MurphyA/hacker-news huggingface dataset:
What went wrong (and right) while migrating a Qt Widgets app to QML
by yongdohyun | 2025-12-21 08:15:32+00:00
Hi HN,

Over the last ~6 weeks I’ve been working on a fork of a Qt-based launcher, with a long-term goal of moving the UI from Qt Widgets to QML.

This week I finished what turned out to be the hardest part of the entire effort: backporting an ongoing QML migration into a live codebase without breaking existing workflows.

The current state is intentionally hybrid: - QML is now the primary UI path - Qt Widgets remain as a fallback for some flows - Architecture decisions are frozen, cleanup and edge cases are ongoing

What surprised me most is that the migration itself was not the main challenge — keeping the system buildable, testable, and reversible during the transition was.

Some things that helped: - Treating the hybrid phase as a first-class design state, not a temporary mess - Keeping widget code untouched until QML paths proved stable - Accepting that “migration complete” is a mindset shift, not a commit

The project is still early and releases are alpha-only for now. I plan to publish weekly alpha builds to gather feedback while continuing cleanup and packaging work.

If you’ve done large UI or architectural migrations in Qt (or elsewhere), I’d be very interested in lessons learned or mistakes to avoid.
by pjc50 | 2025-12-21 08:16:54+00:00
It's interesting to see where the "too famous to prosecute" line lies. So far the highest profile casualty seems to have been Prince Andrew - as a result of the files, and NOT as a result of his actual court case with Virginia Giuffre, which he settled before her suicide.

Maybe it's possible. Berlusconi was brought down by his habit of young women eventually hitting one under 18.
by atoav | 2025-12-21 08:19:59+00:00
A good square is a place where a human being can be. That means if you want it to be vibrant the connecting streets also have to be places where humans want/need to be. And I specifically mean humans who walk and not cars. But how do they get there if you need to keep cars out?

Other reasons my european mind can think of why this doesn't work in the US:

- weird car-centric zoning regulations that lead to weirdly unorganic space use. Where I have my grocery store, my gym, my record shop and my doctor all within walking distance of my home that would be often utopian in the US. Good spaces are mixed spaces, and for that mixing has to be allowed

- generally an egoistic cut-throat society, where some would rather burn the money, than risk the chance of having someone else profit from it. But good public spaces thrive from the surrounding owners caring about the public spaces and the people within it as well.

- commercial interest trumps everything. In Europe many nice places are surounded by shops/redtaurants that are family owned for generations. And while economics do play a role also in Europe, they are not the be-all and end-all, when it comes to decisions. If your business has meaning to your whole family, you decide differently than a faceless megacorp that looks to extract value like a leech from everything that makes life worth living
by bob1029 | 2025-12-21 08:21:31+00:00
What is the story on leveraging natural gas infrastructure in SF? In parts of Texas we've made the grid a non-issue with lots of standby natural gas generation. About 80% of the homes in my community have full backup. Wednesdays get pretty noisy at noon around here. All of the public utilities can go for days without grid power now. The winter storm was the last time anyone saw difficulties with gas infrastructure. I don't know of anyone who lost gas service, even during the event. In the TX hill country and in more rural areas, these things run on buried propane tanks and in most cases there is enough fuel on site to run continuously for weeks before a truck has to show up.

I think there is something to be said for a semi-reliable grid encouraging resilience over time. You can't have it too unreliable, but it seems like there is a sweet spot that encourages high quality contingencies to develop.
by troupo | 2025-12-21 08:23:50+00:00
> In fact, my recollection is that the physical library was generally much more extensive than the streaming library, at least through the early ‘10s.

Because streaming licences are different from DVD licences for example. Hell, even 4k streaming licenses and lossless audio streaming licenses are different (and significantly more costly) than streaming 1080p and compressed audio.

> put themselves into that position when they pivoted to streaming in the first place.

As we all know physical DVD businesses are thriving
by LeFantome | 2025-12-21 08:24:43+00:00
This is a wonderful self-own.

Perhaps the person you are responding to is dense enough to know that Apple uses a BSD licensed userland: https://github.com/apple-oss-distributions/file_cmds

Or perhaps they know that the entire system is built with Clang and LLVM and not GCC.

