MurphyA/hacker-news huggingface dataset:
by throwawaymaths | 2025-04-16 04:21:53+00:00
> linked lists aren’t useful on modern systems because traversing them causes to many cache misses

Only if you "default to using" (and only use) malloc. Zig encourages you to use different allocators within the same program for different use cases, including, potentially allocators which will thrash the cache far less (for example thread local arenas).
by rcpt | 2025-04-16 04:22:20+00:00
Not even close. The whole Republican party is lock step with everything DT says. Not a single member of Congress will oppose him. DT pushes through all kinds of things that they don't want, eg. RFK is a lifelong granola Democrat with wildly unpopular opinions but every single Republican confirmed him.

Nobody else in the party has this kind of power. Not JD, not Desantis, not the Koch brothers, nobody. When he's gone, it's over.
by worthless-trash | 2025-04-16 04:23:08+00:00
So, while arguably true, there wont be a single source of truth of new cve's. It doesn't however mean there wont be.

I would imagine the only SANE option would be some kind of git repository where CNA's can collaborate. Probably run some code across to make the website that people can easily access.

It's going to be a mess.
by Eisenstein | 2025-04-16 04:24:11+00:00
> While far-left views might be equally reprehensible, these views are not seen as equally politically incorrect. It's actually quite hard to hold politically incorrect far-left views unless you incorporate some far-right views – being so pro-trans that you hate biological women or something stupid. This is why you tend to see less left-wing content there. It's hard to be offensive and left-wing.

Have you considered that what you think is radical left-wing is just centrist, and that you are acclimated to such right-wing views that it appears radical-left? In such a case, it is hard to be politically incorrect while saying something centrist.

> If you're up for it I challenge you to be politically incorrect from a left-wing perspective without it being possible to argue that it's actually far-right.

I think anything from these would qualify:

* https://alphahistory.com/russianrevolution/expansion-of-the-...

* https://alphahistory.com/russianrevolution/lenins-hanging-or...

Those are far left. And don't say that they don't count or are too extreme or whatever, when literal Nazi quotes are being used for the right wing. Comparing 'trans-rights' to far left which using Nazis as the example of far right is nonsense. The Nazis would literally have murdered trans people just like real leftists would have murdered you for being bourgeoisie.
by kqr | 2025-04-16 04:24:12+00:00
It is producing a useful number. As more truly independent terms are added, error grows with the square root while the point estimation grows linearly. In the aggregate, the error makes up less of the point estimation.

This is the reason Fermi estimation works. You can test people on it, and almost universally they get more accurate with this method.

If you got less certain of the result in the example, that's probably a good thing. People are default overconfident with their estimated error bars.
by jsight | 2025-04-16 04:26:49+00:00
I was playing around with ChatGPT the other day and encountered a similar issue. Once I hit the rate limit, the replies telling me that seemed to be AI generated. When I waited the requisite time, the next use attempt repeated the last message about being past the limit and needing to wait 13 hours again.

It seemed to be reading from the conversation to determine this. Oops! Replaying an earlier message worked fine.
by ryao | 2025-04-16 04:27:12+00:00
cast a `struct Foo*` into a `struct Bar*` and access the Foo through it (in practice we teach this as the "strict aliasing" rules, and that's how all(?) compilers implement it, but that's not what §6.5 paragraph 7 of the standard says!)

Use the union type. Abusing it for aliasing violates the standard too, but GCC and Clang implement an extension that permits this. Alternatively, just allocate a char array and cast it as you please. Strict aliasing does not apply to char arrays if I recall.

allow a signed integer to overflow

Is this still true? I thought that the reason for this is because C left the implementation to define how signed arithmetic worked, meaning you could not assume two’s complement, but the most recent C standard was supposed to mandate two’s complement.

pass a NULL pointer to memcpy, even if the length is zero

There is a reason for this. memcpy is allowed to start reading early as a performance optimization, before it does a branch that checks if reading is only. I do wonder what happens if you only want to copy 1 byte and that byte has invalid memory right next to it. Presumably, this optimization would read more than a byte.

read an unitialized object, even if I "don't care" what value I get

You are probably doing something wrong if you do this. It is not even good as an entropy source.

read and write a value from different threads without locking or atomics, even if I know exactly what instructions those reads and writes compile into and the ISA manual says it's 100% fine to do that

Earlier C standards likely did not say anything about this because they did not support multithreading, but outside of possibly reading/writing to hardware registers, you do not want to do this because of races. Even if you think you know better, you almost certainly do not.
by defrost | 2025-04-16 04:27:33+00:00
It's a near certitude that Russia and China each have databases of exploitable software errors and prize zero days.

