MurphyA/hacker-news huggingface dataset:
by Arubis | 2025-11-13 14:41:28+00:00
I like the idea of AirgapOS; "just turn off the network" has always felt a little dissatisfying.

That said, if you're already in the GnuPG ecosystem, https://incenp.org/notes/2015/using-an-offline-gnupg-master-... will cover you for pretty much everything here except the mnemonic backup using baseline tooling. I presume you can get a shell utility to pipe your key in and get that mnemonic version out if you'd like.
by ferguess_k | 2025-11-13 14:41:50+00:00
Yes, it's all about control. Control the platform. Control the access to the platform, and the world is your oyster. And the political and legislation system are their friends. It is the establishment.

The only way to fight is to indoctrinate the next generation, at home, and in school, to use FOSS. People tend to stick to whatever they used in childhood. We the software engineers should volunteer in giving speeches to students about this. It is much easier to sell ideologies to younger people when they are rebellious to the institutions.
by aboringusername | 2025-11-13 14:42:42+00:00
It absolutely has everything to do with this new law. For the first time, depending on when Google releases source code, or releases a Pixel update, the timer (4 months for security, 6 months functionality) starts. This has never existed before in Android OS' history that updates are timed (in law) according to Pixel updates/software updates or open source releases. This law also applies to Apple but they will have no problems as they are compliant anyway as they control software/hardware entirely and it's closed source.

This is the entire reason AOSP went private/closed source, and why Google is delaying security patches as per GrapheneOS. The March 2026 patches are already released by GrapheneOS as closed source blobs. They are not allowed to release them as open source by embargo (essentially NDA). Why do you think Pixel hasn't shipped security patches earmarked for March 2026? There are some critical bugs those patches fix, why not release them today, right now or next month? Because if Pixel releases just a single patch, via a Pixel update or posts it on AOSP, the 4 month timer begins for every single OEM with a phone in the EU. By making the patches under embargo, Google gets to control exactly when the timer starts to coordinate with their OEMs. So the slowest OEM gets to control the entirety of Androids security model.

Ask yourself, why doesn't GrapheneOS just release their patches publicly/open source? Why have different 'security releases' with closed source blobs?

Because if they did:

1: They lose their partner OEM access to these patches

2: Every OEM would be required to release those same patches 4 months to the day GrapheneOS releases them.
by AdmiralAsshat | 2025-11-13 14:43:47+00:00
Me, too. I've been meaning to upgrade my HTPC for years, but I kept holding off because I had hoped that NVIDIA would release a new ShieldTV (the last one used the same chip as the Switch, so the community had quietly hoped that the Switch 2's release would coincide with a new Shield--no such luck). Assuming the Steam Machine is reasonably priced, I could easily see it also becoming my new Kodi box when not gaming on it.
by paulwilsonn | 2025-11-13 14:43:48+00:00
We recently launched CapitalReach.ai - https://capitalreach.ai We built it to make fundraising easier for founders, it uses AI to help you:

1. Find and match with the right investors automatically 2. Personalize and automate outreach campaigns 3. Track investor responses and manage your fundraising pipeline in one place

The goal isn’t to replace the hustle, just to remove the repetitive parts so founders can focus on building relationships.

Would love honest feedback from fellow founders and investors here:

Does this solve a real pain point for you?

What feels missing or unnecessary?

How do you currently manage investor outreach today?
by krapp | 2025-11-13 14:43:52+00:00
The issue is confused because of Javascript and the trend to consider Javascript "bytecode for the web" because it is primarily "compiled" from other languages, rather than being considered a language in its own right.

