Hacker Newsnew | past | comments | ask | show | jobs | submit | strenholme's commentslogin

One legal way to share news stories which generate controversy is to have an AI make a summary of the article, rewording it to remove any copyright from the article (this legal trick only works when the news site in question is reporting on factual events, since facts can’t be copied as per Feist vs. Rural 1991, and I make sure that the summary has “a different sequence, pace, and setting than the original article” as per legal judgments on whether an AI summary of factual events as reported by a news source is subject to copyright).

What about just a copy and paste into an HN post comment? What is the legality of that? What if someone who reads a share, and then pastes it as a comment?

Genuine question here.


While Righthaven LLC v. Hoehn did rule that copying and pasting an entire newspaper article is fair use, this ruling was vacated on appeal and instead the lawsuit was nullified because they ruled Righthaven never had the right to bring the lawsuit in the first place. So, yes, one can be sued for copying and pasting a newspaper article verbatim.

Then it's no longer a record.

It might be useful for your own memory since you can decide that you trust what was written. IE you trust that when it was written, you agreed at the time that it was an accurate summary, and later you only have to trust your earlier self.

But "My ai said that the site said ~essentially~ this on this date." is useless for anything else.

But it suggests an interesting idea. Maybe if we had some ai equivalent of trusted vetted accountable court reporters who write down notes and draw sketches in rooms where cameras aren't allowed.

That is purely second-hand reporting that we more or less trust, partly because there is usually more than one of them from competing venues reporting on the same event, partly because they are people with something to lose if they are unfaithful or even merely inept, partly because the facts are ultimately vettable with some effort for those who really need to.

There's no such ai yet. Even if one exists that could do the job, there is no consensus or basis for it, for everyone to recognize it as a trustworthy source of second hand reporting. But maybe if there were more than one and operated by different camps, they could grow to become recognized as a valid source of info.


And, indeed, you can use archive.today to get past the login wall:

https://archive.ph/HcOq2 (This is a link to the post for this article)

(If one’s ISP can’t access archive.today, I find that Firefox’s built in free VPN can usually access them)

Or, you can use on of the various Reddit scrapers, e.g:

https://redlib.catsarch.com/r/Seattle/comments/1xhf6qp/archi...

Here’s a list of Reddit scrapers:

https://github.com/redlib-org/redlib-instances/blob/main/ins...

Personally, as scummy as archive.today is at times, I can generally trust them to have an honest archive about, say, someone’s drunk post before said drunk deletes the post.


You can just not use old.reddit.com. Regular reddit.com works without login.

Old still exists and gets heavy use a decade or so later exactly because regular reddit just doesn't work at all, even when you're logged in.

But even aside from opinions on their UX, they're aggressively experimenting with the login more... Even on the new UI I now semi-regularly see that I can read the initial post and one or two comments but as soon as I scroll past or try to expand a comment thread get a login prompt.


I dunno, used the regular one and it worked fine. Probably not for long.

I have moved my more complex scripting from Perl/PHP/Python to Lua for a lot of reasons. One being that Lua (even PUC Lua) is a good deal faster than Python (or /bin/sh); another is that, if I want even more speed, I can use LuaJIT (which keeps me stuck at Lua 5.1, but Lua 5.1 is perfect for my needs).

I wish Lua 5.1 could become part of POSIX; there are a lot of implementations of it out there.


Yeah, this is sort of the disconnect. Lua is a fast dynamic interpreter, sitting well above Python but rather below e.g. V8 in its ability to run scalar code over "interpreter types" like doubles and strings and vectors and hash tables.

The upthread comment was about an idea for "inline Cython", which was then hijacked because that's largely what numba is. These are technologies aimed at optimized native code running over native types to do stuff like numerics and ML and other HPC tasks. Lua isn't any more responsive to this domain than Javascript has been, it's not really the subject under discussion.


LuaJIT handles double, strings, and dictionaries at near C level performance. Also, arrays, but Lua’s data model has dictionaries and arrays be the same data structure. Lua 5.1 (i.e. LuaJIT) only supports double numeric types,[1] and its strings are immutable.

