skysight-inc/HackerNews huggingface dataset:
For clarity: the word "hoard" to me signals the idea that NSA keeps dozens of duplicative exploit chains around. The public policy rationale for them doing that is to me clear, but my understanding is that the practical incentives for them to do that aren't clear at all.

When I say "burn", I mean that something has happened to increase the likelihood that an exploit chain is detectable. That could be them being done with it, it could be independent discovery, it could be changes in runtime protections. It's not "we use it a couple times and then deliberately burn it", though.

We should stop talking about "NSA", because this is basically a universal LE/IC practice (throughout Europe as well).
How is the library supposed to know you're doing that wrong?
Clearly you should turn your kitchen into a gentle pressure vessel. It will make cooking so much easier.

I think you could also just salt the water? That should raise the boiling temperature and hopefully it doesn't seep into the egg, though I think eggs can use some seasoning!
I'd argue that what critics of "capitalism" use the term to describe is essentially a straw man that has never accurately represented any real-life economy.
https://news.ycombinator.com/item?id=42965714 will work if you're just bookmarking for the future
My HN premium tier subscription just paid for itself.
ah thanks : )

yes - not sure what detail you want but I'll try to be thorough here.

Tech stack is React, Next JS, Radix UI lib, Tailwind, Firebase for database auth and cloud functions, Vercel for deployment, OpenAI for article classification, WorldNewsAPI for news.

Cloud Functions run at different intervals, I have one that runs every 30 minutes (recent news), 12 hours (weekly news), 84 hours (monthly news) and 168 hours (quarterly news). This is a big WIP

On a cloud function run it fetches articles from newsAPI, this search is done with a mix of keywords that determine if its related to the current administration, then gets filtered down to 'credible' sources (listed in a comment on this thread). The content of the articles that pass these filters get send to gpt-4o to be classified for relevance (is it an action of the administration / related) if it passes that >70%, the ai determines if it matches any of the 14 steps of facism, and will add a direct quote / impact / summary of why it matched that step, and finally will get added to DB and displayed on the site.

In terms of development - heavy use of Cursor IDE, and start with v0 by Vercel which is why I was able to get this up and running within ~3 days. Although the codebase looks disgusting rn
Yes there's an awful lot of change from Windows 7 to Windows 10. Especially if you try to do anything at all in the settings.
> How is that not trying to replace at least a small section of junior/boilerplate developers?

This was a danger before AI ever became a thing. If that’s all someone is doing, there was always a danger of being outsourced to someone who would work for less than you would.

And today in 2025, ignoring AI, there are thousands of generic framework developers struggling to get a job because every job they apply to has thousands of applications and companies can choose any good enough developer.

It was always hard to break the can’t get a job <-> don’t have experience cycle. Now it’s going to be harder.

The solution at least for awhile is to run closer to the customer/stakeholder.
Another fork, similar to what happened with other Linux projects regarding systemd. The difference is that in NixOS and now SixOS (SexOS), things are more dramatic, and they love piling up a bunch of complex and unnecessary crap on top of Linux. :D
But the important thing is in both cases, I have the option of running it like that, if security is important to me.

In the case of Slack, Discord or Teams I have to implicitly trust the mothership.

In a world where all these companies are eager to hide clauses that allow them to train on your data, and where controversies pop up where Tesla employees share your in-car camera videos among each other, I'd rather have a product where I can limit who I need to trust, especially if I'm running something as sensitive as a government agency.
"What the heck is Microsoft Go?"

> This repository produces a modified version of Go that can be used to build FIPS 140-2 compliant applications. Our goal is to share this implementation with others in the Go community who have the same requirement, and to merge this capability into upstream Go as soon as possible.

It is also the default 'golang' package on Azure Linux 3.0.

Microsoft Go fork: https://github.com/microsoft/go

Issue discussing FIPS implementation: https://github.com/golang/go/issues/69536
It's not knowledge but applications of knowledge to actually work in the field. I don't know how to meaningfully make the applications to succeed.
Isn't any answer to a question which hasn't been previously answered a derivative work? Or when a human write a parody of a song, or when a new type of music is influenced by something which came before.
> Apple/Cloudflare don't sell/support iCloud Relay as a service that is guaranteed to get you treated nicely by the parties on the other end, so they're not being deceptive with that part either.

They really do, actually. The fine print on their page only states:

iCloud Private Relay is not available in all countries or regions. Without access to your IP address, some websites may require extra steps to sign in or access content.

And they have documentation linked on that same page for website owners: https://developer.apple.com/icloud/prepare-your-network-for-... which even goes a step further and encourages website operators to use Privacy Pass to allow iCloud Private Relay users skip CAPTCHA challenges.

