MurphyA/hacker-news huggingface dataset:
by ErroneousBosh | 2025-11-24 18:11:10+00:00
> I remember this dps site with lost of c and delphi code, there is where I found what denormals are.

musicdsp.org?

> Fixed floating point has been a mistery to me, and to be fair floting point is too. I know digital synths like Virus or Waldorf all used 24 bit fixed point math DSP.

If you imagine scaling a 16-bit value for like a volume control from 0 to 1, then you'd have maybe 32767 for maximum positive, and -32768 for maximum negative. You could convert those to floats, multiply, and convert back to a 16-bit integer.

But you don't want to use floats, you want to keep it all integer. So you make the volume range be from 0 to 255, and multiply your 16-bit value by that. Now you've got a 24-bit value, with a "binary point" between bits 7 and 8. Now the output is way off scale for the 16-bit DAC but if we chop off the fractional part by just shifting the result of the multiply left 8 bits, you've now got your volume control.

Some DSPs will actually do a 16 bit by 16 bit multiply which just discards the lower 16 bits of the result, with the assumption being that both 16-bit values mean "-1 to 1".
by legitster | 2025-11-24 18:11:33+00:00
One thing to keep in mind is this is also the expected trend of an aging population. Retirement is a relatively new concept in human history, and the peak of our retirees as a percentage of our population is happening right now.

Retirees now make up 27% of our population. By nature they report very low incomes and also very low spending. They also happen to be sitting on large amounts of wealth. Which is why you get some paradoxical results when trying to analyze the health of our economy - your age is an even stronger predictor of how you feel about the economy than your income!

The retiree boom does not cause inequality - but it exacerbates it. It emphasizes the glut of money on the market and inflated asset prices. And especially things like healthcare and housing costs.

Ironically, the one thing that would save us would be increasing the share of working age families through immigration.
by babl-yc | 2025-11-24 18:11:57+00:00
Arxiv should just retire "is all you need" in the title. Block the post and make them come up with something new. Anything.

Same for YOLO "versioned" models. People just claim they come up with "YOLO-v15" as if it was their trademark to version.

Luckily "web3" burned the idea of branding some technology as a version of the entire internet...
by da_chicken | 2025-11-24 18:12:11+00:00
You can't be serious. "The standard was adopted, therefore it must be able to be implemented in any or all systems?"

NIST can adopt and recommend whatever algorithms they might like using whatever criteria they decide they want to use. However, while the amount of expertise and experience on display by NIST in identifying algorithms that are secure or potentially useful is impressive, there is no amount of expertise or experience that guarantees any given implementation is always feasible.

Indeed, this is precisely why elliptic curve algorithms are often not available, in spite of a NIST standard being adopted like 8+ years ago!
Show HN: Raspberry Pi Monitoring with Gemini-CLI
by SencerH | 2025-11-24 18:12:35+00:00
One day a friend mentioned he wanted a monitoring system for a few Raspberry Pis. I looked around online for about 5 minutes but couldn’t find anything that matched what I had in mind. So I decided to try “vibe coding” and make it a project. In about 3 days (roughly 15 hours total), I built a prototype just by chatting with Gemini-CLI. After that, I added some improvements for fun and brought it to its current state. Right now both my friend and I are using this project at home. Hopefully it’ll be useful for you too.
by timschmidt | 2025-11-24 18:13:11+00:00
> What part of the paper you're describing instructed implementers of the TLS Heartbeat extension to copy data into an uninitialized buffer and then transmit it on the wire?

That's a very easy question to answer: the implementation the authors provided alongside it.

If you expect authors of exploits to clearly explain them to you, you are not just ignorant of the details of backdoors like the one in XZ (CMake was never backdoored, a "typo" in a CMake file bootstrapped the exploit in XZ builds), but are naive to an implausible degree about the activities of exploit authors.

Even the University of Minnesota did not publicly state "we're going to backdoor the Linux kernel" before they attempted to do so: https://cyberir.mit.edu/site/how-university-got-itself-banne...

If you tell someone you're going to build an exploit and how, the obvious response will be "no, we won't allow you to." So no exploit author does that.
Show HN: An AI Agent with Hysteresis-Based Personality Evolution (Python/Gemini)
by tarocha1019 | 2025-11-24 18:13:35+00:00
I built an AI companion that implements *state stability and persistent persona evolution*—the next step beyond simple RAG or chat history.

The system uses Python/Flask and Gemini to manage a *multi-dimensional personality state* (Tsundere, Yandere, etc.) that evolves over time.

### Core Technical Challenge & Solution:

1. *State Stability (Hysteresis)*: We prevent the persona from "flipping" instantly based on one message by introducing *inertia* (requiring 2x the score difference to change an established personality). 2. *Affection Scaling*: The emotional depth (Affection Level) scales infinitely, leading to complex state shifts over long interactions. 3. *Efficiency*: All logic runs within a single, cost-optimized API call.

