MurphyA/hacker-news huggingface dataset:
by tehjoker | 2025-12-15 21:02:06+00:00
Should American owned or controlled companies be banned in other countries? Should Israel be banned from interfering in American politics? If yes, then I am more open to this concept.

For what it's worth, I am not aware of any evidence that TikTok did anything intentional to promote anti-US narratives. To be honest, I think they accomplished that goal by simply promoting what people wanted to see, which is in large part, simply the truth. The so-called enemies of America do not have to work very hard or lie, they just need to expose our propaganda in a very straightforward fashion.

Since the COVID crisis at least, US owned social media companies have become very censorious and we know they tamper with the algorithms. It may be that simply having a less biased algorithm is too clarifying for American elites.
by rainonmoon | 2025-12-15 21:02:18+00:00
Obviously software development in general has become more ingenious (by some metrics) over the past few decades but very little of its growth has involved secure development principles. Often the primary goal is efficiency and scalability with as little friction for the customer. The priority is enabling commerce, not protecting user data (slightly more so company data, but not by much). I speak to devs every week who are unfamiliar with things like JavaScript injection and SSRF, things that can be exploited by virtually complete beginners. From their perspective they were just building a neat feature, that it could be used to render external scripts or internal file paths literally did not occur to them. This isn’t a judgement of them, I appreciate the chance to help them, but just to say development has unfortunately always had other priorities.
by abenga | 2025-12-15 21:03:03+00:00
Most of the time, there is usually no "most meritorious", just something that is elsewhere on the "trade-off space" than the person speaking would like. I usually dismiss everybody who so snidely and arrogantly dismisses results of other people's work(e.g. the OP article), like there was some _obviously_ correct solution that the people who worked on the widely accepted solution were too stupid or malicious to choose. They could not possibly have had other priorities or doing their best to get something working acceptably in a complex ecosystem with no central control, no! They are just dumber than you (or just plain malicious).
by GMoromisato | 2025-12-15 21:03:09+00:00
"He walked up to Helen and asked, 'What are you doing?'"

"He strode up to Helen and asked, 'What are you doing?'"

"He sidled up to Helen and asked, 'What are you doing?'"

"He tromped up to Helen and asked, 'What are you doing?'"

Each of those sentences conveys as slightly different action. You can almost imagine the person's face has a different expression in each version.

Yes, I hate it when amateurs just search/replace by thesaurus. But I think different words have different connotations, even if they mean roughly the same thing. Writing would be poorer if we only ever used "walk".
by cloudflare728 | 2025-12-15 21:03:33+00:00
I am self hosting using Docker. Next.js config to change header didn't work for me. I had cache rules in Cloudflare, but Next.js header for page (no-cache) doesn't allow Cloudflare to apply stale-while-revalidate.

Now that I have proper header added by HAProxy, Cloudflare cache rules for stale-while-revalidate works.

If anyone can reach Cloudflare. Please let us forcefully use stale-while-revalidate even when upstream server tells otherwise.
by lowkey_ | 2025-12-15 21:03:48+00:00
(1) Are you saying it's bad if they're upping engineer pay to be more competitive, or you're just skeptical that they will?

(2) I'd actually like the American government to pay better wages for its engineers, and optimize for hiring the best, rather than those desiring a stable, low-paying bureaucracy — I don't think that attracts the best people.

(3) On talent and recruiting: This is being done by the National Design Studio, it says at the bottom. That's led by a cofounder of Airbnb - I know one person who works at the National Design Studio and he's a phenomenal engineer. The administration also has the involvement of David Sacks, who founded Craft Ventures and is pretty well-known in SV. I think this is probably the most tech-competent the government will have been in a long time. I'm not crediting Trump at all for that, to be clear - just pointing out that tech talent in government seems to be getting better, not worse.
by catapart | 2025-12-15 21:03:50+00:00
Sorry, isn't this running an open-source OS? The header has a link to a github with a non-commercial license[0].

