MurphyA/hacker-news huggingface dataset:
by alsetmusic | 2025-11-12 01:27:17+00:00
I used to have problems with the TM db files becoming corrupted on my NAS, but that hasn't happened in at least five years. I also have a local USB drive connected for alternating backups, but even so the NAS has been fine for quite some time.

Someone said TM was never fully supported over a network, but that's bullshit. Apple used to sell a wifi hotspot with built-in storage called Time Capsule. First party network support is different from third-party NAS support, sure. But the statement was overly broad.

(I also clone nightly to another USB drive, fwiw… And backup to the cloud with Backblaze. And left a drive with a friend last weekend for local offsites. And plan to ship another to a friend in a different geographic region in case of natural disaster. I guess you could say that the stakes are pretty low for my NAS backup, but that doesn't change that it's been solid for a good amount of time.)
by blamestross | 2025-11-12 01:27:43+00:00
Just as a random proposal, not even lightly thought out. In priority order with realistic exceptions:

- do your best to be not dead, safe, and healthy for the next few years

- do your best to make those around you not dead, safe, and healthy for the next few years

- do your best to treat others around you how you would wish to be treated

- do your best to treat others around you how THEY would wish to be treated.
by flashgordon | 2025-11-12 01:27:55+00:00
This is one of the best responses I've seen. Titles do matter - at least depending on what your goals are. If you want to have broad impact (say leave a legacy or have influence etc) you need a high up title or have your name be synonymous with a project/product used by the group whose respect yoj want to command. And lot the time those above you will have you cranking out things for them. I don't mean this in an evil way. I mean that they have okrs to take care off and you will just be a resource to them.
by tpmoney | 2025-11-12 01:27:56+00:00
How is having a disclosure policy so that you balance the tradeoffs between informing people and leaving a bug unreported "holding" anything over the heads of the maintainers? They could just file public bug reports from the beginning. There's no requirement that they file non-public reports first, and certainly not everyone who does file a bug report is going to do so privately. If this is such a minuscule bug, then whether it's public or not doesn't matter. And if it's not a minuscule bug, then certainly giving some private period, but then also making a public disclosure is the only responsible thing to do.
by gcr | 2025-11-12 01:28:13+00:00
Inspired by Talia Smiley, I’ve started wearing a roll of dinosaur stickers on my belt and offering them to random strangers and at networking events.

“Hi I’m Kimberly, can I tell you about my startup” lands way worse than “Hi I’m Kimberly, would you like a dinosaur sticker for your coffee / MacBook?” Sometimes they even stick around for the pitch, but it’s nice to be able to instantly make someone smile in three-second interactions
by gnabgib | 2025-11-12 01:30:11+00:00
Previously:

ft: (52 points, 14 hours ago, 14 comments) https://news.ycombinator.com/item?id=45886217

the-decoder: (54 points, 9 hours ago, 6 comments) https://news.ycombinator.com/item?id=45888878
by announcer4614 | 2025-11-12 01:30:33+00:00
I was actually pleased with how cheap it ended up: less than $20 USD for the board + assembly + every component.

I set ESPHome to use IDF under the hood, you can check out my full ESPHome config for this: https://git.ellis.codes/e/esphome-configs/src/branch/main/vo...
by tpmoney | 2025-11-12 01:30:52+00:00
Great, so Google is actively spending money on making open source projects better and more secure. And for some reason everyone is now mad at them for it because they didn't also spend additional money making patches themselves. We can absolutely wish and ask that they spend some money and resources on making those patches, but this whole thing feels like the message most corporations are going to take is "don't do anything to contribute to open source projects at all, because if you don't do it just right, they're going to drag you through the mud for it" rather than "submit more patches"
by tombert | 2025-11-12 01:32:33+00:00
I don't dispute that. I wish I had been on a better team. My team had a famously high turnover rate, so it wasn't just me. I liked my direct manager just fine, he's a decent dude, but I thought his manager, who I had to deal with a lot, was kind of a dumbass and I did not enjoy working with him at all.

