skysight-inc/HackerNews huggingface dataset:
Yes, donations are cool, without them there probably wouldn't be as many build servers (among other things).

However, if donating means that you have to consider your current paycheck size, then it might be more appropriate to put that idea on the back-burner for a while.

If you don't have to make that consideration and/or you feel strongly obligated to donate, then by all means, please do so.
*just a minor correction: costs because of complete governmental, regulatory, and industrial capture by the fossil fuel industry, who owns all the politicians and massive swaths of the industrial supply chain.
Fixed it for you.
There is no way the most abundant and powerful energy source available to human kind actually costs this much. By the standards of physics, it is by far the cheapest -- cheapening energy is simply not an objective the energy barons would allow without a war with them.
There was no "average user" constraint specified. Works on my desktop.
Thanks, I'll check with o1-mini and o1 and update this comment :) Also, the code has some small errors, although those can be easily fixed.
A web app that cannot handle a text file bigger than X bytes doesn't become useless, in the same way that a native app isn't useless even though it, too, has a limit on the maximum file size it can handle.
This is the feature that sold me on Rebelle 7 (which is hands down the best digital painting software I've used). Being able to translate oil painting mixing techniques onto a digital workflow was a game changer for me.
I'm sure there are problems with web games, but some of your arguments seem stem from ignorance about the modern web tech[1].

> 2. Consumers don’t want web games. The UI just isn’t there yet. You misclick out of a tab and lose progress or get distracted / start browsing another tab. Also to do with the ephemeral nature of a browser tab.

Fullscreen mode mostly solves the misclick problem. PWAs solve it entirely. Do consumers care at all about what the underlying technology is.

> 3. Unity’s dev network effects are too large. People who know how to make games use unity. People who want to make games therefore learn unity. It’s a flywheel.

There's Unity web. And people who really know how to make games can also use e.g. Unreal, which as compiled for web for ages.

> 4. Something psychological about downloading an app and seeing it on your Home Screen leads to retention.

PWAs can install to Home Screen.

[1] There is admittedly one company unable to implement modern web tech.
To paraphrase an observation from politics: nerds fall in love, everyone else falls in line.
By the time kerb published his story this has being going on for a long long while. He was openly bragging about being in army and stationed in SK.

I mean, didn't army or some agency start investigating this before Kerb?
If you don't have tensor parallelism even 8 x A100 is going to struggle with that kind of model.
It can be configured with `core.abbrev`.

https://git-scm.com/docs/git-config#Documentation/git-config...
> building a career (and decently-sized ego) out of Microsoft-specific make-work

This can be quite a successful career, probably even if you start today.
A lot of modern standards rely on .well-known urls to convey abilities, endpoints, related services and so on.

In my case, I never run anything PHP so I'll just plain block out anything PHP (same for python, lua, activedirectory etc). And, indeed, .htaccess, .env etc. A rather large list of hardcoded stuff that gets an instant-ban. It drops the bot-traffic with 90% or more.

These obviously aren't targeted attacks. Protecting against those is another issue alltogether.
I found deepseek very useful at coding with Aider. On par with claude.
> Subsequent claimants are ignored, first claimant keeps all revenue.

Are you sure? I remember Jim Sterling used to show content from multiple companies because multiple claims locked them all out from monetisation. Maybe it's changed since, though, that was years ago.
Ask HN: How to learn marketing and sales as a solo entrepreneur?
Hello, I failed with a several products that I built (easy part for devs like us) and then I didn't know how to get the product in front of customers, how to commercialize it, how to increase amount of users, etc.

Many of you succeed in this field, so I'm genuinely curious how to learn it? What are decent learning resources out there?

Thanks in advance
And no « reader mode » possible. Totally unusable for me!
I think this all works out of the box with logseq.

You can create a movie template with a few props then put them anywhere and then tabularise all the entries with a query.
The inelegant approach increases risk by relying entirely on the OS being sure that the key is never recoverable from memory on clean shutdown, and on the firmware ensuring that all used RAM is sufficiently wiped in all unclean scenarios.