I've gotten into arguments with people who refuse to accept that there is any difference worth considering between javascript and bytecode or assembly. From that perspective, the difference between a "transpiler" and a "compiler" is just aesthetics.
by wongarsu | 2025-11-13 14:44:11+00:00
> DB was dreadful and the stations were in an awful state of repair

DBs state is probably too unique to draw any conclusions (attempted privatization stopped just before IPO, so now it's lot of different state-owned private organizations with degraded infrastructure). But the stations are actually fairly straight forward: the platforms and the means to get there are still publicly owned, but 80% of the station buildings have been sold off to private operators. The bigger ones are glorified malls that are exempt from laws about shopping hours, the smaller ones mostly just decay
by tzs | 2025-11-13 14:44:48+00:00
> Most of what you think you are seeing at any moment is only imagined

For some great illustrations of this I recommend people take a look at the Nova episode "Your Brain: Perception Deception" [1]. Nova episodes usually are only available to watch for free for a couple months after they air, then you have to be a PBS contributor, but occasionally old episodes become temporarily available. This one happens to be available now, with the video embedded at the link I gave.

The whole thing is worth watching, but for the material most directly relevant to this you can start at the 7:13 minute mark, where it briefly discusses a well known optical illusion and why it works, and then looks at the question of if you brain can fake your perception so much to make that illusion work, just how much of what you see in normal scenes is real? Then they go into how you only have about 1 degree of high resolution vision at the center.

A couple minutes after that there is a demo showing an interesting way to exploit that. They put the host in an eye tracker that can figure out where she is looking. Then they have her read some text on a monitor and she has no trouble reading. But when the camera shows us the monitor we see that almost the text is just the letter 'X' with small groups of letters briefly switching to other letters and then going back to 'X'.

When we read our eyes don't smoothly scan the text. They actually look at a fixed point for a moment, then jump to another fixed point, and so on (the "saccades" mentioned in the above comment). This isn't just when reading. This is how we look at everything.

She can read the text because the eye tracker is figuring out where she is looking a the software shows the real text there. As soon as her eyes jump that text goes back to 'X'.

When we look at the text and aren't looking exactly where she is we might detect the change to normal text where she is looking but we can't read it because most of the time it will be outside of the small high resolution center of our vision. By the time we can move our eyes down to it her eyes have jumped and that text is back to 'X'.

We don't consciously control the jumps so we can't sync ours to hers, so at best all we can hope for is to occasionally get lucky and maybe get a couple words now and then.

[1] https://www.pbs.org/wgbh/nova/video/your-brain-perception-de...
by rkozik1989 | 2025-11-13 14:44:56+00:00
Generally speaking, humans are more often than not the weakest link the chain when it comes to cyber security, so the fact that most of their access comes from social engineering isn't the least bit surprising.

They themselves are likely to some extent the victims of social engineering as well. After all who benefits from creating exploits for online games and getting children to become script kiddies? Its easier (and probably safer) to make money off of cyber crime if your role isn't committing the crimes yourself. It isn't illegal to create premium software that could in theory be use for crime if you don't market it that way.
by troyvit | 2025-11-13 14:45:00+00:00
It depends on the crime though right? This was all legacy data and from the description the worst thing they got was contact information that's five years older or more ("internal operational documents and merchant onboarding materials at that time.").

For that level of breach their response seems about right to me, especially waving the money in ShinyHunters' face before giving it away to their enemies.
by williamdclt | 2025-11-13 14:45:43+00:00
Mostly repeating what others have said but...

Trains get delayed and cancelled very frequently. They leave you stranded in the middle of nowhere because there's a technical issue fairly regularly: it's not a daily occurrence, but it's frequent enough that people will just go "ahhh classic british rail".

Trains are often packed, with literally nowhere to sit for hours-long journeys.

And this poor quality of service is very expensive. I know adults in their late 20s - early 30s with a fulltime job that choose to take the coach even though it's twice as long, because it's much cheaper. An ex-colleague was living outside of london, and spending £16k a year on train for commuting (you'd expect a big bill, but £16k is insane).

I'm sure there's plenty of countries that do worse, and as an infrequent traveller you'd probably be fine, but it's just... not great
by brianwawok | 2025-11-13 14:46:30+00:00
The thing is. Crypto was crap. It was never going to revolutionize the word and generate billions of dollars of value. It’s like a decentralized bank with the good and bad that comes along with that.