I tried joining other teams but without going into elaborate detail it didn't pan out.
by yndoendo | 2025-11-12 01:32:44+00:00
I started moving to using GO and Fyne for cross-platform GUI tooling. GO 1.21 supports Windows 7 with Fyne. Ya still have to support Windows 7 for work. No more wasting time with managing a Windows installer.

QT Framework is still one of the best for cross-platform desktop applications when speed is key.
by foresterre | 2025-11-12 01:34:26+00:00
I was quite confused too. I thought these were Pikaday implementations, partly because I usually use UK language in browsers, and then you get exclusively these (annoying to me) AM/PM date input pickers, and this time I didn't.

I tried some of the inputs and found that they worked well for initial input, but editing inputs didn't (e.g. the masked date input cursor just jumps over previous decimals, when typing a new number)

I made a reproduction video and tried to report it to the Pikaday issue tracker after which I found out it's deprecated.

Going back, and comparing the readme with the page, does show that the post uses native inputs. ... I feel that could have been more explicit; in this post I expected Pikaday to have the option to use native pickers with some component styling.
by g-b-r | 2025-11-12 01:35:22+00:00
Off topic, but I've been wondering for years about people pricing things with a 7 in the end (497$, 597$, 197$...)

Every "web marketing" person I ran into does it, it comes from that environment?

It's something considered to result in more sales, or maybe a way to signal that you're connected to some web marketing guru?
by numpad0 | 2025-11-12 01:35:55+00:00
What most people think of "vinyl sound effects" are not what the "warmth" is about. That's just playback instability and waveform aliasing caused by shoddily made players.

Good vinyl is "wait, did we have this back in 1970s" good(the recorder yes, the player not exactly, hence the prevalence of vinyl sound effects)
by cafard | 2025-11-12 01:36:34+00:00
Most interesting. Of Matthiessen's writing I know only the Shadow Country books.

I wonder about the biographer's practical judgment, though:

> I got very ill at that altitude. A doctor, when I got back, told me I had the symptoms of pulmonary edema. But it was worth it. I’d do it all again.

[Edit] Frank Kermode's memoir Not Entitled includes some interesting pages about the CIA funding of Encounter becoming publicly known.
by serf | 2025-11-12 01:36:35+00:00
I blame the EFF a bit for that.

The first soft-politico stickers I saw all over cons in the 90s/00s were their 'FUCK MICROSOFT' and 'FUCK GATES' stickers that exploded after the MS/Linux/SCO conflicts.

Before the MS debacles (was there a before?) it was mostly FREE KEVIN everywhere.

..which for reasons lead to 'this machine hacks oligarchies', and 'piss: it's whats for dinner' stickers shown in the link.

Speaking on that : Woodie Guthrie was better at marketing slogans than himself -- kind of interesting to consider how many more people are familiar with the 'This machine...' than his music.

When I was going to these things I tended to avoid 'extreme' ones -- I was often job hunting and didn't need to project an image that may hinder that effort.
by tpmoney | 2025-11-12 01:37:17+00:00
Since when are bug reports blackmail? If some retro game enthusiast discovered this bug and made a blog post about it that went to the front page of HN, is that blackmail? If someone running a fuzzer found this bug and dumped a public bug report into github is that blackmail? What if google made this report privately, but didn't say anything about when they would make it public and then just went public at some arbitrary time in the future? How is "heads up, here's a bug we found, here's the reproduction steps for it, we'll file a public bug report on it soon" blackmail?
by nomel | 2025-11-12 01:37:44+00:00
I think the perceived lack-of-value for them is related to how easy it is to write lyrics down, compared to any other aspect of the music. Anyone can do it within the time of the song, usually first try. Any other aspect of the song cant't just be written down from ear (yes, including the sheet music, which isn't nearly expressive enough to reproduce a performance*).

*There are some funny "play from sheet music without knowing the song" type videos out there, with funny results. YouTube/google search is no longe usable, so I can't find any.
by gsf_emergency_4 | 2025-11-12 01:37:48+00:00
So.. you say... this poor girl was later afflicted by guilt?

