MurphyA/hacker-news huggingface dataset:
by turbert | 2026-03-03 02:24:24+00:00
from a quick skim, it looks like the underlying bug is just not handling object resurrection[1] at all (FreeMe adds a reference to $array while its destructor is called).

I'm not really familiar with PHP but this seems like a surprising oversight for a popular language. Does PHP just not care about memory corruption? The fact that it is this easy is far more surprising than it being used to circumvent a questionable security feature.

[1] https://en.wikipedia.org/wiki/Object_resurrection
by bigyabai | 2026-03-03 02:24:26+00:00
Part of it has to be owed to how tactically potent drone swarms are, as a means of asymmetric conflict. Even the best layered defensed are limited by magazine depth, whereas attack drones can be sent in theoretically unlimited waves.

In practice, this was seemingly validated by the 2002 Millennium Challenge controversy: https://en.wikipedia.org/wiki/Millennium_Challenge_2002#Exer...
by jjmarr | 2026-03-03 02:24:35+00:00
It's definitely a resume number I calculated as a junior engineer. Feel free to give feedback on my math.

It is based on $125/hr and it assumes review time is inversely proportional to number of review hours.

Then time to merge can be modelled as

T_total = T_fixed + T_review

where fixed time is stuff like CI. For the sake of this T_fixed = T_review i.e. 50% of time is spent in review. (If 100% of time is spent in review it's more like $800k so I'm being optimistic)

T_review is proportional to 1/(review hours).

We know the T_total has been reduced by 23.4% in an A/B test, roughly, due to this AI tool, so I calculate how much equivalent human reviewer time would've been needed to get the same result under the above assumptions. This creates the following system of equations:

T_total_new = T_fixed + T_review_new

T_total_new = T_total * (1 - r)

where r = 23.4%. This simplifies to:

T_review_new = T_review - r * T_total

since T_review / T_review_new = capacity_new / capacity_old (because inverse proportionality assumption). Call this capacity ratio `d`. Then d simplifies to:

d = 1/(1 - r/(T_review/T_total))

T_review/T_total is % of total review time spent on PR, so we call that `a` and get the expression:

d = 1 / (1 - r/a)

Then at 50% of total time spent on review a=0.5 and r = 0.234 as stated. Then capacity ratio is calculated at:

d ≈ 1.8797

Likewise, we have like 40 reviewers devoting 20% of a 40 hr workweek giving us 320 hours. Multiply by original d and get roughly 281.504 hours of additional time or $31588/week which over 52 weeks is little over $1.8 million/year.

Ofc I think we cost more than $125 once you consider health insurance and all that, likewise our reviewers are probably not doing 20% of their time consistently, but all of those would make my dollar value higher.

The most optimistic assumption I made is 50% of time spent on review.
by mattnewton | 2026-03-03 02:24:41+00:00
I’ve also changed my mind because of HN and other technical forum discussions. I brought up the counter example at the workplace because it is a case the article mentions without argument.

I think it’s ridiculous to pretend there isn’t massive overlap between political discussion and tech. Obviously there can be too much of a thing, obviously there are uncurious partisans, but I don’t think that is particularly different from the other kinds of flame wars HN guidelines already discourage.
by jlongo78 | 2026-03-03 02:24:54+00:00
The timeout issue sounds like it's probably a proxy buffer or keepalive setting. If you're running nginx, bumping proxy_read_timeout and enabling chunked transfer helps a lot for long-running streams. SSE or websockets can also help surface partial progress rather than making users wait for a full refresh. Good call prioritizing the agent workflow - that's usually where the real friction lives once persistence is solid.
by pibaker | 2026-03-03 02:25:12+00:00
Even in an environment where filming (with phones) is common and acceptable, smart glasses can still come off as rude because others find it hard tell if you are recording or not.

To record a video on your phone you need to hold your phone up pointed at the other person, usually not in the same way you would normally use a phone. If you see someone holding his phone steady at face level and pointing at something without making finger movements, you know he is filming. If someone is pointing his phone down towards the ground and scrolling around with his thumb, you know he is probably not.

