MurphyA/hacker-news huggingface dataset:
by kristopolous | 2026-02-21 11:13:33+00:00
Check out zoom.earth, found it recently. They have an app too.

https://zoom.earth/

Apparently it's by https://neave.com/ who looks like an indy developer out of london (according to this: https://neave.com/legal/privacy/)

Also check https://earth.nullschool.net/ by https://github.com/cambecc
by embedding-shape | 2026-02-21 11:13:43+00:00
I think it's slightly unbelievable to us who grew up in secular societies where being agnostic/atheistic/non-practing-believer is fairly common and not so out of the ordinary. Then we start hearing about the experiences in christian-nationalistic countries and how it is growing up there, and it's just very different from what you expect from a modern country.

I'm guessing Aeolun might be from one of those places/countries/states :)
by roryirvine | 2026-02-21 11:15:46+00:00
It would be worth looking at how other countries with comparable legal systems do it.

Eg., members of the Supreme Court of the UK are appointed by the King on the advice of the Prime Minister. The Prime Minister is required by law to recommend the person nominated by an independent commission.

The selection must be made on merit, in accordance with the qualification criteria of section 25 of the Act, of someone not a member of the commission, ensuring that the judges will have between them knowledge and experience of all three of the UK's distinct legal systems, having regard to any guidance given by the Lord Chancellor, and of one person only.

https://en.wikipedia.org/wiki/Justice_of_the_Supreme_Court_o...

This seems to work fairly well and, although specific decisions are argued over as part of normal political discourse, it is generally seen as being non-partisan.

Ireland (which also has a common law legal system) has a similar setup, with the President appointing supreme court justices based on the recommendation of the government who, in turn, are advised by an independent panel. That advice is technically not legally binding, so this is in theory a less-strictly non-partisan system - but in practice it works out about the same.
by arccy | 2026-02-21 11:16:07+00:00
If you don't want to bother with directories or want to use https instead of ssh, you can do remote url based dispatch in your gitconfig:

[credential "https://github.com/org1"]
useHttpPath = true
helper =
helper = /path/to/auth.sh user1
[includeIf "hasconfig:remote.*.url:https//github.com/org1/**"]
path = user1.gitconfig
; set name / email in user1.gitconfig

where auth.sh is something that can produce the right token for the given user, e.g.

#!/bin/bash
echo "username=$1"
echo "password=$(gh auth token --user $1)"
by einpoklum | 2026-02-21 11:16:38+00:00
> I miss the days of that first google device where I could just pop the back and replace the battery,

1. That's not a "Google device", you mean a smartphone.

2. For a large fraction of the smartphones available today (probably also Google Pixel's), you can still pop the back and replace the battery. The popping may be a bit more complicated, but it's doable. Naturally there's a tradeoff between convenient ergonomics for battery replacement and smaller dimensions of the phone case.
by mstaoru | 2026-02-21 11:16:40+00:00
I guess it says something about OAuth when you implement it "at scale" and still have multiple misconceptions (all very common though).

Most importantly, OAuth is an authorization framework, OIDC is an authentication extension built on top.

Refresh tokens are part of authorization, not authentication.

HTTP header is Authorization: Bearer..., not Authentication.

There's no such thing as "HMAC encryption", it's a message authentication code. RSA in OAuth is also typically used for signing, not encryption. Not much "encryption" encryption going on in OAuth overall TBH.

Nonce and client IDs are not "salts", but ok that's nitpicking :)
by densh | 2026-02-21 11:16:43+00:00
Apart from prioritizing FFI (like Java/Scala, Erlang/Elixir), the other two easy ways to bootstrap an integration of a new obscure or relatively new programming language is to focus on RPC (ffi through network) or file input-output (parse and produce well known file formats to integrate with other tools at Bash level).

I find it very surprising that nobody tried to make something like gRPC as an interop story for a new language, with an easy way to write impure "extensions" in other languages and let your pure/formal/dependently typed language implement the rest purely through immutable message passing over gRPC boundary. Want file i/o? Implement gRPC endpoint in Go, and let your language send read/write messages to it without having to deal with antiquated and memory unsafe Posix layer.
by roysting | 2026-02-21 11:17:15+00:00
Who do you think those people are that are incarcerated in the USA?

