MurphyA/hacker-news huggingface dataset:
by csomar | 2025-12-17 09:42:22+00:00
The parent was talking about the scenario where Europe is forced to create alternative (like China) and that it will lead to a better/wider selection for him (I assume he is in the EU) and my answer is that it will lead to only a European selection.

Interestingly, the only people having a wider selection are the ones outside of EU/US/China as they'll be free to pick up whatever they want.
by porridgeraisin | 2025-12-17 09:42:48+00:00
Really? "see oil take oil" was not done by previous admins at all? The entire US economy including your money depends on it, don't wash off all blame onto one politician.

[I am not american and don't care for US politics]

To be clear, not saying blame falls on _you_, but that this is a defining feature of america as a country - for the duration of our lifetimes at least. There is absolutely nothing surprising here and this was easily predictable years in advance.
by gpderetta | 2025-12-17 09:44:25+00:00
> whether that's a thing we care about today in 2025

Good question actually! ARM64 has a proper CAS it seems, but I think smaller ARMs still have only LL/SC and that's still relevant for embedded. I can't find a definitive answer for POWER, it is possible that is till only has LL/SC (I leave it to you whether POWER is still relevant, but certainly IBM cares that the standard support it, and it was still relevant during C++11 standardization). Can't find a definite answer for RISC-V: it seems that originally it only had LL/SC, but there are AMO extensions that add RISC-V.

I think most GPUs have native CAS instructions.

There are probably other embedded processors that are still relevant for C++, who knows what they support.
by jansan | 2025-12-17 09:46:52+00:00
I did not know that this was a hobby for adults and I find it interesting that the one kid's toy if the other person's collectible. When I was in primary school in the late 70s we used to buy lots of 1/72 scale soldiers on second hand markets and had buckets full of them. Great battles were fought, and we lost lots of them, because we often played in the garden and we apparently were really good at camouflaging those tiny soldiers. For us they were just consumables, but it seems that we had the same Airfix soldiers that collectors buy today.
by takluyver | 2025-12-17 09:47:28+00:00
> starting from near total market domination

That's not really accurate: Firefox peaked somewhere around 30% market share back when IE was dominant, and then Chrome took over the top spot within a few years of launching.

FWIW, I think there's just no good move for Mozilla. They're competing against 3 of the biggest companies in the world who can cross-subsidise browser development as a loss-leader, and can push their own browsers as the defaults on their respective platforms. The most obvious way to make money from a browser - harvesting user data - is largely unavailable to them.
by ofalkaed | 2025-12-17 09:49:58+00:00
Within the context of the four languages you listed and your example, I don't think Forth word vs function is merely terminology, it tells us a great deal of useful and important information. You clearly were able to grasp that but you worked under the assumption that I did not understand. There is nothing in Forth that requires you to make ambiguous constructs like that, you will come across them but like most every language (if not all), we sometimes trade readability for some other gain, or out of habit, ignorance, laziness, etc.
by sofixa | 2025-12-17 09:50:09+00:00
It's not that easy/clear. Venezuelan oil is really poor quality, needs lots of refining, and is thus only profitable only when the price per barrel is on the higher end.

So Qatar (which mostly exports natural gas anyways), Saudi Arabia, etc. can just dump oil at a cheaper price to make it unprofitable to extract and refine Venezuelan oil.

US decision makers salivating over war/oil/whatever def don't take that into account, but it really doesn't matter either.
by vidarh | 2025-12-17 09:50:15+00:00
I'm Norwegian, and the Norwegian stereotype of Finnish people used to be that they are dour and introvert. And we're by and large culturally a lot less outwardly cheerful to people we don't know than the Danes.

Sometimes Norwegian TV would show Finnish dramas while I was growing up in the '80s, and the standing joke was that the typical Finnish drama had two guys hiking through the forest, one of them saying something, and then half an hour more of hiking before the other would reply. I don't remember whether that was accurate (it's not as if I'd have kept watching), but I suspect not.
by almet | 2025-12-17 09:50:15+00:00
Freedom of the Press Foundation is kick-starting a bug bounty program for this holiday season.