What if Windows forgot to wipe a spot after having relocated a page? What happens if the firmware's boot flow is interrupted by, say, a hardware fault prompt, a low battery prompt, etc.? There's a lot of places where that approach can go wrong.

The key approach is simpler and comparatively bullet proof: If the machine is rebooted, clean or not, the key will be lost and no memory that was previously used will be readable. All it takes is the OS initializing a single CPU feature on boot, with the only downside being that it requires support for a quite modern CPU feature.
One of the affected websites is a local cafe in the EU. It doesn’t make any sense to block EU IPs.
Cool. I'm pretty solid according the the beginner method now, time for the next step!
Provider iteration is a really nice one - I had a big monorepo that would deploy some baseline services in many AWS accounts, across multiple regions, generating tf.json files for each provider to match all accounts that were created.

However, what really broke this model at some point was the fact that we were running so many providers instances that our Terraform Cloud would go out of memory! Since each provider instance in tf is really launching a new process it really adds up... At some point I was thinking since the engine and the providers use gRPC to communicate, it MAY be possible to distribute providers across machines, but I never investigated it further... I'm pretty sure there was a notice in the tf plugin SDK stating that it was not possible to connect them over a network... but why not? ¯\_(ツ)_/¯
You get profiled when you sign up for unlocking a xiaomi.

In order to use the official windows-only tool:
You make a xiaomi account, wait a month or more, then put an internet connected sim card that receives an sms verification and try to unlock, if it fails, you wait a day to try again.

You can unlock about 3 devices at most every 6 months with one account.

They found a balance that is easy enough for tech saavy users, but not too easy for the general population. Helping someone with his phone is a chore if you aren't charging money for it.

Xda forums is much less interested in developing unlocking for xiaomis since there is this official method, and I can't blame them.
Don’t install things outside the package manager. If you must install software yourself, install it to /usr/local.
I have a vast library of 2e books that I promise you are still "good enough".

WotC is good at churning out paper but it's certainly in the interest of that particular entity's continued existence. Debatable if it is for anyone else but I'm sure that anyone consistently playing simply gets dragged along with the trend of "the new shiny".
He expressed negative sentiments about South Korea and showed he accessed a particular website at a given time.

Don’t post anything on the internet if you wish to remain anonymous. Don’t express opinions about anything.

We’ve had a few different posts on HN demonstrating that it is trivial to link aliases based on writing style. To avoid this you’d have to pipe everything you write through an LLM. And then you have another potential data point.
A lot of the data is already available on data.gov.ie in geojson format, especially for the Dublin and the Greater Dublin Area. I just wish these people would abide by the CC-BY licence of their original datasource and credit it.
Passkeys are simply over-engineered. A passwordless login system need only the following:

- $AUTHENTICATOR is one of (browser extension, browser, OS, hardware)
- $AUTHENTICATOR stores mappings ($SITE,$PUBKEY) => $PRIVKEY
- $SITE can ask $AUTHENTICATOR to generate a new $PRIVKEY and give it its $PUBKEY
- $SITE can ask $AUTHENTICATOR to sign a challenge with the $PRIVKEY corresponding to one of the $PUBKEYs for that $SITE
- the user can pick which $PRIVKEYs are synced and which can be exported (depending on $AUTHENTICATOR capabilities)

Bonus points for adding a way to do the authentication off-device through QR codes, so $AUTHENTICATOR one one device can authenticate a session on another device (like using a phone to log into $SITE on the desktop, perhaps for the purpose of adding another authenticator there).
Not quite. We are saying that adding `not_available_before: 2026`, or similar, ‘right away’ is usually not a good thing; therefore anything that helps with doing that is not something we desire.

