MurphyA/hacker-news huggingface dataset:
by ang_cire | 2025-05-11 12:24:12+00:00
I understand the arguments for the current system, I just don't agree that disruption is worse than loss of agency. Your position inevitably ends up arguing for a paternalistic approach, as you are when you say

> It eliminates the difficult choice customers would otherwise face - either disrupt their service entirely or knowingly remain vulnerable.

You decided they are better off not having to make that choice, so you make it for them whether they like it or not.

In fact, you made the worst choice for them, because you chose that they'd remain unknowingly vulnerable, so they can't even put in temporary mitigations or extra monitoring, or know to be on the lookout for anything strange.

> Most organizations simply can't afford the downtime from abruptly cutting off a service, nor can they accept the risk of continuing with a known vulnerability.

Now this is an interesting part, because the first half is true depending on the service, but bad (that's a BCDR or internet outage issue waiting to happen), and the second half is just wrong (show me a company that doesn't know and accept that they have past-SLA vulns unpatched, criticals included, and I'll show you a company that's lying either to themselves or their customers).

> This coordinated approach minimizes disruption while still addressing the security issue - a balanced solution that protects both the security and continuity needs of end users.

This is not a balanced approach, this is a lowest-common-denominator approach that favors service providers over service users. You don't know if it protects someone's security needs, because people have different security needs: a journalist being targeted by a state actor can have the same iphone as someone's retired grandma, or infotainment system, or home assistant, etc.

I've managed bug bounty and unpaid disclosure programs, professionally, and I know firsthand that it's the company's interests that responsible disclosure serves, first and foremost.
by GuB-42 | 2025-05-11 12:24:25+00:00
Just go there without an ad-blocker and see for yourself. It is pretty bad even with an ad-blocker.

The worst part is that it wasn't always like that. When it started of as wikicities and then wikia, it was pretty good, very Wikipedia-like, which is to be expected considering its history. But it enshittified quickly as it became Fandom, all while making it hard to move the existing communities out of the platform.
by omarhaneef | 2025-05-11 12:24:30+00:00
I know you’re trying to see where the puck is headed but I think there is a lot of work between where we are and where LLMs replace 4 Junior devs.

The workflows we have are not quite right for it. Coding has always been 10% coding and 90% debugging but I think the rate at which we generate the 10% will grow exponentially.

This means that the debugging has to grow. We will generate errors at an unprecedented rate.

LLMs trained on previous errors and methods won’t catch them. They’ll be more complicated and spread out over the code.

We need new tools to visualize the code and track errors. I think what it means to be a programmer will change. More testing, thinking and less klocs.
by tomrod | 2025-05-11 12:26:10+00:00
I've seen people estimate two days of work for a manual headline content update on a mature code base they know.

No new tests, no new design, no new implementation. Literally just a single word swapped.

Turns out the engineerinng team had uncertainty with the new testing framework that was mandated, and rather than document it they blew up their velocity.

This approach bites back. When work isn't understood, people on the outside disrespect the workers.
by alexriddle | 2025-05-11 12:28:01+00:00
In the UK where I am, most standard (not budget) property policies would cover theft from an unlocked entry point.

Two main exceptions:

1 - if you are letting the property to someone else, e.g a lodger or have paying guests staying with you then this is typically excluded.

2 - if you have had previous theft claims, live in a high crime area, or you have a particularly high risk (e.g lots of valuables), the Insurer will add an endorsement that you need a minimum standard of locks and have them engaged when the property is unoccupied.

Outside of those, if you accidentally leave a door unlocked, your claim will likely be paid. The situation obviously may be different in other countries. I worked for a property insurer and saw hundreds of these claims (entry via an unlocked entry point) paid during my time there - I also saw many declined because of the above.

