MurphyA/hacker-news huggingface dataset:
by tialaramex | 2025-12-01 01:06:04+00:00
Regardless of Cloudflare, there is no way to know whether the traffic is encrypted between your apparent end-point and where it's actually used, nor whether that traffic is subsequently revealed to other parties, on purpose or by mistake.

When you type your password into e.g. Hacker News, you are sending that password to the server. It doesn't matter that they're using bcrypt tuned for $1Bn attackers and you chose a sixteen character random alphanumeric string because that precise string, the valid password, is deliberately sent by you, to them, to authenticate and so if they accidentally reveal that or get compromised in any way, game over.

It's getting a little bit better in some areas. My good bank actually has halfway decent security now, but the bank with most of my money (which is owned by my government, and thus avoids any risk consideration - if that bank fails, the currency my money is denominated in also fails, so, it doesn't matter any more) still thinks passwords are a good idea. Google lets me use a Security Key, but most web sites I authenticate with still use passwords.

SSH is slightly better, because of its target audience. A lot of people use public key auth for SSH, which doesn't have this issue. But that's not the web.
by BrenBarn | 2025-12-01 01:06:05+00:00
I find it somewhat sad to see so many people bag on StackOverflow as if it were a total failure. It's true that there were some negatives, but the brusque attitude and rapid question closures were often in response to a genuine flood of junky, repetitive questions. In its time it was unparalleled and even today there's still useful content on there. I also think its rep system is something a lot of sites could learn from in terms of how to gradually increase user privileges.
by billy99k | 2025-12-01 01:06:20+00:00
"It’s just the banal idea of if you have “grit” and work really hard, you are somehow guaranteed success"

When has anyone ever said this? I can study for a test and still fail, but not studying ever will guarantee failure.

"Grit" and hard work may not always equal success, but it will improve your odds to the point where success is very possible.
by konmok | 2025-12-01 01:07:18+00:00
Well, that doesn't really align with my interests, education, personality, or skills[1]. I do appreciate that criticism, but I'm looking for ways to give back that don't require abandoning my chosen career. I think there's a middle ground, basically.

[1]: What I mean is, I don't want to build my own company, and if I did, it would be in a very niche area that wouldn't directly benefit the people that most need help.
by jmonty900 | 2025-12-01 01:07:31+00:00
Even if there were significant challenges in some countries, certainly other countries on this list didn't deserve the 2 week treatment. Lego's actions here are very sketchy.

"We appreciate your understanding, - The BrickLink Team"

Understanding of what? They didn't describe the situation that lead to their decision to unilaterally apply the same treatment to all of these countries.
by jeroenhd | 2025-12-01 01:08:40+00:00
Does that mean the modem used for eCall is the same that is used to transmit telemetry? Because that's a level of shitty I hadn't even considered. That said, it would go against the spirit of the law as I read it.

There are always workarounds, of course, but that does pose an annoying problem to patch.
by golem14 | 2025-12-01 01:08:47+00:00
BTW, I really would like to have a way to partially clear cookies – i.e., I don't want to be signed out of gmail, and maybe not out of the Mechanic's Bank of Alaska or Amazon or Netflix, but most other things could go. I don't think this is easy in Chrome, Safari or other mainstream browsers, is it?

Yesyes, I do know that Big Ad can mostly stitch together some proxy profile of me anyway, but it would be more blurry.
by Havoc | 2025-12-01 01:08:51+00:00
> [hallucinations therefore] AI can never be accurate or trusted enough to majorly disrupt the labour market through automation or augmentation, and this pool of revenue is never coming their way.

Humans drive really shit but we still let millions yolo it daily. You don’t need perfection to roll stuff out in real world, just good enough

The industry will certainly have to pull a rabbit out the hat here but I don’t think it’s a foregone conclusion that it won’t. Not so long ago the notion of revenue from language models wasn’t a thing, now it’s billions yet people can’t picture that number growing rapidly in future?
by bsder | 2025-12-01 01:09:55+00:00
> The question is... as someone who's invested in the stock market, what do you do?

Nothing, unfortunately.

