MurphyA/hacker-news huggingface dataset:
by chao- | 2026-01-02 04:20:39+00:00
That's a fair point. That's why I'm interested to know what is at the core of AlphaSite's complaint.

One challenge, as I see it, is that there are three kinds of Ruby projects that need to take different approaches to the matter, in increasing level of complexity:

(1) Developing a longer-lived, deployed or distributed project. Here you should definitely use both the Gemfile Ruby version and a .ruby-version file. You're normally only targeting one version at a time, but contributors and/or users are very unlikely to somehow accidentally end up using the wrong Ruby version without getting a very obvious notification that they are using the wrong Ruby version. That's annoying to encounter, but not difficult to solve once you know that the concept of a "version manager" exists.

(2) Hacking on your own small project or just banging out a script. You just want to run some Ruby version and get to it. You probably should default to the latest, unless there's some dependency requiring a lower version, and you might not know that until after you've gotten started. The inverse issue might also occur, e.g. you installed Ruby 3.1 a few years ago, you start hacking, and now you want to pull in a gem version that requires Ruby 3.4. You can manage this by putting the Ruby version in your Gemfile, or using a .ruby-version file, or both, but if you're relatively green and just diving in, this might not be on your radar.

(3) Developing a gem. You probably want to test/validate your gem across multiple Ruby versions, and possibly even different versions of your dependencies. You obviously don't want to lock yourself into a single Ruby version, and use of a .ruby-version file is inappropriate. There is tooling to do this, but it takes some learning to be able to utilize.

My belief is that it is worth it for install documentation for category (1) to be a little more explicit about how to get up and running. For category (2), I don't know what the right answer is, but I understand the potential pain points.

What I was most curious about is whether AlphaSite's complaint was with a specific version manager, or the fact that multiple options for version managers exist, or even the need for version managers at all?
by mapontosevenths | 2026-01-02 04:21:56+00:00
Yeah, that's mostly fair, but it kind of misses the point. This is a professional tool for AI R&D. Not something that strives to be the cheapest possible option for the homelab. It's fine to use them in the lab, but that's not who they built it for.

If I wanted to I could go on ebay, buy a bunch of parts, build my own system, install my own OS, compile a bunch of junk, tinker with config files for days, and then fire up an extra generator to cope with the 2-4x higher power requirements. For all that work I might save a couple of grand and will be able to actually do less with it. Or... I could just buy a GB10 device and turn it on.

It comes preconfigured to run headless and use the NVIDIA ecosystem. Mine has literally never had a monitor attached to it. NVIDIA has guides and playbooks, preconfigured docker containers, and documentation to get me up and developing in minutes to hours instead of days or weeks. If it breaks I just factory reset it. On top of that it has the added benefit of 200Gbe QSFP networking that would cost $1,500 on it's own. If I decide I need more oomph and want a cluster I just buy another one and connect them, then copy/paste the instructions from NVIDIA.
by digiown | 2026-01-02 04:23:07+00:00
Being able to snapshot and restore memory is a pretty common feature across all decent hypervisors. That in and of itself enables most client-side cheats. I doubt they'd bother to provide such a hypervisor for the vanishingly small intersection of people who:

- Want to play these adversarial games

- Don't care about compromising control of hypervisor

- Don't simply have a dedicated gaming box
by JackYoustra | 2026-01-02 04:23:12+00:00
I agree that you should evaluate languages in their domains. At the end of the day, Swift is mainly used for systems and iOS apps. In this, it is inadequate, as you can tell by, again, most apps not using the type system to enumerate valid views but instead (because enums and union types more broadly are so clunky to use!) masses of uncoupled types in their views, allowing for many, many implicitly invalid states.
by phil21 | 2026-01-02 04:24:11+00:00
> You shouldn’t be angry with Musk, you should be angry with Trump/Biden (ignore left/right they both let Asia take Battery and chip technology on their watch).

I mean, you should be mad at both. But it started far before either of their presidencies. They just continued or amped up policies that came before them.

Biden might have tried to (weakly) reverse it in his term but it was far too late at that point. You could probably say the same for Trump in his second term if you are being charitable and steelmanning both.

