MurphyA/hacker-news huggingface dataset:
by TimTheTinker | 2025-05-02 00:03:31+00:00
Sometimes the "middle" just means avoiding either of two incorrect and diametrically opposed viewpoints.

I.e. justice for all, not just for the rich or the poor.

People often react to something wrong in society with another wrong that is diametrically opposed. In that case, the term "balance" is appropriate - it's about correcting what's wrong without overreacting.
by lapcat | 2025-05-02 00:03:50+00:00
> This seems to be described in https://eclecticlight.co/2024/04/29/apfs-beyond-to-vfs-and-v... but I'm just a layman here. I don't quite understand the benefits of this caching if you have to recompute them to detect mismatch anyway.

It appears that Howard Oakley is once again very confused. Unfortunately, his blog is sometimes a foundation of misinformation, which drives me nuts. The Apple technical note that he links to is talking about a process updating itself at runtime while its code signing information is cached by the kernel in memory. Oakley has somehow warped that into a some kind of disk cache, using the odd phrasing "saved to the kernel's cache against the vnode".

> spctl has a --ignore-cache option. So the result of gatekeeper is indeed cached somehow.

Yes. I think it's in /var/db? But again, it's not a cache of the hashes of every file in the app bundle. What would the system even do with that? Not only is there no evidence for the existence of such a thing, but its existence would make no practical sense. Oakley is simply grasping for something that takes a significant amount of time computationally, without giving much consideration to what would be done with the products of that computation.

> And presumably as you noted it's a cache miss for this which causes the long application launch delay.

No, I've showed that it's a periodic malware scan.
by wetherc | 2025-05-02 00:04:55+00:00
Equity Trust Company | Analytics Engineer | Cleveland, Ohio or Remote (US) | Full-time | Financial Services

Equity Trust is a custodian of self-directed IRAs that gives clients the tools to manage their own retirement accounts, and to invest in a range of traditional and alternative assets. We have been helping clients steer their own retirement accounts for over 50 years, and now have over 400,000 accounts, and over $65 billion in assets, under custody. We have offices in Ohio, Florida, Texas, and South Dakota if in-person work is your jam, but fully support remote work as well.

The role: We're a team of 6, looking to add a new analytics engineer who will work across our stack (mostly Python, Typescript, AWS) to architect and build out a modern data stack to support operational, reporting, and machine learning use cases across the business. Our work is a mix of API development, data pipelines, the occasional ML side quest or two, and building out the infrastructure to reliably and scalably power it all. Generally, if you like working with data, tackling open-ended problems, and (optionally, but always nice) building cool products to help folks take a more active role in their investments --- you'll probably have a good time here!

If you'd like to learn more, drop me a line at c.wetherill [at] trustetc.com
by gsf_emergency | 2025-05-02 00:05:01+00:00
However.

>Not to be completely dismissive

A whole series of essays based on the above, dismissing <deep learning>, <venture capital>, <LLM>, <blockchain>, <compute-based consumer platforms>,

Remains to be written!

dopaminergic take: who doesn't want to take on journeys of discovery fuelled by other people's (even entire GDPs-worth of?) time and money :)?

just have to hope that the details turn out to be much more interesting (wit-sharpening) than the premise, heh
by homebrewer | 2025-05-02 00:05:23+00:00
For many of us the internet is the last bastion of (relatively) free speech and free-ish access to information. I've never actually lived in a society that doesn't censor everything uncomfortable to the government and wouldn't even know what it's like if not for the 'net.

Foreign companies have also repeatedly shown that they're happy to go along with the latest and greatest idea of the government to avoid being blocked. Right now it's not really a problem as I can easily pretend to be a middle-aged balding guy from rural Germany (or wherever).

