MurphyA/hacker-news huggingface dataset:
by ggm | 2025-12-17 19:34:19+00:00
Any time a proposal to put PRIVATE keys into a portable object is raised, I hope to see discussion of the risks.

This is extremely risky for the integrity of the remote copy. If the key is compromised (USB stick lost or acquired by a bad faith actor) then the remote repository is untrustable.

I suppose this is no different to normal keyloss, and some people maintain their keys on removable devices and are exposed to this loss, if the device does not have additional protections.

If it's not a bare (private) key, I suppose then it comes down to the ssh-agent chain over that key, and the strength of your wrapper protection.
by BeFlatXIII | 2025-12-17 19:34:21+00:00
Keeping outdated models in the curriculum needs to be addressed on a case-by-case basis. Some of them are detrimental to the learning process and should be relegated to a history of science class—skip directly to current understanding; others are useful because they're developmentally appropriate for younger students. Someone who has a background in science pedagogy would be the proper person to make that decision for the Bohr model.
by crazygringo | 2025-12-17 19:34:28+00:00
On the one hand, that seems really important and I'm happy to know it exists.

On the other hand, I thought I had fully researched how passkeys work and literally never came across it.

So it kind of just continues to support my concern that passkeys are just too complicated to understand. If I'm at another device I need to log into, I would have just assumed I couldn't.

There needs to be a simple mental model for users. I'm not saying passkeys can't underlie that, but I think the UX still just hasn't been fully figured out yet.
by jakelazaroff | 2025-12-17 19:34:37+00:00
> You can't vote for the head of FCC.

FCC commissioners are appointed by the president (who is elected) and confirmed by senators (who are also elected). The chair is then chosen from those commissioners by the president (who, again, is elected).

Saying you can't vote for the head of the FCC is like saying that you can't vote for the Secretary of State. Sure, you don't cast a ballot for them directly, but you do wield influence by electing leaders to represent your interests.
by novok | 2025-12-17 19:34:38+00:00
In organizations, everyone's existence and position is politically supported by their internal peers around their level. Even google's & microsoft's current CEOs are supported by their group of co-executives and other key players. The fact that both have agreeable personalities is not a mistake! They both need to keep that balance to stay in power, and that means not destroying or disrupting your peer's current positions. Everything is effectively decided by informal committee.

Founders are special, because they are not beholden to this social support network to stay in power and founders have a mythos that socially supports their actions beyond their pure power position. The only others they are beholden too are their co-founders, and in some cases major investor groups. This gives them the ability to disregard this social balance because they are not dependent on it to stay on power. Their power source is external to the organization, while everyone else is internal to it.

This gives them a very special "do something" ability that nobody else has. It can lead to failures (zuck & occulus, snapchat spectacles) or successes (steve jobs, gemini AI), but either way, it allows them to actually "do something".
by skydhash | 2025-12-17 19:35:11+00:00
Define interesting.

I was helping a few people on getting started with an Android Development bootcamp and just being able to run the default example and get their bearing around the IDE was interesting to them. And I remember when I was first learning python. Just doing basic variable declaration and arithmetic was interesting. Same with learning C and being able to write tic-tac-toe.

I think a lot of harm is being done by making beginner have expectations that would befit people that have years of experience. Like you can learn docker in 2 months to someone that doesn't even know Linux exists or have never encountered the word POSIX.

Please do read the following article: https://www.norvig.com/21-days.html
Show HN: A once-daily word game with high- and low-pressure options
by jabronipony | 2025-12-17 19:35:17+00:00
I've been working on this for a while as an experiment and I'm now pretty happy with it. I've always written code, but I've always been a frankly incompetent frontend developer, and I've never really been able to talk myself into making a game; it was just too much trouble, even though I had ideas I wanted to try! Claude Code made it possible for the first time. I hope you like it. I'm still working on it!
by geocrasher | 2025-12-17 19:35:30+00:00
Yep, have been on constant "pager duty" for 2+ years, although I have more help now and I get paged 1-3 times a week instead of per night. Still, carry my lappy everywhere I go. Bought an ARM Windows laptop to get that 20hr battery life so I could worry less during my travels. You know, fancy things like going get food or going grocery shopping.
by qingcharles | 2025-12-17 19:35:43+00:00
Agree. If you look at the GPU in an iPhone 17 and compare to the desktop GPU I had in 1998, the difference is startling.

