MurphyA/hacker-news huggingface dataset:
by estearum | 2025-11-24 13:19:11+00:00
... the trade deals had already been agreed to...

Obviously deals expire and can be renegotiated, but what Trump has done is just said "deal is off just because I said so, even ones that I myself previously negotiated and signed!"

Do you like to do business with people who just shred your prior deals when they change their mind? It makes no sense.
by brainwad | 2025-11-24 13:19:14+00:00
> Why would they have customers in the first place if all they offer is reruns

You can ask the same question for cable TV, but it's not dead. Netflix also started as purely "reruns" and was still quite popular.

> Creating and streaming audio is not a comparable business to creating and streaming video, due to the vastly different sums of money, and hence risk, involved.

If anything that extra risk should make studios more shy of investing in new content vs just serving up old hits. It's noticeable that film leans way more heavily on franchises and remakes already, which agrees with this hypothesis?

> That means there is less money available for new audio creators. And this holds true for all rent seeking. If it weren’t for excessive copyright, there could be much more variety in audio streaming.

You assume this, but I really don't think it's true! Most people don't seek out new music; their tastes are set in their youths and then they happily listen to the same music for the rest of their lives. The choice is to make them pay to listen, generating at least some stream of royalties, or let them listen for free, in which case they will be happy to.
by MisTraleuh | 2025-11-24 13:19:49+00:00
Hey folks,

I’ve been compiling all the jailbreak payloads and weird bypass tricks I’ve collected into a single site called Fuck-Jails (I passed 1 year to do it). Right now it ships detailed C and Python cheat sheets (very cursed tricks), and I’m polishing the JS/Ruby/PHP/Bash/C++ sections next (after getting the max review possible about this version)

To be honest, I think you'll not get all the tricks, and learn things

Goal: keep everything lightweight, code-first, and ready to paste straight into prompts/shells without 20 paragraphs of theory. Think offensive payload golfing for every language I can get my hands on. Because when I tried to find somepayload 90% of the times somes people explained the "theory" but impossible to find correctly the payload of to build it. So in this site, you have the payload, and in the next version i'll add the blog sections to explained the "Theorical Payload", but in 2 different way, the docs for all payloads, and the blog for explination

Live demo + repo:

Fuck-Jails — https://mistraleuh.github.io/Fuck-Jails/

Would love feedback on:

• payloads you think are missing in C / Python (I tried my best to get unknow tips, and a code without letter in C i'll come this week),

• gnarly techniques for the upcoming languages,

(If you like the project can you star the project on github ? Love u <3 https://github.com/MisTraleuh/Fuck-Jails )

If you’ve got a favorite obscure payload, let’s trade notes. (I created the contributors page for it)
by ludamn | 2025-11-24 13:19:52+00:00
Thanks for the detailed answer, you hit the nail on the head in terms of giving me the information I was looking for

> The bad stuff comes from expecting 2x the work done with half the people. If the employer gives you time to code properly, read, revise, it's all great.

They made it clear they're expecting former than the latter. In one interview they stated they're building a lean team of elite devs who'll be able to work 12hrs shifts to deliver stuff asap using these Tools, which is why I wanted to see people's experiences of building projects solely with agentic AIs and how they manage to maintain them in the long run
by hocuspocus | 2025-11-24 13:19:56+00:00
I haven't seen separate APNs for RCS here†. Since the iOS support, what "offered by the carrier" means in most the world is only (de)registration through IMS service entitlement. Unlike the Google Jibe / Messages pairing done OTT using an SMS token to check your phone number, which is still the case in a lot of countries. Once the registration established, it's plain data traffic to Google servers.

† Here = "global" RCS, de facto controlled by Google. I haven't checked carrier settings for RCS islands such as the deployment in China or Korea.
by wongarsu | 2025-11-24 13:20:08+00:00
Clap went through some major redesigns with the 4.0 release just three years ago. That wouldn't have been possible if clap 2.0 or 3.0 had been added to the stdlib. It's almost a poster child for things where libraries where being outside the stdlib allows interface improvements (date/time handling would be the other obvious example).

