MurphyA/hacker-news huggingface dataset:
by Msurrow | 2025-12-10 11:00:50+00:00
Yes. GDPR covers all handling of PII that a company does. And its sort of default deny, meaning that a company is not allowed to handle (process and/or store) your data UNLESS it has a reason that makes it legal. This is where it becomes more blurry: figuring out if the company has a valid reason. Some are simple, eg. if required by law => valid reason.

GDPR does not care how the data got “in the hands of” the company; the same rules apply. Another important thing is the pricipals of GDPR. They sort of unline everything. One principal to consider here is that of data minimization. This basically means that IF you have a valid reason to handle an individuals PII, you must limit the data points you handle to exactly what you need and not more.

So - company proxy breaking TLS and logging everything? Well, the company has valid reason to handle some employee data obviously. But if I use my work laptop to access privat health records, then that is very much outside the scope of what my company is allowed handle. And logging (storing) my health data without valid reason is not GDPR compliant.

Could the company fire me for doing private stuff on a work laptop? Yes probably. Does it matter in terms of GDPR? Nope.

Edit: Also, “automatic” or “implicit” consent is not valid. So the company cannot say something like “if you access private info on you work pc the you automatically content to $company handling your data”. All consent must be specific, explicit and retractable
by benrutter | 2025-12-10 11:01:01+00:00
To explain where I'm coming from a bit more, my thinking is something like:

"open source" where crucial parts of making a system work, or where the project scoops up eager contributors and them schisms the community once it's finished using their work, tends to have a negative effect.

If those projects were more explicitly either "closed source"/"source accessible" etc, then the open source community could focus their efforts on projects that actually embraced genuine openness and hackability.

Of course - I'd rather there was more actual open source. But what I really want is for "open source" to be some marker saying "this is a project that's open and built by/for the community".
by ksec | 2025-12-10 11:01:16+00:00
>The Neoverse V3 and Cortex-X4 cores are very similar in size and performance with the Intel E-cores Skymont and Darkmont (the E-cores of Arrow Lake and of the future Panther Lake).

That is not entirely accurate. X4 is big core design. All of its predecessor and successor has always had >1mm2 die space design. X4 is already on the smaller scale, it was the last ARM design before they went all in chasing Apple's A Series IPC. IRRC it was about 1.5mm2 depending on L2 cache. E-Core for Intel has always been below 1mm2. And again IRRC that die size has always been Intel's design guidelines and limits for E-Core design.

More recent X5 / X925 and X6 / X930 / C1 Ultra?? ( I can no longer remember those names ) are double the size of X4. With X930 / C1 Ultra very close to A19 Pro Performance. Within ~5%.

I assume they stick with X4 is simply because it offers best Performance / Die Space, but it is still a 2-3 years old design. On the other hand I am eagerly waiting for Zen 6c with 256 Core. I cant wait to see the Oxide team using Zen 6c, forget about the cloud. 90%+ of companies could fit their IT resources in a few racks.
by mark_round | 2025-12-10 11:01:46+00:00
That was what I was thinking of (but worded it badly in the middle of my rant!)

If I wanted to intercept all your traffic to any external endpoint without detection I would have to compromise the exact CA that signed your certificates each time, because it would be a clear sign of concern if e.g. Comodo started issuing certificates for Google. Although of course as long as a CA is in my trust bundle then the traffic could be intercepted, it's just that the CT logs would make it very clear that something bad had happened.
by nephihaha | 2025-12-10 11:02:28+00:00
I discuss that elsewhere. The feudal tag is inaccurate. The USA is not feudal minded, at least not yet. Europe is far more feudal in its deference to the authorities. (I live in Europe by the way.)