AI can actually revolutionize the world. The best outcome of all these bets are bonkers. If one company can land it and everyone else fails, it’s trillions. I’m less optimistic what happens if 10 companies all have AI models with roughly similar performance. How much can they charge?
by FatalLogic | 2025-11-13 14:46:32+00:00
FAQ: Is it opt in? Yes, they are saying.

>You can continue using Firefox as you always have for the most customizable experience, or switch from classic to Private Window for the most private browsing experience. And now, with AI Window, you have the option to opt in to our most intelligent and personalized experience yet — providing you with new ways to interact with the web.
by dbspin | 2025-11-13 14:46:55+00:00
Digital foundry have confirmed it supports 4K/120 VRR. It's actually beyond the HDMI 2.0 spec, but not listed as 2.1 as it misses out on some obscure features of the spec. Doubtful you'd get 4K 120p on too many contemporary titles with this hardware configuration though.
by panick21_ | 2025-11-13 14:47:46+00:00
This isn't really true, running things in the government also cost a huge amount of opex. Sure you do get one time payment and the resulting company will have to be hired but it will usually also have to start to compete. This could potentially result in more or less opex.

Running an airline just so you don't have opex seems a bit silly to me for example.
by kotaKat | 2025-11-13 14:48:40+00:00
I don’t have any personal links but know that there is a constant cat-and-mouse game of cracking Widevine devices for their L1 keyboxes and using them on high-value content (as mentioned).

That’s why a lot of low end Android devices often have problems playing DRMed content on the Web: their keyboxes got cracked open and leaked wide enough for piracy that they got revoked and downgraded down to L3.
by blessedwhiskers | 2025-11-13 14:49:08+00:00
That assumes every LEO, bodega, grocery store, etc. goes out and buys the terminals to read these things though. Assuming LEOs you encounter will never just say "sorry, my reader is broken, go ahead and unlock your phone so I can bring it back to my car and type in your info to look up your license" feels naive, especially for folks with darker skin tones.

I agree it's possible to present your ID without unlocking your phone, but is it likely?
by veunes | 2025-11-13 14:49:36+00:00
"$50 billion investment" is classic "press release capital," not actual cash in a bank account. Anthropic isn't sitting on a mountain of cash. This is most likely a multi-year "commitment," funded by future investment rounds, debt financing, and possibly large pre-payments for cloud capacity from their investors, and it's a signal to competitors and the government about their ambitions, not a real $50B expenditure happening today
by al_borland | 2025-11-13 14:49:41+00:00
Jeff Bezos once talked about how his job depends on the quality of his decisions. He might not make very many decisions, but they are very high impact. Delegating this high-impact decision making to AI, which often makes random low-quality decisions, sounds like a bad idea.

The CEO also needs to sell those decisions to the organization to get buy-in on the vision and carry it out. How inspired will the organization be by the direction of an AI? No one in an organization will care about this stuff more than the CEO (if they are decent). An AI can’t care, so why would anyone else?
by xpe | 2025-11-13 14:49:45+00:00
> Both OpenAI and NYT are bad.

Both -1 and -1,000,000 are negative numbers.

We need to be careful and mindful of our framing. Saying "X is bad" is a drastic oversimplification and not necessarily useful. Pointing at any one company and saying "bad" doesn't move the needle much in terms of figuring out how to steer us towards better outcomes. For that, we have to identify incentives and understand motivations.
by faidit | 2025-11-13 14:49:53+00:00
The New Economic Policy in Soviet Russia (1921) and Deng Xiaoping's reform and opening up in China (1980s) both saw privatizations and significant economic improvement. But those were corrections of rare cases of having way too much (ie, near-absolute) state control, where even stuff like private barbers had been illegal. That said, in the case of Russia of course, wider privatization in the 1990s was disastrous in many ways
by pm215 | 2025-11-13 14:50:05+00:00
Mmm, presumably big infrastructure projects like HS2 don't count as "operational" expenses. (Personally I put the huge costs of HS2 down to our complete inability to build anything in a reasonable timeframe and budget, rather than to privatisation in particular. The usual ludicrously long and extended consultation/legal objection/appeal process plus political meddling in the specification plus other stuff all factor in here.)
by watwut | 2025-11-13 14:50:08+00:00
At the time Google created a search engine, they were not showing the data themselves, they were pointing to where those are. When they started to actually print articles themselves, they got sued. Showing where the thing is and showing content of the thing are two different actions.

