skysight-inc/HackerNews huggingface dataset:
Don't know what the grandparent meant by GSSAPI, that is just an API for various underlying auth methods. But what people usually use together with GSSAPI is Kerberos.

Kerberos can be very secure, much more so than CA-based or generally asymmetric crypto based approaches. Kerberos (if you ignore some extensions) uses symmetric cryptography, so it is less vulnerable to quantum computers. Use AES256 and you are fine, a quantum attacker can at the most degrade this to a 128bit level (according to current theories). Also, no weak RSA exponents, elliptic curve points at zero, variable-time implementations or other common pitfalls of asymmetric crypto. The trusted third party ("KDC" in Kerberos) distributes keys ("tickets") for pairs of user and service-on-server, so mutual authentication is always assured, not like in ssh or https where you can just ignore that pesky certificate or hostkey error. Keys are short-lived (hours to weeks usually), but there are builtin mechanisms for autorenew if desired. Each side of a key can also be bound to a host identity, so stealing tickets (like cookies in HTTP) can be made harder (but not impossible). The KDC can (theoretically, rarely implemented) also enforce authorisation by preventing users from obtaining tickets for services they are not authorized to use (the original idea of Kerberos was to just use it for authentication, the authorisation step is done by the service after authentication has been established).

Single-Sign-On with all the usual protocols is included automatically, you log in to your workstation and get a ticket-granting-ticket that can then be used to transparently get all the subsequent tickets for services you are using. The hardest one to implement is actually HTTP, because browsers suck and just implement the bare minimum.

However, the whole of Kerberos implementations is ancient, 1990s era software, packed with extensions upon extensions. You don't really want to expose a KDC to the open internet nowadays. The whole thing needs a redesign and rewrite in something safer than 1990s era C.

Oh, and there are mechanisms for federation like trust relationsships between realms and KDCs, but nobody uses those beyond merging internal corporate networks.
Then they grow up to be parents and realize that it's a pain and don't turn their kids into screen addicts.
Very cool idea; I'd like to see some physics interactions with the environment (eg crashing into trees), and perhaps a desktop variant which runs faster, but well done! kudos!
Anonymous Corpo Confessions
hey HN,

based on all the cracked nonsense we get dm'd, we’re starting a new series where we read out anonymous confessions (dodgy sales tactics, CEO meltdowns, fake DAUs and office affairs.)
If you’ve got a story that'll make your boss nervous, let us know.
This is an incredibly overwrought response. You could just as easily read the inverse of "normal" to be "exceptional," which in fact is how I meant it.
My favourite was always Akka Streams. I loved working with it so much.
> Does this really matter

Well, there is a matter of efficiency. Even when the feed reader uses the ETags/last-modified checks - which it should, but may not be granted practice after providers like Google ditched the technology (as some were apparently flooding them with "are we there yet" requests) - with an average for this year of 200 entries per XML you would be using 1/200th of each per download - and increasing...

On the average of 20kb of gzipped material per XML (rough average for this year for that feed) it may not seem much - but if you multiply that for all the feeds users register to, inefficiency starts building a volume...

Optimally, I would say, a feed provider should have (1) the "whole collection" XML - "download once to get all the past records in your DB", and (2) a "latest" XML, which should probably better calibrated by time (e.g. all the records of the past 48 hours for a newspaper; all the records for the past month for an every-few-days blog...).
It turns out that industry regulation can actually be a good thing sometimes.
I have a 5 year old, it takes effort to not expose them to phones and tablets, it's a conscious choice. We even avoid them when driving for a couple of hours, instead she can draw in a coloring book or we can play disney songs on the radio. It's all habits, how come our kid can sit alone in the back seat for an hour and not make a fuss, but her cousin needs mom to sit with her in the back seat for even a short drive. Mostly what I observe is parents using phones as a pacifier when they need the kid to sit still for awhile.
Do you have any advice for someone like me, who has about 5 long form article ideas but would like to just get stuff out there? For example, I want to blog about matrix profiles because I just learned about them and they’re super cool. But it feels like much scaffolding needs to occur for an audience to see the light.

