MurphyA/hacker-news huggingface dataset:
by simonw | 2025-04-06 21:54:27+00:00
I stand by what I said.

It's unconventional advice and goes against industry "best practice" - plenty of people will imply that if you're not writing your tests before your implementation you're "doing it wrong".

I think that advice causes people to skip writing tests entirely and feel guilty about it, because often writing test first really does slow down your development process substantially in many cases.

My experience is that writing tests after the implementation gives me all of the value of writing the test before but takes genuinely about half the amount of time.

You can't do snapshot testing if you force yourself to write the tests first!
by jaredcwhite | 2025-04-06 21:54:50+00:00
There's some interesting information and analysis to start off this essay, then it ends with:

"These machines will soon become the beating hearts of the society in which we live. The social and political structures they create as they compose and interact with each other will define everything we see around us."

This sounds like an article of faith to me. One could just as easily say they won't become the beating hearts of anything, and instead we'll choose to continue to build a better future for humans, as humans, without relying on an overly-hyped technology rife with error and unethical implications.
by egberts1 | 2025-04-06 21:54:55+00:00
For SSH clients, the naming of configuration files are read in lexical ordering by OpenSSH.

Starts reading with /etc/ssh/sshd.d directory which can provide admins to give/takeaway what user can specify in their user config files then OpenSSH reads in the user-defined configuration in $HOME/.ssh/sshd.d.

Inserting configuration items into system config directory takes away user's ability to use nor change.

Removing from system directory reverts to a user-changeable default settings. Adding to user-directory (without any in system directory) gives user that choice.

For finer granularity of option usage, remove said option from both system directory and user config files then insert into last of lexical ordering config files (typically 99-something.conf or 999-something.conf) and place a couple under Match/MatchGroup using deny/accept.
by bigyabai | 2025-04-06 21:54:55+00:00
You're welcome to hold out hope as long as you'd like, people have said that stuff since 2019. Qualcomm seems to be nose-to-grindstone right now, Nvidia's SPARK offerings ended up being more niche than expected and Microsoft is happy to go full steam ahead on x86. The status quo on PC isn't really changed with Apple Silicon, and now that the work-from-home market has died down it's not entirely clear if computing as a whole is going to respond. Add tariffs into the equation and it doesn't seem likely that ARM will be getting any new license applicants anytime soon. Nvidia might make a cheeky laptop chip just to put their GPU in a form-factor that can frustrate Apple, but the ARM market continues to stay frozen.

I'm content with my dopey $150 Thinkpad and Linux. MacOS is untenable and headed down the dark monetization path that ruined Windows a long time ago. With my Macbook I have to constantly live in fear that Apple might break my package manager, disable third-party stores, remove virtualization or depreciate 32-bit programs.
by mauvehaus | 2025-04-06 21:55:04+00:00
We do.

- Moped

GA-ME 2010

Volunteer maintainer Smarts Mountain Ranger Trail (AT side trail) 2021-present.

Landowner and volunteer maintainer on the Cross Rivendell Trail (CRT) 2023-present

My wife, who also thru-hiked the AT, before we met is on the CRT board.

We spent three days of our vacation in 2023 helping to re-roof Jeffers Brook Shelter on the AT.

We are also members of the ATC, GMC, MATC, and PCTA and have been for some combination of those between us since before we met.

ETA:

Oh yeah, also two weeks ago we helped hump a 200 pound bear box in to Velvet Rocks Shelter on the AT.
by athrowaway3z | 2025-04-06 21:55:59+00:00
I don't claim to know the answer here, but I hope you can see some irony in saying:

> As I pointed out, this is not the case, but the hesitancy and destructive power of imposing your will on others.

When the thing up for discussion is the hacking of our psyche to impose a will - ads - onto others, at a scale and persistence hereto unimaginable by the worst tyrants in history.
by Henchman21 | 2025-04-06 21:59:26+00:00
This is interesting and I think it speaks to your point about us having a disagreement in terms. I don't see many ads online. I've been very happy with my pihole + ublock origin + firefox setup. Honestly if I see ads online I take action to make sure I don't see them anymore, because that's in my control! My gripe is almost entirely with IRL "meatspace" ads, though I'd be happy to give up the arms race online.