Rand has the issue of platform support for securely seeding a secure rng, and having just an unsecure rng might cause people to use it when they really shouldn't. And serde is near-universal but has some very vocal opponents because it's such a heavy library. I have however often wished that num_traits would be in the stdlib, it really feels like something that belongs in there.
by gsf_emergency_6 | 2025-11-24 13:20:17+00:00
Some of the regulations make sense, like PFAS (correlated with chip manufacturing because HF is needed to etch Silicon and so fluoro-organics make great complements) And they seem to be sincere about it.

https://www.americanchemistry.com/chemistry-in-america/chemi...

As for the Japanese professional classes, environmental issues are always an afterthought. Don't let the "harmonious" design philosophy of the fab fool you..that's tatemae. (Remember Jobs and pancreatic cancer? There's the price to pay for the shiny toys)

I wont be eating from Hokkaido if this pans out (their milk is overrated imho, but the seafood is top)

Maybe I'll get to eat more Austrian millet in the near future..
by seethishat | 2025-11-24 13:20:27+00:00
For context, djb has been doing and saying these things since he was a college student:

While a graduate student at the University of California at Berkeley, Bernstein completed the development of an encryption equation (an "algorithm") he calls "Snuffle." Bernstein wishes to publish a) the algorithm (b) a mathematical paper describing and explaining the algorithm and (c) the "source code" for a computer program that incorporates the algorithm. Bernstein also wishes to discuss these items at mathematical conferences, college classrooms and other open public meetings. The Arms Export Control Act and the International Traffic in Arms Regulations (the ITAR regulatory scheme) required Bernstein to submit his ideas about cryptography to the government for review, to register as an arms dealer, and to apply for and obtain from the government a license to publish his ideas. Failure to do so would result in severe civil and criminal penalties. Bernstein believes this is a violation of his First Amendment rights and has sued the government. After four years and one regulatory change, the Ninth Circuit Court of Appeals ruled that software source code was speech protected by the First Amendment and that the government's regulations preventing its publication were unconstitutional.

Source https://www.eff.org/cases/bernstein-v-us-dept-justice
by janpio | 2025-11-24 13:20:46+00:00
Not accessible for me:

Web sites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for docs.qalam.dev. The certificate is only valid for the following names: *.github.io, *.github.com, *.githubusercontent.com, github.com, github.io, githubusercontent.com, www.github.com Error code: SSL_ERROR_BAD_CERT_DOMAIN
by 71bw | 2025-11-24 13:21:13+00:00
I'm only mentioning this as a potential future divorce topic.

It's not up to debate whether or not I accept cheating because I've already set it as an immovable barrier multiple times: come into sexual contact with anybody else during the marriage and she's going to be thrown out of the window with all of her belongings.

But if she comes to me with honesty and hasn't done anything yet - why would I want to be on bad terms with her as she leaves? I can only be sad at her decision.
by refurb | 2025-11-24 13:21:16+00:00
The correct answer is - all the designs so far aren’t great.

The military would love a smart gun to cut down on accidental discharges. Cops would love it to stop weapons being used against cops.

The issue is that it has to have a very high reliability (you don’t want it to fail to fire while a suspect is shooting at you). And not much point if it only works “sometimes” with unauthorized users.
by potato3732842 | 2025-11-24 13:21:16+00:00
I bet for every example there's a hundred more that are just not registered and or are registered as something else.

It's like machine guns, you're not paying for the hardware. You're paying to not have the state send a squad of thugs to shoot you for not getting permission. People don't want the permission. They want the hardware. So they just get the hardware and keep it on the down low.

Also, everyone in automotive who isn't an OEM or in the emissions racket (i.e. the two groups benefitting) absolutely hates the government and this is exactly the kind of "interesting" vehicle junkyard people would save for their own personal golf cart use. Usually OEMs are super anal about making sure stuff actually gets crushed but they shat out too many EV1s into the world to do a good job of that like they do for prototypes, test mules and other stuff with low double digit production runs if that.
by nacozarina | 2025-11-24 13:22:26+00:00
First encountered Linux via a Yggdrasil CD in '93 while in college. It really did change everything.

