MurphyA/hacker-news huggingface dataset:
by spwa4 | 2025-12-14 16:53:56+00:00
What EU governments are doing goes a lot further than mere lackluster gpdr and other privacy law enforcement. They are forcing citizens to give their private information to US firms, nothing less.

> IMHO it requires conscious choices by European citizens to choose more carefully which online services they dedicate their time and money to. Or expect unintended consequences.

You mean, European citizens "need to" expect to, and pay for, basic internet services like search, mail, ... and, let's be honest, pay for worse services than are available free.

Imho proton is about the best available, it's just mail and office, and it's 5 euros per month for just mail and basic office, essentially Google's free tier.

Obviously, this will never happen. So either the government makes such services, and makes them well enough to seriously compete or implements a "great firewall of Europe" Chinese/Russian style and forces the change.

Instead, governments are introducing dependency after dependency on FANG companies. Is there any place left in the EU where you can even do your taxes without identifying through Google/Android or Apple/IOS on Chinese made hardware? Any at all? How about all of Europe? There was a row in the Netherlands about efforts to force homeless people to pay for cell phones ... and the government is refusing to back down. It's just incredible.

Even if the EU kicked out the FANGs with a "great firewall of EU", to force people to pay, it would decimate the gig economy and show that EU unemployment, especially among young people, is really double or perhaps even more the figure it appears to be. Plus I don't think it would work. Too many people would choose to simply stop interacting with the government under such a situation. And while the government can deal with 1 or 1000 people not doing their taxes, they cannot hope to deal with 10% not doing their taxes.

The only solution is that all European governments force themselves to ONLY work through "sovereign" channels not dependent on American companies. Right now they are all doing the opposite, and in fact not just encouraging EU citizens to give their information to FANGs, but actively forcing them to do so.

And you're right. This can only end in disaster. But it's slightly cheaper now. And the disaster is tomorrow.

Didn't Charlie Munger say "you young people ... tomorrow's politicians will make you wish Trump had eternal life"? If it's not Trump, sooner or later someone will blow up relations with the EU, and even within the EU, on either side.
by otterley | 2025-12-14 16:54:26+00:00
This is what agents are for. You load your private key into an agent so you don't have to enter your passphrase every time you use it. Agents are supposed to be hardened so that your private key can't be easily exfiltrated from them. You can then configure `ssh` to pass requests through the agent.

There are lots of agents out there, from the basic `ssh-agent`, to `ssh-agent` integrated with the MacOS keychain (which automatically unlocks when you log in), to 1Password (which is quite nice!).
by saisrirampur | 2025-12-14 16:55:41+00:00
You should just give it a shot in 10-15 min and see how it looks with ClickHouse. We made it that simple with ClickPipes :). Don’t intend to sell here, but it is as simple as signing up for trial on ClickHouse Cloud and clicking a few buttons and start seeing PG data getting synced.

In regards to footguns with replication, totally understand you being cautious. Last 2 years at PeerDB/ClickPipes was laser focused on just Postgres CDC to provide a dead simple yet highly reliable experience. The product has 100s of features, addresses 100s of footguns and actively being enhanced. Sharing some customers using this production https://clickhouse.com/blog/postgres-cdc-year-in-review-2025... You should give it a shot to see how easy it is. :)

In regards to sample apication, here is one, https://github.com/ClickHouse/HouseClick It showcases PG + CH stack. We just merged a PR to integrate pg_clickhouse too. The good news is that, there is a blog planned in a couple of weeks which showcases a tightly integrated experience PG +CH with CDC and pg_clickhouse, all in OSS. It will have docker-compose too. Your question adds up to what we are thinking next, I couldn’t resist myself to reveal it. ;) :)
by haizhung | 2025-12-14 16:55:50+00:00
Im seeing the same in Germany. Here’s an incomplete list of all books that I read as mandatory high school assignments, which I can recall from memory.

