MurphyA/hacker-news huggingface dataset:
by sanjayjc | 2025-12-02 07:18:23+00:00
I found a directive[1]:

> Pre-installed App must be Visible, Functional, and Enabled for users at first setup. Manufacturers must ensure the App is easily accessible during device setup, with no disabling or restriction of its features

While I can get behind the stated goals, the lack of any technical details is frustrating. The spartan privacy policy page[2] lists the following required permissions:

> For Android: Following permission are taken in android device along with purpose:

> - Make & Manage phone calls: To detect mobile numbers in your phone.

> - Send SMS: To complete registration by sending the SMS to DoT on 14422.

> - Call/SMS Logs: To report any Call/SMS in facilities offered by Sanchar Saathi App.

> - Photos & files: To upload the image of Call/SMS while reporting Call/SMS or report lost/stolen mobile handset.

> - Camera: While scanning the barcode of IMEI to check its genuineness.

Only the last two are mentioned as required on iOS. From a newspaper article on the topic[3]:

> Apple, for instance, resisted TRAI’s draft regulations to install a spam-reporting app, after the firm balked at the TRAI app’s permissions requirements, which included access to SMS messages and call logs.

Thinking aloud, might cryptographic schemes exist (zero knowledge proofs) which allow the OS to securely reveal limited and circumscribed attributes to the Govt without the "all or nothing", blanket permissions? To detect that an incoming call is likely from a spam number, a variant of HIBP's k-Anonymity[4] should seemingly suffice. I'm not a cryptographer but hope algorithms exist, or could be created, to cover other legitimate fraud prevent use cases.

It is a common refrain, and a concern I share, that any centralized store of PII data is inherently an attractive target; innumerable breaches should've taught everyone that. After said data loss, (a) there's no cryptographically guaranteed way for victims to know it happened, to avoid taking on the risk of searching through the dark web; (b) they can't know whether some AI has been trained to impersonate them that much better; (c) there's no way to know which database was culpable; and (d) for this reason, there's no practical recourse.

I recently explained my qualms with face id databases[5], for which similar arguments apply.

[1] https://www.pib.gov.in/PressReleasePage.aspx?PRID=2197140&re...

[2] https://sancharsaathi.gov.in/Home/app-privacy-policy.jsp

[3] https://www.thehindu.com/sci-tech/technology/pre-install-san...

[4] https://www.troyhunt.com/understanding-have-i-been-pwneds-us...

[5] https://news.ycombinator.com/item?id=46054724
by Wieldable4640 | 2025-12-02 07:18:29+00:00
Americans pay more for worse outcomes, so this is clearly a political/priorities issue, not an issue with wealth.

Other counterexamples are the other European countries with the same safety net which are not petro states (they do have colonial wealth though).

A lot of this was possible because of high corporate taxes and high marginal taxes on high incomes, so in theory this model could apply in most places.
by RHSeeger | 2025-12-02 07:20:06+00:00
> I don’t really get why people seem convinced that the government is removing protections for all citizens under a smokescreen of illegal immigration handling, as opposed to taking limited and temporary measures to deal with an unusual situation.

Probably because the actions being taken are against people of every category; illegal immigrants, legal immigrants, and naturally born citizens.

As has been noted, _anyone_ not being entitled due process means _nobody_ is entitled to due process. Because then can kidnap you, claim you're "of a group not entitled to due process", and do whatever they want to you. And you can't push back because you're not in that group... because you need due process to do that.

> But why do we think that they are using this as a ruse to like become despotically authoritarian in general?

At some point, you have to call a duck a duck. They're doing things that despotically authoritarian would do, over and over. They may or may not _think_ that's what their goal is, but it clearly is.
by catelm | 2025-12-02 07:20:27+00:00
NixOS makes this rather easy too. There exist modules for synapse, livekit, etc (MAS module is still a Pull Request, though) and the setup is quite doable: https://wiki.nixos.org/wiki/Matrix

However, you still need to know what you are doing (the manual helps) and connect the pieces (in theory there could be a nixpkgs module that does this for you but apparently nobody did bother). Once its done you can lean back.

I've been running my homeserver happily for > 5 years and it was fairly straightforward.
by occz | 2025-12-02 07:20:59+00:00
Public transit in Stockholm has in the last ten years done two things that make for a godlike ride payment UX:

1. Removed the concept of zones - everything is now covered by one single ticket 2. Introduced tap-to-pay support for debit/credit cards

This means that you as a user can always just show up with the overwhelmingly most common way to pay for things in Sweden - by card - tap once, and then you're done. No more actions required. Need to transfer? No problem, the virtual ticket you bought by tapping your card is valid for 75 minutes, no more money will be charged if you tap again within this window.

