MurphyA/hacker-news huggingface dataset:
by Trasmatta | 2025-12-18 19:11:50+00:00
+1 to all of this. I can no longer deal seriously with Blow's ideas, programming language, or games because he can't present any idea without being highly condescending and critical of just about everyone else. I'm glad I've never had to work for or with him, because he's the type of coworker or boss that constantly makes everyone's lives miserable.
by alyandon | 2025-12-18 19:12:22+00:00
(1) is already true today. There is no way for services to enforce whether a passkey is stored in software or hardware.

Challenge: Go and try to register a non-blessed passkey type with PayPal and come back and share your experience.

(2) I understand you don't like the user experience

Pretty much my complaint. Passkeys allow for service providers to do dumb things that result in terrible UX. With Password + TOTP, I don't get asked to touch a sensor, enter a PIN, enter an unlock password, etc.
by tgsovlerkhgsel | 2025-12-18 19:12:36+00:00
I'd argue mining malware is a net benefit to society. I'd much rather have my vulnerable server exploited by mining malware than left alone. If it gets exploited by mining malware, it gives me an extra chance to catch it before something actually bad happens, at almost zero cost to myself and a small reward for the person who found the vuln.
by yellow_lead | 2025-12-18 19:12:54+00:00
I had a site where the user can upload a file < 5MB. There may be a way to check this on the frontend, but for security reasons, it has to be checked on the backend too.

If it exceeds it, I returned 400. I had to add an event listener to check for the code (htmx:afterRequest) and show an alert(), but this gets difficult to manage if there's multiple requests to different endpoints on the page. Looking at it now, maybe I should have configured HTMX to swap for 4xx.
by kelnos | 2025-12-18 19:13:18+00:00
> Targeting Linux means probably targeting all distros

Valve actually distributes a runtime (or at least used to), that's based on Ubuntu, and provides a stable target for developers who want to release a Linux port.

But I agree in general with your point; if the Windows build already performs great on Linux through Proton, why go through the effort to release a native Linux build?
by secstate | 2025-12-18 19:14:36+00:00
It's not a great solution, but you can vote with your wallet and simply not partake in that form of entertainment. I can't say it's fun to be not up on current games, or to find indie/non-drm games to play. But piracy is just an end-around a terribly policy of non-ownership that manages to both not remunerate the folks who do the work and make no impact on the actual problem which is that we don't like the non-ownership clause in modern games.

So yeah, TLDR, vote with your wallet and give up the entertainment this time.
Show HN: It's Like Clay but in Google Sheets
by rahulsingh34 | 2025-12-18 19:14:38+00:00
Hey everyone! After struggling a lot with data enrichment for SMBs, I launched a Google Sheets add-on that gives you direct access to an AI-powered webscraper.

Vurge lets you get structured information from any website right inside your Google Sheet, eliminating the need for learning a new tool or adding a new dependency for data enrichment.

Let me know what you think!
by nightpool | 2025-12-18 19:14:52+00:00
"Creating apps like Signal could be considered 'hostile activities' under new Counter-Terrorism and National Security Acts, UK watchdog warns"

The language changes here are slight (claims -> warns) and includes more context about the reason this watchdog is speaking out (current debates around the Counter-Terrorism and Border Security Act, new implementation of the National Security Act), using language from the first 4 paragraphs (may be considered, could be considered, stark warning, report warns, etc).

You could also leave out the specific names of the acts—they're not super helpful to me as a non-UK news consumer, but I suspect they might be more crucial to someone who's tapped into the UK political news cycle:

"Creating apps like Signal could be considered 'hostile activities' under new laws, UK watchdog warns"
by bonesss | 2025-12-18 19:16:14+00:00
Templates and templating languages are still a thing. Source generators are a thing. Languages that support macros exist. Metaprogramming is always an option. Systems that write systems…

If these AIs are so smart, why the giant LOCs?