Also you can't have a feudal system when the peasantry have been replaced by machines which is the end game here. Feudalism is parasitic but it still requires goods and services to flow up from below. When your food, defence and goods are all supplied by robots or AI, then that is not the case.
by kevin061 | 2025-12-10 11:02:41+00:00
I wonder if it is safer than a Pixel with Graphene. It is a completely different OS, of course, and many of the Graphene OS hardening features like isolating Google Apps, are not necessary in a phone that literally has no Google Apps, but Graphene also has other more generic privacy protection mechanisms including a duress pin or inactivity reboots allowing the phone to eject the decryption keys from memory. I might actually buy one and try it.
by charcircuit | 2025-12-10 11:03:28+00:00
>even if you were in a private browser

Incognito mode is about not saving data or browser history to your computer. Sites can still identify you if you login or even just from your IP. It's not meant to make you anonymous. This is a common misconception which is why these modes show a big warning explaination when you enable them.

>they'd go to prison

That's for the courts to decide. The Facebook and Instagram apps may have already gotten consent from the user to share this information.
by mhitza | 2025-12-10 11:03:35+00:00
> which can just technically run it on their servers without too much modifications or release the modifications and still compete against the original AGPL party

Sounds like you want "monopoly as a license" :)

Big companies will rather ignore your project than use an AGPL licensed product. For them it's just not worth the hassle.

Maybe 1 out a 1 billion software is so revolutionary that licenses be damned. But maybe we should temper our expectations a bit around the software we build!
by cevious | 2025-12-10 11:03:52+00:00
Kind of tells you something about how timidly and/or begrudgingly it’s been accepted.

IMO the attitude is warranted. There is no good that comes from having higher-level code than necessary at the kernel level. The dispute is whether the kernel needs to be more modern, but it should be about what is the best tool for the job. Forget the bells-and-whistles and answer this: does the use of Rust generate a result that is more performant and more efficient than the best result using C?

This isn’t about what people want to use because it’s a nice language for writing applications. The kernel is about making things work with minimum overhead.

By analogy, the Linux kernel historically has been a small shop mentored by a fine woodworker. Microsoft historically has been a corporation with a get-it-done attitude. Now we’re saying Linux should be a “let’s see what the group thinks- no they don’t like your old ways, and you don’t have the energy anymore to manage this” shop, which is sad, but that is the story everywhere now. This isn’t some 20th century revolution where hippies eating apples and doing drugs are creating video games and graphical operating systems, it’s just abandoning old ways because they don’t like them and think the new ways are good enough and are easier to manage and invite more people in than the old ways. That’s Microsoft creep.
by bigmealbigmeal | 2025-12-10 11:04:12+00:00
I'm not so confident.

TV use was higher in the 2000s than it was in the 1980s/1990s. TV viewing hours steadily rose from 1949 until finally peaking in 2010.[1]

But when TV finally peaked in 2010, did overall screen time go down? No. It kept going up.[2] Obviously, this is when the masses went all-in on smartphones, social media, and the internet.

Screen usage basically never went down. It has only gone up.

So I only see anyone getting tired of smartphones and actually using them less if they've found something more addictive to replace them.

[1] https://cdn.theatlantic.com/thumbor/3FzEghXwS-KkIYu1KwG-YyHh... (from https://www.theatlantic.com/technology/archive/2018/05/when-...) [2] https://www.brookings.edu/articles/how-free-time-became-scre...
by bob1029 | 2025-12-10 11:04:26+00:00
> Switch

Good luck shipping arbitrary binaries to this target. The most productive way for an indie to ship to Nintendo in 2025 is to create the game Unity and build via the special Nintendo version of the toolchain.