Lua 5.1’s edge over Javascript and Python is that it’s a lot smaller and simpler.

[1] It’s possible to recompile Lua 5.1 to have the numeric data type be an int, but the standard compiles of Lua5.1 only have double precision floats for numbers. Bitwise operators are technically not part of Lua 5.1, but a library to add support is easy and is usually done: Most Lua5.1 forks including LuaJIT and MediaWiki’s version of Lua5.1 have such a library available. Later versions of Lua have both int and float support.


> LuaJIT handles double, strings, and dictionaries at near C level performance.

Yeah, but again you don't reach for C when you have a string or hash-based logic problem, which is the reason that other platforms are favored. You reach for Python[1] to solve those problems, and it works fine.

You reach for C when you care about cache footprint or memory layout. You reach for C when you need SIMD parallelism. You reach for C when you care about doing the math in single precision or 32 bit integers and will handle the precision worries yourself.

You emphatically don't reach for python (or Lua) in those situations. But notably you can reach for numba, and implement your small core of performance code in python next to the other logic you already have. And there's value there.

Screaming about using Lua instead is just nonresponsive. Lua is arguably better at performance code than Python. Lua is absolutely not faster than numba, nor will it ever be (absent a numba-like translation layer) and repeatedly trying to argue so is very much missing the point.

[1] Or fine, Lua or JS or whatever. But I'm trying deeply not to let this turn into a frothing language flame, and this is after all a python discussion.


If you're saying V8 is quite fast why did you say the world is "waiting for a counterexample" to JITs on very dynamic objects being slow?

When OP wrote "inline Cython" they didn't seem focused on numerics, they talked about "proper C speed", and they mentioned modifying the language. I don't think it's getting off-topic to suggest a deeper integration that lets the JIT be very intimate with the interpreter and truly inline things in a way that bypasses language-crossing and type-dispatching overhead. As long as you're in the hot path, let it look up object fields in a couple instructions.


> When OP wrote "inline Cython" they didn't seem focused on numerics, they talked about "proper C speed"

Isn't that basically what I said? Lua isn't "proper C speed", nor is PyPy, the cancelled Python JIT in question, nor even V8. That's a different problem area with different technologies. The fact that you like coding backend stuff in Lua or whatever isn't really saying much about whether numba is great.

But it is. Numba is great.


I agree Numba is great. The reason I stay clear of Python is because the Python2 → Python3 transition burned me; the bureaucrats at Debian decided that, since my open source project had one Python2 script in it I wrote many years ago, I had to update my code to make that script a Python3 script. A very toxic and arrogant attitude; old versions of languages should not be killed like that when there is so much code written in the language, and when it can be very difficult [1] to convert a script from Python2 to Python3.

Lua5.1 is much more stable by the virtue that the only updates it code gets are very minor changes to fix any lingering security issues it has (the last Lua5.1 CVE is from 2014).

[1] I guess these days a LLM can do the grunt work of converting a Python2 script to Python3.

[2] There is a project which converts Lua in to native code: https://github.com/samyeyo/clx


V8 gets a hell of a lot closer than this experimental JIT. Numba speed for number crunching and V8 speed for non-number-crunching would satisfy OP, I think.

Numba is great at its niche. But OP directly said Numba is "not really" what they were looking for because it's so narrow.


One issue with making websites printable is that printing, by default, removes background colors and images. So, for the chess diagrams I have on my webpage, I use background colors to have the chessboard be a checkerboard instead of a white background (the chess pieces are a color webfont)—but since web printing removes backgrounds, the chessboards have white backgrounds unless the person printing the webpage chooses “print backgrounds”.

The only way to work around this is to have two sets of chess pieces in the font, one with a white background for pieces on light squares, and one with a colored background for pieces on dark squares.

Printing web pages is rare enough I just assume someone doing that will also click on “print backgrounds”.

(The reason to not use images for the chessboard diagrams is because they use more bandwidth and can’t have usable “dark mode” colors)


Sounds like SVGs would work well for this.