### I'm looking for technical critique on:

* *Architecture*: Are hard margins (10-point difference) for stability the best approach, or should this be solved with a purely ML-driven method? * *Safety & Alignment*: How to maintain the provocative nature of personas (like Yandere) while adhering to strict safety boundaries.

GitHub Repo: [https://github.com/EMMA019/Evo-chat]
by phantasmish | 2025-11-24 18:13:36+00:00
The concept of “political fiction” exists and is important, yes, but we need not confuse it for reality.

[edit] I think I’ve used the wrong term here but I think I get the idea across. There are diplomatic lies maintained in many situations where everyone largely operates like it’s not true, and the situation with Taiwan is so quintessentially one of these that’s it’s a common first example to illustrate the point. In my defense it’s been a loooong time since my last international relations class.
by ElhamAryanpur | 2025-11-24 18:13:37+00:00
Author of Astra here, loved seeing all the responses here. It wasn't planned to be anything beyond internal usage, but you are correct that I should have been more clear on the description and naming. In any case, it is far from production level.

For those wondering, it is not a Lua implementation, rather wrapping over available Rust crates with Lua bindings and packaging everything into a single binary to be used. It is the way it is because our CI was spending a lot of time compiling our Rust servers, so this was made to speed up development for simple to mid complexity servers. And since then grew to have more functionality.

Naming wise it is true that it is confusing with Astro and other similar naming projects I agree. Name suggestions are welcome!
by claw-el | 2025-11-24 18:14:07+00:00
> Also, I tend to attack bugs by priority/severity, as opposed to difficulty.

This is one part that is rarely properly implemented. We have our bug bash days too, but I noticed after the fact that maybe 1/3 of the bugs we solved is on a feature we are thinking of deprecating soon due to low usage.

How can we attack bugs better by priority?
by limagnolia | 2025-11-24 18:14:11+00:00
Honestly, it is a difficult case. The consumer is obviously on the higher end of wealth here, booking a premium hotel suite for an expensive event.

Then, the consumer criticizes those of us that enjoy backpacking as not being "adults". This one really got me.

The concept that advertised prices that are genuine mistakes are generally not enforceable is a well established concept in many jurisdictions.

With that being said, I do believe that honoring ones advertised prices, even when they are mistakes, unless it would be egregious or impossible to do so, is generally a better way to do business.

But will this story prevent me from using a convenient and less expensive platform for booking cheap, bottom barrel hotels, for those of use who aren't "adults"? Probably not.
by bluGill | 2025-11-24 18:14:21+00:00
Even then the backdoor should be on their government device and not the personal devices.

Note that having their personal device when doing government work should be prohibited (that is you can't have it in your pocket when working). As is using your personal device for anything government (other than a formula check your government device call/text - employees should be regularly tested that they report any government communication that doesn't follow the formula)
by rwmj | 2025-11-24 18:14:32+00:00
I watched a fascinating documentary about EncroChat (https://www.channel4.com/programmes/operation-dark-phone-mur...). It was obvious the police absolutely loved having this real time feed into criminal communications, and thought "let's have more of that please". They don't realise the consequences are that criminals won't use such forms of communication once they know they're backdoored.
by soco | 2025-11-24 18:14:57+00:00
Getting into the medical school and staying there for so many years until you can support yourself means also a huge investment from the family. Now, what is the culture saying about this? Would you keep your kids on your paycheck until they're almost 30, or you throw them out to get a job as soon they're 16? And of course, can the kids already afford to be independent and support themselves when they're 16 (aah sweet liberty fuck those geezers)? These are I believe other major contributing factors in western societies.
by Voultapher | 2025-11-24 18:15:03+00:00
What a waste of time article. There is plenty of debunking of the points already so I won't repeat them.

Yes C++ has many many issues, and yet most of the biggest most complex software systems in existence are written in it. I don't see the browsers, OSs, DAWs, AAA games etc. being implemented in Go. Rust is a real improvement for these areas, with a proven track record of making software more reliable and maintainable.

If the author intended to say "Rust is not the best programming language for every problem" they should have said that but it would have been worth an article as much as "Screwdrivers are not the best hammers".
by hinkley | 2025-11-24 18:15:27+00:00
> bun_environment.js is a highly obfuscated malicious JavaScript file. It is over 10MB in size and contains a significant amount of built-in logic for information theft.

That seems a bit silly. Even on the beefy boi I used to work on a 10MB hiccup in deployable size would have been sufficient to make me look.

I released one of the packages I work on last night so of course this drew my eye. I assume checking the unpacked size hasn’t gotten ridiculous confirms that your code is not infected yeah? And looks like it’s past time for me to set up a separate account for release management.
by brycewray | 2025-11-24 18:16:43+00:00
In an announcement[0] earlier this year, Cloudflare essentially put Cloudflare Pages on life support and began advising potential CFP users to build sites on the newly enhanced Cloudflare Workers platform instead.

