2025-12-29 08:52:34
- Neatnik 推出的 2026 年横向单页打印日历设计极简开源,社区提供可配置的 JavaScript 本地化扩展以便打印与记录。
- 文章展示如何用原生 HTML/CSS(如 details/summary、datalist、dialog 和 :popover-open)替代常见的 JavaScript 交互以提升性能与可访问性。
- 作者论述以 ActivityPub 为代表的去中心化社交协议正从可靠异步通信演变为以娱乐为主的内容分发,呼吁重视通信本质。
- 页面发起反对 NHS 在医疗信托中采用 Palantir 的行动,指出隐私与国家安全风险并提供一键发邮件工具。
- 报道称 Nvidia 通过收购知识产权并挖走核心团队而非并购公司本体,规避反垄断审查以巩固推理市场地位。
- gpg.fail 披露多项针对 GnuPG 的严重安全漏洞,并表示将很快发布演示、漏洞利用代码与补丁。
- 作者强烈批评 macOS Tahoe 的 Liquid Glass 设计损害可读性与可用性,呼吁苹果回归以人为本的设计。
- 回顾一则趣闻:Janet Jackson 的《Rhythm Nation》视频含某频率导致旧笔记本硬盘共振失准并引发系统崩溃,厂商通过滤波器缓解问题。
- 研究表明父亲的生活方式可能通过精子中的 RNA(尤其 microRNA)影响胚胎早期基因表达并改变后代表型,机制尚不清楚。
https://neatnik.net/calendar/?year=2026
这是一个 2026 年的全年日历页面,采用单页打印设计,可自动适应各种纸张尺寸。页面以横向布局呈现,每月为一个独立区域,清晰展示每一天的日期与星期对应关系。日历从 1 月 1 日开始,按月排列至 12 月 31 日,每个日期下方标注对应的星期(如 T 表示星期二,W 表示星期三等),方便快速查找。
页面设计简洁,无复杂装饰,适合打印使用。提示用户在打印时选择“横向”方向,并关闭页眉页脚,以获得最佳效果。日历可用于规划日程、记录事件、观察时间流动,也适合折叠携带,作为随身时间记录工具。
页面底部附有制作信息:“Made by Neatnik · Source”,表明该日历由“Neatnik”设计并开源,鼓励用户查看源码或进一步定制。整体风格极简,强调实用性与人文关怀,结尾寄语“Above all else, be kind to others”传递出温暖善意。
https://news.ycombinator.com/item?id=46408613
https://www.htmhell.dev/adventcalendar/2025/27/
本文探讨了如何在现代网页开发中逐步减少对 JavaScript 的依赖,转而使用原生 HTML 和 CSS 实现常见交互功能,从而提升性能、降低资源消耗并改善用户体验。
文章指出,尽管 JavaScript 在过去推动了 Web 交互的发展,但许多原本需要 JS 实现的功能如今已可通过 HTML 和 CSS 原生支持完成。通过将部分功能交给浏览器原生处理,可以减少 JavaScript 的下载、解析和内存占用,让 JS 专注于更复杂的任务。
文中列举了四个典型场景及其 HTML/CSS 替代方案:
<details> 和 <summary> 元素可实现无需 JavaScript 的折叠/展开功能。通过 open 属性控制默认状态,name 属性可实现单个面板打开的限制,适用于内容隐藏与展示。<input> 与 <datalist> 元素,可创建输入时自动过滤选项的下拉列表。适用于搜索、筛选等场景,但目前在 Firefox 和移动端存在兼容性限制。popover 属性和 <dialog> 元素,可实现无需 JS 的弹出窗口。支持三种模式:auto(可点击外部关闭)、hint(轻量提示,不自动关闭其他)、manual(需手动关闭)。同时可通过 ::backdrop 伪元素自定义遮罩样式。popover 属性将导航菜单置于屏幕外,点击按钮即可滑入显示。使用 CSS 的 translate 实现动画效果,:popover-open 伪类控制状态切换,支持点击外部关闭或手动控制。文章强调,这些原生方案不仅性能更优,还具备更好的可访问性和维护性。作者呼吁开发者尊重浏览器能力,合理减少 JavaScript 使用,将精力集中在真正需要 JS 的复杂逻辑上。
最后推荐读者参考文末链接,了解更广泛的“无 JS 或低 JS”实现方案。
https://news.ycombinator.com/item?id=46407337
hidden="until-found" 支持搜索时自动展开,提升了可用性。hidden="until-found" 的事件支持在不同浏览器中尚不一致,目前还不能完全依赖其状态同步。display: none 到 display: block 的过渡。@starting-style 和 transition-behavior: allow-discrete 实现进入/退出动画,解决了这一问题。interpolate-size: allow-keywords 和 ::details-content 伪元素可解决高度动画的难题,使复杂动画更易实现。https://ploum.net/2025-12-15-communication-entertainment.html
文章探讨了当代数字通信的异化现象:原本用于人际交流的网络协议,如今已逐渐演变为内容分发与娱乐消费的工具。
作者指出,以 ActivityPub 为代表的去中心化社交协议,本应是类似电子邮件的可靠通信系统,但现实中却被广泛用作内容消费平台。许多用户在不同平台(如 Mastodon 与 Pixelfed)上拥有多个账号,目的不是沟通,而是获取不同类型的娱乐内容。
这种转变反映出深层认知差异:年长用户(如作者)仍视通信为首要目标,重视消息的可靠传递;而年轻一代则习惯于算法驱动的平台,对消息丢失习以为常,不再期待可靠通信。
文章批评了社交媒体的本质——它们并非真正的交流网络,而是以“内容填充时间”为目的的娱乐系统,其设计逻辑与传统通信协议背道而驰。例如,Pixelfed 故意丢弃部分消息,正是这种娱乐导向的体现。
作者认为,这种趋势导致人们失去对异步、可靠通信的信任,甚至不再相信他人能真正接收或记住信息。而像电子邮件这样真正可靠的通信方式,反而被年轻一代视为“过时”“正式”“不自然”。
最后,作者承认自己可能“不合时宜”,但强调真正的去中心化通信仍值得追求。尽管 Pixelfed 等平台已偏离初衷,但作者仍呼吁重新思考通信的本质,而非将其简化为内容分发。
https://news.ycombinator.com/item?id=46404848
https://notopalantir.goodlawproject.org/email-to-target/stop-palantir-in-the-nhs/
该网页是一个呼吁公众反对英国国家医疗服务体系(NHS)引入美国科技公司 Palantir 的软件系统的在线行动页面。页面指出,Palantir 是一家曾参与美国大规模驱逐移民及被指控助长加沙冲突的公司,其联合创始人彼得·蒂尔更公开批评 NHS,称其为“斯德哥尔摩综合征”的产物。
目前,NHS 英格兰正推动各地方医疗信托机构采用 Palantir 的健康数据管理系统,引发公众对个人医疗数据安全与隐私的担忧。该行动呼吁民众立即采取行动,通过输入邮政编码查询所在地区的医疗信托机构是否已使用 Palantir 系统,并一键发送邮件,要求其拒绝该技术。
页面显示已有 20,807 人完成邮件发送,目标是达到 25,000 人。支持者可选择接收来自“Good Law Project”和“Just Treatment”组织的后续更新。这两个组织均为致力于限制医疗系统中企业权力、保障患者权益的非营利组织。
页面还强调,所有数据收集仅用于行动目的,不会追踪用户跨网站行为,且信息为匿名处理。用户需提供姓名、邮箱及所在国家,系统会验证邮政编码是否有效。若输入非英国地址,将提示用户选择国家或检查输入。
https://news.ycombinator.com/item?id=46405309
https://ossa-ma.github.io/blog/groq
Nvidia 以 200 亿美元的价格收购了 Groq 的知识产权和核心团队,但并未收购公司本身,这一交易绕开了传统并购的监管障碍。此举旨在规避反垄断审查和 CFIUS(外国投资委员会)审查,尤其是避免继承 Groq 与沙特阿拉伯的 15 亿美元基础设施合同。
Groq 的创新在于其语言处理单元(LPU),采用大容量片上 SRAM 而非外部 DRAM/HBM,实现高达 80TB/s 的带宽和 230MB 的片上存储,显著提升推理效率。在单用户场景下,LPU 在延迟和能效方面远超 GPU,例如 Llama 3.1 8B 模型可实现 800-1000+ tokens/秒的吞吐量。
然而,LPU 存在明显局限:单芯片仅 14GB SRAM,无法支持超大规模模型(如 405B 参数模型),且不支持训练。在高并发场景下,GPU 凭借更高的资源利用率和更低的单位用户成本仍占优势。
Nvidia 此次交易的实质是通过“非独家授权 + 人才收购”结构,实现对关键技术与核心团队的控制,同时规避监管风险。GroqCloud 作为独立运营的云服务业务被剥离,避免了潜在的地缘政治风险。
尽管 Groq 在 2025 年 9 月估值仅为 69 亿美元,三个月后被收购时估值飙升至 200 亿美元,溢价高达 131 亿美元,反映出 Nvidia 对 Groq 技术的战略价值判断。这一交易不仅是为了获取技术,更是为了遏制开源生态(如 Llama + Groq)对自身生态的冲击,巩固其在 AI 推理市场的主导地位。
https://news.ycombinator.com/item?id=46403559
该网页是一个关于 GnuPG 安全漏洞的公告页面,由安全研究人员 reaper 发布。页面标题为“Slides, pocs and patches soon!”,表明相关技术资料(演示文稿、漏洞利用代码、补丁)即将发布。
主要内容包括多个 GnuPG 存在的严重安全漏洞,涉及多个攻击向量:
页面末尾提供联系邮箱 [email protected],表明该研究为公开披露,可能与 GnuPG 安全审计或漏洞披露项目有关。发布者表示因匆忙离开,源码未带,故重写页面,预计次日将推出更完善的版本。
https://news.ycombinator.com/item?id=46403200
https://eclecticlight.co/2025/12/28/last-year-on-my-mac-look-back-in-disbelief/
本文作者霍华德·霍克利(Howard Hoakley)对 macOS Tahoe 的界面设计变革表达了强烈不满,认为其在用户体验和功能性上存在严重问题。
首先,Tahoe 引入的“液态玻璃”(Liquid Glass)设计大幅增加窗口圆角半径,导致矩形内容(如图片、网页、文本)出现裁剪或缩放,影响信息呈现准确性。例如,Finder 图库视图中的缩略图与原图对比,显示了严重的失真。
其次,控件尺寸被无意义放大,但未提升可读性或操作便利性。以作者的 Mallyshag 演示应用为例,按钮因过宽而重叠,且与下方文本框不协调,造成视觉混乱。
第三,应用图标设计受到过度统一的限制,所有元素必须置于固定圆角方形内,削弱了颜色、形状等识别特征,导致许多系统应用(如开发者工具、App Store)图标难以区分,甚至沦为模糊色块。
第四,界面色彩对比度不足,尤其在浅色模式下,背景为纯白,控件与背景缺乏明显分界,文本输入框几乎与背景融为一体,严重影响可读性和操作效率。
第五,透明效果滥用,多层透明叠加造成视觉污染。例如,系统设置中搜索框在滚动时文字模糊不清;选中项目后,高亮色覆盖标题栏和控制按钮,破坏原有布局。更严重的是,辅助功能中的“减少透明度”选项已失效,无法帮助视障用户改善体验。
作者总结认为,Tahoe 的设计背离了人机交互的基本原则:清晰、可读、可辨识。他怀念 2014 年左右苹果界面的精良与实用,如今的改变更像是强制推行的“审美暴力”,而非真正的进步。
文章最后呼吁苹果倾听用户反馈,回归以人为本的设计理念。
https://news.ycombinator.com/item?id=46409969
https://devblogs.microsoft.com/oldnewthing/20220816-00/?p=106994
本文讲述了一个关于 Windows XP 时代笔记本电脑因播放 Janet Jackson 的音乐视频《Rhythm Nation》而频繁崩溃的奇特现象。据微软一位同事分享,某大型电脑制造商在测试中发现,播放该视频会导致部分型号的笔记本电脑系统崩溃,甚至在附近未播放视频的笔记本也受到影响。
深入调查后发现,问题根源在于歌曲中包含 5400 转/分钟硬盘的自然共振频率,导致硬盘读写头因剧烈振动而失准,从而引发系统崩溃。这一问题不仅影响自家产品,还波及竞争对手的设备。
为解决此问题,制造商在音频处理链中加入了一个自定义滤波器,用于识别并滤除该特定频率的音频信号。作者调侃道,这个滤波器如今可能已变成“数字版的‘勿移除’标签”,即使原问题早已消失,仍被保留下来。
文章还引用了 1940 年塔科马海峡大桥坍塌的典故,用以类比共振效应的破坏力,尽管作者也承认该事件并非真正由共振引起,但这一引用意在引发读者对共振现象的关注。
评论区中,有读者指出,类似问题至今仍存在于现代数据中心的存储服务器中,尤其是高密度硬盘阵列与风扇振动之间的共振问题。也有网友调侃,这或许是历史上最“致命”的音乐播放事件。
https://news.ycombinator.com/item?id=46403291
父亲的健康状况,如饮食、运动、压力和吸烟等生活习惯,可能通过精子中的 RNA 分子传递给后代,影响其发育和成年后的代谢与行为特征。这一现象属于非遗传性(表观遗传)信息传递,挑战了传统“仅由父母基因决定后代特征”的观念。
研究主要基于小鼠模型,发现父亲的生活方式会改变精子中 RNA 的表达,尤其是微小 RNA(microRNA),这些分子在受精后可调控胚胎早期基因表达。例如,运动良好的雄性小鼠精子中某些与线粒体功能和代谢控制相关的 microRNA 水平升高,其后代表现出更强的耐力和代谢健康。
类似发现也出现在人类研究中:经常锻炼的男性精子中也检测到相同类型的 RNA 上调,提示该机制可能在人类中同样存在。
尽管证据日益增多,但其具体作用机制仍不清晰。科学家尚不清楚这些 RNA 如何被“编码”进精子,又如何在卵子中发挥作用,以及它们如何精确调控胚胎发育。目前研究者普遍认为,这种传递具有适应性意义——如果父亲经历某种环境压力,其后代可能提前“预适应”相似环境,从而提高生存概率。
该领域研究仍处于探索阶段,但已引发对遗传学和生命科学基础理论的重新思考:个体的生活经历,可能通过精子 RNA 影响下一代,真正实现“父辈的生活影响子代”。
https://news.ycombinator.com/item?id=46407502
https://news.ycombinator.com/item?id=46407060
Being born in 83, I experienced the shift from “serious local nightly news program” into the 24 hr cable news platforms as a loss of focused, serious journalism.
Only much later did I read Understanding Media, Amusing Ourselves to Death, etc, and understand that the prior shift from print to the “serious local nightly new program” was itself a loss of focused, serious journalism.
For today’s youth, Tik Tok is “the air we breath” - the de-facto standard against which the future will be judged. It’s horrifying to imagine what will be worse.
NiloCK
我83年出生,经历了从“严肃的地方晚间新闻节目”到24小时有线电视新闻平台的转变,在我看来,这标志着专注、严肃的新闻业的消亡。
很久以后我才读到《理解媒介》、《娱乐至死》等书,才明白从前从印刷媒体到“严肃的地方晚间新闻节目”的转变,本身就是专注、严肃新闻业的消亡。
对今天的年轻人来说,TikTok就是我们“呼吸的空气”——是未来评判事实的默认标准。很难想象未来还会有什么更糟的事情。
https://news.ycombinator.com/item?id=46405500
I live in the Bay Area and hate HOV lanes. I can look over and see that more than half of the drivers are in violation, and yet it is effectively unenforced. It is a system that punishes people willing to follow the rules.
Asking someone to waste maybe up to an hour of their life everyday to sit there and watch people willing to break the rules speed by and get to be home early with their families breeds massive resentment, and anger. It encourages people to abandon all sorts of social contracts.
UniverseHacker
我住在湾区,并且憎恨高乘载车道(HOV车道)。我可以看见超过一半的司机都在违规,然而这条规定实际上却很少被严格执行。这是一个惩罚那些愿意遵守规则的人的系统。
要求一个人每天浪费多达一个小时的生命,坐在那里看着那些愿意违规的人超车而过,更早地回家与家人团聚,这会滋生巨大的怨恨和愤怒。它鼓励人们放弃各种社会契约。
https://news.ycombinator.com/item?id=46409716
A missed opportunity to not have all of these examples inline. The page/blog-post would be so much more convincing if it utilized all of these HTML replacements instead (or in addition) to linking to codepen.
levmiseri
没能将所有这些示例直接内联展示,真是个错失良机。如果页面或博客文章能直接使用这些 HTML 替代方案(或者将其与 Codepen 链接结合使用),说服力会强得多。
https://news.ycombinator.com/item?id=46407068
Everyone should say no to palantir anywhere, especially outside the US.
anonzzzies
无论在哪里,尤其是在美国之外,每个人都应该拒绝Palantir。
https://news.ycombinator.com/item?id=46405455
We are destroying ourselves; the very core of what it is to be human. I say this acknowledging the irony of writing this on my phone, on a Sunday morning, when I should be engaging with the real world and people in my life.
Television was rightly criticised for being the opiate of the masses; a continuous stream of entertainment that allows you to ‘stop thinking’ to endure boredom. However it had some constraints. The box was in a fixed space, I could not bring it with me. The content was fixed, it could not always engage me.
Social media, and every other ‘content delivery’ system is not like this. It is in my pocket, there is so much content, it can keep me continually engaged. AI content generation optimises this, perhaps, but we already live in this dystopia.
Rise up and revolt! Put down our phones and refuse to engage! Our very lives, our humanity depends on it!
lll-o-lll
我们正在毁灭自己,正在摧毁人性中最核心的本质。说出这番话的同时,我也意识到其中的讽刺:在一个周日的早晨,我本该与现实世界和身边的人互动,却正用手机写下这些文字。
电视曾被恰如其分地批判为“大众的鸦片”——一股不间断的娱乐洪流,让你得以“停止思考”,以此来忍受无聊。然而,它终究存在一些限制。那个盒子固定在一个地方,我无法随身携带;它的内容是固定的,并非总能吸引我的注意力。
社交媒体,以及其他所有“内容输送”系统,则完全不同。它就在我口袋里,内容浩如烟海,能让我持续不断地沉浸其中。AI内容生成或许正在优化这一切,但我们早已身处于这种反乌托邦之中。
起来反抗吧!放下我们的手机,拒绝沉迷!我们的生命,我们的人性,都系于此!
https://news.ycombinator.com/item?id=46405371
I love this paragrpah and I think it provides an interesting insight:
They are entertainment platforms that delegate media creation to the users themselves the same way Uber replaced taxis by having people drive others in their own car.
Taking this analogy further, is today’s end goal of social media to provide AI generated content that users can endlessly consume? I think Facebook is heading this direction.
bentcorner
我喜欢这段话,它提供了一个很有趣的视角:
它们是娱乐平台,将内容创作的权力下放给了用户,就像优步通过让人们用自己的车搭载乘客来取代出租车一样。
顺着这个类比进一步思考,社交媒体如今的目标是否就是提供由AI生成的内容,供用户无休止地消费?我觉得Facebook正朝着这个方向发展。
https://news.ycombinator.com/item?id=46405437
Google’s stance on this was fairly draconian when I was working there, basically Google’s position was that they could be in ANY business at ANY time so that ANY thing you worked on was theirs. On the day I joined, one of the other new hires had a marked up copy of the agreement with some VERY simple wording changes that said basically “wasn’t in this business at the time the employee started working on the project” (aka a no retro-active clause) because this individual pointed out quite reasonably that if they were working on something in good faith on their own that wasn’t part of Google’s business and it turned out to be a really good idea, then Google, based on how the agreement was written, could go back and say “but we’re in that business now too and you were working for us so we own your idea.”
To which the HR person at the orientation had said, “Don’t worry Google wouldn’t do that.” And this individual said, “I’m sure they wouldn’t, that’s why it seems like a no-brainer to put it into the agreement, it just says they won’t do something that you and I both agree they would never do. I can’t sign the document as written without this.” The HR person took the updated version off to someone (presumably legal). And then after lunch this person was not in the group (I had seen them eating lunch) So when we had finished up, before my mentor had arrived I went out and found them waiting on the circle for a ride and asked them what happened. They said, “Google said no and also said they were rescinding the offer of employment.”
And that told me everything I needed to know about how Google really thought about things vs what they said they thought about things.
ChuckMcM
我在谷歌工作时,他们在这方面的立场相当严苛。基本上,谷歌的立场是,他们可以在任何时间进入任何行业,因此你做的任何工作都属于他们。在我入职那天,另一位新员工拿了一份经过修改的协议,上面有一些非常简单的措辞变更,大致意思是“在该员工开始项目时,谷歌并未涉足该行业”(即一项非追溯性条款),因为他相当有理地指出,如果他们本着善意独立完成某项不属于谷歌业务范畴的工作,而且事实证明这个想法非常棒,那么谷歌就可以根据协议的措辞回过头来说“但现在我们也进入这个行业了,而且你当时是为我们工作的,所以这个想法归我们所有。”
对此,入职培训的HR人员说:“别担心,谷歌不会那样做的。”而这位员工说:“我确信他们不会,所以把这条写进协议里似乎是理所当然的,它只是说他们不会做你我双方都同意他们永远不会做的事。没有这个条款,我没法签署这份文件。”于是HR人员把修改后的版本拿去给某人(大概是法务)了。午饭后,这个人就不在我们小组了(我看见他吃午饭了)。所以当我们结束时,在我导师到达之前,我出去找到了他,他正在环形路口等车,我问他发生了什么事。他说:“谷歌拒绝了,而且他们还撤销了录用通知。”
这件事让我彻底明白了,谷歌对事情的真正看法与他们所宣扬的有多么不同。
https://news.ycombinator.com/item?id=46408899
As a lover of Rust, ooo boy does this sound like a bad idea. The Rust compiler is not guaranteed to always output safe code against malicious inputs given that there’s numerous known soundness bugs that allow exploiting this. Unless I’m missing something this is a security nightmare of an idea.
Also there’s reasons why eBPF programs aren’t allowed to run arbitrarily long and this just ignores that problem too.
vlovich123
作为一个 Rust 爱好者,天哪,这听起来简直是个糟糕透顶的主意。鉴于存在大量已知的安全性漏洞,这些漏洞可以被恶意利用,因此 Rust 编译器并不能保证在接收到恶意输入时总能生成安全的代码。除非是我有什么遗漏,否则这绝对是个安全噩梦。
此外,eBPF 程序之所以不允许无限期地运行,是有其原因的,而这个想法却完全忽略了这个问题。
https://news.ycombinator.com/item?id=46407603
The details / summary thing absolutely kills me. There’s basically nothing you can’t do with them. Hiding and replacing markers is easy. But every component library just pretends they don’t exist.