Voodoo in 1998 could render about 3m poly/sec on a Utah teapot, which was absurd number at the time, where I was coming from software renderers that were considered amazing at 100K/sec.

A19 Pro GPU could do about 5bn/sec at about 4X the resolution. And it fits in your pocket. And runs off a tiny battery. Which also powers the screen.

25 years from now a 5090 GPU will be laughably bad. I have no idea how fast we'll be able to hallucinate entire scenes, but my guess is that it'll be above 60fps.
Show HN: High-Performance Wavelet Matrix for Python, Implemented in Rust
by math-hiyoko | 2025-12-17 19:35:56+00:00
I built a Rust-powered Wavelet Matrix library for Python.

There were surprisingly few practical Wavelet Matrix implementations available for Python, so I implemented one with a focus on performance, usability, and typed APIs. It supports fast rank/select, top-k, quantile, range queries, and even dynamic updates.

Feedback welcome!
by sltkr | 2025-12-17 19:36:09+00:00
The problem with that formulation is that it denies the importance of the quantative aspect of the difference of opinion.

Of course there are views so extreme almost nobody would put up with them. But at the same time, being tolerant of differences of opinion is an important aspect of a free society and a functioning democracy. There is a word for people who cannot tolerate even the smallest difference of opinion: bigots.

But differences of opinion aren't binary; they lie on a spectrum. Similarly, bigotry lies on a spectrum. The person who doesn't brook the smallest disagreement is a greater bigot that only considers the most odious points of view beyond the pale.

For an extreme example, consider these cases: 1) A CEO is fired for arguing that the US government should round up all Jews and put them in extermination camps Nazi Germany style. 2) A CEO is fired for arguing that the local sales tax should be raised by 0.25 percentage points.

Are these cases exactly the same? You could argue in both cases the CEO gets fired for expressing sufficiently unorthodox political views, but that doesn't cut at the heart of the matter. Clearly it's necessary to quantify how extreme those views are. The extent to which the board that fires their CEO is bigoted depends on how unreasonable the CEO's views are; they are inversely proportional.

So now back to Eich. What was his sin? He donated $1000 to support Proposition 8, which restricted the legal definition of marriage to couples consisting of a man and a woman. This view was shared at the time by Barack Obama and a majority of California voters. It didn't strip gay couples of any formal rights: all the same rights could be obtained through a domestic partnership or an out-of-state marriage. It was just a nominal dispute about what the word “marriage” means.

Clearly this is a relatively unimportant issue; closer to a tax dispute than a genocide. You can disagree with Eich and the Californian public on this one, but being unable to tolerate their point of view doesn't make them monsters; it makes you a bigot.

The fact that Mozilla didn't allow their CEO to deviate from the majority point of view on this issue (again, a minority viewpoint in California at the time!) revealed Mozilla to be a heavily politicized, extremely bigoted corporation, that puts ideological conformity first.
by mothballed | 2025-12-17 19:36:28+00:00
I might catch some flack for calling Putin right wing, but he's definitely further right than any of the major killing events I can think of that have happened in modern times. He's certainly way further right than Hitler, who took control of the capital and the means of production and relegated capitalists to basically being token pieces who produced what and when the Nazis order largely at the price Nazis ordered on behalf of the "German people" in a totally "non-socialist" socialist party that just happened to practice the core tenants of socialism when it came to economics.
by zhyder | 2025-12-17 19:36:40+00:00
Have you tried them with providing a grounding resource, e.g. attaching a file to ChatGPT or NotebookLM? Yes need some human expert to create (or curate) that grounding resource in the first place, but LLMs handle the rest well: presenting info in different ways and paces, interacting with the learner like a tutor, etc.
by CGMthrowaway | 2025-12-17 19:37:01+00:00
Citation needed. My reference goes all the way back to 1937 and is specific to independent agencies.