Sure, it’s cheaper today than yesterday to write out boilerplate, but programming is about eliminating boilerplate and using more powerful abstractions. It’s easy to save time doing lots of repetitive nonsense, stopping the nonsense should be the point.
by good-idea | 2025-12-18 19:16:17+00:00
I have been switching between OpenCode and Claude - one thing I like about OpenCode is the ability to define custom agents. These can be ones tailored to specific workflows like PR reviews or writing change logs. I haven't yet attempted the equivalent of this with skills in Claude.

These two solutions look feel and smell like the same thing. Are they the same thing?

Any OpenCode users out there have any hot or nuanced takes?
by ramesh31 | 2025-12-18 19:16:36+00:00
>Whatever they do, they simply cannot win. I'm personally starting to suspect the main issue with Mozilla is its users.

A lot of people remember the Mozilla of old, and are just completely depressed at the state of where it has ended up over the last 10 years. They were once a non-profit founded to promote the web and put users first. Now it's just this weird zombie company monetizing the work and good will of a prior generation of engineers that cared about that mission.
by tame3902 | 2025-12-18 19:16:48+00:00
I don't know much about Turkey, but I assume they are referring to Erdogan. Turkey was a pretty solid democracy and he turned it into an authoritarian regime.

Erdogan also has some interesting ideas about the economy. A quote from his Wikipedia article: "He has pushed the theory that inflation is caused by high interest rates, an idea universally rejected by economists. This, along with other factors such as excessive current account deficit and foreign-currency debt, in combination with Erdoğan's increasing authoritarianism, caused an economic crisis starting from 2018, leading to large depreciation of the Turkish lira and very high inflation."

The resulting crisis has its own article: https://en.wikipedia.org/wiki/Turkish_economic_crisis_(2018%...
by jrussino | 2025-12-18 19:16:59+00:00
> Lowering the rent to fill their building reduces the value of that building

This must just indicate that the model used to value the building is wrong, right?

I'd think insofar the value of the building is tied to the rental price, that value should naturally be a function of the revenue that the building can be expected to generate, which in turn is be a function not only of the chosen rent price but the likelihood of someone renting at that price. Why would a building that offers its units at $N per unit but can only fill half of them at that price be worth more than the same building filling all of its units at $N/2 per unit?

I suppose there's some wiggle room to account for the relative uncertainty in those two cases. But fundamentally the rental price is a choice whereas the value of the building is (or ought to be) based on a combination of the qualities of the property itself and what the market is willing to bear.
by embedding-shape | 2025-12-18 19:17:15+00:00
> People with high incomes living alone in multi bedroom units objectively should leave.

Who cares how high their income is or how big the property is? If they pay the rent and want to continue living there, they should be able to continue living there. Taking someone's home away from them because "now you earn more money" or "now you're less people" sounds very inhumane, and I'm glad Spain wouldn't allow such discrimination.

I don't know why you bring up US laws, utterly irrelevant in this submission.
by bookofjoe | 2025-12-18 19:17:56+00:00
My experience with YouTube was different. Two or three times, up to around five years ago, I got an email from them stating I'd done something wrong — used protected music/content etc. — and that this notification wasn't a strike but I should contact them and explain why they were wrong to put a hold on the video and they'd withdraw the notice. I did so and they then responded that the email was erroneous, all good.
by tgsovlerkhgsel | 2025-12-18 19:17:59+00:00
> Should I treat this as some datapoint on monero’s security having held up well so far?

No. The reason attackers mine Monero and not some other cryptocurrency isn't the anonymity. Most cryptocurrencies aren't (meaningfully) mineable with CPUs, Monero (apparently) is. There may be others, but I suspect that they either deliver less $ per CPU-second (due to not being valuable), or are sufficiently unknown and/or painful to set up that the attackers just go with the known default.

Trying to mine Bitcoin directly would be pointless, you'd get no money because you're competing with ASIC miners. Some coins were designed to be ASIC resistant, these are mostly mined on GPUs. Monero (and some other coins) were designed to also be GPU resistant (I think). You could see it as a sign that that property has held up (well enough), but nothing else.
by jauntywundrkind | 2025-12-18 19:18:17+00:00
A systemd service can be:

[Service] Type=simple ExecStart=/usr/bin/my-service

If this is a hard job for you well maybe get another career mate. Especially now with LLMs.