You can probably combine the two and see where it leads to.
by walterbell | 2025-05-02 00:05:32+00:00
War/conflict requires loyalty and competence, not performative obedience.

https://www.jstor.org/stable/382389

> The French engineering schools which were developed immediately after the French Revolution were sui generis in the field of education. Their astonishing success caused them to become known as the grandes écoles of Paris. They included the Ecole Polytechnique, the Ecole des Ponts et Chaussées, the Ecole des Mines, and the Ecole Centrale des Arts et Manu-factures. It was these schools that set the tone and the fundamental pattern of engineering education in the United States as it is known today.
by mikrl | 2025-05-02 00:05:56+00:00
>The tech track works great if one falls into line and doesn't rock the boat by questioning authority or trying to see the big picture

Is this true?

I thought senior engineers were expected to push back as a matter of course, and staff engineers were expected to think in broad, business needs and translate that down to the code.

An engineer who just shuts up and writes code, is so we are told, the first casualty in the age of AI.
by esperent | 2025-05-02 00:06:03+00:00
> Yet clearly people do join communities.

"Communities" here also have a hierarchy:

1. All speakers of a language 2. Speakers in a region (dialect) 3. Subgroups like teenagers, engineers, gamers, redditors 4. Sub-sub groups like teenagers from a specific school, engineers of a specific discipline, gamers of a certain game

x. Personal dialect (idiolect), which is a sub group that exists separately to all of these and is most closely related to family and the friend group you had as a child and teenager.

We are all members of many different groups which intermesh, and we seemlessly switch meaning and pronunciation as we do that (code switching).

When joining a community, people start at the top (learn French) then move through subgroups. Dictionaries and textbooks are designed to match as closely as possible to the top level community's consensus of word meaning, which, being large, is also the most static. But any language learner will know that textbooks can only get you so far in learning how language is actually spoken day to day. You have to join the community to learn that.

The same applies as you go down to dialects and other sub groups. You can learn a bit before you join, but becoming a part of the community, linguistically, can only happen after joining.
by Aeolun | 2025-05-02 00:06:29+00:00
At 75 headcount I very much doubt you need either of those on staff full-time?

You can certainly make do without if your goal is to keep paying everyone the same.

I think in a smaller company I was part of all support tasks were rolled into a single ‘office manager’ role. When it’s all combined like that 200k becomes easier to justify.
by danpalmer | 2025-05-02 00:06:46+00:00
> I'm not doing another JavaScript rugpull. Node.js is here to stay, it's mature

I'm a bit of an outsider here, I've only run a little Node in production in the past, and used it on and off for ~13 years. My take is that these projects all get some hype specifically because Node.js is not mature.

I've got a hobby project that has a bit of Node in it, and it very plainly difficult (Which imports am I using? Not the good one. Which language am I writing? Not the typed one. Which package manager do I use? etc). Getting a new project set up well takes time and effort, it is not the default that Node gives you (at least in ~early 2024 maybe?).

I can really get behind the "not another JS rugpull" idea, but I also see why everyone is constantly wanting to get off Node itself onto something Node-like that solves their problems.
by wkat4242 | 2025-05-02 00:07:23+00:00
I really like this way of putting it. Thanks!

And yeah I think the industry leans too heavily on LLMs right now. They don't understand, but they're really good at making it seem they do. Then the users get impressed by that and want more and more stuff that requires understanding and the industry just makes it because $$$. But because of that it's so hit and miss.
by randall | 2025-05-02 00:07:36+00:00
i use deno all day every day.

it’s really about taste. deno has insanely high standards, and the choices they make are great.

deno deploy subhosting seems unlikely to go anywhere, even if the serverless fad is coming to its plateau of productivity.

if you’re looking at node and think it’s great, you should use it.

node compat makes me like deno more, not less.

it’s fine to not use it, but most of the points are about deno the business, not deno the tech. postgres, rust, and a lot of other projects find a way out of the vc treadmill.
by Kon-Peki | 2025-05-02 00:09:06+00:00
It’s a dumb move. For starters, there was virtually zero chance California would have followed through with it.