Apple distributes very little GPL code (like bash) and even then it is only GPL2 (older versions).
by ssl-3 | 2025-12-21 08:26:53+00:00
I've been through long blackouts.

My own experience has given me a somewhat more-nuanced take.

At first, it's akin to the path of evil. Way too many people just zoom through intersections with dark traffic lights like they're cruising unimpeded down the Interstate, obvious to their surroundings. Some people get grumpy and lay on the horn as if to motivate those in front of them to fly through themselves.

But many people do stop, observe, and proceed when it is both appropriate and safe.

After awhile, it calms down substantially. The local municipality rounds up enough stop signs to plant in the middle of the intersections that people seem to actually be learning what to do (as unlikely as that sounds).

By day 2 or 3, it's still somewhat chaotic -- but it seems "safe" in that the majority of the people understand what to do (it's just stop sign -- it may be a stop sign at an amazingly-complex intersection, but it's still just a stop sign) and the flyers are infrequent-enough to look out for.

By day 5 or 6, traffic flows more-or-less fine and it feels like the traffic lights were never necessary to begin with. People stop. They take turns. They use their turn signals like their lives depend on it. And the flyers apparently have flown off to somewhere else. It seems impossible to behold, but I've seen it.

But SF's outage seems likely to be a lot shorter than that timeline, and I definitely agree with Waymo taking the cautious route.

(but I also see reports that they just left these cars in the middle of the road. That's NFG.)
by dleeftink | 2025-12-21 08:27:00+00:00
My point is, that even in the new paradigm where probabilistic sequences do offer a sensible approximation of language, would novelty become an emergent feature of said system, or would such a system remain bound to the learned joint probabilities to generate sequences that appear novel, but are in fact (complex) recombinations of existing system states?

And again the question being, whether there is a difference at all between the two? Novelty in the human sense is also often a process of chaining and combining existing tools and thought.
by sethammons | 2025-12-21 08:28:49+00:00
0% impaired? We know tired drivers are impaired. Should we require drivers to demonstrate 8hrs of sleep before operating a vehicle? What about people who do ok on less sleep? I think there are obvious issues with such a proposal and those issues transfer to THC usage. I would bet, if we could measure it, a large portion of fatal accidents would involve people who are not fully rested and had missed the 8hr target multiple times in the preceding week or two
by Rohansi | 2025-12-21 08:29:36+00:00
> This whole conversation is about how there is very few options for games where it is financially viable to build content for them as a third party.

Because games are not platforms. Roblox is a platform - games ("experiences") are all UGC. Fortnite is a game that Epic is turning into a platform. Not sure what Minecraft is doing but it doesn't seem anywhere near as financially viable for creators pas Roblox.

It's an interesting thing to think about because Roblox does not exactly follow the App Store review guidelines. Code and assets are downloaded onto your device to run the games. If you could add them to your home screen then it wouldn't be so far off from a game-specific app store.
by dangus | 2025-12-21 08:30:29+00:00
Heh, I mostly use AI in the opposite direction to write tests because:

1. That’s the part of development work I hate the most and never really clicked with me

2. AI to to this point seems to be better at writing tests than code

Take this with the grain of salt that:

1. I suck

2. My work is mostly in the realm of infrastructure where testing has always been weird and a little dumb
by Braxton1980 | 2025-12-21 08:31:22+00:00
> it's literally just an authoritative "intersectional" quiz about how AI/Education crosses with Diversity, Equity, and Inclusion,... a dumb question.

What's an "authoritative intersectional quiz"?

>Maybe it's because I'm not a politician or a philanthropist..

Your accusations were about professors so why are you bringing up politicians. Also a philanthropist doesn't have people under his control.

>...delegating and talking to people, who are local to the concern.... lots of the stuff that winds up in these interviews is really a local issue that's going into the wrong channel

What's a local issue that shouldn't be discussed on PBS? You were just discussing AI which isn't a local issue.

>because it's basically become a platform for regulatory capture

How? You used so many buzz words I believe you either used chatgpt to generate the response or you're a bot
by AISAST | 2025-12-21 08:31:29+00:00
I built AI-SAST to solve the false positive problem in security scanning.