I later wrote about this, particularly as it related to Hugo users.[1][2]

[0]: https://blog.cloudflare.com/full-stack-development-on-cloudf...

[1]: https://www.brycewray.com/posts/2025/05/pages-workers-again/

[2]: https://www.brycewray.com/posts/2025/07/hugo-sites-cloudflar...
by jmyeet | 2025-11-24 18:16:54+00:00
I can understand you thinking that and there's probably some truth to it but do I consider Android and iOS compromised with government backdoors? No. What do I base this on? The lucrative black market for Android/iOS 0days.

And who's buying them? Generally, state actors, directly or indirectly. There is an entire ecosystem of Israeli "security" companies that exist to farm out these exploits. This is a big part of why Israel is such a key component of the American national security infrastructure. Israel is largely beyond the jurisdiction of American courts and any kind of direct scrutiny by the government.

It's a bit like how the US isn't (technically) allowed to spy on US citizens. How do they get around this? By farming out such activities to allied intelligence services, particularly Five Eyes members.

This entire ecosystem and marketplace just wouldn't exist if Android or iOS were fully backdoored.
by Etheryte | 2025-11-24 18:17:26+00:00
Upgrading once a month is insane at any rate, I could see the point in upgrading maybe once a year. For stable projects, you're very much fine upgrading only when there's a vulnerability or you need something from a newer release. Upgrade when you actually need to and use stable versions that have been out for a while, no need to hamster wheel it.
by StopDisinfo910 | 2025-11-24 18:17:32+00:00
I have no interest in censoring the comment (what?). That’s nearly as far fetched as people calling renaming branches brain washing and propaganda.

It’s a rhetorical flourish pointing that in my opinion most people here are actually change averse, a trend which I personally notice more and more here.

I have no sensibilities. I am neither American nor interested in American politics. I am however deeply convinced that people having strong opinions about the names of branches have issues. An opinion I apply equally to people strongly advocating for the change and to people strongly against the change.
by bigbadfeline | 2025-11-24 18:17:45+00:00
> presumably they're not cartoon villains that support the bad guys for fun.

It's not about personalities, Mussolini was split between calling his dictatorship "fascism" and "corporatism", and getting there requires a number of steps which include international conflict and war as essential parts.

> Are they paid off, compromised, or what?

Both plus brainwashed, same as "the bad guys".
by dghlsakjg | 2025-11-24 18:18:02+00:00
She didn't have every intention of cancelling.

She had an intention of cancelling that was exactly 50%. In other words, she fully intended to use the booking, until she found out that it wasn't fit for her purposes, at which point she exercised the cancellation option that they charge more for.

If I pay extra for a refundable hotel booking option knowing that there is an equal chance of me using it or cancelling it, I don't think it is fake, it is simply uncertain. When I exercise an option for service that has been sold to me, I certainly don't consider that to be a nuisance. She was playing by their terms and conditions.

Given that they don't define what a "fake" or "nuisance" booking is in their terms and conditions, it is perfectly fine to argue that a booking made with an uncertain, but genuine, intent to use the service is neither "fake" or a "nusaince", especially given that cancellability is prominently advertised as a feature of the booking. What possible other purpose would offering cancellability serve if not handling uncertainty in travel plans.
by x0x0 | 2025-11-24 18:18:24+00:00
The first paragraph basically explains:

> Meta Platforms is building a $27 billion data center in Louisiana, financed with debt, and neither the data center nor the debt will be on its own balance sheet.

The rest discusses the details of (what appears) to be quite aggressive choices, which fundamentally are about lying: it's (per the article) functionally Meta's debt, but magically not on Meta's books.

It sure feels like this will not end well.
by aw1621107 | 2025-11-24 18:18:37+00:00
Oh, I hadn't heard that you guys are looking at Zig-style "targeted" compilation (for lack of a better phrase). That sounds like it entails quite a bit of infrastructure work. Is there a GitHub issue I can follow to keep an eye on progress?

Out of curiosity, have there been any interesting pondered/proposed avenues for speedup that were rejected because they would result in too much breakage, violate a core tenant of Rust (e.g., require a runtime to be usable) or other reason that is "inherent" to Rust?
by strcat | 2025-11-24 18:18:44+00:00
France has threatened us with the same actions they took against SkyECC and Encrochat if we do not cooperate by providing law enforcement access into devices. The actions they took against those were mass arrests and seizure of servers. We don't have cloud infrastructure for builds/signing but regardless we don't want the French state taking over our website, etc. so we're leaving France and OVH.
by Fnoord | 2025-11-24 18:18:49+00:00
Example of a neonazi who isn't white [1]. The Believer (2001, with Ryan Gosling) is a decent fictional movie about how this could work [2], and I also liked Rompen Stomper (1992, with Russell Crowe) [3] and La Haine (French for 'the hate', 1995, with Vincent Cassel) [4] about the phenomenon in general but there's likely more recent, good material as well as non-fiction available. I also had a colleague student who was IMO racist, but he was himself what we in NL call halfbloedje (in this case: mother black, father white, divorced).