To record from a pair of smart glasses you just need to look at someone, as you would normally look at any other thing. Yes there will be an LED on, but the person being recorded probably couldn't see it if it is in a bright, busy environment and you are more than a few steps away, plus there will be aftermarket modifications to disable the LED. In short, there is no way you can reliably tell if someone's smart glasses are filming you. You have to assume that worst.
by novusteck | 2026-03-03 02:25:12+00:00
Location: Peru (UTC -5)
Remote: Yes
Willing to relocate: Yes
Technologies: PHP 8, MySQL, HTML, CSS, JavaScript, Tailwind, Go, NodeJS, Bootstrap 5, HTMX, AI integrations, Javascript.
GitHub: https://michaelfabing.com
Full-stack PHP developer focused on AI-powered web applications. I build and maintain scalable platforms end-to-end — from server infrastructure to modern frontend and AI integration.
Currently developing multiple AI-driven products (Cymbiose.ai, Shiftly.cloud, CureStatus.ai and more). Open to remote freelance or long-term collaboration.
by juleiie | 2026-03-03 02:25:18+00:00
This is trolling at best. If you touch a wrong person, you will not live to tell the tale. People aren’t some NPC in a video game my friend. This isn’t a movie.

Even I, average looking girl, walk with a knife everywhere and I am trained how to use it to kill, it’s muscle memory. In US, a lot of people stroll around with guns.
by 0xbadcafebee | 2026-03-03 02:25:36+00:00
The point is not to write python scripts at all. You just tell it to do something and it does it, no programming. It comes with tools the AI can use. https://zclaw.dev/use-cases.html

(you can write MicroPython for an ESP32, but that's not what this project is for)
by fc417fc802 | 2026-03-03 02:25:49+00:00
> 92.6 percent of prosecutors’ offices in jurisdictions with body cameras have used that footage as evidence to prosecute civilians

I'd suggest browsing body cam footage on youtube for a bit. If you see the sort of stuff being prosecuted it might not bother you.

If it hasn't reduced police use of force or misconduct (I find this claim questionable) I think that's unfortunate but regardless it's important to implement systems that document that to the greatest extent possible. If we do that today then maybe it can be reduced tomorrow.
by hmaxdml | 2026-03-03 02:26:00+00:00
I notice you didn't provide any specific comparison alongside that comment, which makes me feel frustrated because I think the Temporal workflow SDK is very different. Architecturally, Temporal and DBOS are at two opposites of the durable execution spectrum. I'd love to understand what makes you think this work is a mere copy and paste. Would you be willing to share some more with me?
by mmooss | 2026-03-03 02:26:01+00:00
> I just don't see a world where that doesn't happen with Meta glasses.

People widely accept mass surveilance and facial recognition, including by doorbells, phones, cameras on the street, etc. They post images and videos online to corporations that perform facial recognition. They accept government collecting data broadly by facial recognition.

People accept all sorts of horrors and nonsense, unrelated to and many times much worse than privacy violations, because (I think) they are normalized on social media, which is controlled editorially by Zuckerberg, Musk, Ellison, etc.

I'm not saying we're doomed. I'm saying nobody else will save us. We have to make it happen.
by tomxor | 2026-03-03 02:26:03+00:00
> I cannot think of a technology more diametric to 'plug n play' than VR, which is very unfortunate.

Ironically that's exactly what the Quest solved with SLAM, it really is plug and play, otherwise I would not have bought one... and it sucks that Meta now owns it, but it really is still the best "just works" VR.

I also don't think VR has much potential to solve real world problems for enough people, but it doesn't have to because it's pretty good entertainment as a gaming device (albeit still fairly niche).
by synthesis5x | 2026-03-03 02:26:05+00:00
Addressing the question of what uRPF has to do with this: it’s possible—unlikely, but possible—that Meta hasn’t been able to find the issue because while it looks like a faulty interface within a bundle (and it probably is), it could also be that an internal route has uRPF accidentally enabled and is receiving asymmetric traffic, causing it to drop packets on that path. It’s a possibility, but only Meta would know for sure. I included it in the title to give them a lead; it can really only be one of two things: uRPF on an interface participating in an ECMP, or an interface dropping packets at the hardware level within a bundle
by rishabh16 | 2026-03-03 02:26:36+00:00
Location: India

Remote: Yes

Willing to relocate: Yes

Technologies: Product Management, GTM Engineering, Growth Marketing (e-commerce, marketplace, fintech, saas)

Résumé/CV: https://docs.google.com/document/d/1920g_elqcSAYFKSHnS3-vkw4...

