into corruption and thuggery - until Euromaiden. He fled to Russia. Literally immediately after that, plan B - the small war began. Finally, 2022, the big war.

There is nothing here where we go "it was not that unprovoked".

Ukraine wanted, and wanted, freedom. To be itself, and not to live in a hell-hole dictatorship. Putin wants to possess Ukraine, because that's how he and it seems a good part of Russian State culture sees the world; in terms of power, conquest and territory.
by steveBK123 | 2025-11-01 13:38:07+00:00
I mean generally speaking derivatives can be used as insurance or for speculation, and a wide gradient of gray in between.

By contrast, sports gambling is well, gambling. And importantly as we've seen in a lot of reports - the big online sports books essentially freeze out anyone who is good so that they are collecting revenue primarily from the.. innumerate.

Of course you also have some markets like India without legal gambling and oversized derivatives markets that are unfortunately serving as a replacement.

I'd also point out that you don't see the sort of degenerate nonstop advertising for options punting that you see for sports gambling. "Thanks for tuning into the ESPN FanDuel pregame show at the Caesars Superdome / and don't forget to stop by the DraftKings Sportsbook lounge." Followed by a barrage of other gambling ads in between plays.
by ajross | 2025-11-01 13:38:19+00:00
Trying to get my head around this. It seems like the "rootest" cause here is a paradigm clash between lock fairness and async futures.

A fair lock[1] is designed to wake up the longest-waiting task, since it got to the queue first and might otherwise be starved if the algorithm doesn't guarantee it gets to the head of the queue.

BUT CRITICALLY: a future isn't a task. It's not a thread, it's not guaranteed to "run". It's just a flag that gets set somewhere. But it can consume that wakeup nonetheless. So it's possible to "wake up"[2] a future that isn't actually being polled, and won't be, until something else that is waiting on the resource that just tried to wake it up.

I don't see that these concepts are ever going to work together. You can't have locks generating wakeup events that aren't consumed. If you're going to use them with async, you need to do something like a broadcast to guarantee that every waiter sees an event.

Stated differently: the lock is signalling an edge-triggered interrupt, but rust async demands level sensititivity.

[1] In one sense of fair. There are others, like "switch now" vs. "defer context switch", but that's not relevant here.

[2] Which doesn't actually wake anything up, thus the bug.
by techblueberry | 2025-11-01 13:38:23+00:00
I have so many questions - but seasteading. Isn't the problem that to have true economic freedom you have to have free trade? I mean like 100 billionaires on an island like Greenland, if they get embargoed by all the other countries -- like how many people do they have to have on their island to have the economic base to keep being billionaires and having their "freedom"

Because - like I want to live on an off-grid homestead in the middle of nowhere - that's my idea of freedom, but I don't get the impression that's Peter Thiel's definition of freedom. So maybe this is why they're realizing they have to have authoritarianism over the largest economy of the world in order to have their "freedom".

But one thing I think that's notable about a sort of schism in political thinking; is that it's interesting that the far left would say that both parties are the same and that both are bought by billionaires, but it's amazing how much the billionares would seem to say the opposite; maybe the Democrats lost because they turned away from Silicon Valley and Musk pumped hundreds of millions into Trump's campaign?
by empath75 | 2025-11-01 13:38:28+00:00
Yeah I don’t think people understand how bad it is. ICE are a lawless secret police force with loyalty only to trump and they are actively and intentionally recruiting racists and fascist and fast tracking them through regardless of background. Right wing gangs like the Proud Boys are actively funneling their members into it.

Their budget right now is larger than the Marine Corps and a lot of their members are looking at unemployment or prison time if the democrats get back into control of the government. Think about what they are likely to do during the mid terms if they are told to monitor election sites. They are a gang of dangerously brutal violent thugs operating with complete impunity.
by ninjin | 2025-11-01 13:38:48+00:00
Really? The variable name lengths? Not that the code is clearer as:

const te = document.createElement('table'); document.body.appendChild(te); [ ['one', 'two', 'three'], ['four', 'five', 'six' ], ].forEach((r, i) => { const re = te.insertRow(i); r.forEach((c, j) => { re.insertCell(j).innerText = c; }) });

My personal stance on short variable names is that they are fine as long as their scope is very limited, which is the case here. Rather, the "crime" to me is an overuse of rather pointless variables as the majority of them were only used once.

