MurphyA/hacker-news huggingface dataset:
by addaon | 2025-05-20 21:56:45+00:00
Yep. If you're generating them yourself, you'll probably want to be careful to follow the NACA method for combining camber and thickness profiles -- basically, running a circle of thickness-profile-defined diameter along the camber line and unioning the areas. The alternative (which is these days sometimes called the Riblett approach) is just to define the airfoil as the camber line plus or minus half the thickness vertically at each point -- which often leads to better airfoils for many purposes, but will disagree with available NACA data, especially w.r.t. nose radius (and thus, critical angle for airfoils which stall near the nose).

If the goal is to allow a user to compare the properties of different airfoils, there's a lot to get right to make sure they actually know what airfoils they're comparing. The alternative is to allow airfoil selection from one of these sites [1][2], which also allow a link to provide comparative analysis.

[1] https://m-selig.ae.illinois.edu/ads/coord_database.html [2] https://bigfoil.com/
by mrguyorama | 2025-05-20 21:57:15+00:00
Funny, whenever HN talks about how poor management is at managing software projects, we can recognize that doing management poorly is management's fault.

Yet whenever it's DEI, it's the fault of DEI for some manager being incompetent.

>HR didn't want any of it

Why would they? I've never seen an HR department that actually cared about outcomes. I've been in multiple companies that struggle to hire people because HR insists on being the one writing the requirements, and they blatantly fuck it up, like asking for multiple years experience in a brand new tool, or "requiring" a programming language fluency that we don't use.

Why is it DEIs fault that HR sucks at their job?

If we had this same standard for other ways HR sucks, we would have reverted to Waterfall design methods, and we would eliminate sexual harassment training since sometimes companies retaliate.

Meanwhile how quickly lots of companies are running from DEI shows they never really cared about it, and did not hire competent people to run it. Why is that DEI's fault?

Funny how this standard only applies to DEI

>it would be focused on making interviews more objective, and anonymizing as much of the hiring process as we can

It literally is in a shitload of companies. Why do you think you get to generalize from your singular experience?
by Clamchop | 2025-05-20 21:57:49+00:00
Photography mostly eliminated the once-indispensable portrait artist, among other formerly-dependable lines of work.

There's a line to be drawn somewhere between artist and craftsperson. Creating beautiful things to a brief has always been a teachable skill, and now we're teaching it to machines. And, we've long sought to mass-produce beautiful things anyway. Think textiles, pottery, printmaking, architectural adornments.

Can AI replace an artist? Or is it just a new tool that can be used, as photography was, for either efficiency _or_ novel artistic expression?
by bluerooibos | 2025-05-20 21:58:52+00:00
What do you advise? Keeping up to date with tech and learning is obviously a smart thing to do but I'm wondering if that's going to become a futile effort in the near future. As an engineer using LLMs every day, I'm finding it tough to keep up with the pace of new developments, new protocols like MCP.. the pace is wild.

And now we have agents which are going to multiply the pace of development even more.

We can stay sharp but I'm not sure there's really much we can do to stop our jobs - or all jobs, disappearing. Not that this is a bad thing, if it's done right.
by NotPractical | 2025-05-20 22:00:24+00:00
> It’s not about “all software needs to let my desktop look like a clown makeup set

Except it literally is about that? Libre software guarantees users the right to make their own modifications to it. That's basically the entire point.

https://en.wikipedia.org/wiki/Free_software

Being actively hostile towards users making and sharing modifications to your software, while still technically permitting them, probably doesn't disqualify your project as "libre" software, but it goes against the spirit of it.
by robocat | 2025-05-20 22:00:34+00:00
This feels like an advertisement:

In August 2024, the [Aisuru] botnet was rented out in subscription tiers ranging from $150 per day to $600 per week, offering attacks of up to two terabits per second. “You may not attack any measurement walls, healthcare facilities, schools or government sites,” Interested parties were told to contact the Telegram handle “@yfork” to purchase a subscription. The account @yfork previously used the nickname “Forky,”

It's unclear why Krebs seems to be helping their botnet business.
by kevmo314 | 2025-05-20 22:00:55+00:00
Since the geojson for the timezone data is a static file you can avoid using a database entirely and ship it to your app.

