MurphyA/hacker-news huggingface dataset:
by thisislife2 | 2025-12-24 08:59:15+00:00
This is ridiculous. Old schoolers like me were taught to minimise the size of whatever you serve on a site, as much as possible, when learning web design and web programming. If you didn't use any JPEG and GIF optimisers, or HTML and Javascript you were berated (this was before Flash). You were taught about browser caching and its importance. Most WYSIWYG applications e.g. Macromedia (now Adobe) Dreamweaver had an feature where you set an internet connection speed and it would tell you how much time each web page you created would take to load on such a connection. It would even tell you what element in a page would take the longest to load.

Today's "10 MB minimum" videos on the background web pages (half of it made up of ads) is just so irritating, and disappointing.
by anthk | 2025-12-24 08:59:22+00:00
Better not. It already exists former QuickJS and QuickJS-NG, and parsing JS is a no light task by any means. Even Edbrowse https://github.com/cmb/edbrowse can grind down to a halt an n270 netbook becaus of some sites with JS (both with qjs and qjs-ng). So Dillo would be no better.

Also, legacy machines couldn't run it as fast as they could.
by easyKL | 2025-12-24 08:59:31+00:00
Please also consider the GL-iNEt Puli (XE300):
- 5V 2A USB C connector and a 5000mAh battery
- SIM and [not tested by myself] eSIM support.
- Tailscale and Nebula available as a plug-in.
- Main network and guest network can be set.
- OpenWRT if you want the GL-iNET firmware.
by RScholar | 2025-12-24 09:00:25+00:00
That's not true, it was published in 2016. I just happen to know because I bought it last week to support the Lua Foundation in the wake of doing some work on Scribunto modules at the Wikimedia projects. They're using Lua 5.1.5, but I figured the author would indicate the feature introduction points and I was correct about that.

I'm only just over halfway through but if I'm being honest, I can't offer much praise for the depth of the material or the treatment it's given: other authoritative volumes I've previously consulted (strangely, Mastering CMake comes to mind first among that cohort) were much more effective at communicating the underlying philosophies of construction and other unobvious practical realities of their subjects. Nevertheless, I do still value having a comprehensive reference at hand to refresh my memory on what's in fact possible when working with a language that I make use of as infrequently as this one.
by defrost | 2025-12-24 09:00:37+00:00
> I don't remember ever reading on HN about accidents in the shoe factory or in the construction site.

There are very few HN stories about shoe factories or construction sites full stop.

That's a whole other issue.

The hook for this story is Occ Health and Safety, many people have an interest in safety and the fact that a CEO died hasn't stirred interest out of pity or sympathy for a CEO, it's schadenfreude that lax safety standards caught someone that could have improved those standards.
by PunchyHamster | 2025-12-24 09:00:47+00:00
> I don't play it, but Infinite Nikki comes to mind, and the visuals are the core experience. I wonder how much a game like Arcknight Enfield taxes the player hardware, given they're pushing the 3D modelling side.

Me neither but recommended requirements on Steam are like.. RTX 2060, so 6 years old mid grade video card. We really don't need more power than we already have to make beautiful games.

> It kinda makes me sad, like being told "8-bit art is enough for images, we should focus on composition, how many Vermeer or DaVinci like painters do we expect anyway ?"

Except it isn't ? At this point more power is only really needed if you want to go hardcore into photorealism, and to actually use all that power you need massive budget just to produce all the assets at required quality.

It's like saying "if only painters had even smaller brushes, we could get photographical quality paintings." Does it really make art that much better ?
by TheOtherHobbes | 2025-12-24 09:00:47+00:00
The US is being run by a hostile regime which is intent on destroying wealth, health, stability, and credibility.

The people who have convinced themselves government is evil and taxes are bad are useful idiots. They're being used by others who very much want to destroy the US as a superpower.

Musk is between the two. He's acting to keep his ass out of jail, and he's a True Believer in certain senses.