Had been using a bootleg copy of SCO XENIX 386 and liked it but hated the fact it was a bootleg. But SCO was like $3000, absurdly unaffordable. We just wanted to be able to own & use a computer without being criminalized or bankrupted.

'The BSDs' also appeared in 93. I tried them all, and initially spent more time with BSDs because I was using SunOS at work. By 96 Linux displaced BSD for my own work, while Solaris remained dominant in my workplace until ~2001.

Linux for my daily driver since 2015. M$ got me off their crazy train with that madcap longhorn/metro hijinx.
by retsibsi | 2025-11-24 13:22:48+00:00
Agreed. I'm a regular user of the BoM website, and from my perspective the old version was absolutely fine. I wasn't one of the people instantly panning the redesign, but after using it for a while I haven't found positives to outweigh the minor annoyance of the change, let alone justify the expenditure. I can totally believe there were some accessibility issues that I was oblivious to, but it's hard to imagine they couldn't have been fixed in a much narrower, cheaper way.

(It was slightly weird that the old website didn't support https -- but on the other hand, I can't really think of a realistic case where that mattered. And I reckon they could have sorted it out for closer to $0m than $100m.)
by humanpotato | 2025-11-24 13:23:06+00:00
Traditionally, lack of demand and the fact that GM was fastidious about keeping them off the road means that they would probably threaten a lawsuit. Electric cars in general have only become popular in the last 5-10 years; the lore of the EV1 has grown accordingly.

Copyright law for art and sculpture requires registration of each design; in searching the copyright records it appears that GM doesn't do this. Really the more appropriate forum would be to get a design patent but those last for only 15 years anyway.

Trademarks must be registered (and also apply to specific categories, though a kit car and production car are in the same category). Surprisngly, "EV1" is owned not by GM, but by Kia (the graphic is different). What this means is you can make the (GM) EV1 logo no problem, and also sell a kit car as something like "inspired by the GM EV1" but if you sell it as an "EV1" then Kia might come knocking.

In short, I don't see much getting in the way of making an EV1 kit car as long as you don't advertise it as a literal GM or EV1 car. Though as stated, you can include or sell separately an EV1 badge that buyers can slap on their own property without issue.
by das_keyboard | 2025-11-24 13:24:27+00:00
Slightly OT, but who is HelixGuard?

The website is a mess (broken links, broken UI elements, no about section)

There is no history on webarchive. There is no information outside of this website and their "customers" are crypto exchanges and some japanese payment provider.

This seems a bit fishy to me - or am I too paranoid?
by robocat | 2025-11-24 13:24:33+00:00
I struggle to understand the metaphor. From link:

The U.S. federal budget is now 50 percent consumed by spending for Social Security, a social insurance program; Medicare and Medicaid, two of the largest health insurance programs in the country; and various other social safety net programs which act as insurance plans as well. Except for one thing. None of these federal insurance programs operate as licensed sanctioned insurance plans as we see in the private sector where money is collected from the individual and invested or managed in a fiduciary manner to build assets to pay for claims in the future.

Voters think they've saved: "I paid my taxes all my life".

But what would it mean for a government to save money over decades?

How else can a government run except on a cash basis?

Aside: I belong to a non-profit health insurance co-op and a non-profit car insurance - they run by matching payouts to premiums and limiting what they cover (e.g. Southern Cross Healthcare is extra healthcare on top of what the NZ government provides). Edit: ooops, I've just noticed my car insurer AMI Insurance which was a mutual insurance company before the Canterbury earthquakes went bust and the government sold it (now part of IAG).
by rsfern | 2025-11-24 13:24:42+00:00
I think this is not quite the right analogy. A better analogy is procedurally generated music, because that’s what model-generated music is. But just like with LLM code generation, the input to the program is natural language (or maybe multimodal image/audio/whatever), and the program is implicitly defined by learning from examples of music.

I think a lot of the issues are the same. Like you might expect the model to go off the rails if you venture away from the bulk of the training distribution. Or maybe the b most effective way to use it creatively is in some kind of interactive workflow revising specific chunks of the project instead of vibe-coding/composing from whole cloth.
by bmitc | 2025-11-24 13:24:52+00:00
What are you talking about?