I suspect that over time the number of policies in the 'budget' category will continue to increase as price continues to trump everything else for most people]

edit: it is the same for the other lines I mentioned as well -e.g a cyber policy I saw recently has no conditions relating to use of MFA. It will have been factored in when writing the risk (they will have said they use it) and if it turned out it was a lie then there would be an issue with cover but if it was just a case of an admin forgetting to include an OU in the MFA group policy the claim would almost certainly be covered. Policies aimed at the SME space are much more likely to have specific conditions though.
by dvratil | 2025-05-11 12:31:19+00:00
The problem I found about the adaptors is that you can't charge your phone and listen to music at the same time.

I have an older car with an old stereo where the only external input is via jack. Worked perfectly fine with my old phone. When I got a new Samsung, I went through the hassle of trying several "combined usb-c charger and audio jack adaptor" only to eventually find out they can only work in on mode or the other, not both at the same time. I ended up throwing away my old phone holder and spending even more money on one with built-in wireless charging so I could both listen to a damn music and charge my phone at the same time while driving.
by thinkingemote | 2025-05-11 12:31:20+00:00
The Church views the person as primary, the most important, rather than the tools and applications of these tools. They see that technology and the use of technology forms people, it can literally change societies and people.

One example would be asking your buddies for a lift to the airport. Now we use an app. And then afterwards a year or two even thinking about asking your friends for a lift, or offering your friends to drive them is inappropriate and wrong. That reduces the connections between people, it reduces love.

A positive example would be the web2.0 social network, forums, message boards, communication increase. An explicit example is this submission, it's on the Vatican's website! A neutral example might be the medicine industry - new weight loss drugs improve the health of at risk people but at the cost of making them dependent on the industry and reducing personal agency in their change.

There are 2 main factors that the Church thinks wrt tech 1. Tools and technologies are not amoral, they have a moral component; against the argument of "this tech is innocent, it's how you use it". and 2. What we do, what we pay attention to, forms us. Our tools shape ourselves and the societies that we make us.

It's not anti tech, anti science or reactionary, it's pro person.
by chetansorted | 2025-05-11 12:31:25+00:00
Still using Calendly links?

Time to meet Schedo — the smarter way to get booked.

Schedo isn’t just another scheduling tool. It’s your branded, automated booking assistant built for solopreneurs and small teams.

Here are 5 reasons why people are switching from Calendly to Schedo:

Booking pages that match your brand -> Customize colors, text, meeting types — make it yours.

Built-in payments -> Get paid instantly with Stripe or Razorpay. No follow-ups.

Seamless calendar sync -> Connect multiple Google calendars and manage availability in real-time.

Works with any businesse -> Works seamless with any business type or freelancing setup

Beautiful, mobile-friendly experience -> Delight your clients with a clean, easy booking flow.

Schedo makes scheduling simple — and makes you look pro.
by dennis_jeeves2 | 2025-05-11 12:32:02+00:00
>is an indictment of the legal framework around medical devices.

Well medical devices aside, the legal framework around anything, including business, manufacture etc. is more impeding while failing to address things like environmental destruction/pollution which causes real harm. ( notice, that I did not say climate change, a separate subject).

It all makes sense when one sees it either though the lens of either corruption of more likely human stupidity - where a bunch of rules give people the comfort of being protected.
by duk3luk3 | 2025-05-11 12:32:22+00:00
There is no insurance that will insure you against your own gross negligence.

Insurance will only pay out if you can show that you have done everything a reasonable person would be expected to do to avoid the loss/damage.

> Don't take the right safety precautions and burn down a customers house - liability insurance

You mean someone burnt a customers house down /because of something like an electrical or equipment malfunction that they could not have reasonably foreseen or prevented/, right?

> Forget to lock your door and get burgled - property insurance

That seems unlikely. Compare this: https://moneysmart.gov.au/home-insurance/contents-insurance

> It's worth checking what isn't included. For example, damage caused by floods, intentional or criminal damage, or theft if you leave windows or doors unlocked.

Happy to be shown that I'm wrong but please do not give people the impression that liability insurance or property insurance will absolve them of losses no questions asked.
by neilv | 2025-05-11 12:33:48+00:00
I think one point being made is that (in this example) you would've been much less careless about shipping the vulnerability, if you knew you'd be held accountable for it.

