skysight-inc/HackerNews huggingface dataset:
I use a wide range of techniques, quite a few are covered in Michael Bazzel's book on OSINT and its a large amount of material. The book is well worth getting if you haven't had exposure to these things.

I'm basically looking for red flags, so inconsistency in website information vs. business and government records. This includes Secretary of State information which may need fuzzy matching, but includes Agent of Service, Address, and Company Leadership, as well as renewal dates, business status, renewal status. Legitimate businesses are not inconsistent here.

I look at the website for how they get customers, and I verify their contact information is functional (usually through a VOIP number). A business without a phone line is usually not a business. Having a listed phone in the reassigned numbers database is a pretty big red flag as well.

I'll look for social media business accounts, county court records, coroner reports, etc. blackbookonline.info and judyrecords.com have been my goto for awhile. The latter search engine was broken for awhile though because they provided too much info and were sued. Aside from that sometimes I get hits on OpenPayrolls.

Companies that hide salary/company name, and postings that were posted without disclosure by recruiters are pretty big red flags as well. I'm sure there's plenty else but that's what I've been doing.
There's a number of active class action lawsuits but they'll take time to play out. For more details than you can possibly want there's this video:

Investigation: GamersNexus Files New Lawsuit Against PayPal & Honey
https://www.youtube.com/watch?v=IKbFBgNuEOU

I'll note it's not only unpopular now with a "smaller group of users" but also with influencers too now as they've realized it kills their own revenue by altering referral codes.
Wild times we live in.

Trying to explain to my adult daughter where to invest her retirement savings ... looking like foreign stocks (VXUS) are not a bad idea after all.
And leaving the upside down exclamation point off the "Dale!" — chef's kiss. So Miami.

Adding a "que bola!!!" somewhere would be the icing on the cake.
Luckily Bitwarden supports passkeys. And you can self host it. And even vaultwarden/bitwarden-rs supports passkeys
Yeah, maybe it's because I spent too much time working on another open standard (otel), but this seems pretty obvious (and much simpler -- for now).

MCP standardizes how LLMs can call tools at runtime, and how tools can call LLMs at runtime. It's great!
Is it cheating or I'm just very unlucky?
Does AI Help Write Better Software, or Just... More Code?
The interior of the Model S was, and remains, appallingly cheap. It felt like a 1990s Chrysler minivan with all the buttons removed.
In some you get absolutely nothing. Either in darkness or in full brightness.

Padded room too, just in case.
I hate to be morbid and I wish him a long life, but at age 87, I don’t think drunk drivers are his biggest risk.
His writings weren’t controversial, though, except to anti-science nuts.
I've found that porting a python script to go that did some basic web requests in a loop reduced the errors and increased performance greatly. That's before using multithreading which really helps performance another order of magnitude.

However for a database-backed web app? The argument on HN has always been productivity wins by helping you to grow your startup more quickly. I myself would prefer a compiled language that also has memory safety.
You could translate the Spanish literally as "hit it". It's like saying "alright!"
Was this supposed to embed maps in emails, etc?
> Possibly by trying to find a business model that can support Chrome development just like all other Chromium (and non-Chromium) based browsers?

There is no such business model. Chromium development is almost entirely funded by Google. Other Chromium based browser rely on this humonguous investment of development resources; they would not have a "business model" without this "free handout", except perhaps Microsoft and Edge, who might be able to fund it by doing basically what Google is doing.
That doesn't fit the definition of protest, that's harassment. The former is protected by 1st amendment, the latter is not. It is important to use the right words.
I found the the Hubbard sections most unpleasant, but I also knew the least about him.
Breaking: Research papers spot errors in AI tools.
The most interesting one I came across was a cutting tool [1]. Have you ever noticed that if you wiggle a box cutter while pushing that it tends to lock up less? This is pretty much that except high frequency.

[1] https://www.kickstarter.com/projects/hanboost/hanboost-c1-ul...
> If we didn’t change to standard time in the winter, kids would be going to school in pitch black night in most of the country.

Or, crazy idea I know, but what if we just shifted the school start time by an hour instead??
Ohh apologies, I think there was a bug that led to the Internal Server Error, please try again, I _think_ it should be working now!

> I think a project like yours is going to be helpful to OSS library maintainers to see which features are used in downstream projects and which have issues.