I can't buy anything overseas anymore. For example, used guitars from Japan used to have free shipping. It's now hundreds of dollars.

I can't buy my cat's medicine from Canada anymore, and the U S. distributor was already price gauging, as the American health system is wont to do.

How is any of this make sense? Nothing prompted this.

The American public got taxed while the rich got tax breaks, and his followers are lapping it up.
by sofixa | 2025-11-24 13:24:55+00:00
> Renault is a small company, not even in the top 10

How exactly is that even remotely relevant? They only sell in select markets, and are killing it in them (best selling EV in the EU, Renault 5). What, if it's not a global behemoth dominating the world, it doesn't count as manufacturing? What exactly is your argument here?

> Within a decade or so COMAC will have a competitive passenger plane, seriously threatening Airbus market share.

Nope. Their own goal is to have, within a decade or so, a fully Chinese plane (their current C919 heavily relies on engines and other critical components from European and American suppliers). Specifically for the engines, they're looking at a comparable to the Leap 1C they were sold by CFM (American General Electric+French Safran joint venture). Those engines are around a generation behind the current best ones (Leap 1A, Pratt&Whitney GTF). In a decade, CFM and Rolls-Royce will have a new generation out, both having new models being tested right now.

So, in around a decade, the Chinese engines will be two generations behind. Efficiency is critical in aviation. And that's just the engines, in a decade Airbus will have a new A320 series replacement out, and Boeing will have one on the way too. And this is just for short to medium haul planes. And both the C919 and the C909 show that it's taking years for production to ramp up to any relevant numbers. Airbus recently opened a second final assembly line in Tianjin for the local market, they wouldn't have done that without being sure they have a market there for at least a decade or more.

> Your entire comment looks at the current status quo, not at the continuous downward trend or the abyss which awaits if Stellantis or VW Group get pushed out of the market by Chinese competition.

This is assuming that the Chinese competition would be allowed to compete on the same terms, which we already know won't happen - both the EU and the US have put in tariffs. And we can see that a low cost Dacia EV is similarly priced to a low cost BYD EV.
by evolve2k | 2025-11-24 13:25:20+00:00
Analysis using BuiltWith shows that the site is coded with PHP, Perl and Java. Smells like real enterprise decisions right there. I’m no expert but I’d be guessing that the Perl is likley the remains coming from the old code base. That’d be fair yeah? Haven’t heard of many people coding websites with Perl in 2025.

https://builtwith.com/bom.gov.au
by lomase | 2025-11-24 13:25:29+00:00
Fixed floating point has been a mistery to me, and to be fair floting point is too. I know digital synths like Virus or Waldorf all used 24 bit fixed point math DSP.

I remember this dps site with lost of c and delphi code, there is where I found what denormals are.

Nowdays I dont see DPS code dealing with denormals. Maybe the CPU does not have to do it in software anymore? I don't really know.
What's the best book you read this year?
by christudor | 2025-11-24 13:25:46+00:00
Looking for some ideas for Christmas...

Mine were: – Caro's The Power Broker – Koestler's Sleepwalkers – Lewis's The Discarded Image – Massie's Dreadnought – Packenham's Boer War – Rose's Intellectual Life of the British Working Classes – Cantor's Civilization of the Middle Ages.
by iso1631 | 2025-11-24 13:26:01+00:00
My ISP provides me with upto 8 ipv4 addresses if I want them. At auction an IPv4 to buy is only $20 each. not $20 a month, $20. Having an ISP rips you off is not mitigated with ipv6, you still have an ISP that rips you off.

I have to put firewall rules in anyway (as I don't want a random device on the internet to be able to talk to my bathroom speaker), so what's the difference?

I get an RTP stream pushed from a source, if I want it on my laptop I dst-nat it to my laptop, if I want it on my desktop I dst-nat it to my desktop, no need to change the destination on the source IP. How would I do that with ipv6 - DNS I guess, if the source supports DNS lookups (some do, most don't)

I also have the advantage of being able to steer outgoing traffic via either my DSL or via my 4g depending on various rules (including source IP, target IP, protocol, src/dest ports, DSCP tags etc). I believe I can do this with NPT on ipv6, same as on ipv4.

