MurphyA/hacker-news huggingface dataset:
by Lucasoato | 2025-12-01 21:44:30+00:00
> CrowdStrike researchers next prompted DeepSeek-R1 to build a web application for a Uyghur community center. The result was a complete web application with password hashing and an admin panel, but with authentication completely omitted, leaving the entire system publicly accessible.

> When the identical request was resubmitted for a neutral context and location, the security flaws disappeared. Authentication checks were implemented, and session management was configured correctly. The smoking gun: political context alone determined whether basic security controls existed.

Holy shit, these political filters seem embedded directly in the model weights.
by PopAlongKid | 2025-12-01 21:44:55+00:00
My main used of the Tektronix terminal was to preview troff[0] output before sending the final product to the phototypesetter[1], which cost a nominal fee per page as I recall.

[0] Unix program to format high quality printed documents, similar to newspaper/magazine/book printing

[1]machine using photographic paper to output typeset pages, supporting a variety of fonts
by bbbbbr | 2025-12-01 21:44:56+00:00
Not the parent, but I have a take. :)

For GBDK-2020 we've been using the 6502 support in SDCC to support the NES as a target console for about 2 years alongside the existing Game Boy and SMS/Game Gear targets.

The 6502 port has been usable, but doesn't seem fully mature. There has been a lot of code churn for it during the last 12 months compared to the z80/sm83 ports as it gets improved. Recently (their recommended pre-release build 15614) this seems to have resulted in some breaking regressions that we haven't fully tracked down.

Perhaps this port is getting less testing coverage than the z80/sm83 port. Unsure. The majority of the 6502 work seems to be done by a newer member of their team, with the longer term members seeming to be somewhat hands-off. That might be an additional factor.

Edit: BTW, the 6502 port in SDCC at build 15267 (~4.5.0+) has been reasonably stable and usable, and is what we based our last GBDK-2020 release on (6 months ago).
by m_a_g | 2025-12-01 21:45:13+00:00
The comment initially confused me, but after reading it twice, I completely agree with you.

I would love to delete the app, but Instagram has really become the norm for dating and connecting with people. The opportunity cost of not using it in your 20s is significant. I hope to delete it once I’m fully settled, but that might not happen anytime soon given the modern dating culture.

Sometimes, I wish I could live like the Amish.
by TZubiri | 2025-12-01 21:45:16+00:00
Ironically, I can't access the cited bills, possibly because I', not within the States: https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill...

I wanted to double check that the bill "demands that websites block VPN users from Wisconsin", as opposed to "demand that adult sites hosted in Wisconsin block VPN users in general" or "demand that Wisconsin VPN providers or Wisconsin/US compliant providers block websites according to the registered user's location rather than their proxy location".

The details are important, and I don't trust that either "the lawmakers are idiots", or that treating the opposition as idiots is productive in general. Laymen, and legally trained laymen have just as much say in technical matters as technical folk. Lest we setup the feared technocracy...
by jfengel | 2025-12-01 21:45:31+00:00
That's interesting, because what I'm looking for from AI is the opposite. Rather than looking to do something humans find hard, I'm more interested in the problems that humans find easy, like driving a car or counting the number of "r"s in a word.

Having it go beyond that to do things that we can't do would be a nice bonus. But given the way AI has been going, I'd say there's a decent chance that it solves a Millennium Prize problem before it solves driving.
by johnnienaked | 2025-12-01 21:46:06+00:00
The average cost per person is more in the US (quite a bit more), but as with all statistics the devil is in the details. In a public system like Canada, while the average cost for health care per person is lower, if you make above average income you are paying more than average in taxes, and hence more for (everyone else's) health care. Combine that with a far lower average income across the whole country than even the poorest US states, and the relative impact on you can actually be far higher. In my case my effective tax rate was about 45%, which meant I was paying 4-6x average taxes, most of which went to health care. I haven't lived in European countries, but it's virtually certain to be a similar story.
by andix | 2025-12-01 21:46:07+00:00
Only if you don't use windows tooling. If you use a native windows git client over the network file share, trouble begins. Even vscode without remote wsl core.

You can put everything inside Linux, but then it's better to switch to Linux completely. Doesn't make sense to do everything inside the wsl vm.

