MurphyA/hacker-news huggingface dataset:
by tptacek | 2026-01-21 04:50:03+00:00
Read the Data Communications article they provided:

PIX also increases network security. Since there's no way for anyone on the Internet to know which machine on the corporate network is using a Class C address at any given time, it's impossible to establish a telnet or FTP session with any particular device.

And what about hosts that should be recognizable from the Internet, such as mail servers? These either can be directly attached to the Internet and assigned a public address or can be attached through PIX. In the latter case, the translator is config- ured to map one of the external addresses to the device not just for the duration of an application session but on a permanent basis.

At some point you're going to have to find a way to argue that the Cisco PIX was not a security device; again: it was the flagship product of the security SBU.

I was there at the time, doing IP network engineering (for a Chicagoland ISP). The PIX was a security device, and NAT was understood as a security feature (for sure, also an address depletion feature, but the argument that's being made in the post isn't merely that it was an address depletion thing, but also that it categorically wasn't a security feature, which is just obviously false.)
by blindriver | 2026-01-21 04:51:31+00:00
None of those customers can afford to cancel their orders. OpenAI, Google and Meta cannot afford to get cheap on GPUs when presumably they believe GAI is around the corner. The first company to achieve GAI will win because at that point all gains will become exponential.

All the AI companies are locked in a death loop where they must spend as much money as possible otherwise everything they invested will immediately become zero. No one is going to pay for an LLM when the competitor has GAI. So it's death loop for everyone that has become involved in this race.
by phs318u | 2026-01-21 04:51:45+00:00
I have said for many years that in the distant future, historians (those privileged by their patrons to claim the freedom of unfettered research), will read about the brief spasm in history, climaxing in the latter half of the 20th century, in which for half the globe, autocracy, dictatorship and absolute monarchy gave way to a system in which the proletariat believed they had (and amazingly in many circumstances actually had) the freedom to be, to think, to live, to flourish - largely as they wished! Those historians will wonder how this chaotic anarchy managed to not only survive, but momentarily flourish before the immense pressure of history brought about the reversal to the mean: the autocrats ruling, precious few flourishing at their feet, and the rest subsisting sullenly.
by tomhow | 2026-01-21 04:52:41+00:00
HN is a community that exists for a specific purpose and that purpose is curious conversation. The guidelines are designed to keep activity aligned with that purpose, and HN is a place where people want to participate because enough people make the effort to follow the guidelines and raise the standards rather than drag them down.

What is acceptable in your circles is not relevant here. What matters here is preserving HN as a good place for curious conversations.
by akst | 2026-01-21 04:53:26+00:00
> It's symbolism

Ah no... this is people's money, and they likely came to conclusion the US bonds are inconsistent with the funds goals and risk appetite. Within the first few paragraphs of the article you see this:

> The decision is rooted in the poor U.S. government finances, which make us think that we need to make an effort to find an alternative way of conducting our liquidity and risk management

If you're dealing with peoples pensions, even if there are higher growth portion of the funds allocation, you've got to make sure there are portions of the fund that's stable enough to be regularly liquidated to send out regular payments.

Given the whole hoo-ha with trump trying appoint their own guy into the federal reserve, it isn't that surprising the fund managers have decided to decrease their allocation.
by paulddraper | 2026-01-21 04:53:40+00:00
The RFC for NAT -- RFC 1631 -- says:

> Unfortunately, NAT reduces the number of options for providing security [1]

Somehow, everyone forgot that, and it morphed into a cargo-culting practice, even propagating 1990s network limitations into the cloud.

[1] https://www.rfc-editor.org/rfc/rfc1631.html
by hhhthrow02 | 2026-01-21 04:53:40+00:00
No, it’s bullshit posturing you read on the internet. Go talk to actual Canadians and ask them if they know anyone who has moved to the US. It’ll be eye-opening. I have many colleagues in-flight to get their paperwork sorted for US. Many have already gone.