The thing to me is that services sometimes do have cause to be more complex, or more secure, or to be better managed in various ways. Over time we might find (for ex) oh actually waiting for this other service to be up and available first helps.

And if you went to run a service in the past, you never know what you are going to get. Each service that came with (for ex) Debian was it's own thing. Many forked off from one template or a other. But often forked long ago, with their own idiosyncratic threads woven in over time. Complexity emerged, and it wasn't contained, and it crrtainly wasn't normalized complexity across services: there would be dozens of services each one requiring careful staring at an init script to understand, with slightly different operational characteristics and nuance.

I find the complaints about systemd being complex almost always look at the problem in isolation. "I just want to run my (3 line) service, but I don't want to have to learn how systemd works & manages unit: this is complex!". But it ignores the sprawl of what's implied: that everyone else was out there doing whatever, and that you stumble in blind to all manners of bespoke homegrown complexity.

Systemd offers a gradient of complexity, that begins with extremely simple (but still offering impressive management and oversight), and that lets services wade into more complexity as they need. I think it is absolutely humbling and to some people an affront to see man pages with so so so many options, that it's natural to say: I don't need this, this is complex. But given how easy it is, how much great ability to see the state of the world we get that SysV never offered, given the standard shared culture tools and means, and given the divergent evolutionary chaos of everyone muddling through init scripts themselves, systemd feels vastly more contained, learnable, useful, concise, and less complex than the nightmares of old. And it has simple starting points, as shown at the top, that you can add onto and embelish onwards as you find cause to move further along the gradient of complexity, and you can do so in a simple way.

It's also incredibly awesome how many amazing tools for limiting process access, for sandboxing and securing services systemd has. The security wins can be enormous.

> Because last time I wrote systemd units it looked like a job

Last, an LLM will be able to help you with systemd, since it is common knowledge with common practice. If you really dislike having to learn anything.
by nec4b | 2025-12-18 19:18:18+00:00
You are comparing a personal computer with a general purpose OS running 100s of processes and 1000s threads with a small micro-controller with a single process compiled together with an OS running at most a couple of threads. My PC has 100s of apps that need to coexist on the same hardware at the same time, your micro-controller only runs 1 designated app for eternity.
by vibrio | 2025-12-18 19:18:47+00:00
This made me think of the "Institute for one world health" . It came out as a non-profit pharmaceutical company in the mid 2000's. Victoria Hale was the founder-it got her a MacArthur fellowship. It is focuses(focused?) on global health and populations underserved by for-profit models. I think they successfully developed a treatment for leishmaniasis. it's an adorable model and should be pushed but as usual it seems like the philantropy money is limiting.
by farmeroy | 2025-12-18 19:18:53+00:00
1000% this. I actually am using htmx at ${JOB} and this is essentially the only downside to htmx. I want to know which template partial is getting swapped. My IDE doesn't know. I need to track countless html ids to know what will be swapped where... how? It hasn't been a big deal because I alone write the frontend code so I have all my hacks to navigate and my intimate knowledge of the code, but if we need more devs on the frontend, or if the frontend drastically grows feature wise, i will need to tackle this issue post haste. I think template partials could help, but then we also would end up with giant template files and that would also be annoying.
by CjHuber | 2025-12-18 19:19:42+00:00
Somehow Codex for me is always way worse than the base models.

Especially in the CLI, it seems that its so way too eager to start writing code nothing can stop it, not even the best Agents.md.

Asking it a question or telling it to check something doesn‘t mean it should start editing code, it means answer the question. All models have this issue to some degree, but codex is the worst offender for me.
by Alex2037 | 2025-12-18 19:19:51+00:00
>You're very naive if you believe there is no way for the ISP to view your traffic just because you're over an Https connection.

they can see the connections, the volume, and the ciphertext being exchanged, but unless...