* Die Vorstadtkrokodile

* Faust I

* Die verlorene Ehre der Katharina Blum

* Antigone

* Die Verwandlung

* Bahnwärter Thiel

* Der Sandmann

* Die Räuber

* Hamlet

* Der Besuch der alten Dame

* Im Westen nichts Neues

* Unterm Rad

* Woyzeck

Im probably missing 5 books or something like that. Many of these books have had a profound impact on my views on the world, more than I would have guessed at the time.
by amanaplanacanal | 2025-12-14 16:56:11+00:00
I'm older than you (graduated high school in 1975). I read tons of sci-fi as a kid. I also don't remember reading any whole novels for English class. Maybe we did, but if so I have successfully blocked them out.

I have been amazed at the number of houses I've been in over the years which didn't appear to contain a single book.
by fluidcruft | 2025-12-14 16:56:22+00:00
My impression is people build very fragile Rube Goldberg devices on top of the models and those things break. That's not to say anything is wrong about the Rube Goldberg machines! They're very interesting and do new things (and they help me understand how things work). I'm just saying that there's probably a significant misattribution about where the fragility exists.

https://xkcd.com/1172/
by WarOnPrivacy | 2025-12-14 16:56:46+00:00
>> [DDG] preemptively censors entire torrent sites.

> I searched torrent sites on DDG ... it shows me torrent sites links

I can't speak to your search because you didn't post it. For my part, here are DDG results for widely used torrent sites (per reddit).

https://duckduckgo.com/?q=site:1337x.tw https://duckduckgo.com/?q=site:rarbgdump.com https://duckduckgo.com/?q=site:limetorrents.fun https://duckduckgo.com/?q=site:torrentdownloads.pro https://duckduckgo.com/?q=site:extratorrent.st

Interestingly, I did find that DDG isn't scrubbing Russian torrent sites from it's results. I think this makes sense if DDG is trying to compete with Yandex (who doesn't censor like DDG).

https://duckduckgo.com/?q=site:uztracker.net https://duckduckgo.com/?q=site:rutracker.org https://duckduckgo.com/?q=site:piratesparadise.org (eng, hosted in Moldova)
by Carretoni | 2025-12-14 16:56:48+00:00
I've been working on a concept for a robust, offline anti-theft system for mobile devices, and I believe the best way to get it implemented is to give it away. I'm posting it here for discussion and to encourage adoption by manufacturers and the security community.

The system is called *SOANS™ (Secure Offline Anti-Theft Neutralization System)*.

*The Problem:*

Every current anti-theft system (like Apple's Find My) is useless the moment a thief powers off the phone or yanks the SIM card. They all rely on an internet connection. Once offline, a skilled attacker has all the time in the world to try and bypass the lockscreen, tamper with firmware, or part out the device.

*The Solution: Hardware-Anchored, Offline Triggers*

SOANS uses the Secure Enclave (or any TEE) to run a pre-boot check that is immune to software tampering. It has two simple, autonomous triggers:

1. *Offline SIM Tamper Lock:* If the SIM card is swapped while the device is locked or powered off (without prior user authentication), the enclave detects this on the next boot and cryptographically bricks the device. It doesn't need a network to know the SIM was changed without permission.

2. *Physical Integrity Breach Response:* If the device's chassis is opened (detected by a simple tamper switch or sensor), a flag is set in secure memory. On next boot, the enclave sees the flag and, again, bricks the device.

"Bricking" here means securely erasing the cryptographic keys needed to decrypt user data and boot the OS. The device becomes a paperweight. No remote command needed. The thief's own actions trigger the neutralization.

*Why This Works:*

It attacks the economic incentive. A phone that is guaranteed to become a useless brick the moment it's stolen has zero resale value on the black market.

This isn't a patent grab. I've published this as a defensive publication to place it in the public domain. The goal is to make this an industry standard, not to monetize it.

I believe if this were implemented by default in Android and iOS, it would significantly reduce phone theft globally.

I'm keen to hear feedback from the HN community, especially from those with experience in mobile security, hardware, and TEEs. What are the potential failure modes I'm not seeing? Could this be implemented without significant hardware changes?

Full technical details are in the defensive publication linked above. Let's discuss.
by codegladiator | 2025-12-14 16:57:07+00:00
> With Opus 4.5, Claude Code feels like having a god-level engineer beside you. Opinionated but friendly. Zero ego.