If so, couldn't you just use the OS on non-premium-priced mini-PC hardware and never have to worry about them locking you out of your box? I guess maybe it's concerning if you're being forced to update by the OS? I've never actually run a system like that, but was considering umbrel OS (didn't actually know about the hardware until this post), so if I'm being naive about something, it's in earnest.

[0] https://github.com/getumbrel/umbrel
by jen20 | 2025-12-15 21:03:57+00:00
> On e.g. a Lufthansa longhaul flight, which are priced similarly and cover the same route I flew (fra-ord), it would be unthinkable.

I fly both airlines regularly, United is _vastly_ better from a hard product perspective, a soft product perspective, and _especially_ a service recovery standpoint.

The credit card thing is easily ignored, but you used to heard it often on European flights too before branded credit cards got wiped out there. I've never heard an announcement about adult content, and have taken over 90 United flights this year.
by losvedir | 2025-12-15 21:04:10+00:00
The decrease in lifetimes has had a fair bit of discussion, but I haven't seen a lot of discussion about the mTLS changes. Is anyone else running into issues there? We'll be hit by it, as we use mTLS as one of several methods for our customers to authenticate the webhooks we deliver them, but haven't determined what we'll be doing yet.
by ericmcer | 2025-12-15 21:04:10+00:00
I am dubious of all the claims that say something designed to kill organic life is safe because it just means "safe at X dose". Like there isn't a pesticide made where I could drink a tablespoon of it and be fine. It just doesn't present noticeable effects at tiny doses so it is labeled safe.

Like if I drank a 1/4 shot of Vodka every morning I wouldn't notice it at all, but I imagine it would have some impacts on my health over the long run.

Not to mention we might have 30+ chemicals/medications/additives/whatever all being consumed constantly at "safe levels" with no research into how they interact or accumulate.
by SilverElfin | 2025-12-15 21:04:22+00:00
This is just trying to fit different data points to confirm a conspiratorial narrative around Israel. The reality is that China has a tool to manipulate and influence American politics in TikTok, where there is no transparency around what their algorithm does or what censorship/amplification they perform manually. On top of that, TikTok lied about data collection on kids (https://www.npr.org/2024/08/02/nx-s1-5061604/doj-sues-tiktok...), lied about where data is sent (https://www.techspot.com/news/104032-us-claims-tiktok-collec...), and their CEO literally lied under oath (https://walberg.house.gov/media/press-releases/walberg-urges...). The executives of TikTok should be in jail.

The US government has considered TikTok a national security issue for a long time, and considered banning it even back in 2020 - a full 3 years before October 7th. So it has nothing to do with Israel, or Jews, or Gaza, and everything to do with not following American laws, defending against asymmetric warfare from the Chinese government, and national security.
by imiric | 2025-12-15 21:04:44+00:00
> Back when I was writing xdg-desktop-portal-hyprland

Ah, yes, XDG "portals". The reason file selection and screencasting is broken on every new Linux/Wayland installation I do, forcing me to try to understand the insane matrix of supported, half-supported, broken, and unsupported features by the dozen+ different implementations, and come up with the magic configuration incantation that makes it work on my system. Brilliant stuff. But it's secure!

> That is why, I've decided to take matters into my own hands. I am writing a new bus.

Oh, goody. The author quotes xkcd/927 as if anticipating the response, when it's exactly appropriate for this situation.

> For example, with wayland, when you switch, you abandon X. You cannot run an X11 session together with a wayland one, simply not how it works.

Huh? I use niri, and had to install both Xwayland and xwayland-satellite to get some of my apps working. I have no idea what either does, and even less interest in figuring it out, but it sure sounds like some X compatibility layer. Please tell me more about how much X, and now D-Bus, sucks.

I switched to Wayland a few months ago, and I'm happy that things mostly work now, but it seems that reinventing the wheel is the M.O. of developers in the Wayland community. Everyone is tired of everyone else's shit, has a superiority complex as evidenced by this ranty article, and has the urge to recreate literally every tool in the ecosystem that works for their own specific use case. Case in point: the dozens of tools that start with `hypr`. I guess we can add "tavern" now to that, whatever the fuck it is.

