MurphyA/hacker-news huggingface dataset:
by BLKNSLVR | 2025-12-01 01:23:21+00:00
> kind of like the old Control Panel.

Aaaah, old Control Panel. One of the things that made me realise that I'm now better at administering a Linux system than a Windows one is that the old Control Panel has been replaced by a series of other screens that don't link together by the same concepts that Control Panel used as groupings.

I think the old Control Panel still exists, but they make it hard to find, and if that's the case then it's not going to exist much longer.

It really is one of the things / realisations that properly ended Windows for me.
by TZubiri | 2025-12-01 01:23:37+00:00
>Personally, i think the worst part about it is handling a low probability as something that's not gonne happen. Thats, especially in IT-Sec, one of the worst practices.

If you are an online service provider, sure. Low probability means it's going to happen, especially as you scale with users.

For a small business IT team? You can't keep a clean sheet, the strategy is to reduce the probabilities of an incident and reducing its damage, but it will never be zero, if only because you have non-technical users that need to do actual work.

p(incident) is just yet another variable you need to do tradeoff engineering on, and obsessing over reducing it to 0 will probably compromise other tradeoffs like ease of use of the system.

It's a special case of ironic when in an attempt to get a specific variable to 0 (which is impossible with most variables anyways) you end up compromising that specific variable. So if you force users to use lots of passwords and password managers and MFA, and limit their capabilities, they end up circumventing your security systems and advice, so they introduce an issue (but of course it will be the users fault, and not the CISO's fault, their job is secure).
by gregjor | 2025-12-01 01:24:07+00:00
> If you ever use your key person risk as a way to threaten the company for a raise, even subtly, I’ll make it my life’s mission to derisk off of you totally and never put you in a position of that leverage again.

The original tweet places the blame on the wrong person. As a manager or boss, if you put your company in this position in the first place you bear responsibility for the risk. If you discover an employee has this kind of leverage you have not done your job.

Many managers don't consider this kind of risk until they have to react to losing a key employee. Many more managers don't know enough about what their direct reports do, or how the organization works. They have never felt the responsibility or had the leverage that a key employee does.

I once worked as a contractor for a company that ended up with me running all of their IT infrastructure and maintaining their software (SAAS company, so their only product). I repeatedly told them they should hire a f/t person so they didn't depend solely on me, but they didn't want to spend the money or do the work, for years. One day the owner reviewed my retainer and asked me "What exactly do we pay you for?" I told him "You pay me not to quit." He didn't like hearing that but even then didn't do anything about the problem.
by markstos | 2025-12-01 01:24:08+00:00
My primary pain point with Codeberg has been that the issue search is worse, so that there are cases where I'm rather certain than issue exists-- because I've triaged it in the past-- but it's hard to find with the keyboard search. Hopefully that can be improved soon.

There were some times were Codeberg's general performance was noticeably worse, but most recently it has been fine.

If you thinking of migrating a project with hundreds of issues, I would do a test migration and practice a few different searches to test the result quality.
by NegativeK | 2025-12-01 01:24:36+00:00
> People are capable, and should be helped to make decisions based on all available information.

To relay a quote, with the source not being very important: "I'm not going to waste a dime on cybersecurity when my officers need bullets and armor." People can be intelligent and capable and have minimal (if you're lucky) bandwidth or tolerance for cybersecurity advice. It's not the crisis they see every day. The advice given to unwilling listeners has to be focused and prioritized.

And... Password leaks and therefore rotations aren't an issue if people are using a strong main password for their manager. Then a leak doesn't transfer to another account and the manager will loudly tell them when a password is found in breach data -- which lines up with NIST's modern advice of avoiding password complexity and rotation, since they've found it to lead to minimal (at best) gained security.
by clickety_clack | 2025-12-01 01:25:05+00:00
Land is scarce, but we are making residential floor space far more scarce than it needs to be through restrictive planning laws. Simplifying it a little but, say all 20M people in the greater New York area want to live in Manhattan, which has a population of about 1.7M. That means that people will bid up the price of housing until only the top 1.7/20=8.5% of people can afford it. We can pack manhattan full of sky scrapers and get a lot more people in there.