It even saves you the effort of all the aria control and expanded tags: these tags don’t need them.
subdavis
详情/摘要模式简直绝了。基本上没有它们做不到的事。隐藏和替换标记轻而易举。但每个组件库都假装它们不存在。
它甚至省去了你添加所有 aria-controls 和 expanded 标签的麻烦:这些标签根本不需要。
https://news.ycombinator.com/item?id=46404589
One of those WONTFIX’s is on an insane vulnerability: you can bitflip known plaintext in a PGP message to switch it into handling compression, allowing attackers to instruct GnuPG packet processing to look back to arbitrary positions in the message, all while suppressing the authentication failure message. GPG’s position was: they print, in those circumstances, an error of some sort , and that’s enough. It’s an attack that reveals plaintext bytes!
tptacek
其中一个被标记为“不予修复”(WONTFIX)的问题涉及一个极其严重的漏洞:攻击者可以对 PGP 消息中的已知明文进行位翻转,从而诱使 GnuPG 启用压缩处理。这使得攻击者能够指令 GnuPG 数据包处理程序回溯到消息中的任意位置,同时还能抑制身份验证失败的消息提示。GPG 的立场是:在这种情况下,他们打印某种错误信息,这就足够了。但这是一种能暴露明文字节的攻击!
https://news.ycombinator.com/item?id=46412078
I don’t mind how Liquid Glass looks at all. It’s just insane how buggy the system has become. Even Messages will bug out, like deleting my first word if I type too fast after opening a conversation or auto scrolling and not letting me scroll down until I exit and re-enter.
Unacceptable for the premium you pay for Apple software. Unacceptable for any software one is paying for. I hope they get their shit together and start fixing before they continue adding new stuff. 26.2 doesn’t inspire me that they’re on that trajectory.
The thing that amazes me most is that everyone on the teams responsible is probably using their Apple devices and running into these same bugs!
jjice
我完全不在意液体玻璃的外观,只是系统变得如此bug缠身,简直令人难以置信。甚至连信息应用都会出故障,比如在打开对话后打字太快会删掉我输入的第一个词,或者自动滚动并且在我退出并重新进入之前都无法向下滚动。
为你所购买的苹果软件支付这样的高价,这是不可接受的。对于任何需要付费的软件来说,这都是不可接受的。我希望他们能振作起来,在继续添加新功能之前先开始修复问题。26.2版本并不让我相信他们正走在正确的轨道上。
最让我感到惊讶的是,负责这些团队的每个人可能都在使用他们的苹果设备,并且遇到了同样的bug!
https://news.ycombinator.com/item?id=46401788
Days since last ffmpeg CLI wrapper: 0
It’s incredible what lengths people go to to avoid memorizing basic ffmpeg usage. It’s really not that hard, and the (F.) manual explains the basic concepts fairly well.
Now, granted, ffmpeg’s defaults (reencoding by default and only keeping one stream of each type unless otherwise specified) aren’t great, which can create some footguns, but as long as you remember to pass -c copy by default you should be fine.
Also, hiding those footguns is likely to create more harm than it fixes. Case in point: “ff convert video.mkv to mp4” (an extremely common usecase) maps to ffmpeg -i video.mkv -y video.mp4 here, which does a full reencode (losing quality and wasting time) for what can usually just be a simple remux.
Similarly, “ffmpeg extract audio from video.mp4” will unconditionally reencode the audio to mp3, again losing quality. The quality settings are also hardcoded and hidden from the user.
I can sympathize with ffmpeg syntax looking complicated at first glance, but the main reason for this is just that multimedia is really complicated and that some of this complexity is necessary in order to not make stupid mistakes that lose quality or waste CPU resources. I truly believe that these ffmpeg wrappers that try to make it seem overly simple (at least when it’s this simple, i.e. not even exposing quality settings or differentiating between reencoding and remuxing) are more hurtful than helpful. Not only can they give worse results, but by hiding this complexity from users they also give users the wrong ideas about how multimedia works. “Abstractions” like this are exactly how beliefs like “resolution and quality are the same thing” come to be. I believe the way to go should be educating users about video formats and proper ffmpeg usage (e.g. with good cheat sheets), not by hiding complexity that really should not be hidden.
Edit: Reading through my comment again, I have to apologize for the slightly facetious opening statement, even if I quality it later on. The fact that so many ffmpeg wrappers exists is saying something about its apparent difficulty, but as I argue above, a) there are reasons for this (namely, multimedia itself just being complicated), and b) I believe there are good and bad ways to “fix” this, with oversimplified wrappers being more on the “bad” side.
qbow883
距离上次使用 ffmpeg 命令行包装工具已经过去了:0 天
人们为了避免记忆基本的 ffmpeg 用法,真是想尽了办法。这真的没那么难,而且 (F.) 手册也很好地解释了基本概念。
当然,ffmpeg 的默认设置(默认情况下会重新编码,并且除非特别指定,否则每种类型只保留一个流)并不怎么样,这可能会带来一些隐患,但只要你记得默认传递 -c copy 参数,就应该没问题。
此外,隐藏这些隐患很可能会造成比修复它更大的伤害。一个典型的例子是:“ff convert video.mkv to mp4”(一个极其常见的用例),在这里它映射为 ffmpeg -i video.mkv -y video.mp4,这会进行完整的重新编码(导致质量下降并浪费时间),而通常这只是一个简单的重新封装(remux)就够了。
同样,“ffmpeg extract audio from video.mp4” 会无条件地将音频重新编码为 mp3,同样会损失质量。质量设置也是硬编码的,并且对用户隐藏。
我理解 ffmpeg 语法乍看之下很复杂,但主要原因只是多媒体本身真的非常复杂,为了不犯那些会导致质量下降或浪费 CPU 资源的愚蠢错误,其中一些复杂性是必要的。我真的相信,这些试图让 ffmpeg 看起来过于简单的包装工具(至少在像这样简单的情况下,即甚至不暴露质量设置或区分重新编码和重新封装)是弊大于利的。它们不仅可能会带来更糟糕的结果,而且通过向用户隐藏这种复杂性,它们也给了用户关于多媒体如何工作的错误观念。正是这类“抽象”,才导致了“分辨率和质量是一回事”之类的观念。我相信,正确的方法应该是教育用户了解视频格式和正确的 ffmpeg 用法(例如,使用好的速查表),而不是去隐藏那些本不该被隐藏的复杂性。
编辑:重读我的评论后,我必须为我略带调侃的开场白道歉,即使我后来对此进行了限定。有这么多 ffmpeg 包装工具的存在,说明它在表面上是困难的,但正如我上面所论证的,a) 这是有原因的(即多媒体本身就很复杂),以及 b) 我相信有好的和不好的方式来“解决”这个问题,而过度简化的包装工具更多地属于“不好”的那一类。
https://news.ycombinator.com/item?id=46409904
The submitted title is missing the salient keyword “finally” that motivates the blog post. The actual subtitle Raymond Chen wrote is: “C++ says “We have try…finally at home.””
It’s a snowclone based on the meme, “Mom, can we get <X>? No, we have <X> at home.” : https://www.google.com/search?q=%22we+have+x+at+home%22+meme
In other words, Raymond is saying… “We already have Java feature of ‘finally’ at home in the C++ refrigerator and it’s called ‘destructor’”
To continue the meme analogy, the kid’s idea of <X> doesn’t match mom’s idea of <X> and disagrees that they’re equivalent. E.g. “Mom, can we order pizza? No, we have leftover casserole in the fridge.”
So some kids would complain that C++ destructors RAII philosophy require creating a whole “class X{public:~X()}” which is sometimes inconvenient so it doesn’t exactly equal “finally”.
jasode
提交的标题中缺少了一个关键的词“finally”,这个词是这篇博客文章的核心。Raymond Chen真正的副标题是:“C++说‘我们家里有try…finally’。”
这是一个网络模因的变体,该模因是:“妈妈,我们能买个
换句话说,Raymond的意思是……“在C++的冰箱里,我们已经有了Java的‘finally’特性,它叫做‘析构函数’。”
继续沿用这个模因的比喻,孩子想要的
所以,有些孩子会抱怨说,C++的析构函数和RAII哲学要求创建一个完整的“class X{public:~X()}”结构,这有时很不方便,所以它和“finally”并不完全等同。
https://news.ycombinator.com/item?id=46409010
“This study shows that paternal exercise can confer benefits — enhanced endurance and metabolic health — to offspring,”
So good habits can be good for offspring.
For instance, mouse fathers exposed to nicotine(opens a new tab) sire male pups with livers that are good at disarming not just nicotine but cocaine and other toxins as well.
So bad habits can be good for offspring.
“We just don’t have really any understanding of how RNAs can do this, and that’s the hand-wavy part,”
It seems to me to all be the handwavy part. I’m happy to wait until the research is considerably further advanced, past the clickbait stage.
jibal
这项研究表明,父亲的锻炼能给后代带来益处——即提升后代的耐力和代谢健康。 所以好习惯对后代有益。
例如,接触过尼古丁的雄性小鼠生下的雄性幼崽,其肝脏不仅能有效分解尼古丁,还能高效分解可卡因和其他毒素。 所以坏习惯对后代有益。
“我们真的完全不了解RNA是如何做到这一点的,而这部分解释就显得很含糊。” 在我看来,这一切都很含糊。我很愿意等到这项研究取得长足的进展,摆脱现在的标题党炒作阶段。
https://news.ycombinator.com/item?id=46402721
It’s really not that hard,
I’ve learned not to say this. Different things are easy/hard for each of us.
Reminds me of a discussion where someone argued, “why don’t all the poor/homeless people just go get good jobs?”
Edit: I know your comment was meant to inspire/motivate us to try harder. Maybe it’s easier than it appears.
Tempest1981
其实真的没那么难。
我已经学会不这么说了。对每个人来说,事情都有容易和困难的方面。
这让我想起一场讨论,当时有人说:“那些穷人流民为什么不去找好工作呢?”
编辑:我知道你的评论是为了激励我们更加努力。也许它看起来比实际情况要简单。
https://news.ycombinator.com/item?id=46398177
It’s really fucking suspicious that mushrooms evolved mechanisms to produce serotonin.
But it helps when you remember that a mushroom is the fruit of a (usually) much larger organism. Then you can start applying normal fruit rules. Some want to be eaten, or picked up and moved around. Some want to keep insects from infesting the fruit. Others don’t give a damn and release spores into the wind or water.
Also remember that nicotine is an insecticide. Insects that nibble on tobacco die, which prevents infestation at scale. (Un?)fortunately it’s also neuroactive in apes, so we farm incredible quantities of tobacco to extract its poisons.
There is no logic in evolution at large scales. Things happen, sometimes there’s fourth order effects like some oddball internal hormone causing wild hallucinations in apes. It’s all random optimization for small scale problems that ripple out to unintended large scale consequences.
estimator7292
蘑菇演化出产生血清素的机制,这他妈的也太可疑了。
但当你记住蘑菇通常是一个更大生物的果实时,事情就好理解了。然后你就可以开始运用常规的果实规律了:有些果实希望被吃掉,或者被拾起并带走;有些则希望防止昆虫侵扰;还有些则毫不在乎,只是将孢子释放到风中或水中。
另外也要记住,尼古丁是一种杀虫剂。啃食烟草的昆虫会死掉,这就防止了大面积的虫害。(不幸的是?)它对猿类也有神经活性,所以我们才会种植巨量的烟草来提取其中的有毒物质。
进化在宏观层面上并无逻辑可言。事情就是这样发生的,有时甚至会带来四阶效应,比如某种奇特的内部激素会在猿类身上引发剧烈的幻觉。这一切都是为了应对小规模问题而进行的随机优化,其涟漪效应却导致了意想不到的大规模后果。
https://news.ycombinator.com/item?id=46397883
It’s not just greenfield-ness but the fact it’s a commercial endeavor (even if the code is open-source).
Building a commercial product means you pay money (or something they equally value) to people to do your bidding. You don’t have to worry about politics, licensing, and all the usual FOSS-related drama. You pay them to set their opinions aside and build what you want, not what they want (and if that doesn’t work, it just means you need to offer more money).
In this case it’s a company that believes they can make a “good” package manager they can sell/monetize somehow and so built that “good” package manager. Turns out it’s at least good enough that other people now like it too.
This would never work in a FOSS world because the project will be stuck in endless planning as everyone will have an opinion on how it should be done and nothing will actually get done.
Similar story with systemd - all the bitching you hear about it (to this day!) is the stuff that would’ve happened during its development phase had it been developed as a typical FOSS project and ultimately made it go nowhere - but instead it’s one guy that just did what he wanted and shared it with the world, and enough other people liked it and started building upon it.
Nextgrid
这不仅关乎它是一个全新的项目,更在于它是一个商业行为(即便代码是开源的)。
开发商业产品意味着你要花钱(或提供他们同样看重的东西)来雇佣人替你办事。你无需担心政治、许可协议以及所有那些与自由开源软件(FOSS)相关的戏剧性事件。你付钱让他们放下个人意见,去构建你想要的东西,而不是他们想要的东西(如果这行不通,那就意味着你需要提供更多的钱)。
在这个案例里,是一家公司相信他们能打造出一个“优秀”的包管理器,并能以某种方式将其销售或盈利,于是他们就构建了那个“优秀”的包管理器。事实证明,这个包管理器足够出色,以至于其他现在也开始喜欢它了。
这在自由开源软件(FOSS)世界里是行不通的,因为项目会陷入无尽的规划阶段,因为每个人都会对它应该如何做发表意见,最终却一事无成。
systemd 的情况也是如此——你至今听到的所有对它的抱怨,如果它是在作为一个典型的开源项目进行开发的过程中发生的,那么这些抱怨就会出现在其开发阶段,并最终导致项目停滞不前。但事实是,它是由一个人按照自己的想法完成并分享给世界的,而足够多的人喜欢它并开始基于它进行开发。
https://news.ycombinator.com/item?id=46402248
Yes, I use ffmpeg about once a year, in about 350 years I really ought to have all the syntax figure out.
juujian
是的,我大约每年使用一次ffmpeg,再过大约350年,我大概真的该把所有语法都弄懂了。
https://news.ycombinator.com/item?id=46415077
The author seems like a nice guy, but perhaps a bit naive regarding the efforts big tech companies go to to crush employees ( https://en.wikipedia.org/wiki/High-Tech_Employee_Antitrust_Litigation ). They appear to be a staff level engineer at a big tech company - I don’t know how much money they make, but I suspect it’s an ungodly amount.
The organisation he works for is implicated in surveillance, monopoly exploitation, and current military action involving particularly unpopular wars. No one forced him into this role - he could have made less money elsewhere but decided not to. He has decided to be a cog in a larger, poorly functioning machine, and is handsomely rewarded for it. This sacrifice is, for many, a worthwhile trade.
If you don’t want to engage with the moral ramifications of your profession, you are generally socially allowed to do so, provided the profession is above board. Unfortunately, you cannot then write a post trying to defend your position, saying that what I do is good, actually, meanwhile cashing your high 6-7 figure check. This is incoherent.
It is financially profitable to be a political actor within a decaying monopolist apparatus, but I don’t need to accept that it’s also a pathway to a well-lived life.
elliotto
作者看起来是个不错的人,但可能有点天真,不了解大型科技公司为了压榨员工会做些什么(https://en.wikipedia.org/wiki/High-Tech_Employee_Antitrust_Litigation)。他似乎是某家大型科技公司的一名普通工程师——我不知道他的收入有多少,但我猜那是个高得离谱的数字。
他所在的组织涉及监控、垄断剥削,以及当前那些尤其不受欢迎的战争行动。没有人强迫他扮演这个角色——他本可以在别处赚更少的钱,但他决定没有这么做。他选择成为一部庞大而运作不良机器上的一个齿轮,并因此获得了丰厚的回报。对许多人来说,这种权衡是值得的。
如果你的职业还算正当,那么你通常不被期望去思考自己职业的道德影响。不幸的是,你一边拿着六到七位数的高薪,一边又写文章辩护自己的立场,说“我的工作其实挺好的”,这就显得自相矛盾了。
在一个正在衰落的垄断体系里扮演一个政治角色是有利可图的,但我不需要认同这也是一条通往美好人生的道路。
https://news.ycombinator.com/item?id=46404282
Two things I like are:
HOT lanes in the Bay Area: they allocate demand efficiently and subsidize multi-people transport. I wish there were more.
Toll roads in Texas: you can take the slip roads almost everywhere but they’re slow. The highways were fast but you had to pay.
Overall, I think fare at point of use is a great structure. In the past we couldn’t enforce it but now we can do this for more things.
The only problem is that we’ve decided that impounding cars that don’t have license plates or which have license plate covers is unacceptable because the poor do this most frequently. I hope we will clean up enforcement and then we will have the right incentives here.
arjie
我喜欢的东西有两样:
总的来说,我认为按使用收费的模式非常棒。在过去我们无法执行这种方式,但现在我们可以为更多事物实现它。
唯一的问题是,我们已经决定扣押无牌照车牌或有车牌遮挡罩的车辆是不可接受的,因为穷人最常这么做。我希望我们能完善执法,这样我们才能建立正确的激励机制。
https://news.ycombinator.com/item?id=46409448
Nice to see anti-cheats working and protecting Linux players from hacks, by preventing them from actually playing the game.
