MurphyA/hacker-news huggingface dataset:
by mike-cardwell | 2025-07-19 10:50:46+00:00
You use an insecure library in your product, it is your responsibility to deal with that situation yes. You can deal with it by:

1. Fixing the insecure library

2. Getting somebody else to fix the insecure library

3. Switching to a different library that isn't insecure

4. Patching over the problem in your application so that the insecure parts are no longer insecure (Santising and stripping html before passing to Webkit, as many, many other email clients do)

5. Warning the users about the problem (A "do not rely on for privacy" notice next to the feature in the UI, with a link to more info)

Evolution Mail wont do any of this. They don't accept any responsbility for the problem. They submitted a bug report to the library and then sat on their hands. If this is still a problem a year from now, they will still accept no responsbility and still claim there is nothing they can do about it, and their users will still be suffering from the problem with absolutely no knowledge about it.

I find it astonishing that anybody thinks their approach to this is acceptable, or even normal in the software industry. It's totally bizarre.
by dylanbyte | 2025-07-19 10:50:58+00:00
These are high school level only in the sense of assumed background knowledge, they are extremely difficult.

Professional mathematicians would not get this level of performance, unless they have a background in IMO themselves.

This doesn’t mean that the model is better than them in math, just that mathematicians specialize in extending the frontier of math.

The answers are not in the training data.

This is not a model specialized to IMO problems.
by tim333 | 2025-07-19 10:51:02+00:00
Why not both? I can see the argument for not having millions of unskilled immigrants crossing from Mexico but both Dwarkesh and the researcher/engineer would benefit the US. I don't think it's that hard to get O1 as a researcher/engineer - you basically have to get to the level where you present at conferences and are seen as an expert in whatever.
by Davidzheng | 2025-07-19 10:51:03+00:00
P1 has in setup section basically a very precise summary of proof which it fills in later "So main is: (a) for n>=4, any n-line cover must contain a side-line; inductively reduce to n=3. (b) Analyze n=3 exactly."

I suspect there's some (tree-based?) search + separate process verifier + large # of parallel generation sessions. Coming just from hints of how structured/monotone the generated text is.

A lot of colons. like So: Now: Need: etc..
by tombarys | 2025-07-19 10:51:59+00:00
I am a book publisher & I love technology. It can empower people. I have been using LLM chatbots since they became widely available. I regularly test machine translation at our publishing house in collaboration with our translators. I have just completed two courses in artificial intelligence and machine learning at my alma mater, Masaryk University, and I am training my own experimental models (for predicting bestsellers :). I consider machine learning to be a remarkable invention and catalyst for progress. Despite all this, I have my doubts.
by ofalkaed | 2025-07-19 10:52:41+00:00
I feel better about limiting the size of my drop in the bucket than I would feel about just saying my drop doesn't matter even if it doesn't matter. I get my internet through my phone's hotspot with its 15gig a month plan, I generally don't use the entire 15gigs. My phone and and laptop are pretty much the only high tech I have, audio interface is probably third in line and my oven is probably fourth (self cleaning). Furnace stays at 50 all winter long even when it is -40 out and if it is above freezing the furnace is turned off. Never had a car, walk and bike everywhere including groceries and laundry, have only used motorized transport maybe a dozen times in the past decade.

A nice side effect of these choices is that I only spend a small part of my pay. Never had a credit card, never had debt, just saved my money until I had enough that the purchase was no big deal.

I don't really have an issue with people who say that their drop does not matter so why should they worry, but I don't understand it, seems like they just needlessly complicate their life. Not too long ago my neighbor was bragging about how effective all the money he spent on energy efficient windows, insulation, etc, was, he saved loads of money that winter; his heating bill was still nearly three times what mine was despite using a wood stove to offset his heating bill, my house being almost the same size, barely insulated and having 70 year old windows. I just put on a sweater instead of turning up the heat.

Edit: Sorry about that sentence, not quite awake yet and doubt I will be awake enough to fix it before editing window closes.
by Msurrow | 2025-07-19 10:55:20+00:00
Lunar Bank.