It was to the advantage of the US and allies to coordinate and lead in tracking and fixing such errors.

Multiple countries, companies, and individuals contributed finding and fixing bugs.

The administrative task of keeping track was one part of a greater picture, a part that came with first to be advised and other perks.

It's not that the US had a responsibility to take on the lead admin task, more that in past times the US saw an advantage to being at the centre of global action.

This is just another part of increasing US isolationism.
by KPGv2 | 2025-04-16 04:27:45+00:00
> the bad men say the mean things

You really lose all credibility when you downplay the richest man on earth openly bribing voters and the President claiming the man helped rig voting machines, and that same man makes Nazi salutes and goes to Europe and supports the Nazi party in the place where they invented Nazi parties. And then he basically moves into the White House and magically his companies start getting government contracts, while saying empathy is a bad thing and begins eviscerating the government with no oversight.

That isn't "bad men saying bad things." But, of course, this very bad man did say some very bad things, too.
by 14 | 2025-04-16 04:30:17+00:00
Yes there definitely have been some bad actors but you can get that anywhere. As a parent I have seen teens on snapchat make fun of a kid and it gets sent to the entire school. It can happen anywhere. And yes there are lots of nice chill parts of 4chan but also some that are questionable to most people's morals. But the freedom to say what you like on 4chan makes it a very powerful site for both good and bad or those who just don't want to risk their identity being know for criticizing politics as one example. Even here on HN you are restricted on what you can say as HN does have a few guidelines. But I do find HN has a pretty good balance with moderation most of the time. The voting system takes care of most of it.
by almostgotcaught | 2025-04-16 04:30:40+00:00
> If you think your project will have more than half a dozen developers

https://github.com/llvm/llvm-project/blob/main/llvm/CMakeLis...

How many active contributors does LLVM have? Hmmm

https://github.com/pytorch/pytorch/blob/main/CMakeLists.txt

How many active contributors does PyTorch have? Hmmm

https://github.com/boostorg/boost/blob/master/CMakeLists.txt

How many active contributors does boost have? Hmmm

I could go on...
by krferriter | 2025-04-16 04:31:00+00:00
Absolutely not. They are not broadly experts, and they are not making these decisions after careful consideration, as evidenced by their continual acts of stupidity and basic errors and cutting things despite having no idea what it is they are cutting. Musk got in an argument with someone who said DOGE cut funding for a cancer treatment program, and Musk was calling the person a liar, and the person provided evidence and Musk admitted it was an accident. They are a clown car of idiots who vastly overestimate their own knowledge and underestimate how much good the government actually does. They think they can just slash and burn and there will be no negative consequences because they think the government is worthless.
by wichitawch | 2025-04-16 04:32:15+00:00
> It was to the advantage of the US and allies to coordinate and lead in tracking and fixing such errors.

From what I understand of the article, none of these allies were funding it.

> Multiple countries, companies, and individuals contributed finding and fixing bugs.

Clearly that itself isn't enough. Someone has to pay for maintaining this service. It appears that no one other than USA spent money in funding it.
by Hojojo | 2025-04-16 04:33:26+00:00
I know my work and it largely isn't shoddy. I have a keen eye for detail and code quality is incredibly important to me. But yeah, I am lazy and I hate wasting my time. AI has been a huge boon in the amount of time it's saved me.

> And the vast majority of people using them are either too stupid or too lazy to actually review their own output.

I don't know if that's true or not. But I'm not stupid or too lazy to review the code, because I review every line and make sure I understand everything. The same way I do with every line of my own code or every line a colleague writes if it's relevant to what I'm working on.