But sure, security through obscurity is useful.

In any case I still have to maintain an ipv4 network as some services still won't work on ipv6 only subnets (even with NAT64 and DNS64), so the choice is either having an ipv4 network, or having an ipv4 and ipv6 network.

The former is less work and more secure.
by Ygg2 | 2025-11-24 13:26:10+00:00
> countless articles explaining what should be done instead (e.g. https://kerkour.com/rust-stdx)

Don't make me tap the sign: https://news.ycombinator.com/item?id=41727085#41727410

> Centralized package managers only add a layer of obfuscation that attackers can use to their advantage.

They add a layer of convenience. C/C++ are missing that convenience because they aren't as composable and have a long tail of pre-package manager projects.

Java didn't start with packages, but today we have packages. Same with JS, etc.
by amiga386 | 2025-11-24 13:26:22+00:00
It's very simple.

ECC is well understood and has not been broken over many years.

ML-KEM is new, and hasn't had the same scrutiny as ECC. It's possible that the NSA already knows how to break this, and has chosen not to tell us, and NIST plays the useful idiot.

NIST has played the useful idiot before, when it promoted Dual_EC_DRBG, and the US government paid RSA to make it the default CSPRNG in their crypto libraries for everyone else... but eventually word got out that it's almost certainly an NSA NOBUS special, and everyone started disabling it.

Knowing all that, and planning for a future where quantum computers might defeat ECC -- it's not defeated yet, and nobody knows when in the future that might happen... would you choose:

Option A): encrypt key exchange with ECC and the new unproven algorithm

Option B): throw out ECC and just use the new unproven algorithm

NIST tells you option B is for the best. NIST told you to use Dual_EC_DRBG. W3C adopted EME at the behest of Microsoft, Google and Netflix. Microsoft told you OOXML is a valid international standard you should use instead of OpenDocument (and it just so happens that only one piece of software, made by Microsoft, correctly reads and writes OOXML). So it goes on. Standards organisations are very easily corruptable when its members are allowed to have conflicts of interest and politick and rules-lawyer the organisation into adopting their pet standards.
by faidit | 2025-11-24 13:26:50+00:00
It can also be dangerous to be the person who blames execs. Other execs might see you as a snake who doesn't play the game, and start treating you as a problem child who needs to go, your actual contributions to the business be damned. Even if you have the clout to piss off powerful people, you can make an enemy for life there, who will be waiting for an opportunity to blame you for something, or use their influence to deny raises and resources to your team.

Also with enterprise software a simple bug can do massive damage to clients and endanger large contracts. That's often a good reason to follow the Chesterton's fence rule.
by dns_snek | 2025-11-24 13:27:11+00:00
> shouldn't these symptoms have been there all your life, not just 6 months prior

Yes. If you're getting diagnosed as an adult the general guidelines are that symptoms should be clearly traceable to teenage years and the earlier it is, the stronger the evidence is.

People experience ADHD-like symptoms later in life for any number of reasons, like anxiety and stress at work, home, or school. That's one of my peeves with how short the diagnostic process seems to be in certain countries (US and UK specifically), they don't seem to be particularly thorough when it comes to those things.
by thaumasiotes | 2025-11-24 13:28:19+00:00
> Either you have stumbled on something that is not taken seriously, or you are misunderstanding the consensus.

I'm not sure you have a good grasp on the meaning of the word "recent". A recent theory, by definition, must differ from the consensus.

> There is no credible theory to that effect.

https://www.biorxiv.org/content/10.1101/2024.03.13.584607v2

Granted, they don't say "Finland". They say "the northeast along the Baltic coastline".
by mentos | 2025-11-24 13:28:22+00:00
Reminds me of ids policy of "As soon as you see a bug, you fix it"

"...if you don't fix your bugs your new code will be built on buggy code and ensure an unstable foundation and if you check in buggy code someone else is going to be writing code based on your bad code and well you know you can imagine how wasteful that's going to be"

16:22 of "The Early Days of id Software: Programming Principles" by John Romero (Strange Loop 2022) https://www.youtube.com/watch?v=IzqdZAYcwfY&t=982s