The problem is that the bubble is a stretch of time while the burst is an instant. So, you lose all the benefits of participating in the runup because you exited at the wrong time while you catch all the downside of the burst because it took out all the markets simultaneously.
by monerozcash | 2025-12-01 01:11:23+00:00
It's a legal term, has nothing to do with technical protections.

Practically any device connected to the internet is a "protected computer". The only case I can think of where the defendant prevailed on their argument that the computer in question was not a "protected computer" was US v Kane. In that case the court held that an offline Las Vegas video poker machine was not sufficiently connected to interstate commerce to qualify as a "protected computer".
by NegativeK | 2025-12-01 01:11:25+00:00
1. People are terrible at creating strong passwords. People will NOT create hundreds of strong passwords.

2. People will not use complex solutions unless actively and rigidly enforced.

3. At best, we can hope that they can create one really good passphrase. That's combined with MFA.

There are people that are exceptions to those, but they're vanishingly small percentage of the population. And unfortunately, there are a way, way more people that think they have something better but are deluding themselves -- like bad card counters that casinos are happy to have at the blackjack table or non-experts rolling their own crypto.
by crazygringo | 2025-12-01 01:11:37+00:00
I said, "As long as nobody is being harmed". Seatbelts and catalytic converters are about keeping people safe from harm. As are black box warnings and mandatory sonograms.

And legally, code and software are considered a form of speech in many contexts.

Do you really want the government to start telling you what software you can and cannot build? You think the government should be able to outlaw Python and require you to do your work in Java, and outlaw JSON and require your API's to return XML? Because that's the type of interference you're talking about here.
by venturecruelty | 2025-12-01 01:12:13+00:00
>That pretty much sums it up. And the answer is: too bad. Deal with it, like the rest of us.

I am dealing with it, thanks, by fighting against it.

>I have a big problem with companies not sending me a check for a million dollars. But companies don't obey my whims. And I'm not going to complain that the government should do something about it, because that would be silly and immature.

Because as we all know, forcing you to use the abusive copyright laundering slop machine is exactly morally equivalent to not getting arbitrary cheques in the mail.

>In reality, companies try their best to build products that make money, and they compete with each other to do so.

In the Atlas Shrugged cinematic universe, maybe. Now, companies try to extract as much as they can by doing as little as possible. Who was Google competing with for their AI summmary, when it's so laughably bad, and the only people who want it are the people whose paycheques depend on it, or people who want engagement on LinkedIn?

>The free market exists because it does a better job than any other system at giving consumers what they want.

Nobody wants this!

>Because if you start down that path, pretty soon they're going to be interfering with the things you like.

I mean, they're doing that, too, and people like you look down your nose and tell me to take that abuse as well. So no, I'm not going to sit idly by and watch these parasites ruin what shreds of humanity I have left.
by Brian_K_White | 2025-12-01 01:12:24+00:00
But a writer may use the construct for style reasons. ex: "Vaster than empires, and more slow."

I think it's just not actually technically wrong in the first place, merely uncommon because it's a little awkward.

What makes it ok is it can be used deliberately to build imagery or to intentionally trigger thought because you have to stop to parse it.

What makes it "wrong" is exactly that having to stop to parse it. It's obfuscated meaning to say "increase the decrease". A decrease is a property that may be increased, so it's legal, but you have to stop to puzzle it out rather than know what it means instantly without thought.
by BLKNSLVR | 2025-12-01 01:12:57+00:00
Slight tangent: My wife's place of work has recently instituted a minimum 16-character password rule with the standard complexity requirements. They also encourage the use of password management software, as well as enforcing password changes every 6 months.

Where I see a flaw in this is the initial login.

If you're not already on your computer to access the password manager, how do you retrieve the essentially non-memorisable password to unlock your computer in order to get to the password manager to retrieve the essentially non-memorisable password?

The password to unlock the computer, therefore, must be able to be remembered. This pretty much excludes 16-character auto-generated passwords for anyone but a savant.

