MurphyA/hacker-news huggingface dataset:
by sgt101 | 2025-04-29 08:42:03+00:00
>We don't fully understand how we relate words to concepts and meaning ourselves,

This is definitely true.

>but to the extent we do, LLMs are by far the closest implementation of those same ideas in a computer

Well - this is half true but meaningless. I mean - we don't understand so LLM's are as good a bet as anything.

LLMs will confidently tell you that white wine is good with fish, but they have no experience of the taste of wine, or fish, or what it means for one to compliment the other. Humans all know what it's like to have fluid in their mouths, they know the taste of food and the feel of the ground under their feet. LLMs have no experience, they exist crystalised and unchanging in an abstract eternal now, so they literally can't understand anything.
by worthless-trash | 2025-04-29 08:42:12+00:00
For those who haven't been on the receiving side of a beg bounty, you'd get an email something like this (I make no claims to its correctness):

To: abuse@yourdomain.com Subject: Bug bounty , PII data made available port 22. Please provide bug bounty for critical software flaw.

Issue description

This is critical, exploitation of the ftp server provides source code to a popular debian server allowing attacker to sidestep usual reverse engineering procedures required to attack a system. (Authentication Bypass).

I will release this bug in thirty (30) days if no bug bounty has been granted and attackers will be able to take full advantage of this problem.

Reproducibility

This issue is trivial to reproduce, with popular hacking tools such as ftp and internet explorer.

Bounty value

Please be mindful and understand that this research takes up many hours and bugs like this can fetch up to $25,000 on popular bug bounty programs ( https://www.hackerone.com/ ).
by jeroenhd | 2025-04-29 08:42:34+00:00
Oracle offers everything. Databases, web frameworks, programming languages, CRMs, cloud management tools, auto scaling clusters, identity management, BI, document search, email servers, colocation, mainframes, calendar sync. You name it, they've got it. Oracle has products ready to go to run an entire country if it needs to.

Sure, Postgres beats OracleDB, but Postgres doesn't integrate as well with Oracle Fusion and you need to migrate the code yourself. They're like SAP: they're big enough that you can make a career just out of configuring their software packages and make good money while doing so.

It's expensive and certainly not the best, but it's reasonably stable and has a huge company backing it. Oracle won't disappear any time soon and they're not as likely as Google or Microsoft to shut down their services within a few years notice.

In some countries, Oracle is also very good at doing what Google and Microsoft are doing to students. The Brazilian programmers I've spoken to specifically learned OracleDB when they were taught relational databases. They learned to program in Java, and I'm sure Oracle also sponsored other parts of the professional tooling they got to use for free. Microsoft, on the other hand, didn't seem to generous towards their educational facility (no free MS tooling for their schools like they offer over here). If all you know is Photoshop/Windows/Maya/OracleDB/iOS, you're going to look for jobs where you can use Photoshop/Windows/Maya/OracleDB/iOS, and employers looking for cheap juniors will need to offer Photoshop/Windows/Maya/OracleDB/iOS to make the best use of them.
by consp | 2025-04-29 08:43:50+00:00
Anecdotal example: The, now closed, Aluminium plant here was build only because the government build a nuclear plant, which is still going. There was a coal plant next to it (closed now) as a backup for when nuclear was not available. Funny thing is most people thought the coal plant was the nuclear plant when driving by since it looks more like a plant, the nuclear dome structure is kind of hidden from the road and since natural water is used as cooling no big towers are close by.
by vladvasiliu | 2025-04-29 08:45:34+00:00
> In addition, the multi-modality also differs a lot. Finnish and some other languages simply don't have speech exercises (where you have to read something into the microphone).

They have the speech exercises in Spanish, but they are ridiculously bad. It often says I'm correct before I get to say half the sentence. Other times, I'll need to repeat a word 10 times until it gives up and says it's fine.
by rootsudo | 2025-04-29 08:46:41+00:00
This, but also it's so long ago and old, not current or a previous current gen system. The wii was discontinued october 2013, and released November 2006.

