MurphyA/hacker-news huggingface dataset:
by jchw | 2025-12-03 18:29:57+00:00
Anti-cheat is a misnomer; it's much more about detecting cheats more than it is preventing them. For people who are familiar with how modern anti-cheat systems work, actually cheating is really the easy part; trying to remain undetected is the challenge.

Because of that, usermode anti-cheat is definitely far from useless in Wine; it can still function insofar as it tries to monitor the process space of the game itself. It can't really do a ton to ensure the integrity of Wine directly, but usermode anti-cheat running on Windows can't do much to ensure the integrity of Windows directly either, without going the route of requiring attestation. In fact, for the latest anti-cheat software I've ever attempted to mess with, which to be fair was circa 2016, it is still possible to work around anti-cheat mechanisms by detouring the Windows API calls themselves, to the extent that you can. (If you be somewhat clever it can be pretty useful, and has the bonus of being much harder to detect obviously.)

The limitation is obviously that inside Wine you can't see most Linux resources directly using the same APIs, so you can't go and try to find cheat software directly. But let's be honest, that approach isn't really terribly relevant anymore since it is a horribly fragile and limited way to detect cheats.

For more invasive anti-cheat software, well. We'll see. But just because Windows is closed source hasn't stopped people from patching Windows itself or writing their own kernel drivers. If that really was a significant barrier, Secure Boot and TPM-based attestation wouldn't be on the radar for anti-cheat vendors. Valve however doesn't seem keen to support this approach at all on its hardware, and if that forces anti-cheat vendors to go another way it is probably all the better. I think the secure boot approach has a limited shelf life anyways.
by SmirkingRevenge | 2025-12-03 18:29:59+00:00
CSOUND is the oldest code-2-music framework I know of, and that's been here since the 80's, so the concept is not new

The tools/frameworks have become more plentiful, approachable, and mature over the past 10-15 years, to the point where you can just go to strudel.cc and start coding music right from your browser.
by eesmith | 2025-12-03 18:30:03+00:00
https://sourcehut.org/blog/2024-01-19-outage-post-mortem/

> At around 06:00 UTC on January 10th [2024], a layer 3 distributed denial-of-service (DDoS) attack began to target SourceHut’s PHL infrastructure. We routinely deal with and mitigate application layer (layer 7) DDoS attacks, however, a layer 3 attack takes place at a lower level and is not within our ability to mitigate without the assistance of our network provider.
by echelon | 2025-12-03 18:30:11+00:00
Yeah, but then the US doesn't get to spy on you anymore ;)

Stuff tends to stay open until a new leader emerges. Then the closed source shell appears.

We've seen this with the hyperscalers and in a million other places.

Use open to pressure and weed out incumbents and market leaders. Then you're free to do whatever.

So we'd be replacing NSA spying with MSS spying.
by theamk | 2025-12-03 18:30:13+00:00
> The difference between “annoying senior sysadmin” and “good consultant” is often just whether you’re in a room that opted in.

So much that. No one likes "drive-by advice" - if you want something to be fixed, there should be a person responsible for that. Maybe it's you doing all the work, or you convincing management, or management who is asking for an advice... But if you are just saying "we should fix FOO by doing this and that" with no plans as to whom those "we" are, it's only annoying.
by mapontosevenths | 2025-12-03 18:30:25+00:00
My advice is to pay someone else to do the transfer, but get someone good. Most services online don't bother with a real TBC because a professional TBC is expensive, and not worth investing in for the average consumer. However, it is an absolute necessity if you want any kind of quality.

Failing that, you can get a retrotink 4k and any old HDMI capture card to do a "good enough" job for most folks. It has a sort of poor-mans TBC that will work as long as the tapes aren't too bad. You're still looking at a grand for the retrotink, but you can then use it for retro video games if you're into that.
by dust42 | 2025-12-03 18:30:35+00:00
OpenAI has 800,000,000 weekly users but only 20,000,000 are paying while 780,000,000 are free riding. Should they by accident under provision then they could simply remove the freebee and raise the prices for the paying clients. But that is not what they want.

IMHO the investors are betting on a winner-takes-it-all market and that some magic AGI will be coming out of OpenAI or Anthropic.