I don’t have any experience integrating to their API myself but Lunar is a relatively new Danish (so EU) 100% digital bank. See https://www.lunar.app/en/personal/what-is-lunar

They have an Open API: https://developer.openbanking.prod.lunar.app/home

Edit: “new” in finance terms - started 2015.
by ddingus | 2025-07-19 10:55:58+00:00
I do not see these definitions as quite right:

>Asynchrony: the possibility for tasks to run out of order and still be correct.

I like this. Great addition and yes it was missing.

>Concurrency: the ability of a system to progress multiple tasks at a time, be it via parallelism or task switching.

I would say here, be it multiprocessing or task switching.

>Parallelism: the ability of a system to execute more than one task simultaneously at the physical level.

This is technically multiprocessing as expressed above.

So, what is the difference between parallelism and concurrency?

Parallel tasks are like shaders. It is the same task, running many instances at the same time at the physical layer.

GPU devices are capable of parallel computing, for example.

Concurrent tasks are different tasks running at the same time at the physical layer. Often, the data is different too. Say a sprite engine running at the same time as a video display driver on the physical layer.

The shaders can all be running the same code but are processing different data elements, say each pixel having a position and is part of a larger rendering.

A GPU is a massively parallel multiprocessor.

A Threadripper is a massive Concurrent multiprocessor. It can also perform as a modest parallel multiprocessor.

The difference lies in what the various compute units can do and what they are actually doing.

Put another way, a 10ghz single core CPU is not a multiprocessor. It performs sequential computing and it can task switch to handle the same task load as a lower clock rate multiprocessor would handle.

A 10ghz multi core CPU is a concurrent multiprocessor, but is not a GPU. It could run shaders on par with a lower clock GPU. BUT a lower clock GPU cannot run a variety of tasks in the same way.
by leereeves | 2025-07-19 10:56:10+00:00
That is interesting, but the authors point out:

> In our study, in situ hybridization detected both mRNA derived from the vaccine and mRNA from the SARS-CoV-2 virus. ... our in situ hybridization method has high sensitivity and could detect trace amounts of mRNA, possibly reflecting unrecognized asymptomatic infections. These findings emphasize the need for caution in interpreting the presence of spike protein as exclusively vaccine-related.

We should also note that the study doesn't show that the original vaccine mRNA somehow survived for months, only that mRNA matching the vaccine sequence was detected by complementary probes.

I wonder if, in these cases, the vaccine was administered to someone with an active (but asymptomatic) COVID infection, and the vaccine mRNA was copied by the same RNA-dependent RNA polymerase that copies the viral RNA.

That might explain why both vaccine and viral RNA were found.
by mike-cardwell | 2025-07-19 10:56:25+00:00
So, at work, you find out a library you're using is insecure. Do you:

1. Submit a bug report to the library and then do nothing else, for over a year, with no end in sight, and say it's not your problem, you can't fix it, and there's nothing you can do, and you wont tell your users.

2. Address the problem by fixing the library yourself, or getting somebody else to actually fix it, switch to a different library, patch over the problem on your applications side?

If number 1 is your answer, you probably shouldn't be distributing software.

I'll let Balsa and Geary know about the preconnect problem. Will be interesting to see if they take the same awful approach that Evolution Mail did to addressing it.

[edit]

- https://gitlab.gnome.org/GNOME/geary/-/issues/1680

- https://gitlab.gnome.org/GNOME/balsa/-/issues/99
by homebrewer | 2025-07-19 10:56:37+00:00
Just a reminder that it doesn't have to be this way, and the Debian problem is mostly self-inflicted and caused by decades of backwards compatibility. You don't have to suffer it if you control what's running on your machines.

Let's see how btop (mentioned in the article) is packaged by other distributions.

Alpine: one very transparent and easy to understand shell script with about 20 LOC:

https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/c...

Arch: same thing (there are a couple more files there, one of them is for an optional new version checker, the other is automatically generated):

https://gitlab.archlinux.org/archlinux/packaging/packages/bt...

