skysight-inc/HackerNews huggingface dataset:
That old truck will pollute less in its lifetime than the amount of energy it takes to produce a modern automobile, let alone the cumulative energy spent to sustain a consumer base ready to sign a new lease every 36 months for the latest and greatest in aggregated conflict minerals + spyware on wheels, it just does it all over the poors someplace else instead of where you live.
Where (and why) is that?

I'm from Chile, and the last time I sent an SMS (or heard of anyone sending an SMS) must have been like 12 years ago.

Ever since then, everyone has used Whatsapp or Telegram instead.
I'd also emphasize out that there's nothing safe about it being "only dev", given how many attacks use employee computers (non-prod) as a springboard elsewhere.
npm supply chain attacks are the lone thing that keeps me up at night, so to speak. I shudder thinking about the attack surface.

I go out of my way to advocate for removing dependencies and pushing against small dependency introductions in a large ruby codebase. Some dependencies that suck and impose all sorts of costs, from funky ass idiosyncratic behavior or absurd file sizes (looking at you any google produced ruby library, especially the protocol buffer dependent libraries) are unavoidable, but I try to keep fellow engineers honest about introducing libraries that do things like determine the underlying os or whatever and push towards them just figuring that out themselves or, at the least, taking "inspiration" from the code in those libraries and reproducing behavior.

A nice side effect of AI agents and copilots is they can sometimes write "organic" code that does the same thing as third party libraries. Whether that's ethical, I don't know, but it works for me.
See the EV1, a popular, mass produced electric vehicle that was controversialy "discontinued" in 1999 https://en.wikipedia.org/wiki/General_Motors_EV1?wprov=sfla1
I can't tell if this is sarcasm, because it sounds almost exactly like how a horse rider would have described new-fangled automobiles.
If Google wasn’t such a trash company and using chrome to drive more revenue by farming data and preventing adblocks then no one would have a problem with chrome.
I wish more people were aware of this. I'm often reminded of a conversation I overheard at my high school retail job:

$OLDGUY_CUSTOMER (to my coworker): "Wow, I just saw a big crash on [nearby arterial road]! The entire front of the car was smashed in!"

$COWORKER: "Oh no! Was the driver alright?"

$OLDGUY: "Yeah, he seemed fine. There wasn't an ambulance or anything." [beat] "Man, they don't make them like they used to. When I was young, cars didn't crumple like that - it was much safer!"

Ugh.
not good for their wallet apparently
> by not expanding capacity, and wielding market power to prevent others doing so

Why would they not expand capacity and how would they prevent others from doing so?
I would at the very least be hesitant to provide such a service, and I’ve gotta imagine that I’m far from alone :)
> Seeing a takeout-only restaurant with a repurposed dine-in area here in 2025 would be beyond weird

Well, I’m in California and I have no idea what that would look like - it’s just not a thing where I am, nor do I see it mentioned in that abstract. What are you referring to??
Does anybody know how the trust model for this looks like? Is it trust on first use together with a notification if a contact's key changes, a centralized key server (if so, who runs it, and is there key transparency), or just opportunistic encryption not protected against active attackers in the middle?
The crazier part is, people typically don't even pin versions! It's possible to list a commit hash, but usually people just use a tag or branch name, and those can easily be changed (and often are, e.g. `v3` being updated from `v3.5.1` to `v3.5.2`).
How are you finding Tuta compared to Proton?
Parent didn't say all the internet at once, it could just be a matter of telling telecoms to block connections within certain geofences when protests start to flare up, Egypt 2011 style.

Could even bring down 4G services while whitelisting POS terminals, keep the Starbuckses up and running.
>From 1950 to 1966

going back in time like that says nothing about the NY Times of today. In that same time period, the Democrats were the party defending racial segregation, it was your great+ grandparents
I've used ocrit, which uses those APIs. https://github.com/insidegui/ocrit

There are also:

* swiftocr - https://github.com/fny/swiftocr

* macos-vision-ocr - https://github.com/bytefer/macos-vision-ocr
Anecdata, but I usually see people who live alone or DINKs that have been together for a long time use it the most often. Those who started dating usually opt to cook or go out together. Those with kids don't even bother.
then why not modzilla themselves offering their pro version
The administration doesn’t give a shit about the web, and DOJ is a fully political entity. They’ll extort Google for whatever concession they want, and Chrome will remain.
I’ve been saying for a while that there aren’t supply chain problems when the supply chain is the problem.

