skysight-inc/HackerNews huggingface dataset:
With OIDC, both occur: the client is redirected to the authentication server where they directly authenticate, then carries a token cross-domain back to the service. Finally, the service validates the token against the auth server.

The alternative would be something where I enter my Google username/password on random websites, and trust that they will forward it to Google and not do anything nefarious. This is less secure and less private.
> I'm worried that might not be in the best interests of the content creator or advertisers.

My heart bleeds for them.
It’s not a decision made per individual submission or comment, I think. Of course, the specific automated mechanism exists because some human decided to implement it. My point is, in the case of the flagging mechanism, it’s not the moderators who are deciding based on the contents of the submission or comment.
You know that thing where people started hating Google for not finding pages with the things actually mentioned in the query? That, but even more so.
Have you looked at the list of security issues fixed by Apple? They contain multiple zero-day exploits found in the wild.

This week’s releases: 100+ security issues of varying severity fixed in macOS, 50+ issues fixed in iOS.

Citizen Lab has some reports on exploits.
I think the point is that if stuff is energy then energy is flowing into the wrong things and is not equally distributed. So we have enough of "stuff" but a lot of it is the wrong kind and access to that is not democratic. Rephrased again - inefficient human organization and outdated systems of values are what is slowing us down.
you described a life under techno-fascism
Sundar Pichai got into IIT Kharagpur in the 90s (one of the toughest engineering/technical school to get into). So he has more technical chops than many self-proclaimed engineers that seem to diss on his McKinsey credentials
Given amount of duplication and variation there is no way to guarantee any level of security in such codebase. The bright future ahead!
I understand leetcode is a grind. I was unemployed so I had time to do it, but if you're looking to interview while working full time it certainly is overwhelming!

I haven't learned too much from my studying, but as a non-cs background engineer it did help in a few ways, plus I think the structured practice of problem solving is helpful for any coding interview, whether practical or algorithm based.
> so they’ve likely (along with other entities) identified alternate methods to access communications.

> Is there any evidence that iPhones have some security exploit that Apple + Three letter agencies can use?

GP never made that claim.
Doesn't that require bringing someone else who knows you to vouch for you? It's not exactly a smooth process that you'd want to regularly go through.
Diary of a Voice AI Developer #1: WebRTC and Browser-Based AI Dialer Systems
Hey everyone—I'm experimenting with creating posts about my daily activities and projects, whether they're side projects or client-related. I just want to try sharing more about what I'm working on, the problems I'm encountering, and the things I'm learning along the way.

I see this as a diary or personal log of my developer journey—something I can always look back at in the future.

So, here's my first entry, sharing a bit about what I worked on today, which was mostly client-focused:

Today, I spent most of my time working on a pretty unique AI voice project for a client. It's a different setup compared to typical AI voice systems that either usually connect to a virtual phone number provided by a telephony provider or is directly integrated into your website and usually works with a push to talk button setup.

In this project, the AI actually logs into browser-based dialer software and makes calls (imagine something like Google Voice, where you make phone calls and talk to people that are on the phone directly from your browser) & interacts with the software exactly like a human user. And the AI isnt simply handling phone conversations through the browser, but it is also interacting with the software itself— like clicking buttons, taking notes, basically performing all the tasks you'd normally do manually.

Now building this out seemed more straightforward at first, especially for a relatively young developer like myself, but I quickly ran into some interesting challenges. One particular challenge is what I've been trying to solve today:

To give a bit more context, I'm using OpenAI’s Realtime API, which handles audio streaming via WebRTC. The issue I'm facing is that all of this audio processing currently happens in my Node.js backend environment.

This creates a challenge because, for the caller on the phone to actually hear the AI’s responses, I need to play the audio inside the browser context/environment.

Essentially, I'm have to directly stream the audio from my Node.js server environment to the browser environment for that to happen and as it turns out, streaming real-time audio between these two separate environments isn't as straightforward as it initially seemed.

Right now, my temporary solution (just to have something demoable) is to take the AI’s transcribed text responses and feed them through a text-to-speech system running directly in the browser environment. While it works fine for demonstrations, it's definitely not ideal for production. It introduces noticeable latency and doesn't seem to fully leverage the full capabilities of WebRTC.

Here is a video breakdown that more visually showcases what I'm building and includes a demo - https://youtu.be/_5YJM_s5k4w?si=olyCOCmOe8fn763B
Construction projects are so rarely on time and on budget, it’s a trope.
I don't see any issue presented here that is exclusive to Real ID.
The arguments presented here seem to logically argue against any government identification. Real ID isn't required for domestic travel, it's required for federally-regulated air travel. According to DHS, it doesn't create new databases, it's a credentialing standard.