So, when google did the same thing, there were complains.

> Why is nobody complaining about Google scraping their sites?

And second, search engines were actually pretty gentle with their sites scrapping. They needed the sites to work, so they respected robots.txt and made sure they wont accidentally DDoS sites by too many requests. AI companies just DDoS sites, do not respect robots.txt and if you block them, they will use another from their infinite amount of IPs.

Otherwise said, even back then, Google was kind trying to be ok non evil citizen. They became sociopathic only much later and even now kind of try to hide it. OpenAI and the rest of AI companies are openly sociopathic and proud of damage they cause.
by RobinL | 2025-11-13 14:50:41+00:00
Salaries don't tend to be strongly correlated with bad working conditions or stress. In most industries (like software development) it's just supply and demand, and I imagine there are more people willing and able to work for £65k as a train driver than as a software developer. It's a bit different for train drivers because of the strong unions; my guess is that explains their high salaries more than lack of supply.

(Median total reward for TOC train drivers is £66,043) https://www.orr.gov.uk/sites/default/files/2022-10/review-of...
by aborsy | 2025-11-13 14:51:08+00:00
It’s not because WoT necessarily doesn’t work, but people simply don’t need to verify digital signatures. Whatever needs to be done is done internally by apps.

Dark web runs on PGP. People with no technical knowledge use it. Nobody has broken their communication. Not that this is a good use case, just saying bums can use PGP too!

The biggest use case is currently software signing. Like you would verify a master key for a project under TOFU model, once through several channels. From there, verifying software signed by keys signed ultimately by that master key is done easily and securely.
by omarmahdi | 2025-11-13 14:51:14+00:00
We have raised a $165k pre-seed from angels to build the world's first 'web engine', the game engine for web dev!

Instead of a 100 fragmented tools, we are working to vertically integrate the web dev stack in a powerful GUI, with AI at the center.

Vertical integration will allow a 10x jump in developer experience, and will greatly increase AI capability. Imagine simply asking your AI agent "check prod logs of auth service for any bugs".

On top of building a new class of dev tool, we are re-imagining web dev with new 'interfaces'. Code and terminals are not ideal for everything. Some tasks are best seen as forms, others as graphs, others as node editors, and so on.

Just as a game engine gives you custom tools for each aspect of game dev, we are creating new interfaces for each aspect of web dev, and giving AI access to all of them.

Our beta is coming soon, so put your email on the website to get notified!
by 0ct4via | 2025-11-13 14:51:29+00:00
> It's not a stressful job

Ignoring the tremendous amount of route training, rules, regulations, etc. — plus if they're delayed (generally through no fault of their own), they're worrying about the per-minute fines levied for delays to the service, and whether they can make the time up. That aside,

— try reporting that comment to any driver who has suffered a fatality... someone appearing on the tracks in front of them and there is no way whatsoever for them to stop in time.

Many drivers end up having to give up their careers after experiencing a "one-under", and don't get back into the cab.

It can be a lot more stressful than you think.
by theoldgreybeard | 2025-11-13 14:52:06+00:00
I really only use LLMs for coding and IT related questions. I've had Claude self-correct itself several times about how something might be the more idiomatic way do do something after starting to give me the answer. For example, I'll ask how to set something up in a startup script and I've had it start by giving me strict POSIX syntax then self-correct once it "realizes" that I am using zsh.

I find it amusing, but also I wonder what causes the LLM to behave this way.
by mschuster91 | 2025-11-13 14:52:10+00:00
> But then they timed their strikes for the Xmas season in order to maximise the suffering and economic damage it would cause.