*The problem:* Traditional SAST tools generate hundreds of findings, 80-90% are false positives. Developers ignore security reports.

*The solution:* AI-SAST uses AI to verify each finding before reporting, achieving <10% false positive rate.

*Features:* - SAST + SCA in one tool - 50+ language support - CI/CD integration ready (GitHub Actions, GitLab CI, Jenkins) - On-premises deployment available - Detailed reports with remediation guidance

*Free to try:* 10 scans, no credit card

https://aisecurityscanners.dev

Happy to answer questions about the architecture or detection methodology.
by jeroenhd | 2025-12-21 08:31:43+00:00
Knowingly filing false DMCA claims will also perjure them.

However, ICANN has a whole procedure they follow where complaints are fact-checked, whereas DMCA takedowns put an unreasonable burden on hosting providers that requires immediate action, and many hosting providers will take such action automatically to protect themselves.

I doubt they care about perjury. They care about results, and the DMCA gets them exactly that.

The phishing reports are interesting, providers aren't necessarily required to act as fast on those. Although, I suspect companies like Cloudflare who get used by countless phishers will probably also set up some kind of automated anti phishing system.
by MrCheeze | 2025-12-21 08:31:47+00:00
It's hard to say for sure because Gemini 3 was only tested with this prompt. But for Gemini 2.5, which is who the prompt was originally written for, yes this does cut down on bad assumptions (a specific example: the puzzle with Farfetch'd in Ilex Forest is completely different in the DS remake of the game, and models love to hallucinate elements from the remake's puzzle if you don't emphasize the need to distinguish hypothesis from things it actually observes).
by lifis | 2025-12-21 08:32:14+00:00
Quickly looking at the source code, mostly treeBuilder and tokenizer, I do see several possible improvements: - Use Typescript instead of JavaScript - Use perfect hashes instead of ["a', "b", "c"].includes() idioms, string equalities, Seys, etc. - Use a single perfect hash to match all tags/attribute names and then use enums in the rest of the codebase - Use a single if (token.kind === Tag.START instead of repeating that for 10 consecutive conditionals - Don't return the "reprocess" constant, but use an enum or perhaps nothing if "reprocess" is the only option - Try tail recursion instead of a switch over the state in the tokenizer - Use switches (best after a perfect hash lookup) instead of multiple ifs on characters in the tokenizer - "treeBuilder.openElements = treeBuilder.open_elements;" can't possibly be good code

Perhaps the agent can find these themselves if told to make the code perfect and not just pass tests
by setopt | 2025-12-21 08:32:55+00:00
I tend to agree. Science funding is unfortunately a limited resource, and I would like to see different approaches explored in more detail, which unfortunately would imply less (but not zero) funding to string theory. Not zero, because we also don’t want the competence built up in string theory groups to die out completely, in case that remains our best lead.

To borrow a compsci analogy, we tried the depth-first search going in the string theory direction, maybe it’s time to switch to breadth-first for a while, to see if there are any viable and useful theories with less distance from the ones we have today. Maybe it doesn’t have to be a "theory of everything" either, we can initially settle for a "theory of more".
by oarsinsync | 2025-12-21 08:33:42+00:00
> Anonymity-by-crowd is the point

Only for IP based trackers. Any webpages embedding facebook/twitter/microsoft/google trackers have already deanonymised you through a variety of fingerprinting techniques. This includes if you use private browsing sessions, and even qubesOS. You get a fuzzy feeling doing the things you do (and I do these things too), but that battle is lost.

> NAT + default-deny inbound is simple, effective security … That's a concrete property I get for free

Depends on your definition of “free”. Is it cheaper to lookup just a connection state table, or is it cheaper to look up both a connection state table and a NAT table?

> IPv6 adds configuration surface I don't want … More features means more things to audit, understand, and misconfigure.

100% agreed. More complexity, more attack surface, more things to go wrong.

> I already solved "reaching my own stuff" without global addressing … It's better than being globally routable.

I do something like this too. It’s more private and more secure. It adds more complexity, and it restricts my ability to access things from terminals I don’t personally own & control unless I create another exposed vector though. “Better” is subjective based on metrics being optimised for.