The questions are:

How much money can they make by integrating advertising and/or selling user profiles?

What is the model competition going to be?

What is the future AI hardware going to be - TPUs, ASICs?

Will more people have powerful laptops/desktops to run a mid-sized models locally and be happy with it?

The internet didn't stop after the dotcom crash and the AI wont stop either should there be a market correction.
by bradlys | 2025-12-03 18:30:45+00:00
Haven’t seen anyone mention this but this is how it works in China. You have to study the same thing since you were 16 and completely ace it. If you decide during or after college that you don’t like the job path you chose (or really your parents chose) as a teenager then too bad. You’re locked into it for life or you’re stuck with never getting a job because the job market in China for young people is so horrendous. (Much higher youth unemployment rate)

They have terrible interviews there as well that go much deeper than here. They’ll analyze your family - not just you.

This is just a symptom of a really bad economy. That’s what the US is in right now. China’s youth are suffering from this as well.
by beepbooptheory | 2025-12-03 18:31:00+00:00
A righteous, passionate anger can be indistinguishable from love. Having and committing to something worth fighting over, however bloody the battles may be, can make a life just a meaningful as one that practices disciplined quiescence, reflection, acceptance, etc. Love is what it is because it must paradoxically accept its opposites; love can be anger, anger can be love. The real mind killer is a pat moralism!

Thus spake zarathustra etc etc..
by bluGill | 2025-12-03 18:31:02+00:00
Again, depends on how it is spent. How much of that spending is for outliers - every school has a few severely disabled kids who can't even feed themselves: schools spend a lot more on those kids even though they will never learn. Also there is a lot of money spent on sports, music, art... which have debatable use in education - your community has come down on one side of the debate, but that doesn't mean it is right.

Note too that higher education in the US is partially supported by things other than tuition and so 250 can go farther than it seems because it is 250 applied to your portion of the whole... We can debate how much different payers should pay, but that is a different question.
by f3b5 | 2025-12-03 18:31:09+00:00
Socrates allegedly was opposed to writing since he felt that it would make people lazy, reducing their ability to memorize things. If it wouldn't be for his disciple Plato who wrote down his words, none of his philosophy would have survived.

So I'm not completely disagreeing with you, but I also am not too pessimistic, either. We will adapt, and benefit through the adoption of AI, even though some things will probably be lost, too.
by Someone1234 | 2025-12-03 18:31:39+00:00
You don't notice you're on ARM at all. Everything "Just Works."

And you're seeing 20+ hours battery under normal workloads (i.e. not spec sheet "20 hours" but day-to-day). I've been mainlining a Windows ARM laptop for six months, and am yet to run into anything I couldn't do.
by Joel_Mckay | 2025-12-03 18:31:56+00:00
MinIO still makes no sense, as Ceph is fundamentally already RADOS at its core (fully compatible with S3 API.)

For a proper Ceph setup, even the 45drives budget configuration is still not "hobby" grade.

I will have to dive into the MinIO manual at some point, as the value proposition still seems like a mystery. Cheers =3
by Vexerciser | 2025-12-03 18:32:04+00:00
The architectural inevitability of agentic systems replaces the current web stack. This is my attempt to articulate why the shift isn't just likely, but physics-driven.

The historical parallel: today's web platforms (Amazon, Google) are the CompuServe/AOL walled gardens. The 'EarthLink' moment will be an open intent protocol.

Curious for technical, social, economic and political counter-arguments.
by charcircuit | 2025-12-03 18:32:30+00:00
They are forcing developers to be the one to pay for it if they do it because there is no other player in the space that would financially benefit from games having SteamOS support. Practically every other company with an game platform, Playstation, Xbox, Nintendo, iOS, Android, etc have programs to fund bringing content to their platform. Also developers can't avoid supporting SteamOS because there is no way for them to 100% opt out of being on that platform.
by the_af | 2025-12-03 18:32:41+00:00
> One of those absolutely true statements that can obscure a bigger reality.

To be clear, I'm not misquoting Knuth if that's what you mean. I'm arguing that in this case, specifically, this optimization was premature, as evidenced by the fact it didn't really have an impact (they explain other processes that run in parallel dominated the load times) and it caused trouble down the line.

> Some of those decisions don't pan out.