With current practice, you can be as sloppy and reckless as you want, and when you create vulnerabilities because of that, you somehow almost push the "responsibility" onto the person who discovers it, and you aren't discouraged from recklessness.

Personally, I think we need to keep the good part of responsible disclosure, but also phase in real penalties for the parties responsible for creating vulnerabilities that are exploited.

(A separate matter is the responsibility of parties that exploit the vulnerabilities. Some of those may warrant stronger criminal-judicial or military responses than they appear to receive.)

Ideal is a societal culture of responsibility, but in the US in some ways we've been conditioning people to be antisocial for decades, including by elevating some of the most greedy and arrogant to role models.
by okanat | 2025-05-11 12:34:20+00:00
Win32 ones don't only new WinUI ones do (similar to GTK2 vs GTK3+). You need to add that coloring manually. You can query the dark mode with Win32-only API[1] but you need to make your own styles or you can use undocumented APIs (that can break anytime) that Microsoft uses internally for the applications shipped with Windows[2]

[1]: https://learn.microsoft.com/en-us/windows/win32/winmsg/wm-wi... [2]: https://github.com/ysc3839/win32-darkmode
by jsheard | 2025-05-11 12:36:07+00:00
Courier New is pretty dated, you could consider using the Monospace Code stack from https://modernfontstacks.com to take advantage of newer system fonts. Your current font stack is actually broken as well, generic families like monospace shouldn't be quoted. Quoting it makes the browser look for a font literally called "monospace" instead of using its default monospace font.
by Nihilartikel | 2025-05-11 12:36:10+00:00
Man, I had a hand-me-down Atari 800 with 48k. It was great, but I coveted the c64 with its crunchy cool sid sounds.

Then I had a 486 vga pc that could barely scroll a game at 60fps (except for ones like jazz jackrabbit with its hardware scrolling wizardry) and I coveted the Amiga with its smooth scaling and rotation and 4 channel samples.
by rantingdemon | 2025-05-11 12:37:07+00:00
It is a pity that Lazarus and FPC seems to be so hard to deploy. It is of course an open source project, so its understandable.

Lazarus and FPC is a great project. Building GUI apps like with Lazarus does not have an easy alternative, from which I'm aware.

I have tried it now on my Mac, and I have to jump through some hoops to get it going. Again a pity, its a great option.
by ang_cire | 2025-05-11 12:37:28+00:00
> But now he knows, so he goes for it and stabs someone.

Except his old knife he already had with him isn't made for exploiting the flaw in the vest, so it doesn't work. He needs to go home and build a new one, and the people in the mall can go home before he comes back, now that they know their vests are flawed. Otherwise, someone who comes in and is aware of the flaw when the users are not, can stab everyone, and they'd have no clue they were vulnerable.

In real-world terms, the kind of mass-exploitation that people use to fear monger about disclosure already happens everyday, and most people don't notice. The script kid installing a monero miner on your server should not be driving the conversation, it should be the IC spook recording a journalist/ dissident/ etc.

> Just that, in the world afterwards, you must take responsibility for everyone knowing, including people who did not know before and abuse that knowledge.

This is just a generalized argument for censorship of knowledge. Yes, humans can use knowledge to do bad things. No, that does not justify hiding information. No, that does not make librarians/ researchers/ teachers responsible for the actions of those that learn from them.
by fragmede | 2025-05-11 12:41:39+00:00
but also because the link used has a bunch of tracking clumsily added, which further complicates scanning the thing. Compare the visual complexity of the QR code for HTTP://INSTAGRAM.COM/USERNAME (all caps is important*) vs the cutesy one the app generates.

* https://shkspr.mobi/blog/2025/02/why-are-qr-codes-with-capit...
by mbelen | 2025-05-11 12:41:59+00:00
I'm Max - iOS developer wrestling with App Store Connect for a good part of my career both for companies and my own iOS apps.

I talked with other developers and companies I realised they hit the same walls - no straightforward way to get simple metrics like revenue per install by country, or measure conversion rates without getting lost in clunky dashboards. I found myself forced to build a bunch of internal tools just so I could avoid the pain.