The advantage of a COLR font over SVGs is that they are functionally identical for this use case (indeed, the font in question was converted from SVG vector files) and a good deal more compact to boot.

But it's only by default. So the super easy workaround is to check the "Print backgrounds" box when printing.

You might be able to fix this with a few simple print CSS rules though.

I fixed it with print-color-adjust:

  background: #eee;
  print-color-adjust: exact;
  -webkit-print-color-adjust: exact;

I did. It’s perfectly readable. What was the issue you experienced on your phone?

The screenshot does not scale to fit, so you get a horizontal scroll.

It's not the end of the world.

But as it goes, not everyone has the motor control to _only_ scroll a phone view vertically; unexpected horizontal scroll can be frustrating, especially when one very wide element leaves the screen otherwise confusingly blank elsewhere on the page.

(I've actually witnessed this frustration from an older user in real life)


Author here, I don't personally use my phone to access websites often, so I forget to check on things like this. My bad! I'll take a look into it when I get a chance.

Having horizontal scroll is annoying, yes, but I don’t think it makes a website unusable on a mobile device.

The way to handle elements wide enough to induce horizontal scrolling is to put them in a <div> (or make CSS for the tag in question) and make CSS with overflow-x: scroll; for just that element. An example from one of my webpages:

  pre {max-width: 90vw; overflow-x: scroll;}

> but I don’t think it makes a website unusable on a mobile device

For you :-) Now imagine you have to use a mobile device but have limited control over your hands, and it's difficult for you to do a vertical scrolling gesture without some horizontal drift.

I've seen this in real life. Why not make things easier for that person when you can? Accessibility is for everyone. (General accessibility rule I like — if it's a persistent minor annoyance for me, it's possibly a dealbreaker for someone with an accessibility requirement I've not thought of)

Your suggestion for constraining horizontal scroll to unavoidably overflowing elements is good, though — I do that too, and I've ended up figuring out how to add affordances so it's clear that scroll is possible (shadows that appear and disappear)


If I have to zoom on mobile, I go straight to Reader mode. If that doesn't work, I close the page.

Well done. It’s important to know the difference between a real world exploitable bug and hot air; as an open source maintainer, over half of the bug reports I get are “hot air” bugs.


I’m surprised this level of surveillance from a smart TV (if this is real; right now the only sources are social media) doesn’t open up Samsung to a lawsuit.

To wit: There was a lawsuit where Susan Clements-Jeffrey sued Absolute Software (Lojack) for a stolen laptop she acquired; Lojack used surveillance to track down the stolen laptop and Susan successfully sued for invasion of privacy (Lojack settled instead of trying to fight it).


It should result in a lawsuit.

A couple of days ago I set up a samsung smart, ai, yadda yadda tv for a family member whose technical expertise boils down to "I unplug the computer to turn it off".

It refused to let me set it up for cable without granting it internet access (as in the bundled remote control didn't work):

First I ended up on a bunch of websites that hallucinated non-existent physical buttons on the tv

I then tried to scan scan the modal qr code which didn't work because the phone I used didn't have google play services.

I had to get another samsung phone (which immediately picked the tv up and asked me if I want to set it up without scanning any code) and after I agreed to share the data with some 450 partners, I got an error saying "setup did not complete, please try again"

Though at that point the builtin remote started working beyond on/off and mute and I was able to finish setup that way.

In the end, I can't even change the wifi password because the phone will share it over bluetooth with the fucking spybox.

Fuck samsung. You were shit in the galaxy S1 days, you're even worse now.


Mandatory arbitration clause and class action waiver. Basically means immunity from suit.

I've never once signed a contract for a TV. They're routinely set up a single member of the household. They're the single most plausible place for "maybe my kid / guest / cat hit OK on the remote".

Very different from a single-player video game, or a website with a login form.


Courts almost always assume you agreed to buried terms when you use the product and/or don’t opt out. It may sound absurd, but it’s true.