Challenge the popular adage "containers don't contain", by sending Santa a naughty letter that bypasses Dangerzone protections (Libreoffice + gVisor + Podman)

If your letter breaks a containerization layer by capturing a flag, you get the associated bounty.

Have fun!
by ursAxZA | 2025-12-17 09:50:27+00:00
Yes — that’s one plausible explanation, and it still fits the same structural question.

Whether the delay came from optimistic expectations about imminent progress, political or economic incentives, or simple regulatory inertia, the core issue remains the same: the terminology was tolerated for a long period, and that tolerance allowed ambiguity to accumulate.

My point isn’t about defending Tesla or trusting regulators’ judgment — it’s about asking why the shift happened only after years of implicit acceptance, and what effects that delay had on public understanding and responsibility.
by Imustaskforhelp | 2025-12-17 09:50:42+00:00
Fascinating.

I am seeing that you are writing a matrix client UI basically which is nice but I am interested if its possible that you could write it in (agnostic?) UI way if if it makes sense, where I can swap out any other protocol instead of matrix too

I was just interested in something similar once and there are other protocols like session,simplex,signal etc. too which I feel like can definitely benefit from an unified UI perhaps

Personally I am always interested if any messaging app should just create a cli application/api and have someone else create the UI since I feel like the UI bugs and similar can definitely be fixed if its not in house.

I am curious of your opinion regarding it but the project looks cool!

Personally although I can enjoy telegram's UI, nothing beats cinny's UI ever.

Cinny has the best UI of any messaging app I have ever seen personally, there are only very few things I wish to change in that, which can be changed via userstyle and even recent modern element feels good to me personally but cinny is brilliant overall

So I am interested to hear what your thoughts are on cinny too (cinny.in)
by 1718627440 | 2025-12-17 09:50:43+00:00
> What if the function is implemented in a shared library

If it is in the public API/ABI of a shared library, than the calling semantics including lifetime and ownership rules are part of the public interface, so of course the compiler can't just change it. You the programmer are responsible for drawing abstraction boundaries and choosing the interface.

> It works the exact same way in C++, though.

Only if write C in C++. The issue here are references, of which the compiler figures out whether this should work like a value or like a pointer. This doesn't exist in C, there the programmer needs to make up its mind and choose. The whole type conversion by making a copy issue also doesn't exist there, because either the type matches or the compiler throws an error.
by moebrowne | 2025-12-17 09:50:47+00:00
> Cloudflare also has statistics on HTTP vs HTTPS [1], but that's going to be biased in favour of HTTPS since CF handles that automatically for sites they host.

Chrome provides graphs of HTTPS adoption, the overwhelming majority of browsing is via HTTPS now: https://transparencyreport.google.com/https/overview?hl=en_G...

I'd bet the reason that Linux usage is lower is developers running local servers
by ErroneousBosh | 2025-12-17 09:50:53+00:00
> But I don't think that represents a lot of what most of us are tasked with

Give me a list of all the libraries you work with that don't have some sort of "okay but not that bit" rule in the business logic, or "all of those function are f(src, dst) but the one you use most is f(dst,src) and we can't change it now".

I bet it's a very short list.

Really we need to scrap every piece of software ever written and start again from scratch with all these weirdities written down so we don't do it again, but we never will.
by b00ty4breakfast | 2025-12-17 09:51:22+00:00
I switched to Waterfox about a year ago because my poor old linux box just couldn't keep up with the latest Firefox version (especially the Snap package! I literally unusable for me) and I am very thankful that they aren't going to be including any of the LLM crud that Mozilla has been talking up.

I get the utility that this stuff can have for certain types of activities but on top of not having great hardware to run the dang things, I just don't find any of the proposed use-cases that compelling for me personally.

It's just nice that the totalizing self-insistence of AI tech hasn't gobbled up every corner of the tech space, even if those crevices and niches are getting smaller by the day.
by farseer | 2025-12-17 09:52:22+00:00
The EU is fine with it, because there are no principles in geo-politics. All their hue and cry about Ukraine is also because of their own security, not any virtue. Laughably it was the EU that went along with US plans to deorbit Ukraine from Russia's influence.

