MurphyA/hacker-news huggingface dataset:
by xboxnolifes | 2025-11-30 23:15:41+00:00
It's quite different from use one password everywhere. My threat vector I wish to protect against that some random website I signup to will mismanage passwords and end up with them leaked, causing every website using that password to be compromised. Remembering hundreds of unique passwords is unreasonable, thus, password manager.

Considering the amount of times my email has ended up in a leaked dataset, and the only accounts I've ever had visibly compromised were ones I did not use a password manager for, this seams to be the correct mindset.
by fleshmonad | 2025-11-30 23:15:51+00:00
Epic ragebait.

> Win11 file picker is years ahead of some random file picker option available on linux

First it would be nice to know why you would think this and maybe provide an example, second there are other file pickers. It should also be noted that you don't need one at all, but if you want one, there are so many options, try nemo

> HiDPI

Wayland

> Multi monitor scaling polish

What did he mean by that? Wayland supports different scaling factors between displays.

> rdp

VNC, ssh + pf

> vastly superior accessibility

Hahahahaha

Some examples of what you mean please, otherwise this is just a lazy shill answer
by roncesvalles | 2025-11-30 23:15:52+00:00
That's the most nonsensical reason to adopt microservices imo.

Consider this: every API call (or function call) in your application has different scaling requirements. Every LOC in your application has different scaling requirements. What difference does it make whether you scale it all "together" as a monolith or separately? One step further, I'd argue it's better to scale everything together because the total breathing room available to any one function experiencing unusual load is higher than if you deployed everything separately. Not to mention intra- and inter-process comm being much cheaper than network calls.

The "correct" reasons for going microservices are exclusively human -- walling off too much complexity for one person or one team to grapple with. Some hypothetical big brain alien species would draw the line between microservices at completely different levels of complexity.
by gnabgib | 2025-11-30 23:17:16+00:00
Other versions of this story:

RestOfWorld (8+4 points) https://news.ycombinator.com/item?id=46093441 https://news.ycombinator.com/item?id=46097175

GaryMarcus (9 points) https://news.ycombinator.com/item?id=46097203

TechCrunch (4 points) https://news.ycombinator.com/item?id=46100337
by BanditDefender | 2025-11-30 23:17:44+00:00
There is quite a bit of bait-and-switch in AI, isn't there?

"Oh, machine learning certainly is not real learning! It is a purely statistical process, but perhaps you need to take some linear algebra. Okay... Now watch this machine learn some theoretical physics!"

"Of course chain-of-thought is not analogous to real thought. Goodness me, it was a metaphor! Okay... now let's see what ChatGPT is really thinking!"

"Nobody is claiming that LLMs are provably intelligent. We are Serious Scientists. We have a responsibility. Okay... now let's prove this LLM is intelligent by having it take a Putnam exam!"

One day AI researchers will be as honest as other researchers. Until then, Demis Hassabis will continue to tell people that MuZero improves via self-play. (MuZero is not capable of play and never will be)
by sprash | 2025-11-30 23:17:57+00:00
The only real Wayland community effort is Hyprland. The author of that has been banned from contributing to Wayland by the corporate sponsors of Wayland.

Hence there is no community.

Also the whole "there is no Wayland" "it's just a protocol" spiel has been played so often that I believe Wayland apologists are mostly bots.
by LilBytes | 2025-11-30 23:18:22+00:00
Betteridge's law of headlines is an adage that states: "Any headline that ends in a question mark can be answered by the word no."

It is based on the assumption that if the publishers were confident that the answer was yes, they would have presented it as an assertion; by presenting it as a question, they are not accountable for whether it is correct or not.
by ropetin | 2025-11-30 23:19:12+00:00
It would be interesting to do a study (if one hasn't already been done) on whether password manager use reduces the number of compromises an individual has or not.