You're in the wrong place if you want to talk about people, particularly fellow developers, in this way. You're just being toxic.
by pfhayes | 2025-04-16 04:34:00+00:00
Forcing a reload is a regression compared to the "standard" method proposed at the start of the article. If you have a REST API that requests attributes about a model, and the client is responsible for the presentation of that model, then it is much easier to support outdated clients (perhaps outdated by weeks or months, in the case of mobile apps) without interruption, because their pre-existing logic continues to work
by chris_wot | 2025-04-16 04:34:42+00:00
They've done their degrees and masters in Computer Science, and many of them dropped out. But they focused on AI, so I'm assuming this makes them great at statistics, but does this mean they are great at security? Given the way they've gone through a variety of departments, I'd say they aren't.

The DOGE crew are incompetent. Witness their firing of all the people who look after the nuclear stockpile and Ebola research.
by ookblah | 2025-04-16 04:35:40+00:00
sorry for the snark, but missing the forest for the trees here. unless it's just some philosophical idea, use the tools that save you time. if anything it saves you writing boilerplate or making careless errors.

i don't need to "hand write" every line and character in my code and guess what, it's still easy to understand and maintain because it's what would have written anyway. that or you're just bikeshedding minor syntax.

like if you want to be proud of a "hand built" house with hammer and nails be my guest, but don't conflate the two with always being well built.
by ryao | 2025-04-16 04:36:10+00:00
This is very bad advice for a few reasons:

1. It is not possible to add optional member functions (which would be pure virtual functions) to a C++ class base class and then check at runtime if they are unimplemented in the object (at least not without implementing some way to query the object, which is slow). If you say to handle this by having typeid checks at runtime, look at the VFS and then notice that you cannot implement this typeid check in advance, since you cannot add a typeid check for a derived class that did not even exist when you compiled your code. Thus, you still need to use structs of function pointers in C++. Maybe you can use C++ classes for some cases where structs of function pointers are used, but you would giving up the ability to implement optional functions in a sane way.

2. It ignores all of the things in C that are absent from C++. In particular, C++ refuses to support C’s variably modified types and variable length arrays, which are useful language features.

3. It ignores all of the things in C++ that you likely do not want, such as exceptions and RTTI. The requirement to typecast whenever you assign a void pointer to any other pointer is also ridiculous.
by smt88 | 2025-04-16 04:37:09+00:00
- Product is not kickass. Hallucinations and cost limit its usefulness, and it's incinerating money. Prices are too high and need to go much higher to turn a profit.

- Their brand value is terrible. Many people loathe AI for what it's going to do for jobs, and the people who like it are just as happy to use CoPilot or Cursor or Gemini. Frontier models are mostly fungible to consumers. No one is brand-loyal to OpenAI.

- Many key employees have already left or been forced out.
by throitallaway | 2025-04-16 04:37:27+00:00
> You need to make it in Trump's interest to keep the CVE program.

This guy is ~80 years old and bragged about "person, woman, man, camera, TV." He recently got into a Tesler and exclaimed "everything's computer!" Have you seen the way his aids explain executive orders to him (like a child) before he signs them?

He doesn't have the foggiest notion of comprehension of what the CVE program is, or how it would benefit him. Unless you're greasing his wheels, it's not going to happen.
by __MatrixMan__ | 2025-04-16 04:37:35+00:00
It is hard to imagine trusting an AI that much. But plenty of things happening today would've been hard to imagine by the people who came before. So yeah, let's make that assumption.

At that point, I don't think we'd be using the AI to code something and then switch to a mode where we're now using the recently-coded thing.

We'd just ask the the car to go, and it would happen. Then we'd suggest a strategy for making trades, and that would happen. If the AI decided to write some code and fork a subprocess along the way... that would be an detail that we'd be unaware of.
by cma | 2025-04-16 04:39:21+00:00
Can search these for the links

2023

> CISA had previously been supporting the NIST NVD program with approximately $3.7 million per year in interagency funding, which they have discontinued

2024

> While NIST has since reallocated $8.5 million to NVD for fiscal years 2024 and 2025

Assuming that's spread over both years it wasn't as big of an increase as I said, but is still an increase even inflation adjusted.