But ultimately he's disposable, and will be removed when he's no longer useful.
by wateralien | 2025-12-24 09:01:37+00:00
While on a scuba diving trip in Thailand a couple months ago we could position the router slightly outside our hotel room to be able to be able to strongly connect to the very dodgy hotel wifi so my girlfriend could do her work calls.

It would also automatically log into the captive wifi which seemed to require a login every hour or so.

Another time we Ethernet into it using the cable in another hotel to bypass some ridiculous speed limitations on their access point.

I'm considering getting their model which can take SIM cards, so that we can also failover to mobile networks wherever we are.
by culebron21 | 2025-12-24 09:02:02+00:00
Interesting. We had a lot of grammar parsing of Russian since the 2nd grade of school. Especially we analyzed parts of speech and constituents. For the latter, we'd underline words in sentences in different ways.

It's so widespread that today if you want to play word guessing with gestures, and you have several words, you just imitate that underline style, and everybody understands it. (Just remembered, we also did a lot of word analysis, marking up prefix, root, suffixes and ending, and everyone knows this markup too.)
by lelanthran | 2025-12-24 09:02:23+00:00
> Still, you can do an initial bandwidth probe and then look for increasing transmission latency as a sign that the network is congested. Back off your bitrate (and if needed reduce frame rate to maintain sufficient quality) until transmission latency starts to decrease again.

They said playing around with bitrate didn't reduce the latency; all that happened was they got blocky videos with the latency remaining the same.
by somenameforme | 2025-12-24 09:02:49+00:00
It may well be (and it certainly sounds it in this case), but I wouldn't always just assume profit > cost logic. When you're dealing with heavy machinery and machines that can kill with a half second of inattention or slip, then deaths will occasionally happen regardless of how careful you try to be.

It's all just a game of numbers. If something is 99.99% safe then that sounds great, but that means a failure rate of 1 per 10,000 which means you're going to see large numbers of those fails. This is why even in a society of perfect drivers you'd likely still see thousands of people killed in crashes each year. There's enough entropy, and a large enough sample, that deaths will always remain relatively high.
by xyphro | 2025-12-24 09:03:45+00:00
You are correct. UsbTmc exposes no multi device capability. Also when I made first versions many years ago I had no "garden hose" GPIB cables and saw they were more expensive as the whole adapter.
V3 which will come early next year supports GPIB daisy chaining/multi device support via Ethernet VXI11 & HiSlip.
The V2 adapter shown here supports trigger, SRQ, serial poll, trigger, clear, local lockout, goto lockal, pulse indicator, all features though.
If you absolutely need common synchronous trigger to a chain of GPIB instruments which is quite seldomly absolutely required, you'll have it in next version V3.
by tarsinge | 2025-12-24 09:04:15+00:00
Professionally programming is just a means to an end that is solving a business problem. Just like hammering nails or turning screws is not a job in itself. The craft is important, but ultimately what people pay for is a final product (a house, a bridge, a software that does X, etc.), and our job is to build something that match their constraints. What you describe is the equivalent of complex novel construction projects, not what the vast majority of the construction industry is about.

Building a house is like a CRUD app, it already was a solved problem technically. AI is like prefabs or power tools. If your job and what you were interested in was building houses AI is great. If you were a brick layer not so much.

Engineer is not an aggrandizing title, it’s the job. Being paid for the hobby of writing code was just an anomaly that AI will close in the majority of the industry IMO.
by fakedang | 2025-12-24 09:06:12+00:00
The fact is that Volvo's reputation and prioritization of quality builds and stringent safety measures (I owe my life to a rental Volvo S90) are not shared by its Chinese parent company. When that philosophy trickles top-down, Volvo is affected.

In Apple's case, even as a iOS hater (yet a user), I would still say that Apple prioritizes product quality standards at a very high level. That culture trickles down as imposed requirements from Apple to its suppliers.
by Teever | 2025-12-24 09:06:56+00:00
Laws that mandate interoperability between devices are a net win for individual consumers and the market as a whole. They simplify people's lives, make society more efficient, prevent opportunities for blatant rent seeking and ultimately foster market productivity.