>“I wrote my book Friedrich Nietzsche in His Works with complete impartiality, moved only by the fact that after he became famous, so many young writers took up his ideas without understanding them; even I fully understood Nietzsche only after I had known him personally, when I had examined his ideas through his works. I only wanted to understand the figure of Nietzsche on the basis of these objective impressions"

https://psychreviews.org/lou-andreas-salome-pt-2/
by renhanxue | 2025-11-12 01:38:22+00:00
There are dozens if not hundreds of issues just like this one in ffmpeg, except for codecs that are infinitely more common. Google has been running all sorts of fuzzers against ffmpeg for over a decade at this point and it just never ends. It's a 20 year old C project maintained by poorly funded volunteers that mostly gives every media file ever the be-liberal-in-what-you-accept treatment, because people complain if it doesn't decode some bizarrely non-standard MPEG4 variant recorded with some Chinese plastic toy from 2008. Of course it has all of the out-of-bounds bugs. I poked around on the issue tracker for like 5 minutes and found several "high impact" issues similar to the one in TFA just from the last two or three months, including at least one that hasn't passed the 90 day disclosure window yet.

Nobody who takes security even remotely seriously should decode untrusted media files outside of a sandboxed environment. Modern media formats are in themselves so complex one starts wondering if they're actually Turing complete, and in ffmpeg the attack surface is effectively infinitely large.

The issue is CVE slop because it just doesn't matter if you consider the big picture.

Some example issues to illustrate my point:

https://issuetracker.google.com/issues/436511754 https://issuetracker.google.com/issues/445394503 https://issuetracker.google.com/issues/436510316 https://issuetracker.google.com/issues/433502298
by dragonwriter | 2025-11-12 01:38:37+00:00
You'd need two AAs or AAAs for a CR2032's voltage. While it would last a lot longer, it's also a lot more volume. Also, the diameter is going to be a problem for many calculators; e.g., the R47 being discussed here is 12mm thick, a AA has a 14.5mm diameter and a AA has a 10.5mm diameter.
by strix_varius | 2025-11-12 01:40:24+00:00
This is inherent in the architecture of chatgpt. It's a unified model: text, images, etc all become tokenized input. It's similar to re-encoding your image in a lossy format, the format is just the black box of chatgpt's latent space.

This leads to incredibly efficient, dense semantic consistency because every object in an image is essentially recreated from (intuitively) an entire chapter of a book dedicated to describing that object's features.

However, it loses direct pixel reference. For some things that doesn't matter much, but humans are very discerning regarding faces.

Chatgpt is architecturally unable to reproduce exactly the input pixels - they're always encoded into tokens, then decoded. This matters more for subjects for which we are sensitive to detail loss, like faces.
by rmunn | 2025-11-12 01:40:52+00:00
Point. As part of a negotiated contract, some companies might indeed put in guarantees of software quality; I've never worked in the nuclear industry or any other industries where that would be required, so my perspective was a little skewed. But all mass-distributed software I've ever seen or heard of, free or not, has that "no warranty" clause, and only individual contracts are exceptions.

Also, "depending on jurisdiction" is a good point as well. I'd forgotten how often I've seen things like "Offer not valid in the state of Delaware/California/wherever" or "If you live in Tennessee, this part of the contract is preempted by state law". (All states here are pulled out of a hat and used for examples only, I'm not thinking of any real laws).
by tpmoney | 2025-11-12 01:41:45+00:00
> When you publicize a vulnerability you know someone doesn't have the capacity to fix according to the requested timeline, you are simultaneously increasing the visibility of the vulnerability and name-calling the maintainers.

So how long should all bug reporters wait before filing public bugs against open source projects? What about closed source projects? Anyone who works in software knows to ship software is to always have way more things to do than time to do it in. By this logic, we should never make bug reports public until the software maintainers (whether OSS, Apple or Microsoft) has a fix ready. Instead of "with enough eyeballs, all bugs are shallow" the new policy going forward I guess will be "with enough blindfolds, all bugs are low priority".
by renewiltord | 2025-11-12 01:41:55+00:00
Tough. But I suppose it means the sanctions are working.