If you'd like to avoid shipping a giant geojson, with the generosity of CDN providers you can actually hit the npm-hosting servers with HTTP Range requests and do this completely on demand from the client: https://github.com/kevmo314/browser-geo-tz
by dragonwriter | 2025-05-20 22:01:04+00:00
> All the people saying Biden's a genocider of Palestine and you shouldn't forget it just because he has cancer are on the left.

Well, they are from the crowd using leftist rhetoric to convince people that the most important thing in the world is to oppose the dominant center-right liberal wing of the Democratic Party at all costs, and which has continued to hold that position even when the Republican Party controls all three branches of the federal government, and most state governments, and is in the process dismantling the rule of law. A crowd which, incidentally, rapidly metastasized from a small fringe group to a well-funded, highly-visible network between the time that Joe Biden defeated Trump in 2020 and the 2024 election.

Now, they could be genuine leftists with the worst imaginable praxis (certainly, truly effective praxis is too rare a commodity on the left), but there are other obvious explanations.
by cookiengineer | 2025-05-20 22:01:21+00:00
Microsoft has paid customers, which send emails via Microsoft Azure hosts. So they're specifically allowlisted and are bypassing Microsoft O365 filters.

Same for Google Business customers.

Phishers pay to send the emails. You don't pay to receive no email. So that's the conflict of interest of these businesses.

The "CA" for email is basically SPF/DKIM/DMARC as extensions but they're kind of useless because all email providers are lying about quarantine mechanisms anyways. Nothing happens if you report an abuse of spam policies.

But I'm kind of biased because I maintain my own antispam repository [1].

Most of the professional phishing campaigns use e.g. cloned websites under a different top level domain (like company-global.com or company-eu.com), with even legit looking profiles on LinkedIn which are even LLM controlled in their responses. They use pictures and sometimes even identities of real people, and the humans usually don't know about anything that's happening online with their identity in their name.

[1] https://github.com/cookiengineer/antispam
by Affric | 2025-05-20 22:01:43+00:00
Perhaps I should have put a larger explanation around it but I am mocking neither sureglymop nor BrandonM but we can still learn lessons from hindsight.

Sure, it’s trivial to set the switch in BIOS for virtualisation, and download a couple of libraries but people like computers doing things for us, we like abstractions even if they sacrifice flexibility because they facilitate whatever the real world application we are attempting.

I think power users of any technology will generally overvalue things that 80% to 95% of the user base simply don’t care about.

I admit that having touched Windows twice in the last 5 years I wouldn’t know but I would be willing to wager that WSL has very few drawbacks or shortcomings in the minds of most of its users.
by simonw | 2025-05-20 22:01:59+00:00
I thought it was more than that too, but according to https://www.reuters.com/business/autos-transportation/alphab...

> With more than 700 vehicles in its fleet - 300 of which operate in San Francisco - Waymo is the only U.S. firm that runs uncrewed robotaxis that collect fares.

Those numbers are from April 2025.
by palmotea | 2025-05-20 22:02:24+00:00
> We've used our software development skills to automate other people out of work for what can be argued to be literally decades.

And that's the shitty part of the job, and everyone should be uncomfortable with it. I haven't literally automated anyone out of a job (that I know), but I definitely did not like finding out (after the fact) that one project was meant to enable a large offshoring effort.

> Each time we did it, we certainly expected that the people affected would find other work.

I do not expect that. That's a comforting lie people tell themselves.

> New jobs were created. The world didn't end. I honestly don't think it would be that much worse this time.

It didn't end, but it often got significantly worse for some. If the AI hype pans out, it's going to get significantly worse for software engineers. Your "newly created job," if it exists, will likely pay out a lot less that you're used to. At best, you'll get knocked down to the bottom of the career ladder.