The only way for Venezuela to survive is to play dirty and be cunning/resourceful just like their Ukrainian counterparts fighting for their life.
by xnikitin | 2025-12-17 09:53:02+00:00
Minor corrections:

1. It's "Polivanov", not "Polianov".

2. It's "Синдзюку", not "Синдзуку".

Another example of JP→EN→RU is Nintendo's character Yoshi: By Polivanov, it should have become "Ёси" but since it came to RU via EN, it is written as "Йоши".
by moebrowne | 2025-12-17 09:54:15+00:00
Firefox has supported HTTPS DNS since v129 (August 6, 2024)

> HTTPS DNS records can now be resolved with the operating system's DNS resolver on specific platforms (Windows 11, Linux, Android 10+). Previously this required DNS over HTTPS to be enabled.

https://www.firefox.com/en-US/firefox/129.0/releasenotes/
Show HN: Mephisto – A RAM-only, ad-free disposable email PWA built with React
by benmxrt | 2025-12-17 09:54:48+00:00
Hi HN,

I built Mephisto because I was frustrated with the current state of disposable email services—most are riddled with intrusive ads, trackers, and captchas.

I wanted a tool that felt like a proper developer utility rather than a spam farm.

The stack is React, Vite, and Tailwind. Key architectural decisions:

1. Volatile Memory: The backend writes nothing to disk. Once a session terminates, the data is irretrievable. 2. Client-Side Entropy: The password generator runs locally in the browser; keys are never sent to the server. 3. PWA: It's installable and designed for low latency using WebSockets for incoming mail (no polling). 4. Mobile Handoff: You can transfer an active session to mobile via an encrypted QR code.

It is completely free and open for public use. I'd love to hear your feedback on the implementation and UI.
by lou1306 | 2025-12-17 09:56:21+00:00
I am not that surprised, to be honest. Basically every C/C++ static analyzer out there does (among other things) some amount of additional "custom" type checking to catch operations that are legal up to the standard, but may cause issues at runtime. Of course in Python you have gradual typing which adds to the complexity, but truly well-formalised type systems are not that common in the industry.
by oersted | 2025-12-17 09:57:48+00:00
While I like the sentiment, we have to be somewhat pragmatic. The sanctions on Russia have had a deep impact on the EU economy, mainly the energy crisis and other connected systemic consequences. Germany and much of central and eastern EU became highly dependent on Russian natural gas over the last 20 years, and higher energy prices in general have been quite harmful to the already precarious industrial and agricultural sectors (high-tech farming as in NL, while quite profitable, is very energy intensive and sensitive to tightening margins).

Most of EU (and UK) is on (or near) recession right now, except for some southern EU countries which are doing surprisingly well, although relative to a long period of hardship after the 2008 crisis. It's not an acute recession, but there's no clear way out of this stagnation on the horizon, and the people are really starting to feel the squeeze.

Of course, the root cause of this is much deeper, the Russia situation was just the spark. EU industry has been complacent for decades, believing that while less competitive on costs and scale we still had the technological edge, which ironically led to severe underinvestment in R&D. And giving up on nuclear is backfiring badly too.

I do think the (shrinking) majority still believes that the (limited) actions against Russia were worthwhile, since they are not threatening sovereignty in general, they are threatening EU's territorial integrity at our doorstep. It is unacceptable, and while it is a heavy price, not retaliating would have much more catastrophic consequences.

But cutting off trade with US over Venezuela? Forget about it, EU's dependency on US is orders of magnitude higher than it was with Russia, it would be absolutely deadly to the EU economy.
by cpach | 2025-12-17 09:58:38+00:00
So, you will need a CA that are trusted by all parties involved, and one that is not tied to the Web PKI ecosystem.

One option is to build your own PKI with it’s own root certificate, and then tell all involved parties to import that into their root cert stores.