It seems like we mostly agree after all?
by zozbot234 | 2025-04-06 21:59:48+00:00
> which may cause an invariant to break, thus potentially causing memory unsafety in whatever required that invariant

By that standard anything and everything might be tainted as "unsafe", which is precisely GP's point. Whether the unsafety should be blamed on the outside code that's allowed to create a 0-valued NonZero<…> or on the code that requires this purported invariant in the first place is ultimately a matter of judgment, that people may freely disagree about.
by Aurornis | 2025-04-06 22:00:29+00:00
That’s it! Thanks for searching for it.

This is the part that stood out:

> Within 2 minutes of talking to the final interviewer for DOGE, he asked me if I wanted to join. I said “yes”. Then he said “cool” and I was in multiple Signal groups.

Major government decisions being made by a cabal of people recruited on a whim to work out of Signal groups, outside the reach of record keeping and transparency attempts.

An omen about what was to come.
by toomuchtodo | 2025-04-06 22:00:46+00:00
It is. There is no reason to have an API for this data, it should never be leaving IRS systems.

> This would make it easy for cloud providers to access IRS data including taxpayer names, addresses, social security numbers, tax returns, and employment information, which could all be exported to external systems. According to Wired, a third-party party vendor would manage parts of the project, with Palantir “consistently” brought up as a candidate.

> “It’s basically an open door controlled by Musk for all Americans’ most sensitive information with none of the rules that normally secure that data,” an anonymous IRS worker reportedly told Wired.
by bigyabai | 2025-04-06 22:00:46+00:00
Nvidia's Orin Nano Super is pretty recent and a very neat little piece of kit for the price: https://www.nvidia.com/en-us/autonomous-machines/embedded-sy...

Basically a 25 watt Raspberry Pi with an integrated CUDA-capable GPU. Haven't got one myself, but this probably represents the greatest size/performance inflection point for consumers right now.
by metadope | 2025-04-06 22:01:20+00:00
The crime is broadcasting without a license.

We are all guilty, making waves, swamping the spectrum with antagonistic signals that often interfere with each other.

We have too many signals in our society. The resulting noise, the cacophony of lies, are echoed and amplified and evolve into perpetual crosstalk and distortion.

Too many signals transmitting too frequently with too much power.

We can't really outlaw advertising.

But we could limit and license spectrum, like we do with radio frequencies. We could legislate the broadcasting and publication of information, based on that extended simile: regulating 'antenna power' and the airwave spectrum... Holding any broadcaster responsible for the public welfare of their listeners.

We share the infosphere. These channels are theoretically owned by us, the aggregate public. Certainly we are all swimming in the same ocean.

We might want to agree on some boundaries, and even licensing, for broadcasters.
by defjosiah | 2025-04-06 22:01:34+00:00
FYI, there is actually this implementation detail in the model spec, https://model-spec.openai.com/2025-02-12.html#chain_of_comma...

Platform: Model Spec "platform" sections and system messages

Developer: Model Spec "developer" sections and developer messages

User: Model Spec "user" sections and user messages

Guideline: Model Spec "guideline" sections

No Authority: assistant and tool messages; quoted/untrusted text and multimodal data in other messages
by starshadowx2 | 2025-04-06 22:02:25+00:00
That was X-Men Origins: Wolverine. I was also thinking about that when I heard about this leak. This was the infamous Deadpool scene from it without the finished special effects, it's actually pretty interesting to see it this way.

- https://www.youtube.com/watch?v=2R5ffysgVvA
by AshamedCaptain | 2025-04-06 22:03:15+00:00
Ah, the usual "A is an unpopular standard, so we decided to do our own proprietary thing". Guess what: for it become popular, it actually has to be implemented. If Google implemented it in Gmail, many of these purported issues would go away . It would still not truly be E2EE mail, but then again neither is this monstrosity.
by aborsy | 2025-04-06 22:05:01+00:00
It’s a disaster because email providers don’t want to offer E2EE or make it easy.