Who keeps forgetting variable names and function calling conventions it used 4 seconds ago while using 136 GBs of ram for the cli causing you to frequently force quit the whole terminal. Its not even human level.
by cess11 | 2025-12-14 16:57:16+00:00
"Article II

In the present Convention, genocide means any of the following acts committed with intent to destroy, in whole or in part, a national, ethnical, racial or religious group, as such:

(a) Killing members of the group; (b) Causing serious bodily or mental harm to members of the group; (c) Deliberately inflicting on the group conditions of life calculated to bring about its physical destruction in whole or in part; (d) Imposing measures intended to prevent births within the group; (e) Forcibly transferring children of the group to another group."

https://en.wikisource.org/wiki/Genocide_Convention
by lubujackson | 2025-12-14 16:57:17+00:00
I have some context here, as my dad used to work at a state college running "the systems". There was era of thin clients and a centralized VAX machine or similar that did all the work. I remember weekends where my dad had to work because they were "running the numbers" which involved calculating grades and producing end of semester reports and such. Somehow this took more than a day of processing for a few thousans students and ran on a big tape machine. Sometimes it would crash or something so someone had to be there to keep things moving.

I don't remember all the details, but this is what they used up til the mid-90s. By then, I could probably run something on my 486 home computer that would complete in half an hour. But there were decades of process and customization embedded in these systems.

When modernization happened, it was swift. My dad was lucky with the timing as he was retiring during the transition so even made bonus money coming back as a consultant. But you can imagine that even if the new software was pricey and not as customizable, the speed improvements and reduction in staff made sense.

Once the old staff was cleared out, there was no department of staff being paid to build computer services, only the lesser staff needed to maintain and use it. The issue was that hardware/Internet usage expanded too fast, the importance and reliance on tech grew and it became a selling point for unis to have the newest systems in place.

It makes sense now for the pendulum to swing in the other direction, as customization and cost are wildly out of balance with AI and the latent tech workforce available at every college.

I would say the blocker now is the same as what allowed creaky old systems to persist into the 90s - administration doesn't give a shit about any of this and it is only viewed as a cost center. Until differentiating through customization provides an obvious and immediate fiscal benefit to the admins themselves, most unis won't look at changing off their shitty landlord systems until they are basically forced to by the market.
by rubymamis | 2025-12-14 16:57:27+00:00
What benchmarks are good these days? I generally just try different models on Cursor, but most of the open weight models aren't available there (Deepseak v3.2, Kimi K2 has some problems with formatting, and many others are missing) so I'd be curious to see some benchmarks - especially for non-web stuff (C++, Rust, etc).
by hkcanan | 2025-12-14 16:57:53+00:00
Thanks for the feedback, but characterizing this system as “vote counting” is incorrect. Metot’s argument analysis uses a fundamentally different methodology. What We Actually Use:

1. Toulmin Model Analysis Each argument is analyzed for its full structure, not just PRO/CON:

• Claim: The specific assertion

• Evidence: Supporting facts, data, sources

• Warrant: The reasoning connecting evidence to claim

• Strength Score: 1-10 based on evidence quality, warrant clarity, and fallacy presence

2. Dialectical Mapping with Recursive Response Structure Contrary to “structural blindness,” our system tracks how arguments respond to each other recursively:

Argument 1 (Supporting) └── Response 1.1 (Opposing - objection) └── Response 1.1.1 (Supporting - rebuttal) └── Response 1.1.1.1 (Opposing - counter-rebuttal)

This captures unlimited depth of dialectical exchanges.

3. Logical Fallacy Detection Contrary to “fallacy tolerance,” we detect: circular reasoning, ad hominem, straw man, false dichotomy, hasty generalization, and others.

4. Context-Aware Type Assignment Argument type (supporting/opposing) is determined relative to the author’s thesis, not absolute. If the author criticizes Theory X, arguments against X are classified as “supporting.” This addresses semantic context.