It's not just presidents or even politicians though. It's the entire American corporate system and it even extends down into responsibility from regular citizens. We need wholesale change in how we do business and interact together as a society.

The rot might start from the top, but it certainly extends to the bottom. Think of how the average union UAW worker acted during their peak days vs. how a Chinese line worker acts today. We certainly are capable of doing good work, but not under the current cultural zeitgeist.
by marcyb5st | 2026-01-02 04:24:28+00:00
You can't, but circumventing anti cheats already happens on windows with all their fancy kernel level anti cheats.

I believe the goal is to make it so uncomfortable and painful that 99.999% of the users will say fuck it and they won't do it. In this case users need to boot a custom kernel that they download from the internet which might contain key-loggers and other nasty things. It is not just download a script and execute it.

For cheat developers, instead, this implies doing the modifications to allow those sys-calls to fly under the radar while keeping the system bootable and usable. This might not be trivial.
by chao- | 2026-01-02 04:24:30+00:00
It's also worth nothing that the 128GB of "VRAM" in the GB10 is even less straightforward than just being aware that the memory is shared with the CPU cores. There's a lot of details in memory performance that differ across both the different core types, and the two core clusters:

https://chipsandcheese.com/p/inside-nvidia-gb10s-memory-subs...
by fnordpiglet | 2026-01-02 04:24:47+00:00
To be fair stock price is not a great indicator of much. Sales are down YoY with no prospect of recovery. Stock price has no bearing on current operations unless they raise capital by selling equity. It’s also been the case that Tesla stock price has been disconnected from performance often. The amount of ill will he’s generated among his core market is enormous, and the tailwinds he had with green policy have been replace with significant head winds with an aggressively (and bizarrely) pro-pollution administration based on a retribution model than a technocratic model. This is especially bad for Tesla as musk actively sought retribution so there is no reason to believe this is going to go well for Tesla over the next few years. He dumped all over his customers to curry favor with someone that now hates him and has a history of actively seeking revenge - what a mess.

As an owner of two Tesla and a frequent user of autopilot with FSD, I don’t believe we will be seeing a significant rollout in any but the easiest to travel areas. SF, LA, Seattle or the other places Waymo currently is either running or preparing to operate are much more challenging road environments than Austin, and Waymo is already fully autonomous with years of track record in these areas. There’s no chance robotaxi will overtake Waymo - I use them often, use FSD often. They aren’t comparable - Waymo is considerably more advanced and capable.

Sorry man, I wished Tesla was going to win out, but by shifting focus to ever more bizarre efforts away from their core cars (when’s the last time a real X or S model refresh happened?) they lost the initiative. BYD and the other legion of Chinese EV are going to eat Tesla alive within 5 years. I’ve had the chance to ride in and drive many of the brands overseas and they are a fraction the price and about as good. It’s over.
by inkysigma | 2026-01-02 04:24:53+00:00
It's weird to me that when people talk about Tesla, the business, is doing poorly, the retort is citing the stock price as if that's somehow what the person is talking about and not going to be seen as disconnected from fundamentals by the person you're talking to. So many things were being used to justify the stock price have simply not materialized. For example, the idea that Dojo would be a lasting moat does not appear to be materially true.

As a business, they've seen declining yearly revenues (2025 is expected to be lower overall) and declining sales on a YoY basis in a sector that has seen tremendous growth. The article we're on literally is how Tesla squandered their lead over BYD.

Autopilot and FSD are neat (for some definition of neat) but have clear competitors with Waymo being far ahead in deployment. BYD has their own developing system that's not as good but it's not clear to be that FSD will be some kind of enduring advantage either given that parallel systems are also being developed.
by digiown | 2026-01-02 04:24:57+00:00
Ah, got it. With enough motivation this is still pretty easily defeated though. The key is in some kind of NVRAM, which can be read with specialized equipment, and once it's out, you can use it to spoof signatures on a different machine and cheat as usual. The TPM implementations of a lot of consumer hardware is also rather questionable.