Indeed, some premature optimizations will and some won't. I'm not arguing otherwise! In this case, it was a bad call. It happens to all of us.

> I don't see a reason to think this. What are you thinking?

You're right, I got this backwards. While the time savings would have been minimal, the data duplication wasn't that big so the cost (for something that didn't pan out) wasn't that bad either.
by deathanatos | 2025-12-03 18:32:43+00:00
> Bugs exist, and they're sometimes fixed more slowly than we'd like

Then I think the larger point I'd make is that it's impossible to get anyone to care. We've let tech giants like MS become so large they can essentially just ignore problems with their service, and as a customer, it does not matter that you are paying for it, or how much you pay, you're essentially nothing to MS. You pay not only in the direct cost of the product, but in the indirect costs of any problem with the product will hit you; e.g., here, with VMs just spinning due to really basic bugs. But you're right, nobody ever got fired for using Github.

The big "pro" of moving to a smaller platform to me, I hope, is that they're at least incentivized to help you succeed.

One reason I think most CI scripts should just be — as much as possible — scripts, in the literal sense, is that not only promotes running them locally, it also promotes moving to other CI platforms.
by moregrist | 2025-12-03 18:33:06+00:00
There are optimizations that a compiler can perform; usually these are code transformations. Modern optimizing compilers usually get these right.

The optimizations that tend to have the most impact involve changes to the algorithm or data layout. Most compilers won’t do things like add a hash table to make a lookup O(1) or rearrange an array of structures to be a structure of arrays for better data locality. Coding with an eye for these optimizations is still a very good use of your time.
by bostik | 2025-12-03 18:33:50+00:00
I suspect there is no decent "minimal" API. Once you get to tens of millions of objects in a given prefix, you need server side filtering logic. And to make it worse, you need multiple ways to do that.

For example, did you know that date filtering in S3 is based on string prefix matching against an ISO8601/RFC3339 style string representation? Want all objects created between 2024-01-01 and 2024-06-30? You'll need to construct six YYYY-MM prefixes (one per month) for datetime and add them as filter array elements.

As a result the service abbreviation is also incorrect these days. Originally the first S stood for "Simple". With all the additions they've had to bolt on, S2 would be far more appropriate a name.
by leetrout | 2025-12-03 18:33:59+00:00
I didn't RTFA - just responding to you:

> Tech Debt Thursdays

Yes, "Fix it Fridays" is another alliteration.

Have you ever heard the phrase "man your battle stations"? Turns out in the US Navy there is also "cleaning stations" and there is a call for all hands to cleaning stations on the regular. I have proposed something similar on a few teams I've been on. Daily won't work and quarterly is too long. The problem is the sprawl that comes from cleaning up things that have unintended side effects. But yes, paying the interest on the tech debt needs to be normalized across our industry.

https://www.navy.mil/Press-Office/News-Stories/display-news/...

https://www.youtube.com/watch?v=fyJH8VbFE6g
by danaris | 2025-12-03 18:34:05+00:00
> This is not relevant, humans are also nondeterministic.

I mean, I suppose one can technically say that, but, as I was very clearly describing, humans both err in predictable ways, and can be taught not to err. Humans are not nondeterministic in anything like the same way LLMs are. LLMs will just always have some percentage chance of giving you confidently wrong answers. Because they do not actually "know" anything. They produce reasonable-sounding text.

> Yes there is

...And no matter how well you engineer your prompts, you cannot guarantee that the LLM's outputs will be any less confidently wrong. You can probably make some improvements. You can hope that your "prompt engineering" has some meaningful benefit. But not only is that nowhere near guaranteed, every time the models are updated, you run a very high risk that your "prompt engineering" tricks will completely stop working.

None of that is true with humans. Human fallibility is wildly different than LLM fallibility, is very-well-understood overall, and is highly and predictably mitigable.
by kspacewalk2 | 2025-12-03 18:34:08+00:00
Forget pizza night IOUs. Lots of very smart people have come up with lots of clever ways to pay someone for a service, ways that don't even register when it comes to public awareness. I could have bought this house from you for 1.5 million, but I'm going to buy it for 2.5 million because I simply must have it. Man, what a sucker, eh?
by TheBicPen | 2025-12-03 18:34:20+00:00
While I agree with you, I find it hard to argue against the view that politicians are elected for the views they held during their campaign. They may change their mind after being elected, but their constituents that voted for them will not all change their mind simultaneously. To the ones that don't change their mind, it does appear to be a betrayal of their principles. A rational politician would not want to gain that kind of reputation out of pure self-interest.
by vrnvu | 2025-12-03 18:34:26+00:00
Everyone can talk and give opinions. The real question is if you can actually make a difference. I tell people there's a gap between knowing how to do something and actually doing it. And that gap is a big part of our engineering skills.

If I'm not going to change something, I'd rather not talk or give opinions.

Related: https://strangestloop.io/essays/things-that-arent-doing-the-...
by coffeecoders | 2025-12-03 18:34:31+00:00
This vulnerability is basically the worst-case version of what people have been warning about since RSC/server actions were introduced.

The server was deserializing untrusted input from the client directly into module+export name lookups, and then invoking whatever the client asked for (without verifying that metadata.name was an own property).

return moduleExports[metadata.name]

We can patch hasOwnProperty and tighten the deserializer, but there is deeper issue. React never really acknowledged that it was building an RPC layer. If you look at actual RPC frameworks like gPRC or even old school SOAP, they all start with schemas, explicit service definitions and a bunch of tooling to prevent boundary confusion. React went the opposite way: the API surface is whatever your bundler can see, and the endpoint is whatever the client asks for.

My guess is this won't be the last time we see security fallout from that design choice. Not because React is sloppy, but because it’s trying to solve a problem category that traditionally requires explicitness, not magic.
by mrandish | 2025-12-03 18:34:34+00:00
Unfortunately, TFA is yet another article promising an answer to a "Why" question it never delivers. It documents the issue with many examples and thoroughly explores the variations yet never answers why current LLMs write as they do. It mentions some ideas in passing which might be causes but provides no justification or expert input.

Meanwhile, I'm pretty sure there are LLM researchers exploring this problem not only because it's annoying but because it's also interesting. If anyone knows of papers on this topic, I'd be interested...
by mzs | 2025-12-03 18:34:37+00:00
Furukawa, Y., Sunami, S., Takano, Y. et al. Bio-essential sugars in samples from asteroid Bennu. Nat. Geosci. (2025). https://doi.org/10.1038/s41561-025-01838-6

Sandford, S.A., Gainsforth, Z., Nuevo, M. et al. Nitrogen- and oxygen-rich organic material indicative of polymerization in pre-aqueous cryochemistry on Bennu’s parent body. Nat Astron (2025). https://doi.org/10.1038/s41550-025-02694-5

Nguyen, A.N., Seifert, L.B., Shimizu, K. et al. Abundant supernova dust and heterogeneous aqueous alteration revealed by stardust in two lithologies of asteroid Bennu. Nat Astron (2025). https://doi.org/10.1038/s41550-025-02688-3
by sys32768 | 2025-12-03 18:34:46+00:00
I work for a finance firm and everyone is wondering why we can store reams of client data with SaaS Company X, but not upload a trust document or tax return to AI SaaS Company Y.

My argument is we're in the Wild West with AI and this stuff is being built so fast with so many evolving tools that corners are being cut even when they don't realize it.

This article demonstrates that, but it does sort of beg the question as to why not trust one vs the other when they both promise the same safeguards.
by Anamon | 2025-12-03 18:34:55+00:00
The person who started the movement (Louis Rossman) was and does. The person who made this website maybe wasn't and does not. The phrase "be like Clippy" really doesn't fit what the "movement" is about and seems to be the source of the confusion on this thread.

The choice of Clippy makes sense if you watch the original video. It's not suggesting that Clippy is something we should strive for again. It's meant to show that while we thought Clippy was horrible and anti-user then, just compare it to what we have now. Clippy wasn't "good", but infinitely more harmless in comparison.
by sema4hacker | 2025-12-03 18:34:57+00:00
I'm amazed that city, county, state, and federal tech projects never want to clone best-of-show systems instead of starting from scratch. City needs a web site? Clone the best one you can find amongst the tens of thousands of cities already doing that. County jail needs tracking of inmate transports? Clone the best one you can find amongst the thousands of counties already doing that. State needs a sales tax system? Clone whatever other state system is the best. VA needs a system for hospital records? Don't develop from scratch, start by cloning the best system you can find amongst the thousands of existing hospital networks, and customize from there.
by throwawaylaptop | 2025-12-03 18:35:10+00:00
Obviously. Although it also adds fake excuses about location and time frames to the mix. The cameras also work to make a wife think twice about going out on Thursday night and telling her husband she's gone to sleep.

