Hacker Newsnew | past | comments | ask | show | jobs | submit | SamuelAdams's commentslogin

I wonder if this will cause a reduction in remote jobs for citizens. Compliance with US laws like HIPAA and FERPA have strict requirements regarding access. Many employees use 2FA on their personal devices, which if passed this law would interfere with.


How would this interfere with 2FA?


Depends on what permission this app have.

- Is this a (voice) call blocker?

- Can it intercept SMS?

- Can it enumerate installed app and read data from other apps?


Or, maybe it'll finally convince people that SMS is the worst of all worlds when it comes to security (and phone numbers for identity). Doubt it tho


For me I have a recurring calendar appointment reminder for when I get paid. So anything that requests calendar access would know that.


This is an excellent point. For example, here [1] is a list of all films released in 2025. However I bet most people 10 years from now will only remember the top 10-20 [2].

[1]: https://en.wikipedia.org/wiki/List_of_American_films_of_2025

[2]: https://en.wikipedia.org/wiki/List_of_2025_box_office_number...


The point wasn't merely about remembering something, the raised survivorship bias is moment in time when something becomes a cult classic[0]. Box office numbers don't matter much there, as these cult classics all bombed at the office:

- Blade Runner (1982)

- Brazil (1985)

- Donnie Darko (2001)

- Fight Club (1999)

- The Shawshank Redemption (1994)

- The Thing (1982)

The question should be wether we can still create the same kind of cults like we did in the 90s.

[0]: https://en.wikipedia.org/wiki/List_of_cult_films


I think Hollywood is well past its prime and the best films are either independent or from elsewhere.

As to a modern cult film, I think "Everything Everywhere All At Once" should make the list.


I love working with dotnet, but lately I’ve been writing more backend applications in Python. The code is simpler, testing is simpler since method privacy doesn’t really exist, and code is quicker to deploy because you do not have to compile it.

This could also change but in my experience AI is better at generating Python code versus dotnet.


Problem is though Python is slow at runtime. May not matter for many use cases, but I've worked with a lot of startups that suffered terrible reliability problems because they chose Python (or Rails, or Node to some extent) and the service cannot handle peak time load without a lot of refactoring and additional app servers.

Depending on your framework Python is at best ~3x slower (FastAPI) and at worst ~20x (Django) than asp.net on the techempower benchmarks, which maps pretty well to my real world experience.


Can confirm. Just finished load testing a FastApi service. Now the biggest selling point is that a lot of real backend never experience the level of load where this actually matters


I work for a very large company that has a mostly SSR monolith written in PHP.

Modern PHP is a joy, and it's much faster these days, but performance is still a problem. It was chosen over 25 years ago, and I'm sure they thought the same thing about never getting the amount of load they eventually got.

Modern PHP is virtually indistinguishable from dotnet, with some php-isms sprinkled on top. They should've chosen dotnet all those years ago.


I don't spend a lot of time building services, but the last few I've done, I actually went straight to Rust. The downside is that it's quite slow to develop -- I probably don't have the knowledge that others do, but it seems that frameworks could really use some work. That said, I love that I can find and fix most my problems during development. Building a service in Python means I'm constantly fixing issues in production.

.NET is certainly better than Python, but I'm not very happy with the type system and the code organization versus my Rust projects.


> .NET is certainly better than Python, but I'm not very happy with the type system and the code organization versus my Rust projects.

Have you given F# a whirl?


You know, I tried F# like eight-ish years ago, and I loved it, but I couldn't break into doing it with enough regularity and depth that it made sense for me. I still do a decent amount of C# at work, and with my experience in Rust (algebraic data types, etc.), I imagine that F# would really help out a lot in our .NET code.


Take a look at FastEndpoints library for API development... definitely improves the experience a lot IMO...

That said, Rust+Axum is pretty nice as well.


Not saying that it’s necessarily the right choice, but it opens up contributions to code to a broader user base and making those rapid iterations that tools like fastapi allow can be pretty important when proving out a concept early on.

Horses for courses… also, a Horizontal Pod Autoscaler and Load Balancer setup is pretty cheap.


Most web apps are waiting on the DB anyway. Rarely have I seen the speed of the actual framework make any meaningful difference.