These attestation methods would probably work well enough if you pin a specific key like for a hardened anti-evil-maid setup in a colo, but I doubt it'd work if it trusts a large number of vendor keys by default.
Show HN: Chimera Studio – A browser-based AI asset pipeline
by qq-niklas | 2026-01-02 04:25:43+00:00
Yes, the URL is still qq-pwn. No, it's still not malware.
It is supposed to be a local-first asset generation studio for developers.

The Twist: The code for this AI tool is 100% AI-generated. I am running this as an experiment to see if an LLM can build a complex, `production-grade` utility (local WASM background removal, bulk processing) without human intervention (apart from guidance).

Human feedback on the workflow, UI/UX & generated assets is appreciated!

---
P.S. If you want to see where these assets end up, try annoying the logo on the splash screen (click it 6 times).
by _a9 | 2026-01-02 04:26:19+00:00
I used this a while back while running a waybackmachine style site for a large social media platform. I wanted to keep it simple with sqlite but when it got popular it started to become a problem. Marmot was the only thing that I was able to get to work with the amount of data I was pulling in. It would sync the master db from the main archiver server to all the ha servers so the user would be able to access it immediately no matter what ha server they got. The dev team was nice to talk to when I had some issues in setting it up.

It was definitively a weird backend setup I had made but it just worked once set up so I didnt have to touch any of the frontend code.
by _nub3 | 2026-01-02 04:26:33+00:00
Uh oh! Something went wrong with the previous request.

If you navigated here, it's because the previous request experienced an error. If you are the site owner, you can use the Translate Error String tool to investigate this further. This is located on the control center under:
Hamburger menu > SUPPORT > Edge Diagnostics.

---------

interesting.
by zmgsabst | 2026-01-02 04:27:13+00:00
The US just doesn’t recognize China’s claims to areas (eg, Taiwan or ASEAN sea islands), so doesn’t regard those as Chinese territorial waters in the first place.

The point of US freedom of navigation exercises is to assert free transit of allied and international waters, despite Chinese claims, rather than to transit Chinese territorial waters. US warships generally avoid areas which the US views as Chinese territorial waters.
by avidiax | 2026-01-02 04:27:17+00:00
Did you look into whether the spoofed device can also be "upgraded" to be used as an HID device, like a mouse or keyboard? That upgrade would be several CVEs against the OS vendors.

That would make the attacks potentially silent, since the attacked could simulate keypresses to dismiss notifications, or can at least keep the target unable to respond by spamming home/back or pressing power and simulating a swipe to shutdown.
Show HN: Why the Xbox boot animation Easter egg is (probably) unfindable
by koof | 2026-01-02 04:27:31+00:00
Hi, I've been poking around the past few days trying to figure out an occasionally discussed but yet to be discovered Xbox boot animation Easter egg. I found out some things when digging for answers and thought it was a fun way to spend a couple of days.

Replies on the reddit thread (https://www.reddit.com/r/originalxbox/comments/1q1k9tx/why_t...) seem to suggest this is new information to the OG Xbox community.
by ok123456 | 2026-01-02 04:29:02+00:00
100% agree.

If it's someone else's project, they have full authority to decide what is and isn't an issue. With large enough projects, you're going to have enough bad actors, people who don't read error messages, and just downright crazy people. Throw in people using AI for dubious purposes like CVE inflation, and it's even worse.
by pdpi | 2026-01-02 04:29:17+00:00
There's all the usual "$APPLICATION is a memory hog" complaints, for one.

In the SWE world, dev servers are a luxury that you don't get in most companies, and most people use their laptops as workstations. Depending on your workflow, you might well have a bunch of VMs/containers running.

Even outside of SWE world, people have plenty of use for more than 8GiB of RAM. Large Photoshop documents with loads of layers, a DAW with a bazillion plugins and samples, anything involving 4k video are all workloads that would struggle running on such a small RAM allowance.
by somenameforme | 2026-01-02 04:29:37+00:00
Why do you think this isn't just propaganda? Russia is one of the head states in BRICS which is the largest international union in the world both by population, and which has also economically surpassed the G7 as well. And militarily they're fighting a war against an endless stream of forcibly conscripted bodies being armed and funded by the entirety of NATO, Europe, and a few odd balls -- and they're winning, at a cost of < 10% GDP.
by jjcc | 2026-01-02 04:30:24+00:00
There are two parts of the Zero Covid policy which actually is a continuous one :

1.At the beginning of the pandemic. It was successful in terms of reducing the death count of population but at the cost of freedom that also widely criticized in Western countries.