That was indeed the original motivation! Will see if I can convince Ammar to reconsider shutting down the project, but no promises

> For this use case, I deployed my own instance to index all OSS repos implementing OSLC REST or using our Lyo SDK

Ohh, in case it's not clear from the UI, you could create an account and index your own "collection" of repos and search from within that interface. I had originally wanted to build out this "collection" concept a lot more (e.g. mixing private and public repos), but I thought it was more important to see if there's traction for the public search idea at all
US 'to cease all future military exercises in Europe'
Normal users have backups in the cloud. They also enable biometric so a stolen phone is no use. Even if stolen in a mugging.
Depends on the implementation. For example with 1Password it is not stored anywhere unencrypted, it is derived with a slow password hash and mixed with a secret key (this part is stored) to unlock your vaults. You can't access your vault without both.
And native applications on web browsers are programmed in...?
No, you’re trying to define it too narrowly. The term censorship has never referred solely to prior restraint, for the simple reason that it’s hard to know in advance what someone will do. What makes it effective is the idea of consequences: if you’re thinking about saying “military fighting machine male” in China, you know that you’re not cleverly evading the government but rather setting yourself up for retribution.

For a financial system, this is even more true because nobody sets a flag on their transaction to say it’s criminal and so any government knows that they have to retroactively pursue activity after identifying it as forbidden.

For all forms of censorship, that idea of retroactive consequences is extremely useful because it encourages people not to do things they might otherwise consider because they don’t want to leave a permanent record, and that favors those in power. For example, say someone was thinking about donating to a women’s health clinic but is worried about leaving an indelible Bitcoin record just in case that later is deemed criminal – the other side has harmed their political opposition without even having to do a thing.

Once you understand that, the connection to the exchanges is easier to grasp: that’s where they can deanonymize people and institute transaction blocks without having to go after the entire network. Since statistically nobody pays their bills in Bitcoin, this is quite effective because anyone who needs to participate in the real economy has to go through one of few companies with legal presence, and those companies can be compelled to identify their customers and block transactions involving specific IDs.

Bitcoin is a great design for censors: imagine if the Stasi could’ve blocked every transaction someone made even without knowing their identity! Send or receive a political donation and _poof_ you can’t buy food or pay rent.
I have ran Deepseek R1 on my PC with 128 gigs ram
Effortlessly
I really don't want to use Passkeys until they can be stored in my password manager of choice on Linux, Android and Windows.
What are you using? I think most managers already do passkeys
Can you change the chromium license so that rebranding/embedding/electron usage is now paid. Embedding is now a paid feature starting with 10000 installations. You can make selenium paid after certain scale.

The details could be worked out. The idea is to make big corporations pay while keeping it free for users.
Paying them money removes all ads though, scammy or not. And they just announced their lower priced tier, although I think not all genres are ad-free.
Sure, but that's irrelevant to the question at hand. In a discussion of cold game theory, morality doesn't apply. I'd even say that explicitly excluding morality from the discussion is much of the point of boiling a scenario down to game theory in the first place.
I was gifted an Asimov subscription back in the late 90s, and when I went to college stopped reading. I recently had subscribed again and found it not as good as I remembered. As a kid it was definitely hit or miss, but as an adult it's all misses. I can figure out if the magazine has changed, or if I have changed, or both. But, it feels like it has gone downhill. Honestly, the whole genre. Maybe it's hard to write sci fi now what we're actually living it. Or, anyone with talent has gone elsewhere.
This is a weird (to me) way of presenting Zig syntax and operation. I would generally assume that someone coming to Zig would be familiar with C/C++ or Rust and only need to be able to map Zig syntax to things they already know.

If the author's content is all in this 'assume no C background' style, it will be useful to those without previous manual memory management background in contrast to most articles that assume a lot of context.
As someone who is forced to use accessibility software - please don't just punch me in the face for funsies.

Yes, most accessibility software sucks.

However, translating intent is harder than translating text. It is not always reasonable to transliterate, and knowing when you should is effectively undecideable.

Most accessibility software is more concerned with stability, and the huge number of devices that they need to work with. If your keyboard suddenly decided to be a T9 with autocorrect on everything you interact with, it would likely result in anger.

I am not simply reading your information in a different way. The intent of the information is also conveyed in another way. I don't know if it's a link, unless you tell me. I cannot tell if you're using Greek symbols for a mathematic equation or for typesetting, until you tell me.

Use the standards. It works for both of us, and is less work.
Ok, Bitcoin has censorship resistance as long as you pretend CEXs aren't a factor, you can send money to whoever you want, as long as that person never wants to use a KYC'd offramp
Why would you say something so obviously false? A half-million people in the USA have died of drug overdoses in the last five years alone.
We can’t trust users to not re use a password, why do we expect they will go through the effort of storing / understanding recovery codes?
You can delete things from your watch history to clean up the algo. If I ever let a TV auto play for too long or have kids over watching things I go though and delete things I think will negatively affect the algo.

I feel like clicking a video and immediately clicking off is also a negative signal they use but YMMV.
It's going towards a lot of controversial things unrelated to Firefox development or any open source software development by any reasonable standard. Here's one attempt at breaking down their finances: https://lunduke.locals.com/post/4387539/firefox-money-invest...
Ah nothing like a DEK post to pull out the old TeX folks on HN.
This is very likely. Bezos’ early investment in political lobbying really paid off for them; bought them a judge who effectively killed competition from Apple, and they’ve been free of antitrust scrutiny since 2005.