Void Linux: unlike the previous two, this uses a declarative language; it's still very short and easy to understand (though I prefer the imperative approach):

https://github.com/void-linux/void-packages/blob/master/srcp...

Chimera Linux: same as Void:

https://github.com/chimera-linux/cports/blob/master/user/bto...

I often write Alpine & Arch packages, and it's honestly a joy. For most programs it takes just a few minutes, how the result works is obvious to anybody even moderately familiar with Linux.
by LAC-Tech | 2025-07-19 10:57:27+00:00
This looks like such an interesting articles, but it's completely ruined by the fact that every sentence is its own paragraph.

I swear I am not just trying to be a dick here. If I didn't think it had great content I wouldn't have commented. But I feel like I'm reading a LinkedIn post. Please join some of those sentences up into paragraphs!
by kldg | 2025-07-19 10:57:42+00:00
They may eventually learn the valuable skill of politely smiling and nodding as someone talks with great passion about things with zero relevance to their day-to-day life, assuming they don't shut up about it at home.

Actually, tbf, my daughter's pretty interested in my coding and electronics projects. She picks things up alarmingly fast. I taught her a practically-one-way encoding scheme for passwords I've had incredible trouble teaching anyone else (LLMs also can't figure it out), and she completely understood it after the second example I gave and even added her own extra twist to it. Her passwords now are both memorable and extremely secure against dictionary attacks even with any mutation scheme someone could reasonably imagine.

-So I think that should probably go in the plus column.
by simgt | 2025-07-19 10:57:59+00:00
> if the primary concern is simply to reduce resource consumption to a minimum

..."required".

That allows you to fit pretty much everything in that requirement. Which actually makes my initial point a bit weak, as some would put "delivering 4K quality tiktok videos" as a requirement.

Point is that energy consumption and broad environmental impact has to be a constraint in how we design our systems (and businesses).

I stand by my accusations of whataboutism and strawmaning, though.
by nosianu | 2025-07-19 11:00:13+00:00
> the only thing preventing total war is the belief that it might be possible to fix it next year

And the knowledge that you cannot win when the other side controls the armed forces, the FBI, and all the governing institutions, a lot of states entirely too, and is clearly willing (and maybe even eager) to use them? The president and the people behind him probably look forward to their opponents trying. I think this "total war" might be very short.
by lll-o-lll | 2025-07-19 11:00:13+00:00
More powerful than a “fuzzing” test io would be a deterministic test io. I.e., one you can tick forward the various concurrent branches deterministically to prove that various races are safely handled. This makes it possible to capture all those “what if thread A executes this line first then B is executed” etc. Something that is missing in most concurrent frameworks.
by throwup238 | 2025-07-19 11:00:25+00:00
Agreed. I use Cloudflare Zero Trust for SSO authentication (I use Github for my self and Google/Apple for family) and Cloudflare Tunnels to expose homelab services behind NAT. It took an afternoon to set up the first service and adding services via IaC like terraform is easy.

The only time consuming thing since then has been figuring out how to use the Cloudflare auth header to authenticate with each individual app (and many don’t have multiuser capability so it’s not a big deal).
by Mawr | 2025-07-19 11:00:25+00:00
Your statement is meaningless, as you did not define what the x in 100x is and what being a "programmer" entails.

Is x the average?

Is a programmer someone who just implements the requested features, or, like bluecalm commented below, someone like the Lichess creator who apparently does all of "performance, interface, features,", etc.?

What metric are we using here? Revenue?
by mrob | 2025-07-19 11:01:17+00:00
I think eye size is important. Most spiders aren't considered cute but jumping spiders are an exception for many people because they have big eyes, e.g.:

https://en.wikipedia.org/wiki/Jumping_spider#/media/File:Pla...

And even the tachikoma from Ghost in the Shell: Stand Alone Complex (robots inspired by jumping spiders) can be considered cute:

https://en.wikipedia.org/wiki/Tachikoma
by lenkite | 2025-07-19 11:02:34+00:00
Its a fact that the EPA added ~6000 employees during the Biden administration and also instituted DEI policies to follow President Biden’s Executive Order 14035 (2021). This included employee-led special emphasis groups, LGBTQ+ events, and justice-oriented programs. All this is out of focus from the EPA's goal to safeguard the natural environment.