As an example of the type of length my blogposts have: https://aneksteind.github.io/posts2022-03-04/index.html
Same answer as GDPR: when the majority/all of the companies implement it in a way that hurts everyone (businesses and end users alike), then the problem is with the regulator, not the regulated.
I appreciate the thoughtful reply, and I more or less completely agree with you about the harms. Regarding your weed comparison, I knew kids in middle school smoking tons of pot to get through the day; no doubt they were messing themselves up for life (at least a bit) with that habit. I hope social media isn’t quite so harmful, but I bet it’s not a ton better.

The weed example is a good comparison though. I view kids smoking lots of weed as a failure of a system. Knowing some of them, we’re usually talking about shitty family situations on top of a shitty school they’re made to attend for a solid amount of their waking life. The school should take their pot, of course it should, but it’s a marker far down a road that shouldn’t have been started along to begin with. There’s an enormously complicated set of social reasons that those kids’ schools, and their families, are messed up, but it’s as though there’s no will to tackle these issues. It’s much easier to attack the simple things you can see, the smoking and the phone use, with bandaid solutions that ignore the underlying causes. I almost see it as a distraction from really fixing anything. That’s where my frustration comes from, I really have no problem with the banning of the phones itself.
Please elaborate on the anti-entrepreneur shifts that have occurred in the US in the last 15 years that would disrupt this trend. I’m not aware of them.

If this were true, 15 years would definitely be enough time to show up in some form of data you can cite about the death of American startup culture.
Having the partial search bound to the up/down arrows is the most fundamental part of the shell for me. I very rarely have to resort to Ctrl-R. Every few weeks I might need a more complex history search, but for that I can just grep in my .zsh_history.
Scala is hands down the most wonderful language I have ever worked with. Some simple paradigms it offers e.g. case matching has changed the way I see and write code in every other language.
But public perception doesn’t necessarily reflect actual levels of corruption. Having dodgy planning approved is not the same as buying a seat at the head of the government for a quarter billion dollars.
How expensive is it to just keep a connection open?
Is Akka dead? TFA implies it in multiple places.
Skype solves it with an invite link. If you want to send an account, you take its invite link and send it, thus making a manual web of trust without search.
Why the /s? You're mixing apples and oranges I am afraid. Being a consumer of some product, is not the same as engineering the product. So you have the latest iPhone, good for you - still does not make you an engineer, nor do you have a clue what goes into designing, conceptualising and building a product. And yes, those of us with a bit more experience in the field, remember the times when engineering was done by people who had passion for it, not people desperate to make a career and income upgrade through bullshitting in meetings. For engineering a great product, as we can see with the great entshittification of pretty much everything today, Boeing being the most dangerous example, it's not just that the performative workers are being a drag on productivity and profitability, they are now also endangering everyone. I sure hope some idiot MBA does not come up with an idea of a medical PO or scrum master.
GDPR and Cookie acceptance popups are separate regulations.
I'm not especially impressed by the argument "if we assume it came from Manhattan, then we can know it came from Manhattan":

> Let’s suppose that Fosdick, incoherent from distress, forgot to include the words “to the” between “down” and “town” when describing the direction in which people were fleeing. With this in mind, we can assume that Lower Manhattan is in fact the original “downtown,” as posited by Schwarzer, and that the possible Bostonian origin of the word is simply a misunderstanding.
Other languages have caught up.

Back in the days using Java was mind-numbing boring and boilerplate-galore. Scala offered vastly more productivity and fun. These days Java is... fine. Scala is still amazing but Java doesn't cause active pain anymore. It becomes harder to justify using a niche language.

Scala will still live. It is an amazing language with a great combination of functional and OO programming. I just don't see a big breakthrough in popularity.
I don't dismiss the problem, I dismiss the solution.

Yes, plastic bottles (and caps) are likely a major environmental disaster.