And then you have the fact that if California really wanted to get rid of ICE cars, there are plenty of other things they can do that are worse than this. Astronomical gasoline taxes, registration fees, licensing requirements, etc. Requiring extraordinarily costly seismic retrofits on oil refineries. Require huge bonds on fuel stations to cover potential cleanup costs, etc.
by acdha | 2025-05-02 00:09:10+00:00
The problem with the averages argument is not that it’s wrong but that the established biological causes have been for basic low-level things like grip strength but not for higher level cognitive behaviour, especially at the level of software engineering at Google which combines a number of different advanced skills – and there’s a fair variation in the mix of skills equally successful people use, too. Running is a much simpler, highly physical skill which was highly relevant to our evolutionary history whereas being a senior engineer involves a mix of cognitive skills developed over a longer time in a highly social environment, and there just isn’t high-quality data linking those skills to innate biological traits at the level needed to explain the current outcomes.

Complex behavior is very hard to link to underlying biology because our brains are incredibly plastic and actual researchers spend a lot of time looking for ways to tease out the complex interplay between genes and training. I used to support some neuroscience labs which studied things like this but the researchers were careful to note the difference in confidence between the effects they measured and the attempts to identify the underlying biology (e.g. maybe undergrad men could track more moving objects than women, but if monkeys didn’t show an effect you might want to check things like how many hours they spent playing ball sports or video games). Everyone was generally of the opinion that there were innate differences, but that they couldn’t be anywhere near the magnitude we see with athletic performance because too many well-crafted studies have been done to miss something big.

When you’re looking at those bell curves, it’s important to remember that even if you ignore the questions about the methodology for things like personality traits the overlap is tighter than shown, and contrary to one of his foundational claims, there’s enough cultural variation to suggest that the effect is not biological in origin. The first piece I linked discusses at some length how he was thrown off by the Wikipedia summary of a meta-analysis paper on personality traits which found very limited effects, with one analysis within the margin of error. That pattern continues for the few claims he makes in enough detail to assess: inconclusive data, mistakes cribbed from intermediary sources, or failing to link a very low level behaviour to success at a company like Google.

That last part is really important to think about with all of the evo-psych stories which claim our social dynamics of today are based on our evolutionary history without considering just how different the skills we use to work in offices developing software are from a hunter-gatherer lifestyle – anyone at Google is working with more people than was common in most of our evolutionary history!
by hxtk | 2025-05-02 00:09:16+00:00
I've had similar ideas regarding how US Military ID cards work. The tech enthusiast in me loves the idea of ubiquitous strong 2FA, functioning ID systems that separate "identification" from "authentication" (looking at you, SSNs), etc.

Identity theft would become essentially impossible. Then if it were adopted by things that are fundamentally associated with your real identity (e.g., banks, payment processors, insurance providers, government institutions) then whole classes of phishing scams would become impossible.

Then there are the use cases where it's convenient for the user. Public transit, event admissions, membership cards.

Then there are the use cases where it's convenient for the provider. Alcohol sales, social media, adult content.

... Yeah, that would turn into a dystopia incredibly fast.
by jacobgkau | 2025-05-02 00:09:34+00:00
Are there benefits to the ecosystem? Possibly.

But the person you replied to was talking about Redis's goal, and I don't think it's likely their goal had anything to do with having a competitor to themselves around. Even if they did want that, they could've just bankrolled (or engineered) a fork; changing a license to one that causes your largest users to do the work themselves is a rather roundabout way to do it.

I can almost kind of see the large users needing to work together on a replacement, meaning that replacement might as well be open-source, meaning Redis can get future improvements that were funded by the fork users (who Redis was upset wasn't paying them) as a semi-vindictive, semi-useful goal. But it's still roundabout. If that was really the plan, it could've been articulated better in this postmortem to make it clear the "goal" bit hadn't just been BS'd.
by sorcerer-mar | 2025-05-02 00:11:37+00:00
Your link doesn't work (oops forgot to actually read your sources?). Here's the right document: https://aspr.hhs.gov/S3/Documents/P3CO.pdf

The research at WIV was assessed as not being GoF under this framework by multiple levels of reviewers when it was approved. Nobody really disputes this, they just argue that it should have been assessed as GoF (an argument that's circularly evidenced by the claim one of those viruses is responsible for the pandemic).