I'm tired of the state and direction of modern Linux. I wish I could use OpenBSD and leave this constant churn and bickering behind.

EDIT: Ah, it seems the author agrees with me: https://blog.vaxry.net/articles/2024-linuxInfighting

They're pointing out toxic behavior, favoring constructive criticism, and yet engage in the same behavior they're criticizing. Wild. How we ended up with these people as leaders in the Linux community is beyond me.

> An important part of actually advancing a product forward is to cooperate.

100%. Maybe they should heed their own wisdom.
by wtallis | 2025-12-15 21:04:55+00:00
M.2 boot drives for servers have been popular for years. There's a whole product segment of server boot drives that are relatively low capacity, sometimes even using the consumer form factor (80mm long instead of 110mm) but still including power loss protection. Marvell even made a hardware RAID0/1 controller for NVMe specifically to handle this use case. Nobody's adding a SAS HBA to a server that didn't already need one, and nobody's making any cheap low-port-count SAS HBAs.
by michaelt | 2025-12-15 21:05:03+00:00
> A running number also carries data. Before you know it, someone's relying on the ordering or counting on there not being gaps - or counting the gaps to figure out something they shouldn't.

For example, if https://github.com/pytorch/pytorch/issues/111111 can be seen but https://github.com/pytorch/pytorch/issues/111110 can't, someone might infer the existence of a hidden issue relating to a critical security problem.

Whereas if the URL was instead https://github.com/pytorch/pytorch/issues/761500e0-0070-4c0d... that risk would be avoided.
by alephnerd | 2025-12-15 21:05:19+00:00
This is a fairly significant policy shift - the incumbent DPP has historically been very anti-Nuclear due to the Taiwan's nuclear program historic links to authoritarian rule back in the 1980s along with fear after the Fukushima disaster back in 2011. The party itself was founded in part due to opposition to the Lungmen project back in the early 1980s [0]

[0] - https://www.tepu.org.tw/wp-content/uploads/2019/03/%E5%8F%B0...
by nykodev | 2025-12-15 21:05:26+00:00
Hey HN, I built this because I was trading biotech stocks and got tired of manually tracking PDUFA dates, FDA decisions, and trial readouts across multiple sources.

What it does: - Aggregates ~1000 biotech companies from ClinicalTrials.gov, SEC EDGAR, FDA - Daily data sync - ML predictions for catalyst impact (XGBoost) and likelihood of approval (Random Forest)

Technical details: - XGBoost model trained on historical catalyst events - Features: catalyst type, phase, therapeutic area, market cap, price momentum - Random Forest for LOA scores based on BIO 2024 clinical success benchmarks - Weekly model retraining

The ML part is experimental - I'm genuinely not sure if it's useful or just fancy noise. Would love feedback from anyone who trades biotech or has experience with financial ML.

Free tier: 3 predictions/day + full calendar Paid tiers: unlimited predictions, smart money signals, entry timing

Happy to answer questions about the data pipeline or ML approach.
by 9rx | 2025-12-15 21:05:53+00:00
Something I noticed a long time ago is that Vercel turns everything they touch into being 10 times harder than it needs to be.

I have come to conclude it is that way because they focus on optimizing for a demo case that presents well to non-technical stakeholders. Doing one particular thing that looks good at a glance gets the buy-in, and then those who bought in never have to deal with the consequences of the decision once it is time to build something other than the demo.
by akshatjiwan | 2025-12-15 21:06:19+00:00
A few years ago I took his course on thermoelectricity and really liked his way of teaching. The videos were short and to the point and yet gave me all that I needed to know about the topic.

Here's the link in case anyone s interested

https://youtube.com/playlist?list=PLtkeUZItwHK5y6qy1GFxa4Z4R...
by ako | 2025-12-15 21:06:32+00:00
Replacing workers has been going on for many years, just ask mineworkers, factory employees, and many other workers. It seems that here on hackernews we're happy if this happens when it bring down prices and doesn't impact our jobs. But once it starts effecting software engineers it's the end of the world?