A) the server is compromised

B) the client is compromised

C) they can break the key exchange algorithm or the symmetric algorithm being used

...the ISP or any other MITM cannot see the plaintext. by design.
by Sohcahtoa82 | 2025-12-18 19:19:58+00:00
Another option:

Deliberate heat generation.

If it's cold and you're going to be running a heater anyways, then if your heat is resistive, then running a cryptominer is just as efficient and returns a couple dollars back to you. It effectively becomes "free" relative to running the heater.

If you use a heat pump, or you rely on burning something (natural gas, wood, whatever) to generate heat, then the math changes.
by i-dont-remember | 2025-12-18 19:20:00+00:00
This is neat, I appreciate that even if I can't use the service, i still learned something new about what's possible. Gonna keep it in the back-pocket for sharing with friends.

Also reminded me of when Justin Jackson talked about how he hired his kids for help with real projects and the positives from it https://justinjackson.ca/flipping-tables
by nerdjon | 2025-12-18 19:20:05+00:00
There is a part of me seriously considering making a bookshelf dedicated to all of these banned books.

I don't understand the logic of banning these books, do they act like the internet doesn't exist? Kids will find this information, I found plenty of information about being gay 20ish years ago in high school.

Then again being short sited is one of their strong suits.

(Not downplaying banned books, I just can't understand thinking it is a good idea)
by lifeisstillgood | 2025-12-18 19:20:47+00:00
Oh I like the oocyte idea - it’s actually concrete

It reminds me as well that I am a wave - the cells that make up my body have all been formed from food I ate in the past decade or so - my skin my liver my heart my brain. None of it is what is was when I was 18. But I still think it is.

And that reaches back to my mothers own birth is amazing.
by quesera | 2025-12-18 19:21:03+00:00
Visa gift cards have historically been widely accepted (anywhere you see the Visa logo), with a few exceptions, mostly online.

InComm is one of the two major program managers in the space, and they have had really severe fraud problems for a few years. They cracked down hard on prepaid card ("gift card") redemption about two years ago (right after the holidays).

This is an ongoing problem involving Visa, InComm, DHS, and a couple banks. Customers are being damaged, Visa's brand is being damaged, etc.

InComm is invisible to customers, but it was their action that made (most) Visa open loop prepaid debit cards difficult to use.

Notably, the other major program manager (Blackhawk Networks) also runs a few lower-volume Visa card programs, and they are still accepted normally.

Informed customers can make an explicit decision to purchase only Blackhawk-managed Visa cards. But that information is not trivial to obtain.
by vablings | 2025-12-18 19:21:10+00:00
Alongside all of these honest doctors and fitness coaches who espouse metabolic syndrome as the biggest health crisis of the 21st century there is a broad group of scammers and conmen who use the well backed science and literature to seed ground to push supplements and other crap. They seem to wrap the very basic medical truth of being overweight and inactive is horrific for your health in an onion of pseudoscience bullshit, so you buy the next best product high in "antioxidants" and "polyphenols"

The actual science is unimaginably boring. Do not be overweight on the BMI scale and do some moderate exercise for around 2 hours every week. This will drastically improve the health 1000x more than say the insane stuff that Brian Johnson is touting.

I hate modern fitness influencers and health wellness people in general. My head near about exploded when I saw a Tiktok from Jeff Nippard claiming that eggs increase your testosterone on a study with a sample size of FIVE PEOPLE.
by tgsovlerkhgsel | 2025-12-18 19:21:15+00:00
> when I forgot to log out of the root console in web-based terminal console to one of my VPS and closed its browser tab instead.

This should not enable the compromise of your session, i.e. either there was some additional vulnerability (and not logging out widened the window during which it could be exploited), or the attack was totally unrelated. Either way, you should find out the real cause.
by inemesitaffia | 2025-12-18 19:21:34+00:00
That's some bullshit.

>genocide, ethnic cleansing and apartheid

This is Western nonsense. The locals have problems, just like you do with Jews. They say "Yahud" not whatever you learnt in your cesspool of hate.

I've seen people like you. Support for people like Assad, Putin and Khamenei is never far from you and your friends.

Palestinians are mostly Muslim Arabs, And Isreal is surrounded by them.