It should be a multistep process. Yes, it will waste time now, but it will save it in a long run.
> both parallelism and pipelining

You are right, but this can be make more precise: pipelining is a specific form of parallelism. After all the different stages of the pipeline are executing in parallel.
A couple of weeks ago I was with a friend who was looking at a website for unusual holiday properties and he bemoaned the lack of an app. I asked him why bookmarks didn't work for him, and he explained it all just got lost - he wanted this to be in the "hotels and holidays" section of his phone's home screen. So I showed him how to add a website to his home screen (well, sort of, I've been iOS since ~2009 and he uses Android, so we had to do a little of collaboration to make it work). Mind blown. Effusive thanks. He now has a way to bookmark sites that works for him.

I'm a big fan of the PWA phenomenon, and got very annoyed with my CEO when I was CTO'ing a new platform about 10 years ago, because he wanted to move to native apps just so that a loading screen looked a little nicer. Ended up using a native shell, did the loading screen the way he wanted and then fell back to a WebUI view for core functions.

However, there are some areas where I think native wins out, primarily the developer experience - I'll take SwiftUI + Swift over almost any other UI based developer workflow out there.

WebASM should mean we see a nice little bit of innovation in the web app dev experience in the near future, and I keep meaning to find time to try Elm out, but at the moment the next app I'm thinking about (which has some tricky low latency UI needs), I'm eyeing up native a lot.
Any text editor that struggles to load a large text file on a modern computer is, simply put, inefficient. If 20 years ago they managed to write programs that could handle such cases and today many (web) apps fail at this task means we're going backward.

My point is that it's much harder to write efficient code in the web ecosystem because you're bound to specific abstractions from the browser. Once deviating from said abstractions, it's not trivial to write efficient code.
Happy New Year HN
Wishing everyone a great 2025 from NZ :)
It can do either, and can fail to do either. It’s the people having power that enables the outcomes, not the system itself. Democracy just grants the power to a broader set of people.
I am always disconcerted by the Raspberry Pi which takes a usb power supply but needs about 2 amps at 5 volts which most chargers won't support.

I think fast chargers raise the voltage rather than the current.
Does it work only based on the IP?

I also tried from a mobile 4G connection, it’s the same.
Does open source not itself severely mess with free market dynamics by having billions and billions of dollars of work being done for free?
Show HN: Restore old and blurry photos with latest Image Gen AI model
Am I the only person who isn't hugely interested in summarizing emails? I don't want emails summarized because that bypasses a tell-tale sign that said email isn't worth reading in the first place.
The Complexity Genie – Armin Ronacher [video]
Having a big dongle sticking out of your iPhones lighning port is completely impractical, compared to using the integrated TPM backed storage, unlocked by face-id. Yes there are smaller dongles but only for usb-c and i still don't want to fiddle with it when charging.

It's only a matter of time before desktops gain the same secure key storage as our phones do, add a hardware key to prove physical presence and then yubikeys are obsolete. The only future for yubikeys is for temporary transfer of keys under wrap between devices, where you don't want to use a cloud service for doing so.

While an open api with replaceable internals is a nice idea and one that enabled yubikeys in the first place, once this is integrated in the SoC and the OS, there will be little need for alternative storage backends. What's more pressing now is pluggable synchronization of secrets, for those who don't want their choice of cloud provider to be bound to their choice of OS, or for those who rather synchronize entirely offline through a yubikey.
First the needs of the user-base should trump those of the dev.

And secondly the kinds of apps that are referred to here are not the type that need massive efficiency or some complex feature - when inconvenienced by yet another single-use car park payment app, I've never once thought how marvellous it was that the text downloaded so much faster than the many web sites I regularly use: mainly because that responsiveness is blown away by the need to faff about installing the app (not to mention the effort needed to avoid giving unnecessary phone access out!)
Apps get access to the device advertising id, can slurp up more valuable data from users who don't know better than to install it, and are harder to block ads in (average Joe isn't going to set up DNS level ad blocking)

It's all about advertising, always, everywhere.
> We’ve had a few different posts on HN demonstrating that it is trivial to link aliases based on writing style.