The shortest way out is island nation golden passport plus renunciation of Iranian citizenship plus incorporation in Dubai and then get going. Rough because startup cost is $250k. Well, you have a story to tell a VC. It'll be tough, though. None of the A listers will risk this.
by mindcrime | 2025-11-12 01:42:11+00:00
On that particular day I was going through a bunch of different books, trying to work out what my plan was going to be for the next little while. Of those ones, I wound up finishing A Theory of Cognitive Dissonance and the Sensation and Perception one. I also knocked out a pretty good chunk of the one titled just Memory. The rest got bumped down the stack a bit.

I kinda getting back to the place now where I want to revisit The Organization of Behavior. That's the seminal work by Hebb that introduced Hebbian Learning and I'm on this big quest now to revisit a lot of old school approaches to learning & neural networks (in something at least approximating chronological order, although I won't be super strict about it) and code up implementations of each. So basically, some sort of Hebbian Learning system, a "McCulloch & Pitts Neuron", a Perceptron with the Perceptron Convergence Algorithm, Selfridge's Pandemonium Architecture, and so on, gradually working my way up to the current SOTA.

I'm about to finish up the Minsky & Papert Perceptrons book, and once I finish that I will probably read Volume 2 of the Parallel Distributed Processing series, then go back to Hebb.

FWIW, that Memory book was pretty fascinating. The general subject of human memory is, both simply taken for its own sake, and taken as inspiration for approaches to AI. I'm slightly more interested in AI than human memory qua human memory, but in either case it's fascinating material.
by parpfish | 2025-11-12 01:42:35+00:00
i hate that computers define 'today' and 'tomorrow' on days centered on midnight.

several times this has lead to problems when i'm doing a late-night work binge that cross into 12am and i see relative date terms that confuse me.

if you're out with some friends and it's 12:15 AM and you say "i really need to go, i have a big day tomorrow" it's understood that that means the big day is on this calendar date but after i wake up and NOT the following day.
by mdasen | 2025-11-12 01:43:18+00:00
> Microsoft Team is built on Electron and not MAUI

Microsoft Teams was released in March 2017. .NET MAUI was released in May 2022. In 2021, Microsoft replaced Angular with React and moved away from Electron to WebView2 (using the OS' built-in renderer rather than a bundled Chromium). So even the rewrite was a year before MAUI (and they probably started the rewrite before 2021). Plus, part of the point of using React there was that they could basically replace Angular bit by bit.

Microsoft Teams is just older than MAUI. It's like asking why Hadoop is written in Java and not Go or Rust or why Kafka is written in Scala and not Kotlin. Kafka was open sourced in January 2011 and Kotlin came out in July 2011. Kotlin wasn't an option given that they were developing it years before the language was released.

That's not to say that Microsoft's attitude toward MAUI doesn't leave concerns. There was some news a while back about a bunch of layoffs around MAUI. It's always concerning when there doesn't appear to be any dog-fooding going on - is this just some junk they're throwing at us that they don't want to use? I think some hesitation also comes from the Blazor side where it's looking like Microsoft doesn't really see Blazor as a React competitor so much as a way for internal company apps to be made quickly - in contrast to the Google IO presentations on WASM support for Dart/Flutter where they were emphasizing better-than-JS performance.

That said, Microsoft hasn't really released a lot of new (green field) stuff over the past 2-3 years. What product should they have made in MAUI, but didn't? You can't say Teams because that was a giant product way before MAUI even existed. Most of what Microsoft is doing is work on existing products - things they released before 2023/2024 and were in development before MAUI existed. Flutter had a 5 year head start on MAUI.

But there certainly is a feeling that Microsoft doesn't feel committed to it or at least not enough to put its weight behind it.
by makeitdouble | 2025-11-12 01:43:24+00:00
> The sanctions didn't come from nowhere.

Legality set aside (I agree on your points on the repercussions), "the West" isn't that unified when it comes to middle east and other areas where the US meddled a lot. In particular, EU countries can have a way more nuanced view on it and be quite pissed at US' positions.

Which can make the author's perception of it more complex. They'll find people who are genuinely sympathetic, but still absolutely refusing to cross the bridge.
by ants_everywhere | 2025-11-12 01:43:26+00:00
You'd have a hard time justifying the argument that moral frameworks are arbitrary. First, they have complicated internal structures that aren't well understood even today. See, e.g., the various "paradoxes" of modal logics used in ethics. Second, since we're all the same social primate species, moral rules are surprisingly consistent globally. Third, the Romantic and anti-Enlightenment streams that Nietzsche was a part of generally did away with the need to justify claims. This vibe-based approach is a big part of why people like Nietzsche are sometimes viewed more as literary figures than philosophers.