I'm not familiar with Real ID, but this article doesn't present substantive arguments against it. It comes off a bit histrionic:

> And if you lose a Real ID—or it malfunctions—get ready for bureaucratic nightmares that would make Kafka blush. Newspapers will carry stories about people with Real ID problems who can’t access government offices to resolve them, because they don’t have Real ID.
I think its a side-effect of depoliticization by neoliberal reform from the 80s onward in the western liberal democracies. Everything has already been privatized and financialized, technocratic decision making has taken over. People are increasingly hurt by this system, but there is no political conceptualization of where that hurt is coming from. So people are galvanized into impotent political camps where they can hysterically scream about gay people, abortion, immigrants, guns or whatever.

I would be very curious to know what people here even consider "rational debate", probably a bunch of centrist takes on gay people, abortion, immigrants, guns or whatever would be my guess.
Alfred, which lets me fuzzy search pretty much anything on my computer, comes in at a whopping 17.1 MB. 80 MB is OK, but standards have definitely been changed due to Electron.
US Administration announces 34% tariffs on China, 20% on EU
You'd be surprised how much the government would potentially hurt itself in its own confusion. Not all parts of it are aligned to the same beliefs / mission, and there are certainly parts that believe in the saying "Why are you worried if you have nothing to hide".
I edited to include the process as written by the TSA on their website. It's definitely going to be less fun if you don't bring ID, and they suggest you arrive early.
I’ll bet this will fix HN’s transparency issues.
I thought the whole point was to give it as cringy name as possible to discourage people from using AI and instead learn to program properly. It was called prompt engineering before but I suppose it didn't sound discouraging enough.
Tell me you don't work in the hardware business without telling me you don't work in the hardware business!
Back in the day, we'd play city trial in sandbox mode and drive all the vehicles we unlocked up on top of the floating platform. The achievement system was also great.
Same with trading your time for stock options (that you hope are eventually negotiable shares); trust is earned in drops and lost in buckets.
Maybe we should strive to make it illegal for companies to collect and sell phone data instead of allowing more mass data collection?
"Generally I relied on canned goods to supply the bulk of my meals. Each can was protected in double Ziplock bags to prevent rusting. Pinhole leaks in cans caused by rust and corrosion can be lethal to the unsuspecting mariner."

Is a pinhole leak on a can really that dangerous on a 24 day trip. I get ocean air...but wow. That is something I would have underestimated for sure.

wondering if someone in the know can weigh in? is this over cautious or like yeah, good idea?
Well, it is kind of similar. And for a split second you really made me think it was him, so it's not that big a mistake :)
> Power and money aren't the same thing.

Kind of are in a capitalist society. Sure you need extra steps but it's still power. No need to go far... Elon is living proof of that. Other billionaires do the same but they don't need all the attention.

You're arguing you don't necessarily need money to have power but if you have money you absolutely do have power, which is my point.

> This would be considered one of those attacks you just mentioned.

I know... I couldn't help myself to hit back at a useless comment.
Or they can "One Plus One" you where they ask you verification questions from your credit profile to verify you are who you say you are.
I said it was an evil action, I didn't call them evil. This is the standard essentialism fallacy of morality. Doing an evil thing does not make your inherently evil. Holding slaves in 1800s is evil, but I don't think the people are inherently evil.

I have a pretty good understanding of why people didn't vote, the block I care about a lot more. The people that did vote for Trump specifically either are ride or die conservative, fell victim to misinformation, or are otherwise uneducated.

Trying to say that Biden and the DNC is "too blame" for someone picking a president that is happy sending citizens to an El Salvador prison is something. I expect a bit more from the electorate myself, and think they should take some accountability for their own mistakes.
Yeah, I would argue it's less about removing trust from the client (which will ultimately get an auth token in addition to secrets and plaintext messages) and more about allowing for centralized authentication and authorization policies.
Do you know where someone can read more about how to make things "buzzing" , very interested in that kind of sound quality
My understanding is that this sort of rear-end crash generally tapers off as a sufficient number of local drivers become accustomed to driving safely instead of racing to make it through a yellow light.

But even if it doesn't, it might still be a reasonable tradeoff. A higher number of minor rear-end crashes (typically between unsafe drivers) might be acceptable if it helps to reduce more t-bone crashes that are more likely to be fatal.
> There's not much more justification for people in uniform building software tools than there is having them design and build artillery guns or transport jets.

Yes exactly. I don't have much to add but that was such a great point I wanted to emphasize it.

Also important to consider that as wasteful and expensive as it is to have contractors build stuff, there's at least important market functions in there doing some things and the contractor can be held accountable.
As a Black person, I don't much see a large difference between the two things you mentioned?

Which is to say, it's certainly convenient to think that racism works like "there are racist cops on one hand and innocent well-meaning cops on the other," but that strikes me as an unhelpful oversimplification.