> Almost fifty years of experience has accustomed lawyers and judges to accepting the independent regulatory commissions, in the metaphor, as a headless 'fourth branch' of government.

Source: 1984 Columbia Law article, referencing the 1937 Brownlow Committee Report. https://scholarship.law.columbia.edu/cgi/viewcontent.cgi?art...

Also Wikipedia: "The independent administrative agencies of the United States government may also be referred to as a ‘fourth branch’." https://en.wikipedia.org/wiki/Fourth_branch_of_government
by gpm | 2025-12-17 19:37:08+00:00
> in its dependency tree.

Ultimately every program depends on things beyond any compilers ability to verify, for example the calls to code not written in that language being correct, or even more fundamentally if you're writing some embedded program that literally has interfaces to foreign code at all the silicon (both that handles IO and that which does the computation) being correct.

The promise of rust isn't that it can make this fundamentally non-compiler-verifiable (i.e. unsafe) dependency go away, it's that you can wrap the dependency in abstractions that make it safe for users of the dependency if the dependency is written correctly.

In most domains rust don't necessitate writing new unsafe code, you rely on the existing unsafe code in your dependencies that is shared, battle tested, and reasonably scoped. This is all rust, or any programming langauge, can promise. The demand that the dependency tree has no unsafe isn't the same as the domain necessitating no unsafe, it's the impossible demand that the domain of writing the low level abstractions that every domain relies on doesn't need unsafe.
by cyberax | 2025-12-17 19:37:15+00:00
So every 4 years we throw out everyone who disagrees with the El Presidente. But yeah, this can be fixed by making the El Presidente be there for life, right?

Independent agencies exist to make policy shifts more gradual. That's their entire purpose.

Suppose, the next election cycle AOC gets elected, then puts in her cronies who require all stations to air 8 hours of pro-socialism ads every day. And there is nobody at the FCC to say "no".

The only entity that can sue is the DOJ, and it's also controlled by the president.
by iwontberude | 2025-12-17 19:37:19+00:00
Exactly my point, they have bespoke offerings but when they compete head to head for performance they get smoked. See more: their Tensor processor that they use in the beleaguered Pixel. They are in last place.

TPUs on the other hand are ASICs, we are more than familiar with the limited application, high performance and high barriers to entry associated with them. TPUs will be worthless as the AI bubble keeps deflating and excess capacity is everywhere.

The people who don't have a rudimentary understanding are the wall street boosters that treat it like the primary threat to Nvidia or a moat for Google (hint: it is neither).
by treyd | 2025-12-17 19:37:30+00:00
> Can you show me an example of Rust promising "if it compiles it works"? [...] and I've never heard anybody working on or in Rust claim that this is something you can just provide with absolute confidence.

I have heard it and I've stated it before. It's never stated in absolute confidence. As I said in another thread, if it was actually true, then Rust wouldn't need an integrated unit testing framework.

It's referring to the experience that Rust learners have, especially when writing relatively simple code, that's it tends to be hard to misuse libraries in a way that looks correct and compiles but actually fails at runtime. Rust cannot actually provide this guarantee, it's impossible in any language. However there are a lot of common simple tasks (where there's not much complex internal logic that could be subtly incorrect) where the interfaces provided by libraries they're depending on are designed to leverage the type system such that it's difficult to accidentally misuse them.

Like something like not initializing a HTTP client properly. The interfaces make it impossible to obtain an improperly initialized client instance. This is an especially distinct feeling if you're used to dynamic languages where you often have no assurances at all that you didn't typo a field name.
by array_key_first | 2025-12-17 19:37:32+00:00
Yes it's not violence, but it's not speech either. Donating money is performing material harm. That might be an unfortunate reality, but it's undeniable. It's a different thing from just saying something.