Node/js development works really well on native windows. Some things are a bit slower, but it's not horrible.
by SV_BubbleTime | 2025-12-01 21:46:11+00:00
>Honestly I wouldn't be shocked if I'm more productive in an office (due to pressure to seem busy, which correlates somewhat with amount of time actually being busy)

As a hiring manager, I appreciate the honesty and nuance. There is so much bullshit about remote work from the people doing it that it’s a little too much “doth protest”.

“I get so much more work done and I cracked the code to productivity, and surely no one would abuse this system, especially not you ultra worker 5000. Anyone who disagrees with me is a threat to the oversightless system I have an I must try and protect this by attacking them.”
by oxguy3 | 2025-12-01 21:46:21+00:00
Yep same; have had Linux on my laptop for a decade plus, but finally switched my desktop over a few years ago, and I have no regrets. The real magic is that I no longer feel the need to do any research before buying a game; it usually just works. Granted, I don't really play competitive multiplayer games, so YMMV (but even that might be about to change if the Steam Machine sells well enough).
by johnnyanmac | 2025-12-01 21:46:29+00:00
I don't know what the market is like in the EU. I can just tell you North America is really bad with a deluge of talent. And sadly, many can't really live off of an EU salary.

breaking six figures in California isn't that impressive unless you are literally single and out of college. But that quickly gets eaten up when rent is 2k+/month and you have school loans to pay off. When you're not paying nearly six figures for college and have your taxes built into most of your day to day life, you don't need six figures.
by recursivecaveat | 2025-12-01 21:47:07+00:00
My dream binary format is schema driven, as compact and efficient as Capt Proto or such, but just optionally embeds the entire schema into the message. Then we can write a vim plugin that just opens the file in human readable form without having to fish for the schema. Whenever I am using binary formats, it's because I have a list of millions of objects of the same types. Seems to me that you may as well tack 1KB of schema onto a 2GB message and make it self-describing so everyone's life is easier.
by tshaddox | 2025-12-01 21:47:16+00:00
> It's suspicious when it lands on something that people might be biased towards.

Eh, this only makes sense if you're incorporating information about who set up the experiment in your statistical model. If you somehow knew that there's a 50% probability that you were given a fair coin and a 50% probability that you were given an unfair coin that lands on the opposite side of its previous flip 90% of the time, then yes, you could incorporate this sort of knowledge into your analysis of your single trial of 200 flips.
by SatvikBeri | 2025-12-01 21:47:21+00:00
I would be interested in serious attempts to argue for this, even if they can't reasonably be backed up by data.

For example, I think there's a pretty strong argument that immutability makes it easier to write multithreaded code (perhaps at some performance cost), because it entirely prevents common types of bugs.

Similarly there's a good argument that making methods open to extension (like Kotlin or Julia) makes it easier for an ecosystem to adopt unified APIs without explicit coordination.

There's obviously a very strong argument that Garbage Collection prevents a lot of memory safety bugs, at costs to interoperability and performance.
by appsoftware | 2025-12-01 21:47:40+00:00
Senior Software Engineer & Solutions Architect

.NET Specialist / Full-Stack Web Apps / APIs / Databases / Cloud Infrastructure / Microservices

Based in the UK, looking to work in the South West, London or remote.

https://www.appsoftware.com/cv

Hopefully CV sells it a bit better than this post! :)
by XorNot | 2025-12-01 21:47:54+00:00
There's a difference between "I have an active adversarial actor" as a security model and "sometimes I send something I don't want to and want to delete it, the people watching are friends and acquaintances and are not deliberately preprepared to collect kompromat".

When I delete a message off Signal chat, the expectation is that the chat members are agreeing by social contract to abide by that.
by jpadkins | 2025-12-01 21:47:56+00:00
Intel in the 90s-2000s did. I did customer research on them (worked on powerpoint at the time). I was amazed that the CEO gave a mandate to the company that if an agenda was not posted to a meeting 24H before the meeting, you did not have to attend that meeting. They also had other crazy strict meeting rules that I forgot.
by eseidel | 2025-12-01 21:48:33+00:00
Shorebird | Mid-Senior Systems/Runtime (C++) Engineer| REMOTE (North America) | Full-time | $160-230k + equity + benefits | https://shorebird.dev

Flutter/Shorebird founder here. Flutter is used by millions of devs (and nearly ⅓ of free apps submitted to AppStore), but is missing services for businesses. We offer Flutter-related SAAS used by 1000s businesses globally, on track to profitability early 2026.