The alternative to regulation is innovation: force bottle makers to invest x% of their profit or revenue into actual research on plastic recycling or capture.
Are these models also based on copyrighted material? Can anyone provide a brief explanation if the datasets are scraped or CC super-public-images ?
I pushed back a Meta Sr. Production Engineering reach out back 12 months to see where they're be at because they wanted relocation and nixed remote and hybrid WfH.
Microsoft has made the JPEG XL image extension available in the Microsoft Store
That's definitely not flipped classroom. In flipped classroom students read or watch videos before class, then work on problems interactively in class. The concepts are introduced in the readings and videos, not in the problems.
This is 2025. You aren’t going to debate facism. It isn’t in good faith.
> To me "dopamine addiction" feels a bit of a figure of speech to make people quickly understand and relate to the problems

I agree. I think the key point from the article is this: "they behave like addicts". The "dopamine" part is inessential to the diagnosis. Smartphones are like a drug, similar to or analogous to a drug. If they were literally a drug, causing overt physical withdrawal symptoms, then we might have taken the problem more seriously already.
Probably North, South and Central.

Nicaragua is one of 23 independent North American countries.

* https://en.wikipedia.org/wiki/United_States_occupation_of_Ni...

* https://en.wikipedia.org/wiki/CIA_activities_in_Nicaragua

The USofA has meddled in most American countries.
Ask HN: What language do you use for performant web jobs and services?
it seems many big web projects (rails, django, etc. GIL langs) chose go(lang) to write "services" that could be separated. Yet, just about any language with quick execution, quick startup(?), concurrency (and/or parallelism), and a garbage-collecter would work: lisps, ocaml, haxe, nim, crystal, CLI langs (now /w AOT), JVM langs! I wonder what HN folks used. Was it a good choice?

i was specifically thinking about crystal for rails, as i noticed a few interesting repos: mosquito, a job scheduler; fruit-juice, a ruby gem to enqueue jobs into mosquito (especially from rails); and lavinMQ, a successor of rabbitMQ(?).

https://github.com/mosquito-cr/mosquito | https://github.com/crimson-knight/fruit_juice | https://github.com/cloudamqp/lavinmq/
:D

The title was just a little disengenuous - the critical section got all the blame!
Thanks! The artist I'm contracting and I are in discussions on how to make the mascot better. It will be improved. And more Canadian.
The "New World" is re-discovering what the Balkans / Southern Europe have been doing for decades.
We'll Soon Pay Premium for Human-Written Words
Apple in code search profanity outrage (2006)
These just compare market cap. As the US economy is disproportionally financialized, that outcome is hardly surprising: This was just measuring market financialization by proxy. I mean two of the largest on the left, Google and Meta, are essentially just ad companies.

Now compare companies by actual revenue:

https://en.wikipedia.org/wiki/List_of_largest_companies_in_E...

https://en.wikipedia.org/wiki/List_of_largest_companies_in_t...

I omitted the 50 years distinction because, unsurprisingly, the companies in the US are younger.

None of these are actually relevant for founders, however, as even in the US you only have a couple dozen large cap companies, but millions of founders.

What is relevant is the share of employers per capita, as that shows us how many founders actually exist.

https://data.worldbank.org/indicator/SL.EMP.MPYR.ZS?most_rec...

https://data.worldbank.org/indicator/SL.EMP.MPYR.ZS?most_rec...
Someone tracked every single camera shot during the halftime show: https://www.youtube.com/watch?v=YXNWfFtgbNI
Deta Surf is a promising new browser that aims to change how you browse the web
There’s nothing wrong with moderation in moderation.
Performance is just about the number of $$ spent on hiring good engineers. At least several hundred million for something competitive with current Intel / AMD / Apple and those companies spent into the billions.

Mostly it doesn't depend that much on the exact instruction set. It is possible to make a bad one, but x86 actually managed by more luck than anything to avoid the worst mistakes -- unlike, say, VAX or 68020.

