MurphyA/hacker-news huggingface dataset:
by mgilroy | 2025-12-23 00:30:54+00:00
The issue with the software team using an FPGA is that software developers generally aren't very good at doing things in parallel. They generally do a poor job in implementing hardware. I previously taught undergraduates VHDL, the software students generally struggles with the dealing with things running in parallel.

VHDL and Verilog are used because they are excellent languages to describe hardware. The tools don't really hold anyone back. Lack of training or understanding might.

Consistently the issue with FPGA development for many years was that by the time you could get your hands on the latest devices, general purpose CPUs were good enough. The reality is that if you are going to build a custom piece of hardware then you are going to have to write the driver's and code yourself. It's achievable, however, it requires more skill than pure software programming.

Again, thanks to low power an slow cost arm processors a class of problems previously handled by FPGAs have been picked up by cheap but fast processors.

The reality is that for major markets custom hardware tends to win as you can make it smaller, faster and cheaper. The probability is someone will have built and tested it on an FPGA first.
by dangus | 2025-12-23 00:32:27+00:00
I think it’s somewhat disingenuous to ignore the trend direction.

The Netherlands has a longer history of monarchy under their current government (present monarchy founded 1813) than North Korea (current government established 1948). Does that mean you’d rather live in North Korea than the Netherlands?

The plain and obvious fact remains that Hong Kongers would have more political liberties today if the UK retained control of the territory, regardless of the complete colonial insanity of the original arrangement.

Can you name one present existing British overseas territory that has less of a right to criticize the government than Hong Kong? There are still a bunch of them to choose from from.
by Retric | 2025-12-23 00:33:40+00:00
In terms of pure operating costs ignoring everything else it can look good vs other sources that include all costs.

However, ‘Paid off nuclear’ in terms of construction costs still needs to worry about decommissioning, and their maintenance costs keep increasing every year.

Several power plants have looked at going offline for potentially years and spending billions at around year 40 to get to year ~60 as not being worth the investment. That’s the issue with projecting those long lifespans, the buildings/containment structure/cooling tower may be fine but that doesn’t mean the pipes, pumps, turbines, and control systems etc are still fine.
by ksaj | 2025-12-23 00:33:42+00:00
I think the same will happen over time with the AI voice over slop that people don't bother correcting. These include weird pronunciations, missing punctuation that leads to weirdly intonated run-on sentences, pronounced abbreviations like "ickbmm" instead of "icbm", or the opposite, "kay emm ess" instead of "kilometers" and so on.
by jeroenhd | 2025-12-23 00:33:50+00:00
The point of passkeys is that they're unexportable. Software implementations like Bitwarden/KeepassXC/etc. making them exportable go right against the point of the protocols.

I personally think the ability to export+import passkeys is a good thing from a backup point of view, but he's not wrong in suggesting that companies actually using the high security features of passkeys will eventually block software implementations like these.

This isn't about vendor lock-in. Nobody is asking for KeepassXC to remove passkey support. This is about security software implementing an API and not fulfilling the expectations that come with such an implementation. To quote the comment you linked:

> That's fine. Let determined people do that, but don't make it easy for a user to be tricked into handing over all of their credentials in clear text.
by bigyabai | 2025-12-23 00:34:24+00:00
You don't need a REAP-processed model to offload on a per-expert basis. All MoE models are inherently sparse, so you're only operating on a subset of activated layers when the prompt is being processed. It's more of a PCI bottleneck than a CPU one.

> And I don’t consider running a 1-bit superquant to be a valid thing here either.

I don't either. MXFP4 is scalar.
by AJ007 | 2025-12-23 00:34:53+00:00
There is probably nothing that is safe for a toddler to have displayed on a screen 6 inches from their face for an hour+ a day, either for their physical or mental development. Adults suffer as well, but at least by their own agency.

Also to point out, if a 10 year old walks in to the street and is hit by a car, their parent gets charged now (in some US jurisdictions.) The idea that the adult is not responsible for the child does not correspond with US law. Maybe it's different in Europe.