Disclaimer: I have not tested the code and I only write JavaScript once every few years and when I do I am unhappy about it.
by businessmate | 2025-11-01 13:38:49+00:00
Leaders conditioned by the search era often ask when large language model surfaces will settle. The expectation is understandable. Search rewarded optimisation, patience, and the belief that systems eventually reach equilibrium.

AI mediated environments do not operate on that logic. Stability is not delayed. Stability is not a future state. Stability is not a property of these systems at all.
Show HN: GhostsMap – Crowd-sourced world map of paranormal encounters
by radiyap | 2025-11-01 13:39:57+00:00
I've always been fascinated by real paranormal stories, so I built GhostsMap (https://www.ghostsmap.com/) as a weekend project: an interactive world map where anyone can pin and share their ghost encounters anonymously.

How it works: - Users submit location + a short description via a simple form (no login needed). - Pins appear on a searchable map, filterable by date/type (e.g., shadows, voices). - Tech: Built with React/Google Map, Firebase for backend storage—kept it lightweight and open for contributions.

Right now it's got a handful of pins from Japan and the UK, but I'd love feedback: What's missing? Better moderation? Mobile tweaks? Or your own story to add?

Curious if anyone's built something similar for folklore/urban legends.
by hkpack | 2025-11-01 13:40:10+00:00
Okay, so basically you’ve read some “anonymous sources” and decided they are true.

Because for me, as a person who did international business from Ukraine it makes absolutely zero sense to launder through Ukraine as it is:

1) no part of any union, so you will be unable to spend or move money outside.

2) it has extreme bank regulation, and you cannot just send money outside without cause. Receiving and sending money for fake “services” will not work (compared to a lot of other places I know)

3) it has a lot of independent anti-corruption institutions. You can be sure that any government official fears the consequences of doing something illegal.

4) it is in a state of war and any suspicious money operation will trigger investigation from SBU as well, since Russia tries to pay for its agents.

If there is corruption and money laundering happening, it is well outside of any path available for regular people.
by atombender | 2025-11-01 13:40:39+00:00
I don't see any provisions for scaling up workflows horizontally — is that something this supports, or this more for interactive agents?

As an example, I have a use case where I'm processing millions of documents in a fan-out/fan-in pipeline that uses multiple LLMs to analyze and condense information. This mostly isn't CPU-bound, but it does consume a lot of RAM.

I'm currently using Ray to split the workload across a cluster. Ray has autoscaling, so it's very good for this kind of thing.
by senko | 2025-11-01 13:40:48+00:00
In the interest of clearly communicating:

I used "fuel" in the meaning "to make people's ideas or feelings stronger, or to make a situation worse", not "a substance that is burned to provide heat or power", see https://dictionary.cambridge.org/dictionary/learner-english/...

I did provide two quick examples of these effects happening in the absence of ZIRP, so it is clearly not always required.

As, sadly, is not a tank of gasoline or ill intent to set a house on fire - these things can happen by accident, often a single spark is enough.

There's plenty of literal fuel beside gasoline, and there's plenty of "startup growth at all costs" fuel beside ZIRP.
Ask HN: What is your primary programming language?
by gethly | 2025-11-01 13:41:16+00:00
We get the annual Stack Overflow stats about language popularity, but those stats are highly skewed towards people seeking help.

Therefore I wonder what kind of data we could get in here, where visitors do not seek support but are generally in the IT sector.

The idea is to simply vote for comment that represents your language of choice. If there is no entry, write your own with the language name - but it is quite important to not create duplicates. Additionally, this should be your primary language where you spent most of your time this year. If you did other languages before or work with multiple ones, only pick the one that occupied you the most in 2025.

Even though SQL is technically a language, let's focus only on the ones that can produce an executable or can be executed by dedicated runtime - like PHP or Python.

Lastly, keep JavaScript a singular entry - avoid making framework distinctions(ie. React, Vue, Svelte, Angular..) and front-end vs back-end.
by page_index | 2025-11-01 13:43:13+00:00
In modern document question answering (QA) systems, OCR serves an important role by converting PDF pages into text that can be processed by Large Language Models (LLMs). The resulting text can provide contextual input that enables LLMs to perform question answering over document content.

Traditional OCR systems typically use a two-stage process that first detects the layout of a PDF — dividing it into text, tables, and images — and then recognizes and converts these elements into plain text. With the rise of vision-language models (VLMs) (such as Qwen-VL and GPT-4.1), new end-to-end OCR models like DeepSeek-OCR have emerged. These models jointly understand visual and textual information, enabling direct interpretation of PDFs without an explicit layout detection step.