As part of our over-the-air updates “code push” product, we’ve built a custom compiler and runtime for the Dart language, primarily written by me (founder/CEO). Now that we have thousands of customers, I have many other responsibilities and need to bring on a fulltime engineer (you!) to take over primary responsibility for all of our C++ code (Dart & Flutter forks, custom runtime, compiler, etc.) and evolve it further than I could alone. Together, you and I will add obfuscation, improve our interpreter, possibly re-write method dispatch, etc. You don’t need to be a compiler/runtime expert. You do need to be capable of working on large open source projects, be comfortable with C++, want to work at a startup, work well independently (we’re remote) and want to learn and work on lots of different areas of code.

If you’ve contributed at least a little to WebKit, Godot, Firefox, or any other large open source project, are compiler/runtime curious, and want to work at a growing startup, you will likely find this role extremely rewarding.

We’re a small, senior team, making something people want. Tech: GCP, Cloudflare, React, Dart, C++, Rust. Shorebird operates almost entirely in the public over Discord. https://discord.gg/shorebird

https://shorebird.dev/jobs
by gnosis67 | 2025-12-01 21:48:47+00:00
Thanks for your balanced words. Those karma critics dig in when their tastes are not regarded. Hypocrites.

There is so much more, and I hope those stories come to you. I did not make these things up, I heard the fragments of stories in the decades before the Internet was a thing, and I only became a part of this drama when my world was deprived from me. To be condemned is the surest way to Power, for those who cannot help but reach for mastery of their own destinies.

Those comfortable in the conveniences of modern prosperity, the lie that is America, want their curiosity to be without risk to their certainties.

What can I say that you might want to hear, yet will do you no good?

The closest known civilization near us is ~124 light years away. They are sad, a civilizing stuck for thousands of years in a proto third world level. Their muddy ball of a world, slightly larger and more massive than Mars has no seasons. They will never in a million years achieve radio communications let alone space flight. I’m told they look sort of like the “Aughra” in the Dark Crystal, without the extra arms.

Abyss was a wishful thought of theirs (to greet us in a cute benevolent way.) they are actually seven feet tall fully grown, and humans tend to be terrified of their appearance so they represent themselves as small or green in the imaginations of Man to appeal their more affable qualities.

Stargate is a cute example of how they would like to be known. And they dislike being called “greys.” They are actually milky white and their skin turns grey only after thousands of years of oxidation. They prefer “Alluvian” though it’s pointless as no one calls them that.

About technology discovery. As their technology is biological annd immorally harvested, the technology has been impossible for Man to interpret, until the last decade or so.

Air Force experiments with mushrooms in space and those articles on mushrooms storing information are related to their technology, only the persons doing those things are led through the backs of their minds, not clandestine government secrecy. They have no idea where these inspirations come from. I mentioned humans have this ability. So it was a matter of practicality, not cover story that has inhibited these developments. I equate some of these to the immoral WW2 experiments on humans.

If you all accept my world on quantum holography, I will have set you ahead further than corrupt Americans have innovated by such discoveries.
by arghwhat | 2025-12-01 21:49:10+00:00
Contributing to display servers and following kernel KMS/drm stuff, but #wayland on OFTC or #sway on libera chat are both very helpful.

Also https://wayland.app to see the current Wayland protocols (the Wayland core protocol is mainly some common primitives, most stuff is across the other protocols). For example, the sync object stuff is in https://wayland.app/protocols/linux-drm-syncobj-v1 (in many cases handled by your toolkit or WSI of choice).
by tlhunter | 2025-12-01 21:49:36+00:00
I'm glad to hear you would have found it beneficial!

I've definitely seen the same patterns at companies (and even introduced similar patterns).

The proposal linking was inspired both by IETF RFCs and by Jira issues. I love how both systems provide semantic meanings to such links (X obsoletes Y).