A government mandating standards in electricity transmission or gasoline composition may disincentivize the development of features that make some people's devices incompatible with charging at certain locations or cars that can only use gas from certain gas stations but that is the opposite of a bad thing.

We live in a much better world because people in the past decided that all telephones should be able to make calls to each other and that people don't really have to think about messing up putting fuel in their car because the size of the nozzles at pumps are standardized.

There are absolutely more opportunities for governments to make small but objectively measurable improvements in society with well placed regulations on interoperability.
by PeterStuer | 2025-12-24 09:07:05+00:00
A system by wich you can expose things on your private network (e.g. your home lan) so you can selectively and securely make them accesible from other places (e.g. over the Internet). You can do all this without tailscale by just configuring secure encrypted tunnels (wireshark, traefic, ...) yourself, but services like tailscale provide you with easy gui configuration for that.

I personally use Pangolin, which is similar https://github.com/fosrl/pangolin
by lelanthran | 2025-12-24 09:08:54+00:00
> No, they generally can't save their whole internal state to be resumed later, and definitely not in the document you were editing.

I broadly agree, but I feel you chose a poor example - Vim.

> For example, when you save a document in vim it doesn't store the mode you were in,

Without user-mods, it does in fact start up in the mode that you were in when you saved, because you can only save in command/normal mode.

> or the keyboard macro step that was executing,

Without user-mods, you aren't able to interrupt a macro that is executing anyway, so if you cannot save mid-macro, why would you load mid-macro?

> or the search buffer,

Vim, by default, "remembers" all my previous searches, all the macros, and all my undos, even across sessions. The undo history is remembered per file.
by fc417fc802 | 2025-12-24 09:10:07+00:00
> Y'all are just talking across each other.

Initially, perhaps. However note that my attempts to clarify exactly that are repeatedly followed by misconstruing my position. It's not so much that we disagree as that the supposed disagreement is about things I never said. The repeated failure to respond to what was actually said coupled with the combative tone is pretty much the definition of trolling. Of course that term does assume intent to an extent - if he's just having a bad day I'm not sure that technically qualifies. The end result is the same though.

BTW if you feel I've missed some insightful point of his do please elaborate.
by a_t48 | 2025-12-24 09:10:12+00:00
I miss working in Lua. Metatables are pretty powerful, and "everything is in a table" made it super easy to do hot reloading. At one point working on an iOS game, I had things set up so that when I hit save on my PC, my phone would pick up the changes and just start running the new code, as all persistent state was stored in a special table. Someday I need to look into getting the same kind of environment going for robotics, it was really a superpower.
by Retr0id | 2025-12-24 09:10:17+00:00
Ooh! The faster speeds would be very welcome, I was bothered by the slowness of the AR488 but I assumed that was just how GPIB was (I had no baseline to compare to). I'll switch over when I get a chance.

That user's project also looks very interesting - My TDS684A's CRT seems to have died, and rather than fix it I could switch to using a software scope.
by SirAiedail | 2025-12-24 09:10:21+00:00
Helldiver's engine does have that capability, where bundle patches only include modified files and markers for deleted files.
However, the problem with that, and likely the reason Arrowhead doesn't use it, is the lack of a process on the target device to stitch them together. Instead, patch files just sit next to the original file.
So the trade-off for smaller downloads is a continuously increasing size on disk.
by vintermann | 2025-12-24 09:11:07+00:00
> Fortunately, once you've toggled Live Plus off, you no longer have to worry about your TV screen constantly being read to see what you're watching and to give you targeted ads.

