skysight-inc/HackerNews huggingface dataset:
I haven't mentioned MITM attacks in this article thoroughly. Can you give some examples on what authentication implementations carry a MITM risk?

I thought anything carried over SSL doesn't have a _significant_ MITM risk.
There is a minimum fee for packages, yes. At this point I've lost track of all the changes but at one point I remember seeing $100 or $150 per package under some conditions.

Carriers will also charge a fee for brokering it. USPS has a $9 fee, other carriers are higher.

We went from being free to order things internationally to having out of control fees and taxes on top of everything.

There's a lot of sneering at Temu and Shein, but the hobbyist and electronics worlds are about to get hit extremely hard by the lack of access to tools and parts from Aliexpress. It's really sad.
You don't need to cover the entire country. Building out routes that are already seeing demand would be plenty.
> Then again, the way things are rapidly improving I suspect I can wait 6 months and they'll have a model that can do what I want.

I believe this. I've been having the forgetting problem happen less with Gemini 2.5 Pro. It does hallucinate, but I can get far just pasting all the docs and a few examples, and asking it to double check everything according to the docs instead of relying on its memory.
How does the geographic context explain how the US was (apparently) an excellent fit for passenger rail until the 1920s-1930s, but not anymore?

I don't think geography is the explanation. US geography is great for passenger rail. Japanese geography is terrible for it (too many mountains). In my opinion Japan's passenger rail situation today would be no different than the US if American rail companies had managed Japanese rail lines throughout the 20th century.

It's nice to imagine that geography is the reason, and so everything is as it should be, this was the fated result. But that's simply not the case.

Of course, rail is not a good fit for a weekend getaway from LA to New York. Even in Japan, where you can ride the bullet train all the way from Kyushu to Hokkaido, almost anyone would book a flight for that unless they really hated flying. But that doesn't mean that rail isn't well suited to American geography.
You've been downvoted, but you are 100% correct. It is the result of the UPU treaty: https://www.weforum.org/stories/2018/10/us-withdrawing-144-y...
But they’re not sending you this number via email.
Very well done! And amazing set of components / templates.

What is missing is an About | Contact Us | FAQ - things like that.
Isn’t that how good product development should look like for Apple/Gooogle though?

Find something useful for one family, see if more families find it useful as well. If so, scale to platform level.
Monoprice cables are made in China. They'll also cost 10x.
Either you will pay more for domestic producers or (more likely) you will not pay at all since either domestic production will not ramp up for niche things, or you will not be willing to pay hikes domestic prices for the same utility.
On the TinyEMU page? https://bellard.org/tinyemu/
Stop karma whoring!!

If it is not suspicious then why has the comment been deleted, causing this comment to rise to the top level?
This is where I was at, but am believing less and less as the parallels stack up.

I used to tell people to look at Russia if they wanted to see the Nazi script play out, and that this could never happen in the USA. Now I'm reminded of others that weren't taken seriously early enough.
I find it perfect for technical interviews over screen sharing, since we test for some basic degree of ease on remote linux systems.
> Move them faster than their family, friends, and legal counsel can possibly follow. Get them on a plane to El Salvador

The question is whether these folks would be better off if the abductors were obstructed. They’re no longer operating under the colour of law. Disabling vehicles, possible officers, or otherwise creating chaos that makes moving victims around starts to make sense. Because if the other side isn’t playing by the rules, it really doesn’t make sense for you to.
There's so much chaos being flooded out all at once that things that massively impact normal people don't have time to gain traction in the news. And the moment things do make the news, there's an even larger flood of people everywhere saying, "Fake news. Didn't happen." followed by "So what? How does this affect you personally?" and then ending with "This is actually a great thing and you're suspicious if you're against this."
https://support.google.com/edu/classroom/thread/338328426?hl...
> 1. As previously stated not all universities are doing what you claimed. Ohio for one, and the first link says "some" but there are thousands.

Not all, but most. It may have decreased as some universities have started to abandon it now that it is falling out of fashion, but it was a large percentage, I'd estimate 90% offhand, but it's not like there's a lot of sources on this. It is a movement led by an aggressive and militant minority who silences and drives out anyone who disagrees. Most professors, who just want to do their research on 19th century French poetry or the mating habits of dung beetles or whatever they care about just shut up and try to keep their heads down so they don't get denied tenure or have students protesting at their office because they said the wrong pronoun. If you know people in academia and they trust you they will tell you off the record that it is nearly universal and so, so much worse than what is publicly reported. Sorry, I can't provide sources for this. You can trust me or not, but I know what I've seen and what people have told me.

> There are private schools that receive public money but discriminate against LGBQT [1] However nothing has been said or done about this by Trump in the past or now. These religious schools are more conservative and attacks would likely anger the base.