I do see and agree with the dangers of AI, but it would have been a bit less selfish if we'd been this concerned when other jobs got replaced by automation.
by buildsjets | 2025-12-15 21:06:55+00:00
First, the engine itself is certified under 14 CFR Part 33, but the engine cowling is certified under 14 CFR Part 25, which makes it an airframe part, not an engine part.

Boeing (Spirit division) does make the engine cowling for the 777-200, which is what separated from the aircraft and caused the fire on the ground. Even in the case of a catastrophic failure of the engine, the cowling and all of it's parts are required by regulation to remain attached to the aircraft.

There was a previous incident a few years ago also on a Pratt-powered 777-200 where an engine failure cascaded into a much more serious cowling failure. Here's an article on that previous incident. I'm unable to find a source on whether the design changes discussed were ever implemented.

https://simpleflying.com/boeing-777-engine-cover-change/

The FAA in the past several years has had a particular focus on engine cowling components departing the aircraft and causing secondary damage, the most critical example being the 737 fan cowling that separated from the engine, impacted the fuselage, broke a window, and caused a passenger to be sucked out and killed.

https://en.wikipedia.org/wiki/Southwest_Airlines_Flight_1380

https://www.regulations.gov/document/FAA-2023-2234-0001
by acdha | 2025-12-15 21:06:56+00:00
None of the sites you mentioned are (or were) left-leaning unless you are saying anyone less politically correct than Fox News is leftie, but that’s missing the bigger reason why the MAGA connection matters: MAGA is at its heart conspiratorial, obsessed with the idea that the “elites” are against the common man. That war on expertise has been there from the beginning and it makes followers unusually vulnerable to scams because it normalizes this way of thinking that everyone’s opinion deserves equal weight. Sure, security experts say to use Signal but why should you trust them any more than the scientists who say the earth is warming or the economists who say that gold has drawbacks as the basis for an economic system?
by airstrike | 2025-12-15 21:06:57+00:00
If there was no difference between capital and labor, then capital gains and labor income would be taxed at the same rate. That's just the empirical argument. The theoretical is left as an exercise to the reader.

I feel like you have only a cursory understanding of finance, economics, and taxation. If you didn't, you would't ask questions such as

if someone owns a food stall, are they capital or a worker?

It reads like you're trying to find evidence that reinforces your priors while dismissing whole swaths of empirical and theoretical work that would immediately challenge it.

For context, I spent a decade as an M&A banker, so as far from a Marxist as one can be.
by smokey_the_bear | 2025-12-15 21:07:07+00:00
I do know how to load arbitrary PDFs onto the kindle, you can do it now with a specific email address that's assigned to each kindle. It's allow-listed for coming from your amazon email address though.

I was not able to extract the PDF from the online textbook. I think I had something that would have worked to just get the content, but I'd have had to stitch all the chapters back together, and if the page numbers didn't match the original book it would have been a hassle for my daughter.
by jen20 | 2025-12-15 21:07:13+00:00
"Put it in the hold" is a decent argument for point-to-point flights, or when you do gate checking. Otherwise it's a crap-shoot whether your stuff makes it (which can end a two-day business trip before it begins), what shape it will be in, and how long you'll have to wait. As soon as you have a connection, all bets are off.

How long you'll have to wait is mostly a function not of the airline, but of the arrival airport and the competence of the handling company.
by em-bee | 2025-12-15 21:07:31+00:00
the places i lived in germany and china did have district wide heaters, but only for the water that circulated the heaters, not the water that came out of the tap. i believe the reason being that tap water needs to be potable (at least in germany, in china you still need to at least boil the tap water), whereas water for heating doesn't. you don't actually want your tap water go through the heating system. fun story: in china i once managed to open the heating pipe. the water that came out of that was black. probably rust and other stuff from the pipes. i wonder how the soviets managed to keep the water clean.
by arjie | 2025-12-15 21:07:49+00:00
I recall clickbait meaning "A way of describing what's behind a link, often inaccurately, so that you click on it". The completely non-controversial article seems to me to have a very hook-y headline which is exactly what the phrase refers to, at least to me. What does clickbait mean to you? Perhaps the meaning of the phrase has changed in different groups over time.
by btown | 2025-12-15 21:07:56+00:00
> an American company with American employees