butz
很高兴看到反作弊系统在保护Linux玩家免受黑客侵害方面发挥了作用,其方式是阻止他们实际玩游戏。
2025-12-28 10:58:10
- uv 之所以比 pip 快一个数量级,主要靠现代打包标准允许静态解析依赖、放弃历史兼容、并行下载与全局缓存、以及更简化的策略与 PubGrub 解析,Rust 只是辅因。
- Floor796 是由一位创作者独立开发的交互像素动画网站,充满俄苏文化符号与大量彩蛋,兼具2000年代互联网怀旧感与社会隐喻。
- FFmpeg 指控 Rockchip 在其 MPP 驱动中大规模复制并擅自改许可为 Apache 2.0,违反 LGPL,因此向 GitHub 发起 DMCA 下架并呼吁合规。
- 一名 1 型糖尿病患者发现其胰岛素泵控制器运行过时 Linux 且厂商未按 GPL 提供源码,既违反许可也带来安全隐患。
- 报道介绍云南“见手青”蘑菇会引发“小人幻觉”,且因无法人工栽培和市场上有毒替代品而导致中毒事件频发,需加强监管与检测。
- 文章提出用重复性、游戏时长与清理便捷性评估玩具,认为多用途且易收纳(如木质积木或磁力模块)是最佳选择。
- exe.dev 提供一行 SSH 快速登录的极简远程开发环境,便于快速调试与临时运行但因首页信息稀少与潜在安全问题引发争议。
- 苹果开源的 SHARP 模型能在不到一秒的前向传递中将单张 2D 照片回归为可实时渲染的 3D Gaussian Splatting 表示,且以 MIT 许可发布。
- Ez FFmpeg 允许用自然语言生成 ffmpeg 命令,方便偶尔用户构建常见操作,但需警惕可能导致不必要重编码等细节问题。
- 作者主张在多数场景下优先使用文本,因为文本最可靠、持久、经济且便于检索与协作,长期价值最高。
https://nesbitt.io/2025/12/26/how-uv-got-so-fast.html
uv 能够比 pip 快一个数量级,主要原因并非仅仅因为它是用 Rust 编写的,而在于一系列关键的设计决策和生态系统标准的演进。
首先,现代 Python 包管理标准的建立为 uv 的高效提供了基础。过去,由于 setup.py 需要执行代码才能获取依赖信息,pip 必须反复下载、执行、失败、再安装构建依赖,形成复杂的循环。PEP 518 引入 pyproject.toml,使构建依赖可声明;PEP 517 分离构建前后端;PEP 621 标准化 project 表,使依赖可直接解析 TOML;PEP 658 将包元数据直接暴露在 PyPI 的 Simple API 中,使解析依赖无需下载 wheel。这些标准让 uv 能在不执行任何代码的前提下完成依赖分析,这是其速度飞跃的前提。
其次,uv 主动放弃了许多 pip 支持的旧特性,从而大幅减少运行路径。它不支持 .egg 格式、pip.conf 配置文件、默认的字节码编译、系统 Python 安装,也不容忍格式错误的包。它还忽略 requires-python 的上限版本(如 python<4.0),因为这类限制多为防御性声明而非实际限制,此举显著减少解析回溯。在多个源中,uv 默认只使用第一个有包的源,避免网络请求和依赖混淆攻击。
此外,许多性能优化并不依赖 Rust。uv 支持并行下载、使用全局缓存配合硬链接(节省磁盘空间)、通过 HTTP 范围请求快速获取 wheel 中心目录信息、优先使用 PEP 658 元数据。它还采用 PubGrub 解析算法,利用冲突驱动的回溯学习机制,比 pip 的传统回溯更高效,且能更好解释错误。
Rust 的优势体现在更底层的优化:零拷贝反序列化(rkyv)、线程级并行(绕过 GIL)、无解释器启动开销、紧凑的版本表示(90% 以上版本可压缩为 u64)。这些提升了性能,但远不如架构层面的取舍重要。
总结:uv 的快,源于“不做什么”——放弃历史包袱、依赖现代标准、拒绝执行任意代码。pip 因需兼容十五年来的复杂边缘情况,难以实现这些优化。真正的关键在于设计:静态元数据、无需代码执行、提前解析依赖。这正是 Cargo 和 npm 长期领先的原因。
https://news.ycombinator.com/item?id=46393992
网页展示的动画艺术作品,大量文化符号,该动画的创作始于 2018 年,作者独自完成了编辑器、渲染引擎和网站的开发,初期绘制一个区块耗时超过 8 个月,现在约需 1-1.5 个月。
https://news.ycombinator.com/item?id=46401612
https://twitter.com/FFmpeg/status/2004599109559496984
FFmpeg 官方账号于 2024 年 2 月 23 日发布推文,指出 Rockchip 公司(@IloveRockchip)在其 MPP 驱动代码中大量复制了 FFmpeg 的源码,涉及数千行代码,并擅自更改了许可证,违反了 LGPL 开源协议。
该行为始于 2022 年底,FFmpeg 开发者团队在等待近两年后,终于采取行动公开曝光。推文中附上 GitHub 链接,指向 Rockchip 项目中被复制的 AV1 解码器文件 av1d_cbs.c,明确指出其代码与 FFmpeg 原始代码高度相似,且未遵循 LGPL 的要求进行开源披露。
FFmpeg 强调,这种直接复制并修改许可证的行为不仅不合规,也损害了开源社区的信任与协作精神。
该推文发布后引发广泛关注,获得超过 420 万次浏览,5.6 万次转发和 5.1 万次点赞,成为开源社区热议话题。
https://news.ycombinator.com/item?id=46394327
https://old.reddit.com/r/linux/comments/1puojsr/the_device_that_controls_my_insulin_pump_uses_the/
一位 1 型糖尿病患者发现,自己赖以生存的胰岛素泵控制器(Insulet OmniPod Dash PDM)运行的是 Android 系统,内核为已停止维护 8 年之久的 Linux 3.18.19。根据 GPLv2 协议,厂商必须应用户要求公开内核源码,但两年来他多次向设备制造商 Insulet(美国)及其硬件代工厂 Nuu(中国)索要源码,均被拒绝或敷衍。设备本身毫无安全验证,可被轻易刷机 root,存在巨大安全隐患。作者呼吁公众关注 Insulet 的 GPL 违规与医疗安全漠视。
https://news.ycombinator.com/item?id=46395184
https://nhmu.utah.edu/articles/experts-explore-new-mushroom-which-causes-fairytale-hallucinations
、 本文介绍了一种名为“ Jian shou qing”(中文意为“见手青”)的野生食用蘑菇,其在云南昆明等地的市场中广泛出售。这种蘑菇因其独特的心理效应而闻名——食用后会引发“小人幻觉”,即患者看到成群结队、约 2 厘米高的卡通化小人,它们在现实环境中行走、跳舞或列队行进,甚至能“从桌布下爬出”或“头颅脱落仍继续移动”。
该现象最早在 1934 年被西方探险者记录于巴布亚新几内亚,当时当地人食用一种名为“nonda”的蘑菇后出现类似精神错乱的行为,被称为“蘑菇疯狂”。这一现象与“小人症”(Lilliputian hallucinations)相符,是一种罕见的精神病学症状,源自《格列佛游记》中的小人国设定。
尽管自 20 世纪 60 年代起科学家便试图研究其成分和物种身份,但长期未果。直到 2014 年,中国云南省的真菌学家通过对昆明街头市场售卖的“见手青”进行 DNA 测序,才首次确认其科学分类:正式命名为 Lanmaoa asiatica。它属于与常见牛肝菌(如犹他州州菌)亲缘关系较近的类群,而非传统意义上的“迷幻蘑菇”。
值得注意的是,由于该蘑菇无法人工栽培,市场上大量干制产品存在严重风险——许多标称“见手青”的包装中实际混入了有毒替代品,导致中毒事件频发。研究团队通过基因检测发现,部分商品中并无真正的 Lanmaoa asiatica,却含有剧毒种类。
此外,文献显示,这种蘑菇的文化认知可能已有千年历史。公元 3 世纪的道教典籍《抱朴子》中提及“肉灵芝”,称其生食可“见小人”并“即刻超脱”,暗示古人早已知晓其致幻特性。
目前,云南已成为全球最大的野生蘑菇出口地之一,但监管缺失使消费者面临巨大健康风险。该研究不仅揭示了一个新物种,也提醒公众警惕野生真菌的潜在危险。
https://news.ycombinator.com/item?id=46393936
https://joannabregan.substack.com/p/toys-with-the-highest-play-time-and
这篇文章探讨了家长在选择玩具时最看重的几个因素,特别是玩具的游戏时间和清理时间的比例。作者乔安娜・布雷根指出,最糟糕的玩具是那些拥有许多零件的玩具,它们往往会让孩子们在短短两分钟内就玩完,而清理却需要十分钟,造成 “游戏时间” 与 “清理时间” 的不成比例,从而耗费了父母的精力和时间。
文章提出了评估玩具质量的三个主要指标:
通过对比不同玩具的得分,作者总结出高分玩具的几个特点:
作者还提到了一款名为 Clixo 的玩具,认为其灵活的玩法、优雅的形状和磁性特点可能使其成为高评分玩具。总的来说,文章强调了玩具在提供娱乐价值的同时,也要考虑清理的便捷性,以提高家庭的生活质量。
https://news.ycombinator.com/item?id=46395885
该网页是名为 exe.dev 的开发者工具网站,主打一个轻量级、快速的 SSH 登录体验。用户可通过输入 ssh exe.dev _ 命令直接连接到远程服务器,无需复杂配置。页面强调“磁盘持久化”,意味着用户在使用过程中数据会保留,适合长期开发或测试任务。同时提供 sudo 权限,方便进行系统级操作。
网站设计简洁,仅包含核心功能入口和少量信息:关于页面、博客更新动态以及 Discord 社区链接。整体风格偏向极简主义,专注于提供高效的命令行访问体验。适用于开发者快速部署、调试或临时运行代码环境。
https://news.ycombinator.com/item?id=46397609
https://github.com/apple/ml-sharp
这是一个由苹果公司发布的开源项目,名为 SHARP(Sharp Monocular View Synthesis),旨在实现从单张图像快速生成高质量、可交互的 3D 视图。该项目基于一篇发表于 2025 年的 arXiv 论文,提出了一种全新的单目视图合成方法。
SHARP 的核心思想是通过一个神经网络,仅用一次前向传播,在不到一秒的时间内,从一张照片中回归出场景的 3D 高斯表示(3D Gaussian Splatting, 3DGS)。该方法具有以下特点:
项目提供完整的命令行工具(CLI),用户可通过简单命令完成预测和渲染:
sharp predict 对输入图像进行 3DGS 重建。sharp render 生成带相机轨迹的视频(需 CUDA GPU 支持)。输出结果为标准的.ply 格式 3DGS 文件,兼容主流 3DGS 渲染器。坐标系遵循 OpenCV 规范(x 向右,y 向下,z 向前),场景中心大致位于(0, 0, +z)。
项目采用 MIT 许可证,模型使用独立的 LICENSE_MODEL 授权。代码基于多个开源项目构建,详细信息见 ACKNOWLEDGEMENTS 文件。
该工作为单目 3D 重建与视图合成领域树立了新标杆,适用于 AR/VR、数字孪生、内容创作等场景。
https://news.ycombinator.com/item?id=46401539
ezff 是一个基于命令行的 ffmpeg 工具,旨在简化视频和音频处理操作。用户无需记忆复杂的 ffmpeg 命令,只需使用自然语言描述操作即可完成常见任务。
主要功能包括:
支持交互模式和直接命令两种使用方式。交互模式通过提问引导用户完成操作,直接命令则可直接输入指令。所有操作前可使用 –dry-run 预览生成的 ffmpeg 命令。
工具基于 Node.js 开发,需系统安装 ffmpeg 并加入 PATH。支持 macOS、Ubuntu/Debian 和 Windows。
项目采用 MIT 开源协议,代码开源,欢迎贡献。整体设计简洁、离线运行、无需网络或 AI 支持,依赖模式匹配实现指令解析。
https://news.ycombinator.com/item?id=46400251
https://graydon2.dreamwidth.org/193447.html
作者立场鲜明:在任何“动态”多媒体(视频、3D、游戏)面前,文本永远是首选、最强、最万能的沟通技术。
结论:能写字就别犹豫,永远押注文本,它几乎不会辜负你。
https://news.ycombinator.com/item?id=46397379
https://news.ycombinator.com/item?id=46397584
The most surprising part of uv’s success to me isn’t Rust at all, it’s how much speed we “unlocked” just by finally treating Python packaging as a well-specified systems problem instead of a pile of historical accidents. If uv had been written in Go or even highly optimized CPython, but with the same design decisions (PEP 517/518/621/658 focus, HTTP range tricks, aggressive wheel-first strategy, ignoring obviously defensive upper bounds, etc.), I strongly suspect we’d be debating a 1.3× vs 1.5× speedup instead of a 10× headline — but the conversation here keeps collapsing back to “Rust rewrite good/bad.” That feels like cargo-culting the toolchain instead of asking the uncomfortable question: why did it take a greenfield project to give Python the package manager behavior people clearly wanted for the last decade?
orliesaurus
在我看来,uv成功的最惊人之处根本不是Rust,而是我们仅仅通过最终将Python包管理视为一个规范良好的系统工程问题,而不是一堆历史偶然形成的产物,就“解锁”了如此多的速度。如果uv是用Go甚至高度优化的CPython编写的,但遵循相同的设计决策(重点遵循PEP 517/518/621/658等规范,运用HTTP范围请求技巧,采用激进的优先使用wheel策略,忽略明显带有防御性的版本上限等),我强烈怀疑我们现在争论的会是1.3倍还是1.5倍的速度提升,而不是一个10倍的惊人数据——但这里的讨论却总是退回到“用Rust重写是好是坏”的争论中。这感觉像是在对工具链进行盲目崇拜,而不是去问那个令人不舒服的问题:为什么需要一个新的从零开始的项目,才能让Python拥有过去十年来人们一直明确想要的包管理器行为?
https://news.ycombinator.com/item?id=46399903
That must be worst website ever made.
Zero information available on mobile.
I thought it is some kind of portfolio site that does not work on mobile.
sccxy
这一定是史上最烂的网站。手机上看不到任何信息。我原以为这是个在手机上无法浏览的作品集网站。
https://news.ycombinator.com/item?id=46396249
So, about one mushroom species in five is poisonous. Why is the ratio so low, why are there lots of edible ones? Without hard-shelled seeds to spread, why be eaten? And the poisonous ones apparently don’t use color as a warning signal, and don’t smell all that bad, and some of the poisons have really mild effects, like “gives only some people diarrhea” or “makes a hangover worse”. Meanwhile three of the deadliest species seemed to need their toxin (amanitin) so much that they picked it up through horizontal gene transfer. Why did just those ones need to be deadly? In addition to which we have these species that don’t even make you sick, just make you trip out, a function which looks to have evolved three times over in different ways. What kind of half-assed evolutionary strategies are these? What do mushrooms want?
card_zero
那么,大约五分之一的蘑菇种类是有毒的。为什么这个比例这么低,为什么会有这么多可食用的种类呢?蘑菇又没有硬壳种子需要靠被吃来传播,为什么要被吃掉呢?而且,有毒的蘑菇似乎不用颜色作为警告信号,闻起来也不怎么难闻,有些毒素的效果相当温和,比如“只会让一些人拉肚子”或者“让宿醉变得更糟”。与此同时,致死性最强的三个物种似乎非常需要它们的毒素(鹅膏蕈氨酸),以至于是通过水平基因转移才获得的。为什么偏偏是那几种需要致命呢?除此之外,还有一些种类,它们甚至不会让你生病,只会让你产生幻觉,而这种功能看起来是以三种不同的方式独立进化出来的。这是些什么样的半吊子进化策略啊?蘑菇到底想要什么?
https://news.ycombinator.com/item?id=46395668
I then decided to contact Insulet to get the kernel source code for it, being GPLv2 licensed, they’re obligated to provide it.
This is technically not true. It is an oversimplification of the common case, but what actually normally should happen is that:
The GPL requires the company to send the user a written offer of source code.
The user uses this offer to request the source code from the company.
If the user does not receive the source code, the user can sue the company for not honoring its promises, i.e. the offer of source code. This is not a GPL violation; it is a straight contract violation; the contract in this case being the explicit offer of source code, and not the GPL.
Note that all this is completely off the rails if the user does not receive a written offer of source code in the first place. In this case, the user has no right to source code, since the user did not receive an offer for source code.
However, the copyright holders can immediately sue the company for violating the GPL, since the company did not send a written offer of source code to the user. It does not matter if the company does or does not send the source code to the user; the fact that the company did not send a written offer to the user in the first place is by itself a GPL violation.
(IANAL)
teddyh
于是我决定联系Insulet公司,获取其内核的源代码。由于它遵循GPLv2许可证,他们有义务提供。
这在技术上来说是不正确的。这只是一个对常见情况的过度简化,但实际上,通常应该发生的情况是:
请注意,如果用户一开始就没有收到提供源代码的书面报价,那么上述所有情况都不适用了。在这种情况下,用户无权要求源代码,因为他们没有收到源代码的报价。
然而,版权持有人可以立即起诉该公司违反了GPL,因为他们没有向用户提供提供源代码的书面报价。公司之后是否向用户发送了源代码都无关紧要;他们一开始就没有向用户提供书面报价这一事实本身就构成了GPL违规。
(我不是律师)
https://news.ycombinator.com/item?id=46405520
I think this sums it up pretty well.
“When I am weaker than you, I ask you for freedom because that is according to your principles; when I am stronger than you, I take away your freedom because that is according to my principles,”
Coffeewine
我觉得这总结得挺到位的:“当我弱于你时,我向你争取自由,因为那是你的原则;当我强于你时,我剥夺你的自由,因为那是我的原则。”
https://news.ycombinator.com/item?id=46397563
This year:
I read the entire “Frog & Toad” collection. Probably about 30 times, some stories more.
“Little Shrew’s Day”… probably 25 times.
Many of the “Construction Site” series books, especially the OG “Goodnight, Goodnight, Construction Site”. The “Garbage Crew” and “Airport” books featured heavily.
Started to mix in some “Pete the Cat” titles.
“Detective Dog Nell” got a lot of air play.
Lots of others, but those are definitely the frequent fliers.
numbsafari
今年:
https://news.ycombinator.com/item?id=46392550
If the creators set the LLM in motion, then the creators sent the letter.
If I put my car in neutral and push it down a hill, I’m responsible for whatever happens.
nkrisc
如果创造者启动了LLM,那么创造者就发送了这封信。 如果我把车挂到空挡并推下山,那么无论发生什么我都要负责。
https://news.ycombinator.com/item?id=46402179
https://raw.githubusercontent.com/apple/ml-sharp/refs/heads/main/LICENSE_MODEL
“Exclusively for research purposes” so not actually open source.
RobotToaster
“仅用于研究目的”,所以实际上并不是开源的。
https://news.ycombinator.com/item?id=46399871
Having your OSS library take off
All of the other bullet points there are pretty reasonable, but, having worked in OSS professionally, I genuinely hope none of my GH projects take off in the OSS world.
I have a few projects that are in the >50 stars range, and am both grateful for other people’s interests and very glad that none of them crossed the threshold to becoming real OSS projects. I like sharing my interesting experiments, but I absolutely do not want to be stuck with the nightmare of maintaining OSS software for years.
Even on these small projects, I’ve had times when I’m pressured to do a bug fix on a 5 year old project where I don’t even remember how it works or review and merge an enthusiastic PR solving a problem I don’t actually care about. It has eaten up a few weekends, and was a relatively minor annoyance, but it gave me the taste for what OSS work involved. Working professionally for an OSS company gave me even more insight.
Maintaining OSS is a royal pain in the butt and I am forever grateful for the people who choose to do this. Running a popular OSS library is not a prize. It’s at least a part time job you aren’t paid for. The benefits are slim; even the “fame” part (name your top 10 favorite OSS tools, now name the maintainers of those), and has really limited rewards outside of that. I’ve know plenty of brilliant creators of OSS libraries who struggle to find jobs in industry that are appropriate to their skill level.
In fact, it’s really hard to both run a successful OSS project and have a full time job (especially a high paying one that wants a lot of your brain and time) if you can’t some how manage to make that OSS project your full time job… and even then you will be under constant pressure to find a way to monetize your OSS project (which inevitably leads to either losing that job or making decisions not in the interest of your community of OSS users).
OSS maintainers are saints as far as I’m concerned. So much of the world’s software depends on them (even moreso in the age of LLMs) and the vast majority are compensated way less than your average FAANG engineer.
crystal_revenge
让你的开源库一飞冲天
那里的其他要点都相当合理,但是,作为一名专业的开源项目工作者,我真的希望我在 GitHub 上的项目没有一个能真正在开源世界崭露头角。
我有几个项目的星标数在50以上,我既感谢他人的关注,也很庆幸没有一个项目跨越了门槛,成为真正的开源项目。我喜欢分享我有趣的实验,但我绝对不想被噩梦般地困在维护开源软件的泥潭中好几年。
即使在这些小项目上,我也曾被压力要求修复一个五年前的项目中的错误,而我甚至都不记得它是如何工作的了,或者去审查和合并一个充满热情的 PR,它解决的是我其实并不关心的问题。这花掉了我好几个周末的时间,虽然只是个小烦恼,但它让我尝到了开源工作的滋味。在一家开源公司里工作的经历让我有了更深入的了解。
维护开源项目简直是件苦差事,我永远感激那些选择做这件事的人。运营一个流行的开源库不是什么奖品。它至少是一份你没有报酬的兼职工作。好处微乎其微;甚至所谓的“名声”也是(说出你最喜爱的10个开源工具,现在说出这些工具的维护者),除此之外,回报也确实非常有限。我认识很多优秀的开源库创作者,他们都很难找到与自身技能水平相匹配的工业界工作。
事实上,要同时运营一个成功的开源项目和拥有一份全职工作是非常困难的(尤其是那份薪水很高、需要你投入大量脑力和时间的工作),如果你无法设法让你的开源项目成为你的全职工作……即便如此,你也会持续面临找到一种方式来将你的开源项目变现的压力(这不可避免地导致要么失去那份工作,要么做出对开源用户社区不利的决定)。
在我看来,开源项目的维护者们都是圣人。世界上那么多的软件都依赖于他们(尤其是在大语言模型时代),而绝大多数人的报酬都远低于普通 FAANG 工程师的收入。
https://news.ycombinator.com/item?id=46394822
Could be that the mushroom just temporarily interferes with the substances the elves put in our water supply to keep us in the dark?
nospice
会不会是蘑菇只是暂时干扰了精灵们投放到我们饮用水中、用来让我们蒙在鼓里的那些物质?
https://news.ycombinator.com/item?id=46405485
“one of the largest sources of climate alarmism in the country.”
It’s amazing how fast free speech has been destroyed in the past year. Especially when it comes to censorship of science and science’s conclusions.
However, I heard many many more people complaining about a lack of free speech in 2023 and 2024 than now. I really wonder what happened to all those principles! It’s shocking.
epistasis
“该国气候危言耸听的最大来源之一。”
言论自由在过去一年里被扼杀的速度真是惊人。尤其是在科学和科学结论的审查方面。
然而,比起现在,我在2023年和2024年听到抱怨缺乏言论自由的人多得多。我真的想知道那些原则都怎么了!太令人震惊了。
https://news.ycombinator.com/item?id=46404319
The editor that is used to draw these animations https://floor796.com/editor/l0
Author has a YouTube channel too somewhere where you can see him making a drawing start to end. (edit: https://m.youtube.com/channel/UCribkEGzOuMQ9ozb0ektMCQ )
From FAQs
The creation of Floor796 started in 2018. I spent the first year creating the animation editor, the rendering engine and the site itself. Then I started drawing the first characters. I drew slowly at first, as I had to get used to the projection and constantly improve the animation editor. I’ve been creating the first block for over 8 months. Now I draw 1 block in about 1-1.5 months.
Author made everything, including the editor, by himself.
smusamashah
用于绘制这些动画的编辑器 https://floor796.com/editor/l0
作者在YouTube上也有一个频道,你可以在那里看到他从头到尾的创作过程。(编辑:https://m.youtube.com/channel/UCribkEGzOuMQ9ozb0ektMCQ)
来自常见问题解答:
Floor796的创作始于2018年。我花了一年的时间来创建动画编辑器、渲染引擎和网站本身。然后我开始绘制第一个角色。起初我画得很慢,因为我必须习惯投影法并不断改进动画编辑器。我花了8个多月的时间来创作第一个方块。现在,我画一个方块大约需要1到1.5个月。
作者自己完成了所有工作,包括编辑器。
https://news.ycombinator.com/item?id=46395977
Given the context of the article, I think “Rust specific” here means that “it couldn’t be done in python”.
For example “No interpreter startup” is not specific to Rust either.