Effiectively its 12-19 years old now, for me, while I understand it also kinda falls under "who cares" because homebrew always was always somewhat equal to piracy.
by timewizard | 2025-04-29 08:47:09+00:00
> How does your trivial removal automation distinguish between 'intimate depictions' and 'political imagery I dislike'?

It doesn't; however, you would immediately have a civil case against the person and/or their representative for their false claim. That's not spelled out in the bill but it should be obvious.

> The whole point of this is discussion is that this is going to be used to censor everything

That's the claim. You may accept it without objection. I simply do not. Now I'm offering a slightly modified discussion. Is that alright?

> not just 'intimate visual depictions'.

I'm sure you would agree that any automation would obviously only be able to challenge images. This does create a vulnerability to be sure, but I do not agree that it automatically creates the wholesale censorship of political speech that you or the EFF envisions here.

It also makes efforts at being scoped only to sites which rely on user generated content effectively limiting it to social media platforms and certain types of adult content websites. Due to their nature it's already likely that these social media platforms do _not_ allow adult content on their websites and have well developed mechanisms to handle this precise problem.

The bill could be refined for civil liberties sake; however, in it's current state, I fail to see the extreme danger of it.
by palata | 2025-04-29 08:47:13+00:00
> but that they do not communicate two things clearly: > this alone won't make you a fluent speaker

Pretty sure that they say it, repeatedly, on their blog. I only read a handful of their blog posts and more than one mentioned it.

> at what point you should move on from Duolingo

I won't blame them for assuming common sense. If you haven't reached a level where you can e.g. read news in the language you are learning, then you probably won't try e.g. while waiting 10 minutes for a train. And there, it's better to do 10 minutes of Duolingo than 10 minutes of TikTok.
by re | 2025-04-29 08:47:18+00:00
The notice on ftp.bit.nl predates ChatGPT. Perhaps more relevant: "Beg Bounties" 280 points, Nov 8, 2021, 104 comments https://news.ycombinator.com/item?id=29147555

> Want to be a bounty beggar? It's dead simple, you just use tools like Qualys' SSL Labs, dmarcian or Scott Helme's Security Headers, among others. Easy point and shoot magic and you don't need to have any idea whatsoever what you're doing!
by tmtvl | 2025-04-29 08:47:31+00:00
Steam used to have the Daisy Wheel input method (someone made a JavaScript(TM) port here: https://github.com/likethemammal/daisywheeljs), which I recall being very good in practise.

For Rad Type, I'm curious whether if basing it on Dvorak or Workman or something rather than QWERTY would improve it.

For issue #2 which is raised I would suggest using D-Pad Up for capitalisation and D-Pad Left and Right to switch between keyboards. The number row contains 13 keys with 2 characters each, so that's 26 characters just like the alphabet, which maps perfectly. The other special characters on a standard QWERTY keyboard are located on just 8 keys, for a total of 16 characters, which would work fine as a third keyboard.
by schrectacular | 2025-04-29 08:49:58+00:00
I just had a free month on them. It was great but for me the plans are weird. 300 searches a month is _probably_ enough but the fact that I'm on a countdown makes me super cagey with my searches. And I want to want to use the service if that makes sense. I'm not opposed to paying (I pay for email) and I know they share the reasons for the pricing, but my email account is something like $3 a month.

I guess this is a long winded way of saying I'm cheap? I'm close to the fence but thus far have stayed on the far side mostly due to price. At $5 a month unlimited I'd be in for sure and probably usually not hit the 300 number. The AI included level is intriguing though.
by snackbroken | 2025-04-29 08:50:53+00:00
This is a nice example of why one should parse, not validate. If every function that requires some kind of permission takes that permission as an argument, say (pseudocode)

void doFoo(PermissionToDoFoo permission, ...){...}

and then, the only way to call it is through something like

from request import getAuth, respond \\ Maybe<AuthenticationData> getAuth(Request request) \\ void respond(String response) from permissions import askForPermissionToDoFoo \\ Maybe<PermissionToDoFoo> askForPermissionToDoFoo(AuthenticationData auth) response = try auth <- getAuth(request) permission <- askForPermissionToDoFoo(auth) doFoo(permission) "Success!" fail "Oopsie!" respond(response)

It becomes impossible to represent the invalid state of doing Foo without permission.
by DanielHB | 2025-04-29 08:51:12+00:00
I wrote a few benchmarks a few years ago comparing JS vs C++ compiled to WASM vs C++ compiled to x64 with -O3.

