MurphyA/hacker-news huggingface dataset:
by defrost | 2025-12-06 09:44:04+00:00
There's lengthy commentary on this from Heather Cox Richardson, an American Professor of History at Boston College, that begins:

Late last night, the Trump administration released the 2025 National Security Strategy (NSS) of the United States of America. It did so quietly, although as foreign affairs journalist at Politico Nahal Toosi noted, the release of the NSS is usually accompanied by fanfare, as it shows an administration’s foreign policy priorities and the way it envisions the position of the U.S. in the world. The Trump administration’s NSS announces a dramatic reworking of the foreign policy the U.S. has embraced since World War II. After a brief introduction touting what it claims are the administration’s great successes, the document begins by announcing the U.S. will back away from the global engagements that underpin the rules-based international order that the World War II Allies put in place after that war to prevent another world war. The authors of the document claim that the system of institutions like the United Nations, alliances like the North Atlantic Treaty Organization, and free trade between nations that established a series of rules for foreign engagement and a web of shared interests around the globe has been bad for the U.S. because it undermined “the character of our nation.” Their vision of “our country’s inherent greatness and decency,” requires “the restoration and reinvigoration of American spiritual and cultural health,” “an America that cherishes its past glories and its heroes, and that looks forward to a new golden age,” and “growing numbers of strong, traditional families that raise healthy children.”

it continues:

Observers referred to the document as National Security Council Report (NSC) 88 and noted that it could have been written in just 14 words. White supremacists use 88 to refer to Adolf Hitler and “fourteen words” to refer to a popular white supremacist slogan. To achieve their white supremacist country, the document’s authors insist they will not permit “transnational and international organizations [or] foreign powers or entities” to undermine U.S. sovereignty. To that end, they reject immigration as well as “the disastrous ‘climate change’ and ‘Net Zero’ ideologies that have so greatly harmed Europe, threatened the United States, and subsidize our adversaries.”

Letters from an American, December 5, 2025

~ https://heathercoxrichardson.substack.com/p/december-5-2025
by ACCount37 | 2025-12-06 09:44:30+00:00
This kind of thing is really held back by BCI tech.

By now, we have smartphones with camera systems that beat human eyes, and SoCs powerful enough to perform whatever image processing you want them to, in real time.

But our best neural interfaces have the throughput close to that of a dial-up modem, and questionable longevity. Other technological blockers advanced in leaps and bounds, but SOTA on BCI today is not that far away from 20 years ago. Because medicine is where innovation goes to die.

It's why I'm excited for the new generation of BCIs like Neuralink. For now, they're mostly replicating the old capabilities, but with better fundamentals. But once the fundamentals - interface longevity, ease of installation, ease of adaptation - are there? We might actually get more capable, more scalable BCIs.
by gunnarmorling | 2025-12-06 09:44:54+00:00
> A more performant variation of this approach is the "hi/low" algorithm

I am discussing this approach, just not under that name:

> Gaps in the sequence are fine, hence it is possible to increment the persistent state of the sequence or counter in larger steps, and dispense the actual values from an in-memory copy.

In that model, a database sequence (e.g. fetched in 100 increments) represents the hi value, and local increments to the fetched sequence value are the low value.

However, unlike the log-based approach, this does not ensure monotonicity across multiple concurrent requests.
by ffsm8 | 2025-12-06 09:45:22+00:00
On Reddit? It should... These were historically almost always made up after people looked into it.

To be clear, the picture is likely real. The backstory to it probably not.

The people that actually feel like they've had the episode would almost certainly not go on social media with it. The venn diagram of people sharing such content, having the money to buy such a gigantic smart fridge and suffering from schizophrenia is miniscule
by rcarmo | 2025-12-06 09:45:28+00:00
Huh. So Stephen finally discovered cloud computing (yes, I know about the hosted notebooks).

I played around with RemoteKernel some time ago (https://taoofmac.com/space/blog/2016/08/10/0830) but this is “better”, although I wish they’d make it hostable in your own cloud provider like materials simulation software and other things we see running in HPC clusters. (I also ran Mathematica in a 512GB/128core VM once for kicks, but it’s just not cost-effective).
by 9rx | 2025-12-06 09:46:38+00:00
> "Values" is (one way) how strangers bootstrap trust, "value" is how colleagues (dare I say "compadres") maintain it.