It's a mistake to think about things in aggregate like you're doing. It's easy to hide inconvenient truths.
by ahartmetz | 2025-05-20 22:02:57+00:00
I had a Riva TNT at the time, and a friend's Voodoo... 2? sure ran Half-Life better than my card. The Voodoo 2 probably really was the better GPU at the time. Later games required later APIs (unsupported by older cards) - and much higher performance - anyway, so longevity was not much either way.
by Aerbil313 | 2025-05-20 22:03:33+00:00
Over the years of not using social media because I can't handle it, I arrived at the definitive conclusion that any form of social media (including HN) modifies a person's worldview, life goals, personality and behavior to significant degrees. I came to call this "ungrounding", it's in effect a detachment from how they would think and act if they were exposed to only the real world and not the artificial world that doesn't even exist.

Little people remember anymore, but a decade ago people used to remark how the personality and manner of behavior of somebody they know changed when they got their first smartphone.

This effect doesn't skip anybody, can be caused by plain old cable TV and very little use (about 30 mins./day) is enough. When I completely cut artificial content years ago, it took about 3 months for me to feel the veil lifted from my eyes and able to see the real world as-is and not through the lens of the content I consumed. It was a profound feeling when I first realized what happened to me, and it left me thinking and pitying all others I knew who are trapped with thought patterns unmatching their reality - most otherwise good, hardworking people.

They didn't realize the lenses being put on (because it happened so slowly) and now they don't know the world isn't quite the way they see it is. No matter whether they see it as rose-colored or black-and-white, with an optimistic hue or a pessimistic blue, because of the fake, narrow representations they get exposed to regularly.

It's almost like a mind virus, and you know what? It's immediately recognizable to me, the glossy eyes when they start to talk about X thing and Y event and Z news that all are actually totally irrelevant for them if they'd stop to think about it, yet they for some mysterious reason they put a high importance on them and talk about it as if it's life and death. I believe anybody who drops artificial content and re-grounds with reality will be able to readily see how captive the minds of their very loved ones are.

Note: No AI was used in this comment, it's late at night and I'm in a particularly productive mood.
by ahartmetz | 2025-05-20 22:04:48+00:00
My standard font package is "mathpazo", which is Palatino with maths support. I obviously like Palatino - and if it isn't available, Garamond is similar.

If ever have to do much LaTeX again though, I'll check out the alternatives because the mess of partially compatible modules and the troubles with figure placement are still bad in LaTeX.
by HarHarVeryFunny | 2025-05-20 22:05:06+00:00
1) Isn't it unavoidable that a transformer - a sequential multi-layer architecture - is doing multi-step inference ?!

2) There are two aspects to a rhyming poem:

a) It is a poem, so must have a fairly high degree of thematic coherence

b) It rhymes, so must have end-of-line rhyming words

It seems that to learn to predict (hence generate) a rhyming poem, both of these requirements (theme/story continuation+rhyming) would need to be predicted ("planned") at least by the beginning of the line, since they are inter-related.

In contrast, a genre like freestyle rap may also rhyme, but flow is what matters and thematic coherence and rhyming may suffer as a result. In learning to predict (hence generate) freestyle, an LLM might therefore be expected to learn that genre-specific improv is what to expect, and that rhyming is of secondary importance, so one might expect less rhyme-based prediction ("planning") at the start of each bar (line).
by afavour | 2025-05-20 22:06:01+00:00
Maybe next time instead of name calling you could consider that other people simply have different perspectives to you?

I and others are lamenting that the compatibility layer removed incentive to help create a new JS ecosystem that isn’t layers of garbage piled on top of each other. That new ecosystem is what I wanted and Deno is no longer the path to it. If that makes me a “dunce”, so be it.
by doctorpangloss | 2025-05-20 22:06:31+00:00
There’s already more good content than anyone can watch. It’s impossible to disentangle strength of the art from strength of distribution. Google, the world’s biggest distributor of culture, is focusing on this problem they do not need to solve, instead of the one everyone in art actually suffers from, because: they’re bad at this. It’s that simple.
by ctz | 2025-05-20 22:06:50+00:00
It is instructive to compare Bun and Deno's issue tracker. Like, the five most recent issues for Bun at the time of writing are all crashes. Some of these are controlled panics or assertion failures, but others are like "we are now executing from address -1" or "we are trying to read from address 0x00000069." Recently written software simply should not have these classes of problem.
by HideousKojima | 2025-05-20 22:07:20+00:00
To clear things up for you a bit more (hopefully, or I'll just make it worse):