There is a religious freedom issue, because religion is also a protected class. I don't know, religious schools are not that many and they are not a big factor in academia. If you really care about that religion, then you go there, if not there are lots of other places. I don't know why an LGBQT person would want to force their way into going to a school where everyone thinks they're sinful and destined for hell. Seems like masochism to me.

> My opinion is that Vance is attacking universities not because he cares about merit based hiring or the quality of students but for selfish political reasons.

Well, neither of us can read his mind, but he benefited from a system that espoused meritocracy and used it to improve his life from growing up very poor to becoming vice president of the United States. I think it's reasonable that he would want to preserve that so other people could also have that opportunity and not get denied because they were the wrong race.
> the need for translating vague desires from laypeople into a precise specification will remain

What makes you think LLMs will never be able to do that?

Have you tried any of the various DeepResearch products? The workflow is that you make a request for a research project; and then it asks various clarifying questions to narrow down the specific question, acceptable sources, etc.; and only then does it do all the research and collate a report for you.
https://www.pymnts.com/artificial-intelligence-2/2025/openai...
> If we rethink our consumption, we could become happier, need less space and spend less money even at higher prices.

I can't believe how many people are trying to put a positive spin on the government imposing massive taxation on people's right to buy things from other countries.

It's easy to sneer at junk fashion from Temu or whatever, but access to cheap tools and parts was the lifeblood of hobbyists and experimenters across the country.

It's not just cheap clothes from Temu. This administration just took away your right to buy anything cheaply internationally. That's not a good thing.
Currently, we can't rely entirely on AI for coding. If you do, you'll face chaos when major changes are needed，this is the technical debt AI introduces. So just use it to learn new techniques, and don't feel guilty about that.
You're talking about something entirely different. The typical case for the renting medieval peasant is that the rent on a given plot of land is set by custom, the nominal amount has been the same for centuries, and it can never be changed for any reason. No administrative task could ever be simpler than collecting the rent.

Landowners responded to that by adjusting the size of the units in which land rents were due, which is why a major demand of peasant movements was for standardized units.

The fact that rents were absolutely nonnegotiable led to other developments, such as the lord being so indifferent as to exactly who was renting from him that the renter was free to leave his status to whoever he chose in his will.
HN might want to be a website for VC startups, but I don't think the community here has been about that for a very long time now.
Yet my AMD APU was never properly supported for hardware video decoding, and could only do up to OpenGL 3.3, while the Windows 10 driver could go up to OpenGL 4.1.
Ads was THE thing that our tech industry was exporting to the world. I was astonished with the people who thought that tech would be not affected by the tariffs.
Habeus corpus is only suspended in war. Not a citizen doesn’t mean Russia can jail any American connecting in Moscow because they had a bad haircut.
The browsers aren't going to let you not automate, because automated certificate issuance is safer and better for the ecosystem. Your convenience and the ease with which you can provision the interface to your router, which only you use, is not going to be a factor in that decision.
Two different flows, an online and an offline.

TOTP devices can be powered offline, which makes it extra secure, as you don't transfer any data around, possibility of leaking it is extremely low.

Random numbers could only work in online flow, where server sends you a one-time code using a secure communication method, such as a trusted phone number or email address.
They look like them but taste much closer to a mandarin!
As someone who’s stuck with Whatsapp and no way out (friends and family won’t switch), I dearly hope for a split.

I do struggle to understand how we here casually lump tohether totally different platforms as comptetitors.

It’s not like I can use Youtube or Tiktok instead of Whatsapp with my family for direct and group discussion. Even X and Instagram would be a stretch, as their raison d’être is public social media and not instant messaging.

Sure the platforms have overlapping features, but you ain’t gonna use a knife insted of a spoon.
It's like building a decorative bridge over a decorative pond in your backyard out of scrap wood versus building an actual bridge for public traffic.
Very nice article!

Every time I was part of a team designing IoT devices, there would be a slightly more security-focused engineer who would manage to have some level of protection for the boot. I'm surprised there was no resistance here to dump and reflash the firmware. Why would they not even bother encrypting the flash? How common is that?

It would have been nice to give the product name.
For many products, domestically manufactured substitutes still have some inputs that come from international suppliers.

Could be some raw materials, the machines that make it, or the packaging. Now everything is going to be massively more expensive and it's going to have impacts even on domestically manufactured goods.

There's also the substitution effect, where heavy tariffs on one thing will increase demand on substitutes and therefore raise their prices.

