MurphyA/hacker-news huggingface dataset:
by ksec | 2025-12-24 06:40:26+00:00
>>your description of Apple’s contribution to USB-C and CPU design is just as untrue.

Not my description. Or you mean Gruber's description of Apple's contribution.

His post on USB-C, CPU Design and AirPod is still Up on his site.

Those who actually worked on USB-C before it was even known also posted on HN.
by Ralmidu | 2025-12-24 06:42:29+00:00
I built this entire platform by directing AI tools instead of writing code myself. I was interested in computer science years ago but stepped away right as OOP was becoming standard, so this is my first real attempt at building software. Every part of the platform — including the user account system, authentication, admin dashboard, and subscriptions — was created through prompt‑driven development.

The project includes document chat, OCR, translation, tutoring, agents, voice chat, a to‑do list, and a working Stripe subscription system. Access is free for now for demo purposes. Happy to answer questions about the build process or how AI was used to put everything together.
by rafaelmn | 2025-12-24 06:42:38+00:00
Like another comment mentioned I'm ready to go back to torrenting. Im currently paying for 4 streaming service subscriptions (if you count YouTube premium) where I have super segmented and annoying search UX, and Apple won't even let me pay for their service in my EU county (Croatia). And the DRM story is ridiculous. I'll just setup ARR stack and have a better experience than I can pay for - for free.

I'll still keep buying stuff on steam.
by eviks | 2025-12-24 06:43:09+00:00
> They're equivalent in security

They aren't, security is defined as the amount of information you leak. If you have an inferior process where you're substituting the correct digital match with an in incorrect manual match, you're reducing security

> albeit more error prone

The opposite, you can't find all 925 cases of the word Xyz as efficiently on paper without the ease of a digital text search, my guess is you just have made up a different comparison (e.g., a human spending 100hrs reading paper vs some "smart" app doing 1 min of redactions) vs. the actual process quoted and criticized in my original comment

> Whether one is redacting in between or before doesn't change much

It does, the chance to make a mistake differs in these cases! Printing & scanning can't help you here, it's a totally set of mistakes

> Best practice

But this conversation is about a specific blogged-about reality, not your best practice theory!
by omoikane | 2025-12-24 06:43:27+00:00
This looks like the classic fire effect: generate rising flames by averaging pixels below each output pixel, and randomize the last row.

I remember this effect because there was a competition[1] where every entry was a fire effect in 256 bytes, and I was amazed at the simplicity of the core algorithm.

[1] https://www.pouet.net/party.php?which=1791&when=1996
by JumpCrisscross | 2025-12-24 06:44:00+00:00
> What's the pro of manually replacing all 1746 occurrences of "Trump" instead of spending 0.01% of that time with a digital search & replace and then spending the other 1% digitally searching for variants with typos

Because none of this involves a focussed reading. It's the same reason why Level 3 can be less safe than Level 4. If you're skimming, you're less engaged than if you're reading in detail. (And if you're skipping around, you're missing context. You may catch Trump and Trup, but will you catch POTUD? Alternatively, if you just redact every mention of the President, you may wind up creating a President ***, thereby confirming what you were trying to redact.)

If it doesn't matter, automate it. If you care, have a team do a proper redaction.
How do you turn messy notes into something usable?
by sayandbera | 2025-12-24 06:44:39+00:00
I’ve always struggled with long, messy notes.

I could write them down, but when it came time to revise or understand them, rereading text didn’t help much.

So I started experimenting with turning notes into visual structures instead — mind maps that show relationships instead of paragraphs.

I’m building a small tool around this idea (hand-drawn style, not rigid boxes), but before going further I’d love to hear:

• Do you use any method to visualize notes?
• Does structure actually help you understand, or is text enough?
• What would make a tool like this genuinely useful (or useless)?

Not here to promote — genuinely curious about how others think about notes and understanding.
by rock_artist | 2025-12-24 06:44:41+00:00
I live in the EU and now traveling my family outside the EU. Today I’ve tried updating AltStore but it won’t let me. Even VPNing to my home won’t do it.

So until there will be more incentive to make it globally, the UX is intentionally crippled not only by making the minimal viable but also by region locking.

Imagine pairing headphones working great in EU and then you’re traveling somewhere and it’s broken.
by josephernest | 2025-12-24 06:45:40+00:00
Related: for some hardware project, I have a backend server (either C++ or python) receiving frames from an industrial camera, uncompressed.

And I need these frames displayed in a web browser client but on the same computer (instead of network trip like in this article).

How would you do this ?

I eventually did more or less like OP with uncompressed frames.

My goal is to minimize CPU usage on the computer.
Would h264 compression be a good thing here given source and destination are the same machine?

Other ideas?