Any legacy .NET projects are made with .NET Framework 4.x (4.8.1 8s the latest). So if it's 4.x, or called .NET Framework instead of just .NET, it's referring to the old one.

.NET Core is no longer used as a name, and hasn't been since .NET Core 3.1. They skipped .NET Core t completely (to avoid confusion with the old one vut I think they caused confusion with this decision instead) and dropped the Core for .NET 5. Some people will still call .NET 5+ .NET Core (including several of my coworkers) which I'm sure doesn't help matters.

Mono isn't 100% completely dead yet, but you'll have little if any reason to use it (directly). I think the Mono Common Language Runtime is still used behind the scenes by the newer .NET when publishing on platforms that don't allow JIT (like iOS). They've started adding AOT compilation options in the newest versions of .NET so I expect Mono will be dropped completely at some point. Unless you want to run C# on platforms like BSD or Solaris or other exotic options that Mono supports but the newer .NET doesn't.
by lelandbatey | 2025-05-20 22:08:27+00:00
I think Google's got something going wrong with their usage limits, they're warning I'm about to hit my video limit after I gave two prompts. I have a Google AI Pro subscription (came free for 1 year with a phone) and I logged into Flow and provided exactly 2 prompts. Flow generated 2 videos per prompt, for a total of 4 videos, each ~8 seconds long. I then went to the gemini.google.com interface, selected the "Veo 2" model, and am now being told "You can generate 2 more videos today".

Since Google seems super cagey about what their exact limits actually are, even for paying customers, it's hard to know if that's an error or not. If it's not an error, if it's intentional, I don't understand how that's at all worth $20 a month. I'm literally trying to use your product Google, why won't you let me?
by ZoomZoomZoom | 2025-05-20 22:08:45+00:00
> when pooled at scale between all users allows people to make their own song generators with GPUs.

I can assure you, local generation is to become a fringe activity, same as self-hosting web services, only worse, because the quality gap (which in case of software is often negligible) will be insurmountable.

> I’d love to hear how you think the big 3 corps (Universal, Sony, etc) who own all the music almost globally are not a monopoly?

It's not a monopoly, it's a cartel. Luckily, they don't own everything, though, too much they do.

> no artist out there made a japanese song on my anime obsessed schoolteacher friend and his life.

Ok, what you describe is commissioning. Yeah, you can't argue with the fact it now can be done almost free and is becoming good enough for most, but you have to keep in mind, this process had been feeding a considerable amount of artists who do it to keep producing their art. Cutting this source of income is not wrong per se, but the consequences are the opposite of supporting the diversity and abundance in arts.
by testthetest | 2025-05-20 22:08:51+00:00
> Running a test every minute, or 1440 times a day, will show up quite a lot in logs, metrics, and traces.

...not to mention that automated tests are by definition bot traffic, and websites do/should have protections against spam. Cloudflare or AWS WAF tends to filter out some of our AWS DeviceFarm tests, and running automated tests directly from EC2 instances is pretty much guaranteed to be caught by Captcha. Which is not a complaint: this is literally what they were designed to do.

A way to mitigate this issue is to implement "test-only" user agents or tokens to make sure that synthetic requests are distinguishable from real ones, but that means that our code does something in testing that it doesn't do in "real life". (The full Volkswagen effect.)
by ryandrake | 2025-05-20 22:08:52+00:00
I'm saying that Americans will not accept the quality-of-life sacrifice of their labor being competitive with the current price of similar labor in Asia. It doesn't matter what the past competitive landscape looked like, as we're never going back to it without market-distorting tariffs, which bring with them their own problems.

