skysight-inc/HackerNews huggingface dataset:
This is great news.

I love thinking about exploit scenarios that remain.

Very niche, but attackers on a LAN or in the path to cloudflare's edge servers probably have a small window to still exploit this.

In my case, I have about 25 millis before the RST packet arrives from CF:

ip=$(getent ahosts api.cloudflare.com | awk '$1 ~ /^[0-9.]+$/ { print $1; exit }') && time bash -c "exec 3<>/dev/tcp/$ip/80"

(Long command because I wanted to separate the DNS resolution time from the time it takes to send a SYN and then get the RST)

An attacker observing network traffic for a SYN could spoof a single ACK and then quickly capture the Request HTTP headers including the auth payload. Often that fits in the first packet.

Another niche idea/risk: TCP Fast Open might also provide an avenue for the HTTP data to get sent before the CF's RST packet is sent, too. I imagine TFO would apply because any connection (even an https one) would have established TFO with api.cloudflare.com, and then one single accidental hit to http instead of https may include payload regardless of the RST? Hmm.
Why is nobody talking about the Nazi salutes Elon threw up on national television at the presidential inauguration? If you read the graffiti on the wall at the Tesla dealerships you might get an idea of why the brand turned sour.
> The issue isn’t what can be done in PHP, it's what PHP encourages by default:

Lets break this done.

> global state,

PHP is stateless.

> poor encapsulation,

Encapsulation in PHP is mostly consistent with Java.

> inconsistent APIs,

PHP is written in C and an original design decision by those C programmers was to make the APIs consistent with libc.

> and difficult-to-enforce discipline.

Its very easy to enforce. All modern projects would run tools like Pint, Phpcs & Phpcbf to enforce their code standards and preferred style in their CI Pipeline.
"With a focus on security" was the punchline and i had to smile.

While i encourage the great intention and the work that has been done, it seems an oxymoron to create a secure client to connect to unsecure clients.

I will never forget that blazing speed of the BlazeRDP-implemetation that i used in the past that is now long forgotten. I never saw such an speed-optimized RDPish implementation. I knew i was connecting to unsecure clients and used a propietary fix to a MS-based protocol, but it was insanely fast. I never had such a fast remotedesktop since then regardless of the OS. This is not an ad, i'm not affiliated, it's simply a fact in my life, that i recall.
>US rural people tend to trust the government less, so I could definitely see them getting undercounted

Isn't this more complex? Do they mistrust the census bureau?

I say this because their mistrust seems to ignore politicians who align with their views. The same people who control the government.

For example ask a rural person if they trust "Ron Desantis" or "Greg Abbott"
By and large, poor households in the NYC metro area do not even own cars. That fact alone means that pricing road entry is progressive.
In theory yes, but we were specifically talking about driving. And whilst 6 hours CDG to LHR is possible in theory (and I've done it a number of times), it does depend on a whole load of other factors that are not present compared to hiring a car at US airport 1 and driving to US airport 2.

Unless you're in the movie Planes, Trains and Automobiles.
I think it's more what the Hololens 2 was. Non passthrough, so not a VR device like AVP, something where i still see the real world with my own eyes and virtual objects are overlaid
For browsing the web and using web apps the iPad is perfect. It's cheap enough that I don't mind doing slightly dangerous things with it that might kill it once every three years.

Inevitably, for things like Bluesky and Mastodon, the experience of using the web app on the iPad is perfect, but the app experience is "phonish" and just doesn't fit the screen size but why should I care when the web experience is perfect?
The simple answer is that they don't want to bother supporting that because people don't actually want it. Xreal is king of that product category and designed heavily around 'not looking weird', and still has only a fraction of the lifetime sales of VR headsets.
Every few months I get curious and say something like "Hey Siri, are you actually smart yet or are you just a script matching keywords?"

So far the response has always been "I'm soOrrY I doOnT kNoW HoooW ToDooo ThaAT". At which point I decide to wait a few more months.
https://patents.google.com/patent/US20080270152

https://patents.google.com/patent/US20070244837
Yes, all of which could be done in hours less time than it would take to get from Atlanta to any comparable airport.

