MurphyA/hacker-news huggingface dataset:
by nottorp | 2025-12-18 07:34:57+00:00
> This is just FUD. Ublock Origin is still working

Correct.

> and will be working.

How do you know?

> Full customization is still there

Correct.

> and isn't going away.

How do you know?

How do you know this new "AI" CEO won't let both support for Manifest V2 and extensive settings rot because "AI can do it for you" for example?

Or as I said earlier, because they'll run out of money to pay for non "AI" features?
by pjmlp | 2025-12-18 07:35:36+00:00
The use cases is not writing unsafe C in first place, and proving the point Go is usable in such scenarios, regardless of naysayers.

The creators of USB Armory also created TamaGo, instead of using Rust, exactly for the same reasons, to prove a point.

https://github.com/usbarmory/tamago

https://reversec.com/usb-armory/

Because in IT, seeing is believing.
by youarentrightjr | 2025-12-18 07:35:40+00:00
> I’ll take the bait. I’m guessing you don’t pay state tax in Kansas, so you don’t pay my salary. I’m totally down with anyone in the state reading my stuff, though.

With all the federal education grants/aid/what have you, it's hard to imagine that your institution is purely jayhawker funded.
by colechristensen | 2025-12-18 07:36:19+00:00
You're missing the point. We don't irrigate. 80% of corngrowers don't irrigate.

We don't have the irrigation hardware, we don't have the wells to irrigate, there is no irrigation.

It's an outrageous claim because it's false.

The folks who do irrigate corn more than a foot per year shouldn't be allowed. It is a huge unnecessary waste of water and we aren't lacking for corn production.
by bflesch | 2025-12-18 07:36:47+00:00
In the book "careless people" it is highlighted that Facebook embedded spyware in their app which tracked other apps that were installed/used on the phone. This allowed them to figure out that so many of their users were installing WhatsApp, and enabled the legendary WhatsApp purchase. It is very much possible that Instagram is reading some sort of temporary files created by TikTok and extracts data using this method.

Facebook/Meta has a proven track record of fetching all data from your phone, even when abusing security vulnerabilities to do so. And the clowns at Apple can't even fix RCEs in their network-exposed applications, I'm not convinced the separation between apps is flawless.
by intothemild | 2025-12-18 07:37:25+00:00
Yes, but also to fake how well they are doing to potential, or current investors.

IMHO, these aren't smart investors.. because this should be something that comes up in due diligence, the amount of money left, the current burn rate, and what the company is doing about the latter. If the company was on paper fully staffed, but also actively hiring. That would be for me an indicator that either the hiring is fake, so what else are they faking. Or that the hiring is real, and they are fiscally irresponsible.

There's another angle to all of this, and that's obviously the company isn't fully staffed, there's still some space in the runway for another hire. It's just that right now its a buyers market from the perspective of the company.. So, well, beggars can be choosers.. They're just holding out until that golden candidate comes along. This obviously sucks, and there SHOULD be a maximum length a company can have a job ad out before they have to explain why it's taking so long.

It's not uncommon for countries to require citizens to disclose Who and How many jobs they applied for this week to collect social security.. There should be something similar for companies who have job ads out.
Ask HN: Is RSS Still Alive?
by militanz | 2025-12-18 07:37:39+00:00
I read recently a post here in HN about this topic but I can't find it anymore so I'm writing here my thoughts.

Recently, I started a hobby project in Rust that collects some news from several websites and creates me a weekly digest.

Since I'm making it for fun I started developing a scraper.

However, one simpler option was to use the websites' RSS feed. So, I looked for them as well but few websites have them.

Now, with the advent of Agentic AI they seem to be an old fashioned way that is needed anymore.

What do you think?
by D-Machine | 2025-12-18 07:39:00+00:00
Okay, I don't in general see "duplicate" as implying this, but I take your point, and was wondering if that might be the etiquette here.

I also think, on reflection, that you are right in this particular case (given there are no comments on the previous duplicate) so, thank you also for clarifying.