Americans will not work for $2-$4/hr which would be required in order for American-made goods to be as cheap as foreign-made goods.

Americans will not pay 3-4X for all their goods to be made in America by people earning American wages.

I guess, to be complete the only other thing that could happen to cause goods to be manufacturable in America would be 3. for the cost of labor in China (and other places with similar textile and industrial capability) to rise to match that of America.
by freedomben | 2025-05-20 22:10:03+00:00
I guess I should clarify: for incidents like that, I agree there should be severe consequences and blowback, including class action lawsuits and the like. If you are collecting stuff like SSN, DoB, DL number, etc then you definitely have a huge responsibility to protect that. I want to make data like that radioactive to collect so people think very carefully about whether they want to take on the liability.

What I don't think should happen is some automated lawyer combing the internet looking for any disclosures and then automatically filing lawsuits based on it.
by 2YwaZHXV | 2025-05-20 22:10:26+00:00
well, I see a flash of a normal page and then it goes to 404

I'm using Chrome, with only uBlock Origin Lite but disabling it ~shows no change~ appears to allow it to work.

Looking at the requests with uBOL disabled, app.68194690.js and 5.5caaec0f.js both returned 404, everything else returned 200/202.

and with uBOL enabled https://plausible.hey.si/js/script.hash.outbound-links.js shows as blocked. maybe that's the issue?
by xp84 | 2025-05-20 22:12:32+00:00
> not the real number that is printed on the physical card (which Rakuten Kobo would store).

Citation needed!

In 2014 I worked for a small, unimportant ecommerce retailer. We migrated at around that time to storing only a token, using our payment processor (Braintree at the time) - and no longer kept any card numbers in our database whatsoever. If someone had dumped our 'credit_cards' table after that migration, they'd have nothing but useless garbage (the token could only be used by our own merchant account). I think even Braintree didn't need to store the card number itself either, but I'm not so sure of their internals.

Storing a payment card number in your database is considered an incredibly bad practice, is not PCI compliant, and probably violates other important "compliance" things you have to regularly certify as well.
by frollogaston | 2025-05-20 22:12:39+00:00
Yep, regular VMs where you basically only care about the CPU and RAM are easy, provided nothing in the VM is trying to not run in a VM. USB and network emulation used to be jagged edges, but that was fixed. VirtualBox was my go-to. It never had great GPU support, but the rest was easy.

I'm pretty sure there are solutions to assign an entire GPU to a VM, which ofc is only useful if you have multiple. But those are specialized.
by int_19h | 2025-05-20 22:12:59+00:00
Bundler is for shipping code, but then you need hacks like tsx to use TS in tests, build scripts etc, and configuring all that can be surprisingly gnarly and prone to breakage (e.g. tsx uses unstable Node APIs).

Although now that Node itself has basic TS support with type-stripping, this substantially improves matter. But that's a fairly recent thing, both Deno and Bun predate it by a long time.

Also Bun has a built-in bundler? I'm not sure how it compares with esbuild tho.
by daviddragan1 | 2025-05-20 22:13:12+00:00
I actually had this exact theory but I didn't know it was already a thing. see how Chinese is good for maths, french are melancholic, English is materialistic and world dominant etc. for instance take Romanian, which is vulgar (common, as spoken by peasants) Latin. Romanian is much more expressive and precise than English on matters pertaining to housekeeping and farming (peasant activities in general), whereas English is by a mile more suited and expressive in upper-class discourse (negotiations and reasoning of a more abstract or theoretical form; subtle social dynamics). I think to some extent because say Romanian biases heavily towards agriculture in its lexicon, it is an inherent impediment to try to achieve great scientific discoveries in such a language, whereas English or Chinese are evidently better suited. perhaps this raises the question then of wether a globalised language like English would offer greater fairness and freedom of expression, or wether composite languages are for emerge to eg take advantage of German technicality with English managerial interdynamics and French artistry (English already borrows heavily from French and Latin, and is a Germanic language to begin with so is that why it's now the global default language? is it because it's already a semi-composite language?)