I think if used correctly they can be a net benefit, but the question is how many users actually use them correctly. Isn't the security they offer based on a user only having to remember a single complex and unique password for the manager, and then let it handle unique and complex passwords for everything else. The question is, however, how many users just set the password manager password to 'ImSecure123!' and use it to autofill the same old reused passwords they've always used?
by mistyvales | 2025-11-30 23:19:40+00:00
I run freeBSD for a NAS and a couple linux vm's under bhyve. Could I have just installed Ubuntu and been done with it? Probably. I did make some mistakes like setting a very low swap partition, forgetting to switch my RAID controller to IT mode which made me have to rebuild my raidz1 pool, changing my bhyves to UEFI so the internet works better. I made sure the jail I built for plex worked fine. It's been fun. At this point I should probably rebuild the whole damn thing, but I know it will run just fine as is.
by kotaKat | 2025-11-30 23:19:45+00:00
former hospital IT; also agreeing major generalizations with "everyone hates <the EMR>".

Everything comes down to the implementation at the end of the day. We've had people come into our Meditech 6.x shop from other shops (Cerner, CPSI, MAGIC installs) and comment how much Meditech was an upgrade, and I'd see Epic users complaining about the downgrade all the same.

The entire region's gone up to Epic now thanks to mergers from larger systems, and every site that had everything prior now (especially that crummy little CPSI system) agrees that Epic is now the best thing since sliced bread.

Coming into it though finding out just how much lives in the system... wow. I was amused to see that HR very much lives alongside nurses in the same system (Meditech's HR modules... and an employee portal that quoted copyrights from 1995 from Photodisc!).
by JumpCrisscross | 2025-11-30 23:19:45+00:00
> People seem to think there’s some clever little gap between war crime law, US domestic law, and human rights law that mean a government can just kill people who pose no immediate threat and without any establishment of guilt

International human rights law is back to being an aspirational ideal. Every one of the world's great powers have explicitly rejected it. (So have most of regional powers.)

I'd love it if Trump, Xi and Putin could be hauled in front of an international tribunal for the atrocities they've committed. But it isn't happening. Not to them. Nor to Netanyahu, Kim, Khamenei, Modi, Lukashenko or MBS.

At the end of the day, the only thing that can hold Trump and the U.S. military accountable is U.S. law. Bickering over what crime is committed under that law might be teidous. But it is a legitimate activity that could bring real consequences in a way bringing up what a former ICC prosecutor thinks does not.

> All of it is nonsense

This is lazy. Top of the thread. Real debate happening around whether war crimes were committed. Dismissing that as "nonsense" enables and implicitly supports the illegal behaviour.
by bigell | 2025-11-30 23:20:13+00:00
I love advent of code, and I look forward to it every year!

I've never stressed out about the leaderboard. Ive always taken it as an opportunity to learn a new language, or brush up on my skills.

In my day-to-day job, I rarely need to bootstrap a project from scratch, implement a depth first search of a graph, or experiment with new language features.

It's for reasons like these that I look forward to this every year. For me it's a great chance to sharpen the tools in my toolbox.
by winddude | 2025-11-30 23:20:19+00:00
"But we bought too many GPUs! We spent billions on infrastructure! They have to be put to work!"

right... none of them are saying that. They could probably use more GPUs considering the price of GPUs and memory are skyrocketing and the supply chain can't keep up. It's about experimentation, they need real users and real feedback to know how to improve the current generation of models, and figure out how to monetise them.
by venturecruelty | 2025-11-30 23:20:31+00:00
I don't want or need microservices. What I want is for people to stop putting TCP roundtrips in between what would otherwise be simple function calls in a sane universe. I don't want to have to take a graduate-level course on the CAP theorem to clock in and work on whatever "Uber for dogs" nonsense is paying my rent. You almost certainly don't have a scaling problem that necessitates a distributed system, I guarantee it. I have had an average career, and every single time someone shoved a Kubernetes-shaped peg into a server-shaped hole, it's been a shitshow. These systems are slow, expensive, difficult to reason about, and largely unnecessary for most people who handle a few hundred or thoudsand connections per second (on average. Don't @ me about bursty traffic, I understand how it works).