“Money talks, bullshit walks” is all that needs to be said. Canadian salaries are half (if that) of US ones.
by ChromaticPanic | 2026-01-21 04:53:59+00:00
You just put a whole lot of nonsense out there that it would take too much time to rebuke all of it. Tech workers buying property is a surprise? The US paying tech workers alot is a surprise? They literally pay the most on the planet. I'm a tech worker in Canada, guess what, me and my friends are buying property here too. We literally have a 60% home ownership rate in this country. The problem is social media is flooded with Canada doomer propaganda.
by qart | 2026-01-21 04:54:37+00:00
> India's claims of Mr Nijjar of being a terrorist was not.

But I'm not talking about this claim. I'm talking about the fact that Trudeau accused the Indian government being responsible for his murder. The onus was always on the Canadian government to prove it.

https://www.cbc.ca/news/politics/trudeau-indian-government-n...
by mystraline | 2026-01-21 04:55:11+00:00
Repeating the same wrong points doesnt make you right.

Every NAT based product will have a firewall built in also by default. And it'll be deny-all except for conn-tracked.

And that L2 attack is a martian packet. Why are you allowing reserved IPs talk on public network interfaces (hello, spoofing and obvious at that)? These are always blocked due to the reasons you describe.

https://en.wikipedia.org/wiki/Martian_packet
by godelski | 2026-01-21 04:55:52+00:00
People forget that struggling is part of the learning process. It's great that people want to make things easier to learn, but struggling is essential. You want to ensure that people don't struggle so much they get stuck (one extreme), but you don't want to make it so easy people don't struggle at all (the other extreme). There's balance, but that balance requires struggling.
by derf_ | 2026-01-21 04:56:35+00:00
All of those are true, yet the US's (PPP-adjusted) per capita GDP was over 37% higher than the EU's in 2024 [0], and GDP growth has significantly outpaced the EU for years. Basically, whenever there was a choice between anything and economic growth, the US chose growth. Other places made different choices. You can argue about which choices were better, and how the results are distributed, but the difference in salaries for most people using this site are even more stark.

[0] https://data.worldbank.org/indicator/NY.GDP.PCAP.PP.CD?locat...
by QuantumNomad_ | 2026-01-21 04:58:58+00:00
In Norway several of the mobile phone telecom operators sell phones on down payment plans that cost nothing extra compared to buying it cash up front.

It has been like this for several years and it’s great!

You can pay a pretty low monthly down payment over a period of 36 month.

As far as I’ve been able to tell, I don’t even have to enter into any binding contract for any phone plan to buy the phone this way. And even if I did have to do that the most they are allowed to bind me to is 12 months, by law.

Consumer protection laws in my country are fabulous :)
by lelanthran | 2026-01-21 04:59:05+00:00
> I used to be pretty adamant about implementing soft delete for core business objects.

> However after 15 years I prefer to just back up regularly, have point in time restores and then just delete normally.

> The amount of times I have “undeleted” something are few and far between.

Similar take from me. Soft deletes sorta makes sense if you have a very simply schema, but the biggest problem I have is that a soft delete leads to broken-ness - some other table now has a reference to a record in the target table that is not supposed to be visible. IOW, DB referential integrity is out the window because we can now have references to records that should not exist!

My preferred way (for now, anyway) is to copy the record to a new audit table and nuke it in the target table in a single transaction. If the delete fails we can at least log the fact somewhere that some FK somewhere is preventing a deletion.

With soft deletes, all sorts of logic rules and constraints are broken.
by hhhthrow02 | 2026-01-21 04:59:06+00:00
Much of the Canadian tech sector can’t afford real estate and has been priced out. The unicorns from Shopify are an obvious exception. Vancouver being “Silicon Valley North” is a joke.

People move to the US and they make twice the money. That is not “a whole lot of nonsense” and has nothing to do with “doomer propaganda” - it’s literally the brain drain that Canada has been dealing with for a long time.

Waterloo and other grads get poached by US companies before they finish schooling. This is nothing new. US just pays way better no matter how you look at it.
by tharkun__ | 2026-01-21 05:00:06+00:00
Oldest I've worked with was a project started in ~1991. I don't recall when they started keeping history and for how long and they might have trimmed history after some legal period that's shorter but, I worked on it ~15 years after that. And that's like what, 15,..., 20 years ago by now and I doubt they changed that part of the system. You've all likely bought products that were administered through this system.

FWIW, no "indexes fully rebuilt" upon "actual deletion" or anything like that. The regular tables were always just "current" tables. History was kept in archive tables that were always up-to-date via triggers. Essentially, current tables never suffered any performance issues and history was available whenever needed. If history access was needed for extensive querying, read replicas were able to provide this without any cost to the main database but if something required "up to the second" consistency, the historic tables were available on the main database of course with good performance (as you can tell from the timelines, this was pre-SSDs, so multi-path I/O over fibre was what they had at the time). Replication was done through replicating the actual SQL queries modifying the data on each replica (multiple read replicas across the world) vs. replicating the data itself. Much speedier, so that the application itself was able to use read replicas around the globe, without requiring multi-master for consistency. Weekends used to "diff" in order to ensure there were no inconsistencies for whatever reason (as applying the modifying SQL queries to each replica does of course have the potential to have the data go out of sync - theoretically).

Gee, I'm old, lol!
by chrislloyd | 2026-01-21 05:00:14+00:00
The communication is definitely on me! There honestly wasn't much new to say -I've been slowly ramping early Jan just to be extra sure there's no regressions. The main two perf. issues were:

1. Since we no longer have <Static> components the app re-renders much more frequently with larger component trees. We were seeing unusual GC pauses because of having too much JSX... Better memoization has largely solved that.
2. The new renderer double buffers and blits similar cells between the front and back buffer to reduce memory pressure. However, we were still seeing large GC pauses from that so I ended up converting the screen buffer to packed TypedArrays.
by AndrewKemendo | 2026-01-21 05:00:28+00:00
Median does not assume anything about the distribution which is precisely why I use it. Median allows for us to count max total of one category.

In this case it’s “American Voter” as the category. This is what messes most people up, because they read “American Citizen” but I’m describing only the subset of citizens who successfully vote.

https://www.pewresearch.org/politics/2025/06/26/voting-patte...

Using that number you’ll see what the demographics demonstrate: there are not as many progressive voters as there are “conservative” voters and only 2/3 of eligible voters even cared to vote.

If you zoom out even further and you evaluate which candidates run, then it really does not matter who is voting or not because ultimately who is on the ballot is dictated by a small group of party leaders, who in turn are dictated by whomever has the most money for ad spending.
by simoncion | 2026-01-21 05:01:13+00:00
> At some point you're going to have to find a way to argue that the Cisco PIX was not a security device...

What? It's a firewall that can do NAT. The PIX is clearly a security device. NAT is clearly an address-depletion-mitigation technique.

> Since there's no way for anyone on the Internet to know which machine on the corporate network is using a Class C address at any given time, it's impossible to establish a telnet or FTP session with any particular device.

Right. And you can achieve the exact same effect with a firewall on an edge router or on a host. I get that firewalls might have been much less common thirty-ish years ago and that doing packet filtering might have been pretty novel for many, leading folks to get confused when they encountered a combination firewall+NAT device.
by VirusNewbie | 2026-01-21 05:01:44+00:00
>A person having 200 billion is not spending a big percentage of their wealth nor using it

How is it not being used? Walk me step by step where you think this money 'is'. It really seems like you're not understanding here, or maybe i'm just not understanding, so please go slow, explain EXACTLY where you think the money is and why it's not being used like you say.
by qart | 2026-01-21 05:02:04+00:00
> These are literally murders by Indian nationals on other Indian nationals

They are all in your immigration pipeline or already through it.

> involving Indian government

This is your fantasy. You're playing fast and loose with accusations, just like Carney and Trudeau were while calling it "rules-based international order".

> We want nothing to do with this.

Then stop providing asylum. Stop courting them for votes. Prosecute criminals.

> Crucially - has nothing to do with this post.

Refer to the first line that I quoted.
by analog31 | 2026-01-21 05:02:17+00:00
What was my type of American supposed to have done? This is a sincere question, since I'm racking my brain over it. People debate this with one another constantly. We may have more common cause with you than it might seem on the surface.

Also, what commitments? Since this is a tech centric forum, the easy guess would be breaking the dominance of the US tech industry. I'm a cheerleader for that effort.
by chazeon | 2026-01-21 05:02:50+00:00
My understanding of safety concern around Linux is mainly the security, namely, full disk encryption. Full disk encryption avoid an attacker unplug your harddrive and directly read the data.

While it is possible, it is definitely not easy to setup right, particularly if you want hibernation to disk properly setup. There is certain requirement on the disk layout setup, use LVM, setup TPM, setup bootloader parameters, setup hibernation and wake.... any step is wrong you have to use a boot drive to rescue, and it is very hard to fix if you don't have LVM in the first place. For example, Arch Linux's archinstall won't setup this whole suite for you.

This is really nessary if you are going to take the computer outside and it might get lost stolen. You definitely don't want other people to read the content after it was lost. I think this kind of security is default on Windows / Mac / iOS / Android right now already, but Linux is still so hard.
by tptacek | 2026-01-21 05:02:55+00:00
I'm not sure I can be any clearer about the fact that NAT is both a security feature and an address management feature. I feel like people who weren't practitioners are the time are trying to reason axiomatically that every feature fits into precisely one bucket, or that a security feature isn't a true security feature if it can be replaced by one or more other "cleaner" security features. None of that is true. Practitioners at the time were not confused.

"You can achieve the same effect" doesn't mean anything in this discussion. If that's your argument, you've conceded the debate.
by PlanksVariable | 2026-01-21 05:04:21+00:00
The first message is “don’t open the border.” People don’t want an open border. Not in America, not anywhere else. If there weren’t videos of thousands of people streaming across the border every day during Biden’s presidency, we wouldn’t be dealing with Trump 2.0 today.

Second, don’t announce to the world you’re limiting your VP search to Black women, or any other Constitution-violating hiring criteria. Americans are tired of identity politics. And you’ve done a disservice to your running mate because they’ll be labeled as a “DEI hire” instead of the best person for the job.

Third, don’t nominate an idiot as your running mate.

Fourth, don’t force the idiot running mate on the world as a presidential candidate because you hid the president’s cognitive decline until the last possible moment in a humiliating live TV debate.

I could go on, but you probably get the message.
by verelo | 2026-01-21 05:04:31+00:00
Last march i was at SxSw and the police drones over head were a first for me. I was in this large crowd of people, and thought "yeah i dont like this". How do i know they're not just some bad actors drone with red and blue lights?

I think my exposure to casual discussions of how to arm drones with my Ukrainian friend, and the videos we've all seen on Reddit about drones in Ukraine, have really made their presence feel unwelcome.
by dlcarrier | 2026-01-21 05:05:41+00:00
One of those things that I have trouble mentally placing in the correct time period is the standardization of the cartridges that we still use today. When they were developed, tractors were still using metal tires and blood type testing for transfusions didn't exist yet. Living on the West coast usually meant that you had to be self sufficient. Some of my ancestors at the time lived in Idaho in a hole they dug in the ground, that they put a roof over. They had another similar dugout that they filled with ice blocks during the winter, to sell in the summer for some income. Most of them were sustenance farmers. One of my great grandparents had multiple acres in Van Nuys to grow enough food and raise enough rabbits to live off of. That land would be worth millions now, but back then it was what you needed to get by. Being rich would mean you had nicer clothes and a bigger house and servants and didn't have to grow your own food, but even the rich rarely had electric power, and when they did it was only routed to lamp sockets.
by Nextgrid | 2026-01-21 05:05:52+00:00
Historically phone locking was done at the modem level via an NCK code - if a phone is supplied by a carrier the modem will come pre-locked and will only be unlocked upon entry of an NCK code which the carrier has the secret key to generate (hash(secret+imei)). With this system if the phone is not locked to begin with I am not aware of any way to toggle this mechanism remotely.

With smartphones however, the game has changed. Apple for example no longer locks their modems at all and instead rely on a software-level check as part of the "activation" process (at first boot where it also gets its client certificates/etc to talk to Apple services) - said activation policy can be changed remotely, and Apple are very cagey about their full capabilities. I have read of some vendors selling iPhones that would be unlocked at first but lock themselves to the first carrier they see.

It's unlikely Apple would ever enforce or change an activation policy on a phone purchased directly from them, so you should be safe. But technically, it's up to the phone manufacturer. I am not sure what the Android situation is in comparison.
by defrost | 2026-01-21 05:05:54+00:00
That's just history though, a paucity of human existence committed to script, nothing at all of, say, 70K years of libertarian utopia in post-Sahul, just the tantalising remnants of pre digital Instagram real silicon party posts.

* https://en.wikipedia.org/wiki/Gwion_Gwion_rock_paintings
by d-us-vb | 2026-01-21 05:06:03+00:00
> No, the best thing you can do for simplicity is to not conflate concepts.

This presumes the framework in which one is working. The type of map is and always will be the same as the type of function. This is a simple fact of type theory, so it is worthwhile to ponder the value of providing a language mechanism to coerce one into another.

> This is cleverness over craftsmanship. Keeping data and execution as separate as possible is what leads to simplicity and modularity.

No, this is research and experimentation. Why are you so negative about someone’s thoughtful blog post about the implications of formal type theory?
by alephnerd | 2026-01-21 05:06:25+00:00
Most of the asylum claims came before CY2025, which is when the false asylum crackdown began in Canada [0].

A major issue was the Truduea-era diplomatic spat that led to the expulsion of Canadian [1] and Indian [2] diplomatic staff who cooperated on background checks along with an MP in Punjab who ran a "cash for asylum claim" racket [3].

After Carney became PM and Anand became MFA, the Canada-India relationship went back on track, and Trudeau era appointees were largely sidelined.

[0] - https://indianexpress.com/article/cities/chandigarh/canada-c...

[1] - https://www.canada.ca/en/global-affairs/news/2024/10/ministe...

[2] - https://www.mea.gov.in/press-releases.htm?dtl/38420/India+ex...

[3] - https://theprint.in/ground-reports/punjabi-illegal-migration...
by jasonni | 2026-01-21 05:06:46+00:00
dots.ocr requires requires a considerable amount of computational resources. If you have Mac device with ARM CPU(M series), you can try my dots.ocr.runner(https://github.com/jason-ni/app.dots.ocr.runner).

There is a pipeline solution with multiple small specific models that can run only with CPU: https://github.com/RapidAI/RapidOCR
by tw1984 | 2026-01-21 05:07:06+00:00
> And why did Qualcomm pay all that money for Ventana recently? You do not expect them to release high-end RISC-V chips? I mean, they already ship many low-end ones.

Ventana is an extremely bad example to be used here. It is acquisition price is undisclosed, it could be just some $ for acquiring the team behind it. Secondly, Qualcomm's nuvia acquisition was pretty huge, there is no reason whatsoever to believe the Ventana acquisition is remotely comparable, that proves no one uses RISC-V anyway.
by crystal_revenge | 2026-01-21 05:07:33+00:00
Stable societies fundamentally require increasingly large energy inputs.
What we're seeing happening right now, in a large part, is due to a system whose complexity has exceed the available energy required to sustain it.

The idea that what we're seeing is because "too many people voted for the wrong guy" fails to recognize the larger condition for which all of this is merely emergent phenomena. We no longer have the resources to sustain the society we life in so it begins to uncomfortably revert to lower energy states in ways we haven't seen in a long time.