Do you have a link? I wasn't able to find it...
Hilarious case in point

https://www.cbsnews.com/news/carl-stewart-drug-dealer-identi...
I didn’t know that molecule. It’s an immunosuppressant, isn’t it a bit counter productive for old people that tends to be weaker?
I don't think Microsoft is stupid, they know that they have the lions share of developers- they're also aware that they are losing to linux in a big way when it comes to service deployment environments. I even heard Azure itself does not run Hyper-V on Windows anymore (though, who can be sure).

It's a smart play for them to have WSL- it means less friction to target Linux and will keep people writing software on Windows (which increases the likelihood of making software for Windows- especially developer tooling).

I think the parent is wrong that developing software on Windows is hard, my original comment up-thread was largely regarding the fact that in the late-90's and early-00's internet access was not common and getting your hands on a Microsoft Development environment was the furthest thing from easy. Linux, ironically, was easier as it came with all kinds of documentation and interpreters and compilers out of the box.
WhatsApp and Signal run perfectly fine (WhatsApp shows a little warning on first run, that its an unsupported ROM, nothing else).

As for banking apps, it depends. Some work, some don't. One way to test it would be to use Waydroid emulator on Linux, which uses Lineage OS image.
How Expensive Were Candles in the Middle Ages? (SideQuest – Animated History) [video]
Webapps do not have access to public url's outside their domain(CORS).
Webapps don't have access to gpu in 2024(there is webgpu in chrome but not yet enabled in firefox)
Webapps don't have access video/audio codecs.(There is webcodecs api but its partly enabled and there is no api for muxing/demuxing which makes accessing them difficult.)
Webapps don't have access to other hardware features that are required for ML.

So while i am rooting for webapps it is still long way to go.
> Browsers can't access all the APIs in iOS

And nor should they.

Every single API that gets added to a browser increases the likelihood that you will be accurately fingerprinted and tracked across the web. This data is then packaged and sold to third parties whom you will never know about.

Every time I hear the PWA argument it's always what is in the best interest of developers not users.
This sounds like an advice for living in a crazy authoritarian country, not in the West.

It's astonishing how people are supposed to have freedom of speech and freedom from being spied on, since they live in the West and not in a Stasi controlled state, but they are given an advice not to talk too much, or the Big Brother is going to get them.
Until some massive marketing campaign explains to all users of the internet what PWA's are (which is never going to happen), there's nothing wrong with calling your PWA a website if it prevents a lot of confusion.
Don't sweat it. The link for the official tool in the official xiaomi site directs to an old version that didn't work for my old phone.

I found The latest version in xdaforums, and that worked, thankfully.

The whole xiaomi experience is very unpolished. The siteS are a mess for this, the tool looks like a cooked homebrew, and their English doesn't look official.
Android apps absolutely support deep links: https://developer.android.com/training/app-links (surely iOS supports this too?)

It's also widely implemented in practice. For example, Instagram allows copying links to posts, and if you can view an Instragram link in the browser, it opens in the app.
Thanks flying Spaghetti monster EU is more free than US.
Yes, and passkeys generally help. But your concern upthread was that any mechanism that lets users share or export passkeys (or other authentication material, such as passwords) allows a user to be phished. Basically, the very fact that this is somehow accessible means a user can be tricked into disclosing it. This is correct, but my point is that perfection in that area necessarily means that a lot of things that are useful (some of which have been shared in sibling threads) are now impossible. So we should not actually aim for perfection on phishing, but just to make improvements where possible.
Native apps made with SwiftUI or Jetpack Compose adjust their font size according to user preference in system settings out of the box. They also relayout automatically. Copying text on press is a one-liner in both frameworks, just need to think of it.
Yeah, esp. the AWS provider is pretty memory-intensive.

I believe someone on the team did some investigation into this (running providers remotely) but it's not really a priority (if it is for you, feel free to voice that on the issue tracker!).

Frankly though, with pricing for cloud instances being generally linear wrt to the CPU/memory size of the instance, I don't think there's much reason to prefer many smaller machines over just using a larger single one and avoiding all this added complexity.
One aspect I find fascinating and under estimated is how Apple makes the browser kind of secondary to apps. The browser is basically a navigator, a renderer of websites.