Won’t help them much under Musk’s governance, though.
But most of the channels I'm interested in have "in video" ads (ads put there by the creator rather than Youtube, I don't know the industry terminology) that remain even if you pay for Youtube Premium.

I wish Premium provided some way for me to predict how many of these kinds of ads are in a video I am considering watching (e.g., by requiring the creator to tell YT how many there are and imposing consequences on creators that lie) but YT does not.
Compared to index funds, actively managed mutual funds still stink
Well after Tucker fluffed Putin, kinda makes me wonder if they put the right person in solitary.
To summarize all the invitble comments:

"I hate the time shift, just pick one!" (Almost no one likes the time shift, about 90% of people want us to just stay with one. The problem is, 50% of those people want standard time year round and 50% want daylight time)

"California and Florida already voted to stay on Daylight time year round, why don't they?" (Because congress has to pass a law to let them, states can only choose to stay on standard time year round)

"Daylight time year round causes health problems" (There is some weakly supported evidence that this is true, that the human body really wants noon to be at solar noon)
Getting to bed an hour early, in preparation for the start of Daylight Savings time.
Well, it's true that a password manager is a single point of failure.

If you have two password managers then they can serve as backups for each other. Unfortunately that means you have to register each account twice.
Seems more 80s/vaporwave to me than glassmorphism.

The music player isn't working for me, chrome is reporting the following:

Cookies with the SameSite=None; Secure and not Partitioned attributes that operate in cross-site contexts are third-party cookies. Chrome is moving towards a new experience that allows users to choose to browse without third-party cookies.
That depends on whether you need to have an active account to use your existing devices. For example, an Apple user would need to migrate before things fall out of sync but they have a full copy on every device.

The fallback path here is what you’d do with any other MFA loss. It’s not a federated login system so you’d be looking at some kind of account recovery process for each of the sites where you used your passkey, just like you would if you lost a Yubikey or changed phone numbers.
lol words out of my mouth
This is something one could/should simulate in test.
Most screenreaders also respect ANSI escapes! A lot are using a tty interface under the covers.

However, HTML does not.

Though, in my experience, getting Chrome to adopt something new, is easier than getting Dragon to fix a bug.
> Who would even buy Chrome?

You mean.. who would want to buy an app that has 65% marketshare?

I just imagine some shady company (shadier than google at least) buying it to slap ads all over inside the browser itself.
Stopped by the auth wall.

Interested to try, but do not want to sign up first
Another top story on HN right now is how LLMs are finding errors in research papers.

Maybe an LLM winning a Knuth bug bounty is a milestone on the path towards “AGI”?
I agree with you, and I think the sin tax up here in the Great White North is great. There are more externalities than just the healthcare system having more, expensive, patients. To lead with a strong argument that's less likely to be nit-picked apart though, I avoided getting into that discussion for the USA
I've found claude-code good in a multi-million line project because it can navigate the filesystem like a human would.

You have to give it the right context and direction — like you would to a new junior dev — but then it can be very good. Eg.

> Implement a new API in `example/apis/new_api.rs` to do XYZ which interfaces with the system at `foo/bar/baz.proto` and use the similar APIs in `example/apis/*` as reference. Once you're done, build it by running `build new_api` and fix any type errors.

Without that context (eg. the example APIs) it would flail, but so would most human engineers.
They are active online, but failed to invest in their physical stores.
This coupled with increased rent from REITs and the significantly reduced standard of living for all Canadians during the past liberal era and constrained sales and bloated costs. Canada kills itself all the time, shoots itself in the foot. Decided higher taxes and more welfare is the answer!
I got a ride on Lyft a few weeks ago where the driver had a Tesla and I had a hell of a time just figuring out how to open the door to get in.
A switch requires a physical and tangible thing to be produced. A touchscreen button is done in software and costs nothing extra to produce. You already know this I'm sure.
Possibly the best description of why I find the story so appealing. Thank you
WebKitGTk performance has improved a ton in the past few releases. Orion will ofc match that. Also working on WebExtensions in upstream hopefully by end of year.
> You need not only nukes on Mars

In a world with colonies, those colonies become nuclear targets. You may not even have to expend a juke—just ram a ship into it.

My point is that the same logistics that would sustain a Martian colony make striking it easier. Mars isn’t a solution to war on Earth. It’s a long-term insurance policy against planet-wrecking accidents, whether natural or human.

As for viruses, it’s like someone millennia ago arguing that humans expanding to more continents reduces the risk of disease. Yes, for a bit. But the same factors that enable that expansion make global pandemics possible.
Recently I used one of the reasoning models to analyze 1,000 functions in a very well-known open source codebase. It flagged 44 problems, which I manually triaged. Of the 44 problems, about half seemed potentially reasonable. I investigated several of these seriously and found one that seemed to have merit and a simple fix. This was, in turn, accepted as a bugfix and committed to all supported releases of $TOOL.