A friend, that never would have dreamt about using cameras like this, only found out his wife was cheating when she had a major car crash at 3am returning from her affair partners house. He was at a national lab where he works the night shift.
by sundarurfriend | 2025-12-03 18:35:19+00:00
You can ignore them yourself, but people will get annoyed, take to social media, post "this project ignores PRs" "dead project" "they're not inclusive" etc. without context, and those things can gain momentum out of nowhere and have real consequences. And there will goalpost-shifting again, from "just mirror to GH" to "just accept PRs on GH too, why are they being so obstinate" and then further along.

The Linux kernel is unlikely to get those and can survive that even if it does, but your average FOSS project can be severely damaged in terms of reputation, contribution, usage, etc., by this kind of stuff, even if you want to dismiss it as just "social media fluttering". Easier and safer just to keep things clean and clearly at one place.
by toast0 | 2025-12-03 18:35:27+00:00
I would recommend getting nice used/refurbished laptops from ebay. Take the time to do your own install of Windows, cause who knows what's on there.

I recently got two; a refurbished HP EliteBook 645 G10 and a used Lenovo ThinkPad L14 Gen 2. Both around $300, with a recentish processor (Zen 3), 16 GB ram and a 256 GB SSD. Scratches and dings included at no additional fee. The Thinkpad has fewer USB ports, but the Elitebook has an annoying fan.

If you need more than 16 GB ram, you probably need to consider if it's better to get one that already has that much, or if you should get one with replaceable RAM and swap... 16 GB is enough for my needs; one of the machines has 1 channel soldered, 1 DIMM; the other machine is 2 DIMMs. I was doing the same work on a $100 laptop with 4 GB ram; it wasn't fun, but I could do it --- but if my needs change I can upgrade.

The "refurbished" machine had a proper out of the box experience and windows 11 professional; the used one had win 11 enterprise installed with a user named user --- I put a fresh copy of windows 11 pro on that (bios activation); after some judicious changes in group policy editor, and disabling the push content in the lock screen, it's not terrible.

Not my listing, caveat emptor, but something like this might be a reasonable option since you are sort of indicating 16GB ram might not be enough ... https://www.ebay.com/itm/257198634361 $250, ThinkPad L14 Gen 1; 6-core zen2, 32GB ram, 512 GB SSD. The L14 is bigger and clunkier than other 14" thinkpads, but more modular... and IMHO, having more bezel underneath the screen elevates the screen a smidge which helps ergonomics a tiny amount; of course, the keyboard is still an ergonomic disaster with the reach over the trackpad, but that battle has been lost for decades.
by shadowgovt | 2025-12-03 18:36:10+00:00
That might be because the thing is whole-cloth generated from AI, but given that the author has a .in email address, it also might be that English is not their first language but they want to reach a broader audience with their message so they used AI to translate it into the lingua franca of modern technical and scientific discussion (which is, this is always funny to me, not franca).

AI generators do a better job of conversational output than traditional language translators (although there is a risk that if you can't read the target language as a non-native speaker, it can distort or destroy the message).
by stn8188 | 2025-12-03 18:36:19+00:00
I think this was already discussed recently, but I find this quote in the article very interesting:

"Passengers don't listen, a lot of them think the TSA is a joke. The fines are a way to enforce the rules for the REAL ID," the former TSA officer told TheTravel.

I've got one very concrete reason why I do think the TSA is a joke. They list a Veterans Affairs health ID card as valid ID even after this new Real ID rule. Despite that, I was forced to go thru "extra screening" in Austin because a bunch of agents were not aware of this (even though I had a print out of the website). Even in the TSA press release announcing this new fee still lists the VA ID as sufficient, but I'll forever just recall the complete lack of professionalism and knowledge of these agents.