You seem to be willfully misunderstanding the E. coli point. Obviously it doesn't satisfy the P3CO definition, but nor did the research approved at WIV.

> Are you kidding? Or are you really don't know about Daszak rushing there and cleaning up all the evidence?

Hey now, don't get tired from moving those goal posts! Your claim was that Proximal Origins authors didn't consider the lab leak. You are unambiguously wrong.

Please share your evidence of "Daszak rushing there and cleaning up all the evidence." Not familiar with it!
by dvt | 2025-05-02 00:11:40+00:00
Location: Los Angeles

Remote: Yes

Relocation: Case-by-case

I'm a CTO, expert engineer, and data professional interested in team-building, consulting and architecting data pipelines. At Edmunds.com, I worked on a fairly successful ad-tech product and my team bootstrapped a data pipeline using Spark, Databricks, and microservices built with Java, Python, and Scala.

At ATTN:, I re-built an ETL Kubernetes stack, including data loaders and extractors that handle >10,000 API payload extractions daily. I created SOPs for managing data interoperability with Facebook Marketing, Facebook Graph, Instagram Graph, Google DFP, Salesforce, etc.

More recently, I was the CTO and co-founder of a gaming startup. We raised over $6M and I was in charge of building out a team of over a dozen remote engineers and designers, with a breadth of experience ranging from Citibank, to Goldman Sachs, to Microsoft. I moved on, but retain significant equity and a board seat.

I am also a minority owner of a coffee shop in northern Spain. That I'm a top-tier developer goes without saying. I'm interested in flexing my consulting muscle and can help with best practices, architecture, and hiring.

Would love to connect even if it's just for networking!

Blog: https://dvt.name/

GitHub: https://github.com/dvx
by creer | 2025-05-02 00:11:50+00:00
The article is what it is. What we are here for is what we can make of it. And your answer is useful there.

"Different strategies for filling the silence": asking or talking. (not quite what you describe) makes sense. One of my problems in there is how to gauge whether there is interest at all. I mean if they walk away, then we know, sure. But I also don't need to spend time in this "conversation" if there was no interest and the other person is merely being polite or narcisstic in answering my questions forever. Nowadays I do feel somewhat ready sometimes to prod outright, something like "what's your interest in this" - but it's not exactly subtle.
by bdash | 2025-05-02 00:13:10+00:00
What's most amusing is that in the most recent blog post (https://eclecticlight.co/2025/04/30/why-some-apps-sometimes-...), the handful of log statements that serve as the source of the claim in fact confirm that it is syspolicyd performing a malware scan that is responsible for the delay during launch.

11.012004 com.apple.syspolicy.exec Recording cache miss for <private>

20.898736 AppleSystemPolicy Waking up reference: 174

The first of the two messages is from `syspolicyd` and is reporting that it has no cached malware scan result for a file it was asked to scan. The malware scan is triggered by an up-call within the AppleSystemPolicy kernel extension during a MACF hook (`proc_notify_exec_complete`, `file_check_library_validation`, or `file_check_mmap`) if the kext doesn’t have a cached malware scan result for the vnode of the file in question.

The second log message is from the AppleSystemPolicy kernel extension when it receives the result of the malware scan and permits the process to resume execution.

It's a little puzzling that the original analysis is published based on speculation, without any real attempt at verifying that the data supports their hypothesis. Looking at `top` or Activity Monitor during the slow launch would show which process is performing work. A spindump captured during the slow launch would reveal what work it is doing. The system log store captures the process and subsystem that logged any given message. A few minutes in Binary Ninja or Hopper gives you a rough idea of what the code that emits the log is doing.
by zeroq | 2025-05-02 00:13:42+00:00
Honestly I don't see much use for yet-another-sqlite.