While services like RevenueCat can show a lot of data and is easier to use, I never loved the idea of getting locked into someone else's billing platform, especially given how simple storekit? makes it to implement natively.

Now I've built a product that pulls data straight from the App Store with no need for any SDKs. I've also teamed up with a few awesome devs and we've added real-time notifications for trials and payments, customer profiles and linking to PostHog and Amplitude.

It's open to try now for free and I'm curious if you share the same
by viiralvx | 2025-05-11 12:42:18+00:00
It's pretty cool that QR codes were created by a Japanese automotive company in order to address the limitations of scanning bar codes, mainly that the scans only worked with a certain orientation. [1]

That being said, I believe bar codes have the UPC number below it in case the code itself is damaged. Could QR codes have a similar textual encoding to identify them? And would that even fit legibly in the square?

[1] - https://www.microsoft.com/en-us/microsoft-365-life-hacks/pri...
by bob1029 | 2025-05-11 12:42:50+00:00
Tech employment in 10 years is going to favor candidates who know how to get the job done with the fewest moving pieces.

The current era of making the most complicated fucking thing possible is clearly nearing its conclusion. The writing is on the wall with the now weekly conversations about vendor and dependency management crises.

One might say to use something with more batteries included or whatever. I'd go 5 steps further - have you solved the problem outside the computer yet? Do you understand the domain model? Do you understand why the customer wants to pay for any of this bullshit in the first place?

I think that's approximately what it's going to look like. Excel, bash and powershell replacing kubernetes clusters.
by squidbeak | 2025-05-11 12:42:54+00:00
There's a lot of hope in the other comments that senior engineers will survive. And who knows, maybe something will occur to slow AI development. Or maybe we'll hit some hard limit we can't anticipate. Maybe society will even lurch left and act to protect jobs. But if none of these things happen, there will be a day when senior engineers find themselves unemployable, like pretty much every other worker.
by pas | 2025-05-11 12:43:14+00:00
There's no magic number of people that we have to have. The fertility rate will continue to fluctuate depending on the circumstances. Currently the balance of incentives-disincentives regarding having kids in many places is simply favoring the "not" side.

Having a smaller population with advanced automation technology is completely okay. And if a society feels it really values having more people around through births (and not through migration for example) they can alter policies to support families. (For example see how the child tax credits policy is not made permanent, also it's ridiculously small compared to cost of living and cost of child rearing. Then there's the cost of education, cost of having a bigger house, then there's the whole fucking problem of logistics, which is extremely costly in the US [because streets are not kid safe] https://news.ycombinator.com/item?id=43364761 )
by benoau | 2025-05-11 12:43:23+00:00
I think over the next decade many countries are going to flex their autonomy and replace "Big Tech" with their own tech so there will certainly be opportunity in the EU, in UK/AU/NZ/CA, in Latin America. The whole supply chain from embedded software to drivers and operating systems and user-facing software and platforms is going to be under more scrutiny than ever.

One thing that is constant is the billions of people using the internet and their buying power, so I think there will also be tremendous opportunity for people able to release good software while mid+large+huge tech companies focus on eliminating the expensive tech salaries that built and sustain their fortunes. Their software is going to become shittier until LLMs get much better.
by sizzle | 2025-05-11 12:45:44+00:00
What happens when search engines start displaying AI generated/human seasoned content? Everything written online is being seasoned by ChatGPT et al. and human behavior is being conditioned to think by its highly convincing outputs.

Why should I trust an ad supported search engine with the bastardized search experience displaying top rank results by highest paying advertiser and now mixing in AI slop pretending to be human written for the foreseeable future. The future looks bleak..

I rather create an AI agent to do my Google search for me and cut out the ad links results bias and further synthesize the results for me in human readable and interrogabal format.
by nopelynopington | 2025-05-11 12:45:59+00:00
No, and I'm not arguing with the point that they pose a risk to human dignity, because I wholeheartedly agree with that. I'm taking issue with the idea that LLMs are an intellect, or intelligent. Your example of chess engines is absolutely on point. LLMs don't think any more that chess engines do, but their chess game is language
by AndrewKemendo | 2025-05-11 12:46:16+00:00
So that means the best tool is a 2038 test environment - which people then install their application(s) and test it e2e to see what the impacts are.