I’m getting to the point where I feel that library use at all should be frowned upon, unless it is your own library, with obvious exceptions for the most widely used things like encryption and authentication. None of these things are particularly difficult, people just don’t want to do them “oh noes my velocity”
No, it's worse than a standard centralized chat app: It's ostensibly federated, with network operators running the servers.

But practically, only Google actually knows how to do that (the specifications are absurdly complicated!), and so they do it for all operators as a service.

It's a fig leaf of an open protocol and service even for telco industry standards.
This basically shows why DOGE is a thing. This sort of attitude is why governments are slow to achieve anything, why any government contract ends up over budget, etc...

I await your downvotes.
You also need to block write access, so they can’t encrypt all your files with an embedded public key. And read access so they can’t use a timing side channel to read a sensitive file and pass that info to another process with internet privileges to report the secret info back to the bad guy. You get the picture, I’m sure.
This one struck me as a weird one as browser waves come and go and I feel like opera is the big swell rising at the moment anyway. The competitive component is there and alive and well.

What happens when this artificial friction causes chrome to lose network effect faster than natural, and we are ironically left with a different monopoly?
> Verizon, AT&T, and T-Mobile all use Google's RCS implementation, the only way to not send Google your messages in the US is to own an iPhone and disable RCS.

You can disable RCS on Android too.
> await exec.getExecOutput('bash', ['-c', `echo "aWYgW1sgIiRPU1RZUEUiID09ICJsaW51eC1nbnUiIF1dOyB0aGVuCiAgQjY0X0JMT

This malicious code isn't hard to recognise... Surely someone can run an LLM over all code in GitHub and just ask it 'does this code looks like it's blatantly trying to hide some malicious functionality'?

Then review the output and you'll probably discover far more cases of this sort of thing.
> Users don’t pay for Chrome. There aren’t ads in Chrome. There is no direct business model for Chrome. Unlike Safari and Firefox, nobody writes checks to Chrome to make a certain search engine the default.

They track you. There IS a business model for Chrome: monetizing user data.
> commit hashes

There is some latent concern that most git installations use SHA-1 hashes, as opposed to SHA-256. [0]

Also the trick of creating a branch that happens to be named the same as a revision, which then takes precedence for certain commands.

[0] https://git-scm.com/docs/hash-function-transition
This is a pretty cynical view of stoicism, and not very deep.

“Stoicism, on the other hand, stressed the idea that everyone is part of a large perfect whole and thus that it’s everyone’s duty to fulfill the role Fate allots.”

Stoicism does not teach a lack of self-empowerment.

It says nothing about what you should do with your life and does teach one should live a good life (however one defines that).
This article is wonderfully written. However I feel it makes a conceptual conflation.

First it describes the Greek philosophies as being essentially self help. Following that logic it would seem stocisim is not a system of ethics at all, but rather a way of dealing with struggle. Given that characterization, it seems quite bizzare to complain that stocisim provides no moral impetus to help others (a bit like complaining that a hammer - as opposed to a shovel - is a poor tool to dig holes).
> uBlock Origin with bypass-paywalls-clean-filters

Cool! I didn't know that was an option.
Some Geniuses Are Swapping 200-Mile Battery Packs into BMW I3s
Is there any fork which disables firefox's auto upgrade? I am not able disable it on Firefox or zen browser.
Human perception is highly non-linear and largely based on the concepts stored in the brain. Trying to manually approximate that with math is bound to fail once you approach certain fidelity threshold. If you look at the recent color science and spatial perception research, it becomes obvious that it makes total sense to mass profile the perception and throw ML at it. A lot of researchers are still in denial about this, though.
Show HN: eli – Embedded Lisp Interpreter
Doesn't this imply that the future of AGI lies not just in vision and text but in tactile feelings and actions as well ?