Email: rishunk16@gmail.com

LinkedIn: https://www.linkedin.com/in/rishabh16/

Open to full-time, part-time, and contract opportunities. Reach out to rishabh@roasexpert.com
by abraxas | 2026-03-03 02:26:42+00:00
Meh at best. Even in ideal conditions say, skiing in the Alps on a -5C sunny day feels like a bit of a chore. When I'm out there I sorta, kinda can convince myself that I like doing it but the chore of getting the gear packed, lining up for lift tickets, changing into the clumsy gear and all that other ceremony makes it on balance, not worth it. Same goes for all other outdoorsy stuff.
Show HN: Giggles – A batteries-included React framework for TUIs
by ajz317 | 2026-03-03 02:26:44+00:00
i built a framework that handles focus and input routing automatically for you -- something born out of the things that ink leaves to you, and inspired by charmbracelet's bubbletea

- hierarchical focus and input routing: the hard part of terminal UIs, solved. define focus regions with useFocusScope, compose them freely -- a text input inside a list inside a panel just works. each component owns its keys; unhandled keypresses bubble up to the right parent automatically. no global handler like useInput, no coordination code

- 15 UI components: Select, TextInput, Autocomplete, Markdown, Modal, Viewport, CodeBlock (with diff support), VirtualList, CommandPalette, and more. sensible defaults, render props for full customization

- terminal process control: spawn processes and stream output into your TUI with hooks like useSpawn and useShellOut; hand off to vim, less, or any external program and reclaim control cleanly when they exit

- screen navigation, a keybinding registry (expose a ? help menu for free), and theming included

- react 19 compatible!

docs and live interactive demos in your browser: https://giggles.zzzzion.com

quick start: npx create-giggles-app
by adamtaylor_13 | 2026-03-03 02:28:20+00:00
Man, I'm sorry to hear that. It's definitely a rough market out there right now and unfortunately my answer won't be helpful: it's my brother.

I wanted to help him transition into a new industry and had the capital and time to let him get up to speed.

That being said, perhaps there is a nugget there: networking with people you know is always, always, 1000% always more effective than firing CVs off. Not to say CVs don't work, but I hired my brother despite it not being in MY best interest. That's the power of relationships.
by bronco21016 | 2026-03-03 02:28:33+00:00
When someone is able to put something like this together on their own it leaves me feeling infuriated that we can’t have nice things on consumer hardware.

At a minimum Siri, Alexa, and Google Home should at least have a path to plugin a tool like this. Instead I’m hacking together conversation loops in iOS Shortcuts to make something like this style of interaction with significantly worse UX.
by alwa | 2026-03-03 02:28:41+00:00
And yet, the New York Times reports that all the hottest clubs are banning phones on the dance floor. Perhaps in reaction to having lived the downsides of omnipresent social surveillance, the youngest adults in my life are uniformly sober about the perils of oversharing.

Then again, there may be some selection bias at play…

https://www.nytimes.com/2025/11/21/nyregion/nyc-nightlife-no...
by jbverschoor | 2026-03-03 02:29:30+00:00
Countless of issues are not being resolved. I stopped submitting detailed and reproducible bug reports a while ago.

I basically don’t care anymore. Timeline consistently pinkscreens my laptop.

I just don’t give a f anymore. I barely run any Apple software on my Mac.

The only reason I stop use it, is because I have not spent the energy into researching:

- performant + long battery laptop with a good build quality

- disk encryption + while on X attempts

- good trackpad

The rest, the os, the shortcuts, I can change or adapt.
by Bender | 2026-03-03 02:29:34+00:00
Israel, United States, United Kingdom, China and Russia have HEL high-energy lasers that can shoot down fast drones. Several other countries are working on HEL development. The numbers of operational HEL systems are still very small but growing. I believe that Israel have the most of them in operation today developed primarily by Rafael Advanced Defense Systems. 10kw to 50kw on trucks, 100kw ground based. Range: 7-10km, shorter in fog or rain. Dwell time: 4 to 5 seconds. Cost per shot: $2–$3.50.

Targets: UAVs/drones (including swarms), short-range rockets (Qassam-style), mortars, artillery shells, cruise missiles, and potentially other low/slow-flying threats. It excels against cheap, high-volume threats where kinetic interceptors are uneconomical.