That’s a lot of work though. If you want to, I think you can buy “private-PKI-as-a-service” from companies like Digicert and Sectigo. And probably from AWS/Google/Azure too.

I don’t know the specifics of your environment but it might also be possible to do encryption and signature verification above the transport layer. I.e. sign (and possibly encrypt) the payload itself. Then you might not need mTLS for the connection itself.
by frm88 | 2025-12-17 09:58:45+00:00
I understand artists etc. Talking about AI in a negative sense, because they don’t really get it completely, or just it’s against their self interest which means they find bad arguments to support their own interest subconsciously

Why do you think, depicting artists with a negative sense re. AI as dumb or self-interested and following up with dismissing their arguments as "bad" will foster an open discussion?

The fact that you are quoting Gates and not anybody else makes it clear why you don't understand the techies' with anti AI arguments. This is why it matters: LLMs are a tool, currently provided for use by the general population, but it's still a tool owned by massive corporations which means it has to produce revenue and profit at some point. How would you feel, if in every AI art piece you make, a Coca-Cola bottle is auto-integrated and you cannot delete it? Pay the premium service and you get the same bottle, but a lot smaller. AI is first and foremost a software product. Product means marketing. A product, that would not exist, had the owning companies not used human-made art without either consent or compensation to make a profit for themselves. You do not enter in this equation, because you are just a potential consumer. The complete dehumanisation of all of us is why it matters.
by el_pollo_diablo | 2025-12-17 10:01:04+00:00
Capturing invariants in the type system is a two-edged sword.

At one end of the spectrum, the weakest type systems limit the ability of an IDE to do basic maintenance tasks (e.g. refactoring).

At the other end of the spectrum, dependent type and especially sigma types capture arbitrary properties that can be expressed in the logic. But then constructing values in such types requires providing proofs of these properties, and the code and proofs are inextricably mixed in an unmaintainable mess. This does not scale well: you cannot easily add a new proof on top of existing self-sufficient code without temporarily breaking it.