> IPv6 wasn't designed as "IPv4 with more bits." It was designed as a reimagining of how networks should work: global addressability as a first-class property

Apologies, but global addressability as a first-class property is exactly how the internet was designed. NAT was originally deployed as a hacky add-on to temporarily alleviate the lack of addressing space in IPv4 until a successor could resolve that.

That said, the internet of the 90s was a very different beast to the internet of today. A lot of your concerns and perspective is absolutely valid and extremely reasonable given the internet of today.

> "It serves my goals better than IPv4" is the bar, and IPv6 doesn't meet it. Never has, never will … Want me to adopt a new addressing scheme? Give me a new addressing scheme, don't impose an opinionated routing philosophy on me.

IPv6 can absolutely be configured in ways that just gives you a new addressing scheme and does away with a lot of the other complexity. You’re just very much straying off the happy path, removing complexity by introducing … other complexity.

FWIW, I’m operating my home networks much the same way you do. I’ve also been dual stacking networks since the 2000s. Things have come a long way since the original pure-dogma introduction of ipv6.
by hambes | 2025-12-21 08:35:35+00:00
Maybe, but that is a different issue.

The use of generative AI for art is being rightfully criticised because it steals from artists. Generative AI for source code learns from developers - who mostly publish their source with licenses that allow this.

The quality suffers in both cases and I would personally criticise generative AI in source code as well, but the ethical argument is only against profiting from artists' work eithout their consent.
by MrCheeze | 2025-12-21 08:36:42+00:00
There were no such writeups, 99% of the discussion about difficulties in Crystal were in twitch and discord chats where Google doesn't scrape. (It hadn't yet gotten the public attention that Claude and Gemini's runs of Pokemon Red and Blue have gotten.)

That said, this writeup itself will probably be scraped and influence Gemini 4.
by Latty | 2025-12-21 08:37:15+00:00
> But come on! It is a legitimate question, do you just scramble keys when picking an address?

I did give the answer: SLAAC.

> If your ISP gives you a static IPv6. Unfortunately in Germany none of the ISP for private users does (last I checked).

Weird, here in the UK all the ones I've had have given me a static /56. Still, the same answer for that (DDNS) exist as for dynamic IPv4 addresses, you still get the advantage of not having to deal with NAT.
by stabbles | 2025-12-21 08:38:01+00:00
> On POSIX platforms, platlib directories will be created if needed when creating virtual environments, instead of using lib64 -> lib symlink. This means purelib and platlib of virtual environments no longer share the same lib directory on platforms where sys.platlibdir is not equal to lib.

Sigh. Why can't they just be the same in virtual environments. Who cares about lib64 in a venv? Just another useless search path.
by wdroz | 2025-12-21 08:38:54+00:00
In the improved error message [0] how are they able to tell nested attributes without having a big impact in performance? Or maybe this has a big impact on performance, then using exceptions for control flow is deprecated?

... print(container.area)

> AttributeError: 'Container' object has no attribute 'area'. Did you mean: 'inner.area'?

[0] -- https://docs.python.org/3.15/whatsnew/3.15.html#improved-err...
by zrm | 2025-12-21 08:42:00+00:00
DDR5 is ~8GT/s, GDDR6 is ~16GT/s, GDDR7 is ~32GT/s. It's faster but the difference isn't crazy and if the premise was to have a lot of slots then you could also have a lot of channels. 16 channels of DDR5-8200 would have slightly more memory bandwidth than RTX 4090.
by anal_reactor | 2025-12-21 08:42:23+00:00
Except in NL you guys actually have someone sit and think about the flow of traffic, in most other countries the design is usually pretty much random. In my parents' city in Poland they decided to turn off the traffic lights at night and the result is much higher number of accidents. Funnily, my father failed to yield the right of way exactly when talking about the issue. Yes, theoretically all intersections do have full set of signs, but in practice the visibility of those signs is extremely limited.
by bostik | 2025-12-21 08:43:12+00:00
I moved to UK in late 2013 and to be fair, from my observation the cellular coverage in the country has always been more than just a bit shitty.