On affordable housing: there’s no such thing. There are enough millionaires around that will live in a 600sqft apartment if it gives them the lifestyle they want.

In fact, it might blow your mind to know that building luxury accommodation actually lowers house prices as well as affordable housing, because wealthy people have to live somewhere, and if all that’s available is mid-range housing then they’ll live in that. That will push the middle into the lower income housing, pushing the lower income people out of the city.

Additionally, if you only build cheap housing to make it affordable, you end up with a city of cheap housing. If you build a ton of luxury housing, then in a few decades you have a ton of older high quality housing coming into the more affordable range as “luxury” buyers follow the new luxury construction around.
by apatheticonion | 2025-12-01 01:27:10+00:00
Exactly this. "AI usage is 20% of our customer base" "AI usage has increased 5% this quarter" "Due to our xyz campaign, AI usage has increased 10%"

It writes a narrative of success even if it's embellished. Managers respond to data and the people collecting the data are incentivised to indicate success.
by Katharsas | 2025-12-01 01:27:29+00:00
I highly recommend you give Shotcut a chance. I am a total beginner with video editing but unlike kdenlive (sorry, still a cool project) it gave me much bigger "professional product" vibes.

IMO it is more polished, built-in effects are better, runs stable on Windows for me (so you can try it anytime before switching to Linux) and it looks nice.

I was editing video gameplay footage with kdenlive some time ago (on Windows) and it was indeed very hard (and also crashed a bunch). In fact i think i switched when i also wanted to overlay text in a certain way (a timer in my case) which seemed to be impossible to make look halfway decent.
by markstos | 2025-12-01 01:27:44+00:00
Some competitors like Gitlab have reduced friction by offering "Login with Github", so if you've already got a Github account, the bar for signing up some alternative forges is low.

I help with one of the most popular projects on Codeberg, Fuzzel. I can say we get no shortage of issues and feature requests from being on an alternative forge. Indeed, we have plenty!
by chanux | 2025-12-01 01:27:48+00:00
I remember believing Google+ will win because it was quite nicely done. But I guess it never caught on with the masses to be successful in Google's definition of success (Adsense?).

PS: I was thinking that I didn't notice it being shoved down because I was high on the Koolaid. But I do remember when they shoved it in YouTube comments.
by TZubiri | 2025-12-01 01:28:14+00:00
Sure, if you use unique passwords, then changing passwords isn't as useful. Yet we shouldn't judge a security policy based on the existence or not of another policies.

What you are judging then is a whole set of policies, which is a bit too controlling, you will most often not have absolute control over the users policy set, all you can do is suggest policies which may or may not be adopted, you can't rely on their strict adoption.

A similar case is on the empiric efficacy of birth control. The effectiveness of abstinence based methods is lower than condoms in practice. Whereas theoretically abstinence based birth control would be better, who cares what the rates are in theory? The actual success rates are what matters.
by ineedasername | 2025-12-01 01:28:17+00:00
Didn’t mean to get into? The list seems like this was its main purpose, the rest only there to help in that effort. It can all have still been authentic but this isnt exactly a brief parenthetical tangent, and the author has demonstrated its importance by returning to comment further on it in much more detail.

Yours is an ironically awkward comment itself in how it takes on the author’s words given their statement about sock puppets being used to discredit…
by wredcoll | 2025-12-01 01:28:26+00:00
> Having a commonly understood term for a thing that exists isn't offensive; it's just how language works.

I repeat my claim that you're trying to wish this thing into existence by using words.

Words and language matter because they help shape how we think and what actions we take.

It's easy to notice that you refuse to actually engage with any attempt to meaningfully define the term "cancel culture" instead you just use it as a phase with no inherent meaning except the negative ones you need it to have at any given moment.