How long do we think it would take to fully penetrate all of these pipeline stages with rust? Particularly Nintendo, who famously adopts the latest technology trends on day 1. Do we think it's even worthwhile to create, locate, awaken and then fight this dragon? C# with incremental GC seems to be more than sufficient for a vast majority of titles today.
by amonith | 2025-12-10 11:04:39+00:00
Same but with 1 kid and different websites (including HN, which is equally bad!). Actively fighting it though. Slowly removing all social media accounts, now just need to figure out how to block stuff permanently on my phone. On a desktop I did it with changing my hosts file to point everything to 127.0.0.1. Need to figure out how to do this also on mobile without an additional network device that would disrupt things for my wife.
by henryball | 2025-12-10 11:04:54+00:00
Side note: Anyone looking for an open source (not source available) Kanban tool:

- Kan (AGPL): https://github.com/kanbn/kan (my own project)

- WeKan (MIT): https://github.com/wekan/wekan

- Taiga (AGPL): https://github.com/taigaio/
by kevmuhuri | 2025-12-10 11:05:13+00:00
Talked to a dev 5 years ago who switched from Qt. He stated it's ok on macOS but not suitable for iOS. https://x.com/kevmuhuri/status/1275488020414808066

This indie dev (uses Qt) shows the process for updating icons to the latest UI refresh https://successfulsoftware.net/2025/09/26/updating-applicati...
by jon-wood | 2025-12-10 11:05:15+00:00
In the context of background jobs idempotent means that if your job gets run for a second time (and it will get run for a second time at some point, they all do at-least-once delivery) there aren't any unfortunate side effects to that. Often that's just a case of checking if the relevant database updates have already been done, maybe not firing a push notification in cases of a repeated job.
by gurraman | 2025-12-10 11:05:21+00:00
I think it is refreshing. They don't half-ass things into the framework. They take the time to do it right. They let every feature fight for its life, and put their effort into LTS and minimizing number of issues and API changes related to the features they do deliver. As a developer I really appreciate this. I don't have to totally rewrite my entire application every new version because the implementation wasn't properly thought through.
by listenallyall | 2025-12-10 11:05:48+00:00
Kinda irrelevant, since 12 isn't really a round number (like 10 would be).

Further, the article is essentially saying that there is far less difference between 11 and 13 than might be assumed by a categorical model that says one level is inside the "safe" level and one is outside of it. But that isn't the issue here - 9 was already quite safe, the risk is very close to zero, so going lower doesn't reduce risk much - because the existing risk can't get much lower.

> Smaller doses of a poison are better than less small doses

Since 1996, the EPA has mandated that unleaded gasoline must be below 0.05 grams of lead per gallon. While the elimination of lead up to this point was a massive benefit to public health, is there any significant health benefit to reducing this further below 0.05? If so, who's claiming that and why haven't the standards changed in 30 years?
by debugnik | 2025-12-10 11:06:38+00:00
Okay I had upvoted you but now you're just being an asshole. Predictable from someone on multiple fucking throwaways created just to answer on a single post and crap on a piece of tech I suppose; I don't even care much about Rust. And I'm sorry to inform you I'm not Klabnik, but delusions are free: Maybe you think everyone using -nik is actually the same person and you've uncovered a conspiracy. Congrats on that.

I'd shove you a better data point but people aren't taking enough surveys for our sake, that's the one we've got. Unless you want to go with Jetbrains', which, spoilers, skews towards technologies supported by Jetbrains; I'm not aware of other major ones.
by dauertewigkeit | 2025-12-10 11:06:58+00:00
It approximately is, imho. Wealth follows a power law distribution. People put the dividing line at different points, but it doesn't matter so much. The elite are a tiny fraction. The middle class are also a relatively small faction of the population and for the most part, the middle class tend to be lumped in with the elite, because they tend to be in complementary political factions.

Now I know that in the US, people group everyone with a job in the middle class, but that's just semantics.
by kokau | 2025-12-10 11:07:28+00:00
I’ve been experimenting with Sora 2 and built a small workflow that injects short Sora-generated scenes into clips to boost retention.

Pipeline:

Take any long video.

Detect highlights automatically.

Generate 4-8s Sora scenes based on punchlines.

Insert them in the right moment.

Export as ready-to-post short videos.

It works surprisingly well for explaining abstract concepts (marketing, psychology, storytelling). Retention increases were noticeable for most early testers.