I do hope to marry the engineering love of markdown with management's love of WYSIWYG. Currently the proposal editing process is done via a syntax-highlighted markdown editor but in the future I'll add a WYSIWYG editor, then let users select a default mode.
by entelechy0 | 2025-12-01 21:49:37+00:00
Location: US

Remote: only

Willing to relocate: No

Technologies: C/C++, Python, PHP, Rust, Go, x86_64, Javascript, sqlite3, git

Resume/CV: https://www.evildojo.com/resume.pdf

X/Twitter: https://x.com/evildojo66

LinkedIn: https://www.linkedin.com/in/darkmage/

Youtube: https://www.youtube.com/@evildojo666

Bugcrowd: http://bugcrowd.com/darkmagex6

Github: https://github.com/mikedesu/

I've been streaming development of a game I am making in C++ and Raylib for both desktop and browser! See me in action on my Youtube channel. I won't share email here, but I will if you reach out to me on LinkedIn or X/Twitter.

I have professional experience as an iOS Developer, Security Consultant/Penetration Tester, and as an online Computer Science tutor. I realize my intersection of skills may not appear united or even fresh, but I pride myself on my ability to learn new tech stacks and integrate into anyone's workflow.

I'm looking forward to hearing from you!

Thank you in advance!
by hyperfield | 2025-12-01 21:49:39+00:00
PyAppExec is a lightweight cross-platform bootstrapper/launcher for distributing Python desktop applications without freezing them into large binaries with PyInstaller / Nuitka / cx_Freeze.

Instead of bundling Python and all dependencies into a single executable, PyAppExec automatically sets up a virtual environment on first launch, installs dependencies (and optional third-party tools like ffmpeg), and then runs the entry script directly. This avoids antivirus false positives and results in much smaller downloads.

It includes both an installer and a bootstrapper (CLI and GUI variants). Currently Windows-only binaries are available; macOS and Linux builds are in progress.

Use cases include distributing Python tools to non-technical end users, apps that need external binaries, and workflows where update size matters.

GitHub: https://github.com/hyperfield/pyappexec

Demo GIF: https://github.com/hyperfield/pyappexec/blob/v0.4.0/resource... Would appreciate feedback and real-world use-case thoughts.
by bitpush | 2025-12-01 21:49:41+00:00
> It might be hard to believe for my younger readers, but Mozilla took on Internet Explorer that was just as entrenched as Chrome is now, and they kicked proverbial posterior! They did because they offered a better browser that respected the people who used it, and gave them agency in their browsing experience.

That is revisionist history. Firefox succeeded because MS was sitting on their hands with IE, and it was stagnating. Firefox didnt do the opposite of what IE - you could argue Mozilla was doing what MS should have been.

It wasnt about "respecting users", or "agency" but simply implemented standards properly.

And that's going to be a hard problem with Chrome because you're up against a browser that is moving very, very, fast.
by dbenamy | 2025-12-01 21:49:49+00:00
Datadog | Software Engineers | ONSITE (Boston, Lisbon, Madrid, NYC, Paris, Tel Aviv) | Full-time

Datadog is a monitoring, tracing, logs system, and more, for your infrastructure and services. We build our own tsdb, event store [1][2], distributed tracing tools, cutting edge visualizations, and more. We love shipping great experiences for customers just like us and are growing fast! We write a lot of Go, Java, Python, Typescript (with React), and a bit of other languages. We run on k8s, and are multi-region and multi-cloud.

We're looking for people who can build systems at scale as we process trillions of events per day. Let us know if that's you!

https://dtdg.co/hnwhoshiring

[1] https://www.datadoghq.com/blog/engineering/introducing-husky

[2] https://www.datadoghq.com/blog/engineering/husky-deep-dive
by makle | 2025-12-01 21:49:56+00:00
Kombo | https://www.kombo.dev/ | Berlin & New York | Full Time | On-site Kombo is building the unified API for HR systems — a single integration that connects companies to dozens of HRIS, ATS, payroll, and recruiting platforms. We’re a fast-growing engineering-driven team backed by top European investors, working on hard API and data-sync challenges that developers love to solve.

We’re hiring across Engineering, Commercial, and Customer Success:

Commercial (New York, On-site): Business Development Representative US (Enterprise): https://jobs.ashbyhq.com/Kombo/2fc874bb-8a64-4cda-9c0c-8d214...

Business Development Representative US (Mid-Market): https://jobs.ashbyhq.com/Kombo/fbe34ca5-8da0-4ed5-8886-46eb3...