Essentially, engineering the complete human body and mind including the nervous system. Seems highly intractable for the next couple of decades at least.
Google is a web business, that’s their whole thing. They made a browser to invest in the web itself because what is good for the web is good for Google, and happens to be good for all of us.

This is a panglossian take that belongs in the year 2005.

Google is less a 'web business' than it is an 'advertising business', a 'surveillance business', and a 'finance business'.

Consequently, it is false that 'what is good for the web is good for Google'. AMP, and the Ad-blocking prohibition are evidence of this.
Yeah I'm on a schedule though. So... no profit.
Have you ever met a team that maintained a fork of a legacy codebase with more than 6 figures of code?
What is a "late interpretation" in your view? What time period exactly? Job has been read as a story that directly dialogues on the possibility of faith and trust in God in the face of evil for millennia. See The Babylonian Talmud (Bava Batra 15a-16b), Midrash Rabbah (Genesis Rabbah, Exodus Rabbah), Saadia Gaon's commentary on Job, even Maimonides. And on the Christian side, Take Origen, John Chrysostom, and especially Gregory The Great's Moralia in Job in the 500s CE.
Tin Foil Chat is in this variety - mailboxes are tor hidden services identified by their public key.

https://github.com/maqp/tfc
Probably the US. SMS, MMS, and now RCS are still ubiquitous there – and only there, as far as I know.
Glad Kiwi is still available. The other has said the project is abandoned and there will be no further update. I'm going to keep using it as long as I can and hope something better comes along.
No, Lenin however[1]...

1. https://www.atlasobscura.com/articles/lenin-mushroom-hoax-ru...
Anecdotally, my 2023 Kia's infotainment unit is one big plastic box that I was able to access by just prying up some plastic and undoing a handful of screws.

I was applying some dielectric grease to the USB port used for Android Auto (in order to prevent intermittent disconnects while driving) but I wouldn't be surprised if one of the many other cables plugged into it led to a cell antenna on the exterior.

There are also software options; I was able to disable the "telematics" in the same vehicle by inputting a (frankly schizophrenic) combo of rolling back the date, touching random invisible trigger zones in menus, and entering a leaked PIN to access the appropriate service menu on the infotainment unit.

Figuring all that out was unfortunately quite difficult, although I imagine you might be able to get "official" help if your local dealership is friendly and willing to bend the rules. I had to settle for a lot of keyword massaging on Google.
well... in fact...

- military is 2.7% GDP for US: https://www.defense.gov/Multimedia/Photos/igphoto/2002099941... vs 1.9% for Europe: https://www.google.com/search?q=europe+spending+on+defense+a...

- US spent $62B on foreign aid, vs 0% from China and Russia, whose GDPs are far larger...
People don't pin versions. Referencing a tag is not pinning a version, those can be updated, and they are even with the official actions from GitHub.
It used to be rich people got nervous when a big group of precarious workers suddenly became desperate non-workers all at once.

> accept it is happening and adapt.

Are you going to follow this advice if they adapt by simply taking all your shit at gunpoint?

I don't know if I was positioned and planning to personally benefit from the mass destruction of people's livelihoods I'd at least keep a low key about it you know what I mean?. I wouldn't be so gleefully gloating about this in public but hey. There's a lot of cops I'm sure it's fine. It'll probably be fine for you. But it doesn't concern you a tiny bit? Just on the outside chance? Nah nevermind it's fine. Don't worry about it.
> They made a browser to invest in the web itself

But that investment isn’t neutral. It’s oriented towards making the Web a better place for Google to make money—not a better place for users to avoid being tracked by Google. Chrome’s dominant position means Google can kill any new web feature that would help users, but hurt Google’s bottom line.
I think it only survives because it's so thoroughly overlooked. Probably nobody working on a new messaging/chat/VoIP/video conference/etc. platform within Google wants to nominate Google Voice as the thing they're replacing or reinventing.
It shouldn't. The only reason Google Messages sometimes asks for an account is to support remote access via messages.google.com without scanning a QR code, as far as I know.