The difference in lives lost is the value Israelis place on theirs and the disparity in technology the Israelis have. The Jews prevented the attempted genocide that you call Nabka by killing more than they were killed. Not standing passive like you'd like them to be. Sheep brought before the slaughter slab. The lucky ones left alive paying Jizya.

I'll give thier lives as much value as they give thiers and others.

From the news today:

75% of comments on a popular Palestinian Facebook news site denounce Ahmed Al Ahmed as a traitor for stopping the Bondi terrorists.

The aggressors are the racists who don't want other ethnic groups to stand. Maronites, Yazidis, Copts, Kurds, Assyrians, Jews, Druze.

Grinded into one homogeneous paste by force.

Jew hatred is in your heart.

And that's all there is to it.
by dobs | 2025-12-18 19:21:52+00:00
> > #1 is doable but would destroy our ability to combat fraud. "Here's how not to get banned next time" is not an email anyone in this space would consider sending.

> Just imagine laws would work that way.

This is how "tipping off" law often works in practice.

As a support agent you often lack full visibility into the treatment or history of the person on the other end of the phone, especially if they're a bad actor. You can't tell them what is or isn't fraudulent behaviour, or what might be construed as such.
by iwontberude | 2025-12-18 19:22:18+00:00
Great point. Exactly. They have undermined the marketplace by hovering up and consolidating studios, scuttling a lot of IP that gamers care about and squeezing money out of properties for quarterly gains. They use their market power to push worse games with abusive, dark patterns. Microsoft has really become even more of a heel than they were in the 2000s.
by riazrizvi | 2025-12-18 19:22:20+00:00
I hate the current trend in histrionic social media. A ‘banned book’ is one that you are not allowed to own by the State. You face fines, detention, interrogation, prison, torture, execution. Examples are 1984, The Satanic Verses. Countries that maintain book bans are Iran, China, Russia, North Korea, Saudi Arabia, Afghanistan.

Your school not stocking books you want is not a ban. It’s the prerogative of the institution to choose how it shapes minds. It cannot avoid taking on some angle, since any incomplete collection is an editorial choice.
by renewiltord | 2025-12-18 19:22:33+00:00
How does a “book ban” in a school work? The school is presumably only going to have a limited set of books. If I wanted to ban a book I’d just make it seem like a resource reorganization. “Oh we’re just focusing more on educational content around mathematics. These trans books will come around in a later reorg” and so on.

Is it like if you bring the book to school you’ll be sent home or something?
by slg | 2025-12-18 19:23:00+00:00
I wonder how the proponents of banning books like this don't have an "Are we the baddies?" moment. What precedent is there for history to look kindly on this type of behavior? Is there a single fiction book that you can point to that was banned in that past that let's say 60% of people today would agree was necessary (i.e. it would be in schools if there wasn't a ban) and appropriate to ban? It always seems like within a generation or two, most people agree the prior efforts to ban books were wrong, then a little time elapses, and we start banning new books again.
by gaigalas | 2025-12-18 19:23:38+00:00
Mixed-level pairs (senior/junior), for example, are more about mentoring than reviewing. Those sessions do not qualify for "more than one pair of eyes".

Excited (or maybe even stubborn) developers can often win their pairs by exhaustion, leading to "whatever you want" low effort contributions.

Pairs tend to under-document. They share an understanding they developed during the pairing session and forget to add important information or details to the PR or documentation channels.

I'm glad it has been working for you. Maybe you work in a stellar team that doesn't have those issues. However, there are many scenarios that benefit a lot from an independent reviewer.
by lukekim | 2025-12-18 19:23:45+00:00
Like most things, all measures fail point in time and on short time horizons, but law of big numbers and trends can be useful. I.e. compare yourself (on almost any measure) to yourself in your most productive period.

We reviewed our metrics for period-on-period comparisons at 1, 2, 3, 4 years and the numbers are surprisingly consistent for each person, and across similar productive engineers.

Like in the article, if you can apply a semantic score across years of data, it gives you a pretty good idea.