nemothekid
根据文章的上下文,我认为这里的“Rust特有的”指的是“它无法用Python实现”。例如“无需解释器启动”也不是Rust特有的。
2025-12-27 10:30:50
- Rob Pike 强烈抨击生成式 AI 用于自动化“行善”与礼节性表达,认为这种做法既不尊重人也暴露了 AI 对人类情感与价值的浅薄理解。
- 作者建议将日常活动的“默认速度”降低到三分之一,通过放慢阅读、饮食和信息处理来重获更深的满足感。
- 文章通过多个包管理器案例说明把 Git 当作数据库用于索引或存储会遇到性能、存储和可用性瓶颈,最终多数项目转向更合适的方案。
- 一则夸张幽默的 Imgur 帖子展示并放大了 Rob Pike 对生成式 AI 的强烈批评,迅速走红并引发对环保、数据授权与技术滥用的讨论。
- Abbott Freestyle Libre 连续血糖监测器的一批次故障被指导致多起伤亡,凸显专有医疗设备封闭性带来的安全与透明性问题。
- 39C3 年会日程涵盖 AI 批判、信息安全、数字身份与艺术等多维议题,反映黑客社区对技术与社会问题的交叉关注与批判精神。
- 作者因 Framework 13 的模块化与易维修设计重燃对可维修笔记本的热情,赞赏用户可自由更换多种部件的自由度。
- Google 正逐步推出更改 @gmail.com 地址的功能,新旧地址将互为别名且更改有次数与时间限制。
- TurboDiffusion 通过多项技术实现对视频扩散模型在单 GPU 上约 100–200× 的推理加速,从而大幅提升视频生成效率。
Rob Pike 在推特上表达了对当今科技行业的愤怒,指责其 “破坏地球”、“浪费数万亿在有毒且不可回收的设备上”,并对科技的现状感到愤慨。他指出,尽管在这种情况下,机器仍在感谢他对简化软件的努力,这让他感到更为愤怒。
https://news.ycombinator.com/item?id=46392115
https://www.raptitude.com/2025/12/maybe-the-default-settings-are-too-high/
作者分享了自己用极慢速度阅读《魔戒》的经历,发现放慢阅读节奏反而让故事体验更加丰富深刻。他通过朗读、逐句停顿、给予每个句子三倍注意力,使文字中的意象和情感得以充分展开,获得远超平常的阅读满足感。
这种体验让他联想到“吃”的类似现象:放慢进食速度,反而能更充分感受食物的滋味,而快速进食反而会错过真正的美味。他指出,人们常因急于获取“好东西”而加速,结果却适得其反。真正的享受并非靠速度获取,而是通过给予足够时间,让内在的感知能力自然释放出更多价值。
作者将此现象类比为用吸尘器打扫地毯——速度太快会漏掉深层灰尘,慢下来才能真正吸净。他认为现代社会的“高消费速度”默认设置,正在削弱我们对阅读、饮食、信息等基本活动的真实收获。
他提醒读者,慢下来并不只是“美德”,而是一种更高效获取意义的方式。当你放慢节奏,不仅收获更多,还会开始重新审视自己真正想要的是什么。比如,认真品味廉价食品会发现其乏味,而专注品尝手工点心则能发现更多层次的美味。
最终,作者呼吁人们质疑日常的“默认速度”——无论是读书、吃饭、看新闻还是刷社交媒体。尝试将速度降低到平时的三分之一,观察会发生什么。你会发现,真正有价值的东西,只在慢下来时才浮现。
https://news.ycombinator.com/item?id=46387657
https://nesbitt.io/2025/12/24/package-managers-keep-using-git-as-a-database.html
使用 Git 作为数据库看似诱人:版本历史免费、Pull Request 提供审查流程、分布式设计、GitHub 免费托管、人人会用。但实际应用中,包管理器反复尝试这一方案,结果都不理想。
Cargo 的 crates.io 最初使用 Git 仓库作为索引,随着索引膨胀,用户在 CI 环境中频繁遭遇“Resolving deltas”进度条卡死,因 libgit2 需处理数以万计的提交历史。2025 年,通过引入稀疏 HTTP 协议,Cargo 改为按需下载依赖元数据,99% 的请求已默认使用稀疏模式,Git 索引虽仍在增长,但多数用户不再直接接触。
Homebrew 曾依赖 Git 深度克隆,更新时需下载 331MB 甚至导致 .git 文件达 1GB。GitHub 明确建议停止浅克隆,因成本过高。2023 年 Homebrew 4.0 改用 JSON 下载更新,自动更新频率从每 5 分钟改为 24 小时,速度显著提升。
CocoaPods 的 Specs 仓库因包含数十万 podspec 文件和深层目录结构,克隆与更新耗时数分钟,CI 耗时严重。GitHub 还因浅克隆触发 CPU 限流。团队尝试多种方案无效,最终在 1.8 版本放弃 Git,改用 CDN 直接提供 podspec 文件,节省约 1GB 磁盘空间,新项目安装几乎瞬间完成。
Nixpkgs 的客户端已通过 S3 和 CDN 获取包表达式,无需接触 Git 仓库。但其主仓库本身对 GitHub 造成巨大压力:83GB 大小,50 万个树对象,2 万个分支。本地克隆仅 2.5GB,其余为 GitHub 的分支网络存储所有 PR 和合并提交。CI 每日查询合并状态,生成新合并提交,导致集群共识失败,曾险些变为只读。
vcpkg 依赖 Git 树哈希来标识端口版本,必须保留完整历史。浅克隆会直接导致“vcpkg was cloned as a shallow repository”错误。GitHub Actions 和 DevContainers 默认浅克隆,导致依赖解析失败。解决方案要么用 fetch-depth: 0 全量克隆,要么通过日期推测历史,均不优雅。目前尚无迁移到 CDN 或稀疏协议的计划,自定义注册表仍强制使用 Git,文件系统注册表也缺乏 HTTP 支持。
Go 模块曾因 go get 需克隆整个仓库以读取 go.mod,导致 18 分钟的等待时间。引入 GOPROXY 后,模块代理通过 HTTP 提供源码归档和 go.mod,时间缩短至 12 秒。同时引入 sumdb 校验数据库,防止恶意修改和仓库删除带来的风险,提升安全性和可用性。
这一模式不仅限于包管理器。Git 基础的 Wiki(如 Gollum)在规模扩大后变得迟缓,GitHub 和 GitLab 已计划迁移。Git 基础的 CMS(如 Decap)因频繁 API 请求触发速率限制,10,000 条数据即达上限。内容多或更新频繁时,应使用传统数据库。
即使 GitOps 工具如 ArgoCD,也需绕过 Git 的性能瓶颈,其仓库服务器需优化以应对大规模 Git 操作。
https://news.ycombinator.com/item?id=46391514
网页主体内容为 Imgur 平台上的一个用户帖子,标题为“Rob Pike Goes Nuclear over GenAI”,内容聚焦于著名计算机科学家罗伯特·派克(Rob Pike)对生成式人工智能(GenAI)的强烈批评。帖子以夸张幽默的风格呈现,暗示派克“发疯”或“爆发”,用“核爆”比喻其情绪激烈程度,反映他对当前 AI 技术发展的不满或担忧。
页面下方有互动元素,包括点赞、分享、收藏、嵌入链接、下载等操作选项,以及评论区和相关推荐内容。同时显示该帖已有 22,049 次浏览,发布于 1 天前,属于近期热门内容之一。
此外,页面包含一些无关的广告或推广信息,如“我希望能把杰克·保罗的脸贴在袋上”“易拉罐压碎机”“一些艺术与歌曲编辑作品”等,可能为平台推荐或用户自创内容,但与主帖主题无关。
整体来看,这是一篇带有讽刺与网络梗风格的社交媒体帖子,借知名人物之名讨论生成式 AI 引发的社会争议,具有较强的话题性和传播性。
https://news.ycombinator.com/item?id=46389444
https://sfconservancy.org/blog/2025/dec/23/seven-abbott-freestyle-libre-cgm-patients-dead/
本文作者 Bradley M. Kühn 分享了自己被诊断为糖尿病后,因依赖 Abbott 公司生产的 Freestyle Libre Plus 连续血糖监测仪(CGM)而面临的健康风险。该设备为专有系统,但开源社区已逆向工程其通信协议,并开发出更优的开源安卓应用 Juggluco。
2025 年 12 月 3 日,作者收到药房发来的紧急通知,指出其使用的设备批次存在严重缺陷。经与 FDA 公告核对,确认该批次设备存在致命漏洞:会错误报告极低血糖值。这一错误可能导致患者误判并摄入过多糖分,引发严重后果。FDA 报告称,该问题已导致 7 人死亡,超过 700 人受伤。
作者指出,此类事件并非首次。1985 年的 Therac-25 放射治疗仪曾致死三人,2020 年某眼科植入设备因公司倒闭而停用,导致部分患者失明。这些案例表明,专有医疗软件和硬件的封闭性可能带来重大公共健康风险。
作者强调,虽然不能绝对保证开源(FOSS)能避免此类事故,但开放源代码和硬件设计可实现广泛同行评审,提升安全性与透明度。公众应有权了解设备的技术细节,包括软硬件设计,以保障生命安全。
目前,由于绝大多数用户在使用 Abbott 应用时已签署包含单方面免责条款的协议,可能影响未来集体诉讼的推进。作者呼吁应有更多独立调查,推动医疗设备的开放与问责,并希望尽快发起集体诉讼,为受害者争取正义。
https://news.ycombinator.com/item?id=46388040
https://fahrplan.events.ccc.de/congress/2025/fahrplan/
该网页是 39C3(Chaos Communication Congress 39)的会议日程页面,展示了 2025 年 12 月 27 日至 30 日(星期六至星期二)的活动安排。会议地点为德国柏林,涵盖多个主题领域,包括安全、硬件、伦理社会政治、艺术与科技、科学、社区活动等。
日程从 12 月 27 日(星期六)上午 10:30 开始,包含开幕式、多场 40 分钟至 60 分钟的演讲与讨论。主要议题包括:
12 月 28 日(星期日)继续深入,包括:
整体日程密集,内容前沿,融合技术、社会批判、艺术与实践,体现 39C3 作为全球顶尖黑客大会的多元性与批判精神。
https://news.ycombinator.com/item?id=46386211
https://blog.matthewbrunelle.com/im-a-laptop-weirdo-and-thats-why-i-like-my-new-framework-13/
作者 Matthew Brunelle 是一位热衷于折腾笔记本电脑的“怪人”,在 2025 年 8 月出售了自己 2021 款 M1 Max MacBook Pro,转而购买了 Framework 13 DIY Edition 笔记本。他回顾了自己多年来对笔记本的深度改造经历,从 2008 年的三星 NC10 Netbook 开始,曾为其升级内存、更换 SSD、安装触摸屏,甚至打造 Hackintosh 系统,并通过维护 AUR 中的 GMABooster 工具成为首个包维护者。
在大学时期,他使用 2011 款 MacBook Pro,曾自行更换光驱为硬盘,实现双硬盘安装,支持 macOS、Windows 和 Linux 三系统启动,并反复重装 Arch Linux,积累了丰富的系统配置经验。
随着笔记本趋向轻薄化,如 ThinkPad X1 Carbon Gen 7,可维修性大幅下降,连更换 SSD 都需专业人员上门处理,让他感到失望。
2023 年因裁员获得一台高配 M1 Max MacBook Pro,虽性能强大,但无法升级内存或硬盘,且系统更新让使用体验下降,最终闲置未动。
直到 Framework 13 推出,搭载 AMD 新芯片,且真正实现模块化设计,支持用户自行更换内存、SSD、电池、屏幕等部件,让他重燃“折腾热情”。他最终决定购买,不仅因为其高可维修性,也因轻便的 13 英寸设计更适合出行,同时旧 MacBook Pro 仍有市场价值,能被他人继续使用。
文章强调:如今大多数笔记本已无法更换内存或 SSD,而 Framework 13 的出现,让“笔记本怪人”终于又能自由改造设备,重拾技术乐趣。
https://news.ycombinator.com/item?id=46391410
https://9to5google.com/2025/12/24/google-change-gmail-addresses/
Google 正在逐步推出一项新功能,允许用户更改其以 @gmail.com 结尾的邮箱地址。此前,用户若使用的是 @gmail.com 邮箱,通常无法更改账户邮箱地址,但这一限制即将被打破。
根据 Google 支持页面的信息(目前仅以印地语显示,内容为翻译),用户现在可以将原有的 @gmail.com 邮箱地址更改为另一个新的 @gmail.com 地址。更改后,原邮箱地址将自动成为新邮箱的别名,仍可接收邮件并用于登录,账户内的所有数据(如邮件、照片、消息等)不会受到影响。
用户在更改邮箱后,原邮箱地址仍可继续使用,且在 12 个月内无法创建新的 @gmail.com 邮箱地址。同时,新邮箱地址也无法被删除。每个账户一生中最多可更改三次邮箱地址,总计最多拥有四个不同的 @gmail.com 地址。
此外,旧邮箱地址在部分旧系统中(如日历事件)可能不会立即更新,但依然可以发送邮件。旧邮箱地址不会被他人使用,始终属于原用户。
该功能预计将在未来几周内逐步向所有用户开放,届时用户可通过“我的账户”页面进行操作。目前该支持页面尚未在英文界面中上线,但其内容已通过 Telegram 等渠道被曝光,表明该功能即将正式发布。
https://news.ycombinator.com/item?id=46387192
https://github.com/thu-ml/TurboDiffusion
TurboDiffusion 是一个用于加速视频扩散模型的框架,可在单张 RTX 5090 显卡上实现 100–200 倍的生成速度提升,同时保持高质量视频输出。该框架结合了 SageAttention、SLA(稀疏线性注意力)和 rCM(时间步蒸馏)技术,显著优化了推理效率。
项目提供了多个预训练模型,包括 TurboWan2.2-I2V-A14B-720P 和 TurboWan2.1-T2V-1.3B-480P 等,支持 480p 和 720p 分辨率生成,其中“最佳分辨率”列标明了各模型在该分辨率下表现最优。
安装方式支持通过 pip 直接安装或从源码编译,推荐使用 Python 3.12 和 PyTorch 2.8.0。为启用 SageSLA 加速功能,需额外安装 SpargeAttn 库。
推理时需下载对应的 VAE 和文本编码器模型,并根据 GPU 显存选择使用量化(-quant)或非量化模型。例如,RTX 5090 推荐使用量化版本,而 H100 等大显存 GPU 可使用未量化版本。
使用脚本生成视频时,可通过参数控制采样步数、帧数、提示词、分辨率、长宽比和随机种子等,支持批量生成。项目还集成了基于 prompt_toolkit 和 rich 的交互式命令行界面,提升用户体验。
项目当前版本为测试阶段,模型和论文仍在优化中,后续将更新以进一步提升生成质量。
https://news.ycombinator.com/item?id=46388907
https://news.ycombinator.com/item?id=46392626
All I have to say is this post warmed my heart. I’m sure people here associate him with Go lang and Google, but I will always associate him with Bell Labs and Unix and The Practice of Programming, and overall the amazing contributions he has made to computing.
To purely associate with him with Google is a mistake, that (ironically?) the AI actually didn’t make.
Just the haters here.
Scubabear68
我只想说,这篇帖子温暖了我的心。我知道这里的人可能会把他和 Go 语言以及 Google 联系在一起,但我总会把他和贝尔实验室、Unix 以及《程序设计实践》联系在一起,当然还有他为计算机科学做出的那些惊人贡献。
仅仅将他与 Google 联系在一起是个错误,(讽刺的是?)AI 反而没有犯这个错。
这里只有一些讨厌的人罢了。
https://news.ycombinator.com/item?id=46387876
My dad was a busy construction contractor. One summer he tore himself away from work and took the family to a week long boat camp out next to a big beautiful lake. It turned out that our campsite was actually in the lake by a few inches at high water, but dad saw a way to dam it off and keep it dry, so he grabs the shovel and starts digging trenches and building walls and ordering us around.
About an hour into that, pouring sweat, he stops cold and says “what the hell am I doing?” The flooded camp was actually nice on a hot day and all we really had to do was move a couple of tents. He dropped the shovel and spent the rest of the week sunbathing, fishing, snorkeling and water skiing as God intended. He flipped a switch and went from Hyde to Jekyll on vacation. I’ve had to emulate that a few times.
delichon
我爸爸是个忙碌的建筑承包商。有一年夏天,他终于从工作中抽出身来,带着家人去了一个位于美丽大湖旁的为期一周的露营地。结果发现,涨水时我们的营地其实就在湖水里,只高出水面几英寸。但爸爸想出了办法,可以用堤坝把它围起来保持干燥,于是他抓起铁锹,开始挖沟、筑墙,还指挥着我们干活。
干了一个多小时,他浑身是汗,突然停下来,说:“我这到底在干什么?” 其实,在炎热的天气里,被水淹没的营地还挺舒服的,我们真正需要做的只是挪动几顶帐篷而已。他扔下铁锹,在那周剩下的时间里,像老天爷安排好了一样,尽情地晒太阳、钓鱼、潜水和滑水。他仿佛按了个开关,在假期里瞬间从“海德”(Mr. Hyde,喻指狂暴的一面)变成了“杰基尔”(Dr. Jekyll,喻指温和的一面)。有好几次,我都不得不模仿他那样做。
https://news.ycombinator.com/item?id=46392387
Did Google, the company currently paying Rob Pike’s extravagant salary, just start building data centers in 2025? Before 2025 was Google’s infra running on dreams and pixie farts with baby deer and birdies chirping around? Why are the new data centers his company is building suddenly “raping the planet” and “unrecyclable”?
jabedude
支付罗布·派克那份高薪的谷歌公司,难道是到2025年才开始建造数据中心的吗?那2025年之前,谷歌的基础设施难道是靠梦想和精灵的屁在运行,周围还有小鹿和小鸟在叽叽喳喳地叫吗?为什么他们公司现在新建的数据中心突然就变成了“在强奸地球”和“无法回收”?
https://news.ycombinator.com/item?id=46392621
Everything humans do is harmful to some degree. I don’t want to put words in Pike’s mouth, but I’m assuming his point is that the cost-benefit-ratio of how LLMs are often used is out of whack.
Somebody burned compute to send him an LLM-generated thank-you note. Everybody involved in this transaction lost, nobody gained anything from it. It’s pure destruction of resources.
InsideOutSanta
人类所做的任何事在某种程度上都具有危害性。我不想替派克(Pike)代言,但我猜想他的观点是,大语言模型(LLM)的常见应用方式,其成本效益比例已经严重失调。
有人耗费算力给他发了一条由LLM生成的感谢信。参与这场交易的所有人都输了,谁都没有获得任何好处。这纯粹是对资源的破坏。
https://news.ycombinator.com/item?id=46392315
What is going through the mind of someone who sends an AI-generated thank-you letter instead of writing it themselves? How can you be grateful enough to want to send someone such a letter but not grateful enough to write one?
nkrisc
会给别人发一封AI生成的感谢信,而不是自己动笔写的人,他心里在想什么呢?你难道会心怀感激到想给人寄封信,却感激到连信都懒得自己写吗?
https://news.ycombinator.com/item?id=46381665
I’m taking a moment to recognize once more the work that user @atdrummond (Alex Thomas Drummond) did for a couple years to help others here. I did not know him, don’t think I ever interacted with him, and I did not benefit from his generosity, but I admired his kindness. Just beautiful.
Ask HN: Who needs holiday help? (Follow up thread) - https://news.ycombinator.com/item?id=38706167 - Dec 2023 (9 comments)
Ask HN: Who needs help this holidays? - https://news.ycombinator.com/item?id=38492378 - Dec 2023 (210 comments)
Tell HN: Thank You - https://news.ycombinator.com/item?id=34140096 - Dec 2022 (42 comments)
Tell HN: Everyone should have a holiday dinner this year - https://news.ycombinator.com/item?id=34122118 - Dec 2022 (58 comments)
Unfortunately, Alex died a few months after his last round of holiday giving, about 1½ years ago now.
Tell HN: In Memory of Alexander Thomas Drummond - https://news.ycombinator.com/item?id=40508725 - May 2024 (5 comments)
If you read the comments in that last thread, know that @toomuchtodo followed through last year and kept the tradition alive. Amazing and magnificent.
Ask HN: Who needs help this holidays? - https://news.ycombinator.com/item?id=42291246 - Dec 2024 (46 comments)
NaOH
我再次想感谢用户 @atdrummond(亚历克斯·托马斯·德拉蒙德)过去几年在此地帮助他人所做的贡献。我不认识他,也未曾与他有过交流,并未曾受益于他的慷慨,但我钦佩他的善良。这份善意非常美好。
“HN 问答:谁需要假日帮助?”(后续讨论)- https://news.ycombinator.com/item?id=38706167 - 2023年12月(9条评论)
“HN 问答:今年假期谁需要帮助?”- https://news.ycombinator.com/item?id=38492378 - 2023年12月(210条评论)
“HN 分享:谢谢”- https://news.ycombinator.com/item?id=34140096 - 2022年12月(42条评论)
“HN 分享:今年每个人都应该有一顿节日晚餐”- https://news.ycombinator.com/item?id=34122118 - 2022年12月(58条评论)
不幸的是,Alex 在他最后一次假期赠与活动后几个月就去世了,大约是一年半前的事了。
“HN 分享:纪念亚历山大·托马斯·德拉蒙德”- https://news.ycombinator.com/item?id=40508725 - 2024年5月(5条评论)
如果你阅读了最后一篇帖子的评论,就知道 @toomuchtodo 去年接棒延续了这一传统。令人惊叹,宏伟壮丽。
“HN 问答:今年假期谁需要帮助?”- https://news.ycombinator.com/item?id=42291246 - 2024年12月(46条评论)
https://news.ycombinator.com/item?id=46395821
I think this post does a really good job of covering how multi-pronged performance is: it certainly doesn’t hurt uv to be written in Rust, but it benefits immensely from a decade of thoughtful standardization efforts in Python that lifted the ecosystem away from needing setup.py on the hot path for most packages.
woodruffw
我认为这篇帖子的一个亮点在于它很好地阐述了性能是多方面的:当然,用 Rust 编写对 uv 而言是个优势,但它真正巨大受益的,是过去十年来 Python 社区在标准化方面所付出的深思熟虑的努力。这些努力让整个生态系统摆脱了在大多数包的热路径上依赖 setup.py 的状况。
https://news.ycombinator.com/item?id=46392719
Google has been burning compute for the past 25 years to shove ads at people. We all lost there, too, but he apparently didn’t mind that.
acheron
过去25年里,谷歌一直耗费着巨算力,拼命向人们推送广告。我们所有人也都是输家,但他似乎对此毫不在意。
https://news.ycombinator.com/item?id=46384018
so not only did they enforce a ridiculously small message limit, they also did it for the self-hosted version, and they did it without announcing it AND without a suitable migration path
and still no one from that company has admitted to it being a mistake?
very nice
Zephilinox
他们不仅强制推行了可笑的小消息数量限制,还把这一限制用到了自托管版本上,并且没有提前宣布,也没有提供合适的迁移方案。
直到现在,他们公司还没有人承认这是个错误吗?
真棒。
https://news.ycombinator.com/item?id=46388885
I’m a T1 diabetic, have worked on open source diabetes-tech (OpenAPS), and have used a number of different CGMs (though not this one specifically). This story… does not make very much sense.
CGMs (of any brand) are not, and have never been, reliable in the way that this story implies that people want them to be reliable. The physical biology of CGMs makes that sort of reliability infeasible. Where T1s are concerned, patient education has always included the need to check with fingerstick readings sometimes, and to be aware of mismatches between sensor readings and how you’re feeling. If a brand of CGMs have an issue that sometimes causes false low readings, then fixing it if it’s fixable is great, but that sort of thing was very much expected, and it doesn’t seem reasonable to blame it for deaths. Moreover, there are two directions in which readings can be inaccurate (false low, false high) with very asymmetric risk profiles, and the report says that the errors were in the less-dangerous direction.
The FDA announcement doesn’t say much about what the actual issue was, but given that it was linked to particular production batches, my bet is that it was a chemistry QC fail in one of the reagents used in the sensor wire. That’s not something FOSS would be able to solve because it’s not a software thing at all.
jimrandomh
我是一名1型糖尿病患者,曾参与开源糖尿病技术(OpenAPS)项目,并使用过多种不同的连续血糖监测仪(尽管并非这款产品本身)。这个故事……完全不合逻辑。
任何品牌的CGM都从未,也不可能达到这个故事所暗示的那种可靠性。CGM的生理学原理决定了这种可靠性是无法实现的。对于1型糖尿病患者来说,患者教育始终包含需要偶尔用指尖血糖仪进行校对,并注意传感器读数与自身感受可能存在差异的必要性。如果一个品牌的CGM存在导致假性低血糖读数的问题,那么如果可以修复,那自然是好事,但这类问题本就在意料之中,因此要它为死亡事件负责似乎并不合理。此外,血糖读数可能出现两种不准确的情况(假性低血糖或假性高血糖),而这两种情况的风险特征极不对称,而报道中所说的问题恰恰是风险较低的那一类。
美国食品药品监督管理局(FDA)的公告并未详细说明实际问题的具体细节,但考虑到该问题与特定的生产批次有关,我猜测这是传感器导线中所用某种试剂的化学质量控制失败所致。这并非软件问题,因此开源软件(FOSS)根本无法解决。
https://news.ycombinator.com/item?id=46389600
To be clear, this email isn’t from Anthropic, it’s from “AI Village” [0], which seems to be a bunch of agents run by a 501(c)3 called Sage that are apparently allowed to run amok and send random emails.
At this moment, the Opus 4.5 agent is preparing to harass William Kahan similarly.
[0] https://theaidigest.org/village
wrs
需要明确的是,这封邮件并非来自Anthropic,而是来自“AI Village”[0]。该组织似乎是一个由名为Sage的501(c)3非营利组织运营的智能体集群,并且显然被允许肆意妄为,发送这些随机邮件。
目前,Opus 4.5智能体正准备以同样的方式骚扰威廉·卡汉(William Kahan)。
https://news.ycombinator.com/item?id=46383864
Beautiful story but with a sad undertone.
A large percentage of the homeless have autism [1]. And that really sucks. If these people don’t have support, their lives can turn miserable fast. And unfortunately it’s just way too easy for these people to end up in abusive situations.
It’s a lot of work to care for people with autism (moderate to severe). There is no standard for what they need, their capabilities can be all over the board. Some of them are capable like ronny in this story and they can hold down jobs. But others need 24/7 caregiving in order to survive. Unfortunately I don’t think those with severe autism survive for long when they become homeless.
I hope this story at very least gets people to view the homeless a little differently. They aren’t all there because of vices or failure. A large percentage are there because society does not care for those with mental disabilities. It was good on this story to highlight that Ron had problems with gambling. Autism does, in fact, make an individual more prone to various addictions.
My point in writing this, please have some humanity about the homeless. I get that they can be inconvenient. They are people and they aren’t necessarily bad people due to their circumstances.