5. Self-Validation Layer Before output, the system validates:

• Argument count (academic texts typically have 5-15+ distinct arguments)

• Depth check (most academic texts have 2-4 levels) • Balance check (detects one-sidedness)

• Type accuracy verification What We Acknowledge: • Single-pass analysis (no iterative refinement yet) • General academic analysis rather than domain-specific ontologies

I appreciate critical feedback, but the system is not vote counting. Feel free to test with a demo account.
by egamirorrim | 2025-12-14 16:58:15+00:00
It's more like you want Claude to interact with X, and you go to see if there's an MCP server for it.

Claude could use the API directly but most MCP now comes with OAuth so you can let it act as you, in case API keys are hard to come by or chargeable. Sometimes with a good skill or a preconfigured CLI tool skills can be just as good if not far more powerful than an MCP server.

But the trigger you'd look for to decide to use an MCP is 'i wish Claude could access X'. My top examples:

- pulling designs from figma to implement them - fetching ticket context for a job from JIRA - getting a stack trace to investigate from Sentry
by LegionMammal978 | 2025-12-14 16:58:16+00:00
If you mean that you can call a C++ lambda from a static C callback via a context pointer, of course you can do that, it's not very mind-boggling. Rust FFI libraries similarly have to do that trick all the time to turn a closure into a C callback. The primary problem with WNDPROC is how to get that context pointer in the first place, which is the part that OP and everyone in the comments are talking about.
by array_key_first | 2025-12-14 16:58:23+00:00
To be fair, modern KDE has more-or-less the same taskbar.

And the taskbar is also not optimal. Having text next to the icons is great, but it means you can only really have, like, 4 or 5 applications open and see all their titles and stuff. Which is why modern windows switched to just icons - which is much worse, because now you can't tell which app window is which!

The optimal taskbar, imo, is a vertical one. I basically take the KDE panel and just make it vertical. I can easily have 20+ apps open and read all their titles. Also, I generally think vertical space is more valuable for applications, and you get more of it this way.

It also allows me to ungroup apps. So that each window is it's own entry in the taskbar, so one less click. And it works because I can read the window title.
by koolba | 2025-12-14 16:58:42+00:00
> What happened next: Claude installed every CLI, prompted me to login once, then went into autopilot. Configured each service. Ran commands. Checked logs. Auto-corrected errors. Got the app running in minutes.

> In another instance, a GitHub workflow was failing. Claude asked if it could SSH into my Hetzner instance to investigate. I said yes. It connected, looked up the config, restarted the Docker instances causing issues, and renewed some certificates as a hygiene step - which I never asked it to do.

This type of thing scares the crap out of me and I’m flabbergasted that anyone wold give an LLM unrestricted shell access to a server.
by sounds | 2025-12-14 16:58:49+00:00
100% this. Wikipedia article on qwerty:

"The QWERTY layout became popular with the success of the Remington No. 2 of 1878...

"The 0 key was added and standardized in its modern position early in the history of the typewriter, but the 1 and exclamation point were left off some typewriter keyboards into the 1970s."

There's always a few oddball variations. But desk work will probably use a qwerty keyboard in the year 2100
by spider-mario | 2025-12-14 16:58:56+00:00
> I don't know if I've ever committed a file unintentionally since adopting it.

I’ve had the opposite problem: forgetting to add new files.

> I like it especially in concert with git commit --amend, which lets me tack my newest changes onto the previous commit. (Though an interactive rebase with fixup is even better)

No need for the rebase to be interactive:

$ git commit --fixup=<commit> $ git rebase --autosquash <base>
by dangus | 2025-12-14 16:59:01+00:00
In addition, abrupt changes in industry landscape are problematic.

The expectation for everyone to retrain and do something else is not necessarily reasonable, especially in an environment that does not have much of a social support system for education, training, and extended periods away from the workforce.

And we all know that the market doesn't magically make replacement jobs better or the same as the previous ones.
by griffzhowl | 2025-12-14 16:59:25+00:00
Two main reactions:

The Meta paper, as well as other studies which have been interpreted as rudimentary "mind-reading" have measured activity in sensory cortex correlated with direct sensory inputs. There's a fairly close mapping between the initial layers of sensory cortex and patterns of activation in the sense organs. e.g. the optic nerve from each eye projects onto the initial layer of visual cortex in a way that closely preserves the geometry of the retinal image, so it's not that difficult to correlate information in the stimulus and these parts of cortex. Making sense of activity in deeper areas of cortex which isn't as closely correlated with immediate sensory stimulation is a much harder task.