Am I missing something obvious here? (MFA using an authenticator app on the phone? Is that something that Windows / Mac/ Linux supports?)
by add-sub-mul-div | 2025-12-01 01:13:45+00:00
I've also retired early after saving and keeping a simple lifestyle. I don't understand why more people in tech don't do it. My mental and physical health are both better than the last time I was working.

Sometimes I'm tempted to get another job on the basis that it would be all disposable income. But then I think, what could I buy that would be more valuable than the 40 hours a week I'd be giving up? Maybe I'm just lucky that I have no interest in fancy things.
by ryanmcbride | 2025-12-01 01:13:46+00:00
Nah the owner will get a filtered truth from the middle managers that present them with information that everything's going great with AI, and the lost money is actually because of those greedy low level employees drinking up all the profit by working from home! The entire software industry has a massive Truth-To-Power problem that just keeps getting worse. I'd say the software industry in this day and age feels like Lord of the Flies but honestly feels too kind.
by rhinoceraptor | 2025-12-01 01:13:56+00:00
I personally have been itching for a NixOS-style BSD or Illumos derivative. My main machine is currently NixOS with root on ZFS, but I would love to be running something where ZFS isn't an afterthought, I could use dtrace, the kernel has first class OS virtualization, and so on. I think that the declarative approach to package management is obviously the future, but I wish there were a non-Linux option.
by rufus_foreman | 2025-12-01 01:14:03+00:00
Oh fuck. The assholes that thought Windows was perfectly acceptable until late 2025 are flocking to Linux.

Maybe get a Macbook?

Do you even know how bad Linux is? The video drivers don't work, bluetooth doesn't work, your laptop won't wake up from sleep, it's horrible. Go the fuck away. Linux is horrible.

Windows is fucking awesome. Mac is OK. Linux sucks. Don't waste your time.
by computably | 2025-12-01 01:14:28+00:00
> I mean if someone says “be kind to animals get a dog” you already know they don’t quite know what “being kind to animals” is. If they say “all humans end up where I am” (even just in terms of age) you already know they don’t quite know what “all humans” is.

Oh come on. We can quibble about the quality of the post and OP's character, but you're just blatantly misrepresenting their words. They did not say "get a dog," they said there are "few joys like having a dog." More importantly, it is incredibly obvious that when they say "all humans end up where I am," they're referring to facing death, not the specifics of their age, background, or present circumstances.
by reddit_clone | 2025-12-01 01:14:43+00:00
I have used Raku (Perl 6) with good results.

Common Lisp. Using 'iterate' package almost feels like cheating.

I have done half a year in (noob level) Haskell long ago. But can't find the code any more.

Most mind blowing thing for me was looking at someone's solutions in APL!
by cmcaleer | 2025-12-01 01:15:12+00:00
I shitposted about the ‘year of the Linux desktop’ for most of my teenage and adult life only to dual boot Linux for a bit as an experiment a year or two ago and have ~never booted in to Windows for anything other than games with anticheat since.

It’s more a case of Windows getting significantly worse and feeling like malware than Linux desktop being THAT much better than the last time I tried it, but between proton and maybe 95%+ of my work being in a browser window or browser window (Electron) these days, I basically never run in to compatibility issues and never have Candy Crush advertised to me.
by vatican_banker | 2025-12-01 01:15:19+00:00
DSPy implemented program of thought since a long time ago and it works great to solve user queries with code.

What is great is that you can define DSPy signature of the type “question, data -> answer” where “data” is a pandas dataframe, then DSPy prompts the llm to answer the question using the data and python code. Extremely powerful.
by Puzzled_Cheetah | 2025-12-01 01:17:01+00:00
> To prevent auto theft, all cars will be tracked and all parts must match serial numbers.

Well, I suppose that's one way to end third party repairs. Just refuse to turn on if the chip in the new part doesn't match up with a code in the ECU. Like printer ink, but for every major component.

'Error, cannot start engine: Authorised mirror not found. Please visit BMW for an authentic replacement. Driving with non-authentic mirrors may harm user safety.'
by anonymouskimmer | 2025-12-01 01:17:08+00:00
> The free market exists because it does a better job than any other system at giving consumers what they want.