It's really bad policy all around. Nobody who has any familiarity with manufacturing thinks it's going to encourage more domestic manufacturing because the tariffs suddenly restricted your ability to buy inputs and machines at reasonable prices. You're better off building a factory in another country to service global demand.
Its the usual anti semitic, disguised as anti israel colonislism , disguised as an open question , asked by someone who us part by a movement that has genocided the whole middle east of all minorities . Its as deeply intellectually dishonest, as the whole "russia is a anti imperal power" tankies were, a narrative ignoring the horrors on the ground and willing to support israeli extremists and sacrifice the Palestinian people as pawns.
Do they? AI bots provide me with nothing (best case scenario) or giving my content in their pages without "read more" links thus lowering my number of visitors.

Search bots, and specially Google, provide my site a lot of value. They respect the robots.txt, I can see that about half my visits come from search, they identify properly as bots. It's almost impossible to notice a search bot in the graphs.

But AI bots suck. They don't even read the robots.txt, they hit the site as hard as it can hold, when they receive a 5xx, a 444 or a 426 they interpret it as "keep requesting hard until you get a 200", they can easily DoS or bankrupt a small site, they use fake user agents. As the OP post shows, their activity can be clearly seen in the log graphs as huge spikes coming from a single client. OpenAI scanned 100% of one of my sites (more than 20,000 individual pages) in two days causing intermitent DoS, while the Google is at 80% of the sitemap.xml. And cherry on top, I still can't see a single visit in my logs that come from their services.

I think you might be confusing search bots with AI bots.
The vibes are much better if you just tell it to run a certain command, then it can see the error message and you don't have to paste back and forth so much. You can go make a cup of tea and it'll just iterate on changing files and running that command until it does the desired thing.
Why not one for each new connection? Then CA could host service to verify re-use.
If one doesn't want to regenerate passwords, don't log people out. The only reason this "workflow" works is that email sessions work for years, sometimes decades, without nagging users to re-login.

Sites, do yourself a favor and store active sessions indefinitely and the only password-dealing scenario you'll ever see will be (1) at sign up, once per user, (2) when users clear cookies, which the login-problematic types rarely do for obvious reasons.

95% of my family password support is the sites that log them out on their own.

Edit: grammar/pronouns
Well, it's a good thing we've settled on... genmoji. Yeah.
It's fine, there will be new jobs.
https://support.google.com/edu/classroom/thread/338328678?hl...
> I'm surprised there was no resistance here to dump and reflash the firmware.

Some devices are purchased because their firmware is easy to replace. Upcoming regulations on IoT cybersecurity might make it harder to sell such devices. ESP32-based devices have been successful in several niches, https://hn.algolia.com/?query=esp32
The concept has been theoretically validated, and the system is currently patent-pending.I’m now collaborating with an industry partner to develop a working prototype. Happy to go into technical details if you're curious!
All of the major labs have one thing in common: they have nearly unlimited data and money, but what they don’t have unlimited is talent and ideas. It’s just a way of progressing without having to „hire every idea“.
Show HN: 3D Lord of the Rings inspired museum created with Three.js and Blender
Not sure about emails (probably reasonably secure, I think most MTAs use TLS now).

For text message codes though, there’s plenty of attacks. In authoritarian regimes, government can monitor your text messages directly – I think some protestors in Belarus have lost their Telegram accounts due to this. There’s also the SIM swapping attack, where an attacker pretends to be you and ports out your number: https://en.wikipedia.org/wiki/SIM_swap_scam
It's not that complicated.

They don't pay the tariffs. The person receiving the package does. Many carriers will slap you with the tariff charge, a brokerage fee, and then send you to collections if you don't pay it.

The vendors don't care because they're making the sale and the tariffs are the other person's responsibility. Caveat emptor.
Planes did not exists.
I see plenty of stories from Europe, and they too complain about work, but never about having to work 60-80 hours. Even if it's rare in the US, it still seems more common than in Europe. Similarly, I hear stories about working 3 jobs in the US which I don't hear from Europe. I do hear people complain about managers, pay, or office politics in Europe.
Can I use podman desktop to manage my quadlets on a server over ssh? That would be awesome.
Sure, that's the narrative to manufacture consent from the naive, but I don't buy it at all. Perhaps for very small fledgling universities that makes partial sense; even then I am skeptical. For Harvard, definitely not.

At very least, if your endowment is growing on an inflation-adjusted basis, it does not appear to me that you need further subsidies; your primary business is to be an hedge fund and the treasury of an empire, not education for the masses. Gains should be taxed like a hedge fund at that point.

If you want to subsidize education as a society, there are much better ways: fund research directly and cut through the indirect cost crap (which was popular among academics up until the moment the current administration started advocating for it).
There are several proposed bills, including one that raises the tax to 21 percent.

https://nehls.house.gov/sites/evo-subsites/nehls.house.gov/f...
Maybe the law should impose quality and environmental standards instead of tariffs. But no, that would hurt domestic businesses.
I'm sorry for your convenience loss, but I'm happy for the environment.