The US is working on a megawatt version that will be mounted on ships to take down full sized aircraft, hyper-sonic weapons and ballistic missiles. Timeline: 2030. Even at 30-50 kW (e.g., the earlier AN/SEQ-3 LaWS on USS Ponce), lasers can target helicopters or manned aircraft to cause crashes by frying sensors or engines. Scaling to hundreds of kW extends range and lethality against faster, larger aircraft.
by juleiie | 2026-03-03 02:29:42+00:00
Exactly, not only you agree to any sort of harm (potentially fatal) in return by any sort of weapons that person has you can’t see, they can just do nothing and record you and you have problems with police and serve short sentence even.

This is all children talk here. Seriously people stop being so edgy on the internet and what you wouldn’t do. Use your god damn brain
by Telaneo | 2026-03-03 02:30:36+00:00
> Yes you will if you think most communication personally or even work related is happening via email…

The same principles apply to Slack, Teams or whatever else you may use. I don't do work outside of work hours, so what would I know. Email was just the example I thought of in the moment. Again, I'm asking you a question out of a desire to better understand your situation.

Personal correspondence doesn't take many taps to do. It's rarely more than 25 characters at a time in my experience.

> You know sending email via mobile has been popular since 2003 right?

'sending' and 'popular' are doing some pretty heavy lifting here. Reading, sure, I'll buy that. Sending? I'm not sure sending emails longer than two sentences from any device without a keyboard has ever been popular, for values of. It's probably more popular than ever given that touch keyboards make it reasonably possible, but James S. Casual isn't sending a lot of emails from his phone just through the sheer power of not sending many emails to begin with.

And 'popular' for that matter. Possible, sure, but how many people ever even had a mobile device that could send email before the iPhone came out?

I'm sure sarcasm and implying I'm stupid are great ways to convince your interlocutor, or the unseen masses for that matter.
by 1659447091 | 2026-03-03 02:30:56+00:00
> Are there any less obviously aggressive tactics we can use?

If you are in the US, and hopefully in a state that is open to blocking this sort of thing, be very vocal and persistent with your state reps about the issue. Get others to join. I am curious if this will be legal within the Illinois Biometric Information Privacy Act or a couple other states with similar laws
by marcus_holmes | 2026-03-03 02:30:57+00:00
It does feel like the decision making is internal-politics-driven rather than customer-satisfaction-driven, for both Mac and Windows now. Senseless changes that have little in common with other changes.

We've had this for decades with Windows, and internal leaks confirming that it's all to do with turf wars between departmental heads.

As you say, it's an indication that Apple are going down the same road, and are unable to actually execute a vision anymore.
by troad | 2026-03-03 02:31:09+00:00
Perhaps someone who's more versed in Apple tech can weigh in, but my limited understanding is that tvOS' users are mostly an illusion - the current user is just a flag exposed to running apps, and each app decides on its own what (if anything) they do with that information. There's no system-level separation of data or permissions for different users.

(In my experience, most non-Apple apps just seem to ignore user profiles on the Apple TV, and either behave as single-user apps, or have their own totally unrelated user profiles.)
by brailsafe | 2026-03-03 02:31:23+00:00
Looks like it only had 130 users and as far as I can tell, you weren't making money from it, so I'd move onto something else, and accept that it's the nature of the beast when augmenting a platform that's out of your control.

Keep the project and results as a resume item. Take what you've learnt into that next project.
by oraphalous | 2026-03-03 02:31:29+00:00
I've heard analysis that a significant proportion of middle east water and food supply - in the form of desalination plants, and cargo through the Strait of Hormuz - is within reach of Iran's capabilities. The logic is that you use this to collapse middle eastern economies which blocks the flow of the investment from Arab states into AI infra that is propping up the US economy.
by pjsg | 2026-03-03 02:31:32+00:00
What is the data supposed to represent? Given an IP, I get back some indication of location. Is this

(a) The location of the user who uses this IP at the moment?

(b) The location of the device that is assigned this global IP?

(c) The location of the switch/router at the ISP that is directly connected to the device with the IP?

(d) The headquarters location of the organization that registered the IP block.

(e) Some other location we can't describe.

(f) One of the other answers, but at some time in the past.

