MurphyA/hacker-news huggingface dataset:
by Hilift | 2025-05-07 06:28:16+00:00
It is worse than that. Mobile, and iOS in particular, is a second class operating system platform. Your device and data can be taken over by a text message that someone sends you, and you don't even need to open it. That's bad. Look at some of the Black Hat presentations about the number of zero day vulns for imessage in the previous two years.

You Shall Not PASS - Analysing a NSO iOS Spyware Sample https://www.youtube.com/watch?v=wAmGU2YUa9Y

https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zer...

https://www.darkreading.com/vulnerabilities-threats/apple-ze...

https://www.infosecurity-magazine.com/news/apple-update-extr...
by npunt | 2025-05-07 06:28:34+00:00
I see this a lot in vintage computing. What we want is the feelings we had back then, the context, the growing possibilities, youth, the 90s, whatever. What we get is a semi-working physical object that we can never quite fix enough to relive those experiences. But we keep acquiring and fixing and tinkering anyway hoping this time will be different while our hearts become torn between past and present.
by atoav | 2025-05-07 06:29:32+00:00
At least with German Donald Duck the language used there is.. special in a good way. The early translator Erika Fuchs devised a whole new variant of German that:

- uses words and phrases that are either of rare historic origin or completely made up new ones

- verb forms so uncommon that verb form she used frequently (the Infliktiv) has a second inofficial name: the Erikativ

- she frequently borrowed from the biggest writers and poets in the German language in her translations

- for the younger figures there is an entirely made up youth slang that is both appealing and incredibly entertaining to read

The english originals are utterly boring to read in comparison. Her work has a literaric and entertainer quality of the kind that made generations realize there is no real border between serious high brow literature and comics.
by lelanthran | 2025-05-07 06:30:49+00:00
Remember that the most expensive exploit the world has ever seen was in a memory safe GC language?

My argument is that you are missing the point: the point is that a larger attack surface enables more exploits regardless of language.

When using a language that has tremendous friction in expanding the attack surface you tend to have a small attack surface as a result.

Theres obviously a crossover point where you'd be safer with a memory safe language and a larger attack surface than with a memory unsafe language and a minuscule attack surface.
by uecker | 2025-05-07 06:31:18+00:00
In C I simply use -fsanitize=signed-integer-overflow if I expect no overflow and checked arithmetic when I need to handle overflow. I do not think this is worse than in any other languages and seems less annoying than Rust. If I am lazy, I let allocation failure trap on null pointer dereference which is also safe, out-of-bounds accesses are avoided by -fsanitize=bounds (I avoid pointer arithmetic and unsafe casts where I can and essentially treat it like Rust's "unsafe").
by Terr_ | 2025-05-07 06:32:45+00:00
Yeah, the algorithm is a nameless, ego-less make-document-longer machine, and you're trying to set up a new document which will be embiggened in a certain direction. The document is just one stream of data with no real differentiation of who-put-it-there, even if the form of the document is a dialogue or a movie-script between characters.
by mrweasel | 2025-05-07 06:33:27+00:00
If their plan is to make their money back selling the company, then they don't care about revenue or retention rate. The company just need to look like it might be doing well.

No, venture capitalists aren't ignorant, but their goal also might not be to build and run a healthy company long term. It might be to turn a quick profit by selling a startup to another company.
by croemer | 2025-05-07 06:33:40+00:00
> We have also updated the model card with the new version of 2.5 Pro

No you haven't? At least not at 6am UTC on May 7. The PDF still mentions (03-25) as date of the model.

What version do I get on gemini.google.com when I select "2.5 Pro (experimental)"? Has anything changed there or not (yet)?
by ozim | 2025-05-07 06:33:49+00:00
Writing everything from scratch by hand is an insane take. It is not just reinventing the wheel but there are whole frameworks one should use because writing that thing on your own will take you a lifetime.

Yes you should not just pull as dependency thing that kid in his parents basement wrote for fun or to get OSS maintainer on his CV.