Not only because of the unrestricted consumerism, but also because of the environmental costs of logistics. I too have ordered fusible resistors from aliexpress that I could not find locally.

But things I barely need, only for a small dopamine kick ? I do my best to not have a small baggie shipped from the other side of the planet for that.

And not even mentioning the effects of insatiability on myself.
This is about the problem with vibe coding your way to a product. But if the vibes are strong enough, maybe we don't need products at all?

They do tend to complicate things, with all of their moats and such. I never wanted a product that did the thing, I really just wanted to do the thing. "Works on my machine" might be good enough if you're unlikely to want to repeat yourself on a different machine.
Tailscale does this, you can serve a port on your Tailnet, or you can serve a directory of files, or you can expose it to the internet. Comes with HTTPS. It's pretty neat.

https://tailscale.com/kb/1312/serve
Personally I'm frustrated how most companies followed the lead of the likes of Google, and effectively tied security of your account on their website to that of your email.

If you control the email address signed up with, you have "god" access to the account (can perform password resets, etc). They essentially outsourced security to your email provider.

But some of us would prefer to keep more separation between their email accounts and other services. Eg. If my email's hacked, I don't want that to pwn my other stuff.

2FA helps but often there are ways around it if you control the email account.
Neat, but what’s to stop a server from reporting one innocuous set of tools to MCP-Shield and then a different set of tools to the client?
EBMs fix this. At Traceoid (http://traceoid.ai) are working on scaling them.
This seems like https://en.wikipedia.org/wiki/Yukos lite So much for Zuck's white flags and ring-kissing.
Are they making original movies? Most of what I’m seeing are remakes, reboots, and yet another entry in tired old franchises that should never have gone past whatever 3. The creativity just isn’t there.
The reason Google and Apple stopped innovating is simply because they make too much money from their current products and see every innovation primarily as a risk to their existing business. This is something that happens all the time to market leaders.
I earnestly hope enough Americans read and learn from history. The biggest pattern to glean in my opinion is that often when the majority populace realizes some action needs to be taken, it is too late. There is no way around preemptive action (and for clarity, I'm not talking about violence, since that would violate rules here, I mean things like general strikes, forming a new political party, aggressive political ads, consumer activism,etc.. but whatever is needed). You can't do much as an individual, but you can do a lot as a large group. There is real power in numbers, and now more than ever, there is tech that enables unrelated people with common ideals to organize and collaborate.

A second lesson history teaches us is that career politicians in power are ineffective when it comes to taking drastic and crucial action. They calculate using outdated variables and formulae. The game has changed and they find it difficult to even accept that fact. They know the stakes are high, but their focus is preservation and restoration of the game, even when have good intentions, they are incapable of protecting what is most important.

A certain critical-mass of people that actually like their country and are willing to do whatever it takes to preserve it is needed to prevent a nation from collapsing. If those people expect politicians or some other established official entity to take action, by the time they realize there is no one but them who can take action, it will be too late.

The time to act is yesterday.
Genuinely curious. What percentages do you think are fair and why? As both a founder and employee, I anchored to the market. But maybe the market isn't fair. So what is?
The site doesn't work in my browser (Safari), cannot scroll. Now I know why...
American here. We also have plenty of greed but we manage to control it.
I get what you mean, and I understand the frustration. We should be more careful with words for exactly the reason you say at the end.

Having said that, the reason I chose to use it here was because I felt it was time, i.e. it has finally become earned. I could defend the usage with anyone who brought that up (and someone's done a thorough job in one of the replies).
Heh, it's funny, my partner is a vet tech and I keep thinking how interesting it would be to build a CRM for them and their patients (there is already an industry for that and some of the apps are actually decent).
There are at least two projects like this for watching anime. I won't name them in this forum but they do exist if you look for them.
The alternatives outside Bell Labs were just as capable.
Hey also try out Monday, it did something pretty cool. Its a version of 4o which switched between reasoning and plain token generation on the fly. My guess is that is what GPT V will be.
I highly suspect that this is a Levoit air purifier. I recently purchased a Levoit 300S and had the same issue. The VeSync app connects the device directly over the internet and you can control it via an API on their domain with a username and password. Your air purifier is then a backdoor to your home network. I just put it on a guest network now rather than go through this.
That there is a minimum fee doesn't necessarily mean the customer pays it on arrival. It could also be charged to the sender in advance, and if they don't pay, the package is simply not delivered at all.

If you could cheaply send stuff to random people to make them pay huge fees when they get something they didn't even order, that would be quite bad...
Trump Moves to Put New Tariffs on Computer Chips and Drugs