I'll repeat myself here: the idea that cancel culture actually exists is deliberately fomented by a small group of people and those people are doing this in order to attempt to protect certain ideas from criticism.

> I don't intend to silence anyone, critics or otherwise.

You say this but this is literally what the proponents of the idea of cancel culture are attempting to do. This is why they invented the term cancel culture, in order to silence people.

Yes, I get it, they're coopting terms that appear to mean the opposite of how they're using them. Shockingly, people lie a lot.

> Why are you so focused on wealthy celebrities? They're a tiny minority of the population and inherently the ones least harmed by cancel culture

Because they're literally the only example anyone can ever come up with of "cancel culture". If we're not talking about wealthy celebrities, what exactly are we talking about?
by notepad0x90 | 2025-12-01 01:28:33+00:00
That's exactly what I mean, I wish Linux was more like NetBSD in its architecture support. It kind of sucks that it is open source but it acts like a corporate entity that calculates profitability of things. There is one very important reason to support things in open source: Because you committed to it, and you can. If there are practical reasons such as lack of willing maintainers (I refuse to believe out of all the devs that beg to have a serious role in kernel maintenance, none are willing to support i386 - if NetBSD has people, so too Linux), totally understandable.

You'd expect Microsoft to support things because it doesn't make money for them anymore or some other calculated cost reason, but Microsoft is supporting old things few people use even when it costs them performance/secure edges.
by cmcaleer | 2025-12-01 01:30:29+00:00
I moved away from Anker to UGREEN following Anker’s Eufy using unencrypted feeds and sending data to the cloud with no user consent, which was bad, but their gaslighting response to the tech media and overall handling of the situation made me completely lose all trust in them. Maybe they’ve gotten better since, happy to be proven wrong.

UGREEN fit that niche of ‘tech products that are generally of quite good quality’ for me fine. They feel like neither an upgrade or a downgrade to the Anker stuff I still have.
by wordpad | 2025-12-01 01:31:44+00:00
I've not met anyone who doesn't just increment a digit at the end every 6 months.

And any password length requirement beyond 8 always ends up being just a logical extension of 8 character password (like putting 1234 at the end), if 16 characters is required one would just type their standard password in twice.

If a any of the old passwords (potentially from unrelated applications) get leaked, it's almost trivial to guess current password.
by __turbobrew__ | 2025-12-01 01:32:32+00:00
Lifestyle creep and tech hubs have expensive real estate. I am super lucky in that I have a FAANG job in LCOL area and will most likely be FIRE by I am 40 with a fully paid off single detached home, but you cannot do that in the bay area where almost all your income will go to paying your mortgage.

I also know a co-worker who lives in a LCOL area and just bought a Porsche 911 GT3…
by csmantle | 2025-12-01 01:32:55+00:00
CVEs are better viewed as "a uniform numbering system that ensures we are talking about the same bug" today. But updating software is good anyway.

> Browsers are designed to be secure from default settings.

Not quite. They are usually designed to be both fast and safe, but neither goal is considered "done" yet in modern ones. If you want max security, you'll likely have to disable all performance boosts like JS JIT.
by Zopieux | 2025-12-01 01:33:15+00:00
I've never downloaded the Twitter app, only ever used the web. I live in Europe. I don't use VPNs. My account is marked as being located… in "the USA".

Is this a default fallback because they have no useful signal (the account is a decade old)?

Anyway, if it is this unreliable even in a very simple case, I do not see the point of trusting it to expose bot farms in Russia or India.
Regarding Thien-Thi Nguyen
by SmolCloud | 2025-12-01 01:33:46+00:00
Hello, please forgive any grammatical errors on my part for I am not an English native speaker. I found this thread regarding the death of ttn https://news.ycombinator.com/item?id=37457796

I am Thien-Thi's daughter, my dad was a very private person, so I found out about the thread only recently.