Are there any examples of that for physical goods? Software I've heard the legal justifications for, but never for something like a TV

Thst combination actually means there's a minimum amount of money that Samsung has to pay every time somebody sues them.

No it doesn’t.

Yes, it does. Arbitration isn't free, and they forbade themselves from combining many cases.

It has hit the point where I’ve told people reporting bugs with my software that I won’t acknowledge the bug unless they provide a patch to mitigate the issue.

A lot of these bug reports are incorrectly filed. Let’s look at one issue, which I am sure was found with AI assistance:

CVE-2026-40719

Here’s the issue: An IP authorized to perform recursive queries can cause the DNS server to be non-responsive if it sends hundreds of specially crafted packets a minute (this can be changed to millions of packets a minute if one sets a parameter in the configuration file). Normal service is restored within a minute of the attack being stopped. The workaround would require me to essentially rewrite the recursive part of the DNS server.

Since the DNS server, like any server in a LAN, is already vulnerable to a flooding attack, this is just a flooding attack with extra steps.

I told the guy that was interesting, I’m not being paid enough to rewrite the DNS server to be immune to the attack, and people shouldn’t be using its recursion (it has very limited IPv6 support, for starters), and if they do use its recursion, only authorized IPs (e.g. 127.0.0.1 or 192.168.1.0/24) should be allowed to perform recursion.

It wasn’t a serious enough attack to merit a patch, and anyway the guy reporting the bug didn’t even have the decent courtesy to give me a patch.

The guy responded by filing for a CVE report, incorrectly calling it a “high impact” bug, and I had to make a “patch” which simply disables recursion: https://samboy.github.io/MaraDNS/patches/MaraDNS-CVE-2026-40...

Point being, a lot of these CVE reports out there which supposedly are high impact bugs are trivial things like “someone can overload a server for about one minute if they send hundreds to thousands of specially crafted DOS packets”.

(Today, I got an issue which, as far as I can tell, looks to be a Linux kernel issue and not an issue with my code. I told him to show me how he would patch my code to “fix” the issue, but so far have gotten nothing but crickets)


Who forced you to make the patch instead of just leaving the CVE open forever?

“Forced” is a little strong. RedHat/Fedora filed a bug report, and I felt it was prudent to have a patch for them to use, even though I explained why they didn’t need to use the patch.

I’ll bite. I have written a recursive DNS resolver. It’s buggy, mind you, it doesn’t handle improperly configured domains bug-for-bug the way BIND9 does, it doesn’t support IPv6 for resolving records (it can still resolve AAAA records, mind you), but it’s about 80 kilobytes in size, runs nicely on 32-bit systems, and does full DNS resolution starting from the root servers.

Does the fact I have written this resolver make me liable should it not block the domains they listed which may contain copyright infringing content? Am I now required to add these domains, and make them part of a mandatory block list? Will I still be held liable if people can still access these allegedly copyright infringing domains by modifying the source to my program?

Keep in mind that when Quad9 had a similar lawsuit in Germany, they blocked queries from German IPs, but the idiots said Quad9 was still liable because people could use VPNs in Germany to bypass their geoIP blocking.

Quad9 being forced to block these domains will achieve nothing. Will these copyright enforcers now go after Google for 8.8.8.8? Cloudflare for 1.1.1.1? Level3 for 4.2.2.1? Will they go after ISC for BIND? NLnet Labs for Unbound? CZ.NIC for KnotDNS? Me for MaraDNS? Even if they enjoin me from making a recursive resolver which can resolve these domains, that won’t stop anyone and everyone from forking my code (see also: Twitter trying to take down Nitter).


> Does the fact I have written this resolver make me liable should it not block the domains they listed which may contain copyright infringing content?

I use unbound and have a similar question. Shouldn't we just encourage everyone to run their own resolvers (it's turnkey for the most part!)? Will Sony/beIn start going after the root servers and enforce a global block?


>Will these copyright enforcers now go after Google for 8.8.8.8? Cloudflare for 1.1.1.1?

they already have.


Have you received a court order from France addressed to your person?

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: