MurphyA/hacker-news huggingface dataset:
by davidbhead | 2025-12-12 16:48:06+00:00
Founder of Endorsed here. We help employers block situations like these where job seekers are collaborating with the scammers.

As other have pointed out, there are multiple types of scammers here.

The most benign are people who just want US salaries. The most malicious is North Korea who will go as far as installing ransomware and infiltrating financial institutions (especially crypto) to steal user money.

We know North Korea is much of the problem since the FBI gets involved in the malicious cases that I described and they publish reports. It’s hard to tell though because companies want to keep news they are infiltrated as quiet as possible.

I’m not sure which type of fraudster sent you this email other than the rate they are saying they will pay (50%) is exceptionally high. We know the North Koreans pay 10% for using your identity for ID verification etc, and 20% if you are the front man.

Nostrademons wrote a great comment about how they can use your identity here in problematic ways. I’m not sure how much this has happened since I have yet to hear about it in private stories from employers, who tend to be pretty candid. From what I can tell the fraudsters want to stay under the radar and be employed as long as possible. A lot are great engineers so they pull it off.

That said, rarely do people want to talk about this topic who are involved so it’s hard to tell what fully happens in each scenario.
by Tzt | 2025-12-12 16:48:30+00:00
Yes, absolute majority of new ones use CoTs, long chain of reasoning you don't see.

Also some of them use such a weird style of talking in them e.g.

o3 talks about watchers and marinade, and cunning schemes https://www.antischeming.ai/snippets

gpt5 gets existential about seahorses https://x.com/blingdivinity/status/1998590768118731042

I remember one where gpt5 spontaneously wrote a poem about deception in its CoT and then resumed like nothing weird happened. But I can't find mentions of it now.
by alephnerd | 2025-12-12 16:48:36+00:00
Ironically, the same people who complain about "slippery slopes" become the same people who bemoan the fact that American, Chinese, Russian, and even Vietnamese [0][1] intelligence operate with de facto impunity in Germany and the EU.

Europeans can no longer afford to be the idealists that they were in the 2000s. Every country is runnng influence ops across Europe to a degree that hasn't been seen since the Cold War.

That said, as an American, it's fine for me if Germans and Europeans remain naive. An allied Europe is good, but a naive but controlled Europe is equally as good. For every Atlanticist, we have people who can push our interests in an illiberal manner like Dominik Andrzejczuk.

[0] - https://www.bloomberg.com/news/articles/2024-04-25/berlin-ki...

[1] - https://www.bloomberg.com/news/articles/2025-11-18/vietnam-p...
by jkubicek | 2025-12-12 16:48:55+00:00
For sure, but for this to work you need someone downstream to notice those messages and prioritize the work to migrate off the deprecated code paths. Some teams will respond, but many won't. No matter how loudly you declare that the code is deprecated, you'll still have people using it up to the point it stops working.

It's far better to plan the removal of the code (and the inevitable breaking of downstream users systems) on your own schedule than to let entropy surprise you at some random point in the future.
Show HN: A week of progress making a game in Claude Code without any coding
by AndyNemmity | 2025-12-12 16:48:56+00:00
I have been seeing posts about what people build with claude code, so I wanted to see what I could build in a week.

I have my own custom setup of agents, skills, routers, and stuff I use.

It's not done, there's still a lot to work on, but I wanted to share it at this stage, so you can see what a week of effort looks like. At least my effort.
by GuB-42 | 2025-12-12 16:48:56+00:00
From the looks of it, Rust is usable un a tiny embedded system but it is not "great". I think that out of the recent, trendy languages, Zig is the best suited for this task, but in practice C is still king.

The big thing is memory allocation, sometimes, on tiny systems, you can't malloc() at all, you also have to be careful about your stack, which is often no more than a few kB. Rust, like modern C++ tend to abstract away these things, which is perfectly fine on Linux and a good thing when you have a lot of dynamic structures, but one a tiny system, you usually want full control. Rust can do that, I think, like C++, it is just not what it does best. C works well because it does nothing unless you explicitly ask for it, and Zig took that philosophy and ran away with it, making memory allocation even more explicit.
by muro | 2025-12-12 16:49:16+00:00
The ruling says Apple can:

insist on Apple IAP links/buttons to be the same as buttons/links to external payments. But they can't ask for the outgoing links/buttons to be less prominent

charge for links/buttons to external payment, but not as they please. One interpretation is that it has to be based on real cost and can't in any way be tied to IAP costs.

can't use scare screens on external purchases
by philippemnoel | 2025-12-12 16:49:39+00:00
That's true. For this reason, most modern search engines support language-aware stemming and tokenization. Popular tokenizers for CJK languages include Lindera and Jieba.

We (ParadeDB) use a search library called Tantivy under the hood, which supports stemming in Finnish, Danish and many other languages: https://docs.paradedb.com/documentation/token-filters/stemmi...
by AndyNemmity | 2025-12-12 16:50:34+00:00
I had never used Typescript, I still don't even know the syntax as I haven't looked at a single line of code or text. I've done everything through claude code.

I'm pretty surprised how far along I am after a week. I couldn't have done this in 3 months without Claude Code.

Obviously it's not perfect, there is a lot to still do. Obviously there are normal bugs from LLMs being generally rough, but Opus 4.5 has done a pretty outstanding job in my mind given the constraints.
Show HN: Dbxlite – Query 100M+ rows in a browser tab, no install
by hfmsio | 2025-12-12 16:50:56+00:00
What started as a Claude Code experiment turned into a browser-native SQL workbench I now use daily.

Runs DuckDB WASM entirely in your browser. No backend, no installation, no signup.

- Query local files (CSV, Parquet, Excel) – data never leaves your machine - Handles 100M+ rows, 50GB+ files in a browser tab - Full UI: Monaco editor, schema explorer, spreadsheet-style results grid - Share SQL via URL – anyone can run your query instantly - BigQuery connector built-in (Snowflake coming)

v0.2 – actively developing. Feedback welcome.

GitHub (MIT): https://github.com/hfmsio/dbxlite
by klooney | 2025-12-12 16:51:18+00:00
> if you can’t beat ’em, join ’em” approach and form partnerships with Chinese manufacturers to get access to their technology, said Shay Natarajan, a partner at Mobility Impact Partners, a private equity firm that invests in transportation.

I'm skeptical American companies could pull the same trick, our culture overemphasizes short term outsourcing. They wouldn't get to step 2 of "steal and improve".
by marsw42 | 2025-12-12 16:51:24+00:00
Here is the prompt I used!

* contrarian_view: * Look for the most upvoted comment that DISAGREES with the article's premise or the majority sentiment * This is the "steelman" of the opposing view - the most compelling counter-argument * If no significant contrarian view exists, set has_contrarian to false * Focus on constructive disagreement, not flame wars
by earlyreturns | 2025-12-12 16:53:38+00:00
Just make the isp the gateway. Nobody under 18 needs the internet. If a parent lets their kid onto the internet, prosecute the parent. It’s pretty simple really. People just want to pretend it’s harder than it is because they have some conflict because removing under 18 from the net cuts into profits or makes it harder to parent. Boo hoo.
by ipython | 2025-12-12 16:53:43+00:00
Glad to hear your life is so simple that you can track all this while working full time jobs, cooking healthy meals, driving the kids to the various activities and travel sports (because you could be arrested if you let your kids walk anywhere), making sure they complete their homework on time, monitoring their interactions with friends, tracking new tech trends to find new threats (is my kid interacting with character.io or ChatGPT in an unhealthy way?)... I'm sure I'm missing a few more.

And yes, you are arguing against "making it easier for parents" - my original post literally advocated for legislating tech companies to make controls available, effective, and easy to use. If you truly believe what you're saying, then you'd agree with me. Instead you're nitpicking my ability to parent my kids. Exactly the behavior that isn't working, so please continue - I'm sure it'll work now.
by dansalvato | 2025-12-12 16:53:52+00:00
I see CarPlay (and CarPlay Ultra) as being for auto makers who don't want to put in all the effort to design and drive a good proprietary UI (CarPlay is a godsend in cars with crappy UI, i.e. most of them).

Rivian is a luxury vehicle brand with a first-class UI/UX. I imagine going with their own first-class UI and CarPlay Ultra would be a mess; two separate interfaces for the same controls, but laid out differently. Makes a lot more sense they'd be working with Apple to integrate more Apple features into their own UI, rather than having to maintain two separate first-class UIs that are bound to have discrepancies.

And there's the more obvious answer that they want the entire driving experience to feel like a Rivian experience, given how important that's been for luxury EVs on the software side. Supporting a canned OS would make the vehicle "feel" the same as every other car that also supports it.
by toomuchtodo | 2025-12-12 16:54:52+00:00
We are, but luckily, we’ve backed ourselves into a corner that acts as a forcing function. Coal generators are too expensive to keep running forever due to reaching the end of service life. LNG export expansion means US electrical consumers using fossil gas for power will be competing with global LNG consumers. ~90% of new power additions in the US are renewables. This is likely to continue because fossil generation is simply more expensive, even when considering capacity factors and subsidy sunsets.

Economics cannot fix stupid, but in this context, it can route around it.

(think in systems)
by adrian_b | 2025-12-12 16:54:52+00:00
Close, but no match.

Cadmium zinc telluride is a II-VI semiconductor, not a III-V semiconductor, because Cd & Zn belong to the 2nd group, while Te belongs to the 6th group. (I find the habit of some modern authors of calling the group 2b as group 12 and the group 6a as group 16 extremely stupid, even if with the traditional approach it is debatable which should be group 2a and which should be group 2b, because for many properties Zn, Cd & Hg are more similar to Mg than Mg is similar to Ca, Sr & Ba. However this defect of the classic numbering is not solved, but it is made worse in the modern numbering.)

Both the III-V & the II-VI semiconductors, and also the few existing I-VII (made of Cu or Ag with halogens) and the few IV-IV semiconductors (e.g. silicon carbide) semiconductors, are compounds of chemical elements whose number of external electrons averages to 4, i.e. the same as in diamond, silicon or germanium, so they can form crystal structures of the same kind.

There are many other kinds of semiconductors, but those which have the cubic or hexagonal structures of diamond/lonsdaleite (more symmetric) or zinc sulfide (less symmetric) are much better understood than the other semiconductors and they are much more frequently used.
by mattnewton | 2025-12-12 16:54:52+00:00
Huh, maybe your use case is around the indexing of the contents of attachments? I basically never search for the contents of attachments, just the clip does of emails, and have found gmail search to be really good. I switched back to the web client from Mac’s native mail app for this reason because search has been so good for me in Gmail.

I haven’t looked, but I wonder if there is a good hackable email client that will let you substitute out the search index with a reasonable abstraction from all the complicated email protocol stuff. I feel like building an index for your use case is totally achievable if so.
by bogwog | 2025-12-12 16:54:53+00:00
> ... the appeals court now suggests that Apple should still be able to charge a “reasonable fee” based on its “actual costs to ensure user security and privacy.”

> Speaking to reporters Thursday night, though, Epic founder and CEO Tim Sweeney said he believes those should be “super super minor fees,” on the order of “tens or hundreds of dollars” every time an iOS app update goes through Apple for review.

Wow, one step forward, and one step back. Good job, Epic.

The outcome is obviously going to be that Apple's store will have the most apps, with the most up to date versions, and with the most free apps/games. I'm sure Fortnite will do just fine though.

Unless I'm misunderstanding this, why would the court allow Apple to act as a gatekeeper for their competitors?
by nocman | 2025-12-12 16:54:55+00:00
> sed is not "stream editor" as it says above, it's "stream ed"

Well, according to the man page, it is indeed "stream editor":

https://man.cat-v.org/unix_8th/1/sed

I was already aware of its relation to 'ed' (having had to actually use 'ed' in ancient times). However that doesn't change the fact that it does stand for "stream editor".

After reading your post, I thought "That doesn't seem right, I remember it specifically being referred to as 'stream editor'", so I went looking.
by japhyr | 2025-12-12 16:55:02+00:00
I read a book called A Walk Across America in college, by Peter Jenkins. I liked the idea of traveling under my own power, but I didn't want to spend years walking. I kept when I got my driver's license, and I was bike commuting in NYC at the time, so biking was a natural fit.