More specifically, I generally believe that most negative effects of racism come from folks who don't much realize how racist they are.
News reports would be much clearer if each faction had a medieval crest, logo, or even UUID.
25% on South Korea, 32% on Taiwan, 36% on Thailand, 46% on Vietnam

What a massive and moronic blow to our soft power.
> It would be a good thing for the world if HN was spun out as a non-profit and maintained long-term. But in any case, we can all hope that it will at least continue to be stewarded by good people for a while longer.

If it ain't broke, don't fix it...
That might work for other metros, but the New York Subway is the New York Subway. It is how it is. The old style of map works within New York culture for a variety of complicated reasons that nobody fully understands, but we all know it's how it's supposed to be.
Everybody has access to a phenomenal, state of the art neural network -- it lies between their ears and sadly goes underused much of the time.

Even if you use the electronic sort of NN, at best those are only good at serving as thought-provocation or inspiration for the one the good Lord gave you.
This whole hype cycle man. It's all shiny demos and no real products.
Once I can bring my own domain, I'll be more interested.
I doubt 20k will affect their balance sheets very much, either.
Thanks. Someone told me that the 'blind' review doesn't often work because they already know who is doing what in their field.
This is the challenge. This is tiny and delightful, but most hosting systems are monsters from a compliance perspective not because of a hunger for bureaucracy but that content moderation is SUPER hard.
It's certainly annoying but it's not all that big of a deal. Tens of thousands of people lose IDs and wallets every year and manage to get on the plane home anyways. I've seen people go through it they use common sense means to verify you.
Not really. It's like this in many cities in the UK.
I guess I didn’t want to buy any new tech anyways.

Thanks Tim Apple.
Evi has been missing at sea since 2013.

https://en.m.wikipedia.org/wiki/Evi_Nemeth
As a businessperson, you need to go where your customers are. If that's social media, that's where you need to be. Not all demographics are there, though, so you need to know who your customers are to know the best place to find them.
Also consider that traffic violations are a source of funding for a municipality. Using technology to eliminate violations completely may not be desirable.
The recent GPUs were a "paper launch"
It’s how old-style forums work, and I’m still on a couple of them. It functions quite well with the right moderation.
That ‘presumably’ is doing a lot of lifting and would be better supported by some examples of such posts.
My company blocks ssh. Is there a way to tunnel this through HTTP?
I have a feeling that ever since late January 2025 in the U.S., oversight and regulatory overview might be more lax than in the past, and there will less of those "pesky" fines and criminal investigations...which begs the question: will 2025 be the year of increased negligent and/or nefarious behavior - both from corporate entities as well as hackers?

...I gotta go take a walk near some nature and flowers, because i just depressed myself with my comment. :-(
Having consumer allocate the memory where possible has other benefits in that the consumer can use more efficient allocation techniques (stack, arenas etc), and given that Win32 API design goes all the way back to the earliest version of Windows running on very resource-limited PCs, that would be the main reason why.

However, in cases where this wasn't consistently feasible - e.g. COM - Windows instead mandates the use of a common API to manage memory: CoGetMalloc etc.
I tend to agree, but have softened on this, not only but also because of the handy devtools feature to expand them.

I do use them for margin, padding, inset.

Others I dislike a bit, for example I hate the one for background whenever things get complex. Others I don't like, but have become used to, for example the "flex" shorthand. I prefer separate flex-grow, flex-shrink and flex-basis properties.

Downside (and sometimes, intended upside!) to all of them is how they interact with inheritance and the cascade, i.e. accidentally overriding properties. OTOH it can prevent you from forgetting to override inherited properties.

Since the properties for which a shorthand exists often are closely related, this can be an upside.

The one in the article I still have to digest.
12 inches is almost a tablet. I assume one also has to buy and carry an external monitor?

Sadly manufacturers decided that everything larger than 15 inches is "professional" and charge ridiculous prices for such laptops.
Mozilla is a no-profit foundation, not a company which needs to be sustainable or be profitable.

I agree Mozilla lost its way but I would still hope in them improving over time than trusting yet another for-profit to serve us in the long-term.
I have never seen a wallet that won't take a passport card. Also, my passport card is precisely the same dimensions as every other card in my wallet. Maybe you got a weird one?
Matches the expectation analysts have had from December 2024 [0]

"In the baseline scenario, we assume that the US will raise its effective WATR against Chinese goods by a total of 20 percentage points over 2025-27. We expect the effective tariff rate on China to rise by 5-10 percentage points in 2025, owing to the imposition of tariffs related to fentanyl smuggling disputes. Mr Trump will further phase in tariffs from late 2025 with a wider range of excuses and policy tools, eventually bringing the effective WATR facing Chinese exports to about 30% by 2027."

[0] - https://www.eiu.com/n/the-impact-of-us-tariffs-on-china-thre...
It's not just soft power. It is also economic power. Also, note that there is a baseline 10% on all countries.
Are those in addition to existing tariffs?