No fumbling with an app, no awkward QR code scanning, just one tap and go. Peak UX.
by sunaookami | 2025-12-02 07:22:40+00:00
It's a bit more complicated:

>In order to maximize user security, we would prefer third-party providers to use the Signal Protocol. Since this has to work for everyone however, we will allow third-party providers to use a compatible protocol if they are able to demonstrate it offers the same security guarantees as Signal.

>To send messages, the third-party providers have to construct message protobuf structures which are then encrypted using the Signal Protocol and then packaged into message stanzas in eXtensible Markup Language (XML).

>Meta servers push messages to connected clients over a persistent connection. Third-party servers are responsible for hosting any media files their client applications send to Meta clients (such as image or video files). After receiving a media message, Meta clients will subsequently download the encrypted media from the third-party messaging servers using a Meta proxy service.

You also have to connect over XMPP and through a proprietary "Enlistment API", etc.

https://engineering.fb.com/2024/03/06/security/whatsapp-mess...
by Peteragain | 2025-12-02 07:22:45+00:00
The Flemming/Florey story is actually an interesting bit of science history, but it's about popular media and the romance of science v.s. how real science is done with patience, selfless dedication and a literature search. When Chain joined the Oxford lab, a literature search turned up 6 candidate "penicillins" which they went on to investigate. Fleming smoked a pipe, got to the office about 10, and was accessible (being in London). This version of the story admittedly comes from a Howard Florey biography I read 10 years ago..
by legostormtroopr | 2025-12-02 07:23:44+00:00
I don't expect someone to do deep focused work from 9am to 5pm.

But at the same time, I don't expect them to spend their 9-to-5 working for another company at the same time.

As a founder, who respects the 9-to-5 and supports WFH, if I'm paying for 8 hours of work, I want 8 hours of output. Not 4 hours of output, and then you working 4 hours for another job.

If multi-jobbing becomes a thing, then WFH becomes untenable because at least in the office you can be monitored.
by torginus | 2025-12-02 07:24:06+00:00
I've read on a bit and found the additional details about the tape with DNA on it, which makes him look more guilty - but this wasnt mentioned in the wikipedia article, and the phone logs which you mentioned as justification for mass surveillance are less than worthless.

Establishing that both the perp and victim was at the same train station some time during a longish window time doesn't mean jack.

As for DNA I'm not a criminology expert, but if courts don't accept it as conclusive evidence means there's something wrong with it - courts have a long history of accepting official sounding bunk ('expert' witnesses, polygraph etc) in order to manufacture evidence to their conclusions.

Anyways I don't want to detour from my main argument that even from the official PoV the phone evidence is very weak, I'd argue it's meaningless, and using this as justification as mass surveillance is a counterargument if anything.

Though I can imagine it's incredibly easy to deliberately misrepresent it as 'we used digital records to catch a pedo murderer' by dishonest supporters of the policy.
by rguiscard | 2025-12-02 07:24:09+00:00
Original title is "China claims domestically-designed 14nm logic chips can rival 4nm Nvidia silicon — architecture leverages 3D hybrid bonding techniques for claimed 120 TFLOPS of power".

And the key conclusion is "14nm logic bonded directly to 18nm DRAM to drastically increase memory bandwidth and reduce compute latency."

I cannot tell it is real or not.
by arjie | 2025-12-02 07:24:47+00:00
Forgetting the obvious security advantage for the moment, I've found this to actually be convenient that the lifetimes are rather short. I'm not disciplined when it comes to setting up my homelab projects, so in the past sometimes I'd just LE it and then worry about it when renewal failed. My family is the only consumer so who cares.

But then they set some shorter lifetime, and I was forced to set up automation and now I've gotten a way of doing it and it's pretty easy to do. So now I either `cloudflared` or make sure certbot is doing its thing.

Perhaps if they'd made that more inconvenient I would have started using Caddy or Traefik instead of my good old trusty nginx knowledge.
by sometimes_all | 2025-12-02 07:24:53+00:00
Yes. It's not just the money; you'll be at the center of Google's power base. Spend a few years there, and it'll be much easier to move to anywhere in the world you want (within Google or otherwise).

Being at headquarters always makes it easier to move elsewhere. Being outside of headquarters makes it more difficult, because the main decision-makers are usually at HQ and you need fewer hops to reach them in order to get what you want.

Unless you're planning to stay in the valley permanently, I would not think too much about sprawl/car stuff. IMO there should always be painful disadvantages so that you have motivation to move towards where you really want to go :D
by hnlmorg | 2025-12-02 07:25:09+00:00
Why would you want to mix Windows and Linux processes into one workflow on the same host?

I’m sure you’ve encountered a very niche problem that requires it, but I cannot think of any scenario where that kind of behaviour would be desirable vs splitting those workflows up.

Are you not able to have separate Windows and Linux hosts (eg VMs or containers) that are instigated to run in parallel as part of the same pipeline, but don’t rely on the same processes running in the same host?