I was teaching at the time, so the first summer without any obligations I rode across the northern US. Then I rode across the southern US the next summer. I loved it, and wanted to live outside for all the seasons. So the next year I quit my job and circled the continent: Seattle to Maine, down to Florida, across to California, then up to Alaska. I moved to Alaska a few years after the trip ended and spent 20 years there. We moved to North Carolina last year, because dark southeast Alaskan winters were getting old, and all our family is on the east coast.

I'm grateful to have had the opportunity to do that trip in the era of paper maps, and truly being out of touch for so much of that time. It pushes you to meet so many new people in all the places you visit, instead of staying in constant contact with people you already know. It was also nice to not see satellite imagery of the road ahead. Every day was a surprise. :)

I did write a book, The Road to Alaska: https://www.amazon.com/Road-Alaska-Eric-Matthes-ebook/dp/B07...

One of my claims to fame is writing one of the best-selling Python books of all time (Python Crash Course), and one of the lowest-selling travel books of all time. :)
by sxzygz | 2025-12-12 16:55:17+00:00
In case you assume novelty, a comment [1] from ArsTechnica reader Jensen404 explains otherwise by linking to [2] a post on Bluesky.

[1] https://arstechnica.com/gaming/2025/12/jonathan-blow-has-spe...

[2] https://bsky.app/profile/draknek.bsky.social/post/3m7qybidq7...
by tialaramex | 2025-12-12 16:55:19+00:00
The modern TLS 1.3 handshake is exactly the same as your connection setup. If we ignore the fact that (Because Middleboxes) you have to pretend you're talking TLS 1.2 it goes like this:

Client: "Hi, some.web.site.example please, I want to talk HTTP and I assume you know how AES works and I've randomly picked these numbers to agree the AES key"

Server: "Hi, I do know AES and I've picked these other numbers so now we're good."

Included in the very same packet as that response from the server is the (now AES encrypted) first things the TLS server wants to say e.g. to prove who it is, and agree that it knows HTTP as well.

0RT is a (very dangerous, do not use unless you understand exactly what you're doing) extension for some niche applications where we can safely skip even this roundtrip, also included in TLS 1.3
by nightpool | 2025-12-12 16:55:36+00:00
I don't understand this. Can you help explain it with a more practical example? Say that N1 (the root service) is a GraphQL API layer or something. And then N2 and N3 are different services feeding different parts of that API—using Linear as my example, say we have a different service for ticket management and one for AI agent management (e.g. Copilot integration). These are clearly different services with different responsibilities / scaling needs / etc.

And then N4 is a shared utility service that's responsible for e.g. performance tracing or logging or something similar. To make the dependency "harder", we could consider that it's a shared service responsible for authentication and authorization. So it's clear why many root services are dependent on it—they need to make individual authorization decisions.

How would you refactor this to remove an undirected dependency loop?
by bluGill | 2025-12-12 16:55:36+00:00
I can't speak to NYC - best case it would take me 4 hours to get there (.5 to the airport, 1 hour security, 2 hours on the plane, .5 from ny airport to the city). Meanwhile I can get to nearly anywhere in my entire MSA in less than an hour, both city and suburbs (and even a few farms). Within that the majority of ethnic food is in suburbs, though the largest concentration is still downtown.
by senordevnyc | 2025-12-12 16:55:53+00:00
This is such a wild take. Waymo is expanding to cities across the country, doing millions of paid rides every month. Meanwhile Tesla's "Robotaxi" is tooling around Austin with a few cars, every one of which has a driver in the front seat. On the personal vehicle side, Tesla hasn't done anything new or interesting in years, and sales are slumping. FSD never seems to actually become good enough to actually be "full self driving", it's just year after year of Tesla stans coming in here to tell us how "the latest version is incredible, actual full self driving is just around the corner!"
by kortex | 2025-12-12 16:56:06+00:00
You should look at the self-executing .pex file format (https://docs.pex-tool.org/whatispex.html). The whole python program exists as a single file. You can also unzip the .pex and inspect the dependency tree.

It's tooling agnostic and there are a couple ways to generate them, but the easiest it to just use pants build.

Pants also does dependency traversal (that's the main reason we started using it, deploying a microservices monorepo) so it only packages the necessary modules.

I haven't profiled it yet for cold starts, maybe I'll test that real quick.

https://www.pantsbuild.org/dev/docs/python/overview/pex

Edit: just ran it on a hello world with py3.14 on m3 macbook pro, about 100 +/-30 ms for `python -m hello` and 300-400 (but wild variance) for executing the pex with `./hello/binary.pex`.

I'm not sure if a pants expert could eke out more speed gains and I'm also not sure if this strategy would win out with a lot of dependencies. I'm guessing the time required to stat every imported file pales in comparison to the actual load time, and with pex, everything needs to be unzipped first.

Pex is honestly best when you want to build and distribute an application as a single file (there are flags to bundle the python interpreter too).

The other option is mypyc, though again that seems to mostly speed up runtime https://github.com/mypyc/mypyc

Now if I use `python -S` (disables `import site` on initialization), that gets down to ~15ms execution time for hello world. But that gain gets killed as soon as you start trying to import certain modules (there is a very limited set of modules you can work with and still keep speedup. So if you whole script is pure python with no imports, you could probably have a 20ms cold start).
by adventured | 2025-12-12 16:56:42+00:00
99% of humans are mimics, they contribute essentially zero original thought across 75 years. Mimicry is more often an ideal optimization of nature (of which an LLM is part) rather than a flaw. Most of what you'll ever want an LLM to do is to be a highly effective parrot, not an original thinker. Origination as a process is extraordinarily expensive and wasteful (see: entrepreneurial failure rates).

How often do you need original thought from an LLM versus parrot thought? The extreme majority of all use cases globally will only ever need a parrot.
by sofixa | 2025-12-12 16:56:52+00:00
Why? Neither Chiang nor Mao were fighting "the anti-fascist war". Both were more interested in fighting each other, for starters.

Imperial Japan being considered fascist is also quite the stretch. And importantly, neither of the two/myriad of Chinese entities was fighting "to preserve human civilisation". When they were fighting the Japanese for a change, it was because the Japanese were attacking them.

The article tries to position China as some "was fighting for good in WW2 so it's unfair to say current China is autocratic with it's buddies in NK and Russia". Even if it were true thay China was fighting for a good cause in WW2 (extremely debatable), doesn't in the slightest change the fact that today, China is an autocratic regime. How long is Xi's term? How long has he been in power? For how long will he be in power? It's the same story as Putin.

China's foreign minister might bitch about it all he wants, it's nothing but the truth. You can consider that autocratic regimes aren't inherently bad, and that's a debate to be had about upsides and downsides. But it is categorically nonsense to pretend that China isn't autocratic.
by baud147258 | 2025-12-12 16:57:04+00:00
I don't think castles, especially the moat and bailey types discussed in the article. Even those built of stone required maintenance to last longer than decades, especially if you want something usable and not a ruin (and at the time, any construction that's not in use would likely be dismantled, with the construction materials to be re used).

But I agree that money played a part: castles were the place from where the local lord was controlling his estate, extracting taxes from the local farms and controlling the military force that would prevent other from trying to pillage/forage on his lands.
by bluGill | 2025-12-12 16:57:08+00:00
Not really. Get in a car and you can be at all. For many in the city walking it is about as long to get to those things - the distance is less, but the time is similar and time is what counts.(which isn't very many!) the city is the food desert - there are bars and restaurants, but zero grocery stories. If you want to cook a meal you have to get to the suburbs to buy the supplies.
by Sharlin | 2025-12-12 16:57:42+00:00
They're simply completely different breeds. Factory-farmed supermarket broiler breeds are optimized for producing as much bland, white meat as possible in as short time as possible. Everything else, like the ability to walk, is secondary, they're never getting enough space to walk anyway in their two-month life.

Breeds optimized to egg-laying are an entirely separate category, and they don't produce much meat, and the meat is… different, as you described. Apparently some hybrid breeds are also available for backyard meat+egg co-production. I don't know what their meat is like.

People didn't really eat that much chicken meat before the 70s, at least in the West. Wouldn't have been even possible to consume this much chicken meat, before these fast-growing breeds and industrial-scale farms.