Consider the amount of train/ferry transit between London and Paris. That doesn't exist in the US. Rental car companies don't keep that much extra stock on hand, and really do not love renting cars for inter-state one-way journeys.

I categorically reject that getting from Atlanta to London with ATL nonoperational would be either faster or easier than getting from London to Atlanta with LHR nonoperational.
I'm talking about the folks mentioned here: https://news.ycombinator.com/item?id=43437112
> Governments [...] don't have a perverse incentive to make things worse.

I hate to break this to you, but in the USA, this has happened multiple times: for instance, allowing Govt to shutdown due to spending limits, to push some extra pain + score political points, and then paint oneself as a savior when the shutdown is eventually lifted.

You could argue that they're not making things worse for the folks that actually matter (and you'd be right), but there is immense hardship and pain inflicted on ordinary people routinely (esp. of late), so I didn't want to leave your comment unchallenged.
God bless Almost Live!
I truly think the diehard MAGA supporters can't wait to see AOC in chains in El Salvador.
So it's a Git compatible VCS, but somehow different?
In terms of mental process, whenever someone is performing a task, they are looking up information on either directly how to do the task, or are running some thought process (i.e simulation of the world) to figure out some unknown.
This is ugly. User behavior modification as a product goal. The reverse of how you should build products. You need to start with "The user wants to do X." rather than "I want the user to do X." Who is Apple to dictate the "correct" way for me to use a mouse?
This sentiment is around, but I don't think it's accurate. There are working demo models, they recently gave an update on the delay (want to improve some small things like buttons and such after getting more devices from the line and trying them out)
Also, maybe I'm just not looking hard enough, but I can't find an RSS feed for the changelog of Cursor.

If projects have code on GitHub, it's easy to follow their updates, but if they are closed projects that post changelogs on their website, it's difficult for me to find an RSS feed. Usually, in the site code (like with Cursor), the feed leads only to blog updates.
> split payments into four equal interest-free installments

So you'd pay exactly the same amount of money, but spread into the future instead of all up front? Isn't this a no-brainer that everyone should always do, so that you're earning interest on the money in your bank account longer? And how can they afford to provide that?
[citation needed] I've never seen that claim before. I can imagine that some subreddits do something silly like this but Reddit itself?
Could pick a better homepage example. The demo code doesn't render very well in MathML. Kerning on the exponents is off. In "beta^alpha" the alpha character touches the beta. Looks better switching to MathJax.
Part that got me midway through was the suspicion (confirmed at the end) that maybe the current 8,000,000,000 estimates for world population numbers have some rather large inaccuracies.

From the discussion:

> how reliable current global population estimates really are. For example, is it possible that global population estimates from the United Nations (7.98 billion in 2022) or World Bank (7.95 billion in 2022), both relying heavily on national population censuses, miss a significant part of the world population?
personally, I think the way to deal with this is the way the Chinese have done it (very successfully)

if US "gatekeepers" wish to operate in the European market, it will be under license, with a joint venture that is majority controlled by European shareholders, with technology transfer agreements

essentially: using their own greed against them

and if they don't like it, they can operate somewhere else
Prefacing my comment with my nationality wasn't meant to give me authority over judging the situation, but about giving context on my point of view.

Also you didn't read my comment correctly the whole point is that you don't have to assume he's a Nazi to condemn a Nazi-like salute.
Trump awards Boeing major contract to build 'most lethal' fighter jets
Another nice thing about web components is that you can sniff the custom element registry (and even await a promised registration) for custom elements. I was writing a couple of markdown-it plugins yesterday[1][2] to render $dollar delimited math$ and simply places its content in either a <math-up> or a <la-tex>[3] element depending on what is already in the custom element registry. Meaning if you want to write LaTeX rather than AsciiMath all you have to do is import the webcomponent before you call the markdown-it render.