Arm64 and Riscv64 don't have any of the bad features that make performance hard, so if someone competent tries with either one then they'll succeed. Obviously Apple and Qualcomm in the Arm world, and there are something up to half a dozen well funded companies with good experienced engineers in the RISC-V world.
"add tests and do some tweaks"

there's the snake in the grass - you're asking the LLM to write tests after the code is generated, so naturally, it will write passing tests - including tests which enforce buggy behavior

if not now, then you're lucky; watch out for next time.
Tested: Taiyo Yuden 16x DVD-R (TYG03) – Top Quality, Now Fallen?
This is proprietary technology and is definitely NOT representative of normal fibre cables. I know because I had had to deal with contractors doing exactly this, which crushed the cables we ran. There are many things which could be better if we were willing to pay higher prices for them. At the end of the day, cheap and good enough usually wins.
That sounds like a lot of work, can't we get AI to do it for us?
I don't see any evidence of that, and in fact, in the video shows the style moving all over the place.

I look forward to giving it a try, but I don't have high hopes.
It's very impressive. It feels like the text is a bit of a hack where they're somehow rendering the text separately and interpolating it into the image. Not always, I got it to render calligraphy with flourishes, but only for a handful of words.

For example, I asked it to render a few lines of text on a medieval scroll, and it basically looked like a picture of a gothic font written onto a background image of a scroll
Please chill a bit.

> Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.
"coming from typescript" in this conversations feels like bait
As a former member of the V8 team I found this very interesting. (I was pre-Sea-of-Nodes and mostly not working on the compiler.)

Key quotes:

most instructions end up being on the effect or control chain, which imposes a strict order on the operations, and completely defeats the purpose of Sea of Nodes.

and

It’s hard to estimate the exact impact of this cache unfriendliness on memory. Still, now that we have our new CFG compiler, we can compare the number of cache misses between the two: Sea of Nodes suffers on average from about 3 times more L1 dcache misses compared to our new CFG IR, and up to 7 times more in some phases. We estimate that this costs up to 5% of compile time, although this number is a bit handwavy. Still, keep in mind that in a JIT compiler, compiling fast is essential.

I'd love to hear how the new optimizing compiler (Turboshaft) differs from the old one (Crankshaft). It's true that nobody managed to make Crankshaft work with try-catch, which was a huge gap in its coverage.
"Shrink designing" board games
What is your view to get out of the deep structural and systemic problems?
Show HN: Pointer – A general purpose AI agent via command line
Hi HN,

Jian and Thomas here (co-founders of Pointer).

Today we're sharing something we've been working on for the last two months. We've built a sota General Purpose AI Agent (GPA) that exists completely in the command line as a CLI tool.

Our goal was to show that with just minimal scaffolding, we could unlock the full potential of a model's agentic capabilities (Claude Sonnet 3.7) to create a highly effective GPA. What sets Pointer apart is its ability to be more agentic than interactive coding tools like Claude Code, using multiple tools autonomously.

Via CLI, we can direct Pointer to perform multi-step tasks autonomously. It aims to assist you in your workflows by allowing an LLM to access:

- Web Search

- Browser: Using a headful, stateful browser with a browser agent to interact with web pages (tasks like filling forms, navigating, exploring content)

- File System Access: Read/write/edit local files

- Code: Generate and run code

- Bash: Can run commands

We've used it to work on itself, perform complete end-to-end software development workflows, reorganize our file systems on our desktop (:D), submit forms, and do research for us.

There's a Discord for installation instructions, discussion, and showcases where we'd welcome your feedback and testing!

Thanks for your attention.