While it's largely openness/federation theater (Google runs most servers in the background, either on behalf of or instead of the mobile networks), they at least got that part right (as in conforming to the specification, not as in doing the long-term right thing for users) and exclusively use the phone number as an identifier.
This isn't new - Thompson warned us 40 years ago (and I believe others before him) in his Reflections on Trusting Trust paper.

It's something I've been thinking about lately because I was diving into a lot of discussion from the early 90s regarding safe execution of (what was, at the time, called) "mobile code" - code that a possibly untrustworthy client would send to have executed on a remote server.

There's actually a lot of discussion still available from w3 thankfully, even though most of the papers are filled with references to dead links from various companies and universities.

It's weirdly something that a lot of smart people seemed to have thought about at the start of the World Wide Web which just fell off. Deno's permissions are the most interesting modern implementation of some of the ideas, but I think it still falls flat a bit. There's always the problem of "click yes to accept the terms" fatigue as well, especially when working in web development. It's quite reasonable for many packages one interacts with in web development to need network access, for example, so it's easy to imagine someone just saying "yup, makes sense" when a web-related package requests network access.

Also none of this even touches on the reality of so much code which exists to brutally impact a business need (or perceived need). Try telling your boss you need a week or two to audit every one of the thousands of packages for the report generator app.
I’ve been doing all of my dev work in a virtual machine as a way to clamp things down. I’ve even started using a browser in a VM as a primary browser.

Computers are fast enough where the overhead doesn’t feel like it’s there for what I do.

For development, I think Vagrant should make a comeback as one of the first things to setup in a repo/group of repos.
This is a laughably bad take.
SpaceX (total orbital dominance), Anduril, and Palantir
This blogger doesn't seem to be aware of all the privacy problems that Chrome poses by the way it was designed to track and monitor all users' history and input and feed it to Google, even in incognito mode. All the blogger had to do is open Wikipedia's article on Chrome to check the huge section on privacy. But no, apparently that is too much research to ask. In fact, the word "privacy" is featured a total of zero times in the blog post.

It's hard to believe anyone can write a wall of text with so many assertions but fails to even touch on the central topic. You need to go way out of your way to be able to miss the point this hard.
Or just write your own.
This is cool but useless because they redacted all the company names. The opposite of a name and shame, because no name and no shame.
Like phones?
Noob question: is it possible to version lock these things? Could one "vendor" these tools into a fork and use that in the pipeline? Maybe it's one of those possible but crazy endeavour?
Let’s not forget the “AI assistant”, which appears to lightly plagiarize the first three results on any topic, while adding some mistakes.
Free Chrome Extension to Speed Up Salesforce Marketing Cloud Navigation
I built a small Chrome extension to improve navigation inside Salesforce Marketing Cloud (SFMC).

If you work in SFMC—whether you're a marketer, admin, or developer—you probably know how many clicks it takes to move between tools like Email Studio, Journey Builder, or Contact Builder. The UX can be frustrating, especially when working across multiple business units.

What it does:
The extension injects a collapsible quick-access menu directly into the SFMC UI. With one click, you can jump to:

Email Studio
-Journey Builder
-Automation Studio
-Contact Builder
-Content Builder
-Setup, Admin tools, and more

Key points:

Works across all Business Units
No login, no tracking, no data collected
Lightweight, blends seamlessly into the interface
100% free

Why I built it:
I use SFMC daily, and I wanted to cut down the friction of switching between tools. This extension saves me a lot of time and has become a core part of my workflow.

Try it here:
SFMC Menu Chrome Extension – Chrome Web Store
https://chromewebstore.google.com/detail/sfmc-menu/nomcomaef...

Code & contributions welcome:
https://github.com/g13nn/sfmc-menu-chrome-extension

Would love feedback, feature suggestions, or bug reports from other SFMC users.
Well let's look at ridesharing as an example. It's basically dominated by Uber and Lyft, i.e., minimal competition.