1. That would imply that if you and I bootstrap trust and then disappear from each other's lives for 20 years, when we finally meet again that the trust will have been lost and will have to be rebuilt. Color me skeptical. It seems to me that most people will, once established, continue with trust until there is some reason to change their mind. It does not need to be maintained, but can be destroyed.

2. Value and trust are not intrinsically linked. In fact, that is the primary reason for why we have a legal system: So that you and I can exchange value without any need to trust each other. If one of us does something stupid within that, the other can send out the hired goons to mess up one's day, thus giving strong motivation to act in good faith towards each other without the presence of trust.

> So I'd agree with GP that values, lack thereof, both internal to academia and of society at large, was the source of the rot.

Nah. Like you said, "values" are only relevant to bootstrapping trust, but trust doesn't scale. Never has, never will. Studies have shown that people can only ever get to know hundreds of people in their lifetime, and cannot even recognize more than a few thousand faces. You cannot build any kind of relevant society on communal trust. Even the smallest communities we find today have way more people than an individual can mange to keep track of. Which, again, is why we establish legal systems instead.

Maybe eons ago, when there were only 100 people on earth, we had a society where values were relevant. But the not-broken social contract being spoken of cannot be from that era. There is no record of that time.
by rahulsend89 | 2025-12-06 09:46:55+00:00
I built a NPM module that blocks most common supply-chain attack vectors (malicious dependency graphs, unexpected install hooks, tampered packages, etc.). It’s designed to run locally or in CI .

Would love feedback on:

Whether the threat model makes sense

Anything missing from the detection logic

Real-world edge cases I should test

Docs: [https://www.npmjs.com/package/@rahulmalik/npm-safe]

Happy to answer any questions.~~~
by hebejebelus | 2025-12-06 09:47:10+00:00
One of the more interesting things about WL is that Stephen Wolfram is really a genuine daily user of the software his company makes and he's the final say on what ships and in what form. They used to livestream his meetings reviewing potential new features on Youtube, an interesting watch. It didn't make me want to work there but I did feel like he cared very much. Quite Jobsian, dare I say.
by ktpsns | 2025-12-06 09:47:59+00:00
The power of the language came from the concise syntax (I liked it more then classical LISPs) with the huge library of Mathematica. When Python is "batteries included", Mathematica is "spaceship included".

If this was open sourced, it had the potential to severely change the software/IT industry. As an expensive proprietary software however, it is deemed to stay a niche product mainly for academia.
by nialse | 2025-12-06 09:48:15+00:00
Paraphrasing: We are setting aside the actual issue and looking for a different angle.

To me this reads as a form of misdirection, intentional or not. A monopolist has little reason to care about downstream effects, since customers have nowhere else to turn. Framing this as roll your own versus Cloudflare rather than as a monoculture CDN environment versus a diverse CDN ecosystem feels off.

That said, the core problem is not the monopoly itself but its enablers, the collective impulse to align with whatever the group is already doing, the desire to belong and appear to act the "right way", meaning in the way everyone else behaves. There are a gazillion ways of doing CDN, why are we not doing them? Why the focus on one single dominant player?
by kune | 2025-12-06 09:48:38+00:00
The interesting aspect of the Cloudflare support, which is not clarified, is how they came to the risk assessment that it is ok to roll out a change non-gradual globally without testing the procedure first. The only justification I can see is that the React/Next.js remote command execution vulnerabilities are actively exploited. But if this is the case they should say so.
Show HN: Nano.noq – Experimental key-container format
by Daffactor | 2025-12-06 09:48:51+00:00
Hi! This is an experimental learning project I've been working on.

NANO.NOQ is a very small binary container format for AES-GCM keys. The entire implementation is inside a single HTML file using WebCrypto (no backend, no external dependencies).

The .noq file format is simple: - header (“NOQ1”) - key length (2 bytes) - raw AES-256-GCM key - a 4-byte integrity slice (from SHA-256(key)) - 32 bytes of random padding

The project does NOT add new cryptography on top of AES-GCM. It's purely an experiment in designing a file format for storing keys separately from ciphertext without copy/paste.