I was surprised that the heaviest one (a lot of float math) run about the same speed in JS vs C++ -> x64. The code was several nested for loops manipulating a buffer and using only local-scoped variables and built-in Math library functions (like sqrt) with no JS objects/arrays besides the buffer. So the code of both implementations was actually very similar.

The C++ -> WASM version of that one benchmark was actually significantly slower than both the JS and C++ -> x64 version (again, a few years ago, I imagine it got better now).

Most compilers are really good at optimizing code if you don't use the weird "productivity features" of your higher level languages. The main difference of using lower level languages is that not being allowed to use those productivity features prevents you from accidentally tanking performance without noticing.

I still hope to see the day where a language could have multiple "running modes" where you can make an individual module/function compile with a different feature-set for guaranteeing higher performance. The closest thing we have to this today is Zig using custom allocators (where opting out of receiving an allocator means no heap allocations are guaranteed for the rest of the stack call) and @setRuntimeSafety(false) which disables runtime safety checks (when using ReleseSafe compilation target) for a single scope.
by AStonesThrow | 2025-04-29 08:51:55+00:00
> generally people prefer cold beer

Do they? But why? Why would they? Are they simply accustomed to tasting it that way? I should say "not tasting it" because chilling a beverage basically kills its flavours, and they never make it to your tongue correctly.

I would say that many people would be surprised and amazed if they tasted such things as Pepsi without ice, and without coming right out of the fridge.

Unfortunately, any lack of refrigeration really messes up supply chains and will eat into anyone's bottom line, so it's not a realistic goal.
by netdevphoenix | 2025-04-29 08:52:32+00:00
I believe this is how they grew and how they remain big. While smaller companies aim for managers, Oracle targets CTOs and CEOs, takes them out for expensive dinners and promises them the world. Then, they legacy handcuffed them forever. And virtually no one chooses to invest crazy amounts of money on migrating or even starting a new codebase when your company lifeblood has been poured into the Faustian Oracle machinery.
by Shacklz | 2025-04-29 08:53:00+00:00
I use Duolingo to learn French, for a few years already. It definitely can bring you up to A1/A2-levels of proficiency (at least for French), which is definitely a solid starting point to engage with the language further. In my case, I've started to take weekly evening-courses. If I started another language, I probably would start again with Duolingo for the super basic stuff, then start to learn vocabulary with Anki, and then start with some paid, organized course that guides me through the more complex parts.

I still use Duolingo almost daily to have some continuous language exposure, for which I still find it useful (especially as the gamification helps with staying engaged). It has its limitations but it does help me. Just to give a bit of a counterpoint; I find your statement a bit overly broad.
by WatchDog | 2025-04-29 08:53:28+00:00
Ah right. I did read it, but I didn't comprehend it properly, because she also happened to also only choose 12 colors for the palette.

I see now, she's saying that it's 12 bit, because instead of using a 6 digit hex code, she is using 3 digit hex codes, at four bits per hex value, it's 12 bits.
by virtualritz | 2025-04-29 08:53:58+00:00
It sounds to me that it may have been better to limit performance-critical parts to Rust and write the actual game in something like Lua (embedded in Rust)?

That's the approach I've been taking with a side project game for the very reason alone that the other contributors are not system programmers. I.e. a similar situation as the author had with his brother.

Rust was simply not an option -- or I would be the only one writing code. :]

And yeah, as others mentioned: Fyrox over Bevy if you have few (or one) Rust dev(s). It just seems Fyrox is not on the radar of many Rust people even. Maybe because Bevy just gets a lot more (press) coverage/enthusiasm/has more contributors?
by Aanok | 2025-04-29 08:54:03+00:00
I think at the very least individual widgets should wait to be fully initialized before becoming interactable. The amount of times I've, say, tried to click on a dropdown menu entry just to have it change right under my cursor making me click on something else because the widget was actually loading data asynchronously, without giving me any notice to the fact at all, is frankly ridiculous.