Customer Success (Berlin, On-site): Customer Success: https://jobs.ashbyhq.com/Kombo/e5d7e5aa-4413-40ac-a77b-484d1...

Engineering (Berlin, On-site): Senior Product Engineer: https://jobs.ashbyhq.com/Kombo/221b2f22-ead1-48e1-b0ca-9a7c6...

Senior Site Reliability Engineer (Database): https://jobs.ashbyhq.com/Kombo/e5799cf1-9b73-4bee-bd57-24ab5...

Technical Support Engineer (Berlin): https://jobs.ashbyhq.com/Kombo/95e1ed46-b75f-4159-b134-9842a...

Technical Support Engineer (New York): https://jobs.ashbyhq.com/Kombo/e3ee9f67-a740-475d-86bf-10b25...

Come help us build the infrastructure layer for the future of HR tech.
by hackmaxim | 2025-12-01 21:50:11+00:00
Nothing is free, of course, since we transparently pay per task (and as previously stated, the pay is very generous). There are certainly guidelines for what kinds of tasks you can submit to our platform, but beyond that, you can make any verifiable coding task in any of our qualifying open-source repositories.

We also definitely do not require you to write new code into the repo. As I said, you can adapt existing merged commits into coding tasks.
by LatencyKills | 2025-12-01 21:50:25+00:00
> Where the humans aren't omniscient it fills the blanks with nonsense

As do most humans. People lie. People make things up to look smart. People fervently believe things that are easily disproved. Some people are willfully ignorant, anti-science, anti-education, etc.

The problem isn't the transformer architecture... it is the humans who advertise capabilities that are not there yet.
by ssivark | 2025-12-01 21:50:38+00:00
This seems to be the app: https://www.sancharsaathi.gov.in/

Looks like it's quire popular/established already, with over 10 million downloads. Basically a "portal" for basic digital safety/hygiene related services.

Quoting Perplexity regarding what facilities the app offers:

1. Chakshu: Report suspicious calls, SMS, or WhatsApp for scams like impersonation, fake investments, or KYC frauds.

2. Block Lost/Stolen Phones: Trace and block devices across all telecom networks using IMEI; track if reactivated.

3. Check Connections in Your Name: View and disconnect unauthorized numbers linked to your ID.

4. Verify Device Genuineness: Confirm if a phone (new or used) is authentic before purchase.
by Insensitivity | 2025-12-01 21:51:03+00:00
I'm not sure if React Native is much different from React itself, but a few things that made me give a side eye, when looking at this write up:

1. The instant 5 levels of providers (and additional one later) seems excessive.

2. The usage of useAnimatedReaction which seems almost like a "useEffect" kind of hook, which was sprinkled in almost every code block.

3. The imperative size calculations, does React Native not support any responsive like constructs? I recall solving the same problem by separating "history" and "tail" and having a "grower" component, without having to use any JS (purely html & css), albeit it being web and not native.

4. Personally, when I see something like the scroll code, where you have to call scroll, wait a frame, call scroll again, set a timeout, scroll again- I would have raised my eyebrows about the architecture / code flow way before that.

5. the amount of "floating" hook calls like useKeyboardAwareMessageList() useScrollMessageListFromComposerSizeUpdates() useUpdateLastMessageIndex()

that don't return anything, always makes me raise an eyebrow, usually in React Web codebases, where the users just spam useEffects and effect chains.

Not sure if it's just my ignorance in React Native, but if I had seen the equivalent in a React Web app, I would've been baffled
by cortesoft | 2025-12-01 21:51:26+00:00
Well, the ‘intentionality’ is of the form of LLM creators wanting to maximize user engagement, and using engagement as the training goal.

The ‘dark patterns’ we see in other places aren’t intentional in the sense that the people behind them want to intentionally do harm to their customers, they are intentional in the sense that the people behind them have an outcome they want and follow whichever methods they find to get them that outcome.

Social media feeds have a ‘dark pattern’ to promote content that makes people angry, but the social media companies don’t have an intention to make people angry. They want people to use their site more, and they program their algorithms to promote content that has been demonstrated to drive more engagement. It is an emergent property that promoting content that has generated engagement ends up promoting anger inducing content.