Also, you can absolutely be fired for just saying something and that's been the case forever. As a CEO, you are essentially marketing your company. Marketing it poorly and losing customers can, and will, get you fired - in every company, ever.
by TSiege | 2025-12-17 19:37:49+00:00
In 2020, five years ago, was essentially the exact same court as today, except KBJ replaced Breyer. The precedence in question dates to 1935 Humphrey's Executor v. United States where a conservative Supreme Court sought to cut back executive power of a liberal president. Now we have a conservative Supreme Court expanding executive power for a conservative president. If you think the Roberts court would have let Joe Biden have this much power well then I have a bridge and some student loans to sell you
by whalesalad | 2025-12-17 19:38:13+00:00
yes. ssh keys can be named whatever and you can have as many of them in your .ssh dir (or any dir) as you want. "id_ed25519.pub" is just a default/convention.

run "ssh -vvv" and you will see how ssh client decides to look thru that directory. it will try all of them if none are specified.
by xbmcuser | 2025-12-17 19:38:25+00:00
Google biggest advantage over time will be costs. They have their own hardware which they can and will optimise for their LLMS. And Google has experience of getting market share over time by giving better results, performance or space. ie gmail vs hotmail/yahoo. Chrome vs IE/Firefox. So don't discount them if the quality is better they will get ahead over time.
by yownie | 2025-12-17 19:38:46+00:00
I completely agree, the excuse for non-open hardware always used to be that the sim/cellular modem needed to be a blackbox/binary blob.

I'm wondering now with the prevelance of wifi calling/eSim/mobile data plans if that's even the case anymore.

we have several phones that have even BEEN open-source hw afaik, like Librem and pinephone.
by mlsu | 2025-12-17 19:38:49+00:00
No, I think you're misunderstanding. The only way to be sure that we are free of crime would be to record everything, inside and outside the home. It's fair because not only is your home being recorded 24/7; mine is too! Let's turn those ring cameras inward -- into the house! I mean the fact that I'm even contemplating touching your ring cameras, well that's a bit of a crime in and of itself, isn't it?
by HumanOstrich | 2025-12-17 19:38:51+00:00
I think the statistics definitively prove you wrong that wearing seatbelts doesn't matter. Same goes for there being non-zero risk with skipping all permission checks in Claude Code.

People aren't saying "I'm never using Claude Code again" just like they aren't saying "I'm never driving again". That's not what the post or most of the discussion is about.

Leave CC permission checks on or run in a sandbox. At a minimum, understand there are risks even if you haven't personally encountered them. See https://en.wikipedia.org/wiki/Faulty_generalization
by clowncubs | 2025-12-17 19:39:04+00:00
This is a bit longwinded, so apologies: I tried sculpting because I saw a video on YouTube where this guy, I think he goes by Craftyart, or Craftyarts - he had a speed video where he sculpted, cast, and painted a version of the Joker, but it was Willem DaFoe. It was incredible, and it just gave me an itch. I watched it and wanted to do that, to make that.

For me, I'd often have these ideas of things I wanted to try, or do, or challenge myself with, and then for some inexplicable reason I'd never do them. In this instance, I told myself to get off my ass and just give it a try. It may have helped that I was in therapy at the time and making efforts to address a lifetime of issues. It has lent a certain proactiveness to my being. For me, addressing my mental health is a driving factor in having made any of this possible.

Finding a seed of interest: if you mean directly with making a costume, I don't know. If you're not interested in costumes, I don't think it is something you can force. Overall though I think anything that causes that itch, that pull, maybe even a sense of yearning "to do" is enough to get you going on a path. I had a feeling when watching the video that reminded me of what I felt when I was a kid and I would see something and I'd get excited to do the same.

I don't know that any of this would have come together for me had I not been on a journey to improve my mental health, and making efforts to find something that connected with me. Something outside of a screen. But in the end, what I connected with was surprising. It looks like it makes sense in hindsight, but at that time, it felt like it came out of left field.