Since I can't leave a comment, I'm making a new thread to thank everyone for the kind words regarding his passing.
by RGamma | 2025-12-01 01:34:28+00:00
Watching Held der Steine cured me of all notions that LEGO(R) still has any interest other than milking their brand/reputation. McKinsey leadership will do that to a company, I guess.

Thankfully there's many good (and compatible) competitors now, that get you much more bang for the buck. I'm not that deep into LEGO(R), but it feels they have already lost a substantial portion of goodwill in the power user community, which may be contagious. I certainly wouldn't buy or recommend it to anyone anymore (except used perhaps).
by alfalfasprout | 2025-12-01 01:34:48+00:00
Not necessarily. Lots of explanations:

(1) People wait for when they perceive they'll get the best deals to do their shopping. (2) K-shaped economy (data is already bearing this out btw): Spending from the wealthy is driving consumption figures vs. the bulk of the population (3) Anxiety about rising prices cause people to purchase now vs. later. See for example RAM prices.
by AuthAuth | 2025-12-01 01:35:33+00:00
the country is growing so it will commonly "set records". We need to look at it in the context of previous years. Before I went and checked the stats I expected to see instore shopping to be down since americans are poorer than previous years and online shopping to be up since demand is growing and online caters to a worldwide audience.

Checking the stats online growth is up and on par with previous years creating that record breaking stat. Instore numbers arent out yet but some figures are claiming less foot traffic in stores compared with previous years. So i'd say to early to really call if spending was down(compared with expectations)
by gerdesj | 2025-12-01 01:36:26+00:00
Yes but winget is not the Windows central package manager. Actually, Windows does not have one but for some reason you have enforced updates from a central source.

Why does Windows not have a formal source for safe software? One that the owner (MS) endorses?

One might conclude that MS won't endorse a source of safe software and hence take responsibility is because they are not confident in the quality of their own software, let alone someoneelses.
by anonymouskimmer | 2025-12-01 01:36:55+00:00
Yep. My personal laptop is 12 years old and my work laptop is 6. A replacement battery, some extra RAM, and a replacement fan (kind of hard to get) for my personal laptop a few years ago and it still does everything I want it to do.

I cracked the screen on my work laptop last year, but IT set me up with a replacement screen. It's so much nicer having discrete buttons than a clickable trackpad, so I skipped on an upgrade. Still does everything I need it to do for work (including working with Windows 11).

And the vast majority of things I do on either laptop involves a web browser.
by BLKNSLVR | 2025-12-01 01:38:39+00:00
Three states in Australia are implementing a requirement that energy companies offer free electricity for the three peak daylight hours of the day (likely 11am to 2pm) as of July next year.

https://techcrunch.com/2025/11/05/millions-to-receive-free-e...

https://www.pv-magazine-australia.com/2025/11/04/electricity...
by rafark | 2025-12-01 01:39:14+00:00
> the docs don't cut it

Yet. By the time stackoverlow shuts down, AIs will be powerful enough to take data from docs or just from the source code alone. I mean the new version of opus is pretty good at understanding my front end source code. I think that should be the goal of AIs (that they are so advanced they don’t need to read code examples from a third party website like stackoverflow)
by venkii | 2025-12-01 01:41:09+00:00
OP here. I read a lot of Wuxia novels, some of them are well translated, and I usually end up giving up on the poorly translated ones.

I tried a few models (Gemini-2.5, Gemini-3.0-pro, Claude Opus 4.5), and found that they all improved the quality quite noticeably, even without being provided the source. The trick was mostly asking them to be super conservative in the changes they made.

Here's a diff if you're curious: https://www.diffchecker.com/DKgmzLdM/
by BLKNSLVR | 2025-12-01 01:41:44+00:00
I think it's the "servers in the US" part. I think Microsoft has plenty of servers outside the US. However the main point is not the location of the servers but the fact that Microsoft as the operating system / service provider is under the thumb of US law no matter where the servers happen to reside.

Which is, as you say, an issue of digital (data) sovereignty.
by andrehacker | 2025-12-01 01:41:45+00:00
Sure, but the point is that each minor release contains changes in all third party open source packages/ports by taking them to the head version.

Open source packages often include breaking changes, all but guaranteeing your application to fail. With (a paid version of) RedHat Linux, RedHat modifies the open source packages to remediate CVEs by modifying the original version.
by stingraycharles | 2025-12-01 01:42:57+00:00
That’s hilarious and a great way to test this.

What I’m surprised about is that OP didn’t mention having multiple CLAUDE.md files in each directory, specifically describing the current context / files in there. Eg if you have some database layer and want to document some critical things about that, put it in “src/persistence/CLAUDE.md” instead of the main one.

Claude pulls in those files automatically whenever it tries to read a file in that directory.

I find that to be a very effective technique to leverage CLAUDE.md files and be able to put a lot of content in them, but still keep them focused and avoid context bloat.
by klempner | 2025-12-01 01:43:14+00:00
There's a weird fetishization of long uptimes. I suspect some of this dates from the bad old days when Windows would outright crash after 50 days of uptime.

In the modern era, a lightly (or at least stably) loaded system lasting for hundreds or even thousands of days without crashing or needing a reboot should be a baseline unremarkable expectation -- but that implies that you don't need security updates, which means the system needs to not be exposed to the internet.

On the other hand, every time you do a software update you put the system in a weird spot that is potentially subtly different from where it would be on a fresh reboot, unless you restart all of userspace (at which point you might as well just reboot).

And of course FreeBSD hasn't implemented kernel live patching -- but then, that isn't a "long uptime" solution anyway, the point of live patching is to keep the system running safely until your next maintenance window.
by dmz73 | 2025-12-01 01:43:18+00:00
I would like for Linux to be able to replace Windows. I run Linux on some of my computers with various levels of success. But even with Windows 11 being as annoying as it is and Ubuntu/Mint/Cachy/Fedora/etc having some really good points they are not as easy to use as Windows. Sure, web browsing is almost the same and simple home office tasks are close enough. But all of the complaints that GP has mentioned are valid. Windows file chooser is essentially small Windows Explorer and you can do almost everything that you can in the explorer while you are in file chooser mode. None of the Linux desktops have anything close. HiDPI and multi monitor scaling on Linux has gotten better and it might approach what Windows had for the last 10 years but it is not 100% there yet. Wayland is just a protocol with many incomplete and incompatible extensions that may or may not be implemented by your DE. VNC is not even remotely close to RDP in features or performance. It just isn't. I have used RDP over dial-up that was more responsive that VNC over LAN. Not to mention sound, printer, disks, USB, etc all being available over one RDP connection. Accessibility on Linux is a joke. On screen keyboard may work 80% of the time, screen reader might work 20% of the time. Sound might come out of random output or it might not. You may have to play with random settings, good luck with that if you are vision impaired. One big reason Linux isn't there yet is people who just dismiss all of the above and go with "it works for me so it must be good for everyone."
by rs186 | 2025-12-01 01:43:56+00:00
Anyone who has used rdp for more than a few hours knows how much better the experience is compared to vnc. Most things just work. In case someone needs touch screen support, there is no comparison.

File picker has been a strength of Windows for quite a few versions. And the consensus seems to be that it is better than Mac's (based on my YouTube watch history). I have used various Linux desktops, and none of the file pickers are nearly as good as the Windows native one, in yet of being able to navigate/filter/order things and occasionally getting more information about the selection.
by randomifcpfan | 2025-12-01 01:44:01+00:00
Current frontier agents can one shot solve all 2024 AoC puzzles, just by pasting in the puzzle description and the input data.

From watching them work, they read the spec, write the code, run it on the examples, refine the code until it passes, and so on.

But we can’t tell whether the puzzle solutions are in the training data.

I’m looking forward to seeing how well current agents perform on 2025’s puzzles.