> 2025 article claims 30% increase in 2024 workload

Underfunding in the face of more workload isn't itself a funding cut.
by dathinab | 2025-04-16 04:41:10+00:00
on a "governmental budged" level?

probably so little it's nothing

but on a personal/small company level that still isn't nothing I guess

you need above average robust and secure servers

And the amount of "false", "duplicate" or otherwise bad CVEs is pretty insane and you engineers with enough experience to get pretty well paid jobs, which also are trustable to go through it, filter it and apply scores. And this not always being done supper well is kinda where some projects starting to have their own numbering service comes.

I wonder if there had been a discussion like: A forceful requirement to replace all employees with AI and a firm refusal that doing so isn't viable as this is to prone to malicious prompt injection attacks and as final consequence it got de-funded with DOGE claiming they can just run it them-self for a fraction of them money.
by o11c | 2025-04-16 04:42:26+00:00
Hm, looking to see if the vendor field is actually meaningful ... I see some stuff for m68k and mips and sysv targets ... some of it working around pre-standard vendor C implementations

Ah, I found a modern one:

i[3456789]86-w64-mingw* does not use winsup i[3456789]86-*-mingw* with other vendors does use winsup

There are probably more; this is embedded in all sorts of random configure scripts and it is very not-greppable.
by inejge | 2025-04-16 04:42:27+00:00
> I still find it wild that so many people are trying to frame these decisions through a political lens.

Why? The decisions are pretty well politically aligned with the ideology which detests the size and scope of the government (realistically, those aspects which the ideologues feel are not in their interest). What is unexpected is the swiftness and the brutality of action, but revolutions tend to be messy, and make no mistake, this is a revolution.

> This is the actions of a foreign bad actor

Now this sounds like a coping strategy: everything is so preposterous it couldn't possibly be homegrown. Foreign influence and underhanded actions are as old as human interactions, but IMO outright plants can't succeed without a massive economic and power asymmetry between the adversaries.
by sofixa | 2025-04-16 04:42:37+00:00
> This sort of thing is happening across the federal government. There is no rhyme or reason. DOGE has been given an unrealistic target for cuts and they're desperately cutting whatever they can get their hands on

You make it sound like poor DOGE employees are being forced to do this on this kind of schedule, which definitely isn't the impression I got. They're all a bunch of incompetent overconfident weirdos who think they know better and what to do. Is there any pressure to do anything quickly?

And the US federal budget is quite easy to trim. E.g. remove an aircraft carrier from the planned construction pipeline and you've saved $15 billion with no actual ramifications.
by teleforce | 2025-04-16 04:43:26+00:00
I've just learned that the main innovative thing about Notion it's their idea of block [1],[2],[3].

Notion's block can be of any content type and the block is the fundamental building units for all content within platform. This approach allows users to easily customize and rearrange their content by adding, moving, or transforming blocks to suit their needs.

I'm wondering if this powerful and flexible block concept can be enabled and facilitated by the new open table format (OTF) for examples Apache Iceberg and others [4]?

But for going gung-ho on flexibility perhaps Jeremy Kepner's D4M proposal can enable CMS with even better capability than Notion block based paradigm or Notion++ [5],[6]?

[1] What is a block?

https://www.notion.com/help/what-is-a-block

[2] The data model behind Notion's flexibility (120 comments):

https://news.ycombinator.com/item?id=27200177

[3] Notion (productivity software):

https://en.wikipedia.org/wiki/Notion_(productivity_software)

[4] Why Open Table Format Architecture is Essential for Modern Data Systems:

https://www.phdata.io/blog/why-open-table-format-architectur...