If anyone wants to see how the workflow behaves in practice, you can test the integration here:

(Sora 2 early access inside the editor)

Curious if others are using Sora 2 in production pipelines — happy to exchange ideas
by dns_snek | 2025-12-10 11:07:39+00:00
Tailscale connections don't get terminated by a middle box, it's just end-to-end encrypted Wireguard under the hood. Cloud-hosted control panel is a risk because they could push malicious configuration changes to your clients (ACLs and new nodes if you're not using the lock feature), but they can't do it without leaving a trace like Cloudflare can.
by jillesvangurp | 2025-12-10 11:07:40+00:00
That's a great reason I steer clear of products like that. Oracle is not a DB I've used since 2005. There's no need. The market for closed sourced databases imploded to basically legacy products that predate when open source databases became a sane default choice. I guess some banks/insurers still might talk themselves into believing it's a sane choice for new projects.

I guess source available is better than source unavailable + hand wavy support from a company that's out to milk you for revenue for as long as they can get away with it.

But it's a weak substitute for proper open source that you can just fork and fix if you need to without having to beg some indifferent company to pretty please fix their legacy shit and offering to do free work for them. If it's open source, chances are that there are still some others around also using the same software and sharing your pain that can support you or benefit from your fixes.

I don't see the value of most shared source projects. Usually there are very decent OSS alternatives. And the lack of those usually just means one will pop up shortly and displace whatever it is you are using. Any benefit to these projects tends to be short lived. OSS developers like to copy what is good and add it to their own projects.

E.g. most nosql databases ended up having postgresql absorb whatever it was that made these things interesting. Several shared source things (mongodb) are at this point looking a bit dated and backwards. That's also exactly what happened to MS SQL, Oracle, DB2, and all those other long forgotten databases that people used to use last century. There's very little technical reason to use any of those at this point.
by conartist6 | 2025-12-10 11:07:41+00:00
They could ignore it. Why not? I switched from Chrome to FF and FF hard-locks 3x a day for me now. Force quit, start over. Is an AI window going to stop me going back to Chrome? Who cares if FF has an AI window if FF is too janky to be a good web browser... It's just lipstick on a pig.
by demarq | 2025-12-10 11:08:25+00:00
Hear me out. What if it’s not capitalism as a whole but one specific facet. Debt.

> In the liberal fantasy, spearheaded by Adam Smith, bakers, brewers and butchers laboured within markets so cut-throat that none could make more money than the bare minimum necessary to keep their small, family-owned businesses running.

In a cash only capitalism world that you can’t conspire to have more than you earn. You earn what the market earns.

But debt suspends capitalism long enough for someone to “beat” the market. And when capitalism resumes you have this perverse player operating under exceptional circumstances.

> Joseph Schumpeter … Progress he argued, is impossible in competitive markets. Growth needs monopolies to fuel it. How else can enough profit be earned to pay for expensive research and development

I know this to be false. Almost all the big tech companies consistently FAILED to bring about innovation through research. They instead had to acquire SMALLER companies and teams that had the innovation.

YouTube, Android, Instagram, WhatsApp etc…

And almost every other innovation was gained at the startup stage not the monopoly stage.

Uber, AirBnB etc..
by Imustaskforhelp | 2025-12-10 11:09:30+00:00
Interesting, I might write my software under AGPL but still I guess some questions arise as if sure the big companies might not use my project but some smaller companies can still create an competing product.

As an example immich is an AGPL based software which has its own instance and then https://pixelunion.eu (I think gives more free stuff like 16 gig instance etc) and then competes with immich itself

They can do this because they release any changes they make or they don't change it that much .

> Sounds like you want "monopoly as a license" :)

What I want is if someone uses my open source product and then uses it to create an competing product, I am under no obligation to release it under a foss and much rather then release it under an source available license
by mytailorisrich | 2025-12-10 11:10:44+00:00
> now that we ourselves have become a resource to extract.

This has nothing to do with what you quoted.