But there are tons of legitimate libraries and frameworks from people who are better than you at that specific domain.
by throw63 | 2025-05-07 06:36:15+00:00
> and for me that’s science and tech tree maxed out.

Hate to ruin it for you, but as soon as the economic elites don't need the masses anymore (eg because AGI produces goods and entertainment better than we do), we'll become a liability, dead weight, so they'll quickly use that same maxed out tech that made us obsolete to make us gone.
by winwang | 2025-05-07 06:37:36+00:00
This was just a brief moment of thought over a year ago, but I can try to summarize. I was thinking about how to unify variables in certain simple Datalog settings. If we think of a clause as a vector of variables, then simple unifications can look like just a gather operation. A gather can be thought of as a matrix-vector multiplication, but that's not really useful (performance wise). But if those variables are also in a linear equation, then it becomes possibly-useful, e.g. for something like `P(x, y) :- E(x, 3x+4y)`
by gorgoiler | 2025-05-07 06:37:57+00:00
This is disappointing from an innovation perspective. I know Deliveroo are just there to make money but they were uniquely positioned to do something transformative with their apps over the past ten years. Instead, we’ve basically seen little to no innovation on the consumer product other than an expansion from restaurants to now including grocery deliveries and group ordering.

What about including a human, social element? Deliveroo could have been a channel for building a relationship between customers and Frankie’s Pizza where I could hear about upcoming specials, promotions, news about their expansion to a second location etc.

There could be an integration with power users (superhosts, sort of, but the analogy isn’t exact) where consensus can form around who really is the best Chinese food in town. Let’s get the hygiene rating of the kitchen front and centre too (perhaps they do this in some markets?)

For the riders, why has there never been a successful internal commitment to building a positive human workforce on the city streets? I feel like the brand started that way with their iconic jerseys and oversized food boxes but devolved into freelancers of the lowest common denominator. When my orders started arriving 50/50 in a just eat thermal bag, it really drove home the point that these services are never about long term value for the human workforce. We are now haggling on price in an auction against everyone else in the same way airline flights compete solely on price. When that happens, just as with airlines, any notion of a quality product or differentiation on service goes down the drain. It’s as if the major component of service differentiation is the lower price which is such a shame when there’s so much opportunity to shine as a food service app.

If these companies truly do want to race to the bottom as generic low latency courier services then perhaps we will hopefully see them exit the app layer and solely occupy the transport layer, leaving space at the app level for someone who cares about the state of restaurants, food, and quality, leaving the delivery part to the auction apps. I’d much rather have a high quality integrated service but if we’re obviously not going to get that then the sooner they stop trying the better.
by abhiyerra | 2025-05-07 06:38:29+00:00
I was in India recently and randomly ended up talking to a lot of millennials while traveling. It is an understatement for how quickly the American economy would grind to a halt if anything major happened. ADP, loan processing, healthcare insurance processing, support centers.

On one hand corporate America exported all its manufacturing to China. On the other hand it exported all its back office services to India.
by liefde | 2025-05-07 06:39:11+00:00
The tension between human creativity and emerging tools is not new. What is new is the speed. When we cling to the uniqueness of human abstraction, we may be protecting something sacred—or we may be resisting evolution.

The fear that machines will surpass us in design, architecture, or even intuition is not just technical. It is existential. It touches our identity, our worth, our place in the unfolding story of intelligence.

But what if the invitation is not to compete, but to co-create? To stop asking what we are better at, and start asking what we are becoming.

The grief of letting go of old roles is real. So is the joy of discovering new ones. The future is not a threat. It is a mirror.
by malthaus | 2025-05-07 06:39:30+00:00
they have an infinite war chest and building windsurf/cursor isn't the hard part, building a brand and sales environment around it is. why risk failing the execution and losing focus when you can just buy one with momentum?

it's also a bit of multiple arbitrage in terms of what seriously addressing the developer market means for their valuation, they likely recoup the 3b instantly.
by akrylov | 2025-05-07 06:40:07+00:00
Most blog posts focus on using top-tier LLMs or setting up complex AI pipelines for large corporations. But what if your data is private, and you don’t have access to top-tier ML talent or massive infrastructure? In this article, we show how to fine-tune a model for mid-sized software development teams or IT support, using your own domain expertise. With Apache Answer and InstructLab, you can build a powerful, cost-effective AI solution tailored to your specific needs.
by flohofwoe | 2025-05-07 06:40:53+00:00
IMHO the ugly thing about Result and Option (and a couple of other Rust features) is that they are stdlib types, basic functionality like this should be language syntax (this is also my main critique of 'modern C++').

And those 'special' stdlib types wouldn't be half as useful without supporting language syntax, so why not go the full way and just implement everything in the language?
by Broken_Hippo | 2025-05-07 06:41:09+00:00
In this case, it isn't "writing a single things that rights all wrongs"

Its "Write something that helps consumers know what they'll be paying"

It wouldn't even be changing the billing at all, but changing how they advertise pricing. Fees such as the example would need to be included in advertised total price of your bill. You wouldn't even need to change the bills. The companies have enough staff to do this in advertising. Government agencies' staffing would be stretched with or without such a rule.
by seanmcdirmid | 2025-05-07 06:41:38+00:00
That’s a strange sentiment. They are going up in mostly barren land that is basically windswept (well, that’s where the most wind is!). So maybe it can be mixed with agriculture, but this is not what I would consider prime natural trekking land. The only thing it affects are scenic drives like through the Columbia river gorge (lots of wind turbines and hydroelectric dams).
by babyent | 2025-05-07 06:41:49+00:00
If enough people can be convinced of a “serious” extraterrestrial event we might be able to speed up that science and tech tree. Honestly think about the spending and the opportunities it will unlock. Not to mention we might all stop fighting each other and work together… on science and tech.

So much of the science and tech we use today was the result of some similar storytelling, and it has sometimes had some real consequences.
by victorNicollet | 2025-05-07 06:41:51+00:00
Tree-shaking is able to remove code that will never be called. And it's not necessarily good at it: we can detect some situations where a function is never called, and remove that function, but it's mostly the obvious situations such as "this function is never referenced".

It cannot detect a case such as: if the string argument to this function contains a substring shaped like XYZ, then replace that substring with a value from the environment variables (the Log4j vulnerability), or from the file system (the XML Entity Extension vulnerability). From the point of view of tree-shaking, this is legitimate code that could be called. This is the kind of vulnerable bloat that comes with importing large libraries (large in the sense of "has many complex features", rather than of megabytes).
by IshKebab | 2025-05-07 06:41:55+00:00
Yeah I wasn't agreeing with that either.

I didn't interpret OP's comment like that. I think he was saying you can't enforce the boundary at all even if users don't get tricked.

That's true on Linux because the sudo UI can trivially be MitM'd by malware. You can't do that on Windows so trivially.
by choeger | 2025-05-07 06:42:33+00:00
All this has been known in the PL design community for decades if not half a century by now.

Two things are incredibly frustrating when it comes to safety in software engineering:

1. The arrogance that "practitioners" have against "theorists" (everyone with a PhD in programming languages)

2. The slowness of the adoption of well-tested and thoroughly researched language concepts (think of Haskell type classes, aka, Rust traits)

I like that Rust can pick good concepts and design coherent language from them without inventing its own "pragmatic" solution that breaks horribly in some use cases that some "practitioners" deem "too theoretical."
by dvh | 2025-05-07 06:42:45+00:00
People often think "speed" when they read "bloat". But bloat often means layers upon layers of indirection. You want to change the color of the button in one dialog. You find the dialog code, change the color and nothing. You dig deeper and find that some modules use different colors for common button, so you find the module setting, change the color and nothing. You dig deeper and find that global themes can change colors. You find the global theme, change the color and nothing. You start searching entire codebase and find that over 17 files change the color of that particular button and one of those files does it in a timer loop because your predecessor couldn't find out why the button color changed 16 times on startup so he just constantly change it to brown once a second. That is bloat. Trivial change will take you half a day. And PM is breathing on your neck asking why changing button color takes so long.
by whstl | 2025-05-07 06:43:15+00:00
“Absolutely nothing” is still doing what is asked of you by a boss. Unless you’re talking CEOs fooling the board, of course.