The premise of having 100M/s writes instead of 500k/s sounds bit unrealistic, but at the same time, while simply importing tuples and completely ignoring stuff like foreign keys, I'm only utilizing one core. I had on my todo list an experiment to run these imports in paralell into different databases and then merging them somehow, but I ran out of time. Again, 10Gb sqlite is quite large.

On the other hand, I think the adoption and the fact that you can take your db basicially anywhere and it will run out of the bat is something you can't ignore. I was briefly looking at pglite but I don't really see benefits apart from a niche use case when you really need that compatibility with big brother.

And then sqlite has so many hidden gems, like the scenario where you can use a sqlite file hosted on http like a remote database! I can post my 10Gb database on S3 and run count(*) on main table and it will only take like 40kb of bandwidth.
by jillyboel | 2025-05-02 00:14:06+00:00
The license explicitly allows you to make such changes. They could have picked a different license, but didn't.

> Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software
by TheOtherHobbes | 2025-05-02 00:14:48+00:00
The thing about free will is that feeling you have free will is not a confirmation you actually have it.

There are psychological tricks that can be used to manipulate people into acting in certain ways. They're not niche experimental techniques. They're widely used in PR, advertising, politics, and business.

Virtually all of them create the illusion of free choice where none exists.

Almost everyone can be convinced they made a free choice, when in fact they were influenced into it without their awareness.

The irony is that the people who do this to others aren't any more free than their victims.

Which ends up in an interesting place, where everyone feels free but most choices are forced.

What really drives all of these "conscious" choices?
by mwcampbell | 2025-05-02 00:14:57+00:00
> The codebase is deliberately under-architected (a legacy of the scars of working on Gecko), so many things you'd expect to be well defined re-usable modules that could be worked on independently of Google are actually leaky hacks

I'm guessing you're specifically referring to Gecko's early over-use of XPCOM, which the Gecko team itself had to clean up in a long process of deCOMtamination [1].

I'm hopeful that if Servo ever gets enough funding to become a serious contender among browser engines (hey, KHTML was once an underdog too), that it might walk a middle path between overuse of COM-ish ABIs and what you described about Chromium. Servo is already decomposed into many smaller Rust crates; this provides a pretty strong compile-time boundary between modules. Yet those modules are all statically linked, and in a release build, that combined program gets the full benefit of LTO. Of course, where trait objects are used, there's still dynamic dispatch via vtables, but the point is that one can get strong modularity without using something COM-ish everywhere.

Incidentally, the first time I built Chromium (or more specifically, CEF) from source in late 2012, I was impressed as I watched hundreds of static libraries being linked into one big binary. Then as I studied the code (though not deeply enough to learn the things you described), I saw that Chromium didn't use anything COM-ish internally (though CEF provided a COM-ish ABI on top). That striking contrast with Gecko's architecture (which I had previously worked with) stuck with me. I wonder how much the heavily reliance on static linking and LTO (meaning whole-program optimization), combined with the complete lack of COMtamination, contributed to Chrome's speed, which was one of its early selling points.

[1]: Mozilla used to have a dedicated wiki page about deCOMtamination, but I can no longer find it.
by giodamelio | 2025-05-02 00:15:52+00:00
Location: Seattle, WA Remote: Yes, hybrid in Seattle works as well Willing to relocate: No Technologies: I've been all over the place. Go, JS (and TS) and Python are probably my strongest languages, and I have recently been having a lot of fun with Elixir and Rust. I have also done smaller amounts of work in Java, Kotlin, Ruby + Rails and Clojure. Resume: https://resume.giodamelio.com/ Email: gio@damelio.net

I am a software engineer with 6 years of professional experience, though I have been programming since I was a kid. I am a huge proponent of Open Source (see my Github[1]). I am looking to join a smaller company, either as a FTE or on a contracting basis.

[1]: https://github.com/giodamelio