And there are a lot more countries in that list, South Korea and Taiwan are going to really hurt for electronics. And I assume Vietnam, Cambodia, Bangladesh and other countries will hurt for other good that are made cheaply there.
Excited to see elixir used in conjunction with Obsidian!

How was the experience of implementing CRDTs with Elixir?
It's wonderful that it seems work well for you but my experience in bridging group chats with XMPP or IRC was terrible. Lost messages, bridge crashes, puppet accounts getting randomly broken/duplicated with discarded messages.

From the bridges I've run, only the Telegram bridge is somewhat stable for me but it also has it's warts.

Might be different if you run a strictly personal server for 1:1 conversations but I'd say from an ux perspective the bridges idea largely failed IMHO.

I don't think it's the fault of element/matrix it's a difficult problem and I guess with limited resources they made a lot of progress and made things possible that weren't before but it's not plug and play, at least it wasn't for me.

In general I've found it's also difficult to communicate in group chats if there are two worlds with a slightly different view (missing reactions, some elements of the messenger are not supported like captions, polls and so on...)
Trump Unveils Sweeping Retaliatory Tariffs at White House
A school being tough to get into due to an abundance of population (too many applicants) means little. There has been not one significant person coming out of those institutions (compared to the many figures coming out of the US, despite a population 5x smaller). I would not hire Sundar as a junior engineer in my team. Of course, you might see something in Google's current leadership which I do not see. Time will tell how performant the company will be long term. Again, I believe skills that make one successful in consulting rarely translate to success in the engineering field.
Plus, most of what Real ID does is increase the documents that you need to show to get your ID. The state generally isn't then putting all those documents online somewhere -- it's just requiring that you show them to an employee at the time of application. So in terms of what's stealable by hackers, nothing has changed.

Edit: I’m wrong, the state is required to keep copies. It’s not required to keep digital copies, but that’s probably simplest and so…
I know this really bugs some people but every tech company these days has a demonym for its employees.

It doesn't mean that employees have some cultlike adoration for the company. It's just very convenient inside the company to have a single short word to refer to all employees of the business.
Is it really reciprocal when you started it?
Hey folks, thanks for the thoughtful responses and questions — I really appreciate the engagement and the mix of perspectives.

@torstenvl: You’re absolutely right. We’re already working on refining the mobile UX and adjusting the animations on the hero section so they don’t cause layout shifts. Thanks for flagging that. Accessibility and clarity are priorities, so this feedback is super helpful.

@ash_091 and others confused by the term “vet”: Totally understand the cultural difference — in the US, “vet” is commonly used as shorthand for “military veteran,” but that isn’t universal. We’ll look at how we can make the messaging clearer, especially for international visitors, without losing identity.

@psunavy03 and @pc86: The conversation around military coding careers is valid and nuanced. At Vets Who Code, we’re focused on helping veterans after they separate, transition, or retire — giving them tech skills and a community so they can thrive in the civilian workforce. We’re not advocating for in-uniform development to replace contractors or acquisitions but rather preparing folks to enter a very different kind of battlefield: the job market.

@redeux: I hear you. You’re absolutely right — we don’t promote copy-paste AI coding. One of our core lessons is about critical thinking with AI: evaluating, refining, and using it as a tool, not a crutch. And yes — some placeholder copy slipped through the cracks during early drafts. Thanks for holding us accountable. We’ll clean that up.

Re: Mentorship Questions
1. Mentor Duties & Responsibilities
Mentors guide one or more troops (our learners) through their learning journey. This includes reviewing projects, offering career advice, sharing lessons from your experience, and helping troubleshoot when someone hits a wall. You don’t need to know everything — just be willing to show up, support, and share honestly.
2. 1:1s and Time Commitment
We generally aim for one 1:1 per month per troop. Most mentors spend about 1–2 hours a week, depending on availability and the needs of their mentee(s). We respect your time — consistency matters more than quantity. If you can only give 30 minutes a week, we’ll match that with the right person.

Who We Are

Vets Who Code is a nonprofit that’s helped our troops land over $20 million in salaries in tech. We’ve been doing this work for over a decade. No fluff, no tuition, no BS. Just real training and support.

We’ve been honored by:
• The White House (yes, that one — under President Obama)
• Featured in WIRED, HuffPost, Stack Overflow, GitHub, and more
• Invited to speak at Google I/O, Facebook F8, and DreamForce
• Recognized as a GitHub Star, Google Developer Expert, and Twilio Champion

This isn’t a side project — this is our mission.

If you’re curious, open to mentoring, or just want to help us improve the mission, hit me up directly or through the contact page. We’re serious about doing right by our community.

— Jerome Hardaway
Founder, Vets Who Code