1: https://github.com/runarberg/markdown-it-mathblock

2: https://github.com/runarberg/markdown-it-mathspan

3: https://github.com/runarberg/temml-custom-element
We are already experiencing this for years on Windows, that is why its current development experience turned into a mess.

New generation of employees, without any Windows development culture, or even experience, as from the blank stares when asked about stuff that has been on Windows for decades during community calls, and Webview2 being pushed all over the place on the OS.
maybe on a mobile?
I've been an iPhone user for about ten years and have largely had the same relationship with Apple Maps for that time. Indeed, for the first time in a long time, I'm seriously considering switching back to Android later this year over a handful of annoying interop issues— chief among them the stuff recently surfaced by Pebble around APIs for wearables.

Not sure if that means I should try Apple Maps again at the 11th hour or not— maybe if it's finally gotten good it would be better to not know and just remain in blissful ignorance.
It could also mean doing what health insurance corporations are doing... just spending more, so they get their $limit% return from a larger pie.
On MacOS it has a larger net mask, but the OS doesn't respond to any address within that range automatically.

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
nd6 options=201<PERFORMNUD,DAD>
Well, is it a few million, or a billion?

It doesn't really say in the article.
If a member of the German Resistance molotov'd some Volkswagens from VW's forced-labor plant, they probably would have been charged with something similar by the ruling regime.
This is just compiling and caching right?
But those people can still use local buses to get around on the exact same pass. So they could feasibly hit the cap anyways.
Thanks for posting this! Your repo is very nicely organized.

I've been wanting to get in to making an emulator (chip8). I decided early I wanted it to run on wasm, but have been stuck in the weeds of what framework/tools to use to actually get it done. I've looked into game engines and egui, but they just add so much extra complexity.

I think seeing your repo I'm just going to try the straight wasm-bindgen + canvas route. So thanks again for making this.
Companies ditched that approach because it sucks. It needs all the same hardware as just sticking the screens in front of your eyes, except actually it's even bulkier and heavier because of the stuff needed for the combined optics to work, and for obvious reasons it makes a bunch of actual AR/XR functionality impossible, like anything involving dark colors in a lit room.
Yes that's one of the things we're planning on doing. Doesn't help with small archives (or archives which don't contain much new data) of course.

I was originally planning on having that as part of 1.0.41, but the implementation turned out to be harder than I expected.
P-T is likely not due to the Wilkes Land crater, which would be 2.5x the size of the K-Pg impact and would have left an comparable amount (or more) of iridium in the boundary sediments. There are elevated iridium levels in the P-T boundaries, but only sporadically.
Hence the 'coddled like a baby' portion of my comment. Zuckerberg, Cook and US tech leadership are doing the same to government currently, and chucking in $1 million each for good measure.
1) This appears to be what Apple has concluded by the action they're taking and implied by the premise of the article, versus my personal opinion.

2) The examples given may have been produced by AI/ML-based technologies developed at Apple, but may not have been the work of Apple's AI/ML Organization. Many "groups" (divisions) within Apple have their own teams using AI/Machine Learning (e.g. AI/ML Org coexisting with AI/machine-learning work and teams in TDG/VPG, SPG (special projects group: the one previously working on a car), etc.
Scientists Question Microsoft's Quantum Computing 'Breakthrough'
This could lead to more actions by the Trump admin administration against European countries.

Not anti-trust but Cook called Trump to complain about the Irish tax outcome where Apple has to pay something like $14b

https://www.bbc.com/news/articles/cj4d75zl212o

What happens if tech companies, long seemingly supporting Democrats are wooed by Trump with promises of bullying Europe with more tariffs to stop them from going after American companies.