NB: this camera cannot be directly accessed by the browser.
by prpl | 2025-12-24 06:46:45+00:00
I suspected this. They were moving, but randomly to an observer. I’d seen about 2 out of maybe 20 stopped Waymos navigating around Arguello and Geary area in SF Saturday at 6PM. What was worse was that there was little to no connectivity service across all 3 main providers deeper in the power outage area as well - Spruce and Geary or west of Park Presidio (I have 2 phones, with Google Fi/T-Mobile, AT&T, and Verizon).
by PlanksVariable | 2025-12-24 06:47:31+00:00
That seems like the least disgraceful part of the whole thing.

Wherever they go, the U.S. taxpayers are stuck footing the bill for their prison stay, food, medical treatment, etc., but why would it need to be in the United States? They have no claim to stay there.

The disgraceful part is sending illegal immigrants without criminal history to maximum-security prisons, sending asylum seekers to prison, or sending anybody to prisons that torture the inmates.
by bitwize | 2025-12-24 06:47:32+00:00
Before LLMs, software wasn't just some artifact like a painting, a ladder, or a bloviating Facebook post—something ordinary humans made to suit their own purposes. It could only be made by the mutant lizard people from space who walk among us, wearing human skins, yet somehow having the innate ability to program. But by good old fashioned human ingenuity and manipulation tactics (aka marketing), we managed to trick the lizard people into building LLMs! Think of an LLM as an electronic genie that has, among other abilities, the lizard person's ability to write computer programs—and puts that power in the hands of ordinary human beings like you! Finally, after eight decades of computers—infernal machines built by the lizard people to enslave us all—the computer now does exactly what you want!
by rafaelmn | 2025-12-24 06:48:04+00:00
Services are 25% and are the only one growing/they can grow - that means all focus is going to be on expanding that revenue = enshitification.

Hardware is now purely a way to get you on to the app store - which is why iOS is so locked down and iPad has a MacBook level processor with toy OS.

If you stop looking at the marketing speak and look at it from a stock owner perspective all the user hostile moves Apple is double speaking into security and UX actually make a lot more sense.
by drcxd | 2025-12-24 06:48:24+00:00
Strictly speaking, Lua is not global by default. All free names, that is, all names unqualified with `local`, is actually indexed from a table `_ENV`, which is set to `_G`, the global environment. So, all free names are effectively global by default, but you can change this behavior by put this line at the top of your file `local _G = _G; _ENV = {};`. This way, all free names are indexed from this new table, and all access to the global names must explicitly be accessed through `_G`, which is a local variable now. However, I have never seen such practice. Maybe it is just too complicated to accept that all free names are global variables and you have to explicitly make it local.
by JumpCrisscross | 2025-12-24 06:49:36+00:00
> if the hypothetical were that the CIA was effectively outside of control of the law for actions committed in private by CIA personnel in their homes

My point is their actions are committed outside the law. They've just been able to avoid punishment by covering it up. What they are not is above the law, at least not in the long run. (There are absolutely short bouts where the CIA acts above the law overseas, and rare cases where it has done so domestically. But the fact that they're covering it up betrays that they're crafty bastards, not invincible ones.)
by eviks | 2025-12-24 06:50:10+00:00
> That is ... not at all surprising?

For the 3rd time, this conversation is not about YOU and not about what surprises you!

> "Lack of authorization" has a clear legal meaning whereas "hack" does not.

No, you've made up this limit to some "legal meaning" (also wrong here, large variety there as well but wouldn't want to endulge you further). Again, open up a dictionary on "hack", then follow the definition of "authorization" from there, if you only find "legal" in there, get a better dictionary, journalists / commenters are usually not lawyers, so they wouldn't accept your artificial legal limits on meaning!
by tomhow | 2025-12-24 06:51:03+00:00
> money and power that entities like A16Z have make the possibility of corruption of endeavours like HN trivial

What does this mean? Why would a VC firm like this "corrupt" HN and how would they to it?

> Like it or not as an editor at HN you're in a position of power and influence

I think dang has written about this plenty [1]; he certainly talked about it in the article in The New Yorker; it's a myth that the moderators have great power and influence. The community has the power here. I wouldn't/couldn't be doing this job if hadn't learned that a long time ago. The only thing anyone at A16Z has ever done to try and influence HN is to refer to it as “Hater News” [3][4], which really just goes to show how much they feel like they have no control over it. Which is exactly what we want and like. Nobody controls HN other than the HN community, and those of us who work on it know that we can only succeed at this if we act in the way that the community wants and expects of us every day.

[1] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

[2] https://archive.is/ybxFT

[3] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

[4] https://hn.algolia.com/?dateEnd=1766448000&dateRange=custom&...
by groceryheist | 2025-12-24 06:53:03+00:00
I'm thinking a lot about this currently as a recent convert (as of Opus 4.5).
I think this post is on the right track, but like much of this discourse, it isn't really addressing how the technology will grow and the disciplines will adapt.