[1] https://en.wikipedia.org/wiki/Michiel_Smit

[2] https://www.imdb.com/title/tt0247199/

[2] https://www.imdb.com/title/tt0105275/

[3] https://www.imdb.com/title/tt0113247/
by runjake | 2025-11-24 18:18:52+00:00
> how do we know GrapheneOS itself isn't a honeypot? It's run by a mystery org

No, it's run by a non-profit foundation whose records are public, along with their board of directors who are real people with a paper trail.

It's not some LLC shell company with a fictitious agent listed.

https://ised-isde.canada.ca/cc/lgcy/fdrlCrpDtls.html?p=0&cor...
by exasperaited | 2025-11-24 18:18:59+00:00
Good news:

rpi-imager --cli

Has really expanded options over the previous versions.

Including:

--first-run-script <first-run-script> --cloudinit-userdata <cloudinit-userdata> --cloudinit-networkconfig <cloudinit-networkconfig>

Though it doesn't support the old simple config text file, presumably most of that is replaced by cloudinit network config.

I am guessing this is available in the Windows version. I am seeing this from the macOS binary.
by thayne | 2025-11-24 18:19:17+00:00
There are cases where it is useful.

I had a case where if the mutex was poisened it was possible to reset the lock to a safe state (by writing a new value to the locked content).

Or you may want to drop some resource or restart some operation instead of panicing if it is poisoned.

But I agree that the default behavior should be that the user doesn't have to worry about it.
by dataflow | 2025-11-24 18:19:25+00:00
> Just because a feature is standardized does not mean it gets implemented.

This makes no sense. If you think it actually had a high chance of remaining unimplemented it anyway then why not just concede the point and take it out? It sure looks like you're not fine with leaving it unimplemented, and you're doing this because you want it implemented, no? It makes no sense to die on that hill if you're gonna tell people it might not exist.

Also, how do you just completely ignore the fact that standards have been weakened in the past precisely to achieve their implementation? This isn't a hypothetical he's worried about, it has literally happened. You're just claiming it's false despite history blatantly showing the opposite because... why? Because trust me bro?
by DanielHB | 2025-11-24 18:19:27+00:00
I once ran into a bug where our server code would crash only on a specific version of the Linux Kernel under a specific version of the OpenJDK that our client had. At least it would crash at startup but it was some good 2 weeks of troubleshooting because we couldn't change the target environment we were deploying on.

At least it crashed at startup, if it was random it would have been hell.
by psd1 | 2025-11-24 18:19:27+00:00
Nitpick: "gammon" as a constituency refers to boomers and older Gen X, typically financially comfortable, who are declining in intellectual openness and increasing in strength of opinion. They are called "gammon" because their faces go bright pink as they rail against the EU, immigrants, woke nonsense, and the laziness of today's youth. They can come from any strata of society, but they are made by being insulated from economic reality during their intellectual decline. Their defining characteristic is that they are choleric about topics of which they know nothing, and this makes them easily led by jingoistic tubthumping.
by cyphar | 2025-11-24 18:20:04+00:00
Of course it doesn't provide backports by itself, it's a versioning system. But version number changes with SemVer are meant to indicate whether an update includes new fearhews or not (minor bump means new features, patch bump means bugfixes only).

Of course, the actual issue is that maintaining backports isn't free, so expecting it from random single-person projects is a little unrealistic. Bug fixes in new code often need to be rewritten to work on old code. I do maintain old release branches for some projects and backporting single patches can cause whole new bugs that were never present in the main branch quite easily.
by carlosjobim | 2025-11-24 18:20:15+00:00
Touchpad is not subjective. And we've been waiting for at least 15 years for other manufacturers to compete. Realistically it will take 15 more years before they can be bothered.

Battery life is not subjective. Same for performance, same for display quality, same for speaker quality. I deliberately tried to focus on non-subjective aspects in my original post. If you say that Intel has chips to compete with Apple on a laptop, I believe you. But I haven't heard of any such laptop until now.

As for the operating system, MacOS is getting worse. A lot worse with Tahoe. But it is still the only tolerable operating system if you're working within a GUI. For programmers and sys admins who live in the terminal, this doesn't matter. Neither for people who only stay inside one application (Excel). But if you want to have applications and the operating system working together cohesively in a graphical user interface, MacOS is still about 20 years ahead of competition.

Not to mention sleep/hibernate mode, which is part of the OS, and probably the single most important feature of any portable computing device.