If you don't want your methods to be private make them public?


Just make them internal and use [InternalsVisibleTo] on the assembly.


I'm moving from Python to Java because of how much easier it is to actually use all CPU cores in Java and strict typing prevents so many bugs and it is much faster. I don't think it is actually that much more complicated than Python in 2025.


Agreed. It's sort of crazy how little people understand about multicore software design given nearly everyone is using machines with >8 CPU cores these days (even a cheap android phone tends to have 8 cpu cores these days).

In python and node it is _so_ painful to use multiple cores, whereas in .net you have parallel for loops and Task.WhenAll for over a decade. Java is similar in this sense that you don't have to do anything to use multiple cores and can just run multiple tasks without having to worry about passing state etc between 'workers'.

This actually becomes a really big problem for web performance, something I'm deeply passionate about. Not everything is just IO driven holdups, sometimes you do need to use a fair bit of CPU to solve a problem, and when you can't do it in parallel easily it ends up causing a lot of UX issues.


Even Guido van Rossum admits that if he had known how common high core count CPUs would become he wouldn't have chosen to use the GIL


On most cloud deployments, you get one shared “virtual” core — whatever that means.


No you get how ever many you choose and are willing to pay for. 1vCPU is not good for very much.


That’s one reason I’ve preferred .Net. Put ahead of time compilation on top and it is glorious.


out of curiosity, why not kotlin? I had the impression it was the jvm language to reach for by default these days.


I am doing backend in Kotlin, but I must admit that Java has been catching up quickly, and it seems like Kotlin has been shifting its focus to Kotlin Multiplatform. Modern Java is a good, pleasant language and a safer bet.

Gradle with Kotlin DSL is nice, what's annoying is Gradle's constant API reshuffling for the sake of it that breaks plugins. Some plugins also introduce pointless breaking changes just to have a fancier DSL.

The IDE support is not an issue in practice, in my opinion, because IDEA is the best IDE for both Java and Kotlin. The official Kotlin LSP was released 6 months ago, but I haven't tried it.


I'm dabbling and like it but there is just SO MUCH JAVA code. There are 1000 Java examples for every 1 Kotlin. Maybe LLMs make this less of an issue now though.


Has too much sugar, and without JetBrains IDE you're stuck with a plain text editor. Not sure if it's generalizable to normal Kotlin or not, but learning Gradle Kotlin DSL made me want to rip my hair out when trying to understand what happens under the hood.


The silver lining is the Demographic Cliff of 2025:

https://www.npr.org/2025/01/08/nx-s1-5246200/demographic-cli...

PDF warning: https://www.cdc.gov/nchs/data/nvsr/nvsr73/nvsr73-02.pdf

Colleges will need to reduce class sizes, or close entirely, for the next decade at least. With smaller class sizes brings the opportunity for course instructors to provide more time per pupil so that things like in-person homework and project review is possible.


I will stick with Firefox due to multi account containers. Chrome does not offer a comparable alternative, and this extension makes working with AWS significantly easier.

https://addons.mozilla.org/en-US/firefox/addon/aws-sso-conta...


It does make me wonder: why are aircraft takeoffs and landings not recorded more often, with higher quality cameras and more angles? If I can watch an NFL replay in 4k a few seconds after the ball is snapped, why not record (and overwrite) all flights that take off and land at every airport?

Like a dash cam, they can save the footage only if there is a problem. Surely that would be much better than splicing together many third party camera recordings.


Most frequently the actions/evidence that lead to a crash would not be captured on airport-located cameras. The holes in the swiss cheese usually start lining up either in the maintenance hangar, en route, or in the briefing room, not on the runway.

The NTSB (and many of their non-US counterparts) are incredibly adept at accident investigation using debris, black boxes and CVRs. Even in cases where the black boxes are damaged and video evidence is available, the video evidence is usually not so helpful as to be able to determine a root cause.

If you take into account that the cameras would be mostly useless in low-light or poor visibility conditions, and the costs associated with maintaining a nationwide network of high-res cameras that cover all runways at all major commercial airports (and ensures their lines of sight and operation through the never-ending renovations going on at these airports), I'm not sure that the benefits of having the cameras make sense.