I suppose in the future an e.g. "[Previous discussion]" tag would be more appropriate, providing comments were made, otherwise, just say nothing and leave it to HN.
by ZuoCen_Liu | 2025-12-18 07:40:33+00:00
Ghost jobs are essentially the 'vaporware' of the HR world. In any other department, misrepresenting your intent to engage in a transaction would be seen as a breach of professional ethics. The fact that it has become a standard KPI for HR departments to 'keep the pipeline warm' at the expense of thousands of hours of unpaid candidate labor is a massive market failure.
by tgsovlerkhgsel | 2025-12-18 07:40:47+00:00
I hear the "Docker is not a security boundary." mantra all the time, and IIRC it was the official stance of the Docker project a long time ago, but is this really true?

Of course if you have a kernel exploit you'd be able to break out (this is what gvisor mitigates to some extent), nothing seems to really protect against rowhammer/memory timing style attacks (but they don't seem to be commonly used). Beyond this, the main misconfigurations seem to be too wide volume bindings (e.g. something that allows access to the docker control socket from inside the container, or an obviously stupid mount like mounting your root inside the container).

Am I missing something?
by SkiFire13 | 2025-12-18 07:41:22+00:00
> They lack security updates

Very few projects update dependencies that often, and only very big ones are found with security issues that often.

> lack integrations with new platforms

You don't need a new intration _every 2 days_, not to mention that many projects don't need such integrations at all. Moreover some popular and updated projects lack such integrations despite having lot of commits.

> lack support for new HW architectures

This is something that many projects get for free. But also, you don't get a new HW architecture every 2 days.

> lack newer privacy guarantees

What more privacy guarantees do I need from projects that don't communicate with external services or store data at all?
Show HN: An MPSC Queue Optimizing for Non-Uniform Bursts and Bulk Operations
by dakingffo | 2025-12-18 07:41:34+00:00
Hi HN,

I’m a C++ student and I’ve spent the last few months obsessing over concurrent data structures. I’m sharing daking::MPSC_queue, a header-only, lock-free, and unbounded MPSC queue designed to bridge the gap between linked-list flexibility and array-based throughput.

1. FACING THE CHALLENGE: THE "LINKED-LIST BOTTLENECK" In traditional MPSC linked-list queues, if multiple producers attempt to enqueue single elements at a high, uniform frequency, the resulting CAS contention causes severe Cache Line Bouncing. In these saturated uniform-load scenarios, throughput hits a physical "floor" that often underperforms compared to pre-allocated ring buffers.

2. ARCHITECTURAL SOLUTIONS FOR REAL-WORLD SCENARIOS Rather than focusing on average throughput under uniform load, this design targets two specific real-world challenges:

Scenario A: Non-Uniform Contention (Burst Resilience) In many systems, producers are mostly idle but burst occasionally. By facilitating a high-speed lifecycle where node chunks circulate from Consumer (Recycle) -> Global Stack -> Producer (Allocate) with strictly O(1) complexity, the queue can rapidly establish SPSClike performance during a burst, peaking at ~161M/s.

Scenario B: Bulk Contention Reduction The enqueue_bulk interface allows producers to pre-link an entire segment in private memory. This reduces the contention from N atomic operations down to a single atomic exchange. The larger the batch, the lower the contention.

3. IMPLICIT CHUNKING & RESOURCE LIFECYCLE Instead of fragmented allocations, memory is managed via a Page -> Chunk -> Node hierarchy.

Implicit Composition: Unlike chunked-arrays, nodes are not stored in contiguous arrays but are freely combined into logical "chunks." This maintains linked-list flexibility while gaining the management efficiency of blocks.

Zero-Cost Elasticity: The unbounded design eliminates backpressure stalls or data loss during traffic spikes, with heap allocation frequency reduced to log(N).

4. ENGINEERING RIGOR * Safety: Fully audited with ThreadSanitizer (TSAN) and ASAN. * Type Safety: Supports non-default-constructible types; noexcept is automatically deduced. * Lightweight: Zero-dependency, header-only, and compatible with C++17/20.

A NOTE ON BENCHMARKS: In the interest of full transparency, I’ve benchmarked this against moodycamel::ConcurrentQueue. In highly uniform, small-grain contention scenarios, our implementation is slightly slower. However, daking::MPSC_queue provides a 3x-4x performance leap in non-uniform bursts and bulk-transfer scenarios where "Zero-Cost Elasticity" and contention reduction are the primary goals.

I’d love to hear your thoughts on this repository!

GitHub: https://github.com/dakingffo/MPSC_queue
by nhatcher | 2025-12-18 07:41:40+00:00
I was hesitant to add my own but I think you might find it interesting as we make money not from clients but from grants.

We have IronCalc[1]. We don't make money from customers as we don't have a finalized product yet. But we have an ongoing grant from the NLnet[2]. You can have a look at the kind of projects they are granting money. It's always a source of inspiration.

That being said IronCalc takes a lot of time from me. Way more than a side project should.

[1]: https://www.ironcalc.com

[2]: https://nlnet.nl/project/IronCalc/
by VerifiedReports | 2025-12-18 07:41:41+00:00
A place that physically operates near me posts job openings all the time, for which I'm well-qualified. After applying to several of them (with a very specific and targeted cover letter) and getting no response, my final attempt was to print out a letter and resume and physically take them over to their office.

I was thinking this would make a positive impression and say hey, I'm really interested and I'm willing to go the extra mile. The person who answered the door and to whom I gave the envelope seemed baffled that anyone would do this... saying, you know you can do this online...

I can only conclude that this is a ghost-job situation, where they didn't envision being called out in person and on site. Otherwise, what kind of dicks don't at least raise a respectful eyebrow at (or at least acknowledge) the guy who drives over to their office to hand-deliver a letter and resume?

After that I knew for sure that I wouldn't want to work for these jagoffs anyway... even if the job were real.
Show HN: I made a browser extension to translate random words to Japanese
by Sudachidev | 2025-12-18 07:41:44+00:00
After reading this yesterday, https://news.ycombinator.com/item?id=46296863 ,

I wanted a slight alteration, so I made my own.

Basically it scans all the paragraphs of a page, replacing 5 words with Japanese Romaji. Those words have their colour changed and are bolded. When you hover over the changed word, a small popup shows the Hiragana and the English word.

At the moment it has a smallish list of words (111), all chosen to be basic level and (hopefully) unconfusing in their context.

I'm planning on pushing the word list out to about 1000, and having it cycle through 200 every week with an overlap.

Edit: a screenshot of it in action - https://freeimage.host/i/fldb3KB

It's also uploading to the firefox addon's store, but that's taking a while.
by theshrike79 | 2025-12-18 07:42:29+00:00
This is why I love the bootstrapping stories here on HN.

Like one anecdote where they were building an "app" for automatic hotel reservations IIRC.

The "app" was a form that fed into a Google Sheet, where the founders themselves took the data and called the hotels.

When they got some income, they automated small bits of the process one by one.

Sometimes it's good to just have _something_ out there and see if there's a market for it before carefully crafting a beautiful piece of software nobody will ever use. It all depends on whether you're doing it to solve a problem for someone or for the process of writing code. Both are perfectly valid reasons.
by d--b | 2025-12-18 07:42:43+00:00
A lot of head hunters will dangle job offers that don’t exist just so they can get info on the company you’re working at - basically they’re trying to keep tab on who’s in charge of hiring, so they can contact them.

There are also those who are paid by your boss just to see if any of their team members is looking to take off.

I don’t think there is anything new here though. These practice have existed for a while, and there’s not much you can do about it.
by adamnemecek | 2025-12-18 07:42:51+00:00
No, I mean what is inside the Objective-C objects. Essentially everything on macOS has an Objective-C API but is implemented using C++. Have you ever noticed the ".cxx_destruct" method on like all objects?

What you are talking about are C++ wrappers around Metal Objective-C API. Yes, it is weird as they are going C++ -> Objective-C -> C++. Why not go directly? Because Apple does not ship C++ systems frameworks.

The term is Objective-C++.
by steve_adams_86 | 2025-12-18 07:43:40+00:00
> There is always a way to leave things better than how you found them.

I agree, and that's something I do even if I get push back. I think it's essential in all aspects of life, or things typically get worse. People have to care.

My point is more so that it often—in my experience, at least—is met with friction because a lot of people see this kind of housekeeping as bad for bottom lines, or in the weeds, as a distraction, or what have you. I've encountered friction and push back more than acceptance let alone appreciation, I think.

A very common (and sometimes fair) form of push back is along the lines of "let's keep this ticket ONLY to the bug fix/feature/whatever and avoid any unnecessary changes". This is generally good practice, but I'll personally allow unrelated changes if they're relatively simple chores to leave things better than they were found.

If I were to summarize my experience, it's that caring to make things better or as good as they should be typically requires my own time and energy outside of regular work hours. That's a hard sell, especially after 20 years or so. I still do my best to make things better and I've come to expect and meet that friction with the necessary energy to overcome it, but... I mean, it's not always easy or necessarily rewarding. Many of my jobs could have often been dramatically easier if I cared less, but I'm not sure anyone would have even minded that.
Show HN: Lightning-extra, cloud-native plugins for PyTorch Lightning
by marco_z | 2025-12-18 07:43:44+00:00
After building ML systems in various organizations, I collected some useful kit I wrote into a single library.

What you can do with this:

* Save (and retrieve) model checkpoints (optionally with a content-addressable naming scheme) on blob storage

* Load datasets incrementally from blob storage into Pytorch, using a local disk cache

* store your training metrics into SQLite

Design principles :

* "dumb cloud and smart software" - I prefer commodity services like object storage and container runtimes to framework-like abstractions (e.g. managed MLFlow or similar)

* extend Lightning in the most straightforward way

* let the user assemble a lightweight MLOps process with minimal changes to preexisting model code.

Happy to field any questions and receive feedback !

The library was refined using Sonnet, but thoroughly checked by eye and hand.
by Attrecomet | 2025-12-18 07:43:52+00:00
Yes, Russian politicians like to voice ideas like that or just nuking EU cities. not sure if those are a weekly occurence, but its happened a couple of times this year, from officials mind you, so I wouldn't be surprised if state-run media or even just cranks that Putin likes to run for-out ideas through have weekly "Russians! We need to overrun the decadent EU" articles run...
by theshrike79 | 2025-12-18 07:44:41+00:00
Not just speed, but cutting costs. Same issue is popping up globally.

In Finland (smart) people are buying older houses where they still used good old methods to build them. They are easier to maintain and the failure points are known.

New builds have the weirdest basic issues because of cost cutting, sound carries way too much, the air quality is shit because nobody knows or bothers to do the design for moving the air properly etc.
by czhu12 | 2025-12-18 07:44:56+00:00
In some ways, that’s what MCP interfaces are kind of for. It just takes one extra step to add the mcp url and go through oauth.

I assume the fall off there will be 99% of users though, the way it works today.

But this theoretically allows multiple applications to plugin into ChatGPT/claude/gemini and work together.

If someone adds zillow and… vanguard, your LLM can call both through mcp and help you plan a home buy
by tgsovlerkhgsel | 2025-12-18 07:45:26+00:00
I love mining malware - it's reasonably visible and causes almost no damage. Essentially, it's like a bug bounty program that you don't have to manage, doesn't generate costly bullshit reports, and only costs you a few bucks of electricity when a vulnerability is found.

If you have decent network or process level monitoring, you're likely to find it, while you might not realize the vulnerable software itself or some stealthier, more dangerous malware that might exploit it.
by euroderf | 2025-12-18 07:45:37+00:00
The current half dollar is a rejected monster. Nickels should be too.

Shifting a decimal place works for me. Prices when I grew up up in the 60s & 70s were a fraction of today's. Penny candy WAS REAL! And the "five & dime" had stuff for, well, nickels & dimes. Not a lot, but some things. Nowadays it's dollar stores (a blight on the landscape) - their prevalence tells ya sumthin'bout the disposable income situation of many, many citizens.
by jval43 | 2025-12-18 07:48:40+00:00
I'm still here. But it hurts to see Mozilla shoot themselves in the foot again and again. They just don't get it, and they won't survive.

I was even a Pocket user when they acquired it, immediately stopped using it at that point because it was clear as day how stupid that integration was.

It's death by a thousand cuts, all to get some "other users" while alienating all the existing ones.

I'm even for all the AI features, but please let me add my own self-hosted LLM. Currently you can only set one via about:config, and as soon as you use any other LLM, the settings are lost. If I wanted everything locked down I could just use Chrome instead.
by TeMPOraL | 2025-12-18 07:50:11+00:00
Because typing on mobile is slow, app switching is slow, text selection and copy-paste are torture. Pretty much the only interaction of the ones OP listed is scrolling.

Plus, if the above worked, the higher level interactions could trivially work too. "Go to event details", "add that to my calendar".

FWIW, I'm starting to embrace using Gemini as general-purpose UI for some scenarios just because it's faster. Most common one, "<paste whatever> add to my calendar please."
by seec | 2025-12-18 07:50:30+00:00
Yes, in the US I think it's fine; you have a lot more freedom.

In France, access to the gas technically requires a certification that is not available to regular people. You need to be professional and bow to the bureaucracy.

I know somebody who was required to pay the full installation price for a heat pump he installed himself because there was no professional that was willing to charge and launch the installation for the small fee it should require.

This is the hypocrisy and value-destroying behavior of EU collectivist governments. They tout ecological solutions, but you need to pay far more than is reasonable for those modern solutions. Predictably, people chose things that are worse but cheaper, like wood-burning stoves or pellet stoves.

Those things are made artificially expensive for no good reason, and that's because they get built overseas mostly, and this happened because of regulations in the first place. Then they wonder why the EU is losing ground economically…
by ZuoCen_Liu | 2025-12-18 07:50:42+00:00
While I agree with MacKinnon in principle, we must acknowledge that simplicity is a luxury enabled by the surplus of compute power. > There are domains where 'cleverness' isn't just a vanity project, but a hard requirement. Take the Fast Inverse Square Root from Quake III or modern Zero-copy networking in high-throughput systems like Kafka. If we prioritized 'simple and readable' code in those contexts, we would be leaving orders of magnitude of performance on the table.

Sometimes, 'clever' code is simply code that refuses to ignore the underlying reality of the hardware. The danger isn't cleverness itself, but unnecessary cleverness applied to problems where the bottleneck is human understanding rather than machine execution.
by Hendrikto | 2025-12-18 07:52:24+00:00
> People who build houses don't obsess over this shit

Because they have built the same house 20 times already. And this exact house has been built 2 million times before. They know the requirements and how to do it, they know what can go wrong and how, and know how long it will take.

It makes a lot of sense to build the same physical house again and again, but if you are doing the same for software, you are definitely doing it wrong. Thus, typically each software development project is bespoke and has a lot of unknowns.
by metafunctor | 2025-12-18 07:52:26+00:00
Not impossible at all with a policy-filtering HTTPS proxy. See https://laurikari.github.io/exfilguard/

In this model, hosts don’t need any direct internet connectivity or access to public DNS. All outbound traffic is forced through the proxy, giving you full control over where each host is allowed to connect.

It’s not painless: you must maintain a whitelist of allowed URLs and HTTP methods, distribute a trusted CA certificate, and ensure all software is configured to use the proxy.
by Imustaskforhelp | 2025-12-18 07:53:57+00:00
The magpies of the internet sounds like a really cool name for what its worth, dont mind if I steal it :)

I played inscryption (a really good game) and magpie had the sigil of being able to take any card from the deck and oh my, it was a beauty seeing a magpie or the sigil because that meant that I could then get any overpowered card I had from the deck.

I am sure people might not understand it if they haven't played the game but everytime I hear magpie, Its almost obligatory for me to mention inscryption. (also the same goes for stoat and ouroborous too)
by teekert | 2025-12-18 07:54:17+00:00
Of course, the Dropbox post has a meme-level example of an HNer predicting its popularity :) [0]

That said, it also often happen that you share something and it is not picked up, even though after 10 years I think I can predict what HN loves. Sometimes a repost after 2 days will hit the front page, certainly not always.

[0] https://news.ycombinator.com/item?id=9224