However, I’m not sure how you make a 2038 test environment

It assumes that the OS/Kernel etc… are defacto frozen to 2025 or whatever increment until 2038

What was the y2k solution for the people that implemented those fixes in the 90s?
by shayonj | 2025-05-11 12:46:19+00:00
I like Solid Queue and the direction things are heading, but its hard to overlook the performance. A system that does tens to hundreds of thousands of jobs/s on Sidekiq + Redis, will now get bottlenecked by transactional performance with solid queue / PG - https://github.com/sidekiq/sidekiq/wiki/Active-Job#performan...

My choice of design pattern here is - Use PG (PostgreSQL) for orchestration + decision making and Sidekiq + Redis as message bus. Just can't beat the time it takes for job to get picked up once it has landed on a queue.
by n_ary | 2025-05-11 12:46:25+00:00
Isn’t it a bit suspect that that particular image benefits a special new tool about which the OP is heavily speculating?

I am very surprised that no one in HN can see the correlation of the narrative and speculations vs the absurd age thrown around only to be repeated by actual people whose image is being tarnished because the mass narrative wants them to feel powerless(first stage of wage suppression).
by frankc | 2025-05-11 12:46:25+00:00
The day to day of a software engineering job has changed and will change more depending on how advanced llms get (and all bets are off if we do get to AGI). However, I don't really think you will see a massive drop-off in employment for two reasons. First, competition is going away. If your developers are x times more productive, so are your competitors developers. I can see a bit less need in non-product companies if more domain experts are able to build their own tools, or generalized agentic tools eliminate some of the need for custom tooling.

However, I think there is a second thing that is often overlooked here. It seems the angle is always 'oh companies can replace developers' but no one seems to consider that developers can replace companies. I think you are going to see small teams of very skilled people replace able to make amazing products. There are limits to what llm's can do on their own but a skilled engineer who masters the tooling and can unblock the models and knows the techniques to keep the models productive as the codebase grows will be able to produce amazing things far beyond what they could ever produce before. I think you are going to see an explosion of new, smaller companies. I think if you are an engineer you shouldn't be gloomy, you should be excited.
by bigpeopleareold | 2025-05-11 12:47:03+00:00
I only toyed with Lazarus/Free Pascal. There was some things I couldn't get used to. Maybe time to toy around again :) I feel like mentioning a few things that helped in the past: fpcdeluxe for installing a build of fpc and lazarus and a plugin called anchordockingdsgn to get all the floating windows in one window. It would be nice if 4.0 defaulted to that. The Castle Engine Pascal tutorial was actually pretty good also (which is mentioned in another thread here.) (edit: for the plugin, I see an option in fpcdeluxe to dock all windows - so it's possible to build that plugin in initially.)
by yegg | 2025-05-11 12:48:51+00:00
Thank you for providing an example we can look into. If you have other thoughts, please also feel free to share them with me, and I'll take them back to the team. My email is in my profile if that method is preferred. Despite what some people think, we do a lot of the search results ourselves and we're constantly working to improve our search experience. We post quarterly updates to https://duckduckgo.com/updates
by fluidcruft | 2025-05-11 12:48:51+00:00
Basically when I search for API of a specific function or package docs on DDG I end up with page after page of people blogging about using them and the actual docs don't show up. So I add "!g" and the same crap is there, but the link to reference will be somewhere among the first page of results (although Goggle usually has a link to an old stale version of the docs).
by alok-g | 2025-05-11 12:49:46+00:00
>> 2025 to 2030: Collapse of knowledge work. The "KVM Rule" applies: any job you can do entirely with a keyboard, video, and mouse will be fully replaced.

Even that seems too fast. There will surely be more innovation, some unanticipated, but not that knowledge work will be all gone in five years from now.