Oh? What if it's one of those, "if you opt out, we quietly reenable it a month later" settings, like LinkedIn notifications?
What if it can be reenabled remotely for "law enforcement"?
Heck, what if they just ignore the setting and keep mining what you watch? They've already effectively admitted to having the bare minimum concern for user privacy, and we know how willing companies are to break laws to get training data these days.
by Lammy | 2025-12-24 09:11:30+00:00
It's a cryptographic key exchange system that allows nodes to open Wireguard tunnels between each other. They have a nice product, but I don't like how it spies on your “private” network by default: https://tailscale.com/kb/1011/log-mesh-traffic

If you want to self-host, use NetBird instead.
by Fwirt | 2025-12-24 09:11:43+00:00
Thanks to Lua’s great metaprogramming facilities, and the fact that _G is just a table, another workaround is to add a metamethod to _G that throws an error if you try to declare a global. That way you can still declare globals using rawset if you really want them, but it prevents you from declaring them accidentally in a function body.
by oefrha | 2025-12-24 09:11:51+00:00
iOS Safari's reader mode heuristics has always been mediocre at best, and it's getting less useful by the day as more publications knowingly cripple it. It used to be that you can get around some soft paywalls with reader mode, especially if you turn on "Use Reader Automatically" which distills the content before JavaScript kicks in to remove it. Nowadays that works on fewer and fewer commercial websites, and the other day I noticed something truly shocking on a pretty mainstream tech publication (don't remember which one unfortunately): I can see like two paragraphs of content before the paywall, but when I turn on reader mode, the content shown is literally a list of Christmas laptop deals (that is not visible on the non-reader page), with the title being the only relevant thing.
by any1 | 2025-12-24 09:12:16+00:00
Yes, in fact, the protocol states that the client can queue up multiple requests. The purpose of this is to fill up the gap created by the RTT. It is actually quite elegant in its simplicity.

An extension was introduced for continuous updates that allows the server to push frames without receiving requests, so this isn't universally true for all RFB (VNC) software. This is implemented in TigerVNC and noVNC to name a few.

Of course, continuous updates have the buffer-bloat problem that we're all discussing, so they also implemented fairly complex congestion control on top of the whole thing.

Effectively, they just moved the role of congestion control over to the server from the client while making things slightly more complicated.
by viccis | 2025-12-24 09:12:38+00:00
None of the terminology or acronyms that user used were made up or unique to this. I think you are blaming other people for your unfamiliarity with this kind of tech.

It is simply a managed service that lets you hook devices up to an overlay network, in which they can communicate easily with each other just as though they were on a LAN even if they are far apart.

For example, if you have a server you'd like to be able to SSH into on your home network, but you don't want to expose it to the internet, you can add both it and your laptop to a Tailscale network and then your laptop can connect directly to it over the Tailscale network no different than if you were at home.
by StopDisinfo910 | 2025-12-24 09:13:28+00:00
He is extremely productive in its specialty: the intersection of programming language and system programming. I don't think that makes him superhuman.

It's more a model of what a really talented person who applies themselves building things they enjoy building can do.

I prefer thinking of it this way: if Bellard can make a small JS engine from scratch by himself, what's really stoping you from knocking down this library you are thinking about.
by AnthonyMouse | 2025-12-24 09:15:18+00:00
> If enough people stop believing in the law, it really threatens those in power.

I think this is why the thing judges hate the most is people admitting when the law gives them an unfair advantage.

A rule that unjustly benefits someone is fine as long as they don't break kayfabe. Big Brother loves you, that's why you can't install apps on your phone, it's to protect you from harm. The incidental monopolization, censorship and surveillance are all totally unintentional and not really even happening. Oceania has always been at war with Eurasia.

Whereas, declare that you're shamelessly exploiting a loophole? Orange jumpsuit.
by block_hacks | 2025-12-24 09:15:47+00:00
Modern Next.js apps execute attacker-controlled input earlier than most teams realize — during framework deserialization, hydration, and Server Action resolution, often before application logging, validation, or auth hooks run.

In several real-world RCE investigations and red-team simulations, repeated 500 Internal Server Errors weren’t “noise” but early execution signals used by attackers to map execution boundaries and refine payloads. In some cases, the last observable 500 occurred right before stable code execution was achieved.