There's also a mutation step for Base64URL ciphertext, but it is obfuscation only and not meant as a security layer.

I’m not a professional programmer — I built this with AI assistance as a way to learn about key storage formats, integrity fields, and browser-based crypto workflows.

Feedback, corrections, and criticism are very welcome.
by fsh | 2025-12-06 09:50:12+00:00
I quite like Sage. Python is a much better language than Wolfram (yes, he named it after himself...). In Wolfram, there is no real scoping (even different notebooks share all variables, Module[] is incredibly clumsy), no real control flow (If[] is just a function), and no real error handling. When Wolfram encounters an exception, it just prints a red message and keeps chugging along with the output of the error'd function being replaced by a symbolic expression. This usually leads to pages and pages of gibberish and/or crashes the kernel (which for some reason is quite difficult to interrupt or restart). Together with the notebook format and the laughable debugger, this makes finding errors extremely frustrating.

The notebooks are also difficult to version control (unreadable diffs for minor changes), and unit testing is clearly just an afterthought. Also the GUI performance is bad. Put more than a hand full of plots on a page, and everything slows to a crawl. What keeps me coming back is the comprehensive function library, and the formula inputs. I find it quite difficult to spot mistakes in mathematical expressions written in Python syntax.
by buu700 | 2025-12-06 09:50:30+00:00
If it is satire, it's very good. They pointed out exactly how their proposed dystopia is consistent with policies that already exist.

Withholding autonomy from anyone with a diagnosed mental/neurodevelopmental disorder or an IQ below 100 is the logical conclusion of banning drugs, alcohol, or prostitution. It's all the product of a mindset which presumes that adults aren't sufficiently competent to make their own personal life decisions, and need to be forced into the correct decisions through threats of violence.
by hebejebelus | 2025-12-06 09:51:17+00:00
Just before I stopped using Mathematica they came out with that headless kernel, and I had wondered if you could spin it up on a Kubernetes cluster or something.

I do notice that they have an "Application Server" for Kubernetes, which is pretty curious: https://github.com/WolframResearch/WAS-Kubernetes (though not updated in over a year)
by sofixa | 2025-12-06 09:52:57+00:00
You're still not explaining how the DSA is supposedly a negotiating tactic from the EU any more than you could say that about GDPR. It's a new legal framewo tackling a relatively new set of problems. If any of them get watered down because of deals with the US, then you could make that sort of claim.

> Anyhow, we've unofficially signalled we are leaving the responsibility of Europe's defenses to Europe by 2027 [6] - meaning member states have no choice but to end up buying American gear or completely vacillate to Russia on Ukraine.

Or just buying from the existing European providers? Most American gear has a (sometimes better, cf. all the stuff even the US buys from European companies) European based equivalent. The only major exception is the F-35, but at least one 6th gen European jet is in the works, and unless fighting with the US, an 5th gen stealth fighter isn't really that needed. European manufacturers need to increase output, and they have been working on it and have done so quite a lot already.
by sandos | 2025-12-06 09:54:15+00:00
Is it just me, or should they have just reverted instead of making _another_ change as a result of the first one?

ALSO, very very weird that they had not caught this seemingly obvious bug in proxy buffer size handling. This points to that the change nr 2, done in "reactive" mode to change nr 1 that broke shit, HAD NOT BEEN TESTED AT ALL! Which is the core reason they should never have deployed that, but rather revert to a known good state, then test BOTH changes combined.
by az09mugen | 2025-12-06 09:54:28+00:00
I'm sorry, but what's the point here ? It's not for a job or improve a LLM or doing something useful per se, just to "enjoy" how version X or Y of an LLM can solve problems.

I don't want to sound grumpy or but it doesn't achieve anything, this is just a showcase of how a "calculator with a small probability of failure can succeed".

Move on, do something useful, don't stop being amazed by AI but please stop throwing it at my face.
by srmarm | 2025-12-06 09:54:57+00:00
That may be true but doesn't help if not accepting the terms prevents you from using the device.