Secondly, the idea seems to be that the brain could make use of a "lossy image" of its own overall functioning. This part seemed very handwavy to me. The brain already contains the information about its own functioning, by definition, so it's not clear to me what functions would be served by the brain's being able to "sense its own magnetic field". It's known that the brain integrates information from distant regions through the patterns of neuronal connectivity. It's not clear that something similar can be done with magnetic fields, because these would mostly affect very nearby areas of the brain, and long-distance effects would be scrambled with all the other activity going on in other parts of the brain.

The idea to look at the effects of the electromagnetic fields in brain functioning is interesting though. The general idea has been around for a long time[0]. The dificult part is making a detailed proposal for how it would actually work and finding experimental evidence for that.

[0] Burr, Northrop (1935) The Electro-Dynamic Theory of Life

https://www.journals.uchicago.edu/doi/abs/10.1086/394488
by raw_anon_1111 | 2025-12-14 16:59:57+00:00
I grew up in South GA and my family still lives there. I got the hell out of dodge the week after graduating from college in 1996.

I said in another reply, I’m all for the state and the federal government helping rural America where their own tax base isn’t strong enough. I’m also for universal health care that would help rural areas far more than me. I wouldn’t complain about my taxes paying for it.

It’s rural America that keeps voting for local, state, and federal politicians that put them in this place.
by pico303 | 2025-12-14 17:00:20+00:00
The example in the article of letting Claude deploy the app worries me. It has me thinking of that line, “AI is really good until you know what you’re talking about.” If the author was clueless of how to deploy the app, how do they know the app was deployed safely or securely?

Just this past week I asked Claude for some help with C++ and a library I was somewhat unfamiliar with. What it produced looked great—-if you didn’t know C++ very well. It turned out Claude knew even less about this library than I did, generating tons of code that was completely incorrect. I eventually solve my problem through research and trial and error, and it was nothing like what Claude recommended. It certainly didn’t leave me feeling confident enough to let the LLM have the level of control over my computer or project that the author is allowing it in the article.

I’m not looking forward to a future spending all my time cleaning up the messes LLM’s create.
by nataliste | 2025-12-14 17:00:30+00:00
The Greek government banned imports and effectively created a temporary, legally mandated barrier to entry for international competitors, which directly benefited Tikun Olam as the first local producer to be ready for commercial sales. That's typically called a monopoly.

Seems like Tikun Olam, and only Tikun Olam, directly benefit from increased medical cannabis sales. Doesn't seem like you need an insinuation.

And coincidentally, Teva Pharmaceuticals (the parent company of Teva Israel) has an exclusive distribution deal with Tikun Olam. Teva itself has a history of significant legal issues related to anti-competitive practices and price manipulation in the generic drug market.

Doesn't seem like a stretch to say that Tikun Olam is probably leveraging Teva's playbook. Especially likely, given that Avinoam Sapir, the General Manager of Tikun Olam-Cannbit, was previously the CEO of Teva Israel.

The original commenter, being Greek and possibly not a native English speaker, doesn't understand the subtlety of Israeli-founded, Israeli-sponsored, Israeli-owned, Israeli-staffed, with a board comprised entirely of ethnically Jewish Israelis, and named after a major concept in Judaism versus being a "Jewish" company. An easy mistake for someone to make.
by mr_mitm | 2025-12-14 17:00:34+00:00
There is no defense against a compromised laptop. You should prevent this at all cost.

You can make it a bit more challenging for the attacker by using secure enclaves (like TPM or Yubikey), enforce signed commits, etc. but if someone compromised your machine, they can do whatever you can.

Enforcing signing off on commits by multiple people is probably your only bet. But if you have admin creds, an attacker can turn that off, too. So depending on your paranoia level and risk appetite, you need a dedicated machine for admin actions.