It should be NO surprise that there is massive push-back after a republican administration came to power. Donald Trump explicitly campaigned to cut the EPA’s size and funding and to eliminate DEI and environmental justice programs in the federal government.
by throwup238 | 2025-07-19 11:04:51+00:00
> Parallel tasks are like shaders. It is the same task, running many instances at the same time at the physical layer.

That’s single instruction multiple data which I would argue is an orthogonal concern. A better example of parallelism would be FPGAs. All of the gates are switching all at the same time* and you have to actually figure out how to synchronize the whole lot to get anything useful out of them.

* PLL notwithstanding
by justmarc | 2025-07-19 11:05:16+00:00
Oh I don't doubt it! I was thinking how does such a busy man have time for this... but we always have time for passions and side projects :)

The airwolf one was funny, since it was a childhood favorite, and what a funny little typo they had there.

When watching the video I was thinking to myself, could this series have influenced my future interests in ways I didn't even know? Fun.
by ants_everywhere | 2025-07-19 11:06:07+00:00
Usually the idea of critique was to create dissatisfaction with democracy, not to advocate for what the USSR was doing. For example, the KGB heavily promoted the US peace and anti-nuclear movements despite being strongly pro-war and pro-nuclear within the Soviet Union.

It's a bit like the fundamentalist religious people who talk a lot about how immoral everyone else is but then make excuses for the immoral things their leadership is doing. Or the congresspeople who talk about how important the family is but are serially unfaithful and don't see their kids.

It's more about having a useful way to attack people than an advocacy for a specific position or way of life.
by legacynl | 2025-07-19 11:06:27+00:00
> And above all else, we have a working democracy and not an oppressive regime? This whole debate often feels very disconnected and overblown in Germany.

Well as you can see from the US currently, a country that is now free and democratic, might not continue to do so in the future. But once you've given up the ability to use cash because you didn't need it then, how are you going to get it back when you do need it?
by bluGill | 2025-07-19 11:06:31+00:00
Cash costs more nearly that much when you count all the time spent counting and recounting it - at least 8 times for every transaction. (the buyer finds and counts, then the cashier counts, then count change. Then the manager counts and recounts the till, finally the bank counts and recounts it - several of the above will come up with a miscount and recount additional times to verify). Then we add crime loss on top of that.

visa is saving the country a lot of time/money.
by Davidzheng | 2025-07-19 11:06:58+00:00
P3: interesting that in the basics section, it makes an easy observation but no proof sketch. unlike P1/P2 (P1 has full proof idea sketch P2 says we'll bash). This suggests actually the whole proof is generated one-shot (unlike my previous comment). I guess it's not doing search in the text space (like output some line search for next line etc). OFC there's probably some final process outputing the proof from some parts so it could be obfuscated the search.

come to think of it, informal proof gen probably can't easily use search? Probably it's doing parallel generation with some information sharing + global verification process. No real evidence except for the fact that the entire proof is very unstructured despite at each line it's written with some style consistency.
by knuckleheads | 2025-07-19 11:08:37+00:00
Ran the math and and it's factually incorrect to say there's not enough blood in the world to write out all these rules.

There's about ~8 billion people in the world today. Estimates say an average adult has 5 liters of blood in their body, so let's say 2.5 liters per person to account for children. That's about 20 billion liters of blood for available for your macabre comparison.

Looking at the federal register[0] and running some javascript on the page [1], we get an estimate of 4.1 million pages in the federal register in it's whole history. We could get into page yields for various types of printing and how that effects how many pages could be printed, but at a generous one liter per page, it's obvious it could be done.

Skipping some more estimates, but the federal register would require about 1 oil-drum of blood or 115 liters to write out, which would only take one person donating blood at the recommend safe rates about 40 years to complete by themselves. A long time for sure, but if you start today, you could hopefully see just how wrong you were before the end of your life.