Smartphones and their effects are orthogonal to your point. Before smartphones if you were at home you were alone, isolated, and bored, so you went out and met your friends. With smartphones you are always connected to your friends or others and it seems that it reduces the psychological need to meet in person (it's no longer the only option).
by interleave | 2025-12-10 11:10:46+00:00
Anecdote: I vibe-coded a thing in C using Claude Code + Opus 4.5 and, wow, the process and the result worked _shockingly_ well.

For reference, here are the two heavy-lifting workers:

- https://github.com/akaalias/bipscan/blob/main/src/c/find_seq...

- https://github.com/akaalias/bipscan/blob/main/src/c/check_se...

and here's a screenshot of the thing running:

- https://x.com/SpringStreetNYC/status/1996951130526425449/pho...

and here's the full story:

LOL, I got 100% nerd-sniped by my friend Sönke this week and wound up building a small spaceship.

On Monday he's like "Hey, what if you found obscure seed phrases embedded in public texts? You'd only need to remember the name of the book and the paragraph and go from there."

I honestly could care less about crypto(currencies) and I'm 100% sure this is like cryptanalysis 101. But, yeah, it seemed like an interesting problem anyways.

First, I downloaded a few hundred books from Gutenberg, wrote a ruby script and found BIP39 word sequences with a tolerable buffer for filler-words.

Then, I was like, okay, gotta now check them against actual addresses. Downloaded a list of funded ETH addresses. Wrote the checker in ruby. Ran it. No hits but this was now definitely weirdly interesting.

Because: And what if I downloaded the whole pg19 text corpus to scan! And what if I'd add BTC addresses! And what if I checked every permutation of the seed phrase!

Everything got really slow once I got to processing 12G of raw text for finding sequences and then checking a few million candidates with 44.000+ variations per candidate.

So, let's rewrite this into C! And since I've got 16 cores, let's parallelize this puppy! And since it's a MacBook, let's use GCD! Optimize all the things!

Lol, so NOW this thing is so fucking FAST. Takes four minutes to go through the full pg19 corpus and generates 64,205,390 "interesting" seed phrases. The fully parallelized checker (see Terminal screenshot) processes 460 derived addresses per second.

I really don't care if I get a match or not. I feel like I started with building a canoo and wound up with a spaceship is in itself just the best thing in the world.
by nephihaha | 2025-12-10 11:10:53+00:00
Bengal's famine occurred because British imperial government (not market forces) shifted food resources away to support the war effort. Ireland's famine occurred within a largely feudal system, and has been followed by massive land reforms within Ireland. It is arguable if either occurred due to "free market forces". For what it's worth, the massive famines in the USSR and PRC didn't take place due to free market forces either.

The problem with the free market vs Marxism argument is that they are both materialist. These systems know the price of things and real value of nothing.
Show HN: Voice and Messaging Agents Using the WhatsApp Calling API
by gustavogb | 2025-12-10 11:10:55+00:00
A few months ago, WhatsApp released a calling API. I’d been experimenting with conversational interfaces for a while, and it seemed like a good chance to build something that could let businesses create voice-based agents without much setup.

I’ve been working on this over the past few months, and the beta is now publicly available. The idea is simple: you point the platform to your website URL, and it automatically configures a voice + messaging agent that customers can call or message. No code required.

My expectation is that many businesses will eventually offer some form of conversational interface by default, and I wanted to see whether a tool that simplifies that process could be useful. I’d appreciate feedback—especially around rough edges, missing features, or anything that seems confusing.

You can try it out directly in the browser, with a minimal barrier to testing. No long onboarding flows.

Happy to answer questions or go into technical details in the thread. Thanks!
by sebstefan | 2025-12-10 11:11:17+00:00
>We need as many checks as possible - and ideally ones that come for free (e.g., guaranteed by types, lifetimes, etc.) - which is why Rust might be the language for vibe coding.

Checking preconditions and postconditions is much easier to do for a human than checking an implementation

The thing that would really make sense is a proved language like Coq or Promela

You can then really just leave the implementation to the AI.