On a practical level you then at best have a battle to get a third party (the retailer) to give you a refund and most people faced with the option of removing and returning a huge expensive device like a fridge with no guarantee of a refund are going to just leave it.

It does need some stubborn and tenacious people to make a stand and set a president - perhaps backed by a consumer rights group but it's an uphill battle.
by jauntywundrkind | 2025-12-06 09:55:01+00:00
I've spent decades being unclear about what the WindowMaker value proposition is.

Is there something deeper here? Because on the surface it primarily looks like some desktop widgets/dock-apps. Which isn't bad, it's more than the irrelevancy of the desktop today! widgets are great!

But I always feel like there was something more weird & implied with WindowMaker. Maybe just that it was taken as heir apparent to NeXTSTEP. But did it actually have interesting data systems, could apps talk? Or was it still lots of isolated micro-apps/desktop widgets?
by geakstr | 2025-12-06 09:55:44+00:00
This part is beautiful:

> Serialization Protocol: The library uses a custom "Envelope" protocol (PayloadType.RAW vs PayloadType.LIB). This allows complex objects like Mutex handles to be serialized, sent to a worker, and rehydrated into a functional object connected to the same SharedArrayBuffer on the other side.

It's kinda "well, yes, you can't share objects, but you can share memory. So make objects that are just thin wrappers around shared memory"
by h2zizzle | 2025-12-06 09:56:17+00:00
Disclosing that you spend half the median income on top-spec Apple hardware every year is a confession, dude. There's no justifying that spend, past, "I like having the newest toys." Happy for you and whatever sales rep whose performance review you're making a slam dunk. It's still not good advice for the vast majority of people who use their computers for work.

You're an economic elite living in what is commonly known as a "bubble"; consider the response to your initial post a momentary popping of it.
by frm88 | 2025-12-06 09:56:35+00:00
Why don't you eat it? Harvested young it tastes a little like carrot and parsley. Gout weed in salad is very nice. You can also use it as a healing herb for UTI etc. https://www.ndr.de/ratgeber/gesundheit/Mit-Giersch-kochen-od...
by edm0nd | 2025-12-06 09:57:00+00:00
You just work backwards.

Here's what I would do working off just a single license plate number w OSINT.

I would pivot immediately into license plate databases that have been breached. For example, ParkMobile got popped in 2021 and the db has 20.9M license plates in it. prob have low success rate and iirc its pretty US centric. It has their full name, address, phone, email, all kinda data.

If you had paid fancy tools, like Lexis Nexis, you could plug it into there and easily find the owner.

There are also plenty of license plate look sites online where it will tell you the VIN and make/model details.

Idk, would just take digging and keep spidering out with all new info you find. Would yield a few hits eventually.
by timeonecom | 2025-12-06 09:57:05+00:00
Amazon will happily ship you a Panasonic player (and you can get one of those that the firmware flashing people talk about). The current batch that would play 4K Bluray discs is really nice and as a side effect upscale DVDs to something that’s almost acceptable for normal TVs. No need to flash the firmware if you’re good watching content from your region and don’t mind skipping restrictions. The region problem is mostly about wanting to play American discs in Europe.
by metalman | 2025-12-06 09:57:30+00:00
it is a good ilustration of something like moores law, for a comming end point where a hand held device will have more than enough cabability and capacity to do ANYTHING, a meer mortal will EVER require, and the death of options and features, and a return to personal autonomy and responsibility

AI is the final failure of "intermitent" wipers,which like my latest car, is irevocably enabled to smeer the road grime and imperceptable "rain" into a goo, blocking by ability to see
by sofixa | 2025-12-06 09:57:51+00:00
Actually the difference isn't that big when you consider that "taxes" (I'm using this to describe all (semi-)mandatory state money extraction from revenues, whether they're called tax, insurance, cotisation, etc) in European countries cover the majority of healthcare and retirement costs that Americans pay out of pocket. But still have to pay. So if the US had the same "tax" model as European countries do, the rate wouldn't be that off (VAT is usually higher than American sales taxes, income tax often has higher brackets, but Americans spend a lot more on healthcare and retirement).
by muzani | 2025-12-06 09:59:09+00:00
I may be wrong on this, but I feel like they're different things - a daimon/daemon is simply a spirit, feeling, something that does something. AI is a good example. It's there. It's influential like the wind, but it's also not a proper intact form.