I come across this rather frequently among people from sheltered backgrounds like those who graduated from mom and dad taking care of them, all the way through to Mega Corp/university taking care of them, and absolutely cannot fathom why everyone doesn’t just eat cake.

I have a working theory that this effect, whatever one wants to call it, of people being too abstracted from reality, is ultimately the source of collapse of all kinds of organizations of humans… including civilizations.

It is, for example also why America can have so many vile warmongering people, because not only do they not have to lead troops into battle, have their children drafted into the front lines, or pay for the invariable disaster and murder they perpetrated and orchestrated; but in the most grotesque way, they profit from it and immensely; usually also combining it with other types of fraud like “money printing”, i.e., counterfeiting, which they use to plunder the wealth they accumulated through murder, mayhem, and fraud.
by Chris_Newton | 2026-02-21 11:17:31+00:00
Sorry, I don’t understand the point you’re making. If CodeQL reports that you have a XSS vulnerability in your code, and its report includes the complete and specific code path that creates that vulnerability, how is Rice’s theorem applicable here? We’re not talking about decidability of some semantic property in the general case; we’re talking about a specific claim about specific code that is demonstrably true.
by BoredomIsFun | 2026-02-21 11:18:05+00:00
> C in C++ is a pretty terrible experience

No I think, it the other way around, a fantastic experience; yes, you miss certain features of C, but instead you get massive benefits of C++ - above-mentioned defer, that'd work on any moderrn C++ compiler, constexpr's, a strategic use of STL while prototyping, templates etc.

> C++ doesn't let you implicitly cast from void* to other pointer types

It does, but that is not a good thing IMO anyway.

> Plenty of C APIs are really not very ergonomic when string literals aren't 'char '.

Examples? In my experience most C libraries have const char in their signatures whenever it makes sense.

> C is a much better C than C++ is.

Nonsense.
by lapcat | 2026-02-21 11:18:13+00:00
There's nothing I hate more about new Apple MacBook Pros than the batteries that I can't replace myself. It's such an ordeal go get an aging battery replaced, and I tend to go through them within a few years, due to high usage. Nowadays Apple appears to be demanding that you mail the laptop to them, instead of allowing same-day replacement, which I've done in the past.

I loved my 2006 17-inch MacBook Pro, when I could simply flip the laptop over, unlatch the latches, and replace the battery entirely within seconds. It's an total shame we lost that. You could even carry an extra battery with you in a bag when traveling, in case you didn't have access to a charger.
by embedding-shape | 2026-02-21 11:18:31+00:00
> that the country has values

As I've never said "The Pledge of Allegiance", this seems to be the original one, I'm guessing there might be some other modern variation schools use today, but anyways:

> I pledge allegiance to my Flag and the Republic for which it stands, one nation, indivisible, with liberty and justice for all.

I wouldn't be surprised that most people see it as a joke today, given the "with liberty and justice for all" is far from reality today, and it's very obvious to anyone.

> I don't know if other countries have pledges like this but on the surface it seems OK to me

Generally not, AFAIK. On the surface it seems like blatant propaganda to me, and kind of extremist, something you'd see not in a modern country typically.
by me4502 | 2026-02-21 11:19:13+00:00
I'm not very familiar with men's fashion so I might be wrong. My understanding is that a lot of the time, size is _not_ about how tall most tops are, it's about how much horizontal space it has.

As a 5'10" woman, I do find it oddly convenient a lot of the time as that's seemingly the height of 99% of models, however everyone has different body proportions so it doesn't end up being a super useful metric.

Leg to body ratio can differ greatly, and when buying tops you can really only compare the fit with people who have a similar torso length than you. No clothing site is going to start listing individual measurements of their models like that, so it'll always be a vague guide.

I actually spoke to someone a few years ago who worked in marketing at a US clothing manufacturer (I'm Australian so not sure how well it applies to my own experiences), but apparently many stores are trying to encourage a small portion of returns of online orders because many people end up buying more items in the process.