Bull. Free markets are subject to a lot of pressures, both from the consumers, but also from the corporate ownership and supply chains. The average consumer cannot afford a bespoke alternative for everything they want, or need, so are subject to a market. Within the constraints of that market it is, indeed, best for them if they are free to choose what they want.

But from personal experience I know damn sure that what I really really want is often not available, so I'm left signalling with my money that a barely tolerable alternative is acceptable. And then, over a long enough period of time, I don't even get that barely tolerable alternative anymore as the company has phased it out. Free markets, in an age of mass production and lower margins, universally mean that a fraction of the market will be unable to buy what they want, and the alternatives available may mean they have to go without entirely. Because we have lost the ability to make it ourselves (assuming we ever had that ability).
by wolfgang42 | 2025-12-01 01:18:59+00:00
I’m confused about for this assertion, for two reasons:

- My understanding is that OCSP stapling stops leaks, because the browser can get OCSP data from the server instead of needing to fetch it separately.

- Last I heard, Firefox was in the process of removing OCSP responder checks (precisely for privacy reasons) in favor of CRLite-based revocation checks—are you sure they didn’t remove whatever setting you’re referring to from the UI because it’s no longer relevant?
by K0balt | 2025-12-01 01:19:04+00:00
All of that said, if we don’t provide a solid foundational high school education that covers basic science, math through fundamental calculus, a decent overview of world history, literature, art and culture, then we are not only wasting the precious time of our children, we are also doomed to be an ignorant and brutish people.

As it is, high school education in the USA today only assures what used to be the 8th grade level when I was in school.

It’s ridiculous that we have bacslid to the point where we waste 4 years catering to the lowest common denominator.

Solid vocational education should be offered as an alternative to high school from grade 9 forward. We need to understand that for every professor there’s someone that will never be able to manage anything beyond rudimentary tasks. For every banker there will be someone who drives a broom.

We do those that are less gifted a disservice by failing to give them useful tools for their future too.
by itishappy | 2025-12-01 01:20:20+00:00
If my understanding is correct (and I'd love to be corrected if not!), it can be used to generate super accurate differential heightmaps. It won't tell you exactly how high a peak is, for example, but it can tell you that it's dropped a few millimeters since the last time you measured.

https://en.wikipedia.org/wiki/Interferometric_synthetic-aper...
by ls612 | 2025-12-01 01:20:39+00:00
While I think there is an AI bubble I also think that when every big AI provider is claiming on earnings calls that they can't sell enough tokens to meet demand that the music will keep going at least a little longer. Combine that with positive unit economics for inference and there is at least a plausible business case that AI labs can make money soon. Anthropic claims as soon as the end of 2026 we'll see about that.
by xpe | 2025-12-01 01:20:43+00:00
I personally appreciated your comment. I'd guess that enough people flagged it to get moderator attention, but I'm guessing it was a small number. If so, I think this reflects a strong negative preference of a few.

One guess would be that the word 'torture' triggers people, even when it has nothing to do with error-prone medieval-style confession optimization.

But anyway, I think your take-away makes sense. Different venues offer different kinds of community and support (or brow-beating). Hopefully you find other places for that -- or, if this is a big enough problem for you and you have constructive ideas, write 'em up.
by kiwijamo | 2025-12-01 01:20:50+00:00
Genuine questions:

Do you ever apply kernel patches? I also run FreeBSD and reboot for any kernel patches and never can get my uptimes to 1,000 days before that.

Do you just run versions that don't get security patches? Security support EOL dates generally means I need to upgrade before 1,000 days too. For example the current stable release gets security patches only from June 10, 2025 to June 30, 2026 giving just over 360 days of active support.

I get FreeBSD is stable and get days of uptime, and I could easily do the same if I didn't bother upgrading etc, it's just that I can't see how that's done without putting your machine at risk. Perhaps only for airgapped machines?
by dagmx | 2025-12-01 01:20:52+00:00
The articles base premise is tenuous at best. It assumes that “unknown” has a best case attribution to Linux with no backing for that assertion.

Unknown could just as easily be windows, chromeOS or macOS or just automation for that matter. Why would only Linux report as unknown for only a portion of users?

Given that the Unknown line is directly mirroring the ChromeOS line, it’s much more likely that it’s misattribution from ChromeOS. (And yes ChromeOS is Linux under the hood but the distinction matters because of the implication of the article)

What is the methodology of the statistics collection? Is it just user agent strings?
by defrost | 2025-12-01 01:20:59+00:00
* I recall when the first of my primary school friends had a baby ... some years after we all left primary school.

* I recall when Cheryl had her first baby while at University. I also recall when she had her second.

~ https://en.wikipedia.org/wiki/Cheryl_Praeger

Maybe work on making more insightful and considered comments: https://news.ycombinator.com/threads?id=brcmthrowaway
by CamperBob2 | 2025-12-01 01:21:24+00:00
You don't do it that way. As the other poster suggests, you mandate that UI changes can always be rolled back by the user.

It should be illegal for you to change a product you sold me in a way that degrades functionality or impairs usability, without offering me the option of either a full refund or a software rollback.

If that causes pain and grief for server-based products, oh, well. Bummer. They'll get by somehow.
by girvo | 2025-12-01 01:21:27+00:00
> There's no way to exhaustively detect with a linter that you used findOne and checked the result for null and threw a NotFoundError

Yes there is? Though this is usually better served with a type checker, it’s still totally feasible with a linter too if that’s your bag

> because avoiding it is just one line in CLAUDE.md.

Except no, it isn’t, because these tools still ignore that line sometimes so I still have to check for it myself.
by Waterluvian | 2025-12-01 01:21:33+00:00
It feels like a <game theory> problem (Tragedy of the commons? First mover? I dunno them well enough). It’s probably a mistake for any one company to not pick GitHub, because it’s likely a higher friction distraction from what the actual goals are of the company. But enough companies paying that price ultimately would benefit everyone by fuelling stronger competition.
by Havoc | 2025-12-01 01:22:19+00:00
> Maybe we're thinking in different scales, but doesn't almost all NAS' have more than 1TB of content?

Depends on what you’re storing. With fast gigabit internet there just isn’t much of a need to store ahem Linux isos locally anymore as anything can be procured in a couple mins. Most people just aren’t producing that much original data on their own either (exceptions exist ofc - people in video making space etc)

Plus it’s not that expensive anymore. I’ve got around 6TB of 100% mirrored flash without even trying (was aiming for speed and redundancy). Most of it used enterprise ones. Think I paid around 50 a TB.

Re proxmox - some of their multi node orchestration stuff is famous for chewing up drives at wild rates for some people. People losing a 1% of ssd life every couple days. Hasn’t affected me so haven’t looked into details
by mshroyer | 2025-12-01 01:22:37+00:00
Sure, but ZFS is much better integrated into FreeBSD. It supports ZFS on root with boot environments out of the box.

And when running a Samba server, it's helpful that FreeBSD supports NFSv4 ACLs when sitting between ZFS and SMB clients; on Linux, Samba has to hack around the lack of NFSv4 ACL support by stashing them in xattrs.

You can arguably get even better ZFS and SMB integration with an Illumos distribution, but for me FreeBSD hits the sweet spot between being nice to use and having the programs I need in its package library.
by electroly | 2025-12-01 01:22:48+00:00
It's at https://github.com/brianluft/arcadia and the actual MCP server is at https://github.com/brianluft/arcadia/tree/main/server/src. If not suitable as-is, you can probably get Claude to repackage or tweak the code for your needs. The project has a .NET component for the SQL tool that isn't used at all for bash execution; only the Node.js server is needed for the bash tool.
by notepad0x90 | 2025-12-01 01:23:08+00:00
I was playing with some asm code and generating a.out with nasm, got stuck on why it wouldn't load..turns out linux stopped supporting it. When they say "no one uses it" they mean packages and stuff, they don't care about private code you have lying around and other use cases. With a widely deployed platform like windows, they can't assume things like that. There are certainly very valid business application that go back decades. There are literally systems that have 20+ years up time out there.