Well, that's the point of going on strike. Don't blame the drivers, blame the rail company.

> It's not a stressful job

It actually is, there aren't that many jobs where you are literally responsible for hundreds if not nearly a thousand (ICE-4 has 918 seats alone plus probably 100-200 standing people) lives behind your seat. Even your A380 has only half of that as capacity. The only comparable job is being captain of a cruise liner ship.

> I am increasingly convinced that the second part of making rails great again, after putting rail companies in their place is driverless trains.

Driverless trains in practice only work on a closed system with no at-grade crossings of any kind. There's a reason we only see them in "peoplemover" style systems or in subways that usually have full-height doors preventing unauthorized access.

The only actual full-size railway running ATO is the Rio Tinto ore train in Australia... with large sections of the 800 km long drive having the advantage of being in the utter desert with no one and no thing besides kangaroos posing any sort of danger to the train.
by unionpivo | 2025-11-13 14:52:31+00:00
>As a gamer, why would you want to spend a few hundred bucks on a gaming box, when it isn't able to play the biggest hits? Who would want to deliberately limit their ecosystem to indie games?

???

Look at steam top 100, sure there are 2 or 3 games you wont be able to play on there, but there rest work just fine. And sure there are popular games outside steam, but even if none of them worked (which is not true), for most gamers its a non issue. (And Valve is probably not really concerned about them)

The only games this limits are online competitive (most of the time FPS) games. There are plenty of gamers, myself included, that have 0 interest in such games.

In short even if 0 online FPS games are playable on steam console(which is not true), there are still 10s of millions of gamers, who wouldn't care.

As far as why wouldn't people pick something that can play 100% of games is because they cant. Even the best PC cant play Nintendo games, not all PS games are on PC or xbox, etc. You always have a trade off. And plenty of people still buy PC's,Deck, PS5's and Switch consoles.

My guess id more people won't buy it because, they want better specs, not because a few games wont work on them.

But that still leaves millions, potentially tens of millions of people.
by mytailorisrich | 2025-11-13 14:52:34+00:00
Exactly.

Why are millions of young adults suddenly unable to work for health reasons?

Either there are real health issues and then this should be an emergency situation to find and address the causes, and this proposal is totally inadequate.

Or there are no serious health issues (which, indeed sounds more plausible) and this proposal misses the point and is a waste of money. Real underlying causes of the situation should be identified and addressed nevertheless. Cynically, we can notice that this keeps the official unemployment rate low since people "economically inactive" do not count, and we can wonder what would happen if those 3+ million were suddenly to look for work...
by torginus | 2025-11-13 14:52:50+00:00
I personally think $90 per year is reasonable and not 'milking' - I don't think it's large enough to suspect Apple making bank on this, but does represent a certain level of commitment from a dev and prevents users from spamming developer accounts.

The only scenario in which I think it's excessive is broke student devs, not sure if there's a scheme to waive the fee for them.

Not allowing regular folks to run unsigned apps is something I also agree with -though I would love if Apple allowed us to trust third-party root certs so that apps would be both signed and free of Apple's control.
by op00to | 2025-11-13 14:53:04+00:00
It shouldn't, and yet for me it seems to make a difference! I don't think it's placebo, because I am really losing weight. My anecdata: When I start with a particular dose of GLP-1, I inject in thigh. I get strong appetite suppression, heart rate increase, digestion slow down etc. After some time, the effect decreases as my body adjusts. I then move injection to abdomen, and I get a huge bump in suppression, systemic effects, etc. No idea why this happens, but I've seen it with Zepbound and 5, 7.5, and 10mg. It's allowed me to stay on each dose for far longer than my doctor expected.
by mikemcquaid | 2025-11-13 14:53:11+00:00
I don't think I am a dick, I guess that went without saying.

I'll take critique from other maintainers who have done as much or more open source work for similar returns over similar time periods. Funnily enough, I'm friends with many, and they are supportive the vast majority of the time instead of critical. Maybe that's because they can relate and you cannot.