My personal theory here, is that sites are just trying to let people know that a model is wearing their clothes. It's not to help gauge sizing, it's to let you know that person is _really_ a model. Models are often tall and slender, so they want you to know that tall and slender people look good in their clothes. The effect of "If an attractive model would wear this clothing, you can look like a model by doing it too!"
by H8crilA | 2026-02-21 11:19:56+00:00
This may be a good place to exchange some security ideas. I've configured my OpenClaw in a Proxmox VM, firewalled it off of my home network so that it can only talk to the open Internet, and don't store any credentials that aren't necessary. Pretty much only the needed API keys and Signal linked device credentials. The models that can run locally do run locally, for example Whisper for voice messages or embeddings models for semantic search.
by 2b3a51 | 2026-02-21 11:23:26+00:00
Well 'ancient' to me in the context of computer interaction means punched cards (mechanical punches!) and a card reader, upper case only, so these terms are relative I suppose.

I think this is a matter of choice and it is nice that there are choices. As other posters in this little sub-tree have suggested, there are people who value continuity over a period of time.
by mrweasel | 2026-02-21 11:23:57+00:00
Even if something is AI generated the author, and the editor, should at least attempt to read back the article. English isn't my native language, so that obviously plays in, but very frequently I find that articles I struggle to read are AI generated, they certainly have that AI feel.

It would be interesting to run the numbers, but I get the feeling that AI generated articles may have a higher LIX number. Authors are then less inclined to "fix" the text, because longer word makes them seem smarter.
by syene | 2026-02-21 11:24:46+00:00
Keyboards of early MIT systems[1] and Lisp Machines[2] had brackets (parentheses) and square brackets on the same key where square brackets and curly brackets are on modern keyboards.

1: http://xahlee.info/kbd/sail_keyboard.html

2: http://xahlee.info/kbd/space-cadet_keyboard.html
by trymas | 2026-02-21 11:26:25+00:00
Though OC also said:

> Another point: I tried very hard to fix this at one point. I went through instagram and hit like on nothing but pottery and parenting videos. For about a week I had a feed that looked like my wife's -- pottery and parenting. And then it reverted.

So I guess it depends how active you are? My speculation would be (that would match the article) - if facebook figures out you’re a man, but you don’t actively like and engage with specific topics - it will default to AI thirst trap slop.
by habinero | 2026-02-21 11:26:55+00:00
I know exactly what I'm talking about, I'm a security engineer lol. Who has worked with plenty of lawyers.

Yes, this is absolutely illegal. The CFAA is pretty fuzzy when it comes to vuln reporting but accessing other people's accounts without their permission is a line you don't cross. Having a badly secured site is usually not a crime, but hacking one is.

Several jobs ago, some dumbass tested a bunch of API keys that people had accidentally committed on github and then "reported" the vulnerability to us.

The in-house atty I was working with was furious and the guy narrowly avoided legal trouble. If he'd just emailed us about it, we'd've given him something.

Also, whistleblower laws are for employees, not randos doing dumb shit online.
by burnt-resistor | 2026-02-21 11:27:04+00:00
Fuck right off, Colorado and every "think of the children" surveillance state and mass privacy invasion supporter.

Or anyone demanding cloud AI DRM for 3D printers and CNC machines.

Flock cameras and Ring Search Party too.

Certain potential capabilities are simply too dangerous to be given to any company, any government, or any person for any reason. Remember PRISM?

These are illiberal assaults on personal freedoms and privacy that must be vigorously and completely resisted just like when the Clipper chip was thoroughly trounced.
by jimnotgym | 2026-02-21 11:27:25+00:00
In the UK these cameras are everywhere.

We have (a relatively recent phenomenon) elected Police and Crime Commissioners. They are elected with a tiny turnout. Next election in your area see if a candidate is anti-surveillance and run a campaign to support them. 10,000 extra votes to any of the mainstream candidates will get them elected.

Another addition to this thread of things that will never happen.
by embedding-shape | 2026-02-21 11:27:31+00:00
To be fair, the alternative is them having to maintain and continuously check N services that various devs deployed because it felt appropriate in the moment, and then there is a 50/50 chance the service will just sit there unused and introduce new vulnerability vectors.