2.Because of the early success, the government continued the policy even it was not necessary till close to the end of the Covid. This is one of the biggest policy failure in recent Chinese history. It caused resentment and was exploited by anti-government parties, even partially caused the illegal emigrant wave to the States through south border during 2023, which was reported on mainstream media. Finally it ended due to protests.

Dan Wang's observation about China in his book is mostly accurate, except this part that he has some twisted view on CPP, which is not his fault but CPP's fault.
by westurner | 2026-01-02 04:31:25+00:00
Could it also detect changed package files; if there are per-package-file checksums like with `debsums` and `rpm -V`?

Does it check extended filesystem labels with e.g. getfacl for SELinux support?

I've also done this more than a few times and not written a tool.

At least once I've scripted better then regex to convert a configuration file to a Jinja2 templated configuration file (from the current package's default commented config file with the latest options). And then the need is to diff: non-executable and executable guidelines, the package default config (on each platform), and our config.

Sometimes it's better not to re-specify a default config param and value, but only if the defaults are sane on every platform. Cipher lists for example.

P2V (physical to virtual) workflows don't result in auditable system policy like this.

Most of the OS and Userspace packages backed up in full system images (as with typical P2V workflows) are exploitably out of date in weeks or months.

To do immutable upgrades with rollback,
Rpm-ostree distros install the RPM packages atop the latest signed immutable rootfs image, and then layer /etc on top (and mounts in /var which hosts flatpaks and /var/home). It keeps a list of packages to reinstall and it does a smart merge of /etc. Unfortunately etckeeper (which auto-git-commits /etc before and after package upgrades) doesn't yet work with rpm-ostree distros.

Ansible does not yet work with rpm-ostree distros. IIRC the primary challenge is that ansible wants to run each `dnf install` individually and that takes forever with rpm-ostree. It is or is not the same to install one long list of packages individually or to install multiple groups of packages in the same sequence. It should be equivalent if the package install and post-install scripts are idempotent, but is not equivalent if e.g. `useradd` is called without an explicit UID in package scripts which run as roo, too.

I wrote a PR to get structured output (JSON) from `dnf history`, but it was for dnf4.

From https://news.ycombinator.com/item?id=43617363 :

> upgrading the layered firefox RPM without a reboot requires -A/--apply-live (which runs twice) and upgrading the firefox flatpak doesn't require a reboot, but SELinux policies don't apply to flatpaks which run unconfined FWIU.

Does it log a list of running processes and their contexts; with `ps -Z`?

There are also VM-level diff'ing utilities for forensic-level differencing.
by IntelliAvatar | 2026-01-02 04:33:43+00:00
Makes sense, thanks for the clarification.

I mostly worry about the gap between a correct plan and execution-time behavior — especially when tools touch the filesystem or OS APIs. Even a single malformed argument can have irreversible effects.

Totally agree these guardrails are non-trivial, but it’s great to see the project thinking in this direction.
by pdpi | 2026-01-02 04:35:27+00:00
If I'm doing work than involves three different libraries, I'm not reading and committing to memory the whole documentation for each of those libraries. I might well have a few tabs with some of those libraries' source files too. I can easily end up with tens of tabs open as a form of breadcrumb trail for an issue I'm tracking down.

Then there's all the basic stuff — email and calendar are tabs in my browser, not standalone applications. Ditto the the ticket I'm working on.

I think the real issue is that browsers need to some lightweight "sleep" mechanism that sits somewhere between a live tab and just keeping the source in cache.
by BobbyTables2 | 2026-01-02 04:35:46+00:00
HP(E) managed to survive but I wouldn’t say they’re a roaring success.