All in all, I probably put in 10 hours of work, I found a bug that was about 10 years old, and the open-source community had to deal with only the final, useful report.
Tariffs might hurt Elon but ceding US influence to OPEC (including Russia) by threatening to leave NATO and the UN? What happpens with instability and a lack of US influence in the Middle East?
> I don't think my opinion is better.

Not what I was suggesting either. I was talking about your assertion of it. To be more explicit, what you're doing is

> The author feels empowered to tell others they're wrong. So I want to do the same;

a tit-for-tat. If you claim that asserting a preference or an opinion is wrong (which I'd agree with), you were then at fault for doing the exact same thing. And just like the author, you merely felt justified to act that way, and would have been able to make do otherwise, but chose not to.
It’s easier to print things and you have clear instructions telling you why it’s important.

The key here is thinking about relative risk: many people get compromised by reusing passwords or being phished every day compared to the number of people who simultaneously lose all of their devices and recovery codes.
> it's weird you consider this a failure. you spent a few months and learned how to work with embedding models to build an efficient search. the fact that your search works well is a successful outcome.

Thank you for your encouragement! I take your point that it was not a technical failure, but I think it's still a product failure in the sense that SemHub was not solving a big enough pain point for sufficiently many people.

> if you want to turn your search into a business now that's a new and different effort, mostly marketing and stuff that most self respecting engineers gives zero shits about, but if that's your real goal don't call it a failure yet because you haven't even tried.

Haha to be honest, my goal was even more modest, SemHub is intended to be a free tool for people to use, we don't intend to monetize it. I also did try to market it (DMing people, Show HN), but the initial users who tried it did not stick around.

Sure, I could've marketed SemHub more, but I think the best ideas carry within themselves a certain virality and I don't think this is it.
It gives itself a 60% Safe rating.
I'm really surprised that the pendulum has swung so far in the other direction that people are recommending not to use Redis.

Sure, don't introduce a data store into your stack unless you need it. But if you had to introduce one, Redis still seems like one of the best to introduce? It has fantastic data structures (like sorted sets, hash maps), great performance, robust key expiry, low communication overhead, low runtime overhead... I mean, the list goes on.
Okay. Maybe discuss this with whoever develops your password manager. The tone of your reply has me thinking that you’re using an open-source password manager. Maybe they’ll accept a PR from you?

Passkeys are supported by my password manager of choice, in the OSs that I care about.
> The default model is Claude Haiku 3.5, but users can also choose to use Claude Sonnet 3.5 v2 and Meta LLaMa 3.2, depending on the task.

> The memo also includes a warning: “Do not type or paste federal nonpublic information (such as work products, emails, photos, videos, audio, and conversations that are meant to be pre-decisional or internal to GSA) as well as personally identifiable information as inputs.” Another memo instructs people not to enter controlled unclassified information.

Wat! All that stands in the way of leaking private personal information is a memo to employees.

I would have thought that it would use a government-private instance of xAI or something. Maybe that's the play, when info leaks then xAI can be brought in to save the day when the accident waiting to happen does.
Was there ever ?
Hmm - I bought my Ioniq because of the physical controls. A handful of features are still on the screen, but the 2025 version apparently fixed a bit of that (seat warmers/coolers for instance). Tons of buttons all over the place (especially on the steering wheel).
I don't understand the snark. Is it not possible to write articles for beginners? There are also a lot of developers who have never dealt with memory allocation and are interested in Zig.
I don't want to use passkeys until I can chose and verify that they are device bound.
I second this.
The context sensitive buttons on the Tesla steering wheel are great.
A list of other open source firmware:

https://wiki.debian.org/Firmware/Open
Not Statista but showing it #1, too https://en.wikipedia.org/wiki/List_of_the_largest_fast_food_...
> Similarly, a pregnant woman who for whatever reason has decided to call herself a man is, in reality, still a pregnant woman.

Uh, no. Just according to you. “Woman” isn’t easy to just say like that, there’s no one definitive way to tell who is a woman.

I notice you didn’t point to any objective truth, most likely because you can’t. I think this conversation is way over your head, and I’m not going to try to convince people who do not have the mental capacity to understand what I’m saying.
they should have an activation factor that, e.g. bio or pin.
Yeah, my first thought was, “I don’t need redis, but I want redis”.
Same here, I don't like passkeys for many reasons. Another reason is that I can't see the key that I'm using. Therefore: What if Bitwarden doesn't pick up the passkey? Tough luck, I'm out of options. I cannot manually create a passkey entry in Bitwarden because it's all hidden magic. If I notice that the password manager doesn't pick up a registration then I just add it myself. Not possible with passkeys.