I do know the feeling you're talking about though, and probably a better balance is somewhere in the middle. Just wanted to add that the solution probably isn't "Let devs deploy their own services without review", just as the solution probably also isn't "Stop devs for 6 months to deploy services they need".
by revolvingthrow | 2026-02-21 11:28:15+00:00
I wish the excel clones were better. LibreOffice’s UI is extremely dated imo, to the point it doesn’t even let you make a damn table, but at least what’s there works correctly.
OnlyOffice is not only missing some pretty basic functionality such as preferences (???), it also inexplicably deleted a single spreadsheet out of a multi-sheet file on two occasions on macOS and generally has some peculiar functionality and ux here and there.
by ChrisMarshallNY | 2026-02-21 11:28:34+00:00
I’m big on increasing accountability and responsibility for software engineering, but I’ve learned about SEI CMMI, and worked in an ISO 9001 shop.

In some cases, these types of structures make sense, but in most others, they are way overkill.

It’s a conundrum. One of the reasons for the crazy growth of software, is the extreme flexibility and velocity of development, so slamming the brakes on that, would have enormous financial consequences in the industry (so … good luck with that …).

But that flexibility and velocity is also a big reason for the jurassic-scale disasters that are a regular feature of our profession. It’s entirely possible for people that are completely unqualified, to develop software full of holes. If they can put enough lipstick on it, it can become quite popular, with undesirable consequences.

I don’t think that the answer is some structured standard and testing regime, but I would love to see improvement.

Just not sure what that looks like.
by SteveJS | 2026-02-21 11:29:23+00:00
I am using lean as part of the prd.md description handed to a coding agent. The definitions in lean compile and mean exactly what I want them to say. The implementation i want to build is in rust.

HOWEVER … I hit something i now call a McLuhen vortex error: “When a tool, language, or abstraction smuggles in an implied purpose at odds with your intended goal.”

Using Lean implies to the coding agent ‘proven’ is a pervasive goal.

I want to use lean to be more articulate about the goal. Instead using lean smuggled in a difficult to remove implicit requirement that everything everywhere must be proven.

This was obvious because the definitions i made in lean imply the exact opposite of everything needs to be proven. When i use morphism i mean anything that is a morphism not only things proven to be morphisms.

A coding agent driven by an llm needs a huge amount of structure to use what the math says rather than take on the implications that because it is using a proof system therefore everything everywhere is better if proven.

The initial way i used lean poisoned the satisficing structure that unfolds during a coding pass.
by Chris_Newton | 2026-02-21 11:29:57+00:00
CodeQL seems to raise too many false-positives in my experience.

I’d be interested in what kinds of false positives you’ve seen it produce. The functionality in CodeQL that I have found useful tends to accompany each reported vulnerability with a specific code path that demonstrates how the vulnerability arises. While we might still decide there is no risk in practice for other reasons, I don’t recall ever seeing it make a claim like this that was incorrect from a technical perspective. Maybe some of the other types of checks it performs are more susceptible to false positives and I just happen not to have run into those so much in the projects I’ve worked on.
by Symbiote | 2026-02-21 11:30:42+00:00
I bought the OpenScan Mini kit for €170 a few years ago, mostly just to play with it. I've tried scanning things like

- flowers

- dead beetles

- model soldiers / Warhammer

- board game components

The examples are all better than I've achieved, and I could probably improve, but it's a fairly slow process, and difficult to know what to do to get better results. The Openscan Classic has a static model and the camera moves around, which would reduce vibrations and probably helps. Maybe using a professional camera would help too.

If the target isn't naturally 'rough' like a flower or stone, you need to add dots so the photogrammetry has something to align upon. I bought a professional scanning spray, which makes white dots which sublime after a while, but unfortunately it sublimes far too quickly — before the scan is completed. It's probably intended for use in an unheated workshop (e.g. scan a car for designing one of those wrap-around plastic banners).

I got the best results airbrushing white/black paint onto the Warhammer figure, but that's only acceptable if it's not yet been painted.