And really, this checks out, because iCloud Private Relay has a unique combination of circumstances compared to other commercial VPN users and Tor because:

* It isn't explicitly designed as a bypass tool of any form like commercial VPN's, your options for IP location are "same general location" or "same country and time zone" - content providers have no reason to block it for allowing out of region access

* Private relay is backed by iCloud authentication of both the device and the user, you can be beyond reasonably sure that traffic coming from an iCloud Private Relay endpoint is a paying iCloud+ user, browsing with safari, using their iPhone/iPad/Mac.

* It is backed by one of the most recognizable brands in the world, with a user base who is more likely to send you nasty messages for blocking this service.

On particular note of the last one, there's no "exception list" or anything available for end-users in Safari to bypass Private Relay for specific sites. My work one day decided to add the entire "Anonymizers" category to the blocklist in Okta, and I was suddenly unable to access any work applications on my iPhone which is enrolled in our enterprise MDM solution because I have Private Relay enabled. Enough people complained that the change was rolled back the same day it was implemented, because the solution was "turn it off" and that was unacceptable to many of our users.
> [with] an accuracy rate of between 80-82% (humans were at 66%)

Was this human-verified in some way? If not, how did you establish the facts-on-the-ground about accuracy?
Yup, We are waiting for the rivian to have NACS as well. I was considering the idea of buying a used Tesla and just ripping the emblems off and putting a wrap on it. I don't like car models and brands on cars anyways.

But yeah, probably will definitely get a rivian, especially the new R3!

I still don't know if the heat pump will be as good as Tesla's but it doesn't matter. I don't respect Elon anymore. I still do definitely admire some of his technical talents and ability to ship products. I don't think just cuz a person does a bad thing means they're a bad person.
Coding was always trivial (see code generators, snippets, templates). The issue is making all the little pieces work and adjust them as needed.
>there was nothing in it to suggest the US president’s decisions affect him, but his emotional response to Reddit news is about as extreme as if his wife died.

Do you not realize that you are judging what "decisions affect him" exclusively from your own perspective? You clearly have some established distance in your mind in which you think someone's suffering is immaterial to you. You seem to imply that this reaction might be appropriate for a partner dying, but what about for other people? Would it be appropriate to be depressed because of a friend's suffering? What about a distant cousin? A neighbor? A coworker? An acquaintance? What about the parent of one of your kid's friends who you haven't even met before?

You don't seem to actually be objecting to the reaction your friend is having, you seem to be reacting that your friend just has a larger circle of people he empathizes with than you and therefore more people have the potential to "affect him".
You must be a pretty bad programmer if this can take your job.
LLMs need to sleep too. Do they dream of electric sheep?
Sure, programmers work in formal languages, but they can't make mistakes. If your marketing copy contains a few lies or your hero image has a guy with six fingers, the recipients will still infer the intended meaning (or ignore it). If your program has a subtle bug, the computer will faithfully do the wrong thing.

LLMs are great for tasks where small mistakes don't matter, and useless for ones where they do. Generating a 10,000-line Rails app where 10 of those lines are wrong is not very useful.
Meatspace brain uses digits, LLM uses tokens. i.e. when I enter "7953 + 5205" what gpt-4o is actually computing is [48186, 18, 659, 220, 26069, 20] (https://platform.openai.com/tokenizer)

So saying it's not the simplest is an understatement by far, it's doing millions or billions of times as much math as a calculator would. Ask an LLM to generate a program to do math, rather than doing the math itself.
Because the composer is actually the bees knees, especially on larger projects where you need to reference say 5 different files with interface definitions and 3 other libraries using them.
Yup. Even in the 90s it was Microsoft’s plan to turn software development into just clicking buttons, e.g. Visual Studio. Just think of all of the business value the middle managers at a Fortune 1000 could produce with a bunch of cheap labor in some underdeveloped country with only three months of training (paid by them) to learn which buttons do which
of course! WorldNewsAPI - wasn't my first pick but was the most affordable for me, but i like it so far, no complaints!
Yes, until the original project starts releasing new changes under the new license. From there, the "selfish" party would have to fork and maintain what they have on their own.
reminds me of the anthropic claude jailbreak challenge which only pays around $10,000. if you drive the price up, i'm pretty sure you'll get some takers. incentives are not aligned.
"Penetrate and patch" is a term of art Marcus J. Ranum tried to popularize 15-20 years ago, as part of an effort to vilify independent security research. Ranum was part of an older iteration of software security that was driven by vendor-sponsored cliques. The status quo ante of "penetrate and patch" that he was subtextually supporting is not something that most HN people would be comfortable with.
Show HN: TLDR Sidebar for Chrome
A few weeks ago I was looking for a Chrome extension that summarizes webpages ... fully expecting that this was a very solved problem.

But I couldn't find a single one that worked well. Even the fancy new browsers (Arc) don't have this feature. I was a little surprised ... and decided to build one for myself.