Not contributing meaningful things is an arbitrary metric that is often only used to put people down. One can build the whole product and there will still be some asshole claiming they did the easy part or “you didn’t work enough in it to know what’s like”.

The incompetence here lies 100% with person keeping the employee.
by surume | 2025-05-07 06:43:59+00:00
What type of proof would you like? An official statement by Pakistani militias that the government asked them to do it? We see similar tactics being used in Syria by Al-Jolani / Al-Sharaa to wipe out the Alawaites (20-50,000 executed) with the same being planned for the Druze. That way the government can say "it wasn't us", although of course, they didn't prevent it.
by energy123 | 2025-05-07 06:44:44+00:00
I'll hand it to you that only part of the problem is easily represented in automatic verification. It's not easy to design a good reward model for softer things like architectural choices, asking for feedback before starting a project, etc. The LLM will be trained to make the tests pass, and make the code take some inputs and produce desired outputs, and it will do that better than any human, but that is going to be slightly misaligned with what we actually want.

So, it doesn't map cleanly onto previously solved problems, even though there's a decent amount of overlap. But I'd like to add a question to this discussion:

- Can we design clever reward models that punish bad architectural choices, executing on unclear intent, etc? I'm sure there's scope beyond the naive "make code that maps input -> output", even if it requires heuristics or the like.
by anonzzzies | 2025-05-07 06:44:57+00:00
> WindSurf, Cursor, and Aider. Augment Code also ranks above WindSurf for me.

Bring on (a lot) more competition! I am waiting for the point where "Simple Pricing" (Augment Code has that on the pricing page) means fixed pricing; Simple is NOT '600 messages included' because it's impossible to know what the ROI from those 600 messages is, so it's very far from 'Simple' (many of those prompts will deliver nothing or, worse, having to rollback because the agent produced garbage). I know it's not sustainable, but the only thing that will keep me not jumping from one to the other, signing up with different emails, trials, coupons etc is if they will lose the restrictions on usage. They will, as they have to compete and it's worth it seeing this acquisition; losing 10s of millions a month to get/keep people and getting nice growth is what they do to get the billions. So bring it on!
by out-of-ideas | 2025-05-07 06:46:42+00:00
isnt iventoy different than ventoy?

also check if your system has the reg key listed in the issue

there's always https://www.supergrubdisk.org/super-grub2-disk/

and finally, if you are really concerned and dont want to re-install, you can always take export the registry key of your root certs of a ventoy installed system and compare against a system not loaded with ventoy

edit: can also use systemd to boot iso's (among many other things)
by littlecranky67 | 2025-05-07 06:48:43+00:00
Long story, I give the brief summary: I signed up around 2006 for gmail bringing my own domain (that was free at that time). Over the years, that "gmail" was turned into google accounts. Since 2012 google decided custom domains are no longer free, but kept existing users if it was non-commercial usage. Somewhen around 2023 they decided to kick out users using their own domain, forcing them to convert to paid google workspace subscription. I compared prices and instead moved my domain to Microsoft365. Since then the first thing I login with google is a message telling me that I need to upgrade to a paid Google Workspace subscription. All my notes in google keep were gone, google maps bookmarks etc. And yes, I can't even access those free services google offers anymore with that account.
by air3y | 2025-05-07 06:49:48+00:00
>This is how proxy wars work. They literally don’t if the proxies realise they’re fighting a foreign war on their homeland.