However, this paradigm shift raises an important question:

> If a VLM can already process both the document images and the query to produce an answer directly, do we still need the intermediate OCR step?

We build a practical vision-based question-answering implementation for long documents, without relying on OCR. Specifically, we adopt a vectlorless, reasoning-based retrieval layer and the multimodal GPT-4.1 as the VLM for visual reasoning and answer generation.
by hexbin010 | 2025-11-01 13:43:22+00:00
It's a trade off like everything. More DTOs means more mapping, more coming up with names, more files etc. There's definitely a middle ground.

You can (should) also apply it selectively. Eg for auth, I'd never want a single UserDTO used for creating and displaying a user - creating a user requires a password, a field you don't want when retrieving a user, to avoid mistakes.

I know DDD advocates would say that you're then not being true to DDD, but yes that's business. It's very very hard to get everyone to agree with the reduced velocity of 100% adherence to DDD for an extended period. In my experience it starts off as "this is great" then people start hate reviewing PRs for simple changes that have 28 new files (particularly in Java) and they quietly moan to the boss about being slowed down by DDD
by teamonkey | 2025-11-01 13:44:25+00:00
As I said clearly, a) that was a personal opinion, b) I don’t believe the message was actually presented in such absolute terms. There may have been poor science communication, which is always a problem, but that is not unusual.

There was and continues to be a huge amount of disinformation and anti-science fear spread around, but the correct information was put out there and if you weren’t getting the right information you need to change your sources.
by embedding-shape | 2025-11-01 13:44:34+00:00
Probably because I first learned programming with JavaScript and very early started using jQuery, but I've always used prefixed `$` to indicate "This is a DOM element" (started doing this once jQuery stopped being so popular). So the example would be something like this for me:

let table = [ ['one','two','three'], ['four','five','six'] ]; let $body = document.body; let $table = document.createElement('table'); $body.appendChild($table);

Always felt it worked out short and sweet, and as long as you're not refactoring a jQuery codebase, seems to work out well in practice.
by Esophagus4 | 2025-11-01 13:45:54+00:00
Sorry, I was talking about the previous iteration of the Dodgers that beat the Yankees. I haven’t been watching this year, other than Ohtani doing Ohtani stuff.

The previous Dodgers were stacked, but I meant that they had good chemistry and fundamentals. They beat the Yankees because the Yankees just made too many mistakes.

The Mets hired highly paid stars but couldn’t find chemistry, as nobody could get along. They did have some good eras with DeGrom, Syndegaard, etc, but if I remember, many of those stars started out small and grew into their stardom with the team.
by BobbyTables2 | 2025-11-01 13:46:14+00:00
Thats the best explanation I’ve seen of this issue.

However, it screams of a broken implementation.

Imagine if Linux PAM logins randomly failed if someone else was concurrently changing their password or vice versa.

In no other application would random failures due to concurrency be tolerated.

SQLite is broken by design; the world shouldn’t give them a free pass.
Show HN: Dwellable – The app I built after waiving home inspection during Covid
by rkrishnan2012 | 2025-11-01 13:47:23+00:00
tl;dr - Dwellable is a free app that takes property records and delivers tools and insights for homeowners.

My wife and I bought our first home in 2020, during peak COVID. When visiting homes, our agent actually asked us to waive the home inspection, which was terrifying. I ended up walking through the house myself with a set of handwritten notes: "check if Kitchen outlets are GFI", "make sure toilet flushes", "test the bath fan", etc.

That experience was the seed for Dwellable, a home maintenance and inspection app for homeowners like us who didn’t know where to start (both before and after buying).

The app automatically pulls your property records (square footage, year built, fuel type, etc.) and uses AI to recommend reminders and seasonal maintenance tasks. It’s free right now, built entirely native on iOS and Android.

The app is free now while we gather feedback from users.

Tech stack:

- Backend: Python + gRPC

- iOS: Native SwiftUI

- Android: Native Jetpack compose

- Landing page: Github pages (vanilla JS + HTML)
by zkmon | 2025-11-01 13:47:33+00:00
In the din of industrial strength siren songs, you may have not noticed the rot that is accumulating in the society. MS Excel exists only because you have some data that you think you should care about and you can't fit in your mind. As an individual, you shouldn't need that much data to handle.

The accumulated social rot is not compensated by Excel sheets or any gadget toys, you call as tech.