They went from 300k employees to a small fraction. They went from designing graphics cards in-house to practically rebranding white box servers.

(Yes, they still make their own servers, too much of the design and manufacturing work being done by outside firms).

They’ve also thrown away a mind boggling amount of talent and institutional knowledge of storage and networking.
by xedrac | 2026-01-02 04:36:26+00:00
I tried the latest nightly release AppImage on Fedora 43 and got a nice undefined symbol error:

/usr/lib64/gio/modules/libdconfsettings.so: undefined symbol: g_assertion_message_cmpint
Failed to load module: /usr/lib64/gio/modules/libdconfsettings.so
/usr/lib64/gvfs/libgvfscommon.so: undefined symbol: g_task_set_static_name
Failed to load module: /usr/lib64/gio/modules/libgvfsdbus.so

So I tried out the container version with podman and that worked. I am familiar with Emacs, so some things were natural to me. I like Lem quite a bit. But to really drive with it, I need:

- Solid LSP support
- Project scoped buffer switching/searching
- Great vim keybinding support (this seems to have improved since last I tried lem years ago)
- Tree-sitter support for the languages I care about.

According to the website, LSP support is still a WIP. I didn't want to go through the hassle of testing it out in the docker container. From what I can tell, there is no project scoping for buffers, but I might be wrong.

All in all, a big improvement from a few years ago when I last tried it!
by mrheosuper | 2026-01-02 04:36:53+00:00
Bandwidth is not really a problem if you live in decent city. The problem is latency and data usage. 1 Hour streaming consumes GBs of data, that's a big problem if you use cellular network.

Latency is another problem, recently LTT video show that even as low as 5-10ms added latency can negatively impact your gaming performance, even if you don't notice. You begin to notice at around 20ms.
by billboardbd | 2026-01-02 04:37:48+00:00
Early Exposure and the Internet Era
Before electronic music had a physical presence in Bangladesh, it existed almost entirely online. In the early 2000s, global electronic sounds reached local listeners through internet forums, pirated CDs, radio recordings, and early file-sharing platforms. Trance, techno, house, and ambient music circulated among students and hobbyists who were discovering artists like Daft Punk, Tiësto, Deadmau5, and later underground European producers.

There were no dedicated venues or events at the time. Electronic music was largely a private experience — headphones, bedrooms, and personal computers becoming the first studios and dance floors.

The Rise of Bedroom Producers
By the late 2000s and early 2010s, affordable software and cracked digital audio workstations changed everything. A new generation of Bangladeshi producers began creating music at home using laptops, MIDI keyboards, and basic headphones. These artists were self-taught, learning through YouTube tutorials and online communities.

Most early Bangladeshi electronic releases came in the form of remixes, bootlegs, and experimental originals uploaded to SoundCloud and YouTube. Genres ranged widely — progressive house, trance, dubstep, electro house, and later deep house and melodic techno. There was no clear industry path, but there was momentum.

First Events and Informal Dance Spaces
As online communities grew, small physical gatherings followed. Early electronic events were informal and often short-lived — private house parties, rooftop sessions, café pop-ups, and closed-door DJ nights. These were not commercial ventures, but community experiments.

The lack of infrastructure forced creativity. DJs played on borrowed equipment, promoters relied on word of mouth, and audiences were small but deeply invested. These early events laid the foundation for a scene built on trust and shared taste rather than scale.

The Underground Takes Shape
By the mid-2010s, Bangladesh’s electronic culture began to form an identifiable underground. DJs and producers started focusing less on mainstream EDM trends and more on house, techno, deep, melodic, and experimental sounds. Collective identities emerged, along with recurring party concepts and independent crews.

This period defined the culture’s values: independence, minimalism, long sets, and atmosphere over spectacle. The underground did not chase visibility — it focused on building a consistent sound and a loyal community.
by blobbers | 2026-01-02 04:38:15+00:00
Went through all the rigamarole of texts and verifications and backup codes and was met with a:

This auth.cdt.ca.gov page can’t be found

--
blank page from Chrome.

Imagine that, a government website that's broken. Wait, and I just put in all my personally identifiable info. Grrrrrreat.