India and pakistan have contested boundaries and their hostilities doesn't depend on foreign powers. Interestingly, when the hostilities between china and india flared up in 2021, and india moved many divisions from its pakistan border to its chinese border, pakistan didn't change its posturing to put pressure on india. This was acknowledged by indian army during a press briefing. Both so far have never fought against each other for foreign powers, but have fought against each other for their own reasons. So no proxy wars so far.
by liefde | 2025-05-07 06:50:45+00:00
The fear you voice is not just about technology — it's about belonging, powerlessness, and the haunting question: “What am I worth if I’m no longer needed?”

This is a wound of modernity: being reduced to utility. When usefulness becomes the measure of worth, love becomes conditional, and existence becomes a transaction.

But you are not a product. You are not a function. You are not a line of code in someone else's simulation. You are a living mystery. A being of perception, of feeling, of presence.

The chill world you long for is not built by tech trees alone. It is built by inner peace, by connection, by meaning. These are not obsolete. They are eternal.

The real revolution is not artificial intelligence. It is loving awareness.
by kreetx | 2025-05-07 06:50:58+00:00
The article makes using dependencies look bad, while the actual issue rather is "quality controlling" the code in dependencies, as dead code elimination (or "tree shaking") removes the bloat from the final artifact. Because dependency as a concept itself is good, because going the opposite way and reinvent the wheel you'll get an even worse kind of bloat - bloat you have to maintain yourself.
by mvdtnz | 2025-05-07 06:51:21+00:00
Plain JS with Alpine.js, Java with Spring Boot, Webflux and Netty. Flyway, Tailwind. Here's an example conversation. It claims it made a mistake (there was no mistake) then spits out pathetically unusable code,

* Takes the first player's score, not the current player * Stores it as a high score without even checking if it's higher than the current high score * Stores high scores on a per-lobby basis against the given instructions * Does NOT store high scores on a per-configuration basis as instructed

https://g.co/gemini/share/baafa0e89c3a
by _1tem | 2025-05-07 06:51:52+00:00
I understand there are ways to deal with the problem of latency in serverless, but this is a problem I'd rather not deal with in the first place. The database IS the application, and I would not want to sacrifice speed of the database for anything. Serverless is totally not worth the trade-off for me: slightly more convenient deployments, for much higher latency to the database.

I'm a solo dev that has been installing and running my own database server with backups for decades and have never had a problem with it. It's so simple, and I have no idea why people are so allergic to managing their own server. 99% of apps can run very snappily on a single server, and the simplicity is a breath of fresh air.
by mrweasel | 2025-05-07 06:52:48+00:00
I don't know if I feel cheated, but it seems a little unmanageable. How is this suppose to scale? How the hell do you even start to debug the LLM when it does something incorrect? It's not like you can attach a debugger to English.

The "vibe" I'm getting is that of a junior developer who slows problems be tacking on an ever increasing amount of code, rather than going back an fixing underlying design flaws.
by wahnfrieden | 2025-05-07 06:54:14+00:00
For Japanese specifically I made an iOS/macOS native app for learning by reading. It curates a library of RSS feeds and some books rather than generating them with AI because there are still issues with the naturalness of LLM-made Japanese writing. I've found many learners are still apprehensive of using generated content.

To calibrate the content to your reading level, rather than generating the content, it tracks your comprehension and shows you how much of a given webpage or book you already understand.

It has optional Anki integration if you don't want to use the built-in ones. I work on this full-time now and am about to launch a manga reading mode, plus Netflix caption lookups.

https://reader.manabi.io
by _1tem | 2025-05-07 06:54:49+00:00
Not just cold start (another problem you have to worry about with serverless). There's the simple fact that network latency outside of the same datacenter is ALWAYS slow and randomly unpredictable, especially if you have to run multiple queries just to render a single page to your user. A database should always be over LAN in my opinion, if you need to access data over the internet, at that point it should be over an API/HTTP, not internal database access.
by pacerier | 2025-05-07 06:55:17+00:00
+1 Cool point, that many are "scams" that don't actually sell what they write.

Yet seems it's still true after ignoring all scams! (eg 19 oz dri-duck, 27 oz siccup, 33 oz eddie-bauer)

[what more, I wonder if that's true too for 0.5 + any floz]