Or at the very worst, use a TCP/IP based RPC to share state between the different hosts?
by mmcgr | 2025-12-02 07:25:18+00:00
Location: Dubai, UAE (UTC+4) Remote: Preferably Willing to relocate: Depends on the offer but likely not Technologies: Go, TypeScript, C++, PostgreSQL, Redis, Vue, Ethereum, Solidity, GRPC/Protocol Buffers Résumé/CV: https://f003.backblazeb2.com/file/Bronze8113/p/Résumé.pdf Email: me@maharshi.ninja Calendar: https://cal.com/maharshi/30min

Looking for a full-stack or back-end engineering role in distributed or decentralized systems, preferably working with Go and TypeScript/JavaScript although I'm open to learning about new things. Something open-source will be a big plus.
by zkmon | 2025-12-02 07:25:24+00:00
Every place in the world is a mix of two things - the background and the foreground. The background is the natural stuff (terrain, greenery, water bodies, climate etc) and the foreground is the areas where people settled.

The people areas (houses, streets, work places) are dependent on the economic activity, prosperity and culture. And they look the same as any other place in the world with the same parameters.

Outside of people's areas, it depends on terrain (hill station), latitude (for climate) and greenery. Again for it looks the same as any other place in the world with the same parameters.

So, every place is a combination of these two things with different parameters. Sometimes, the foreground has dependencies on the background.
by vladvasiliu | 2025-12-02 07:25:36+00:00
Your initial post was about there being choice. Now it appears that the upside of the office is the others being there.

I can understand that some people like the physical distinction between "work" and "home". My boss is like that, and he would actually go to the office during covid when no one else would be there. He lived alone in a comfortable apartment, so there wasn't even a question of loud kids / no space for a desk. It obviously never came up that we should also show up. He sometimes wants us to come in the office, all the at the same time, for some form of all-hands meetings, but he doesn't just drop them out of the blue: we plan these together, and they don't happen on a fixed, tight schedule.

The company has now moved to a "flex office" scheme. I was already not very happy having to go in, but you can imagine I now abhor it. Having to share desks with people who don't give a shit about office equipment, having to clean up the screens because they figure it's fine to stick their fingers on them and having to use shoddy peripherals... And it goes on and on, you've read it on every HN post on the subject.

Luckily for me, they don't really enforce this, and I can still spend most of my days WFH and still have a semi-dedicated desk.

But your post is the reason why many people are up in arms against this whole "the office is better". Apparently, it's only better if you force everybody back in. So it's not really about "choice", but about having one's preferences be the "right" ones.
by sgt | 2025-12-02 07:26:12+00:00
So the new VP for AI comes from Microsoft, after having only been there for a couple months? I'd be a little bit concerned about that, someone jumping ship so quickly.

Also, Apple tends to recruit internally first for VP positions, which they didn't do in this case. I am sure they considered internal candidates though, but I feel they're getting a bit "desperate" in the AI game to show progress.
by justforfunhere | 2025-12-02 07:26:45+00:00
I am building https://framebench.dev/ in my free time. It comprises of a bunch of utilities aimed at common workflows found in automotive industry. Some highlights:

- Easily parsing UDS, ISO-TP protocol CAN frames

- Parsing CAN-DBC files

- Building CAN Frame Payloads based on messages in a DBC file.

This is really early stage. Any thoughts are welcome.
by jaredklewis | 2025-12-02 07:26:58+00:00
Just a data point, in case it’s useful to anyone: I saw the screenshots and blog posts about Liquid Glass and thought it looked miserable. But then I had a hardware issue and had to upgrade.

I swear after the first 3 days, I’ve only even noticed the new UI maybe a dozen times. If I stop and really pay attention to it, I think the old UI was a bit better, but strangely I don’t really seem to notice the new UI. If it’s worse, I rarely notice.

Then again I spend most of my time in jetbrains IDEs, iterm2, and Firefox (none of which have changed much). So I might be a special case.
by NickLangat | 2025-12-02 07:27:14+00:00
Location: Nairobi, Kenya Remote: Yes Willing to relocate: Yes

Technologies: Python, Django, Pandas, Numpy, Scikit-learn, TypeScript, Next Js,Tailwind CSS, PostgreSQL, AWS, DigitalOcean, Docker

Résumé/CV: https://nicklangat.com and https://studio.nicklangat.com

Email: nicksonlangat95@gmail.com

About:

I built Fiscal AI, a financial expense analysis, transaction classification, expenditure forecast/prediction and ai assistant tool powered by machine learning models and LLMs. You can see a short demo here https://supercut.ai/share/nickson-langat/lKLxTSQsdv79scuWAy2...