It's the right thing to do to load resources asynchronously in parallel, but you shouldn't load the interface piecemeal. Even on web browsers.

I'd much rather wait for an interface to be reliable than have it interactive immediately but having to make a guess about its state.
by broodbucket | 2025-04-29 08:54:09+00:00
The issue is that understanding what is actually exploitable and what is actually a part of your threat model is difficult, it's a pretty high bar, a bar not met by most people that typically have decision making power around a product or service. It's a huge problem but it's not particularly easy to fix so it's pretty obvious why the industry has taken the route of deciding certifications and scans = security and that vulnerabilities only exist if they have a CVE assigned, and anything with a CVE assigned must be an actual problem.
by axelMI | 2025-04-29 08:54:10+00:00
The actual webgl engine is packaged as a separate library https://github.com/xdadda/mini-gl

As for the more complex UI modules (ie crop) in theory it shouldn't be too difficult to build a vanilla-js separate module, but not sure I'll have the time as these kind of solutions need to take into account so many use-cases and edge-cases that they easily become a nightmare to maintain ...
by gpderetta | 2025-04-29 08:54:27+00:00
Unfortunately Stepanov and the STL are widely misunderstood. Stepanov core contributions is the set of concepts underlying the STL and the iterator model for generic programming. The set of algorithms and datastructures in the STL was only supposed to be a beginning, was never supposed to be a finished collection. Unfortunately many, if not most treat it that way.

But if you look beyond, you can find a whole world that extend the stl. If you are not happy, say, with unordered_map, you can find more or less drop in replacements that use the same iterator based interface, preserve value semantics and use the a common language to describe iterator and reference invalidation.

Regarding your specific use case, if you want intrusive lists you can use boost.intrusive which provides containers with STL semantics except it leaves ownership of the nodes to the user. The containers do not even need to be lists: you can put the same node in multiple lists linked list, binary trees (multiple flavors), and hash maps (although this is not fully intrusive) at the same time.

These days I don't generally need boost much, but I still reach for boost.intrusive quite often.
by Cyphase | 2025-04-29 08:54:37+00:00
I think I see where you're coming from, but then, is the travel you were asking about in tune with working on myself? Perhaps.

I've never had to go to a tech conference/meetup for work; the ones I've gone to have been social/community/fun events for me.

I was at North Bay Python last weekend and I'm going to PyCon US in May.
by librasteve | 2025-04-29 08:55:44+00:00
i’m working on http://harcstack.org

Combining HTMX with raku Air, Red and Cro so that you can just build websites the right way™.

Here is an entire (minimal) website…

use Air::Functional :BASE; use Air::Base; sub SITE is export { site page main p "Yo baby!" }
by nkurz | 2025-04-29 08:55:56+00:00
I think there might be more to it. While it might just be me, I think Kagi could use some improvement here. I've been using Kagi with Safari on Mac for about a year, and never got the search extension to work consistently. It would sometimes give me Google, and sometimes Kagi. And sometimes it would give me one site then switch to the other after a several second delay.

Eventually I gave up and uninstalled their extension. I switched to using StopTheMadness to do the redirects instead, and am having much better luck. I did switch from redirecting Google to redirecting Ecosia at the same time, and this might be the difference, and while I'd fully agree that Safari doesn't make it easy, but I think the base problem is that their browser extension just doesn't work that well.

(If you are familiar with both, you will understand that switching _to_ StopTheMadness for a better interface is pretty high in irony!)
by sethammons | 2025-04-29 08:56:01+00:00
In each of the dynamic frameworks I have worked in, besides lacking types, the biggest problem is domain separation.

In 4 out of six large, dynamic code bases I have worked in, everything becomes spaghetti. This joins with that which n+1s with yadda yadda. You end up with dependencies that prevent billing options because you can't separate the billing structure from the user model from the product table. Queries start joining and joining and you get monstrosities of queries. The beefy postgres db gets bogged down at less than 2k rps. Everything gets slower. Then the org spends millions and millions on domain separation and breaking teams away from another. Builds get slower. Competing styles of decomposition litter the codebase. Changes take days to release. It takes Herculean effort and heroics to fix a dynamic code bases that grows, eating at growth when it should be compounding.