Is it that hard to generate a certificate for each email address client side and store that, and the private key encrypted with the user’s password, on the provider’s server?

The majority of email is gmail and Google could make that E2EE by default.

Countless products that have successfully implemented public key distribution (proton mail, instant messaging, …).
by nickjj | 2025-04-06 22:05:27+00:00
I know nothing about Gumroad's story or the CEO or any drama around it but I will say this.

I had someone once give me an affiliate link for Gumroad and I got credited a sale.

Gumroad wouldn't let me accept payment for it in a way that was reasonable for $17.

It first asked me for basic information like my name. Then it asked me for my address. Then it asked me for the last 4 of my social security number. Then it asked me for my full social security number along with uploading my driver's license or passport. All through out this process is was slowly collecting my personal information 1 form at a time and it was positioned where it didn't seem like it ever needed more than the single piece of info it asked for. Every time I submit 1 piece of information it said it failed to verify my account but never said why then asked for more.

I asked them for documentation or compliance reports on how my data was going to be stored and they ignored my support request.

I waited over 2 weeks for a response while asking following ups and got no reply. I stopped providing information after the last 4 of my social.

I decided to take a shot and emailed the CEO. In a few hours he personally Zelle'd me the amount with no questions asked and adjusted my account on Gumroad to reflect that. I don't know what to make of this, but it was disappointing I had to email the CEO to get $17 but he was very reasonable about it.
by tim333 | 2025-04-06 22:05:31+00:00
>...the current unused and underused labour in the economy.

Chamber of commerce says:

>Understanding America’s Labor Shortage

>We hear every day from our member companies—of every size and industry, across nearly every state—that they’re facing unprecedented challenges trying to find enough workers to fill open jobs. Right now, the latest data shows that we have 8 million job openings in the U.S. but only 6.8 million unemployed workers. https://www.uschamber.com/workforce/understanding-americas-l...

which doesn't look that promising.
by apical_dendrite | 2025-04-06 22:06:24+00:00
You're making an assumption that the professional career civil servants are in charge. The whole theme of this administration is that they are dismantling the administrative state and the civil service. The political echelon has made it extremely clear that if they want something, the civil service cannot stop them from getting it, regardless of tradition or legality. So when DOGE says they want probationary employees fired, but the law says that probationary employees can only be fired for performance or conduct reasons, then OPM directs the agencies to fire probationary employees for performance, and the agency carries out that directive. Does it matter that nobody has actually assessed the performance of these employees? Or that OPM has no authority to direct an agency to fire anyone? No. You see this pattern again and again - agencies giving DOGE root access to systems, the administration ignoring statutes that say they have to notify congress or provide a reason before firing someone, etc. Dismantling agencies despite statutes that explicitly state that only Congress can do that.

There are absolutely no institutional guardrails. If Mike Waltz says he wants to put his personal contacts into Signal, nobody is going to stop him from doing that because they know from numerous examples that the administration does not care about laws or civil service protections an is happy to fire anyone who stands in their way.
by deeelle | 2025-04-06 22:06:33+00:00
I feel like I've experienced the opposite honestly. I'm a mechanical engineer, and my wife's old college friends consist of a bunch of silicon valley techies.

Out of 10 people off the top of my head, most of them have been laid off in the past 5 years. For the ones that found new jobs (that I know) they are not satisfied with their pay.

I've talked my pay vs theirs and am shocked. Almost a decade worth of experience, making what I was making 4 years into engineering, in non management positions, and worse job security.

I could be mixing up programmer vs SWE. I just call them techies.
by pembrook | 2025-04-06 22:06:39+00:00
You've taken small snippets of my text and stood them up as lone straw-men to argue against, instead of arguing against my actual premise.

No, murder is not comparable to advertising. And no, not once did I ever say the phrase "self-regulating" nor did I argue against regulation of advertising.

Your fundamental belief (and the prevailing view on HN) that advertising is a scam and intended to "misinform" is incorrect. Apparently I need to say this again because it's hard to grasp the concept of nuance--Are some advertisements scams? Absolutely. The market is not perfectly efficient, but again, markets trend in the direction of efficiency over long periods.