A secondary issue is tech companies on-boarding children to having public social media profiles (and their parents posting the child's entire lives on their own) -- which is completely asinine and appalling. That bridge was breached years ago and somehow no one complained loud enough. Certainly a mistake.
by FridgeSeal | 2025-12-23 00:35:04+00:00
> Maybe the OS just tracks and logs all of your apps' activity

The problem here, is that like so many social-media apps, the first thing the app will do is scrape as much as it possibly can from the device, lest it lose access later, at which point auditing it and restricting its permissions is already too late.

Give an inch, and they’ll take a mile. Better to make them justify every millimetre instead.
by JoshTriplett | 2025-12-23 00:36:03+00:00
> Someone has to deal with the utility rate hikes that tend to follow large new consumers

Commercial power is often charged differently than residential power, and there's also nothing that prevents charging disproportionately higher rates for e.g. 90th percentile power usage.

There's nothing inherent that means a data center in a locale should cause individual residential customers to pay more.
by woooooo | 2025-12-23 00:36:44+00:00
Wasn't meaning to ignore the trend, the PRC bears full responsibility for their actions. Just saying that complaints from the British in particular are a little rich.

Also they appear to be arresting more people for speech in total and per-capita than HK:

https://insider.iea.org.uk/p/30-people-arrested-daily-for-sp...

https://insider.iea.org.uk/p/30-people-arrested-daily-for-sp...
by godelski | 2025-12-23 00:36:56+00:00
> watching BDSM on their friend’s phones at 12.

Why does a 12 year old have a smartphone that's connected to the internet?

When I was 12 our computer was in the living room and shared by everyone. It could access porn but you had to wait till you were the only one in the home.

There's a pretty simple solution here if you don't already see it and I'm not sure why it isn't more acceptable. It solves all the problems you mention. You don't want kids being sucked into social media? Sucked into porn? Constantly staring at their screens?

Have you ever considered not giving your kids smartphones?

Or have you decided the benefits are worth the costs?

Let's be honest here, even with strong government intervention this is always a cat and mouse game. The play of "no smartphone" is going to be far stronger than anything the government can ever do. Why is this not an option?
by gregbot | 2025-12-23 00:37:07+00:00
> on the nuclear front, the administration has cut investment

Fascinating, I haven’t heard this from anywhere else is there something specific you are referring to?

Maybe this? https://www.ans.org/news/2025-05-05/article-7001/trumps-fy-2...

Its not clear what specific programs this $408 million cut would affect but frankly ARDP and Gen III+ reactor development are not needed. What is needed is large construction investment in existing approved designs like AP-1000 and BWRX-300 which is what the $80 billion pledge is for. “The full details of the $80 billion deal, including the precise allocation of financing and risk-sharing, have not been specified.” With no contract signed your skepticism is warranted.
https://www.ans.org/news/2025-05-05/article-7001/trumps-fy-2...
by iLoveOncall | 2025-12-23 00:37:18+00:00
The reality is those parents have tried nothing and are all out of ideas, or, in the vast majority of cases, simply don't care.

This is not at all about children by the way, because all millenials have grown while consuming porn and social media, and haven't turned into degenerates. It is 100% an excuse to spy on citizens, and nothing else.
by phyzome | 2025-12-23 00:37:19+00:00
Sure, around 33:00 here: https://www.youtube.com/watch?v=uB0gr7Fh6lY

The other video is https://www.youtube.com/watch?v=Pp9MwZkHiMQ but I don't recall which one goes more into it.

It's also possible I'm just remembering Flock-specific stuff from other sources, and the things he shows in these videos are more general issues with security camera companies (using Flock as the example).

It would be great if this stuff was (also?) published as blog posts so that it could be easily skimmed...
by j-pb | 2025-12-23 00:37:31+00:00
VHDL is ok, Verilog is a sin.

The issue isn't the languages, it's the horrible tooling around them. I'm not going to install a multi GB proprietary IDE that needs a GUI for everything and doesn't operate with any of my existing tools. An IDE that costs money, even though I already bought the hardware. Or requires an NDA. F** that.

I want to be able to do `cargo add risc-v` if I need a small cpu IP, and not sacrifice a goat.
by jbm | 2025-12-23 00:37:50+00:00
I'm surprised by this; I have it also and was running through OpenCode but I gave up and moved back to Claude Code. I was not able to get it to generate any useful code for me.