[5] D4M: Dynamic Distributed Dimensional Data Model:

https://www.mit.edu/~kepner/D4M/

[6] Mathematics of Big Data Spreadsheets, Databases, Matrices, and Graphs:

https://mitpress.mit.edu/9780262038393/mathematics-of-big-da...
by toomuchtodo | 2025-04-16 04:43:46+00:00
The Verge: Elon Musk's DOGE figured out one thing: if you control the computers, you control everything. - https://youtube.com/shorts/XSKXIUuDV1c

The Moving Goal Posts in Musk’s DOGE Cuts: Why Elon Musk and his team have struggled to make the spending cuts they promised - https://www.nytimes.com/2025/04/14/us/politics/elon-musk-dog... | https://archive.today/GPDNY - April 14th, 2025

Elon Musk dramatically lowers his DOGE spending cut targets (again) - https://www.msnbc.com/rachel-maddow-show/maddowblog/elon-mus... - April 11th, 2025

See How Government Spending Is Up Even as Musk Touts Savings: Musk team’s $150 billion in savings barely dents $6.8 trillion in spending largely on autopilot, WSJ analysis finds - https://www.wsj.com/politics/policy/trump-doge-government-sp... | https://archive.today/DGGhX - April 11th, 2025

"A system’s function or purpose is not necessarily spoken, written, or expressed explicitly, except through the operation of the system. The best way to deduce the system’s purpose is to watch for a while to see how the system behaves. Purposes are deduced from behavior, not from rhetoric or stated goals.” —- Donella Meadows
by hibikir | 2025-04-16 04:45:00+00:00
For something like milk, which is produced by mammals to feed young ones, there's all kinds of biological connections between a relaxed, healthy, content animal and milk production. We are humans, it's not much different for us. So as far as milk production goes, the wellbeing of the cow lines up relatively well with productivity. A stressed, unhealthy animal isn't going produce all that well. Often the limitation isn't the disinterest in the wellbeing of the animal, but the capital and labor required to improve conditions.

Quality tech can actually improve animal welfare, as shifting costs from labor into capital makes quality of care improve.

Now, this doesn't always line up well in all kinds of animal husbandry, but you went and looked at one case where it does. The dark dairy you imagine would most likely lose money.
by sofixa | 2025-04-16 04:45:42+00:00
> Hopefully these 4 years energize people to vote

You are assuming there will be next elections that are free, fair, and matter.

Trump says a lot of things that ultimately doesn't matter, but he has also said, and is the type of brute to believe it, that he intends to stay in power. He and his cronies have successfully dismantled the checks and balances that should have prevented him from doing they, legally. IMO the only way he leaves the White House without stirring trouble is in a casket.
by isaachinman | 2025-04-16 04:45:44+00:00
Good questions!

> But is this one of those "let's build everything in rust since it's super-fast"? (I HOPE so actually).

No. It's not written in Rust. Language choice would have literally nothing to do with making IMAP/the email experience any faster. I don't want to make any firm claims as we've yet to do serious benchmarking, but what we've built is _much_ faster than Mail.app, let alone Gmail.

The tech we've chosen, and the actual app itself, essentially _feels_ like Linear for email.

> I feel there might be a market for a fully native MODERN and OS-native looking mail client (alternative to at least Mac Mail, but actually fast with search that is actually useful).

Yes, this is what we're building, but a bit beyond that. It's completely cross-platform: web, Mac, Windows, iOS, Android, Linux. Any N number of clients a user might have running will seamlessly and instantly sync, given network availability. That said, each client is also fully offline-first.

There _is_ a market for this. It's been a nasty problem to solve, but we have a massive waitlist.

Superhuman has achieved great success (although being an over-valued VC org) but only support Google + Microsoft _via_ API access.

Notion launching their product is further validation that there's a lot of space in this market.

But Marco is quite different. We're building a cross-platform IMAP-primitive email client that gets the basics right. It'll work with any email provider that supports IMAP (basically all). We're not pushing or even _building_ any "AI" stuff yet.

I wrote a blog post detailed our motivations here:

https://marcoapp.io/blog/marco-an-introduction

Let me know if you have any follow-up questions.
by cbondurant | 2025-04-16 04:48:41+00:00
Am I missing something or was this literally announced with less than 24 hours of warning that one of the critical components to the cyber security landscape was disappearing.

What the fuck are you supposed to do about this. This is something that should have had multiple MONTHS of warning in order to allow those who depend on the CVE infrastructure to plan what to do next with their security posture.