Hacker News Reader

un_esson Switching Pip to Uv in a Dockerized Flask / Django App

a)"Thanks to backwards compatibility, a package offered only as a source distribution and with the legacy setup.py file for configuration and metadata specification will run the code in setup.py as part of the installation." https://blog.phylum.io/python-package-installation-attacks/

b) pip now has an option _not_ to run arbitrary code by disallowing source distributions, by passing --only-binary :all:

"By default, pip does not perform any checks to protect against remote tampering and involves running arbitrary code from distributions. It is, however, possible to use pip in a manner that changes these behaviours, to provide a more secure installation mechanism." https://pip.pypa.io/en/stable/topics/secure-installs/

un_esson Ask HN: Who is hiring? (June 2025)

UN - Graph database data engineer | Full-time | Valencia(ES) or Remote(EU timezone) or Bangkok(TH)

Looking for a data engineer to help us scale our Graph db. We use JanusGraph. You are expected to have prod experience with a graph DB, working knowledge of Gremlin (or at least Cypher). Python would be good.

Please apply through https://www.linkedin.com/jobs/view/4233355677

un_esson Building a personal, private AI computer on a budget

Per the screenshot, this is a DeepSeek running on a 192GB M2 Studio https://nitter.poast.org/ggerganov/status/188461277009384272...

The same on Nvidia (various models) https://github.com/ggerganov/llama.cpp/issues/11474

[1] this is a the model: https://huggingface.co/unsloth/DeepSeek-R1-GGUF/tree/main/De...

un_esson Mourning Google

The book "The Idea Factory: Bell Labs and the Great Age of American Innovation" - https://en.wikipedia.org/wiki/The_Idea_Factory describes how the Labs was working. The last chapter tries to figure out why it was working and one of the conclusion is that the Labs was always guided by the long term idea that it might help the telephone company (and that the breakup removed a) the long-term funding b) some kind of direction )

un_esson We Are Not Supporting OpenTF

>Compare it to VirtualBox, which is clearly not F/OSS,

https://www.virtualbox.org/wiki/Downloads says

"The binaries are released under the terms of the GPL version 3" and the sources are here - https://www.virtualbox.org/browser/vbox/trunk

(up to V6.1, it was licensed under GPL v2 - https://www.virtualbox.org/wiki/GPL )

And VirtualBox is available in Debian: https://wiki.debian.org/VirtualBox notes that "A proprietary extra package enhances the base experience, adding things like RDP access to the Guest. "

un_esson Explore the Dragon Realm: Build a C++ adventure game with a little help from AI

https://stock.adobe.com/es/search?k=orientation&asset_id=443... is the source

un_esson Publishing free software video games

Same logic as with Machine Learning model: the code can be GPL, the weights can be with any other license. (cf LLaMa)

un_esson OpenOrca: open source dataset and instruct-tuned LLMs

would https://course.fast.ai/ be of assistance ?

un_esson FANN: Vector Search in 200 Lines of Rust

isn't it in https://github.com/fennel-ai/fann/blob/main/src/search.rs#L1... ?

un_esson Bill Gates: I'm literally losing sleep over Java (1996)

jscript was JavaScript engine: https://en.wikipedia.org/wiki/JScript

J++ was a 'clone' of Java https://en.wikipedia.org/wiki/Visual_J%2B%2B . Sun sued Microsoft, https://www.cnet.com/tech/tech-industry/sun-microsoft-settle...

and that's how .Net was born ( with https://en.wikipedia.org/wiki/Visual_J_Sharp to ensure transition)

un_esson Sony’s New Metaverse Bet: $360 Wearable That Captures Your Moves

a few videos: https://www.youtube.com/watch?v=g0d-x0l2HtA

https://www.youtube.com/watch?v=ovHHpralCD8

un_esson My goal of closing 10% of Emacs bugs (2020)

Last update is https://lars.ingebrigtsen.no/2022/08/19/19x10/

un_esson Lambda the Ultimate is now running in a new, more stable environment

> What's that red-orange XML button for btw

it's the very old logo for RSS feed

https://libraryguides.missouri.edu/c.php?g=28298&p=174225 has a few generations of RSS logos

un_esson Amazon: Not OK – Why we had to change Elastic licensing

https://opensource.org/trademark-guidelines lists OSI's policy for trademark usage.

3. Usage that Require Prior Written Approval 3.1. Distributing software under a license approved by OSI ("OSI Approved License")

un_esson How Developers Stop Learning: Rise of the Expert Beginner (2012)

https://web.archive.org/web/20130222182812/https://daedtech.... can help

Posted on September 30, 2012 by Erik Dietrich

un_esson Ask HN: Who is hiring? (April 2020)

United Nations | Software Engineers | Full-time | Onsite | Brindisi (Italy), Valencia (Spain), Bangkok (Thailand), Entebbe (Uganda) or NY (US)

Do you want to work with people who help other people? Do you want to participate in projects to prevent conflicts between nations? Do you want to help countries achieve the Sustainable Development Goals, for a better future of younger generations? Do you want to help us make a better world with your talents?

Join the United Nations Office of Information and Communications Technology (OICT) to develop software solutions using mobile, blockchain, VR/AR, machine learning, data science and other technologies. We use JavaScript, TypeScript, Java, Swift,C#, Python, Linux, Windows, Azure, AWS

To apply https://careers.un.org/lbw/jobdetail.aspx?id=134190&Lang=en-...