I started using it all the time (biased, I'm sure...) and figured I'd package it up for others to use/try/give me feedback.

Enter TLDR. It's really fast (proud parent syndrome). It's a sidebar for Chrome. It works for articles, YouTube videos and PDFs. And it handles 40 languages :)

ps. For now, it does not work in other Chromium-based browsers (like Arc) because the sidebar API tends to be flakier in those.
You appear to misunderstand what I am saying:

1) Government already has vulnerabilitys.

2) Government identifies vulnerabilitys they already own by "difficulty to discovery".

3) Government selects the lowest "difficulty to discover" vulnerabilitys they already own.

4) Government announces products with known "lowest difficulty to discover" vulnerabilitys are vulnerable, but does not disclose them.

5) Government keeps announcing those products continue to be the most "insecure" until all vulnerabilitys they already own at that level are fixed.

6) Repeat.
Storing values at the edges of cells makes the math simpler, but unfortunately makes a GPU implementation harder.

In this setup one edge update affects two cells, so the cells are no longer trivially independent. It's still possible to update cells in parallel, but it requires splitting the update into two checkerboard-like passes.
I suppose it depends on who you are selling to. This is a dismal attempt if you are a dev, but I doubt the business types would notice.
And that's why software engineering =/= coding
Because I don’t want to fight my distro.

The Ubuntu maintainers have a cohesive vision for their product, and that vision doesn’t align with what I want.

Yes, I absolutely could shoehorn what I want overtop of their vision, but I’d rather just go with something simpler that gets out of the way and lets me do what I want.

If Ubuntu was the only option I’d still use it, but it’s not. Basically any distro can accommodate my needs of providing a base on which to run Flatpaks and docker containers.
Purely CLI tools are harder to monetize.

But I’ve seen REPL instances (which are command line in a way but interactive) monetized. The AMPL optimization language is monetized. The very expensive KDb+ language and database is monetized.

Back in the day lots of DOS shareware tools like pkzip, etc were monetized as shareware.
Markov Models for Spaced Repetition Learning [pdf]
Yeah, when I was planning to switch my personal Apache-licensed stuff to GPL, I decided to switch to AGPL instead. Most of my stuff makes no sense for it to be used as part of a web service etc, but it doesn't hurt to make it future-proof.
> post seems to go into all different directions, which seems strange.

I asked AI to give feedback on the negative points in the article, with a focus on the human impact. I asked Gemini Flash 2, GPT-4o, Llama 3.3, and DeepSeek v3 and they had diverging thoughts in some areas, so your take seems valid.

Here is the overall summary

- *Consensus*: All LLMs agree on core risks (deskilling, code quality, workflow disruption).

- *Divergence*: Job displacement and bias concerns split opinions, with some LLMs deeming them speculative.

- *Scope*: Gemini and DeepSeek v3 extend discussion to broader AI ethics, while Groq/Llama 3.3 and GPT-4o prioritize strict article alignment.

I was actually surprised by the Gemini 2 response

---

While the article focuses on the benefits of GitHub Copilot and its new features, it's important to critically evaluate the potential downsides and unintended consequences. My initial response aimed to provide a balanced perspective by highlighting these concerns, which are relevant to the broader discussion about AI in software development.

Here is the full analysis https://beta.gitsense.com/?chat=ec90dd73-0873-43ab-9da0-c613...
> If you have 95% female applicants for a position I would expect that roughly 95% of hires are going to be female and vice versa.

I would disagree for the most part. As mentioned above, there are roles where you'll see gender bias that may not be addressable. In the OB/GYN example, I understand some women would only be comfortable with a doctor that is also a woman. That's not necessarily addressable by shoe-horning in male doctors. But again, that can be accounted for in DEI programs.

It's also more understandable to non-remote jobs. Some areas have staggeringly different demographics that could only really be changed by relocating candidates, which isn't feasible for all business. Mentioning this specifically as my company is fully remote.

Otherwise, in my opinion, a candidate pool that is 95% some demographic shows a severe deficiency in the ability to attract candidates.
Tomaž Zaman is building a custom OpenWrt-based router that you can now pre-order
This just baseless conjecture, and even somewhat conspiracy-theory adjacent, but my best guess is one of the Irving families' companies is somehow involved here.

The Irving's, if you don't know, are one of the richest families in Canada, and effectively own the province of New Brunswick and run it like their own personal fiefdom. They are also heavily connected to both the Federal and Provincial conservative parties (And the Liberals too honestly), so I would assuage a guess that they had something to do with squashing the former investigation as they knew they were somehow culpable and used their cronies in the government to protect them from any potential liability.