This would result in tech companies supporting Republicans due to the finanical benefit while controlling the messaging on their platforms

For example "Instagram and Threads will start recommending political content to users in the US." After a few years of either limiting it or providing an option(? Unsure)
What value would that add? Recipients accepting crypto usually just put up a wallet address. Why add a middle person
The article doesn’t really give much scientific information. But wouldn’t areas flooded by dams be much higher in population than other areas? They would be by rivers and within valleys. Protected land with a fresh water supply. What relative population increase did they assume for these regions?
AFAIK there will be no official live stream but updates during the launch on their website:
https://www.isaraerospace.com/newsroom-first-test-flight
No, they're literally the same thing.
I'm not an expert, but if I understand the abstract correctly, the big deal isn't the skateboarding at all. This is a modal behavior where both the individual behaviors and the mode transition decisions were trained at the same time. Is this correct?
Change doesn't happen until the majority is affected by not changing. It hasn't reached critical mass, and it seems demagogic leaders of the world have learned to slowly cook the frog so the critical mass point moves a bit further each week.

Mexico just changed from a superdemagogic leader to one less so. Their deceptively simple recipe is, like Alice in Wonderland, doing five unimportant stupid things before breakfast, so their next important stupid thing doesn't look as bad.
Anytime there's a timeout the Microsoft RDP client makes you wait way longer than you might have had to otherwise. That kills me.
Fair enough if you categorically reject it. That's good enough for me.
Ah. I took it to be less "sama did it, so it's OK," and more "you wouldn't gatekeep sama's English, so why gatekeep the English of a random HN commenter?" But maybe that was the wrong interpretation.
Sure. But that group of people has been lied to a lot. So you need to front load the benefits.
The dad is who you want to aspire to be when you see his relationship with his kids. Definitely sighup’d my idea of parenting after watching a few episodes
Right. I need to implement this and see if the performance is too painful.
Show HN: Jax and Flax LLMs – Transformer Implementations Optimized for TPUs
I've open-sourced awesome-jax-flax-llms, a curated collection of large language model (LLM) implementations built from scratch using JAX and Flax. The repo is designed for high-performance training on TPUs/GPUs, making it ideal for researchers, ML engineers, and curious tinkerers looking to explore or extend modern transformer models.

Key Features:

Modular, readable, and extensible codebase
Implementations of GPT-2 and LLaMA 3 in pure JAX/Flax
Accelerated training with XLA + Optax
Google Colab support (TPU-ready)
Hugging Face dataset integration
Upcoming support for fine-tuning, Mistral, and DeepSeek-R
This is primarily an educational resource, but it's written with performance in mind and can be adapted for more serious use. Contributions are welcome — whether you’re improving performance, adding new models, or experimenting with different attention mechanisms.
> What happens if tech companies, long seemingly supporting Democrats are wooed by Trump with promises of bullying Europe with more tariffs to stop them from going after American companies.

This has already happened. There is just friction between executives and company culture.
Removing fares does not actually move people out of cars into public transport because it is already cheaper than driving in most cases.

This has been proven time and time again; where free transit is implemented, car usage does not decline, and surveys of people who switch indicate they mostly come from people walking and cycling. https://www.fastcompany.com/90968891/estonias-capital-made-m...
> Not increasing the money supply isn't an assumption, it's a choice

Then it works at the state or local level. My point is in interrogating the reason state and local experiments don’t scale to a national example.
It’s undoubtly a brilliant show for parents - in fact I’d describe it as a show about parenting. But it’s much more than an adequate kids show, it’s certainly top tier for my kids.
My 4 year old has been enormously influenced by Bluey, in a positive way. She’s very playful, and Bluey is all about fun and silly games. She wants to play all the Bluey games, and will riff off them too, it’s been a huge source of inspiration for lots of fun together. She loves the show, it’s definitely right up there for many kids too.

I also fully agree with the other posters saying how it’s an excellent model of top-tier fathering. It’s definitely helped me up my game, I’ve leaned much more into daddy-fun silly games, partly because Bluey gives you a bunch of games that you can copy (and your kids will understand), but also because it helps encourage spontaneity and improv. I think my best advice for dads with 3+ year olds is ‘watch Bluey’
Pluralis: Towards Open AI
Just a random note.