While technically true, these articles give context about the level of decision-making control and data access from ByteDance, as of the time of their publication.

https://restofworld.org/2024/tiktok-chinese-us-ban/ (2024)

https://www.buzzfeednews.com/article/emilybakerwhite/tiktok-... (2022)
by ghusto | 2025-12-15 21:08:06+00:00
> However, the best thing is this: any app on the bus can read all secrets in the store if the store is unlocked

>> The GNOME project disagrees with this vulnerability report because, according to their stated security model, untrusted applications must not be allowed to communicate with the secret service.

I'd like to point out for anyone on the fence that yes, Gnome is run by clowns in full sized clown shoes.
by XorNot | 2025-12-15 21:08:32+00:00
Most people disable that.

The reality is no one wants to be prompted everytime for a password. They want it to auto fill.

In complaining about this people are setting the boundary at the wrong place, and in proposing solutions assuming user behavior which doesn't exist (they will absolutely click "yes trust random application I'm busy move along now please").

I do not want to be prompted. I do perhaps want grades of secret access but even then thats asking a lot - do you want my SSH keys? Well yeah I probably want to give them to you some app which is automating things over SSH. It's 5 more versions before you get updates to ship them all to Russia or wherever after an author hand over.
by jeroenhd | 2025-12-15 21:08:57+00:00
On platforms like Android, iOS, and macOS, secrets are easily stored encrypted with no access to the key unless you exploit the kernel. On Windows, a similar feature is opt-in, but compatibility makes it a little less reliable.

iOS and macOS combine sandboxing with their Secure Element. Android uses TEE or a secure element-like piece of hardware. Windows uses a hypervisor + the (f)TPM.

Nothing Linux can't do, it's basically glueing together a small early boot KVM VM + TPM + secure boot together with an API. Setting up your own secure boot keys to make it run relatively seamless is a pain on many consumer devices, though.
by alephnerd | 2025-12-15 21:09:06+00:00
Yet those reasons are why anti-Nuclear sentiment is mainstream in Taiwan.

The fact that the DPP is contravening one of it's core tenets since it was founded in 1986 is a massive policy shift, as a major reason the party was formed was due to mass opposition to the Lungmen nuclear project.

It's the equivalent of the modern DNC choosing to drop support for the ACA or the modern GOP choosing to support Roe vs Wade.
by skeptrune | 2025-12-15 21:09:09+00:00
I blame this more on NextJS than Vercel, but agree in spirit. Their architecture creates a pit of failure where you're encouraged to fall into a fully dynamic pattern and is a huge trap.

However, it's probably more inexperience than anything. Nobody senior was around to tell our founders that they should go for a SSG architecture when they started /shrug. It's mostly worked out anyways though haha.
by dpark | 2025-12-15 21:09:16+00:00
> externally visible surrogate keys are problematic because they are detached from real world information they are supposed to identify and hence don't really identify anything (see my example about GDPR).

All IDs are detached from the real world. That’s the core premise of an ID. It’s a bit of information that is unique to someone or something, but it is not that person or thing.

Your phone number is a random number that the phone company points to your phone. Your house has a street name and number that someone decided to assign to it. Your email is an arbitrary label that is used to route mail to some server. Your social security number is some arbitrary id the government assigned you. Even your name is an arbitrary label that your parents assigned to you.

Fundamentally your notion that there is some “real world” identifier is not true. No identifiers are real. They are all abstractions and the question is not whether the “real” identifier is better than a “fake” one, but whether an existing identifier is better than one you create for your system.

I would argue that in most cases, creating your own ID is going to save you headaches in the long term. If you bake SSN or Email or Phone Number throughout your system, you will make it a pain for yourself when inevitably someone needs to change their ID and you have cascading updates needed throughout your entire system.