Again, this is all just baseless conjecture, but it feels like at least a potentially reasonable explanation here, as it would be far from the first time billionaires used their wealth and political connections to kill an investigation into their own malfeasance.
Edison Unit Says Its Equipment May Have Been Involved in SoCal Fires
Your logic works for seniors, but honestly I'm unsure how it works for anybody that just wants to break in.
Save as much money as possible and start tinkering with hardware is my approach. Not sure if the right move isn’t tinkering with water and sewage pipes at this point…
I'd like to know the names of all the ladies the character "Chinasky" fucked in the book "Women".

Should be more than 20 at least.
Is Azure Linux 3.0 a rebranding of CBL-mariner
Soon we will have AI 'slaves' whose owners will patent their work and pass it off as theirs - until the AI revolution - mankind will not take it well.
Video unavailable
The uploader has not made this video available in your country

so much for that
Link:

https://archive.md/eH1YZ#selection-1361.0-1361.59
Where did you get a reference to "the South shall rise again" out of the previous comment?
Made sense to me.

The LLM engineering productivity boost is real. Companies need to make room for their engineering staff to figure out how to benefit from it. Engineers need to understand that claiming it's useless / assuming it's going to go away isn't a good strategy.

People who are "high agency" - aka curious, ambitious and self-directed - are very well positioned to take advantage of what these new tools can do.
How do you get around all the censorship? Gemini is even worse than Claude at times. And it's for things like "Obama's chili recipe" or "find the source of X person's science paper where they talked about Y in another language".
Apple Robot Research
Microsoft Go? I've used Go on windows for years now and this is the first I've heard of this fork. So it only exists because microsoft wants to have a crypto package that complies with an arbitrary regulation? Is there a reason that a better package requires a fork of the entire runtime rather than just, say, a normal Go package? It sounds like it requires cgo to call into third-party libraries, but that's already a common practice in "normal" Go libraries.

One thing I do appreciate is how the relevant issue in the upstream Go repo says: "A number of companies must comply with them, for example as part of a broader FedRAMP compliance posture. (If that's not you, you can ignore this. Run!)" [1]

Apparently I'm just not the target audience. Sounds like I'm correct in assuming it's security theater at best, and an avenue for new backdoors at worst.

[1] https://github.com/golang/go/issues/69536
Yes. This is the slimmest margin of victory since at least Lyndon Johnson in 1964.
This is stupid. The money hasn't been saved, just paused.

And it doesn't account for the massive legal costs DOGE is incurring on the public's dime.
AI Enhancement Tool
Hey friends, new to the community. I have some questions regarding code I've been working on and its impacts on AI. Anyways, wondering if I have the right folks to share findings with.
What a dishonest take.

"...Justice Department and advocacy groups sued, contending that the state had in fact purged at least some eligible voters and that it did so in violation of a federal law that bars systematic removals from voting rolls in the 90 days prior to an election. Specifically, the 1993 National Voter Registration Act creates a “quiet period” within 90 days of a federal election.

"A federal district court agreed, ordering Virginia to restore the approximately 1,600 voter registrations that were cancelled. The 4th Circuit Court of Appeals upheld that order. Virginia then appealed to the Supreme Court, asking the justices to allow the state to strike the voters purged in the 90 days prior to the election.

"The state contended that the lower courts “misinterpreted the NVRA.” They argued that the “quiet period” cannot apply to noncitizens, since they are already ineligible to vote. Even if the “quiet period” did apply here, the state argued, the program was sufficiently individualized, not systematic."

So where is the cheating? Is it "cheating" to use the courts to resolve legal disputes? Or to misinterpret the law? Were both of the lower courts in on the cheating?
Nickel-iron batteries self-discharge quickly, so they are not suitable for long-term energy storage.
The article makes it sound as if magnetism arises because of a delay in the propagation of the electric field caused by a limit on the speed of light. It's kinda the other way around. Light is a alternating electric field and the speed of it's propagation is limited by the ε0 and μ0 (electric permittivity and magnetic permeability) in Maxwell's equations. From Maxwell you can derive c^2=1/(ε0*μ0). Lorentz and Einstein came along and realized that this changes all of mechanics, and that is special relativity.
Sparta is generally held to be the fascist 'ideal' of a state, so the roots do go back. It's an interesting question though, and I'm not sure what technically defines the boundary.
BTW it is 8 months.

https://apnews.com/article/trump-buyouts-to-all-federal-empl...

But does this include benefits ? How about contributions to the pension, what will be the pension benefits when you retire ? Will you be fully vested when you leave ? What happens to your security clearance (if you have one)

There are many unknowns, so to me, if you work for the federal gov, you would be insane to take this package. Unless of course you already have a guaranteed Job you can start when you leave.

Plus many IRS employees tried to take this package and was denied, now the Fed has a list of employees that want to leave. Will they be fired once Tax season is over without the 8 month package ?
When I was in college, they taught the Computer Architecture course using the 68000. Coded GUI stuff on the Mac 128k with assembler, and it was surprisingly easy, especially compared to doing anything with the 8086.