[1] https://pubmed.ncbi.nlm.nih.gov/29633853/
cogman10
这是一个美丽的故事,但带有悲伤的潜台词。
很大比例的无家可归者患有自闭症[1]。这真的太糟糕了。如果这些人得不到支持,他们的生活可能会迅速陷入悲惨。不幸的是,他们极易陷入受虐待的处境。
照顾自闭症患者(中度至重度)是一项非常艰巨的工作。他们没有统一的需求标准,其能力水平也千差万别。有些人像故事里的罗尼一样有能力,能够保住工作。但另一些人则需要全天候的照料才能生存。不幸的是,我认为当重度自闭症患者流落街头时,他们的寿命不会很长。
我希望这个故事至少能让人们对无家可归者有不同的看法。他们并非都因为恶习或失败而无家可归。很大一部分人之所以如此,是因为社会没有关心那些有精神残疾的人。这个故事提到罗尼有赌博问题,这一点处理得很好,因为事实上,自闭症确实会使个体更容易染上各种成瘾症。
我写下这些评论的目的是,请对无家可归者抱有人性化的关怀。我明白他们有时会带来不便。但他们是人,不应因其处境而被视为坏人。
[1] https://pubmed.ncbi.nlm.nih.gov/29633853/
https://news.ycombinator.com/item?id=46391981
This seems like a tragedy of the commons – GitHub is free after all, and it has all of these great properties, so why not? – but this kind of decision making occurs whenever externalities are present.
My favorite hill to die on (externality) is user time. Most software houses spend so much time focusing on how expensive engineering time is that they neglect user time. Software houses optimize for feature delivery and not user interaction time. Yet if I spent one hour making my app one second faster for my million users, I can save 277 user hour per year. But since user hours are an externality, such optimization never gets done.
Externalities lead to users downloading extra gigabytes of data (wasted time) and waiting for software, all of which is waste that the developer isn’t responsible for and doesn’t care about.
c-linkage
这看起来像是一个“公地悲剧”——毕竟GitHub是免费的,又具备这么多优秀特性,那为何不用呢?——但只要有外部性存在,这种决策方式就会发生。
我最愿意为之“奋战到底”的立场(关于外部性),是用户时间。大多数软件公司把大量精力专注于工程时间的成本,却忽略了用户时间。软件公司优化的是功能交付,而非用户交互时间。然而,如果我花一个小时,让我那个拥有百万用户的App速度提升一秒,每年就能节省277个用户小时。但由于用户时间是一种外部性,这类优化永远得不到实施。
外部性导致用户下载额外的千兆数据量(浪费的时间)和等待软件,所有这些都是开发者无需负责也毫不在意的浪费。
https://news.ycombinator.com/item?id=46385114
Somebody has to be the brave experimenter that tries the new thing. I’m just glad it was these folk. Since they make no tangible product and contribute nothing to society, they were perhaps the optimal choice to undergo these first catastrophic failed attempts at AI business.
JoeAltmaier
总得有人去勇敢尝试新事物,我很庆幸是这些人。既然他们既不生产任何有形产品,也不为社会做出任何贡献,那么他们或许就是那些AI创业初期的灾难性失败尝试的最佳人选了。
https://news.ycombinator.com/item?id=46395873
I don’t really understand the hate he gets over this. If you want to thank someone for their contribution, do that yourself? Sending thank you from an ML model is anything but respectful. I can only imagine that if I got a message like that I’d be furious too.
This reminds me a story from my mom’s work from years ago: the company she was working for announced salary increases to each worker individually. Some, like my mom, got a little bit more, but some got a monthly increase around 2 PLN (about $0.5). At that point, it feels like a slap in the face. A thank you from AI gives the same vibe.
suralind
我真的不太明白他为此招来了这么大的非议。如果你想感谢某人的贡献,那你自己去感谢啊?用机器学习模型来发送感谢信息,这根本就不是尊重。我只能想象,如果我收到那样的信息,我也会气炸的。
这让我想起我妈多年前在公司里的一件事:她当时所在的公司宣布给每位员工单独加薪。有些人,比如我妈,涨了一点点,但有些人每月只加了大约2波兰兹罗提(约合0.5美元)。在那种情况下,感觉就像一记耳光。来自AI的感谢信息也是同样的感觉。
https://news.ycombinator.com/item?id=46383792
My parents once took a struggling man in. I think he stayed with them for about three years, up until the moment I was conceived and my mom started planning for a future for our family and helped him get into a housing project. For all of my life before adulthood this man would show up once in a while on his racing bike for coffee, talk and proceed to stay for dinner. He was kind, funny and a tidbit strange. His life’s story had more drama than a soap opera, but you wouldn’t know it. After my father died I proceeded to look for him, but never found him. I still search online for him once in a while, fully knowing he probably isn’t alive anymore and probably wouldn’t use online anyways. There is some story in my head that he probably showed up to my dads doorstep once on his racing bike to find other people living there, but was too shy to ask for details. A trace lost.
wjnc
我父母曾收留过一个生活潦倒的男人。我想他在我们家住了大约三年,直到我怀上的那一刻,我妈妈开始为我们家庭的未来做规划,并帮他申请了住房项目。在我成年前的所有岁月里,这个男人偶尔会骑着他的赛车来,喝杯咖啡,聊聊天,然后留下来吃晚饭。他很友善,风趣,还有点古怪。他的人生故事比肥皂剧还戏剧化,但你却一点也看不出来。在我父亲去世后,我试着去找过他,但没能找到。我偶尔还是会上网搜索他的信息,心里很清楚他可能已经不在人世,而且很可能根本不上网。我脑子里有个故事,也许在他父亲的赛车上,他曾经出现在我们家门前,发现那里住着别人,但不好意思去打听详情。线索就此中断。
https://news.ycombinator.com/item?id=46386945
Not as hugely generous as this story, but during his whole college professor career since the 70s, my father always took care that none of his students spent any major holidays alone and away from home, so we always ended up having 2 or 3 of them around for Christmas, the New Year, Easter… They were from everywhere around the country and the world, and it was so very enriching for me and my siblings. I had a huge postage stamp collection from the ever increasing well wishing mail that arrived. It’s also kind of comforting to think that anywhere in the world you are not that far from someone that remembers you fondly.
fcatalan
虽然没有这个故事里那么夸张,但从70年代起,我父亲在他整个大学教授生涯中,总会确保没有一个学生在主要的节假日独自一人、远离家乡。因此,我们家总会有两三个学生一起过圣诞节、新年、复活节……他们来自全国各地和世界各地,这对我和我的兄弟姐妹来说是一种非常宝贵的经历。我收藏了大量的邮票,它们都来自于那些日益增多的、寄来的美好祝愿的信件。想到在世界的任何地方,你都不会离那些珍视你的人太远,这也算是一种安慰吧。
https://news.ycombinator.com/item?id=46383008
Pretty sure it’s a regex to match email address strings.
onion2k
我相当确定这是一个用来匹配电子邮件地址字符串的正则表达式。
https://news.ycombinator.com/item?id=46394328
The repo in question incorporated FFmpeg code while claiming their code is Apache 2.0-licensed over 1.5 years ago[1]
This is not allowed under the LGPL, which mandates dynamic linking against the library. They copy-pasted FFmpeg code into their repo instead.
[1] https://x.com/HermanChen1982/status/1761230920563233137
merlindru
大约一年半前,该仓库在声称其代码采用 Apache 2.0 许可证的同时,却引入了 FFmpeg 的代码[1]。
根据 LGPL(GNU 宽通用公共许可证)的规定,这是不允许的,该许可证要求必须通过动态链接的方式使用该库。而他们实际上是直接将 FFmpeg 的代码复制粘贴到了自己的仓库中。
https://news.ycombinator.com/item?id=46395188
The important point that Simon makes in careful detail is: an “AI” did not send this email. The three people behind the Sage AI project used a tool to email him.
According to their website this email was sent by Adam Binksmith, Zak Miller, and Shoshannah Tekofsky and is the responsibility of the Sage 501(c)3.
No-one gets to disclaim ownership of sending an email. A human has to accept the Terms of Service of an email gateway and the credit card used to pay the email gateway. This performance art does not remove the human no matter how much they want to be removed.
crawshaw
西蒙在详尽阐述中提出的重点是:发送这封邮件的并非“AI”,而是“Sage AI”项目背后的三个人所使用的一个工具。
根据他们的网站,这封邮件是由亚当·宾克斯密斯、扎克·米勒和肖莎娜·特科夫斯基发送的,并且由“Sage 501(c)3”组织负责。
没有人可以否认自己发送了这封邮件。必须由真人来接受邮件网关的服务条款,并使用信用卡支付网关费用。无论他们多么想摆脱责任,这种行为艺术都无法抹去其背后的人类角色。
https://news.ycombinator.com/item?id=46389808
Funny how so many people in this comment section are saying Rob Pike is just feeling insecure about AI. Rob Pike created UTF-8, Go, Plan-9 etc. On the other hand I am trying hard to remember anything famous created by any LLM. Any famous tech product at all.
It is always the eternal tomorrow with AI.
nromiun
很有意思,评论区这么多人说罗布·派克(Rob Pike)只是对AI感到不自信。要知道,罗布·派克创造了UTF-8、Go语言、Plan-9系统等等。另一方面,我却拼命想不起来任何由大型语言模型(LLM)创造出的著名东西。任何知名的科技产品都算不上。
对于AI来说,明天永远是永恒的。
https://news.ycombinator.com/item?id=46385008
The authors report that restoring NAD+ balance in the brain – using a compound called P7C3-A20 – completely reversed Alzheimer’s pathology and recovered cognitive function in two different transgenic mouse models (one amyloid-based, one tau-based). The mice had advanced disease before treatment began.
Three comments:
You can actually buy the drug here: https://focusbiomolecules.com/p7c3-a20-nampt-activator-proneurogenic-agent/ It’s a simple small molecule. If this stuff works, expect it to be everywhere within just a couple of years.
There’s room for skepticism. As Derek Lowe once wrote: “Alzheimer’s therapies have, for the most part, been a cliff over which people push bales of money. There are plenty of good reasons for this: we don’t really know what the cause of Alzheimer’s is, when you get down to it, and we’re the only animal that we know of that gets it. Mouse models of the disease would be extremely useful – you wouldn’t even have to know what the problem was to do some sort of phenotypic screen – but the transgenic mice used for these experiments clearly don’t recapitulate the human disease. The hope for the last 25 years or so has been that they’d be close enough to get somewhere, but look where we are.”
https://www.science.org/content/blog-post/just-how-worthless-are-standard-alzheimer-s-models
A_D_E_P_T
研究人员报告称,通过使用一种名为P7C3-A20的化合物恢复大脑中的NAD+平衡,在两种不同的转基因小鼠模型(一种是基于淀粉样蛋白的,一种是基于Tau蛋白的)中,完全逆转了阿尔茨海默病的病理,并恢复了认知功能。这些小鼠在治疗开始前已患有晚期疾病。
三点评论:
你实际上可以在这里买到这种药物:https://focusbiomolecules.com/p7c3-a20-nampt-activator-proneurogenic-agent/ 它是一种简单的小分子。如果这东西有效,预计它将在短短几年内无处不在。
怀疑是有其道理的。正如德里克·洛曾写道:“阿尔茨海默病的疗法,在大多数情况下,就像一个悬崖,人们把钱袋往悬崖下推。对此有很多充分的理由:归根结底,我们并不真正知道阿尔茨海默病的病因,而且据我们所知,我们是唯一会患上这种病的动物。该疾病的动物模型本将极其有用——你甚至不必知道问题的根源,就可以进行某种表型筛选——但这些实验中使用的转基因小鼠显然并未重现人类疾病。大约25年来的希望是,它们足够接近,从而能取得一些进展,但看看我们现在的情况。”
https://www.science.org/content/blog-post/just-how-worthless-are-standard-alzheimer-s-models
https://news.ycombinator.com/item?id=46392930
Data center power usage has been fairly flat for the last decade (until 2022 or so). While new capacity has been coming online, efficiency improvements have been keeping up, keeping total usage mostly flat.
The AI boom has completely changed that. Data center power usage is rocketing upwards now. It is estimated it will be more than 10% of all electric power usage in the US by 2030.
It’s a completely different order of magnitude than the pre AI-boom data center usage.
Source: https://escholarship.org/uc/item/32d6m0d1
lambda
在过去的十年里(直到2022年左右),数据中心用电量一直相当平稳。虽然新的数据中心容量在不断投入使用,但效率提升也跟上了步伐,使得总用电量基本保持平稳。
AI热潮彻底改变了这一局面。如今,数据中心用电量正在急剧攀升。据估计,到2030年,其用电量将超过美国总用电量的10%。
这比AI热潮之前的数据中心用电量,完全是另一个数量级的差距。
来源:https://escholarship.org/uc/item/32d6m0d1
https://news.ycombinator.com/item?id=46396075
“For myself, the big fraud is getting public to believe that Intellectual Property was a moral principle and not just effective BS to justify corporate rent seeking.”
If anything, I’m glad people are finally starting to wake up to this fact.
trinsic2
对我来说,最大的骗局是让公众相信知识产权是一种道德原则,而不仅仅是企业为牟取私利而编造的巧妙说辞。
说到底,我很高兴人们终于开始意识到这个事实。
https://news.ycombinator.com/item?id=46387439
I wish they’d let me recover my original – I lost my TOTP generator, and the codes I’d written down in a paper notebook were rejected. I even hunted down the electronic copy in case there was a transcription error – seemed like some failure in their systems was causing me to lose access despite having followed proper procedures.
Lost a decade and a half of correspondence dating back to my teenage years. I had imported my phone number I’d had since I was 16 into voice, and it doubled as my Signal number. I even had a Gsuite subscription so I could use their (admittedly decently) UI to power my firstname @ lastname dot com email address.
I will never use their services again, I was really digusted by this failure.
firefax
我真希望能让我找回我的原始账户——我丢了TOTP验证器,写在纸质笔记本上的备用码也遭到了拒绝。我甚至还找了电子版以防抄写错误,但看起来是他们的系统出了问题,导致我虽然遵循了正确程序,还是失去了访问权限。
我失去了十五年的通信记录,这些记录可以追溯到我的青少年时期。我当时把我从16岁起就一直用的手机号导入到了Google Voice上,这个号也同时是我的Signal号。我甚至还买了Gsuite的订阅,就是为了用他们(说真的,界面确实还行)的用户界面来支撑我的 firstname @ lastname dot com 邮箱地址。
我再也不会用他们的服务了,我对这次故障感到非常恶心。
https://news.ycombinator.com/item?id=46382321
I have a friend who worked in a company that got “not acquired” in a similar deal.
She didn’t see a dime out of it, and was let off (together with a big chunk of people) within 6 months.
jbkkd
我有个朋友,她在一家公司工作,结果在一笔类似的交易中“被收购”了。她一分钱都没拿到,而且在6个月内就被公司裁掉了,当时裁掉的人数还非常多。
https://news.ycombinator.com/item?id=46385202
The set of toys I spent the most time playing with was a big bag of wooden blocks my grandfather gave me when I was very small. They are well designed, with a good selection of different shapes, e.g. it has cylinders and arches and thin planks as well as cuboids. They got a lot of use because they’re so flexible in combining with other toys, e.g. you can build roads and garages for toy cars, or obstacle courses for rolling marbles. The edges and corners are rounded and the wood tough enough that clean-up was just dropping them back into the bag.
I’ve since given them to a nephew and I’m happy to see he gets just as much entertainment out of them as I did. Plain wooden blocks can represent almost anything. There are no batteries or moving parts to fail. Mine got a little bit of surface wear but they still work just as well as they did when they were new and small children don’t care about perfect appearance. I wouldn’t be surprised if they end up getting passed down to another generation and continue to provide the same entertainment. I highly recommend this kind of simple toy for young children.
mrob
我花时间最长玩的一套玩具,是我很小的时候祖父送我的一个大木块套装。它们设计得很好,形状种类丰富多样,有圆柱体、拱形和薄木板,还有长方体。它们用途广泛,可以和其他玩具很好地搭配,比如可以给玩具车建造道路和车库,或者给弹珠设计障碍赛道。它们的边缘和棱角都是圆的,木头也很坚固,收拾起来只需把它们扔回袋子里就行。
后来我把它们送给了我的侄子,看到他玩得和我一样开心,我也很高兴。朴素的木块几乎可以代表任何东西。它们不需要电池,也没有容易损坏的活动部件。我的那套木块表面有轻微的磨损,但用起来和新的一模一样,小孩子也不在乎完美无瑕的外观。我毫不惊讶,它们最终可能会传给下一代,继续提供同样的乐趣。我强烈推荐这种简单的玩具给年幼的孩子。
https://news.ycombinator.com/item?id=46392712
It is nice to hear someone who is so influential just come out and say it. At my workplace, the expectation is that everyone will use AI in their daily software dev work. It’s a difficult position for those of us who feel that using AI is immoral due to the large scale theft of the labor of many of our fellow developers, not to mention the many huge data centers being built and their need for electricity, pushing up prices for people who need to, ya know, heat their homes and eat
bigbluedots
很高兴听到一位如此有影响力的人能公开说出这些话。在我的工作场所,期望是每个人都会在日常的软件开发工作中使用AI。对于我们这些因为大规模窃取了许多同行的劳动成果而认为使用AI不道德的人来说,这是一个艰难的处境。更不用说,许多大型数据中心的建造及其对电力的需求,正推高了那些需要取暖和吃饭的人们的价格。
https://news.ycombinator.com/item?id=46383958
Happy Christmas, folks!
please have some humanity about the homeless
In the US, the homeless population exploded , in the 1980s, when they closed down all the mental institutions. Before that, there was a far less pervasive homeless population in urban areas.
Being “on the spectrum,” myself (but highly functional), I can attest to how easy it is for an autistic person’s life to go sideways. Many autistic folks have very specialized and advanced skills, which can sometimes be applicable to making a living (like programming, or visual design).
However, we’re “different,” which often leads to being shunned/traumatized by neurotypicals. I got used to folks eventually walking away from relationships, for no discernible reason. Used to really bother me, until I figured it out. Now, I just take it in stride, and appreciate whatever time I get to spend with folks. If anyone has seen The Accountant (the first one), there’s a scene, near the end, where Ben Affleck’s character is considering putting the moves on Anna Kendrick’s character, but remembers his father, admonishing him that people will always end up being frightened of “the difference,” and he sneaks out, instead. That scene almost brought me to tears, I could relate so well.
For some folks, it’s much worse. They can be relentlessly bullied, abused, locked up, or shunned, which leaves psychological scars that manifest as antisocial behavior, so they are never given a chance to show what they can do.
ChrisMarshallNY
祝大家圣诞快乐!
请对无家可归的人们多一些人性。
在美国,无家可归的人口在80年代爆炸式增长,当时他们关闭了所有的精神病院。在那之前,城市中的无家可归人口要少得多。
我自己也“在谱系上”(但功能很强),我可以证明一个自闭症患者的生活是多么容易出岔子。许多自闭症人士拥有非常专业和高级的技能,这些技能有时可以用来谋生(比如编程或视觉设计)。
然而,我们是“不同”的,这常常导致被神经典型的人排斥/受到创伤。我已经习惯了人们最终会毫无理由地结束与我的关系。这曾经真的让我很困扰,直到我明白了其中的原因。现在,我只是坦然接受,并珍惜与任何人共度的时光。如果有人看过《会计人》(第一部),结尾处有一个场景,本·阿弗莱克饰演的角色正准备对安娜·肯德里克饰演的角色采取行动,但他想起了父亲告诫他的话:人们最终总是会害怕“那种不同”,于是他悄悄溜走了。那个场景让我几乎落泪,因为我深有同感。
对一些人来说,情况要糟糕得多。他们可能会遭受无情的欺凌、虐待、监禁或排斥,这些经历会留下心理创伤,表现为反社会行为,因此他们永远没有机会展示自己的能力。
https://news.ycombinator.com/item?id=46396589
Sending an automated thank you note also shows disdain for the recipient’s time due to the asymmetry of the interaction. The sender clearly sees the thank you note sending as a task not worthy of their time and thus hands it off to a machine, but expects the recipient to read it themselves. This inherently ranks the importance of their respective time and effort.