How did you manage to use it? I am wondering if maybe I was using it incorrectly, or needed to include different context to get something useful out of it.
by __MatrixMan__ | 2025-12-23 00:38:02+00:00
> Nobody in the opensource world is auditing code for you

That's still true of nix. Whether you should trust a package is on you. But nix solves everything else listed here.

> I want to use that package, at that version, on all supported platforms...

Nix derivations will fail to build if their contents rely on the FHS (https://refspecs.linuxfoundation.org/FHS_3.0/fhs/index.html), so if a package tries to blindly trust that `/bin/bash` is in fact a compatible version of what you think it is, it won't make it into the package set. So we can each package our a bash script, and instead of running on "bash" each will run on the precise version of bash that we packaged with it. This goes for everything though, compilers, linkers, interpreters, packages that you might otherwise have installed with pip or npm or cargo... nix demands a hash for it up front. It could still have been malicious the whole time, but it can't suddenly become malicious at a later date.

> ... Debian. Ubuntu. Redhat. MacOS. And so on. Try and do that using the system package manager and you're in a world of hurt.

If you're on NixOS, nix is your system package manager. If you're not, you can still install nix and use it on all of those platforms (not Windows, certain heroic folk are working on that, WSL works though)

> Oh, your system only has official packages for SDL2, not SDL3. Maybe move your entire computer to an unustable branch of ubuntu to fix it?"

I just installed SDL3, nix put it in `/nix/store/yla09kr0357x5khlm8ijkmfm8vvzzkxb-sdl3-3.2.26`. Then I installed SDL2, nix put it in `/nix/store/a5ybsxyliwbay8lxx4994xinr2jw079z-sdl2-compat-2.32.58` If I want one or the other at different times, nix will add or remove those from my path. I just have to tell nix which one I want...

$ nix shell nixpkgs#sdl2-compat
$ # now I have sdl2
$ exit
$ nix shell nixpkgs#sdl3
$ # now I have sdl3

> "Yeah, we don't have that python package in homebrew. Maybe you could add it and maintain it yourself?"

All of the major languages have some kind of foo2nix adapter package. When I want to use a python package that's not in nixpkgs, I use uv2nix and nix handles enforcing package sanity on them (i.e. maps uv.lock, a python thing, into flake.lock, a nix thing). I've been dabbling with typescript lately, so I'm using pnpm2nix to map typescript libraries in a similar way.

The learning curve is no joke, but if you climb it, only the hard problems will remain (deciding if the package is malicious in the first place).

Also, you'll have a new problem. You'll be forever cursed to watch people shoot themselves in the foot with inferior packaging, you'll know how to help them, but they'll turn you down with a variant of "that looks too unfamiliar, I'm going to stick with this thing that isn't working".
by jeroenhd | 2025-12-23 00:38:03+00:00
Apple is already shipping remote attestation in Safari in the form of Private Access Tokens (https://developer.apple.com/news/?id=huqjyh7k), though Cloudflare's trial for that has ended. Safari authenticates and attests itself against Apple, who hands out tokens to your browser, which in turn get used to bypass CAPTCHAs and other anti spam filters.

There's no direct remote attestation implementation for passkeys yet, but remote attestation for web browsers has been around for a few years now.
by YY34798347329 | 2025-12-23 00:38:21+00:00
This isn't a surprising sentiment when you consider America is a country that protects billionaire pedophiles who partied on Epstein Island while China puts corrupt billionaires in the slammer, or even executes them. America is a country that exists to keep him rich at the expense of the poor while China does the reverse - its the greatest threat to his continued class dominance over the proles.
by esperent | 2025-12-23 00:38:41+00:00
It's called the Shop Like a Local rule, from 2018.

Basically, Apple can stop selling developer accounts in Italy if they wish. They might run into issues on discrimination grounds, but it would probably be a long fight.

However, they can't prevent an Italian developer from purchasing a developer account from another EU country.

https://eur-lex.europa.eu/EN/legal-content/summary/geo-block...
by autoexec | 2025-12-23 00:39:01+00:00
> It sounds like Edison has a lot of risk mitigation of wildfires, and is dealing wit a lot of litigation.