Cheers,

The Pointer team

-----

Links

Installation instructions: https://discord.gg/ZsSwZM7v

Website: https://www.trypointer.com/

Demo video 1: https://youtu.be/00typbr9Rg8

Demo video 2: https://youtu.be/9OsMpBrIg7Q

-----
>but we do need to consider how to teach children long term focus, educate them to spot misinformation

The kids are already much better at spotting misinformation than the older generations are, as I'm sure anyone with boomer relatives on Facebook will have noticed.
Good points, in my country we speak of inflation of top grades. Basically it's become the norm to be an A-grade student and anything below that is seen as failure. It used to be that 1 is fail and 2 is a passing grade, meaning 2 should mean that you've mastered the material, 3 is good, 4 is very good, and 5 is excellent. And today 2 is more like charity, 3 is bad, 4 is ok, and 5 is expected. Ideally, in a class of 20 students, only a handful should ever get grade 5 on a test. But that's not the case anymore, parents demand good grades. So you get all the wrong incentives.
I have fought and won against the piracy of my books as an indie author
> Dialyzer/dialyxyr typespecs are useless most of the time

I did Elixir for a year or so. I have to agree. I had to routinely jump up several layers of call sites to understand what I could do with the arguments.

Development where teams share stuff benefits so much from static types. For teams, the best I have experienced is Go.

The BEAM is great and all other systems are just partial and poor implementations of it, as they say. But k8s does a lot. If I could get typing that actually helped me, like in Go, Elixir would jump up my recommendation list
First AI image generator to pass the uncanny valley test? Seems like it. This is the biggest leap in image generation quality I've ever seen.

How much longer until an AI that can generate 30 frames with this quality and make a movie?

About 1.5 years ago, I thought AI would eventually allow anyone with an idea to make a Hollywood quality movie. Seems like we're not too far off. Maybe 2-3 more years?
Social Media Will Be Dead Within 10 Years
And how does your experience with Elixir compare to Erlang?
Thing is, while C and C++ might be a late comers to the whole cross platform package management, vcpkg and conan are already quite established, what we are having is folks stuck in the old ways.
> Would be a lot of thankless work otherwise

So just don't include them, rather no info than completely incorrect LLM hallucinations
Right, but lets get real here: GitHub Actions is fundamentally insecure. You are blindly trusting upstream libraries and GitHub itself to respect and protect your secrets.
It's a joke. It's probably made there anyway.
They will take a very long year to finish it, with very long hours.

These are not your kind of years, procrastinating underperforming you cannot judge.
You may be right, on the other hand it always feels like the next goalpost is the final one.

I'm pretty sure if something like this happens some dude will show up from nowhere and claim that it's just parroting what other, real people have written, just blended it together and randomly spitted it out – "real AI would come up with original ideas like cure for cancer" he'll say.

After some form of that comes another dude will show up and say that this "alphafold while-loop" is not real AI because he just went for lunch and there was a guy flipping burgers – and that "AI" can't do it so it's shit.

https://areweagiyet.com should plot those future points as well with all those funky goals like "if Einstein had access to the Internet, Wolfram etc. he could came up with it anyway so not better than humans per se", or "had to be prompted and guided by human to find this answer so didn't do it by itself really" etc.
What percentage of the population are in K-12 any given time -- 15%? 20%? To have 1-1 tuition for all of them, we'd have to have at least that many adults also in education.
System-Agnostic Resilience in Microservices
Requesting read and write access to all repos public and private no less.
> dozens of IPs, so every IP just makes 1-2 requests in total

Dozens of IPs making 1-2 requests per IP hardly seems like something to spend time worrying about.
The article doesn't go in detail about how they solve that. But that's the key problem they highlight as being solved. It's a product which manages multiple cameras for events, and color correction is one of those "obvious in hindsight" problems to be solved.
The cratering Chinese birthrate is a pretty strong argument that what China's doing isn't working out well for young people. The only reason China limited screen time was so that kids would spend more time studying, because the government wants kids to focus on slaving their lives away in miserable jobs with 80-hour workweeks to keep the GDP growing.
POWER10 supports AltiVec too.
Generative AI: Next Evolution in Tech-Shaped Human Knowledge
It could be just a different profile.
It's about time for Education to adapt to the new generations
While that might be the case, a 'landlord' can't just enter a house or apartment.
You can do it as a parent though.
It'll be quite possible in a few years with robots; there won't be any more need for shoving 20-30 kids together in a classroom.