Nietzsche was very strongly in favor of the aristocracy and opposed to democracy. Traditional mass market religion was always something the ruling class saw as beneath them. For a long time the ruling class was the priestly class, so they literally made the rules of religion. That was no longer true in Nietzsche's day, but his views on morality are still influenced by the fact that he's writing motivational works for the ruling class.
by lone-cloud | 2025-11-12 01:46:21+00:00
I cannot judge the validity of your test and I have done any tests myself. I encourage you to read the link from post to the top firefox hardening resource (arkenfox) that labels NoScript redundant. This is further backed up by another top privacy resource: https://www.privacyguides.org/en/browser-extensions/ This also links to the uBlock docs which outline different modes. Medium/hard modes make NoScript redundant.
by CompoundEyes | 2025-11-12 01:46:51+00:00
With vinyl warmth is the result of a deliberate process. Professional masters are done specifically for vinyl to accommodate its quirks which truly changes the sound. They have to clamp down the dynamic range and tidy low frequencies or the needle will skip. Recordings with lots of busy high frequency information also can’t be physically captured properly in the cut. The resulting master is a version that purposefully doesn’t have as many volume swings and harsh highs or boomy lows. Smooth, cohesive, warm. There are also track ordering strategies which is why ballads tend to be at the end of one side and the high energy stuff up front where there is “resolution” to serve it. The mastering engineer is adjusting each song with all this in mind.
by dataflow | 2025-11-12 01:47:57+00:00
> Obviously the experience wouldn't rival one of a 19th century slave and nobody is making that claim.

This was literally the comment:

>> I do think that mandatory road duty is about as direct a violation of the purpose of the 13th Amendment as anything else the state could do.

The state could bring back 19th-century-style slavery, too. Wouldn't that be a more direct violation of the purpose of the amendment? Because eliminating that sort of thing was kinda the purpose of the amendment, no? The purpose of the amendment clearly wasn't to prevent the government from requiring you to maintain the road around your home... right?

This isn't my interpretation, I'm reading what you guys are writing as-is. You're trying to add more context and explanation that wasn't there, weakening (and frankly contradicting) their argument.

It's especially ironic given you're both simultaneously trying to read the amendment so blindly and disregarding the context or purpose (the original purpose emphatically was not to prevent you from having to do a bit of upkeep around your neighborhood), yet somehow you don't like it when your own writing is read literally?
by tpmoney | 2025-11-12 01:49:22+00:00
So to be clear, if Google doesn't include patches, you would rather they don't make bugs they find in software public so other people can fix them?

That is, you'd rather a world where Google either does know about a vulnerability and refuses to tell anyone, or just doesn't look for them at all, over a world where google looks for them and lets people know they exist, but doesn't submit their own fix for it.

Why do you want that world? Why do you want corporations to reduce the already meager amounts of work and resources they put into open source software even further?
by iscoelho | 2025-11-12 01:51:11+00:00
It is my understanding that the commenters in FFMPEG's favor believe that Google is doing a disservice by finding these security vulnerabilities, as they require volunteer burden to patch, and that they should either:

1) allow the vulnerabilities to remain undiscovered & unpatched zero-days (stop submitting "slop" CVEs.)

2) supply the patches (which i'm sure the goalpost will move to the maintainers being upset that they have to merge them.)

3) fund the project (including the maintainers who clearly misunderstand the severity of the vulnerabilities and describe them as "slop") (no thank you.)

This entire thread defies logic.
by baubino | 2025-11-12 01:51:30+00:00
I use cash still and this is exactly what I do with my coins. I have a huge vase that I keep all my coins in. Years ago, I used to convert the coins to bills maybe once or twice per year when the vase filled up now. I use cash so infrequently now (and also usually get change rounded to the nearest dollar) that it’s been several years since the last dump and the vase hasn’t filled up yet.