[0] https://www.federalregister.gov/reader-aids/federal-register... [1] $("tbody > tr > :nth-child(9) ").text().split("\n").map(function(l){return parseInt(l.trim().replace(",",""))}).filter(function(l){return l ? l: 0}).reduce(function(a,b){return a+b},0)
by Someone | 2025-07-19 11:09:05+00:00
> That's a nice trick, but contrary to function statics, it is susceptible to SIOF.

For those (like me) who don’t recognize that abbreviation, “The static initialization order fiasco (ISO C++ FAQ) refers to the ambiguity in the order that objects with static storage duration in different translation units are initialized in” (https://en.cppreference.com/w/cpp/language/siof.html)
by bell-cot | 2025-07-19 11:09:11+00:00
Until "back and forths with the customer until they create enough pressure on our higher ups so that they have to order him to change that code", I was going to suggest polite ways of asking your manager to get involved.

After that - sounds like your (and/or his) manager are too weak/ineffective to fix the obvious problem. And more of the same, up the chain.

How long have you been there, and what might other coworkers think? I'd probably be polishing my resume - on the theory that low-functioning orgs can go away fairly quickly. And that what I didn't know about the politics behind that mess could still hurt me.
by psychoslave | 2025-07-19 11:09:28+00:00
For the first one, it really feels like only a matter of how you break lines. Sure there is also the matter of anonymous function syntax, but

The latter is more fair, here is a possible solution:

const gen = (function* () { for (let i = 0; i < n; i++) yield a(i); })(); const run = next => !next.done && next.value.then(() => run(gen.next())); run(gen.next());

Or something similar using reduce. But in both cases, it illustrates the point, I guess.

But if we are at point we can introduce new keywords/syntax in the language, it would just as well possible to come with something like

a.chain(b, c)

In case you need to pass parameters

a.chain([b, p1, p2], c)

And for the latter case

const indexes = (function* () { for (let i = 0; i < n; i++) yield i; }) a.through(indexes)
by Tainnor | 2025-07-19 11:10:21+00:00
Mathematics cannot be "solved", that's a consequence of Gödel's First Incompleteness Theorem.

It can already be "cheaply verified" in the sense that if you write a proof in, say, Lean, the compiler will tell if you if it's valid. The hard part is coming up with the proof.

It may be possible that some sort of AI at some stage becomes as good, or even better than, research mathematicians in coming up with novel proofs. But so far it doesn't look like it - LLMs seem to be able to help a little bit with finding theorems (e.g. stuff like https://leansearch.net/), but to my understanding they are rather poor beyond that.
by healsjnr1 | 2025-07-19 11:10:21+00:00
The problem that seems to be being missed here is that while fraud is one reason Visa has say over what they accept, the much much much bigger issue is ATF, Money laundering and Sanctions.

Cards like the Freedom card will never fly with either the Networks or the Issuing Banks as these kinds of payment instruments are immediately used to wash illicit funds.

Visa's stance with Steam is bollocks, and it is another example of the monopoly they hold over payment processing. They shouldn't have the ability to impact a legit merchants catalogue.

But the idea that we can have a Freedom card also doesn't checkout. The less known about what the money is spent on the higher the risk. And cost of complying with Suspicious Activity Reports regulations is really high (as the costs of you breach the requirements), so any attempts to create / run this kind of thing often don't stack up.
by wanderinglight | 2025-07-19 11:10:26+00:00
I like the idea. I"m not able to understand how quaternions alone can be used to navigate through space without a position translation vector.

The uses cases in the docs for drone control and manipulating kinetic arms with multiple degrees of freedom look promising though.

What does SpinStep provide? - Is it a traversal framework for quaternions? - Or it is a constraint solver that computes a series of transformations to make each node in a scene comply with a final end state

If it can be used for translating nodes as well via quaternions I would be interested in implementing a formation coordinator for it.

If you have an idea of what quaternion transformation will help achieve in Ketu and what the end state looks like please do create an issue on the Repo. I'll see if I can implement it using the concepts in SpinStep.