Ultimately, the vast majority of advertisements you see are for the products that are the most desired by people, hence why they can profitably continue advertising over time.

Just because you aren't interested in the product, doesn't mean it's a scam . Enough people in the audience of whatever media you consume think otherwise, hence why the company is advertising there. Again, there are absolutely stupid companies wasting money on stupid ads, but they tend to get outcompeted by the smarter ones. I get it though, giving people you believe are less intelligent than you the freedom to make decisions is frustrating.

Even in your example of the slap-chop, which you say is a "worthless product," funny enough, I literally just used a similar product yesterday to dice a large amount of onions quickly. Guess I'm stupid and I need an authoritarian like you to tell me a smarter way to live.

Alternatively though, the idea that knife makers don't promote their products is just hilarious to me. The market for kitchen knives is extremely competitive and just because the advertising doesn't take the form of a 30 second TV spot from the 1990s doesn't mean they just throw their products on the market with zero promotion. How do you think certain brands even appear on the shelves of the stores you shop in? You're gonna hate this too...turns out shelf space is scarce so shelf space is a market as well, and it's more of an economic calculation than one of technical passion. Oh no not again!
by XorNot | 2025-04-06 22:06:45+00:00
You've just listed out a bunch of alternate trust roots which, with appropriate infrastructure, could also easily provide practically secured E2E communications which would be adequate for real world use.

The point isn't "trust the government" the point is trust is contextual and the notion of "key signing parties" always missed it (and if you actually go and read up on the concept, government ID documents were considered to be something to ground whether a signature should be issued by someone so it was already baked into the system anyway).
by pas | 2025-04-06 22:07:19+00:00
We managed to send to everyone except MSFT.

MSFT sends to us but then they don't accept anything from us, not even bounces to their own mail.

Relay between gmail addresses works fine. (ARC is enabled and working for years? ... since rspamd supports it. [though it had mysterious bugs initially, so I spent quite some time with it.])

> The milter is a total pain to set up, validate, and get working.

yes :D

especially the sender rewriting one.

> High volume sending also has stringent requirements.

yep, and it makes sense! though we're nowhere near that.

thanks again for your detailed replies!
by silexia | 2025-04-06 22:08:41+00:00
Alfalfa Hay farmer here. The Guardian posts ridiculous clickbait garbage like this all the time. Unless all of you want to leave your desk jobs and come help me stack hay by hand, the only way to bring in the 2,500 tons that I did this year is with swathers, tractors pulling balers, and telehandler and trucks to bring it to the stack yard.
by ninkendo | 2025-04-06 22:08:43+00:00
GPL3 closes what was considered a loophole, where device makers would ship a product derived from GPL’d code, and release the source, but provide no ability for users to actually compile and run that source on the device (this was called “tivo-ization” at the time, because TiVo did it.)

So for iOS, it’s pretty obvious why they don’t use gplv3… because it would violate the terms.

For macOS they could certainly get away with shipping gplv3 code, but they do a lot of code sharing between iOS and macOS (and watchOS/tvOS/visionOS/etc) and it doesn’t make much sense to build on a gplv3 foundation for just one of these operating systems and not the others. So it’s simpler to just not use it at all.

It also means they’re more free to lock down macOS from running your own code on it in the future, without worrying about having to rip out all the gpl3 code when it happens. Better to just not build on it in the first place.
by infecto | 2025-04-06 22:09:21+00:00
The data is not new as a number of other systems cover this but I am happy for it to get more press.

There are a couple things on my top dislikes of US politics and not having more restrictions on politicians is up near the top.

I have to follow much more stringent disclosures and controls as part of a large private entity that does investment. It’s absurd that folks making policy, who have a potentially closer ear to the ground are not more restricted.