Hopefully there are some tips somewhere in this mess of words. If not, my apologies for wasting your time.
by skydhash | 2025-12-17 19:39:38+00:00
It can be both. Here is one example that provides the how instead of the what:

https://www.rfc-editor.org/rfc/rfc5321.html#section-3.1

A lot of declarative languages do a lot of hard work designing an imperative kernel that will support the declarative construct. It just takes skill to separate the two together, just like it takes skill to split code between states, interfaces and implementations.
by scottlamb | 2025-12-17 19:39:44+00:00
This. If it were a business-critical money fountain, I'd expect follow-the-sun SRE coverage. I don't think it is, so I can probably accept drinking my morning coffee without scrolling HN once in a while. There's only so much one can beat oneself up about a slow/incorrect response when the on-call is handled by what, just one person? maybe two people in the same time zone?

(Might be wise though to have PagerDuty configured to re-alert if the outage persists.)
by superkuh | 2025-12-17 19:39:51+00:00
The new CEO's big three statements are anything but focused on Firefox the browser and I agree with everything in this silly "Make Me CEO..." post like,

First: All this AI stuff should be opt-in not opt-out and purely local.

Second: There is no good monetization model and the current status quo is anything but entirely transparent given one doesn't bite the hand that feeds it.

Third: No one wants anything except the browser. Mozilla keeps trying to do anything except make Firefox and it keeps backfiring.

Attempts to characterize the above as hyperbolic probably stem from a mismatch in culture. Perhaps some are expecting to read corporate blandness while this was written by a human person who happens to use occasional swear words and suggestive metaphors. That doesn't invalidate the above sensible points in the rant.
by nickpp | 2025-12-17 19:39:58+00:00
> i guess you're on benefits?

Actually I've been lucky to practice what I preach all my life. Early in my career I realized that salaried employment is a rip-off: you pay through your nose for an illusion of safety and stability you don't want nor need. So I embraced risk and switched to contracting.

Having leftover income this way, I looked into investing. That's when I realized that being financially prudent, saving and investing was actually punished in the USA, taxwise, while borrowing and spending was encouraged. So I left the USA and returned to Eastern Europe.

Understanding that selling your time is much worse than selling a product drove me to entrepreneurship. Luck threw a little success my way and turned me financially independent.

Now I am semi-retired living from investments and small gigs and spending time with my family. My tax rate (income only, not consumption or VAT) is well under 20% on most of my income. I didn't do any effort to optimize it further, but I could if I must. I actually do not mind paying taxes, but I do respond to incentives and I am not afraid to relocate.

> If you manage to get rich enough to be able to optimize your taxation

Actually I did a little research and you don't need to be rich, you can do that with very little money. But then the gains for a few percent reduction aren't that great anyway so...

> you pay more taxes overall than people holding a few companies

I probably do, but I don't mind it. I think the rich are a net positive to our society because capitalism ensures they contribute to the society orders of magnitude more than they manage to keep. Also I lived under communism pre-1990 in a world without rich and I've seen how bad it is.
by estimator7292 | 2025-12-17 19:40:58+00:00
The setting exists, but may or may not actually be respected based on user reports.

Just like their auto-updates, you can turn the option off, but whether the feature is actually disabled is another question entirely.

I don't trust Mozilla enough. For one, not giving UI options and hiding all the settings in about:config where non-technical users can't access is a shitty thing to do. Second, I have zero trust that the settings actually do anything since many don't.

I don't believe for one moment that turning off their AI features actually 100% prevents that code from running.
by novok | 2025-12-17 19:41:13+00:00
CI is one of those twilight zone things that by the time you need something like buildkite, you're making a lot of money, otherwise why would you have such a complicated CI setup? To do it right, you basically need to start spending buildkite money either way in staffing or buying buildkite. There are probably under 50k organizations in the world that need something like buildkite.

It does have a big 'it shouldn't be this expensive' energy, but the market has shown it needs to be unfortunately. Nobody really survives in the CI world without going to complete neglect mode or goes expensive like buildkite I've found. It reminds me a lot of home automation / IoT. Lutron costs almost $100 a light switch for really silly economic reasons unfortunately even though the tech is basically unchanged since the 90s.

The interface is also geeky because the only people who are going to even realize you need to spend money on this are other software professionals.