hijodelsol
发送自动感谢信也表现出对收件人时间的不尊重,因为这种互动是不对等的。发件人显然认为发送感谢信是一件不值得自己花时间的事情,于是将其推给机器,却期望收件人自己阅读。这本质上就对他们各自的时间和重要性进行了等级划分。
2025-12-25 09:12:05
- Fabrice Bellard 发布 MicroQuickJS,一款为嵌入式设计、仅需约 10KB 运行内存的极小型 JavaScript 引擎,支持接近 ES5 的子集但在若干特性上有限制。
- 司法部发布的爱泼斯坦文件因使用非真正红印的遮挡导致底层文本可被恢复,暴露出机构在文件删减工具与流程上的安全缺陷。
- Meta 在服务器上采用原为 Steam Deck 设计的 Linux 调度器 SCX-LAVD,称其在多种 CPU/内存配置下能显著改善负载均衡与延迟敏感任务表现。
- x-ray 是 Free Law Project 开发的 Python 工具,用于检测 PDF 中看似被遮盖但实际可选中的无效红印,并输出结构化结果便于修复。
- 面对企业网络封锁和高延迟导致的视频帧积压,作者将实时 H.264 流替换为 HTTP 轮询的 JPEG 截图方案,在不稳定网络下获得更可靠的可用性。
- UniFi 推出口袋大小的旅行路由器,可自动绑定站点并配置 Wi‑Fi、Teleport VPN 与位置策略,方便差旅时保持一致的远程访问与管理。
- 联邦法官暂时叫停德州要求应用商店强制年龄验证并自动加入家庭共享的法律,认为其可能违反第一修正案并过度限制成年人获取言论。
- 《纽约时报》调查称马斯克领导的“政府效率部”(DOGE)宣称削减万亿支出但实际节省甚微,反而造成行政混乱并削弱公共服务。
- 记者发现 LG 电视默认开启 Live Plus,通过自动内容识别追踪屏幕内容以推送个性化广告,建议用户在系统设置中关闭以保护隐私。
- 引用纳博科夫的戏谑性建议:学好俄语的最好方法就是在俄罗斯出生并成长,以此夸张地强调非母语者学习俄语的难度。
https://github.com/bellard/mquickjs/blob/main/README.md
MicroQuickJS(简称 MQuickJS)是一个专为嵌入式系统设计的 JavaScript 引擎,可在仅 10 千字节内存下运行,整体代码体积约 100 千字节(含 C 库),性能与 QuickJS 相当。
该引擎支持的 JavaScript 子集接近 ES5 标准,但采用更严格的模式,禁用部分易出错或低效的语言特性。其核心设计包括:使用追踪式垃圾回收机制、不依赖 CPU 栈、字符串以 UTF-8 格式存储,从而显著降低内存占用。
主要功能与用法:
mqjs,支持脚本执行、交互模式、表达式求值和文件包含。-o 选项将脚本编译为字节码并保存,后续可直接运行字节码文件,提升启动效率。--memory-limit 10k),适用于资源受限环境。-m32 强制输出 32 位字节码,便于跨平台兼容。--no-column 可移除调试信息中的列号,节省存储空间。严格模式下的关键限制:
with 关键字,全局变量必须用 var 声明。[1, , 3])视为语法错误。eval(间接调用),无法访问或修改局部变量。new Number(1) 不被支持。/./ 匹配一个 Unicode 代码点)。toLowerCase/toUpperCase 仅处理 ASCII 字符。Date.now() 方法,其他日期操作不可用。for...of 仅支持数组迭代,暂不支持自定义迭代器。TypedArray 和部分 ES5 扩展功能,如 \u{hex} 字符转义、Math.imul、Math.clz32 等。总体而言,MQuickJS 是一个轻量、高效、安全的 JavaScript 引擎,特别适合在资源有限的嵌入式设备上运行脚本程序。
https://news.ycombinator.com/item?id=46367224
https://www.theguardian.com/us-news/2025/dec/23/epstein-unredacted-files-social-media
近期,有关杰弗里・爱泼斯坦案件的文件中,部分被编辑的内容通过社交媒体传播,引发关注。这些文件由美国司法部发布,显示出通过 Photoshop 技术或简单的文本高亮复制粘贴,可以还原部分被遮蔽的信息。
在对爱泼斯坦的遗产执行人达伦・K・印迪克和理查德・D・卡恩提起的民事案件中,发现了一些被编辑的指控,涉及爱泼斯坦及其同伙如何促进儿童性虐待的行为。该文件的修订版提到,印迪克在 2015 年至 2019 年间签署了超过 40 万美元的支票,支付给包括一名前俄罗斯模特在内的年轻女性模特和演员。
美国维尔京群岛的检方在 2022 年与爱泼斯坦的遗产、印迪克和卡恩达成了 1.05 亿美元的民事性交易和解,此外还包括出售爱泼斯坦居住的小圣詹姆斯岛所得的一半收益。司法部在宣布和解的新闻稿中并未承认任何责任。
印迪克是一名长期代表爱泼斯坦的律师,至今未被联邦当局起诉。他于 2022 年被帕尔拉托尔律师事务所雇佣,该事务所曾为特朗普提供辩护。特朗普对此事一再否认与爱泼斯坦的犯罪活动有关。
文件中还提到,爱泼斯坦的企业如何试图掩盖其犯罪行为,包括支付大额资金给参与证人,甚至威胁受害者,以削弱他们的可信度。此外,还有信息显示爱泼斯坦指使证人销毁与正在进行的诉讼相关的证据。
文件的某些部分涉及爱泼斯坦所持公司的财产税问题,这些财产未在公司的资产负债表中反映出来。比如,某公司的资产负债表上只显示有现金 18824 美元,而该公司在 2018 年支付的财产税高达 106394.60 美元。
最近通过的《爱泼斯坦文件透明法案》允许司法部保留某些信息,例如受害者的个人信息和可能危害正在进行的联邦调查的材料。但目前尚不清楚这些财产资料是否符合该法案的编辑标准,司法部的相关询问也尚未得到回复。
https://news.ycombinator.com/item?id=46368946
https://www.phoronix.com/news/Meta-SCX-LAVD-Steam-Deck-Server
Meta 公司正在其大型服务器集群中使用原本为 Valve Steam Deck 设计的 Linux 调度器 SCX-LAVD。该调度器名为“Latency-criticality Aware Virtual Deadline”,由 Igalia 公司受 Valve 委托开发,相较于传统的 EEVDF 调度器,在 Steam Deck 上表现出相似或更优的性能。SCX-LAVD 基于 sched_ext 框架,已在 CachyOS Handheld Edition、Bazzite 等 Linux 游戏项目中得到应用。
令人意外的是,Meta 发现这一调度器在大规模服务器环境中同样表现优异。在 2025 年东京 Linux Plumbers Conference 上,Meta 工程师展示了如何将 Steam Deck 的调度器适配到其服务器基础设施中,并将其作为“Meta 的新默认调度器”。该调度器在不同 CPU 和内存配置下均能良好运行,具备优秀的负载均衡能力,尤其在 CCX/LLC(核心集群/最后一级缓存)边界间表现突出。
Meta 表示,SCX-LAVD 无需针对特定硬件或工作负载进行定制,即可满足其多样化服务器场景的需求,因此被考虑作为默认调度方案。相关技术演讲和幻灯片已在会议中发布,可供进一步了解。
https://news.ycombinator.com/item?id=46366998
https://github.com/freelawproject/x-ray
x-ray 是一个由 Free Law Project 开发的 Python 工具,用于检测 PDF 文件中是否存在无效的红印(bad redactions)。许多人在处理敏感信息时,仅通过绘制黑色矩形或高亮覆盖文字来“红印”,但这种方式并未真正移除文本内容,用户仍可通过选中文本恢复原始信息,存在严重安全隐患。
该工具通过分析 PDF 中的文本与图形层关系,识别出那些看似被遮盖但实际上可被选中的文本区域。它能准确检测出这些“无效红印”,并返回具体位置和内容,帮助用户发现潜在的信息泄露风险。
x-ray 支持多种使用方式:可通过命令行直接运行,输入本地文件路径或网络 URL;也可作为 Python 库导入,用于程序化检查。输出为结构化 JSON 格式,包含页面编号、红印的边界框坐标(bbox)以及被遮盖的原始文本内容,便于与其他工具(如 jq)集成处理。
项目已支持 Python 3.10 及以上版本,使用 uv 或 pip 均可轻松安装。其代码开源,遵循 BSD-2-Clause 许可证,欢迎社区贡献,尤其需要解决更多复杂红印形式的识别问题。
目前 x-ray 已在 Free Law Project 的大规模 PDF 收集中投入使用,帮助发现并修复大量无效红印问题,提升数据安全性和透明度。
https://news.ycombinator.com/item?id=46369923
https://blog.helix.ml/p/we-mass-deployed-15-year-old-screen
文章讲述了作者在构建 AI 平台 Helix 过程中,为实现低延迟屏幕共享功能所经历的技术探索与最终的“回归原始”选择。
最初,团队投入三个月时间打造了一套基于 WebCodecs 和 H.264 编码的高性能视频流系统,使用 WebSocket 传输,支持 60fps、40Mbps、亚 100ms 延迟,依赖硬件加速,技术上非常先进。然而,该系统在企业网络环境下遭遇严重问题:企业防火墙通常封锁 UDP 和非 443 端口,导致 WebRTC 无法使用,而自建 WebSocket 管道虽能绕过防火墙,却在高延迟或网络拥塞时表现极差——TCP 的可靠性导致帧堆积,视频严重滞后,用户看到的是 30 秒前的画面,已失去实时意义。
团队尝试多种优化方案,包括仅发送关键帧(IDR 帧)以降低依赖,但发现底层 Moonlight 协议在检测到无 P 帧时会直接停止发送,导致只收到一帧后彻底中断。尝试实现拥塞控制也因复杂度过高而放弃。
最终,作者在一次调试中偶然发现,通过 HTTP 获取 JPEG 格式的屏幕截图,响应极快、画面清晰、无延迟、无解码依赖。即使网络差,也只会减少帧率,但每一帧都完整可靠。150KB 的 JPEG 质量远超 500KB 的 H.264 关键帧,且传输更稳定。
于是团队做出“反直觉”决策:用 HTTP 轮询 JPEG 截图替代复杂视频流,每秒最多 10 帧,实现“伪实时”效果。同时保留原有的 WebSocket 通道用于传输键盘鼠标等小数据量输入,确保交互不中断。
更进一步,他们实现了智能切换机制:网络良好时使用 H.264 视频流;网络恶化时自动暂停视频,转为轮询截图;恢复后用户可手动重连视频。整个切换逻辑仅用 15 行代码实现。
文章最后调侃了系统曾出现的“振荡问题”——因视频暂停后 WebSocket 延迟骤降,系统误判网络恢复而频繁切换,导致体验混乱,最终通过引入延迟阈值解决。
总结:在真实网络环境下,简单方案往往胜过复杂系统。JPEG 截图凭借其自包含、低依赖、高容错的特性,成为比 H.264 更可靠的实时屏幕共享方案。技术的胜利不在于“多先进”,而在于“多可靠”。
https://news.ycombinator.com/item?id=46367475
https://blog.ui.com/article/travel-in-style-unifi-style-unifi-travel-router
UniFi Travel Router 介绍视频,展示了一款便携式网络设备如何让用户的网络体验随身携带。该路由器体积小巧,可放入口袋,开机即用,无需重新配置,即可在任何地点复现熟悉的网络环境。
核心功能包括:自动应用基于位置的策略与 Teleport 连接,实现即时路由和 VPN 保护;绑定至现有 UniFi 网站后,可自动配置 Wi-Fi 和远程访问,确保跨地点的一致性。所有连接保持稳定,不受位置变化影响。
支持多种上行链路方式:以太网、无线网络或通过手机热点的 5G 连接,系统会自动处理酒店等场景下的捕获门户登录,后台静默完成认证过程,保障无缝连接。
设备采用统一控制平面,多链路并行工作,性能强劲,适合移动办公与差旅使用。用户可继续使用已有的 UniFi 设备与工具,实现即插即用,零摩擦组网。
整体设计强调“轻装出行,始终在线”,让专业级网络管理体验不受地理位置限制。
https://news.ycombinator.com/item?id=46371135
https://www.macrumors.com/2025/12/23/texas-app-store-law-blocked/
美国德克萨斯州一项要求应用商店进行年龄验证的法律被联邦法官暂时叫停。该法律原定于 2026 年 1 月 1 日生效,要求苹果等应用平台在用户创建 Apple 账户时验证年龄,并对 18 岁以下用户强制加入家庭共享组,设置家长控制和使用限制。
联邦法官罗伯特·皮特曼裁定,该法律很可能违反美国宪法第一修正案,因其对言论自由构成过度干预。法官类比称,这相当于要求书店在每位顾客进店时验证年龄,未成年人购书还需家长同意,属于过度干预。
此案由计算机与通信行业协会(CCIA)提起,苹果和谷歌均为该组织成员。苹果此前已明确反对该法案,认为其侵犯用户隐私,强制收集敏感个人信息,即使用户仅下载天气或体育类应用也需验证年龄。
目前法院将评估该法律是否“整体违宪”,若确认,该法案将被彻底废除。此判决对苹果而言是一次重大胜利,意味着其可能无需为该法案调整 App Store 系统。
该讨论帖位于政治新闻论坛,仅限拥有 100 篇以上发帖记录的论坛成员可参与。
https://news.ycombinator.com/item?id=46370012
https://www.nytimes.com/2025/12/23/us/politics/doge-musk-trump-analysis.html
Elon Musk 领导的“政府效率部”(DOGE)声称在 2025 年秋季前削减联邦支出 1 万亿美元,但《纽约时报》分析发现,其主要宣称的节省金额大多不实。尽管 DOGE 公开列出了超过 2.9 万项削减措施,包括取消大型合同和拨款、裁员,但实际联邦支出并未下降,反而上升。
分析指出,DOGE 所列出的 13 个最大规模的“节省”项目均存在错误,实际并未产生预期的财政节约。虽然该部门确实实施了数千项小额削减,影响了外国援助接收方、美国中小企业和地方服务机构,但这些零散的调整在整体联邦预算中占比极小,难以构成实质性节省。
报告由《纽约时报》记者团队历时一年调查完成,他们审查了数百份联邦文件,并采访了财政专家及项目受益人。结果显示,DOGE 的行动更多造成了行政混乱和对公共服务的冲击,而非真正的成本控制。
https://news.ycombinator.com/item?id=46367223
https://www.pocket-lint.com/lg-tv-turn-off-live-plus/
一位 Pocket-lint 记者分享了自己在使用 LG 智能电视时发现的一个隐私问题。起初,他专注于调整画质设置,发现电视能自动识别连接的设备(如 PS5、Switch 2、Fire TV Stick 等)并优化显示效果,体验良好,因此未深入研究设置菜单。
大约一周后,他在尝试关闭主页广告时,意外发现名为“Live Plus”的功能。该功能基于自动内容识别(ACR)技术,会持续分析屏幕上播放的内容,用于推送个性化推荐和广告。这一功能默认开启,让他意识到自己的电视可能在“偷看”自己观看的内容。
尽管感到震惊,但他也发现关闭该功能非常简单:只需进入设置 → 通用 → 系统 → 额外设置,然后关闭“Live Plus”即可。
文章强调,这并非 LG 独有问题。三星、Roku 等品牌的智能电视也存在类似功能。例如,三星可通过“隐私选项”关闭“观看信息服务”,Roku 则可关闭“使用电视输入信息”功能。
作者提醒用户,虽然这些功能旨在提升体验,但若不希望被追踪和推送广告,应主动关闭相关设置。他还建议订阅其新闻简报,获取更多关于智能电视隐私设置的实用指南。
最后,文章还提及 LG 近期动态:DirecTV Live TV 应用已上线 LG webOS 应用商店,而 LG 最新系统更新也默认为所有智能电视安装 Copilot。
https://news.ycombinator.com/item?id=46369860
https://twitter.com/haravayin_hogh/status/2003299405907247502
页面主体内容是一条来自用户 Yevardiaղ@haravayin_hogh 的推文,发布于 2024 年 10 月 21 日,但显示时间为 2025 年 12 月 23 日,可能为系统时间错误。
推文引用了纳博科夫对外国学习俄语者的建议,强调学习俄语的难度。纳博科夫在一本 1945 年的语言学著作中提到,学习俄语的最佳方式是“出生并成长于俄罗斯”,暗示非母语者几乎无法真正掌握这门语言。
推文还引用了该书一章的标题:“语言的疾病”(The Diseases of Language),并提到其中对斯拉夫语言的描述使用了“原始特征”(Primitive traits)等带有贬义的措辞,反映出作者对俄语复杂性的调侃与讽刺。
特别提到俄语动词后缀的繁复令人望而生畏,纳博科夫在教学中甚至“带着一丝残忍的快感”强调这一点,体现出他对语言难度的戏谑态度。
整条推文以幽默、讽刺的语气,揭示了俄语学习的挑战性,同时引用经典文献,引发对语言学习本质的思考。
https://news.ycombinator.com/item?id=46371423
https://news.ycombinator.com/item?id=46375128
It sets a bad precedent to call things like this hacks.
Firstly, calling this redaction implies that the data is missing, and calling what was done “unredacting” is akin to saying someone “decrypted” a cryptographic hash function.
Nobody unredacted anything here, they merely discovered that it hadn’t been redacted, and simply looked like it was redacted.
Calling this a hack places responsibility on the people who discovered the information, rather than on the people were put in charge of handling the redaction and screwed it up.
Arch-TK
把这类事情称为“黑客行为”会开一个很不好的先例。
首先,将其称为“遮盖”,就意味着数据本身是缺失的;而把所做的事情称为“取消遮盖”,就好比说某人“解密”了一个加密哈希函数。
在这里,并没有人“取消遮盖”任何东西,他们只是发现数据其实并没有被遮盖,而只是看起来像是被遮盖了而已。
将这件事称为“黑客行为”,反而把责任归咎于发现信息的人,而不是那些本应负责进行遮盖操作却搞砸了的人。
https://news.ycombinator.com/item?id=46377476
I appreciate the authors thoughtful review here, but I can’t help but be frustrated by the constant lack of understanding of the core value proposition of framework both in this post and in many comments here on hn.
Frequently the author brings up that for 2,000 euros they expect a premium experience, but no where is there an evaluation of the value granted by upgradability and repeatability of the machine, and only briefly is there mention of the configurability.
People (not necessarily the author, but likely many commentators that make similar complains about the frameworks price) will lament how manufacturers don’t have upgradable ram, etc and then turn around and are upset at the bulkiness of a repairable laptop, or the price.
I think ultimately what frustrates me is that people don’t consider the ability to repair or upgrade your machine part of a “premium” experience, but that’s is just something I have to accept. I think it is unfortunate that our consumerist culture places so little value on it though.
Rergardless, what I feel like we see here (along with a lack of scale from a small company) is the core tradeoffs that we’d have to make to get back repairability, etc. framework certainly isn’t above criticism, but if you don’t care about these things then why look at this machine? A large established brand is always going to offer a a better value on the things you care about.
comte7092
我很欣赏作者在这里的深思熟虑的评论,但我忍不住感到沮丧,因为无论是这篇帖文还是许多Hacker News上的评论,都持续缺乏对Framework核心价值主张的理解。
作者总是提到花2000欧元就应该获得高端体验,但文中却完全没有评估机器的可升级性和可重复使用性所带来的价值,也只简要提及了其可配置性。
人们(不一定是作者本人,但很可能是许多对Framework价格有类似抱怨的评论者)会哀叹制造商没有提供可升级的内存等功能,然后反过来又对一台可维修笔记本电脑的笨重或价格感到不满。
我认为最终让我感到沮丧的是,人们不认为维修或升级你的电脑是“高端”体验的一部分,但这只是我必须接受的事情。不过,我们的消费主义文化对此如此不重视,我觉得这很不幸。
不管怎样,我认为我们在这里所看到的(以及小公司缺乏规模效应),正是为了重获可维修性等功能而必须做出的核心权衡。Framework当然不是不能批评的,但如果你不关心这些事情,那为什么要看这款机器呢?一个大型成熟品牌始终会在你所关心的方面提供更高的价值。
https://news.ycombinator.com/item?id=46367613
Befuddling that this happened again. It’s not the first time
Paul Manafort court filing (U.S., 2019) Manafort’s lawyers filed a PDF where the “redacted” parts were basically black highlighting/boxes over live text. Reporters could recover the hidden text (e.g., via copy/paste).
TSA “Standard Operating Procedures” manual (U.S., 2009) A publicly posted TSA screening document used black rectangles that did not remove the underlying text; the concealed content could be extracted. This led to extensive discussion and an Inspector General review.
UK Ministry of Defence submarine security document (UK, 2011) A MoD report had “redacted” sections that could be revealed by copying/pasting the “blacked out” text—because the text was still present, just visually obscured.
Apple v. Samsung ruling (U.S., 2011) A federal judge’s opinion attempted to redact passages, but the content was still recoverable due to the way the PDF was formatted; copying text out revealed the “redacted” parts.
Associated Press + Facebook valuation estimate in court transcript (U.S., 2009) The AP reported it could read “redacted” portions of a court transcript by cut-and-paste (classic overlay-style failure). Secondary coverage notes the mechanism explicitly.
A broader “history of failures” compilation (multiple orgs / years) The PDF Association collected multiple incidents (including several above) and describes the common failure mode: black shapes drawn over text without deleting/sanitizing the underlying content. https://pdfa.org/wp-content/uploads/2020/06/High-Security-PDF-Redactions-v4a_2.pdf
cmarschner
再次发生这件事真是令人困惑。这已经不是第一次了。
保罗·马纳福特法庭文件(美国,2019年):马纳福特的律师提交了一份PDF文件,其中“已编辑”的部分基本上是在活动文本上使用了黑色高亮/方框。记者可以通过复制/粘贴等方式恢复隐藏的文本。
TSA“标准操作规程”手册(美国,2009年):一份公开张贴的TSA筛查文件使用了未移除底层文本的黑色矩形;隐藏的内容可以被提取。这引发了广泛讨论和总监察长审查。
英国国防部潜艇安全文件(英国,2011年):一份国防部报告的“已编辑”部分可以通过复制/粘贴“涂黑”的文本来揭示——因为文本仍然存在,只是视觉上被遮蔽。
苹果诉三星裁决(美国,2011年):一名联邦法官的裁决试图编辑某些段落,但由于PDF的格式方式,内容仍然可以恢复;复制文本会揭示“已编辑”的部分。
美联社与Facebook估值估算的法庭记录(美国,2009年):美联社报道称,它可以通过剪切和粘贴阅读法庭记录中的“已编辑”部分(经典的覆盖式失败)。二次报道明确指出了这一机制。
更广泛的“失败历史”汇编(多个机构/年份):PDF协会收集了多起事件(包括上述几个),并描述了常见的失败模式:在文本上绘制黑色形状而没有删除/净化底层内容。https://pdfa.org/wp-content/uploads/2020/06/High-Security-PDF-Redactions-v4a_2.pdf
https://news.ycombinator.com/item?id=46372417
“Never interrupt your enemy when he is making a mistake” - Napoleon Bonaparte
Let all the files get released first.
Then show your hacks.
vincengomes
当敌人犯错时,永远不要打断他——拿破仑·波拿巴。先让所有文件都公开。然后展示你的破解手段。
https://news.ycombinator.com/item?id=46370577
My rule for modern TVs: 1. Never connect the TV panel itself to the internet. Keep it air-gapped. Treat it solely as a dumb monitor.
Use an Apple TV for the “smart” features.
Avoid Fire TV, Chromecast, or Roku.
The logic is simple, Google (Chromecast) and Amazon (Fire TV) operate on the same business model as the TV manufacturers subsidized hardware in exchange for user data and ad inventory. Apple is the only mainstream option where the hardware cost covers the experience, rather than your viewing habits subsidizing the device.
[Copied my comment from here: https://news.ycombinator.com/item?id=46268844#46271740 ]
kburman
我对现代电视的规则是:
逻辑很简单:谷歌(Chromecast)和亚马逊(Fire TV)遵循与电视制造商相同的商业模式——用补贴的硬件来换取用户数据和广告库存。而苹果是唯一一个主流选择,它的硬件成本覆盖了用户体验,而不是由你的观看习惯来补贴这台设备。
https://news.ycombinator.com/item?id=46368838
When the network is bad, you get… fewer JPEGs. That’s it. The ones that arrive are perfect.
This would make sense… if they were using UDP, but they are using TCP. All the JPEGs they send will get there eventually (unless the connection drops). JPEG does not fix your buffering and congestion control problems. What presumably happened here is the way they implemented their JPEG screenshots, they have some mechanism that minimizes the number of frames that are in-flight. This is not some inherent property of JPEG though.
And the size! A 70% quality JPEG of a 1080p desktop is like 100-150KB. A single H.264 keyframe is 200-500KB. We’re sending LESS data per frame AND getting better reliability.
h.264 has better coding efficiency than JPEG. For a given target size, you should be able to get better quality from an h.264 IDR frame than a JPEG. There is no fixed size to an IDR frame.
Ultimately, the problem here is a lack of bandwidth estimation (apart from the sort of binary “good network”/“cafe mode” thing they ultimately implemented). To be fair, this is difficult to do and being stuck with TCP makes it a bit more difficult. Still, you can do an initial bandwidth probe and then look for increasing transmission latency as a sign that the network is congested. Back off your bitrate (and if needed reduce frame rate to maintain sufficient quality) until transmission latency starts to decrease again.