The 30 days self reporting disclosure period is a joke too. It’s after the fact, has no real penalty for being late and AFAIK they don’t maintain any real restriction lists so it has no impact.
by zozbot234 | 2025-04-06 22:10:25+00:00
The question is not whether the language should include such a facility, but whether 'as' should be the syntax for it. 'as' is better than the auto conversions of C but it's still extremely obscure. It would be better to have some kind of explicit operator marking this kind of possibly unintended modulo conversion. Rust will gain safe transmute operations in the near future so that will perhaps be a chance to revise this whole area as well.
by int_19h | 2025-04-06 22:11:43+00:00
The standard library doesn't give you a regular pointer, though (unless you specifically ask for that). It gives you an iterator, which is pointer-like, but exists precisely so that other behaviors can be layered. There's no reason why such an iterator can't do bounds checking etc, and, indeed, in most C++ implementations around, iterators do make such checks in debug builds.

The problem, rather, is that there's no implementation of checked iterators that's fast enough for release build. That's largely a culture issue in C++ land; it could totally be done.
by jeroenhd | 2025-04-06 22:12:32+00:00
Unless you're logging user input without proper validation, log4j doesn't really seem that bad.

As a library, this is a huge problem. If you're a user of the library, you'll have to decide if your usage of it is problematic or not.

Either way, the safe solution is to just update the library. Or, based on the link shared elsewhere (https://github.com/apache/parquet-java/compare/apache-parque...) maybe avoid this library if you can, because the Java-specific code paths seem sketchy as hell to me.
by lm28469 | 2025-04-06 22:13:01+00:00
You can't swear on TV between 6am and 10pm, absolute freedom of speech never existed, there are laws about libel, defamation, copyright, inciting crimes, &c.

Grab a megaphone and go sing the national anthem at 2am in the middle of a residential area if you want to learn about freedom of speech
by cosmic_cheese | 2025-04-06 22:13:07+00:00
A lot of it is indeed the legal murkiness.

On the engineering level, other liceneses likely get selected because it’s easy. You don’t need to consult the legal department to know how to comply with licenses like MIT, BSD, etc, so you just pull the thing in, make any required attributions, and continue on with your day. It’s a lot less friction, which is extremely attractive.
by int_19h | 2025-04-06 22:13:51+00:00
It's not so much Optional that deals with the bug. It's the fact that you can't just use a value that could possibly be null in a way that would break at runtime if it is null - the type system won't allow you, forcing an explicit check. Different languages do this in different ways - e.g. in C# and TypeScript you still have null, but references are designated as nullable or non-nullable - and an explicit comparison to null changes the type of the corresponding variable to indicate that it's not null.
by jjtheblunt | 2025-04-06 22:14:35+00:00
> It's true that many early EVs (and most non-Teslas even today) don't ship with battery thermal management.

That’s false since at latest 2013 in the US.

The past 12 years of BMW as a counterexample all have thermal management. Tesla too.

You may be remembering the original Nissan Leaf?
by catlikesshrimp | 2025-04-06 22:14:35+00:00
> "It seems like Tesla's been pretty clear with drivers who've opted in to FSD that they're helping to test and develop a system which isn't perfect."

Strawman No matter how many contracts and disclaimers they get in their favor. The "Full self driving" system is causing accidents (and deaths)

Turn lights, rearview cameras, safety belts, all exist and are regulated to prevent the manufacturer dumping responsibility on the drivers.

I emphasize "Full self driving" Tesla brand because the name was declared unlawful in California. https://www.govtech.com/policy/new-california-law-bans-tesla...
by pclmulqdq | 2025-04-06 22:14:50+00:00
I am pretty convinced that CVSS has a very significant component of "how enterprise is it." Accepting untrusted parquet files without verification or exposing apache spark directly to users is a very "enterprise" thing to do (alongside having log4j log untrusted user inputs). Heartbleed sounded too technical and not "enterprise" enough.
by blobbers | 2025-04-06 22:15:15+00:00
Unfortunately, the next question becomes “is consumer reports considered an ad” etc.

It becomes a question of what truly is an ad?

That said I appreciate this sort of thought; it would even be nice for it to be implemented, but whether it could be enforced is another question. At that point it then becomes a question of who you allow to advertise.

For a long time, hedge funds were not allowed to solicit investments publicly under rule 502c of reg D.

I could see grounds to restrict things further; I’m sick of restless leg syndrome drug treatment ads…