As someone in this thread already stated, if you want smooth remote desktop experience with security requirements, you may try sunshine + moonlight for streaming with tailscale / zerotier for connection.
Chinese do it to steal IP from their joint venture
Defensive patent pools exist, if that's what you're saying: Unified Patents, LOT network, and RPX are a few.
> I'd also love a clear picture of how these guys were caught so fast.

They probably brought their phones, and walked by some cameras along the way (aren't Teslas covered in them*?)

Either would be enough, and I wouldn't be surprised if they parked nearby, too.

* - That cybertruck doubles as a surveillance van with footage that is shared with authorities for persecuting/prosecuting people. Expect it to be used against opposition protestors, those who seek abortions, etc.
I was a defender of Google
Maps last week. Then I had to drive some roads I was unfamiliar with at the weekend to get to a familiar funeral.

Google Maps gave me instructions to turn off a junction right at the turn off, resulting in me missing it. Worst still, it did this not once but twice. And the detour was via road works.

Google Maps added a considerable amount of time onto what was already a 3 hour journey.

Thankfully I had planned for problems so there wasn’t any negative outcomes aside time lost and a considerable amount of additional stress when I was already in an emotionally bad place.

On the journey home I used Apple Maps and the difference in the directions were night and day.

Apple Maps gave me ample warning before each junction. It described the junctions (eg “right turn 100 yards after the traffic lights”) so I knew exactly where I was going. Even told me what lane I needed to be in.

Google Maps did do this on occasions to be fair. But it was highly inconsistent. Hence why I got stung so badly when its instructions were last minute. Whereas Apple Maps was 100% reliable 100% of the time.

It will be a long time before I rely on Google Maps for satnav again.
Pretty cool! At first I wasn’t that impressed because it’s mostly just pushing to get some speed then “passively” riding down some ramps and steps. Then I realized that riding down steps is not a passive activity — most humans will fail their first time and need to learn to maintain balance while the board bounces over rough terrain.

I think most inanimate objects would fall off a skateboard when pushed down steps, so it’s an impressive display of balance and tool-use in my opinion!
> the US had capital controls in place throughout the New Deal Era, surely you aren't comparing regulated capitalism with socialist qualities with a statist monarchy that impoverishes its' people?

Sure, if you say we need capital controls and exit visas to implement UBI, that is consistent with breaking continuity between state and local experiments and the federal proposal. But I’m not sure how much buy in there is for those policies.

> North Korea is a bad example, because I'm certain that Kim Jong-Un and his key cogs are able to stash their cash in London, New York and Geneva

And American oligarchs wouldn’t?

> You made an argument clear enough to respond to

Isn’t it presumptive to use one’s own ignorance as an argument?
Correction: "Now something that is also bad, but not nearly as harmful as acid rain, is falling from the sky."
Would you be willing to share how did you that? New to both Kagi and Guix!
"Large" is underselling it. Even with the AVP, about 1.5x real size is the bare minimum for me for text reading comfort, and with other headsets it's more like 2x or larger. It very rapidly gets into territory where you'll give yourself neck strain trying to keep track of everything.
But notably, during the 1990s there was a concerted push to switch books to alkaline paper.

A lot of old printed books were done on acidic paper, causing them to more easily disintegrate. Disintegration of acidic books can mitigated by brushing alkaline powder between each page, and by keeping very low humidity.

The switch to alkaline paper substantially changes the smell, much to some readers' dismay. But be sure to look for alkaline prints, when available.
I brought up driving to illustrate the incorrectness of the original claim, the person I replied to did not mention driving. The person you replied to is correct to bring up the EuroStar option.

By the way, the snide remarks you add to the end to each of your comments may be better suited for a place like Reddit or TruthSocial. The community standards guidelines for HN can be found at the bottom of the page.
Straightforward programs in languages like Java, Python, etc.

The tools you describe all have the endpoint "you can't get there from here" and the only difference is if it takes you 5 seconds, 5 minutes, 5 days, 5 weeks or 5 months to learn that.
Any links to share?
I don't care about security for my use case.