I'm by no means a doomer, but its obviously a huge change.

Generative coding models will never be 100% perfect. The speed of their convergence to acceptable solutions will decline in complex and novel systems, and at some point there will be diminishing returns to increasing investment in improving their performance.

The cost of software will fall precipitously and it seems unlikely that the increase in the value of programmers / engineers as they currently practice will offset the decline in the price in software. However, following the law of supply and demand, the supply and the amount of software produced will surely grow, and I think someone has to use the models to build software. I expect being trained in software engineering will be very helpful for making effective use of these tools, but such training may not sufficient for a person to succeed in the new labor market.

The scope of problem that a valuable engineer is expected to manage will grow enormously, requiring not only new skills in using generative coding/language models, but also in reasoning about the systems they help create. I anticipate growth in crossover PM / engineering roles. I guess that people who generalize across the stack and current sub-disciplines will thrive and valuable specialties and side-disciplines will include software architecture, electrical engineering, robotics, communication, and business management.

Some people will thrive in this new field, but it may be a difficult transition for many. I suspect that confusion about model capabilities and how to make the most of them and which people are doing valuable things will put a lot of friction and inefficiency into the transition time-frame.

Last thought, given how great models are at coding compared to general of knowledge, administrative, and bureaucratic work, I expect models are widely used to build systems that are supply shocks on such work. I don't think my argument above applies to such workers. I'm worried most about them.
by pfannkuchen | 2025-12-24 06:53:08+00:00
Right, I’m aware of the excuses the government uses to keep secrets.

But on principle, what right does the government have to keep secrets from its own people? I don’t believe we had that button at the founding, it was added somewhere along the way. I’m asking what is the justification for this, and whether in the grand scheme of things that outweighs the principle of the government not being a separate entity from the people.

There are multiple ways to approach witness protection. For example if we have a problem with witnesses being harmed we could make being involved with witness harm at any layer of indirection a capital offense. We can probably think of other options besides the government being allowed to keep secrets from its own people.
by simonw | 2025-12-24 06:53:08+00:00
None of those v8 solutions provide what I need:

1. The ability to restrict the amount of memory that the sandboxed code can use

2. The ability to set a reliable time limit on execution after which the code will be terminated

My third requirement is that a company with real money on the line and a professional security team is actively maintaining the library. I don't want to be the first person to find out about any exploits!
by danburzo | 2025-12-24 06:53:19+00:00
I’m sorry you didn’t get anything out of it. I wasn’t operating at the edge of caching knowledge, just a person refreshing and clarifying for themselves how caching works. Some things were new to me, and after spending so much time with the RFC, I just thought others may benefit or, more selfishly, would point out errors or ways to make it better.

I mean, do those <meta> tags really suggest someone who’s into SEO? Call me stale but what I really want is validation :-)
by hnthrowaway121 | 2025-12-24 06:53:43+00:00
To me a direct HR person is much less trustworthy than a manager with whom you’ve established a good track record. The manager’s behavior is incentivized completely differently depending on the company - sometimes it’s legitimate to manage towards the employees success and sometimes lose them. As a manager I had a director say something similar, that we are often just stepping stone on somebody’s career.

Whereas HR is a risk mitigation function whose purpose is to minimize the company’s exposure to lawsuits, and I stay miles away from them unless it’s absolutely necessary to engage. They can do other things on top of that function that are very helpful, but they are not there to help.

There are a lot of fictions at work. Still we all have our own risk profiles, and if we are lucky we can afford the risk of an honest conversation with our boss. That’s not the same as pretending everybody is trustworthy, it’s making a bet based on the specific situation at hand.

If your advice is “young people be careful, managers, supervisors, and HR are not your friends”, I totally agree.
by rayiner | 2025-12-24 06:53:47+00:00
It’s easy to appear competent when you’re sitting on your butt doing nothing. Had exactly did Barr and Co. accomplish in terms of moving forward the agenda people voted for? These guys were so eager to win accolades from liberals they couldn’t even pick the lowest hanging fruit. Totally pathetic effort after the stellar performance by the legal eagles in the Obama administration. Trump 2.0 is pursing a very aggressive legal strategy. It has a bunch of very smart people racking up wins in areas such as funding cuts, education, civil rights, deployment of national guard, etc. It also has people that are… struggling. But, unlike with Trump 1.0, they’re actually trying to move the ball forward for their team.
by ksec | 2025-12-24 06:54:46+00:00
https://daringfireball.net/linked/2015/03/14/apple-usbc

And many post before that. But was too late, by that time the words were spread on internet like wildfire. Especially in Apple focused publishing sites.

https://daringfireball.net/linked/2017/03/17/cybart-apple-pr...