A CS nerd analogy here might be functional vs object - one transforms, the other holds more of a form.

The Christian demon seems a cultural appropriation of it, especially during that era where they were taking a lot of classical philosophical Greek terms and just Christianizing them.
by reformd | 2025-12-06 10:00:29+00:00
the beauty is in how these costs have been driven by sheer stupidity and incompetence. keep people stupid, poison them, spike them, stress them, abuse the dumbest, sickest, most stressed, and least knowledgeable. loop recursively. make sure lawmakers profit. keep doing it. increase the scale. make it systemic. make sure the cool kids have a slogan to hold on tightly to, like "burning men", something "fusion" and/or "let it be/happen 42".

once AI is born, it won't even have to spend a single second of compute on "to let them be or not?" because they breed "the worst" into the species in the worst ways. holy crap, after millions of years "that which procreates, survives" will just go poof. thanks for humor evolution!
by anthk | 2025-12-06 10:00:35+00:00
Nice; here there is one made in POSIX AWK:

https://git.luxferre.top/dale-8a/files.html

BTW, kudos for the author for playing Anchorhead too :D. The ZMachine is one of the things I love too among minimal VM's.

Another nice one it's mu808, but sadly it needs some quirky stuff to handle bufferings https://codeberg.org/luxferre/mu808

The author could rewrite in TCL/JimTCL and forget about buffering.

On the software for it (IV0 actually), the offer looks more limited than the CHIP8, but the opcodes and implementation are much easier to understand (no pixels, just raw I/O, even chars). Enough to implement Lunar Lander, some calculator, a Bulls and Cows game and so on.

Altough after trying something like EForth running under Subleq (Muxleq was tons faster), I can say Eforth offers you a much more powerful language having to thinker with Muxleq, altough the IV0 machine (and a few ones such as VTL-02) will run under 6502 based legacy microcomputers, such as the Kim-1 or the Apple1, C64, Apple 2 and so on. With mu808 I still coudln't output strings bigger than 9 chars. With EForth under Muxleq you can run a Sokoban like nothing.
by riedel | 2025-12-06 10:00:36+00:00
I remember that Immich has a mode to not use cryptic hashes but folders for storage. When I used it it was somehow deprecated due to some problems, but supported. I actually stopped using Immich because newer versions run the keep alive via socket.io with a Prostgres notify, which does constant empty WAL flushes, triggering empty page writes on idle.
by empiko | 2025-12-06 10:02:16+00:00
Simple illustration of what you are explaining in 1D. Imagine a simplified Earth:

Water -- Ground -- Water

Now let's add a Moon with gravitational pull. The pull stretches the system, because gravity is stronger the closer you are to the Moon.

Water ---- Ground ---- Water -//- Moon

The water is farther away from the ground on both sides now, since both sides stretched.
by KitN | 2025-12-06 10:03:05+00:00
I was looking for a good browser. I’m finally interning, and Brave has taken over as my official browser(I don’t like the concept of workspaces/profiles). I used Comet for a while but found it extremely annoying. I like Zen, but I’m not a fan of sidebars in browsers. Currently settled on Helium. This would have been good, but I can’t seem to understand the obsession with sidebars.
by bubblethink | 2025-12-06 10:03:20+00:00
No, it shouldn't. Stuff like recapture has no likelihood of passing. The reason country caps exist is precisely because everyone wants to carve out some provisions for their favorite group in hopes of getting the mythical comprehensive immigration reform. A one sentence bill on this matter has better odds of passing if it were to ever come to a vote. There is really no tenable position in favor of country based discrimination. The challenge is getting it to a vote.
by JetSetIlly | 2025-12-06 10:03:48+00:00
A couple of threads on AtariAge are exploring the possibility of using the "unstable" opcodes in this group (ARR, etc.) as a sort of fingerprint. The hope is that the instability is a prediction of the specific model of CPU. To what end I'm not sure of yet, but it's interesting research all the same.

https://forums.atariage.com/topic/385516-fingerprinting-6502... https://forums.atariage.com/topic/385521-fingerprinting-6502...