These are not all the same location, and not necessarily the same country. Think about people using phones, on airplanes, at sea, in the desert using starlink, corporations using internal networks to get to an ISP POP in another country.
by cwillu | 2026-03-03 02:32:53+00:00
No, it's not a spectrum in any meaningful sense. There are scam companies (some with semi-respectable research departments attached to them) and there are research projects. Anyone selling devices with the promise that those devices will do anything useful for their customers are simply lying.

It's like fusion energy: there are legitimate companies working on the problem, and they may even succeed at some point, but anyone willing to deliver a 1MW fusion plant tomorrow is scamming you, because the technology doesn't work yet.
by nonnontrivial | 2026-03-03 02:33:01+00:00
Location: Buffalo, NY

Remote: Yes or Hybrid

Willing to relocate: No

Technologies: Linux, containerization, Python, PlantUML

Résumé/CV: https://docs.google.com/document/d/1HzlPlQj-tJ2CxAJ7gQS5Habg...

Email: nonnontrivial@gmail.com

SWE with 10 years experience building in remote and hybrid settings. Comfortable with ambiguity/uncertainty.
by trimethylpurine | 2026-03-03 02:33:23+00:00
Disagree. Explaining that they can't fix Apple's Samba implementation isn't "treating Mac users this way" such as to be called a "bad IT team." Or the rest of the laundry list of bugs in the post. How do you recommend an IT team should handle Apple's inability to function for basic business file sharing so that the user's boss doesn't think less of the end user or the IT team?

They are being friendly, and objective. Their job is to fix problems so that employees can be productive. It's not to lie for them, or to them. It's Apple's marketing team who has that job. You'll notice they don't do much in the way of advertising to IT directors and business decision makers. Their focus is college kids, specifically graphic designers and iOS app developers. It's definitely not businesses.

IBM? These are software issues. IBM doesn't make desktop operating systems for end users. Do you mean Microsoft? Apple never was and still isn't the Microsoft of business OS. I'm not sure what you're trying to say here.
by ece | 2026-03-03 02:33:37+00:00
Term limits do prevent situations like the supreme court, where any institutional knowledge and length of terms can be weaponized for political gain.

Overall, if the objective was to have a non-identifying age flag in operating systems, this isn't the end of the world (though I would have preferred enabling other things I've mentioned here in the past like opening up OSes). If there were younger people in the legislature that tried to understand this better than an octogenarian, I think term limits are working fine.
by brynet | 2026-03-03 02:33:49+00:00
Trying something different here again, sorry..

Location: Canada
Remote: Yes
Technologies: C, OpenBSD
Website: https://brynet.ca/

I'm looking for monthly/yearly "no-strings" sponsors, not employment, if any individuals, companies (or bitcoin millionaires) would like to help a long-time OpenBSD slacker, unslack, I'd really like to focus more of my time on open source development (and advocacy), rather than making rent. Feel free to contact me.

https://brynet.ca/wallofpizza.html
by DennisP | 2026-03-03 02:34:03+00:00
One method would be to use the same key that you use to hold some cryptocurrency, so if you share then you risk losing a bond.

Of course it's not ideal to make everybody hold crypto just to use online services, but maybe we can approximate that in other ways. Say, have the private data include name/SSN/DOB and maybe a credit card number, require the user to enter that stuff (or have browser do it), prover checks that it's all correct. Combine that with a challenge/response so proofs can't be reused. User can't share credentials without risking identity theft. Downside is more openings for local malware to succeed in identity theft, but maybe that's better than sending full credentials to big juicy central locations.

A third option would be to give everyone a hardware key that's hard to copy, but that would get expensive.

I think the best idea is to just skip age verification and keep the good ol' internet we've enjoyed for decades.
by pibaker | 2026-03-03 02:34:59+00:00
> shifting your mindset from making a game to making a game engine

This reminds me of when someone makes his own static site generator, write one blog post about how he started a blog with his own static site generator, and then post nothing afterwards.

I suspect the reason for this genre of behavior is there is just a tremendous amount of creativity required to come up with anything original enough to justify putting into a game, or a blog, but game engines and static site generators have relatively straightforward feature requirements that you can just implement like any software feature. Building your own game engine or static site generator is just a good way to procrastinate doing the hard part of game making or blogging while still keeping yourself in the game making or blogging zone so that you can tell yourself, yes, I am a game developer or blogger.