And in a few days, we're going to get a long thread about how software is slow and broken and terrible, and nobody will connect the dots. Software sucks because the way we build it sucks. I've had the distinct privilege of helping another team support their Kubernetes monstrosity, which shat the bed around double-digit requests per second, and it was a comedy of errors. What should've otherwise just been some Rails or Django application with HTML templating and a database was three or four different Kubernetes pods, using gRPC to poorly and unnecessarily communicate with each other. It went down all. The. Time. And it was a direct result of the unnecessary complexity of Kubernetes and the associated pageantry.

I would also like to remind everyone that Kubernetes isn't doing anything your operating system can't do, only better. Networking? Your OS does that. Scheduling? Your OS does that. Resource allocation and sandboxing? If your OS is decent, it can absolutely do that. Access control? Yup.

I can confidently say that 95% of the time, you don't need Kubernetes. For the other 5%, really look deep into your heart and ask yourself if you actually have the engineering problems that distributed systems solve (and if you're okay with the other problems distributed systems cause). I've had five or six jobs now that shoehorned Kubernetes into things, and I can confidently say that the juice ain't worth the squeeze.
by bastawhiz | 2025-11-30 23:20:49+00:00
> no amount of prompting will prevent this situation.

Again, missing the point. If you don't prompt for it and you document it in a place where the tool won't look first, the tool simply won't do it. "No amount of promoting" couldn't be more wrong, it works for me and all my coworkers.

> If it is a concern then you put a linter or unit tests to prevent it altogether

Sure, and then it'll always do things it's own way, run the tests, and have to correct itself. Needlessly burning tokens. But if you want to pay for it to waste its time and yours, go for it.

> I don't see how this is any different from how you typically approach making your code more resilient to accidental mistakes.

It's not about avoiding mistakes! It's about having it follow the norms of your codebase.

- My codebase at work is slowly transitioning from Mocha to Jest. I can't write a linter to ban new mocha tests, and it would be a pain to keep a list of legacy mocha test suites. The solution is to simply have a bullet point in the CLAUDE.md file that says "don't write new Mocha test suites, only write new test suites in Jest". A more robust solution isn't necessary and doesn't avoid mistakes, it avoids the extra step of telling the LLM to rewrite the tests.

- We have a bunch of terraform modules for convenience when defining new S3 buckets. No amount of documenting the modules will have Claude magically know they exist. You tell it that there are convenience modules and to consider using them.

- Our ORM has findOne that returns one record or null. We have a convenience function getOne that returns a record or throws a NotFoundError to return a 404 error. There's no way to exhaustively detect with a linter that you used findOne and checked the result for null and threw a NotFoundError. And the hassle of maybe catching some instances isn't necessary, because avoiding it is just one line in CLAUDE.md.

It's really not that hard.
by kccqzy | 2025-11-30 23:20:51+00:00
The article quotes from Codeberg,

> Running CI/CD pipelines can use significant amounts of energy. As much as it is tempting to have green checkmarks everywhere, running the jobs costs real money and has environmental costs.

Honestly I think the mention of environmental costs has likely made users hesitant to sign up. Mentioning it costs real money is reasonable. Mentioning the environmental costs is not; the environmental harm is equivalent to the population buying a few dozen extra cars, which can easily be influenced by random marketing decisions by automakers and dealers.

In my experience reprimanding tech savvy people for the environmental costs of compute just doesn’t work. It’s far better to rephrase things into performance optimization problems, which naturally pique engineers’ interest.
by dragonwriter | 2025-11-30 23:21:28+00:00
> It cannot be a war crime if there is no war.

Any time a state uses armed force against another state (and sometimes against other entities), there is a war in which there can be war crimes.

> There is no declaration of war

War is war whether or not it is formally declared. (And the Trump Administration has described that it is fighting a war against Venezuela for months, though it has characterized Venezuela as the aggressor.) This was, among other things, the explicit premise of the invocation of the Alien Enemies Act months ago.

> and no approval of Congress.

That might arguably make any war also a violation of domestic law, but from the standpoint of international law it isn’t particularly a meaningful argument against their being a war.

> The ICC classified these strikes as crimes against humanity.