Incidentally, the voice call quality in the UK is also really crappy. Operators compress/downsample the audio stream to the very edge of recognisability, because investing in sufficient infrastructure to support higher bandwidths is expensive.
by nsteel | 2025-12-21 08:44:07+00:00
Yes, but it's still the required correction to your claim. I actually don't know how many podcasts are using their publishing platform. I imagine it's considerably more than a dozen.

They want to own something but it's always going to be a drop in the ocean. They have a small new music label thing called RADAR but I imagine the failure rate on that is very high. They need to buy a label if they want to meaningfully change this. Just like Amazon now owns MGM and Netflix maybe getting Warner Bros. Presumably they can't afford to do this, and I don't think that integration would work as well in the music industry.
by Tadpole9181 | 2025-12-21 08:44:26+00:00
Are you seriously insinuating that string physics are asking for this collider you alone entirely made up? As if people who actually do study string theory are too stupid to know primary school math and this criticism is somehow high-brow and novel?

Not to mention you entirely missed the point of what I said. There is research into the most niche, useless fields imaginable, because not every endeavor taken by every human being needs to be profitable or applicable. Sometimes people are just really good at making jigsaws or want to make a stinky chemical or get fascinated with properties of prime numbers.

And then, sometimes, those turn out to be the fundamental underpinnings of an entire generation of economic and military strategy. You can't often know what spurs what in that sense.
by raffraffraff | 2025-12-21 08:45:04+00:00
This! I guess a good number of tech people will have IPv4 home networks long after their non-tech parents, neighbors and friends will be using IPv6 (without even knowing it).

IPv4 in the home is dead easy. You only need to remember the last digit (unless you've got multiple networks, but most won't). You can ssh to any device by remembering that ".1" is router, ".2" is NAS etc. Firewalls are simple.

You can buy a cheap domain and use it as your home DNS (eg "router.myhome.net" -> "192.168.0.1") so it works anywhere! In the home or roaming (over VPN). I don't really need to run DNS at home. My domain runs on Cloudflare DNS, my devices use NextDNS (with rebind protection disabled for my home domain).

I run OpenWRT and preallocate DHCP addresses for all known devices. Then I shrink the DHCP pool to a blacklisted range. A script automatically creates DNS records for all preallocated devices. If a new device appears in the blacklisted DHCP pool, I can manually allocate its MAC address a proper IP.

It's easy to get TLS certs for any service in the house using the ACME DNS01 challenge.

Tailscale is sexy and it worked fine until one day while roaming it wouldn't connect without "admin work", so I instantly dropkicked it. I'm now using the very unsexy OpenVPN Cloud (free for limited use) and in over two years it has never failed me. Plus it doesn't fuck with the IP addresses with fancypants tailnet addresses - I access devices directly using their DNS names which resolve to private addresses.

So, from inside or outside the home I can access the NAS to watch a movie, sync photos to Immich, print a document, check my IP cameras or ask my wife to put a document on the ancient scanner and access it via the raspberry pi phpscan website (which is on https://scanner.myhome.net)

I'm sure there's a very good reason not to do this and someone will now point it out.
by protimewaster | 2025-12-21 08:46:23+00:00
I'm not sure how valid it is to view artwork differently than source code for this purpose.

1. There is tons of public domain or similarly licensed artwork to learn from, so there's no reason a generative AI for art needs to have been trained on disallowed content anymore than a code generating one.

2. I have no doubt that there exist both source code AIs that have been trained on code that had licenses disallowing such use and art AIs have that been trained only on art that allows such use. So, it feels flawed to just assume that AI code generation is in the clear and AI art is in the wrong.
by jsiepkes | 2025-12-21 08:46:38+00:00
> No the Linux kernel didn't move to gpl3 for this reason.

Maybe, but even if they wanted to, it would be almost impossible. In Linux, the license of contributed code says "GPLv2", period. Not "GPLv2 or higher" like a lot of other projects do. If you are not the rights holder, you can't "re-license" a piece of GPLv2 code as GPLv3 as you could with for example a BSD license piece of code. Simply because the GPLV2 is too restrictive. So that would mean getting in touch with all current and past right holders / contributors (and maybe even people who inherited the rights of contributed code if the contributor passed away?) and get permission to re-license to GPLv3.