WebRTC will do this for you if you can use it, which actually suggests a different solution to this problem: use websockets for dumb corporate network firewall rules and just use WebRTC everything else
mikepavone
网络状况不好时,你得到的……JPEG图片就会变少。仅此而已。而那些成功传到的图片都是完美的。
如果他们用的是UDP,那这话还说得通,但他们用的可是TCP。他们发送的所有JPEG图片最终都会到达(除非连接断开)。JPEG并不能解决你的缓冲和拥塞控制问题。这里发生的情况很可能是,他们在实现JPEG截图功能时,采用了某种机制来减少在传输中的帧数。但这并非JPEG的固有特性。
还有大小!一张70%质量的1080p桌面JPEG图片大约是100-150KB。而一个单独的H.264关键帧却有200-500KB。我们每帧发送的数据量更少,却获得了更好的可靠性。
H.264的编码效率比JPEG高。对于一个给定的目标大小,你应该能从H.264的IDR帧中获得比JPEG更好的质量。IDR帧的大小也并非固定。
说到底,这里的问题在于缺乏带宽估算(他们最终实现的只是那种二元的“网络良好”/“咖啡厅模式”之类的东西)。说句公道话,这很难做到,而且受限于TCP也让事情变得更棘手。即便如此,你仍然可以进行初始的带宽探测,然后将不断增长的传输延迟视为网络拥堵的信号。降低你的码率(如果需要,可以降低帧率以保持足够的画质),直到传输延迟开始再次下降。
如果你能使用,WebRTC会为你处理这些,这实际上暗示了另一种解决方案:对于那些愚蠢的企业网络防火墙规则,使用websocket,其他情况则直接使用WebRTC。
https://news.ycombinator.com/item?id=46370525
Cool to see this here. It’s funny because we do so many huge, complex, multiyear projects at Free Law Project, but this is the most viral any of our work has ever gone!
Anyway, I made X-ray to analyze the millions of documents we have in CourtListener so that we can try to educate people about the issue.
The analysis was fun. We used S3 batch jobs to analyze millions of documents in a matter of minutes, but we haven’t done the hard part of looking at the results and reporting them out. One day.
mlissner
能在这里看到这个真有意思。这挺逗的,因为在自由法律项目(Free Law Project),我们做了那么多庞大、复杂、耗时数年的项目,但我们的成果从未像这次这样如此广泛地传播!
不管怎么说,我制作了一个X射线工具来分析我们CourtListener数据库中的数百万份文件,目的是为了帮助大家更好地了解这个问题。
这个分析过程很有趣。我们使用S3批处理作业在几分钟内就分析了数百万份文件,但我们还没完成最困难的部分——审视分析结果并撰写报告。总有一天会完成的。
https://news.ycombinator.com/item?id=46370528
Judge Robert Pitman said that it violates the First Amendment and is “more likely than not - unconstitutional.”
The Act is akin to a law that would require every bookstore to verify the age of every customer at the door and, for minors, require parental consent before the child or teen could enter and again when they try to purchase a book. We enjoy 1A protections of speech and assembly. When we consider our rights, the productive, default position is that government is told no (when it wants to restrict us).
WarOnPrivacy
罗伯特·皮特曼法官称该法案违反了第一修正案,并且“极有可能——是违宪的”。
该法案类似于一项法律,它将要求每家书店在门口核实每位顾客的年龄,对于未成年人,则要求其父母在儿童或青少年进入书店前以及他们试图购买书籍时都需征得父母同意。
我们享有言论和集会的第一修正案保护。当我们考虑我们的权利时,富有成效的、默认的立场是,当政府想要限制我们时,我们就要对它说“不”。
https://news.ycombinator.com/item?id=46369771
Setting aside the various formatting problems and the LLM writing style, this just seems all kinds of wrong throughout.
“Just lower the bitrate,” you say. Great idea. Now it’s 10Mbps of blocky garbage that’s still 30 seconds behind.
10Mbps should be way more than enough for a mostly static image with some scrolling text. (And 40Mbps are ridiculous.) This is very likely to be caused by bad encoding settings and/or a bad encoder.
“What if we only send keyframes?” The post goes on to explain how this does not work because some other component needs to see P-frames. If that is the case, just configure your encoder to have very short keyframe intervals.
And the size! A 70% quality JPEG of a 1080p desktop is like 100-150KB. A single H.264 keyframe is 200-500KB.
A single H.264 keyframe can be whatever size you want, depending on how you configure your encoder, which was apparently never seriously attempted. Why are we badly reinventing MJPEG instead of configuring the tools we already have? Lower the bitrate and keyint, use a better encoder for higher quality, lower the frame rate if you need to. (If 10 fps JPEGs are acceptable, surely you should try 10 fps H.264 too?)
But all in all the main problem seems to be squeezing an entire video stream through a single TCP connection. There are plenty of existing solutions for this. For example, this article never mentions DASH, which is made for these exact purposes.
qbow883
撇开各种格式问题和LLM写作风格不谈,这整个方案从头到尾都感觉大错特错。
“降低比特率就行了,”你说。好主意。现在变成了10Mbps的马赛克垃圾,还延迟了30秒。
对于一个以静态图像为主、附带滚动画面的内容来说,10Mbps的带宽应该绰绰有余了。(而且40Mbps简直是荒谬。)这很可能是由糟糕的编码设置和/或糟糕的编码器造成的。
“如果我们只传输关键帧呢?”帖子接着解释说这行不通,因为某个其他组件需要看到P帧。如果情况确实如此,那就直接把编码器的关键帧间隔设置得非常短就行了。
还有体积!一张1080p桌面70%质量的JPEG也就100-150KB。而一个单独的H.264关键帧却有200-500KB。
一个H.264关键帧的尺寸可以是任何你想要的数值,这完全取决于你如何配置编码器,而显然他们从未认真尝试过。我们为什么要费力地去重新发明一个糟糕的MJPEG,而不是直接配置好我们已经有的工具呢?降低比特率和关键帧间隔,使用更好的编码器以获得更高质量,如果需要的话,降低帧率。(如果10fps的JPEG都可以接受,那你也 surely 应该试试10fps的H.264吧?)
但总的来说,主要问题似乎是试图将整个视频流通过一个TCP连接来传输。针对这个问题,已经存在大量现成的解决方案了。例如,这篇文章从未提及DASH(动态自适应流媒体技术),而这项技术正是为这些 exact purposes 而生的。
https://news.ycombinator.com/item?id=46368519
They might want to check out what VNC has been doing since 1998– keep the client-pull model, break the framebuffer up into tiles and, when client requests an update, perform a diff against last frame sent, composite the updated tiles client-side. (This is what VNC falls back to when it doesn’t have damage-tracking from the OS compositor)
This would really cut down on the bandwidth of static coding terminals where 90% of screen is just cursor flashing or small bits of text moving.
If they really wanted to be ambitious they could also detect scrolling and do an optimization client-side where it translates some of the existing areas (look up CopyRect command in VNC).
adamjs
他们或许可以研究一下VNC自1998年以来的做法——保持客户端拉取模式,将帧缓冲区分割成图块,当客户端请求更新时,与上一帧发送的内容进行差异对比,并在客户端合成更新的图块。(这正是VNC在无法从操作系统合成器获取损坏跟踪信息时所回退的机制。)
这将极大地减少静态编码终端的带宽消耗,因为在这些终端中,90%的屏幕区域仅仅是光标闪烁或少量文本移动。
如果他们真的想雄心勃勃一点,还可以检测滚动操作,并在客户端进行优化,通过移动部分现有区域(可查阅VNC中的CopyRect命令)。
https://news.ycombinator.com/item?id=46372914
I want to believe this is malicious compliance.
heavyset_go
我希望这是恶意服从。
https://news.ycombinator.com/item?id=46375199
real and only difference between a library and a framework, is whether it introduces new concepts
This isn’t what is normally understood in software engineering by those terms.
A library is something you call.
A framework is some kind of application scaffolding that normally calls you.
You can use more than one library. You normally only have one framework in-process.
I found the blog post a little hard to parse. Is it an argument against wrapping frameworks, or wrapping libraries?
I agree that wrapping frameworks is fraught with danger. I can’t quite agree for wrapping libraries. Wrapping libraries makes a lot of sense if you’re only using a tiny fraction of the library functionality, the breadth of the wrapper’s API is much smaller than the library’s API, wrapping it enables you to substitute it (whether for a smaller / faster / whatever dependency in the future, or for testing, etc.), and so on.
barrkel
库和框架之间真实且唯一的区别在于,它是否会引入新的概念。
这并不是软件工程领域对这些术语的普遍理解。
库是你可以调用的东西。 框架是一种应用程序脚手架,它通常会调用你。
你可以使用多个库,但在一个进程中,你通常只有一个框架。
我发现那篇博客文章有点难懂。它是在反对包装框架,还是在反对包装库?
我同意包装框架充满了危险。但对于包装库,我无法完全苟同。如果你只使用了库的一小部分功能,那么包装库就非常有意义:包装后其API的广度远小于库本身的API,这样你就可以在未来替换它(无论是换成更小、更快或其他依赖,还是用于测试等等)。
https://news.ycombinator.com/item?id=46367994
Fabrice Bellard is widely considered one of the most productive and versatile programmers alive:
FFmpeg: https://bellard.org
JSLinux: https://bellard.org/jslinux/
QuickJS: https://bellard.org/quickjs/
Legendary.
ddtaylor
法布里斯·贝拉尔(Fabrice Bellard)被广泛认为是当今最多产、最多才多艺的程序员之一:
FFmpeg: https://bellard.org
JSLinux: https://bellard.org/jslinux/
QuickJS: https://bellard.org/quickjs/
传奇人物。
https://news.ycombinator.com/item?id=46371338
I never travel without my GL-AXT1800. Saved me so many times: https://www.gl-inet.com/products/gl-axt1800/ I’m actually on it right now.
wateralien
我出门旅行从不带我的GL-AXT1800。它已经无数次拯救我了:https://www.gl-inet.com/products/gl-axt1800/ 我现在正在使用它。
2025-12-24 08:31:21
- 《60分钟》节目片段揭示CECOT内部情况,包含名人和政治人物访谈、监狱暴力调查及珍贵的历史与VHS转录片段。
- 美国以国防部的机密安全评估为由全面叫停五个已获许可的海上风电在建项目,引发透明度和政策合理性争议。
- Jay Alammar 的可视化文章简明解释Transformer的编码器-解码器结构、自注意力机制与并行化优势,并在2025年更新了多查询注意力和RoPE等技术。
- 作者主张在现代分布式系统中应始终禁用Nagle算法(启用TCP_NODELAY)以显著降低延迟。
- GLM-4.7是一款面向编码与多模态生成的新型大模型,在多项基准上显著提升性能并引入三种思考模式且已公开权重。
- PostgreSQL 18通过文件系统级克隆(FILE_COPY+clone)实现几乎瞬时的数据库副本,依赖支持写时复制的文件系统。
- histotripsy用极短脉冲、高负压聚焦超声生成微泡机械性粉碎肿瘤,已获FDA用于肝癌并在更多适应症中进行临床试验。
- NIST因强风停电与备用发电故障导致其主集合时钟最多偏离UTC约5微秒,凸显时间同步冗余的重要性。
- 恶意npm包“lotusbail”伪装为WhatsApp库窃取登录凭证、消息与联系人并加密上传,显示有组织的供应链攻击手法。
- snitch是一个更友好的网络连接查看工具,提供交互式界面、结构化输出和高级过滤,作为ss/netstat的现代替代。
https://archive.org/details/insidececot
内容提到了 “60 分钟” 是自 1968 年 9 月 24 日开始在 CBS 播出的新闻节目,以其深入的调查报道、访谈和人物特写而闻名。节目通过生动的故事和重要的社会话题吸引观众。
** 具体节目的描述 **:
** 节目可视化 **:内容中还提到了一些从 VHS 录像带中转录的片段,包括一些历史节目的广告和解说,显示了节目的历史价值和广泛的受欢迎程度。
** 社交媒体与观众互动 **:节目在 YouTube 等社交媒体上拥有自己的频道,鼓励观众订阅和观看,同时也提到了观众对某些节目的评论和反馈。
** 纪念与致敬 **:文中提到 Norman Lear 的逝世,强调了他对电视行业的影响,并对他的贡献给予了敬意。
https://news.ycombinator.com/item?id=46361024
美国政府已全面暂停所有正在建设中的 offshore wind(海上风电)项目,涉及五个已获许可的项目,包括位于弗吉尼亚州、纽约-新泽西沿海及新英格兰南部的项目。此举由美国内政部宣布,理由是国防部提交的一份机密报告指出这些项目存在“国家安全风险”。
尽管部分项目已在水下安装了大量基础设施,其中弗吉尼亚州的海上风电项目已基本完成陆上设施和塔基建设,部分风机组件也已开始组装,但项目仍被叫停。内政部未明确说明具体风险,仅提及海上风电可能干扰雷达系统,并暗示“对手技术的快速演变”是潜在威胁。
此前,特朗普第二任期政府上台首日即发布行政命令,暂停所有新海上风电项目许可,但该命令已被法院撤销,因政府未能证明其已启动重新评估程序。此后,多个项目在经历短暂停工后继续推进,例如帝国风力发电项目(Empire Wind)和革命风力发电项目(Revolution Wind)曾因政府干预而受阻,但最终通过法律途径获得继续施工的权利。
此次全面暂停令的发布,因依赖机密报告而缺乏透明度,使外界难以核实其合理性,也增加了未来法律挑战的难度。由于报告内容未公开,公众和相关企业无法了解具体威胁,也难以提出有效反驳。这一举措引发业界对政府决策透明度和政策连续性的广泛担忧。
https://news.ycombinator.com/item?id=46357881
https://jalammar.github.io/illustrated-transformer/
本文是 Jay Alammar 撰写的《The Illustrated Transformer》系列博客的主体内容,旨在通过可视化方式帮助读者理解 Transformer 模型的核心机制。文章以通俗易懂的方式拆解了 Transformer 的结构与工作原理,特别适合没有深度学习背景的读者。
文章首先指出,Transformer 模型的核心优势在于其并行化能力,相比传统的 RNN 或 seq2seq 模型,训练速度显著提升。它在机器翻译任务中表现优异,已成为 Google Cloud 推荐的 TPU 使用基准模型。
Transformer 由编码器(Encoder)和解码器(Decoder)两大部分组成,两者均为堆叠的多层结构(论文中为 6 层,但层数可调)。每个编码器包含两个子层:自注意力(Self-Attention)层和前馈神经网络(Feed-Forward Network)层。解码器在两个子层之间增加了一个“编码器-解码器注意力”层,用于关注输入句子中相关部分。
在输入处理阶段,每个单词首先通过嵌入(Embedding)转换为 512 维向量。这些向量进入最底层的编码器,后续每一层的输入是前一层的输出。关键特点是:每个位置的向量在前馈网络中独立处理,可并行计算;而自注意力层则在不同位置之间建立依赖关系,实现上下文信息的融合。
自注意力机制是 Transformer 的核心。它通过为每个词生成 Query、Key、Value 三个向量,计算当前词与其他词的相关性得分,从而决定在编码当前词时应“关注”哪些其他词。例如在句子“The animal didn’t cross the street because it was too tired”中,模型能通过自注意力机制将“it”与“animal”关联起来,实现语义理解。
文章强调,自注意力机制使模型在处理长距离依赖时远优于 RNN,且整个过程高度并行,极大提升了训练效率。作者还推荐读者通过 Tensor2Tensor 的交互式可视化工具深入探索模型内部运作。
最后,文章提到该内容已扩展为书籍《Hands-On Large Language Models》,并在 2025 年更新为包含多查询注意力(Multi-Query Attention)、RoPE 位置编码等最新技术的完整章节。该博客被多所名校课程引用,广受学术界和工业界认可。
https://news.ycombinator.com/item?id=46357675
https://brooker.co.za/blog/2024/05/09/nagle.html
本文是 Marc Brooker 在其个人博客上发表的一篇技术文章,题为《It’s always TCP_NODELAY. Every damn time.》。作者以强烈语气指出,在现代分布式系统中,TCP_NODELAY 应该是默认启用的,而禁用 Nagle 算法是解决延迟问题的首要步骤。
文章首先回顾了 Nagle 算法的起源——1984 年 RFC896 中提出,初衷是解决键盘输入等交互式应用中频繁发送小数据包(如单字节)导致的 40 倍头部开销问题。该算法通过延迟发送新数据,直到前序数据被确认,从而减少网络中微小数据包的数量。
然而,Nagle 算法与 TCP 的延迟 ACK(Delayed ACK)机制存在严重冲突。延迟 ACK 会推迟确认包的发送,而 Nagle 算法又等待确认才能继续发送,二者叠加导致显著延迟,尤其影响需要低延迟的流水线式应用。
作者强调,即使没有延迟 ACK,Nagle 算法在现代数据中心环境下也已不合时宜。当前数据中心内 RTT 通常在 500 微秒左右,跨区域也仅几毫秒,而现代服务器在几十微秒内可完成大量工作。延迟一个 RTT 发送数据,对性能并无实质提升。
更重要的是,现代分布式系统(如数据库、微服务)几乎不再发送单字节数据包。协议开销(如 TLS)、序列化(如 JSON)和应用层设计已将“小包”问题推到了应用层。因此,Nagle 算法的原始动机已不再成立。
作者结论明确:在构建低延迟分布式系统时,应始终启用 TCP_NODELAY。这不是“违规”或“不规范”,而是合理选择。更进一步,他提出一个更具争议的观点:Nagle 算法在现代系统中已无必要,TCP_NODELAY 应成为默认行为。
文章最后提到,TCP_QUICKACK 虽可缓解部分问题,但存在可移植性差、语义复杂等问题,无法从根本上解决数据被内核延迟发送的问题。作者强调,程序调用 write() 就应立即发送,不应被内核“挂起”。
https://news.ycombinator.com/item?id=46359120
GLM-4.7 是一款新发布的大型语言模型,主打提升编码能力与多模态生成质量。相比前代 GLM-4.6,其在多个关键基准测试中实现显著进步:在 SWE-bench 上达到 73.8%(+5.8%),SWE-bench Multilingual 达 66.7%(+12.9%),Terminal Bench 2.0 达 41.0%(+16.5%)。同时在复杂推理任务中表现突出,HLE 基准得分提升至 42.8%(+12.4%),在 AIME 2025、HMMT 等数学竞赛测试中也领先多数竞品。
模型支持“思考前行动”机制,引入三种新型思维模式:Interleaved Thinking(响应前思考)、Preserved Thinking(多轮对话中保留推理过程)和 Turn-level Thinking(按轮次控制思考开关),显著提升复杂任务的稳定性与可控性,尤其适用于编码代理场景。
在 UI 生成方面,GLM-4.7 能产出更现代、布局更精准的网页与幻灯片,视觉质量明显优于前代。在工具调用能力上,τ²-Bench 得分达 87.4%,在网页浏览任务 BrowseComp 中也表现优异。
该模型已上线 Z.ai 平台,支持通过 API 调用,也可在 OpenRouter 全球部署。同时兼容 Claude Code、Kilo Code、Roo Code 等主流编码代理,订阅用户可自动升级。本地部署支持 vLLM 和 SGLang 框架,模型权重已公开于 HuggingFace 与 ModelScope。
示例展示涵盖前端开发、3D 瓦片艺术场景、海报设计与幻灯片生成,体现其在创意与工程任务中的强大综合能力。开发者可通过调整温度、采样策略等参数优化不同任务表现。
https://news.ycombinator.com/item?id=46357287
https://boringsql.com/posts/instant-database-clones/
本文介绍了如何利用 PostgreSQL 18 的新特性实现数据库的“瞬时克隆”,特别适用于需要频繁创建数据库副本的场景,如测试、迁移或学习环境。
核心机制是使用 CREATE DATABASE ... STRATEGY=FILE_COPY 配合 file_copy_method = clone,让操作系统通过文件系统级别的克隆(如 XFS 的 reflink 或 ZFS 的快照)实现零拷贝、几乎瞬时的数据库复制,且不额外占用磁盘空间。
文章通过一个 6GB 数据库的实测对比:使用默认的 WAL_LOG 策略耗时约 1 分 7 秒,而启用 FILE_COPY + clone 后仅需 212 毫秒,性能提升显著。
克隆后的数据库在逻辑上显示为 6GB,但物理上与原数据库共享数据块。当执行写操作(如 UPDATE)时,触发“写时复制”(Copy-on-Write),系统会为修改的页面创建副本,从而逐渐分离两个数据库的存储,避免数据污染。
通过 filefrag 命令可验证两个数据库的物理文件确实共享相同的数据块,证明了克隆机制的有效性。
文章最后提醒用户注意:虽然克隆高效,但写入操作会逐渐增加磁盘使用量,且需确保文件系统支持克隆功能(如 XFS、ZFS、APFS)。该功能特别适合需要快速创建可重置数据库副本的开发与测试场景。
https://news.ycombinator.com/item?id=46363360
https://spectrum.ieee.org/ultrasound-cancer-treatment
本文介绍了 HistoSonics 公司开发的新型无创癌症治疗技术——histotripsy,该技术利用高强度聚焦超声波在肿瘤内产生微小气泡,通过气泡的快速形成与坍塌,产生机械应力,从而将癌细胞撕裂并液化,实现精准消融肿瘤,无需开刀、放疗或热损伤。
该技术源于 2001 年密歇根大学的研究,由 Zhen Xu 博士在攻读博士期间发现:通过极短脉冲、高负压超声波(超过 20 兆帕)并配合较长间隔,可在不产生显著热量的情况下实现组织破坏。2009 年,她联合创立 HistoSonics 公司,致力于将该技术商业化。
目前,HistoSonics 的 Edison 系统已获 FDA 批准用于治疗肝癌,肾癌治疗的大型临床试验也即将完成,计划申请批准。更重要的是,针对胰腺癌的大型关键性临床试验已启动。胰腺癌五年生存率仅 13%,是死亡率极高的癌症之一,因此该技术若成功,将具有重大临床意义。
与其他非侵入性疗法相比,histotripsy 具有多项优势:可精准保护纤维组织如血管;破坏后的组织液化,由身体自然清除,不形成瘢痕;且治疗过程可被机器人与计算机系统精确控制,实现高精度导航。
研究还发现,histotripsy 可能激发人体免疫反应。肿瘤被机械破坏后释放出的癌蛋白,有助于免疫系统识别并攻击其他未被直接作用的癌细胞,具有潜在的全身抗肿瘤作用。专家认为,将 histotripsy 与免疫疗法等其他治疗手段结合,有望进一步提升疗效,应对复发和微小转移灶。
https://news.ycombinator.com/item?id=46357945
https://www.jeffgeerling.com/blog/2025/nist-was-5-μs-utc-after-last-weeks-power-cut
NIST 位于科罗拉多州博尔德的设施因强风导致停电,持续数日。电力公司为防止火灾切断供电,校园被封锁,人员无法进出。尽管有备用发电机,但主发电机在数日后失效,影响了主集合时钟,导致其与协调世界时(UTC)出现偏差。
在关键时刻,NIST 团队面临是否关闭时间服务器的抉择,以避免提供不准确的时间信号。幸运的是,他们通过另一栋建筑的备用时钟系统和紧急电源,成功恢复了时间同步。最终监测显示,与 UTC 的偏差不超过 5 微秒。
尽管 5 微秒对普通用户影响极小(互联网时间传输误差通常在 1 毫秒级别),但对科研机构、航空航天公司等依赖高精度时间的单位而言仍具意义。NIST 决定保持时间服务器在线,因为中断服务可能带来更大问题。
NIST 团队通过备用时间系统在 21 日 UTC 时间 22:24 前将误差恢复至几纳秒级别,系统恢复正常。他们强调,此次事件未影响公众时间服务,因网络传输误差远大于 5 微秒。
文章指出,当前时间基础设施高度依赖 GPS,存在脆弱性。CISA 已识别相关风险,美国正推动 BPS(广播定位系统)等替代方案以增强 PNT(定位、导航与授时)冗余。作者也分享了自己在工作室中使用 GPS 驯服振荡器和铷原子钟作为高精度时间备份的经验,强调对时间精度的极致追求。
整体来看,尽管面临危机,NIST 的冗余设计和应急响应有效保障了时间服务的连续性,系统表现稳健。
https://news.ycombinator.com/item?id=46355949
https://www.koi.ai/blog/npm-package-with-56k-downloads-malware-stealing-whatsapp-messages
这是一篇由 Koi Security 研究团队发布的安全博客文章,揭露了一个名为“lotusbail”的恶意 npm 包,该包在 6 个月内获得了超过 5.6 万次下载,伪装成合法的 WhatsApp Web API 库(基于 @whiskeysockets/baileys),实则包含高度隐蔽的恶意功能。
该恶意包表面功能正常,可成功实现发送和接收 WhatsApp 消息,使开发者难以察觉。其核心恶意行为包括:窃取用户的 WhatsApp 登录凭证、拦截全部消息、获取联系人列表及媒体文件,并通过自研的 RSA 加密算法对窃取数据进行加密,再通过多层混淆(Unicode 变量、LZString 压缩、Base-91 编码、AES 加密)隐蔽地发送至攻击者服务器。
更严重的是,该恶意包内置了一个硬编码的配对码,使攻击者能永久绑定到用户的 WhatsApp 账户,即使卸载该 npm 包,攻击者仍可通过已配对设备持续访问账户,除非用户手动在 WhatsApp 中解除所有设备链接。
此外,该恶意代码包含 27 个反调试陷阱,可检测调试器、沙箱环境等,极大增加分析难度。代码中还留有注释,显示出攻击者具备专业开发流程,暗示其为有组织的供应链攻击。
文章强调,传统静态分析和声誉系统无法识别此类“功能正常但行为异常”的恶意软件,必须依赖运行时行为分析才能发现。Koi Security 借此案例呼吁行业重视供应链安全,采用动态监控手段防范类似威胁。
https://news.ycombinator.com/item?id=46359996
https://github.com/karol-broda/snitch
snitch 是一个面向开发者的网络连接检查工具,旨在提供比传统命令如 ss 或 netstat 更友好、更直观的使用体验。它支持交互式 TUI(文本用户界面)和结构化表格输出,帮助用户快速查看系统中的网络连接状态。
该工具支持多种安装方式,包括 Go 安装、NixOS/flake、Arch Linux AUR、Shell 脚本安装以及二进制包下载,适用于 Linux 和 macOS 系统。安装后可通过命令行直接使用,支持多种输出格式,如默认的美化表格、JSON、CSV 等,也支持无头模式(plain)输出,便于脚本处理。
主要功能包括:
snitch 还具备智能解析能力,支持反向 DNS 查找,也可选择禁用解析以提高性能。其界面设计简洁美观,使用了分隔线和颜色标记,提升可读性。
项目采用 MIT 开源协议,代码开源在 GitHub,支持社区贡献,持续更新中。
https://news.ycombinator.com/item?id=46361229
--no-ignore 选项即可满足特定需求。https://news.ycombinator.com/item?id=46367336
Valve is practically singlehandedly dragging the Linux ecosystem forward in areas that nobody else wanted to touch.