Like other engineering domains, proof engineering has tradeoffs that require expertise to navigate.
by wiseowise | 2025-12-17 10:02:01+00:00
Jesus, how long will we need this shite? Can't someone from MS fix this already? Or is it possible for Astral to implement fully fledged Python extension so you don't have to use Microsoft crap that includes proprietary pylance?

``` It's recommended to disable the language server from the Python extension to avoid running two Python language servers by adding the following setting to your settings.json:

{ "python.languageServer": "None" } ```
by vidarh | 2025-12-17 10:02:09+00:00
It increasingly is. E.g. if you use Claude Code, you'll notice it "likes" to produce todo lists that rendered specially via the TodoWrite tool that's built in.

But it's also a balance of avoiding being over-prescriptive in tools that needs to support very different workflows, and it's easy to add more specific checks via plugins.

We're bound to see more packaged up workflows over time, but the tooling here is still in very early stages.
by userbinator | 2025-12-17 10:03:08+00:00
I think it's a "mental autocorrect"; there's far more names ending in -stein than -stain. You may amuse yourself by clicking on these links sequentially:

https://en.wikipedia.org/wiki/Berenstein

https://en.wikipedia.org/wiki/Bernstein

https://en.wikipedia.org/wiki/Berenstain
by tannhaeuser | 2025-12-17 10:04:28+00:00
You can use entities to create static sites in advance, or by including support in the browser. sgmljs can do both, and simply using shared headers/footers for static site generation from markdown and other SGML partials is explained in [1].

[1]: https://sgmljs.sgml.net/docs/producing-html-tutorial/produci...
by jonrosner | 2025-12-17 10:06:26+00:00
after testing it for a little I am pretty disappointed. While I do get 90 token per second out of it from my M4 Pro which is more than enough for a real world use case, the quality is just not there. I gave it a codebase that it should analyze and answer me some questions and it started hallucinating right away. No replacement for a "real" coding agent - maybe for other agentic work like sorting emails though.
by phony-account | 2025-12-17 10:06:45+00:00
> Not sure that "crisp" is a word I'd use to describe any part of the UK in autumn - probably more like "soggy" - but that applies to any season!

From the gently self-deprecating nature of your answer I’m guessing you’re British - and this is indeed the whole point of what I’m saying.

I genuinely and deeply miss this aspect of the English character which is totally lacking in Sweden - the websites called “shitLondon” or the insistence that English food is inferior to Italian or French cuisine or this repeated idea that it always rains (it doesn’t). That self-mockery simply doesn’t exist here, apart from when it’s some sort of humble-brag.
by nly | 2025-12-17 10:07:49+00:00
I don't understand why they wouldn't give a pre-release patch to the bug reporter (especially if it's someone like Google) for them to analyse before doing a final release.

If they were actively working with Project Zero instead of being seemingly silent, this wouldn't happen

This is where FOSS is still winning and will always win. Fixed happen in the open and bad fixes can be called out
by vogu66 | 2025-12-17 10:08:36+00:00
> I left them exposed for 30 minutes. This is a ridiculous amount of time to leave agar plates open for, since usually you’d only open them for a few seconds.

It's actually really common to let them exposed that long. Not when using them, but to make them: once the agar medium is melted and poured in the petri dishes, closing the lid during cooling causes condensation. Having the petri dish full of water when using it is more difficult and annoying, so it's better to let them cool down with the lid open (a space-efficient way to do so is to have a pyramid of plates where each lid rests on two plates and can support one)

Also, two contaminations out of 4 plates sounds really really bad, but then the blog doesn't say how the agar plates were prepared (how many plates without exposures were contaminated?) and how long they were incubated (sometimes something starts growing after a week or two, if you're culturing a fast-growing bacteria then it's mostly irrelevant).
by baq | 2025-12-17 10:09:03+00:00
> pre-existing language agnostic testing framework of 9000 tests

if there exists a language specific test harness, you can ask the LLMs to port it before porting the project itself.

if it doesn't, you can ask the LLM to build one first, for the original project, according to specs.

if there are no specs, you can ask the LLM to write the specs according to the available docs.

if there are no docs, you can ask the LLM to write them.

if all the above sounds ridiculous, I agree. it's also effective - go try it.

(if there is no source, you can attempt to decompile the binaries. this is hard, but LLMs can use ghidra, too. this is probably unreasonable and ineffective today, though.)
by wolfgangbabad | 2025-12-17 10:11:05+00:00
Yeah, there were about 5 or 10 videos about this "complexity" and unpredictability of 3rd parties and wheels involved that AI doesn't control and even forget - small context window - in like past few weeks. I am sure you have seen at least one of them ;)

But it's true. AI is still super narrow and dumb. Don't understand basic prompts even.

Look at the computer games now - they still don't look real despite almost 30 years since Half-life 1 started the revolution - I would claim. Damn, I think I ran it on 166 Mhz computer on some lowest details even.

Yes, it's just better and better but still looking super uncanny - at least to me. And it's been basically 30 years of constant improvements. Heck, Roomba is going bankrupt.

I am not saying things don't improve but the hype and AI bubble is insane and the reality doesn't match the expectation and predictions at all.
by solatic | 2025-12-17 10:11:11+00:00
> GitHub has still been managing the orchestration and monitoring of runs that you run on your own (or other cloud) hardware. They have just decided that they are no longer going to do this for free.

This argument is disingenuous. Companies pay GitHub per seat for access to PR functionality etc. What's next, charging per repository? Because of a decision to no longer provide the repositories "for free"? It's not for free, you're paying already, it's included in the per-seat pricing. If you charge per seat then sometimes there are users who hardly use it and sometimes there are users who use it a lot. The per-seat pricing model is supposed to make the service profitable overall regardless of the usage levels of individual users.
by exceptione | 2025-12-17 10:11:22+00:00
> they only care about profit

via their preferred business model: no competition, no market. Their best bet is the right. And since the right's agenda is objectively antithetical to the people's interest, they need to create smokescreens with bullshit. That is exactly what is being pushed here.

They are happy with "left" politicians as long as they buy into the false narratives, and as long as they are willing to play along with their monopolist playbooks.