They made their own bed. https://www.latimes.com/environment/story/2025-12-17/edison-...

Seems like it's unfair to ask the public to foot the bill for problems they caused in part because they wanted to stuff their pockets with cash instead of investing money in keeping their services up.
by cjs_ac | 2025-12-23 00:39:18+00:00
> A henge can be one of three related types of Neolithic earthwork. The essential characteristic of all three is that they feature a ring-shaped bank and ditch, with the ditch inside the bank. Because the internal ditches would have served defensive purposes poorly, henges are not considered to have been defensive constructions (cf. circular rampart).

https://en.wikipedia.org/wiki/Henge

Celestial alignment has nothing to do with hengeness.
by yoouareperfect | 2025-12-23 00:39:26+00:00
I’ve been working on a project built with Next.js. Like most projects that want to be discoverable by humans, it needed a blog.

I didn’t want to:

run a headless CMS (Strapi, Contentful, etc.)

build and maintain a full blog UI in Next.js

deal with SEO tradeoffs from putting content on a separate subdomain

So I went with a slightly unfashionable but practical solution: WordPress.

The goal was simple:

Main app at yoursite.ai (Next.js)

Blog at yoursite.ai/blog/...

WordPress doing what it’s good at: writing, previews, publishing

No SEO penalty from split domains

There are a lot of questions online about this setup, and surprisingly little concrete guidance. This is the approach that worked for me.
by e12e | 2025-12-23 00:39:31+00:00
> The lotusbail npm package presents itself as a WhatsApp Web API library - a fork of the legitimate @whiskeysockets/baileys package.

> The package has been available on npm for 6 months and is still live at the time of writing.

> (...) malware that steals your WhatsApp credentials, intercepts every message, harvests your contacts, installs a persistent backdoor, and encrypts everything before sending it to the threat actor's server.
by coldpie | 2025-12-23 00:40:36+00:00
It's fine for them to make suggestions for projects to improve their software. The problem is threatening clients with being banned because they don't agree with those suggestions. If a website is able to ban me because of the passkey client I'm using, then I'm just not going to use passkeys. It's too unreliable.

> personally think the ability to export+import passkeys is a good thing from a backup point of view

It's not a "good thing," it's absolutely critical. If I can't back up my credentials in a location that I trust, then it's not an acceptable login method. What happens if my PC goes down and I couldn't export my data? I just can't log in anywhere? KeePassXC lets me do that, but the spec authors think it's appropriate to ban me for using it because it lets me manage my own data. That's bonkers.
by jameslk | 2025-12-23 00:40:50+00:00
Malicious libraries will drive more code to be written by LLMs. Currently, malicious libraries seem to be typically trivial libraries. A WhatsApp API library is just on the edge of something that can be vibe coded, and avoiding getting pwned may be a good enough tipping point to embrace NIH syndrome more and more, which I think would be a net negative for F/OSS

The incentives are aligned with the AI models companies, which benefit from using more tokens to code something from scratch

Security issues will simply move to LLM related security holes
by shadowtree | 2025-12-23 00:41:25+00:00
It's a self-cleaning corporate rolodex.

It solved the long running problems of:
a) keeping tabs on people across company moves
b) a public, standardized CV

Its moat is the scale of its network. Very, very hard to replicate, massive cold start problem. It killed business cards!

Maybe some AI generated thingy can attack it, akin to Grokipedia vs Wikipedia, but man is that unproven. Zero incentive for users to switch.
by Agraillo | 2025-12-23 00:41:37+00:00
It was funny. On a more serious note, if one works in a sphere where expanding with AI makes "good enough" documents, then I have bad news for him - the sphere has too much redundancy in the first place (the same place that was used for training). So no new information is created in millions of documents made by humans, and this was noticed by the training pattern recognition. You cannot do the same with historical texts; unless we live in a simulation with predictable random generators, the events are random, and there are no rules like "If the king's name starts with a G, he will likely die in the first week of October."
by jeroenhd | 2025-12-23 00:41:42+00:00
Bitwarden works just fine for Amazon. Works on my phone too. Even when supplying passkeys over QR code+Bluetooth to another computer, Bitwarden's Android integration works flawlessly.