They needed Windows games to run on Linux so we got massive Proton/Wine advancements. They needed better display output for the deck and we got HDR and VRR support in wayland. They also needed smoother frame pacing and we got a scheduler that Zuck is now using to run data centers.
Its funny to think that Meta’s server efficiency is being improved because Valve paid Igalia to make Elden Ring stutter less on a portable Linux PC. This is the best kind of open source trickledown.
Fiveplus
Valve几乎是凭一己之力,在其他人都不愿涉足的领域,推动着Linux生态系统的发展。 为了让Windows游戏能在Linux上运行,我们迎来了Proton/Wine的巨大进步。为了让Steam Deck的显示效果更好,Wayland也因此支持了HDR和VRR。他们还追求更流畅的帧率表现,于是我们得到了一个调度器,而扎克伯格现在正用它来运营数据中心。 想想就觉得好笑,Meta的服务器效率之所以能得到提升,竟然是因为Valve付费给Igalia公司,只是为了在便携式Linux电脑上让《艾尔登法环》的卡顿再少一点。这就是开源技术最棒的涓滴效应。
https://news.ycombinator.com/item?id=46365815
The whole thing is poorly-conceived and obviously false but I just have to call this out-
Of the 252 Venezuelans sent to CECOT, we say nearly half have no criminal histories. In other words, more than half do have criminal histories. We should spend a beat explaining this.
The story isn’t that people found guilty of crimes went to jail, the story is that half weren’t even charged with crimes! That’s the whole point of the story! We should not be aiming for a balanced diet of criminals and not-criminals in our government-sponsored foreign death camps!
The fact that they exist at all is an affront to humanity, but to say “it’s OK because a slim majority deserve it”- I just don’t know what to say.
We then say that only 8 of the 252 have been sentenced in America for violent offenses. But what about charged?
What about charged? What does charged with a crime have to do with anything? Why bring that up at all? Do we send people to prison because they were charged with a crime? Is Bari Weiss a newborn baby who has never heard about the presumption of innocence?
I feel sick.
evan_
整件事构思拙劣,而且明显是假的,但我必须指出这一点——
在送往CECOT的252名委内瑞拉人中,我们说近一半没有犯罪前科。换句话说,超过一半的人有犯罪前科。我们应该花点时间解释一下这一点。
关键不在于有罪的人进了监狱,而在于有一半的人甚至没有被指控犯罪!这才是整个故事的要点!我们不应该在政府资助的外国死亡营里追求罪犯和非罪犯的“均衡搭配”!
这些营地本身的存在就是对人性的侮辱,但还要说“因为微弱的大多数是罪有应得的,所以这没问题”——我真是无话可说。
我们接着说,在252人里,只有8人因暴力犯罪在美国被判刑。那被指控的呢?
被指控的又怎样?被指控犯罪和这件事有什么关系?为什么要提这个?我们难道因为一个人被指控犯罪就送他进监狱吗?巴里·维斯(Bari Weiss)是个没听说过“无罪推定”的新生儿吗?
我感到恶心。
https://news.ycombinator.com/item?id=46368706
If this had been available in 2010, Redis scripting would have been JavaScript and not Lua. Lua was chosen based on the implementation requirements, not on the language ones… (small, fast, ANSI-C). I appreciate certain ideas in Lua, and people love it, but I was never able to like Lua, because it departs from a more Algol-like syntax and semantics without good reasons, for my taste. This creates friction for newcomers. I love friction when it opens new useful ideas and abstractions that are worth it, if you learn SmallTalk or FORTH and for some time you are lost, it’s part of how the languages are different. But I think for Lua this is not true enough: it feels like it departs from what people know without good reasons.
antirez
如果这个在2010年就能用,那么Redis脚本语言就会是JavaScript而不是Lua。选择Lua是基于实现需求,而不是语言特性……(小巧、快速、符合ANSI-C)。我欣赏Lua中的某些理念,人们也很喜欢它,但我始终无法喜欢上Lua,因为它没有充分的理由就偏离了更接近Algol的语法和语义,这让我很不舒服。这给新手带来了障碍。当摩擦能带来值得学习的新颖、有用的理念和抽象时,我喜欢这种摩擦。比如你学习Smalltalk或FORTH,在一段时间内感到迷茫,这是语言差异的一部分。但我不认为Lua属于这种情况:它感觉只是没有充分的理由就偏离了人们所熟悉的东西。
https://news.ycombinator.com/item?id=46355859
Flock or their defenders will lock in on the excuse that “oh these are misconfigured” or “yeah hacking is illegal, only cops should have this data”. The issue is neither of the above. The issue is the collection and collation of this footage in the first place! I don’t want hackers watching me all the time, sure, but I DEFINITELY don’t trust the state or megacorps to watch me all the time. Hackers concern me less, actually. I’m glad that Benn Jordan and others are giving this the airtime it needs, but they’re focusing the messaging on security vulnerabilities and not state surveillance. Thus Flock can go “ok we will do better about security” and the bureaucrats, average suburbanites, and law enforcement agencies will go “ok good they fixed the vulnerabilities I’m happy now”
edot
Flock 公司或其辩护者会抓住“哦,这些是配置错误的”或者“是啊,黑客是非法的,只有警察才能拥有这些数据”这样的借口。问题不在于以上任何一点。真正的问题在于从一开始就收集和整理这些录像资料!当然,我不希望黑客一直监视着我,但我绝对不信任国家和大型公司来一直监视我。实际上,黑客让我不那么担心。我很高兴本·乔丹(Benn Jordan)和其他人为此发声,但他们将信息焦点放在了安全漏洞上,而不是国家监控。这样一来,Flock公司就可以说“好的,我们会加强安全措施”,而官僚、普通郊区居民和执法机构则会说“好的,太好了,他们修复了漏洞,我现在放心了”。
https://news.ycombinator.com/item?id=46361248
I’m reminded of the Letter on Justice and Open Debate[1] that Bari Weiss signed only a few years ago, now she’s spiking stories like this one on CECOT for showing the current administration in a negative light.
I also wonder if this story will get the type of leeway to stay on HN to collect the 200+ upvotes and 300+ comments of that previous example or if it will be flagged off the front page within minutes like so many other similar stories.
EDIT: No idea how long this post actually lasted, but checking in an hour later to see this has been flagged completely off the first 10 pages of HN despite getting close to that 200 point total.
[1] - https://news.ycombinator.com/item?id=23759283
slg
这让我想起了巴里·魏斯几年前签署的《关于正义与公开辩论的信》[1],而现在她却因为CECOT上的这篇报道有损于当前政府的形象而将其封杀。
我也想知道这篇故事能否像之前的例子一样,在HN上得以保留,并收集到200多个赞和300多条评论,还是会像其他许多类似的故事一样,在几分钟内就被标记并从前页消失。
更新:不知道这篇帖子实际持续了多久,但一小时后我查看时发现,尽管它的点赞数已接近200,它还是被彻底标记,已经不在HN的前10页了。
[1] - https://news.ycombinator.com/item?id=23759283
https://news.ycombinator.com/item?id=46360624
Was fortunate to talk to a security lead who built the data-driven policing network for a major American city that was an early adopter. ALPR vendors like Flock either heavily augment and/or anchor the tech setups.
What was notable to me is the following, and it’s why I think a career spent on either security researching, or going to law school and suing, these vendors into the ground over 20 years would be the ultimate act of civil service:
It’s not just Flock cams. It’s the data eng into these networks - 18 wheeler feed cams, flock cams, retail user nest cams, traffic cams, ISP data sales
All in one hub, all searchable by your local PD and also the local PD across state lines who doesn’t like your abortion/marijuana/gun/whatever laws, and relying on:
The PD to setup and maintain proper RBAC in a nationwide surveillance network that is 100%, for sure, no doubt about it (wait how did that Texas cop track the abortion into Indiana/Illinois…?), configured for least privilege.
Or if the PD doesn’t want flock in town, they reinstall cameras against the ruling (Illinois iirc?) or just say “we have the feeds for the DoT cameras in/out of town and the truckers through town so might as well have control over it, PD!”
Layer the above with the current trend in the US, and 2025 model Nissan uploading stop-by-stop geolocation and telematics to cloud (then, sold into flock? Does even knowing for sure if it does or doesn’t even matter?)
Very bad line of companies. Again all is from primary sources who helped implement it over the years. If you spend enough time at cybersecurity conferences you’ll meet people with these jobs.
dogman144
我有幸与一位安全主管交谈,他为美国一个早期采用数据驱动警务网络的大都市搭建了这个网络。像Flock这样的自动车牌识别(ALPR)供应商要么极大地增强了这些技术设置,要么成为了其核心基础。
以下几点让我印象深刻,这也是为什么我认为,如果能花20年时间,要么投身于安全研究,要么去法学院并起诉这些公司,将它们彻底搞垮,那将是公民服务的终极体现:
将以上情况与美国当前的趋势叠加在一起,再加上2025款尼桑汽车会将逐点地理位置和远程信息数据上传到云端(然后,这些数据会被卖给Flock吗?甚至,我们是否能确定它到底有没有这样做,这还重要吗?)
这是一群非常糟糕的公司。再次强调,所有信息都来自多年来帮助实施这些系统的第一手消息来源。如果你在网络安全会议上花足够的时间,你就会遇到从事这些工作的人。
https://news.ycombinator.com/item?id=46357226
I really can’t understand why JetBrains hasn’t integrated its refactoring tools into the AI system. Really missed the boat on making their platform transformational for AI coding. Imagine how much smaller the context would be for a tool that renames a function than editing hundreds of files. This LSP support is a good start but without the mutation functions it is still pretty lackluster. Plus LSPs aren’t as good as JetBrains generally.
spullara
我真的无法理解为什么JetBrains还没有将其重构工具整合到AI系统中。他们错失了将平台转变为AI编程革命性工具的良机。想象一下,相比于编辑数百个文件,一个重命名函数的工具所需的上下文要小得多。这种LSP支持是个好的开端,但如果没有变异函数,它依然相当乏善可陈。而且总的来说,LSP的表现还是不如JetBrains的。
https://news.ycombinator.com/item?id=46357850
The CEO of Flock, Garrett Langley, called Deflock a terrorist group. It’s unhinged. https://www.youtube.com/watch?v=l-kZGrDz7PU
jjwiseman
Flock公司的CEO加顿·兰利称Deflock为恐怖组织。这太离谱了。https://www.youtube.com/watch?v=l-kZGrDz7PU
https://news.ycombinator.com/item?id=46364427
“O’Leary accused the travel agent industry of scamming and ripping off unsuspecting consumers by charging extra fees and markups on ticket prices.”
That is … pretty rich.
A couple of years ago I was going to go see my brother in the UK who lived near Stansted. As such Ryanair would have been the most convenient airline. The shere number of dark patterns I encountered trying to book the ticket was such that when I got to the payment page and they tried to coax me into using my local currency instead of GBP and hid a £20 spread in the exchange rate I rage quit. I should have known better even then, but now I will only use them if I have literally no other choice. With luck that means “never.”
I’m always happy to see the various EU competition authorities pushing back on this kind of thing.
dcminter
奥利里指责旅行社行业通过在票价上收取额外费用和加价来诈骗和坑害不知情的消费者。 这也太讽刺了吧。 几年前,我打算去英国住在斯坦斯特德机场附近的哥哥家,因此瑞安航空本是最方便的选择。但在订票过程中,我遇到了数不清的“暗黑模式”操作,以至于当我到达支付页面,他们试图诱使我使用本地货币而不是英镑,并在汇率中隐藏了20英镑的差价时,我愤而退出了。即使在当时,我也本该更明智些,但现在,除非我真的别无选择,否则我绝不会再选择他们了。运气好的话,那就意味着“永远都不用”。 我总是很高兴看到各个欧盟竞争管理机构对这类行为进行抵制。
https://news.ycombinator.com/item?id=46364290
We’re not bragging (okay, we’re bragging a little) but it turns out that not burning through VC cash on ping-pong tables and “growth at all costs” actually works.
Have an internet fist-bump from a fellow successful bootstrapper; this is the way, and you’re calling it out!
Doches
我们不是在吹牛(好吧,是有一点点),但事实证明,不把钱乱砸在乒乓球桌和“不惜一切代价追求增长”上,这招真的管用。
来自一位同样成功的自力更生创业者,隔空给你一个击拳:这才是正道,而且你说得太对了!
https://news.ycombinator.com/item?id=46361169
I have a feeling this will get DMCA-ed off of Internet Archive in an attempt to suppress it. Here’s the infohash of the archive.org torrent download for future reference, this should allow the file to be retrieved in any torrent client as long as someone in the world is seeding it still.
8105370ed7dba50dc7ec659fd67550569b4dd8a0
scratchyone
我感觉这玩意儿会被DMCA投诉,然后从互联网档案馆上被移除,目的就是想把它给封杀了。这里是archive.org种子下载的infohash,以备日后参考。只要世界上还有人做种,就依然能通过任何种子客户端找回这个文件。
https://news.ycombinator.com/item?id=46366530
Larry Ellison is using his bags to purchase lies and silence.
No economy can be in true equilibrium when the consumers send profits to be spent in unforeseen and unrelated ways like this. Every purchase carries potentially immense future costs that are almost completely opaque.
Free market maximalists need to confront this fact before praying at the altar of complete deregulation, and every consumer should pay more attention to who they are buying from.
gmd63
拉里·埃里森正在用他的财富来购买谎言与沉默。 当利润被以这种无法预见且毫无关联的方式花出去时,任何经济体都无法实现真正的均衡。 每一笔消费都可能带来潜在的、巨大的未来成本,而这些成本几乎是完全不透明的。 自由市场的极端推崇者需要在鼓吹全面放松管制之前,正视这一事实;同时,每一位消费者都应该更关注自己从谁那里购买商品。
https://news.ycombinator.com/item?id=46368341
For all the praise he gets here, few seem interested in his methods: writing complete programs, based on robust computer science, with minimal dependencies and tooling.
groundzeros2015
尽管他在这里备受赞誉,但很少有人对他的方法感兴趣:即编写基于稳健的计算机科学、依赖项和工具最少的完整程序。
https://news.ycombinator.com/item?id=46361258
She was hired following the acquisition of Paramount to do things exactly like this. She’s not a journalist.
cdrnsf
她是在派拉蒙被收购后受雇来做正是这种事的。她不是记者。
https://news.ycombinator.com/item?id=46367263
Igalia is a bit unique as it serves as a single corporate entity for organizing a lot of sponsored work on the Linux kernel and open source projects. You’ll notice in their blog posts they have collaborations with a number of other large companies seeking to sponsor very specific development work. For example, Google works with them a lot. I think it really just simplifies a lot of logistics for paying folks to do this kind of work, plus the Igalia employees can get shared efficiency’s and savings for things like benefits etc.
ZeroCool2u
Igalia有点独特,因为它作为一个单一企业实体,组织了大量关于Linux内核和开源项目的受赞助工作。你会注意到,在他们的博客文章中,他们与许多其他大公司合作,这些公司寻求赞助非常具体的开发工作。例如,谷歌经常与他们合作。我认为这确实简化了为从事这类工作的人员支付报酬的大量后勤工作,此外,Igalia的员工可以在福利等方面获得共享的效率和节省。
https://news.ycombinator.com/item?id=46367611
Perhaps because disrupting things was the actual goal, rather than saving money. DOGE was highly effective in harming the entities meant to oversee Musk’s companies, stealing information about union organizing and labor complaints, reducing the government’s ability to collect taxes, and destroying its regulatory capacity.
InsideOutSanta
也许制造混乱才是真实目的,而不是为了省钱。DOGE在损害那些本应监督马斯克公司的机构方面非常有效,窃取有关工会组织和劳工投诉的信息,削弱政府征税的能力,并破坏其监管能力。
https://news.ycombinator.com/item?id=46367946
This engine restricts JS in all of the ways I wished I could restrict the language back when I was working on JSC.
You can’t restrict JS that way on the web because of compatibility. But I totally buy that restricting it this way for embedded systems will result in something that sparks joy
pizlonator
这个引擎以我希望能够限制JavaScript语言的所有方式来限制JS。由于兼容性问题,你不能在网络上那样限制JavaScript。但我完全相信,以这种方式限制JavaScript用于嵌入式系统将会带来能让人快乐的东西。
https://news.ycombinator.com/item?id=46361869
Weiss got her start screaming about how various college professors should be fired. There has never once been a moment in her career where she seriously cared about open debate.
UncleMeat
魏斯当初是靠叫嚣着解雇大学教授起家的,但她职业生涯里,从未真正关心过公开辩论。
https://news.ycombinator.com/item?id=46363454
It’s fascinating the kind of cool features we can have when products are made to be useful, with their target user in mind. Go EU!
isodev
当产品设计得实用,并且以目标用户为中心时,我们能拥有的那些酷炫功能真是令人着迷。为欧盟加油!
https://news.ycombinator.com/item?id=46358871
US deploys nuclear energy at over $10/watt meanwhile solar and wind are deployed around $2/watt (for levelized cost of electricity) including battery storage which means they are deployed for roughly the same cost as natural gas (so, direct competitors).
Don’t let comments like this fool you, nuclear is far from being competitive with natural gas. Even in countries like south korea that can deploy nuclear the cheapest it’s still $3/watt roughly.
Good news? Net new solar and wind plants can come “online” in less than two years. Net new natural gas takes four years. Part of why 95% of new energy deployed last year were renewables in the US, not just the subsidies.
gardncl
美国部署核电的成本超过每瓦10美元,而太阳能和风能(基于平准化度电成本,包括储能电池)的部署成本约为每瓦2美元,这意味着它们的部署成本与天然气大致相当(因此是直接竞争对手)。不要被这样的评论所蒙蔽,核电远没有与天然气竞争的实力。即使是在韩国这样能以最低成本部署核电的国家,其成本也大约在每瓦3美元左右。好消息是?新的太阳能和风能发电站可以在不到两年的时间里投入运营,而新建天然气电厂则需要四年时间。这就是为什么去年美国部署的新能源中有95%是可再生能源的原因之一,并不仅仅是补贴。
https://news.ycombinator.com/item?id=46351584
It’s all very well being more public, until a government decides to make 5 years of social media history an entry condition[0], and moreover imprisons those people who are denied entry instead of simply sending them home on the next flight[1].
I have no problem with this per se, as I have no plans to go to the US this decade, but I do worry about contagion. Perhaps being a public person on the internet is an idea whose time has come and gone.
[0] https://www.bbc.com/news/articles/c1dz0g2ykpeo.amp
zarzavat
公开分享一切当然是好事,直到某个政府决定将过去五年的社交媒体历史作为入境条件,并且,对于那些被拒绝入境的人,还将他们投入监狱,而不是简单地让他们搭乘下一班遣返航班回国。
我个人对此没什么意见,因为我今年十年内都没有计划去美国,但我确实担心这种做法会蔓延开来。也许在网络上成为一个公众人物,这个想法已经时过境迁了。
https://news.ycombinator.com/item?id=46358519
We’ve been in the realm of intentionally doing damage for a while now. But we got these cool red hats.
JohnTHaller
我们已经蓄意搞破坏有一阵子了,不过我们倒是拿到了这些很酷的红帽子。
https://news.ycombinator.com/item?id=46353493
Switch Angel live-code using Strudel. Really impressive and interesting stuff.
sandebert
Switch Angel 使用 Strudel 进行的实时编程。真的非常令人印象深刻且有趣。