The nature of the market is that you need a large network of drivers to succeed. That network is a powerful barrier to entry. And it likely requires a lot of funding to achieve.

A government could foster more competition within the industry by funding new start-ups, in an effort to bring the market closer to free market status.

This is what China does with many of their industries, and they do it really well. Despite their "communist party" brand, they are actually doing capitalism much better than the US in many areas.
The NSA has been spying on US citizens far longer than Donald has...
Phone calls aren't encrypted either, if you think about it [1]. There's a large expectation of the telecommunications industry to be able to perform legal interception, and providing end-to-end encryption out of the box might be seen as a direct violation of that requirement.

[1] Except, somewhat incongruently, between Google Fi subscribers on some Android phones: https://support.google.com/fi/answer/11295314?hl=en – no idea how that came to be and how it even works! I suspect it just upgrades to a FaceTime-like VoIP call.
That is not true.

My understanding is a US citizen could promote a terrorist organization like Al Queda and that would not be a crime (if no imminent threat) as it’s protected speech.

They could be investigated, but if no crime is committed the won’t be consequences.

If you’re a green card holder you most certainly could have your green card yanked for the same speech.

Green card holders are still immigrants and liable to be removed from the US for a host of reasons that aren’t actual crimes. Heck, “moral turpitude” is a reason for losing your green card, and that includes a whole host of speech that promotes things like war crimes.
+1 For Audiobookshelf!

A couple months back my son wanted to start listening to some of the series in my Audible collection and I initially set up their family sharing feature but it was really clunky.

Took a couple minutes to setup and deploy Audiobookshelf with profiles for both my kids and then a couple hours to deploy Libation to download my audible library (including all the artwork, metadata and extras) and organize it for Audiobookshelf.

There are other tools for the Audible library retrieval but Libation seemed to be the most complete client with a CLI and a ready to go container image.

Tangentially, even if you don't want to self host an audiobook server, I highly recommend protecting your audible purchases using tools like Libation to download and archive your library (DRM free, all the popular tools I've found handle this).
The Times is especially pernicious because of the hallowed reputation it has. It lets it spin the narrative at crucial moments. Look back at Judith Miller and the Iraq war. Or in the recent case of the Gaza conflict - their false reporting on mass rapes in the debunked "Screams Without Words" article helped give Israel political cover during a critical juncture of the carpet bombing of the Palestinians.
Aren't GitHub action "packages" designate by a single major version? Something like checkout@v4, for example. I thought that that designated a single release as v4 which will not be updated?

I'm quite possibly wrong, since I try to avoid them as much as I can, but I mean.. wow I hope I'm not.
I need this for the endless Shopify and BetterHelp podcast ads!
There's a difference between a source needing to be anonymous for their safety (physical, employment, etc) and someone in an administration or agency refusing to go on-record about policies and actions of an agency or administration because there's be a record, publicly, of what they said - and both they and the organization they're in could be held to that.

Or that administration/agency using "anonymous source" nonsense to gatekeep - wanting to reward particular reporters/outlets that 'play by the rules'.

You'll see a reporter ask something at a press conference, and there will be a refusal or non-answer. But then the press secretary pulls aside a few reporters after the press conference and gives them details.

Unfortunately because the press are willing to do this, more and more information simply does not come out through official channels, which means politicians, agencies, administrations, etc have accountability - their reputation simply isn't on the line.
No one mentions it because it's ridiculous.
I'd used GitHub Actions for at least 6-12 months before even realising <thing>/<thing> was not something that got parsed by the action (like a namespace and method/function), but was simply a reference to a github user name and repo. That whole object should really have been called a 'repo', because that's what it is, and that would alert users to use extreme caution whenever using one that wasn't created by themselves.
It'd be reasonable if hydrogen was competitive with electric, but it's not.
That doesn't allow you to deduplicate across users, though – which of course is the entire point, or the network would be able to see who's forwarding which documents.