I also built Codetail, a platform that helps developers improve their coding skills by providing personalized solutions and practice problems. It showcases my ability to design and implement complex features such as user authentication, problem-solving interfaces, and AI-driven recommendations. You can explore the project https://codetail.nicklangat.com

I also built Invoisce, a modern invoicing platform that simplifies billing for businesses and freelancers. The platform offers features like automated invoice scheduling, bulk invoice generation, and email integration for direct client communication. Users can choose from customizable invoice templates, attach supporting documents, and generate secure shareable links for easy client access. Invoisce is designed to streamline the invoicing process, reducing manual work and improving efficiency for businesses of all sizes. You can explore the project https://invoisce.nicklangat.com

I thrive on building impactful, user-centric applications and am always eager to take on new challenges. If you're looking for an engineer who can deliver high-quality solutions, let’s connect. I'd love to discuss how I can contribute to your team.
by wkat4242 | 2025-12-02 07:29:50+00:00
Not directly but they do create an open and fair working environment for all.

Once you leave room for discrimination and bullying, everyone suffers because it makes company culture harder.

And it's not just about "quotas". That's an extreme-right talking point. Diversity done properly doesn't involve quotas. Those are just a way for companies that don't actually care about it to have an easy 'fix' to get their numbers to look ok but it's not actual diversity.

I'm part of a diversity team myself as a side role. In Europe luckily.
by gucci-on-fleek | 2025-12-02 07:30:30+00:00
The certificates will expire, but (as far as I'm aware), you're still allowed to use the same private key for multiple certificates, so as long as you pin to the public key instead of to the certificate itself, you should be fine.

The real modern way to do certificate pinning is to not do certificate pinning at all, but I'm sure that you've already heard this countless times before. An alternative option would be to run your own private CA, generate a new public/private keypair every 45 days, and generate certificates with that public key using both your private CA and Let's Encrypt, and then pin your private CA instead of the leaf certificates.
by vintermann | 2025-12-02 07:30:45+00:00
I have been trained on code I don't have the license to use myself. I'm not like these Creators, who suck wisdom from the cosmos directly, apparently.

Sure. It's a problem that corporations run by more or less insane people are the ones monetizing and controlling access to these tools. But the solution to that can't be even more extended private monopolistic property claims to thought-stuff. Such claims are usually the way those crazy people got where they are.

You think in a world where Elsevier didn't just own the papers, but rights to a share in everything learned from them, would be better for you?
by chii | 2025-12-02 07:31:31+00:00
> What we need is for people to be happy

that is irrelevant to company management - in so far as that happiness has negligible effect on productivity.

However, from anecdotal evidence i've gathered (only sample size of 5-7 or so), in office has been more productive, but they (with the exception of one, who lives 5 mins from their office) all dislike RTO and would've preferred WFH; but not enough to quit over it as it's not a 5 day mandate, but a 3-4 day mandate.
by Saline9515 | 2025-12-02 07:31:41+00:00
"Hey now guys we just voted this law, now you need to use your BankID to login to your phone the first time. Because, think of the children! And well, if you have pictures we deem forbidden, you'll be reported."

Once the infrastructure for mass surveillance is available, States are tempted to use it.

Also even if it may be ok in Sweden for cultural reasons, the rest of the world unfortunately isn't (but can enjoy private washing machines in exchange).
by lynguist | 2025-12-02 07:32:01+00:00
For me the biggest plot hole of the popular penicillin discovery myth is clearly the open window story, including its multiple side plots with meteorological events.

And that that story exists and has PREVAILED despite the fact that everyone knows that the same building was housing a mycology laboratory only a flight of stairs away, and that it was the mycology colleague La Touche who identified the penicillin.
by j1elo | 2025-12-02 07:33:15+00:00
Cert lifetimes are such a burden. I wanted to provide pre-configured server examples of my WebRTC project, something that was download-and-run without any more prior knowledge (an important point), which users could access from their LAN e.g. to test the examples from their phones (not from the useless localhost exemption that exists for secure contexts), for which a self-signed cert embedded in the examples was fine. New users could run them, new concepts (such as security and certificate management in production apps) could be learned at an apropriate time.

Until web browsers started to believe that no, that was too much of a convenience, so now long expiration certs became rejected. What's the proposed solution from the "industry"? to run a whole automation pipeline just to update a file in each example folder every few months? bonkers. These should be static examples, no reason to having to update those any earlier than every few years, at most.
by jakeogh | 2025-12-02 07:33:16+00:00
Superscript:

Lowercase: ᵃᵇᶜᵈᵉᶠᵍʰⁱʲᵏˡᵐⁿᵒᵖʳˢᵗᵘᵛʷˣʸᶻ

Uppercase: ᴬᴮᴰᴱᴳᴴᴵᴶᴷᴸᴹᴺᴼᴾᴿᵀᵁⱽᵂ

no lower q, and no upper C,F,Q,S,X,Y or Z. And depending on the font, it might be worse.