This write-up breaks down:

why deserialization in Next.js is part of execution, not preparation

how silent 500s can indicate pre-handler execution paths

why WAFs and app-level logs frequently miss this class of attacks

where the real attack surfaces live (middleware, RSC, Server Actions, custom servers)

Posting to get feedback from people who’ve seen or investigated similar SSR/RCE behavior in production.
by Msurrow | 2025-12-24 09:16:12+00:00
> *If you don't want your LG TV quietly snooping on what you watch and using it to serve you ads, here's how to turn Live Plus off.

If LG makes money from snooping on you, what makes you think the “off” button actually turns it off? People have no way of verifying this.

To me this is the worst part of TVs (and cars, and fridges, and so on) are even allowed to have these features[1]: non-techinical customers have no understanding that “smart” hardware is capable of doing whatever it wants - and hide it from customers. You have no way of knowing what your “smart” thing is doing behind the scenes.

[1]: any feature thats sending data back to company servers, meaning you loose control of your data. Features that are 100% on-device is not what I’m talking about.
by TacticalCoder | 2025-12-24 09:16:57+00:00
I then convert the image to grayscale only. Then I apply a filter so that only 16 colors are used. And I then adjust brightness/contrast so that "white is really white". It's all scripted: "screenshot to PDF". One of my oldest shell script.

16 shades of grey (not 50) is plenty enough for text to still be smooth.

I do it for several reasons, one of them being I often take manual notes on official documents (which infuriates my wife btw) but then sometimes I need to then scan the documents and send them (local IRS / notary / bank / whatever). So I'll just scan then I'll fill rectangle with white where I took handnotes. Another reason is when there's paper printed on two sides, at scan times sometimes if the paper is thin / ink is thick, the other side shall show.

I wonder how that'd work vs adversarial inputs: never really thought about it.
by omnimus | 2025-12-24 09:17:01+00:00
The service is free up to certain amount of connected people and devices. You most likely don't need to pay for it. I am pretty heavy user and don't.
It is virtual private network orchestrator. It allows you to connect to other devices that you add to your network as long as they are connected to the internet. So your office computer, home server or NAS. If you have some home automation like home assistant you can connect to it from anywhere. That kind of stuff.
by pacificpendant | 2025-12-24 09:17:06+00:00
You’re right that SBOMs cannot be used to attest that a library is correctly used. I’m not sure if that’s a common use-case of SBOMs though. I normally see people wanting SBOMs for security transparency (customer can see if you’re maintaining your dependencies), vulnerability management (customer can know what vulnerabilities lurk in the dependencies) and license compliance (they can know you didn’t use any dependencies with licenses that cause commercial issues).

Related to your point though is that just because a dependency is vulnerable doesn’t mean the software using it is affected too. It might not use the functionality that’s vulnerable. Which means a supplier needs to share their assessment of each dependency vulnerability.
by jwr | 2025-12-24 09:17:13+00:00
I think pricing is just one dimension of this discussion — but let's dive into it. I agree it's a lot of money. But what are you comparing this pricing to?

From what I understand, getting a non-Apple solution to the problem of running LLMs in 64GB of VRAM or more has a price tag that is at least double of what you mentioned, and likely has another digit in front if you want to get to 128GB?
by motbus3 | 2025-12-24 09:17:14+00:00
I know someone hit by a forklift because the operator didn't slowdown for the sections going out of the dark zones.
Forklift operators are careless all the time.
If you simply give them a chance by not being 100% safe yourself it might be fatal.

Forklift operators is, unfortunately, a job that needs go be taken by robots
by fc417fc802 | 2025-12-24 09:17:36+00:00
Certainly. However it shouldn't be too difficult to imagine a scenario where the typical human driver would not know how to respond in a safe manner. Thus the presence of "uncertain how to respond" in a limited subset of scenarios remains consistent with the term "autonomous" as it appears in general usage.

> If it has to call its parents or uses a GPS phone, it is not autonomous.

You ought to be able to imagine plenty of scenarios where this would be the case (ie the child got lost) and yet clearly you still believe the child to qualify as autonomous. Analogously, the vehicles are not necessarily disqualified as being considered such despite being unable to independently navigate in some subset of scenarios.