No, an individual who used to be a prosecutor with the ICC, acting as a private individual, described them that way.
by jstummbillig | 2025-11-30 23:21:33+00:00
US and EU law already cover this: undisclosed paid promotion that looks like neutral content is generally illegal (FTC Act + Endorsement Guides in the US, UCPD + DSA in the EU). Product placement in old TV/film is the historical exception, not the rule. An interactive "assistant" secretly steering you because someone paid for it is legally much closer to a deceptive influencer ad than to a Snapple bottle in Seinfeld.
by crabmusket | 2025-11-30 23:22:33+00:00
This is the way I went - Framework feels like the most mainstream way to have hardware that supports Linux, ships to lots of countries, etc. I installed Fedora first with GNOME but now with KDE Plasma. It's been good!

But I will say, after 18 months it's starting to show a little bit of bit rot. E.g. for some reason the bootloader refuses to remember to boot into the most recent kernal/OS combination I have installed - it works if I intervene during boot and manually select it, but it seems to often revert to an older combo. And there are starting to be some odd little bugs with external storage drives and the file browser... I haven't looked too deeply into it, but I expect these are Fedora problems, not Framework problems. Maybe I brought them upon myself by tinkering a bit too much with some drivers (not strictly necessary, I was trying to do some unusual A/V stuff I wouldn't normally bother with, but it was for a friend...)
by serjester | 2025-11-30 23:22:50+00:00
I'm not sure if they're gearing up for an announcement, but about 9 days ago they dropped the preview warning from their README. I'm assuming they're still working through final housekeeping items before formally announcing it.

[1] https://github.com/astral-sh/ty/commit/7a6b79d37e165f2e73189...
by cbeach | 2025-11-30 23:23:08+00:00
Seems you've found a leftwing historian who chooses to endorse the violent Islamic conquest of Southern Europe, re-imagining it as a vibrant exchange of cultures, predicated on extreme timeline distortion.

The Renaissance is defined as follows:

> The Renaissance was a European cultural movement from the 14th to 17th centuries, marking a "rebirth" of classical Greek and Roman learning after the Middle Ages. It was a period of significant innovation in art, literature, science, and philosophy, with key developments like humanism. Notable figures include Leonardo da Vinci, Michelangelo, and Raphael, and the movement began in Italy before spreading across Europe.

Islam did not even exist in the time of the Classical Greek and Roman periods.

Neither Leonardo da Vinci, Michelangelo, and Raphael ever met Muslims directly, travelled to the Islamic world, or interacted with Islamic institutions.
by zmmmmm | 2025-11-30 23:23:54+00:00
Heh, split databases is the thing I think is most problematic and the first thing I would eliminate in most microservices architectures. A huge fraction of the problems of microservices come from trying to split the data model along team structure / service domain rather than the true application / underlying business domain. It doesn't mean you shouldn't have multiple database, just the concept of splitting them arbitrarily along service lines is a huge cause of friction / impedance mismatch / overhead.

I actually like close to a full microservice architecture model, once you allow them all to share the database (possibly through a shared API layer).
by bobmcnamara | 2025-11-30 23:24:00+00:00
> Is this implying that all TLS is terminated at the Iran border and proxied from there?

Yeah, the law-abiding type on the Iranian National Information Network(NIN), either using the Electronic Commerce Council's I.R.Iran CA for HTTPS or just HTTP.

> Maybe certificate authorities aren't allowed to issue private certs to Iranian organizations? Even LetsEncrypt?

Due to NIN registrations being not very much not anonymous, https://xkcd.com/538/ seems pretty appropriate if you want to use an unapproved certificate authority.
by venturecruelty | 2025-11-30 23:24:45+00:00
At this point, I'm convinced that too many people simply haven't built software in a way that isn't super Kubernetes-ified, so they don't know that it's possible. This is the field where developers think 32 GB of RAM isn't enough in their laptop, when we went to the moon with like... 4K. There is no historical or cultural memory in software anymore, so people graduate not understanding that you can actually handle 10,000 connections per second now on a five-year-old server.
by cited_app | 2025-11-30 23:24:52+00:00
I have been building a quote site called Cited.in and wanted to share it with HN to get early feedback and real users.