I cant find the exact one, but he at the time was suggesting AirPods was sold at cost. Along with plenty of American so called "analyst".

He might have his network within Apple on software. But anything that has to do with Hardware or things like MFi Licensing scheme he is completely wrong.
by rerdavies | 2025-12-24 06:55:52+00:00
That's not how it ACTUALLY worked. How it actually worked is that top video card manufactures would make multi-million dollar bids to to the devs of the three or four AAA games that were predicted to be best-sellers in order to get the devs to optimize their rendering for whatever this year's top video adapter was going to be. And nobody really cared if it didn't run on your crappy old last-year's card, because everybody undrerstood that the vast majority of games revenue comes from people who have just bought expensive new systems. (Inside experience, I lived it).

I don't think it has ever been the case that this year's AAA games play well on last year's video cards.
by Ferret7446 | 2025-12-24 06:56:21+00:00
No because SBOMs are a hot mess and not standardized at all. They're "standardized" in the same sense as HL7 (ask someone in the healthcare industry, make sure to have some sedatives on hand first). A comprehensive SBOM for something like Chromium is many dozens of MBs compressed (I forget exactly, but it's patently ridiculous). Also SBOMs should be build artifacts, so them (also) being build inputs is problematic.
by notepad0x90 | 2025-12-24 06:56:28+00:00
Wouldn't lock files require running the thing? People need to be able to verify SBOM without doing that. It's the kind of thing you check against a large fleet of devices. If someone has software installed on their laptop but hasn't run it in a year, you need to be able to measure SBOM for that.

SBOM is too similar to things like authenticode and package signing for it to be some unique solution. We're too used to how things have always been done. Too stuck in the "monkey see, monkey do" mindset. How about any piece of software, under any execution environment should not only have an SBOM declaration, but cyptographic authentication of all of its components, including any static data files.

This should be a standardized mechanism. Everyone is doing their own thing and it's creating lots of insecurity and chaos. Why can't I answer all security-related questions about the software I'm running on any device or OS using the same protocol?

Everyone would consider it absurd if we used a different TLS when talking to an Apache server or a Windows server than alternatives.

SBOM, code signing (originator of the code), capability declarations, access requirements (camera, mic, etc...) are not things that are unique to an OS or platform. And for the details that are, those are data values that should be different, not the entire method of verification.

I wonder what it would take to enact this, I'd imagine some sort of regulatory push? But we don't even have a good cross-platform and standardized way of doing this for anyone to enforce it to begin with.
by danburzo | 2025-12-24 06:58:19+00:00
Good call! Honestly I just wanted to wrap it up before the holidays, but you’re right that a small section on Vary would have been useful.

Things like non-conforming caching services made me punt actual suggestions to a later article, as I wasn’t sure how my sense of the RFC interacted with the real world. HTTP Caching Tests seems like a great resource for this, but only includes Fastly out of the big providers, and it seems to be doing okay with Vary. https://cache-tests.fyi/
by ankit219 | 2025-12-24 06:59:47+00:00
modular does not mean in terms of how the library is architected, but in terms of how many vendors/customers it needs to support. Airpods' hardware is built and then kernels are written in a way to compliment each other and get the most out of the system. With another set of headphones with a different chip, there is a very good chance that code written today would not be optimal because other builders could manufacture different things based on the same spec. You cannot bring everything to software, nor can you have hardware doing everything. Tradeoffs would be needed.

The issue comes in second order effects. If third party headphones are given access and then the experience is not as good, they complain that Apple hasnt open up the spec enough, and it just results in Apple being forced to be modular in their approach.
by Annesmit-14 | 2025-12-24 07:02:30+00:00
Discover the world of creativity with Bothidea Toys Co., Ltd. and their exceptional range of modeling clay products. With a commitment to quality and innovation, Bothidea offers a variety of clay options that are perfect for artists of all ages. Whether you're crafting at home or looking for educational tools for children, our products stand out for their safety, eco-friendliness, and vibrant colors. Explore the best DIY clay products available at unbeatable prices and unleash your creativity today!https://info.bothideatoys.com/best-diy-clay-products-at-unbe...
by antisol | 2025-12-24 07:02:38+00:00
From TFA:

Implementation complexity:
h264 Stream: 3 months of rust
JPEG Spam: fetch() in a loop

I don't see how it could have taken 3 months to read up on existing technologies. And that "3 month" number is before we start factoring in time spent on:

* Writing code for JPEG Spam / "fetch() in a loop" method

* Mechanisms to switch between h264 / jpeg modes

* Debugging implementation of 2 modes

* Debugging switching back and forth between the 2 modes

* Maintenance of 2 modes into the future