"But it let us get here, where we can afford to do those changes." Maybe. It is the road less taken's point - you can sell yourself that the dynamic code bases allowed for the success. But that doesn't say the alternative wouldn't work.

</insomnia thoughts>
by netdevphoenix | 2025-04-29 08:56:27+00:00
> young people not taking an interest in COBOL and Mainframes

It is more like young people not wanting to:

- throw their careers out of the window by pigeonholing themselves into zombieware tech

- experience high levels of stress trying to debug code older than their parents, writing code that can't be unit tested and pushing said code to production
by prmph | 2025-04-29 08:56:33+00:00
Nope, some superficially similar technical things are founded on very different concepts from other technical things. For example, grokking a functional language requires a whole different mental model than for an imperative language.

Also, remember that you could pick up a new language and start to dabble in it after a few days, but teaching it, ah, that requires much more than using it . Usually teaching something requires a much deeper understanding than just using it.
by herbst | 2025-04-29 08:56:41+00:00
I've spent a few hours reading and installing random software I never heard of before to get my windows machine into the basic state of "I can boot it without getting heavily triggered"

- Half of each boot time was wasted for a copilot 360 dialog. On every fucking boot, no copilot no office installed. Or rather copilot installed itself without notice and started to spam me

- In several places the OS would show me "news" like death messages, war updates and economy details. Definitely far from a productive environment and honestly heavily triggering, I don't read news anywhere but my PC is full of it and there is no option to disable? What about kids?

- I have updates or a broken system about every second time I boot the PC. I know it's because I just cut the power, but I hate when it asks 3 times if I want to actually shut down (and then still breaks it, or never actually shuts down)

- I constantly end up in a variety of login screens that want me to login to an Microsoft account I don't have and want

- There are soooo many ads. I've been on Linux for years, instead of traditional TV I almost always stream with ad blocker. The country I live in isn't plastered with Ads either. But this shithole of operating system is. It literally pops up ad notification above apps on default.

If anyone wonders most problems where solved with "ShutUp10" others with chatGpt and regedit. It was actually pretty hard when you have no idea about this OS and it's dark patterns.

On my Linux machines I don't even change the wallpaper, but windows defaults are unbearable and upright productivity killers
by muzani | 2025-04-29 08:56:48+00:00
There's projects like Cara which are vehemently the anti-AI Instagram. Steam also blocks AI projects unless you can prove the AI images were ethically trained. Itch.io is a bit softer and requires a declaration of AI use so some groups can filter them out.

There's not that many and it seems it mostly involves the art community. There's also different levels of non-adoption.
by karlgkk | 2025-04-29 08:57:27+00:00
> homebrew always was always somewhat equal to piracy.

FWIW the price performance ratio of older consoles was better than what you get today. It was impossible to find a high definition video player for under $1000, except for the Xbox. People were more motivated to do real, non-piracy homebrew.

Today, you can buy a raspberry pie for $40. I think that must have something to do with the fading of homebrew.
by timonoko | 2025-04-29 08:58:19+00:00
Hey Grok, Can you write the simplest recursive fibonacci-generator in COBOL?

IDENTIFICATION DIVISION. PROGRAM-ID. FIBONACCI. DATA DIVISION. WORKING-STORAGE SECTION. 01 NUM PIC 9(10). 01 RESULT PIC 9(10). PROCEDURE DIVISION. MAIN-PARA. MOVE 10 TO NUM CALL 'FIB' USING NUM RESULT DISPLAY 'FIBONACCI OF ' NUM ' IS ' RESULT STOP RUN. IDENTIFICATION DIVISION. PROGRAM-ID. FIB. DATA DIVISION. LINKAGE SECTION. 01 N PIC 9(10). 01 FIB-RESULT PIC 9(10). PROCEDURE DIVISION USING N FIB-RESULT. IF N <= 1 MOVE N TO FIB-RESULT ELSE COMPUTE FIB-RESULT = FUNCTION FIB(N - 1) + FUNCTION FIB(N - 2) END-IF GOBACK. END PROGRAM FIB. END PROGRAM FIBONACCI.