The kit itself is a bit janky, though mine is 3 years old now. I think the photogrammetry service is the most important part, and you should note it's not open source. When you purchase the kit you get a decent amount of credit to use the service, and can buy more credit as required. I quickly gave up trying to set up open source photogrammetry software, as so far I haven't needed to top-up the credit anyway.
by me4502 | 2026-02-21 11:31:41+00:00
I feel this issue has started to slowly become worse and worse as we've been able to build better "preference profiles" based on small amounts of data. I notice it often when watching a single YouTube video in incognito mode, the sidebar is usually full of fairly racist Australian content (I am Australian). This is something I would never normally see, and not something that's likely coming from whatever video I've decided to watch in incognito. It's likely just assuming based on what's a common trend in my location.

If an algorithm knows you well, it's usually pretty okay, but until that point you're being bombarded with lowest common denominator content based on your demographic. Shorts seems to be even worse; mine is mostly science facts and comedy skits, I didn't understand the "brainrot" descriptions until I looked at a few in incognito mode.
by MadxX79 | 2026-02-21 11:32:21+00:00
If I worked in a European intelligence agency, and considering how the the official US security policy revolves around bringing about regime change in Europe in support of far right extremist parties, and how supportive the tech company leadership seems to be of those goals, I would probably think that locking that very real existential threat to their democracies out would be a worthwhile tradeoff.
by mytailorisrich | 2026-02-21 11:32:24+00:00
Re. mobile phones it is because it allows sleeker and thinner design, and IMHO it wasn't that common to replace batteries, anyway.

But, really this is a non-issue because if you need a new battery for you phone, including iphone and samsung, just get it replaced. That's not super common to need it (again) but there is no issue having it done. I had it done before.

So overall I am skeptical that it will make a difference or that people will keep devices like phones longer because of this new mandate. I also doubt that the EU Parliament has data on this because many of those new regulations seem very hand-wavy to me and usually presented as obvious.
by Edop3 | 2026-02-21 11:32:47+00:00
IANAL but this is exactly it. They weren't being cartoonishly evil—they were in catastrophic liability mode and the blogger's specific choices forced them to show their hand.

The second you CC CSIRT Malta, you've triggered the 72-hour GDPR Article 33 clock with the Data Protection Commissioner. That's why they complained about "additional complexities"—they couldn't treat this as a theoretical bug anymore. They had 72 hours to either report a confirmed breach (€20M exposure) or silence the witness. They chose door number two.

And that 30-day deadline? To a non-technical GC, "fix this in 30 days or I go public" reads like extortion, not standard disclosure. As that Mustafabei comment noted, that's actionable language in many EU jurisdictions. They genuinely thought they were being shaken down, hence the immediate lawyer deployment.

The self-own is what gets me. Their strategy was rational—silence the guy, claim no "confirmed" breach occurred, avoid Article 34 notifications—but the execution turned a fixable IDOR bug into written evidence of witness intimidation. They managed to validate every suspicion that DAN (let's be real, it's DAN Europe) cares more about covering asses than protecting diver data.

The irony is if he'd skipped the CSIRT CC and just sent a casual "hey, noticed your student IDs look sequential, maybe check your auth?" they'd have fixed it quietly, never notified users, and learned absolutely nothing. Instead we got this mess. Better for the community, worse for his stress levels.
by onion2k | 2026-02-21 11:33:57+00:00
Trust is not objective. It's built between parties over time by looking at actions and the results of those actions. In other words, it's entirely subjective based on what's happened between the parties involved. You haven't built that trust with AI agents, or the agents have done things to lose that trust (assuming you've tried), but others have. You can't just dismiss their experience as invalid compared to your own.
by hdgvhicv | 2026-02-21 11:34:40+00:00
PCCs are being scrapped and their role reverted to national government

https://www.bbc.co.uk/news/articles/c93d4dd3l3lo

Party because people haven’t got a clue what they do, partly as they have very little power, and party as it’s just a popularity vote on the rosette.

Personally I’m more worried about ring door bells, but I’ve spent years being told I’m paranoid.