People don’t think of the web as a platform for apps. For them, it’s like a bunch of pages you get to via Google. They have very poor notions of how to navigate or make workflows with it. How many people do you know who just have a million tabs open? Who have no notion of what web apps to use and mainly use Gmail / Slack / Google?

This is why Apple pushes apps so much. A dedicated little place for a use case.

PWAs are a good in between for sure. But for a lot of humans, having a logo of a brand they recognize is going to be the main thing.

“I want a button that says Music, it’s Apple Music, I pay it 10 bucks, I get all the music.“
Ah thanks for the correction, only knew the "official" one!
GrapheneOS only supports devices that are still supported by the OEM, and they generally seem to have very few modifications that touch on frequently-changed parts of AOSP. In short, they can be relatively certain that nothing will break when they rebase, Google does the work for them.

On the other hand, LineageOS runs a lot of devices at the very (lower) edge of compatibility, which means that (with Google pushing large changes quarterly instead of yearly) the build roster has to be reevaluated quarterly instead of yearly as well. This was not anticipated properly for the Android 14 (LineageOS 21) cycle, which resulted in 19 devices not being able to be built on a previously supported major version (and therefore dropping from the roster completely).

In addition, the components that have been causing rebase conflicts each year now have the opportunity to cause rebase conflicts multiple times a year.
Orbit by Mozilla is a product of the non-non-profit Mozilla Corporation [1], not the non-profit Mozilla Foundation.

[1]: https://orbitbymozilla.com/terms
If you tell the world that eggs are awesome while denying other countries access to eggs, they discover ways to use less eggs and eventually realize they don't need eggs at all. Then you are stuck making Dennys breakfasts while the rest of the world is on to fine dining.

China has incredibly strong incentives to do the pure research needed to break the current GPU-or-else lock. I hope, for science' sake, we dont end up gunning down each others mathematicians on the streets of Vienna like certain nuclear physicists seem to go.
bahaha usually when HN people are complaining about a website I think they're being dramatic but the way this was scrolljacked, it's almost like it's designed to frustrate you
There also is an updated version with fixes that never got merged into upstream Heimdall: https://git.sr.ht/~grimler/Heimdall
How often does the Bing API go offline? Meanwhile, every single google search I carry out includes, right at the top, 'AI' generated nonsense which is sometimes wildly inaccurate. DDG never does that.
is this his youtube channel : https://www.youtube.com/@JohnnyMarauder , the last video is :
"Getting an old copy of Qmodem running on a restored IBM 5150 PC." with

description: "I wrote Qmodem originally on an IBM PC Clone, the Tava PC. I've restored an actual IBM 5150 with the same cards and software from back in the day, and here it is running Qmodem V3.1"
You won’t know if you’ll get a 404 until you make a network request. How many of those can you make per second? Hundreds? Thousands? Let’s be very generous and say millions.

That means you just need millions of years to go through the entire range.
malaria parasite discovered when researching cattle disease.
Happy new years from a fellow kiwi! I hope everyone’s spent it in good company :)
That was advice for a criminal who wants to avoid getting caught, not what you are talking about.
Whatsapp and Signal are fine. Random banking apps suck because their myopic and incompetent policies around custom OSes. Especially here in Germany where banks and even tech company management see internet as a magic, totally untrustworthy new curiosity. Combined with the overall extreme risk-averse society, basically none of the bank apps from big banks work with custom OSes. All require various levels of "hacking".

They use Google SafetyNet as a security guarantee and some outright ban access while letting you use a completely custom Linux PC. There are ways to hack those API calls with various system level interceptors like Magisk. I keep a custom made 2FA code generator from my bank as a backup though.
> someone should try seeing if there is a legal requirement for unlocked bootloaders.

The EU is only now applying usb chargers. They will be ironing appstores next. USA, maybe not with the next president.
Do you only fly through small airports? I can't see how you would possibly guarantee not getting stuck in security at least sometimes