The core idea is a two way way to explore what people say about each other. For example, you can look up Trump on Hillary and then flip it to Hillary on Trump to see the other side. Every quote is stored as a relationship between speaker and subject, so you can pivot between people, topics, and time.

Example of a two way pairing in action:

https://cited.in/donald-trump/on/zohran-mamdani/x0olr

Right now there are about 25k quotes in the database from a mix of public figures. You can save favorites, follow links back to sources, and explore related people and topics. Search quality, ranking, and UI are still early, so expect some rough edges.

I would love feedback from HN on:

whether the two way browsing feels useful or gimmicky

what types of queries or filters you would want

thoughts on data quality, moderation, and sourcing

Built with Laravel, PHP, and Tailwind and still very much a work in progress. The biggest issue at the moment is simply the lack of quotes, which I hope to improve over time with better imports and user submissions. I would really appreciate any comments, bug reports, or ideas for how to make this actually valuable.
by rendx | 2025-11-30 23:25:02+00:00
Interesting how you seem to see nothing inherently wrong in the provided quotes that call for violence against people of different opinion, but decided to only critique the person that admitted a mistake without aggression against anyone else, and demand they be (forever?) silent about a topic they seem interested in.

Why would you ever want to demand that someone "stay silent" about anything. Taking away somebody's voice is the lowest of the low. You do not have to read it or interact with it if you don't like it. And how would you want to be treated when you make a mistake? Can't you see how that leads straight to a world of zero progress, where people are afraid to do anything because it could turn out to be a mistake and they will be shunned for it by those that happen to have the most power? Are you not aware of the research into how bad punishment is for learning and advancement of society?

Williams, K. D., & Nida, S. A. (2022). Ostracism and social exclusion: Implications for separation, social isolation, and loss. Current opinion in psychology, 47, 101353. https://doi.org/10.1016/j.copsyc.2022.101353

Knapton, H. M. (2014). The Recruitment and Radicalisation of Western Citizens: Does Ostracism Have a Role in Homegrown Terrorism?. Journal of European Psychology Students, 5(1), 38-48. https://doi.org/10.5334/jeps.bo
by Renaud | 2025-11-30 23:25:09+00:00
ZorinOS keeps it easy and consistent if you are familiar with windows.

I think it’s pretty good for non dev users. The distro doesn’t provide any earth shattering new innovations but they spend efforts to polish the interface and make it easy to use.

Its pretty good for people who just want a working system and don’t care about whether it’s linux or something else.
by HiPhish | 2025-11-30 23:25:19+00:00
I have two more to add to the list:

> Secret questions

No, my mother's maiden name is not a secret. And some questions like "who was your best friend in elementary school?" might have different answers depending on when you ask me. Plus, unless my best friend's name was Jose Pawel Mustafa Mungabi de la Svenson-Kurosawaskiwitz (we used to call him Joe) it's pretty easy to guess with a dictionary attack. The only way to answer these questions securely is to make up an answer that's impossible to guess, which results in a second password.

> You password must contain these particular characters

I understand that this rule is to prevent people from using passwords like "kittycat", but "k!ttyc4T" is still less secure than "horse battery staple correct".
by metalcrow | 2025-11-30 23:25:26+00:00
> How can the extrajudicial killings of (over 80 by now!) alleged drug traffickers without any charges or trials be justified or accepted? These are, in fact, crimes against humanity.

It's _been_ accepted for years, if not decades now. Ever since the US started drone striking people without trial, or via trial in absentia, this has been the new normal. It being against international law is meaningless if no one care what the international law is, and especially if other countries are also breaking the law in the exact same way.
by whyenot | 2025-11-30 23:25:35+00:00
Your reference for #1, The Center Square, is a conservative rag and not a neutral source. Also, the source cited in its article, is from the Reason Foundation, a libertarian advocacy organization. Can you provide an actual source that is not some political advocacy organization? This is no better than if someone used an article from Mother Jones to support the assertion of how awesome CalPERS is. Do better.