I do believe you need Android 14 for that, though, so if your phone has been abandoned by its manufacturer/your ROM of choice, it'll break.

If Bitwarden is bugged out on your computer/phone for whatever reason, there are also alternatives like 1Password.
by nsteel | 2025-12-23 00:42:37+00:00
Micron have announced EOL, yes they'll supply industry for a while but I don't think that's the place raspberry pi want to be.

Others seem to have delayed their announcements after realising they can still make a load of money off ddr4. Also not a great situation for a raspberry pi chip. https://www.trendforce.com/news/2025/09/02/news-samsung-sk-h...
by andsoitis | 2025-12-23 00:43:05+00:00
You're right that Wirth neither designed Ada nor is Ada in the direct Wirth line (Algol -> Pascal -> Modula 2 -> Oberon), but I think of Ada is very much a parallel branch (Algol -> Ada) and Wirth-influenced, but I would defer to your expertise.

Maybe the biggest difference between Ada and true Wirth languages is that it is not deliberately minimal.

Would you say that Ada sits close to Modula 2 philosophically, but industrial-scale?
by kjkjadksj | 2025-12-23 00:43:08+00:00
Flock cameras would be so easy to disable by motivated people. Dress in nondescript clothing, mask, sunglasses, and just spraypaint over the lenses. This is completely asymmetric warfare because it is trivial how long it would take for you to do this. You could hit dozens of cameras across an area overnight. Meanwhile, flock or the city, whoever maintains this stuff, needs to identify the vandalized cameras, flag them for repair, pay a technician to go out and presumably repair the unit outright. You pay cents and they are paying potentially thousands in labor and hardware costs.

And this would absolutely work at scale too. Streetlights are already being vandalized for their copper and most cities cannot afford to hire more technicians to even keep up with streetlight repair. I believe I’ve seen the backlog for streetlight repair in LA is over 10x what the current street services crew is capable of repairing in a year of constant work and growing by the day.

Municipalities and these technology companies cannot keep up against a motivated crew and can’t afford to scale either. Totally asymmetric.
by coder543 | 2025-12-23 00:43:34+00:00
Yes, you can offload random experts to the GPU, but it will still be activating experts that are on the CPU, completely tanking performance. It won't suddenly make things fast. One of these GPUs is not enough for this model.

You're better off prioritizing the offload of the KV cache and attention layers to the GPU than trying to offload a specific expert or two, but the performance loss I was talking about earlier still means you're not offloading enough for a 96GB GPU to make things how they need to be. You need multiple, or you need a Mac Studio.

If someone buys one of these $8000 GPUs to run GLM-4.7, they're going to be immensely disappointed. This is my point.
by nullc | 2025-12-23 00:43:49+00:00
Home energy usage is knocked down people that don't that don't do anything at home and where almost their energy use is externalized (at places that make the goods they use, or other places where they spend most of their their waking hours).

So it's a useful figure if you want to make a shocking headline. "Uses as much power as infinity of something that uses no power!"
by bhhaskin | 2025-12-23 00:44:02+00:00
I think you miss understood. If the OS becomes the arbiter of what can and cannot be accessed; it's a slippery slope to the OS becoming a walled garden that only approved apps and developers are allowed to operate. Of course that is a pretty large generalization, but we already see it with mobile devices and are starting to see it with windows and Mac OS.

I don't think we should be handing more power to OS makers and away from users. There has to be a middle ground between wall gardens and open systems. It would be much better for node & npm to come up with a solution than locking down access.
by Jarwain | 2025-12-23 00:44:14+00:00
Something that I keep thinking about is spec driven design.

If, for code, there is a parallel "state" document with the intent behind each line of code, each function

And in conjunction that state document is connected to a "higher layer of abstraction" document (recursively up as needed) to tie in higher layers of intent

Such a thing would make it easier to surface weird behavior imo, alongside general "spec driven design" perks. More human readable = more eyes, and potential for automated LLM analysis too.

I'm not sure it'd be _Perfect_, but I think it'd be loads better than what we've got now