Because aviation is already incredibly, ridiculously safe compared to essentially every other activity humanity undertakes, and adding additional cost, complexity and expense to the system would produce zero discernible benefit relative to the cost.


This is such a commonsense thought that my only guess can be because it would be a liability to insurance/airline carriers to have such helpful footage.

If Flock is going to retain footage indefinitely, why not the FAA/airport, to?


Airports might have the footage, but not release it. It's probably easier for a journalist to ask for the footage from a random strip mall parking lot.


> If I can watch an NFL replay in 4k a few seconds after the ball is snapped, why not record (and overwrite) all flights that take off and land at every airport?

An NFL game has a ton of cameras, a ton of camera operators, those fancy cameras on wire things, an onsite editing crew, and an audience.

To get good recordings, you'd need to invest a lot of time and money, and very few of the recordings would ever be watched. Doesn't seem worth the investment given third party recording seem to turn up quite often and video isn't terribly necessary for the investigation.


Left cam, right cam, runway end, and runway start cams as a minimum or, a single insta360 cam halfway along. 'Crew' not required. 'Audience' would be the ntsb. Cost? Cents on the price of having a plane/ being a passenger.

It doesn't seem to be such a terrible idea, though i do stand to be corrected.


Have you seen dash cam footage?

High quality cameras are actually really rare and expensive.


>High quality cameras are actually really rare and expensive.

This is absolutely archaic thinking.

Reminds me of when I worked in data centers, pre-Snowden, and the official position on recording was how could we possible afford enough hard drives to store everything?!.


You’re going to give your tax data - some of the most sensitive data to some constituents - to OpenAI / Google / some other startup?

That seems like a nightmare of a product as far as privacy is concerned.


Fwiw they have already bought all you financial info from Experian

https://theworknumber.com/solutions/products/income-employme...


I was flabbergasted when I heard of this. Basically you are totally transparent for anybody who wants to spend some money.


Being an American with so much freedom is so refreshing

Oh shit, wait.


I think they meant that it should be a lot faster to develop software that implements the tax code with the assistance of AI coding tools.


You need legal documents to be accurate and deterministic, not for some LLM to make shit up and have you inadvertently and incompetently lie to the IRS.


The only reason I care about companies having my data is that it means the government can get to it. In this case I am required to give my data to the government anyway, so why would I care if OpenAI / Google has it?


ISTM one ought to be able to use AI to translate the official IRS forms to a machine readable format. No personal data needs to go anywhere near the AI.

Even if you do want to feed your personal data to an AI tax bot, this should be easily within the capabilities of a model that can run locally.


> translate the official IRS forms to a machine readable format

The instructions for each form published by the IRS every year are already written by professional technical writers to be unambiguous. Do you mean that someone ought to write a simplified english grammar transpiler? I think that would genuinely be interesting. What's missing are the guidelines the technical writers are using, but that can probably be derived.


You can run it natively, but it is better to downscale to 4k or 1080p. I run three 5k versions of this monitor and they are all downscaled to 1440p. I get 1:1 pixel mapping so text looks crisp in every app except Microsoft Teams.


Isn‘t downscaling the wrong term? You‘re still taking advantage of its native resolution.


It’s not about CSA, it’s about illegal content. And laws change all the time.

For example, an individual can generate AI images of Hollywood actors using Stable Diffusion and a decently powerful computer. Said individual had the right to share those images online with a community.

Now however the sharing and distribution of said images is considered illegal in my USA state.

So, are the images said individual created and shared three years ago subject to prosecution? Even if the law went into effect 3 months ago?


> Even if the law went into effect 3 months ago?

No. The right not to be tried for actions that weren't crimes at the time is pretty universally applied in the west (I am not aware of the legal situation in other parts of the world, but I imagine it's honored there too). (Article 7 of the European Convention on Human Rights for the EU, Article I, Section 9 & 10 of the constitution for the US)

> So, are the images said individual created and shared three years ago subject to prosecution?

Generally, criminal acts are judged according to the rules of the jurisdiction where they happened, so I wouldn't be too worried about this. This isn't a universal rule though, so you won't find it enshrined in constitutions or treaties.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: