MurphyA/hacker-news huggingface dataset:
by close04 | 2025-08-11 07:20:36+00:00
> What happened in the early 2010s?

I'd say Tesla built a futuristic computer on wheels, with huge screens, always-on internet connectivity, smarter remote features than most other cars, etc. The car itself was exotic enough by being an EV and that drew attention to these other features too. Everyone else started to emulate them for better or worse.

For now these things are modular because it was the cheapest way to build them. If manufacturers get over the hurdle of cost and find a way to have everything more vertically integrated (think Apple) then we'll lose all access to tinker with the hardware which might be a couple of black-box chips, or the software.

This is probably what Apple was trying to sell as a smart car to car manufacturers. They might have dropped those plans to focus in CarPlay and have the phone be that "smart car". Hopefully some brands go the other way and make a dumb car where the brain is entirely the phone but that's handing out a lot of their agency to the phone manufacturer.
by twelve40 | 2025-08-11 07:21:04+00:00
> Handing your codebase to an AI company is not nothing.

it's a battle that's already lost a long time ago. Every crappy little service by now indexes everything. If you ever touch Github, Jira, Datadog, Glean (god forbid), Upwork, etc etc they each have their own shitty little "AI" thing which means what? Your project has been indexed, bagged and tagged. So unless you code from a cave without using any saas tools, you will be indexed no matter what.
by mdaniel | 2025-08-11 07:22:40+00:00
Regrettably due to the licensing stupidity there's actually two bash on macOS: /bin/bash and $HOMEBREW_PREFIX/bin/bash they do differ (as is expected by a two major version spread)

I'm firmly in the never-zsh camp, but I'd guess so long as one doesn't do something silly like use #!/bin/zsh in shared scripts you can continue to use whatever interactive shell you like

I had a college who was hard core into fish but had to be completely self sufficient because he was the only user in the office. I presume it's the same as being on Linux in a Windows shop or being on Windows in a macOS shop: no one has the day to day experience to have the answers handy
by renewiltord | 2025-08-11 07:22:55+00:00
Indeed, one of the great tragedies of life is that this happens. Humans cannot survive without water, yet the median water bill is $80, which is about 1% of the median household's income. People make so much money but refuse to pay for something that literally sustains their life. Join me in requiring that every household at least 10x the amount they pay for this precious water. To employees of water companies: Thank you for your service.
by obfuscator | 2025-08-11 07:24:03+00:00
My biggest selling point for this would be, that the volume is probably the same throughout the whole text. I am listening to audiobooks to fall asleep, and many voice actors go from very quiet to loud in conversations. It may be good narration, but it's sometimes to quiet to understand, so I need to increase the volume only to be woken up by some loud lines later.

So I imagine generated audiobooks to be good in that regard. Another option would be to have a "normalize volume" setting at audible, or other services.
by musicale | 2025-08-11 07:24:38+00:00
> Wasn't the first iPhone basically just an iPod with a sim card?

It's the other way around. The iPod touch (introduced September 2007) was basically an iPhone (announced January 2007) without the phone part.

> I mean smart phones are a great achievement, but they were an incremental improvement, nothing to be blown away by?

Feature phones ("dumbphones"), even ones with cameras or music player functionality, were and are extremely limited compared to smartphones like the Palm Treo, which was basically a pocket-sized, wireless internet-connected computer with a much larger, color screen, OS and GUI, installable apps, and a tiny (but usable) keyboard.

https://en.wikipedia.org/wiki/Palm_Treo

Phones using DoCoMo's i-mode (which took off in Japan starting in 1999) were sort of a bridge between feature phones and smartphones. i-mode will finally shut down in 2026.

https://en.wikipedia.org/wiki/I-mode

Smartphones also generally looked very different pre-iPhone and post-iPhone.

> "What we had suddenly looked just so . . . nineties," DeSalvo said. "It's just one of those things that are obvious when you see it."

https://www.engadget.com/2013-12-19-when-google-engineers-fi...
by JdeBP | 2025-08-11 07:24:40+00:00
Very well, because OS/2 1.x introduced, for the first time in Microsoft's MS-DOS lineage, a fully-fledged VIO subsystem that abstracted TUI applications programming wholly away from touching the hardware. (GUI applications programming with VIO still required some low-level stuff. But TUI applications programming was entirely in terms of high-level console I/O with streams of characters and low-level console I/O with a 2-dimensional output buffer. There was no mixture of directly poking hardware and calling into the machine firmware.)

I regularly ran in 50-line VGA mode with zero problems. One could session-switch between full-screen OS/2 TUI programs (that were genuinely operating the hardware in VGA text mode, not simulating it with the hardware itself being used in graphics mode as became the norm with other operating systems much later and which OS/2 itself never got around to) and the Presentation Manager desktop.

I even had a handy LINES 50 command that wrapped the VIO mode change function, that I gave to the world as one of many utilities accompanying my 32-bit CMD, and which in 32-bit form was layered on top of a debugged clean room reimplementation of IBM's never-properly-shipped-outwith-the-Developers'-Toolkit 32-bit version of the VIO API.

You can still download it from Hobbes, today.

* https://hobbesarchive.com/?detail=/pub/os2/util/shell/32-bit...
by RansomStark | 2025-08-11 07:24:45+00:00
I'm sorry but how does a fresh out of college senior consultant gain such amazing experience?

I've been unfortunate enough to work with 3/4 of the big four (senior enough to at the table, not senior enough to call bullshit). Sales pitch is all partners; older people, lots of industry experience in relevant areas, great pitch. But, come time to deliver and an early 20-something shows up. So either its all covering your ass, or its just recycling reports from a shelf, either way there's no experience involved
by theshrike79 | 2025-08-11 07:25:42+00:00
The metric is: I run the code and it works?

I've read other people's code for 25 years for a living. I'm pretty good at it.

So when I get a piece of code or an algorithm, I can read it check if it looks like something I'd allow in a pull review.

We also have this thing called "unit tests", which are pretty good at detecting erroneus code. Some people even write them first and then adjust their code to match.
by flowerthoughts | 2025-08-11 07:26:24+00:00
> a disk encryption key is a shared secret and commonly stored in a TPM.

Thinking some more about this, you're right. If the stored shared secret is high entropy, and the user might choose a weak password, then using the TPM as a defense against password cracking is a useful reason for the seeming indirection.

That assumes the TPM can e.g. rate limit extraction attempts and not be foiled by power-loss or sped up oscillators or similar externalities.
by pjmlp | 2025-08-11 07:27:42+00:00
The goal for Valhalla is value types, reiifed generics if they ever happen is still open.

The project was announced in July 2014, hardly 20 years.

Also the reason they are still at it, is how to run old JARs withouth breaking semantics, in a Valhalla enabled JVM.

Had Oracle wanted to do a Python 3, Valhalla would have been done by now, however we all know how it went down, and Java 9 was already impactful enough to the ecosystem.
by gorgoiler | 2025-08-11 07:28:51+00:00
Even better, do a Google image search for “porn” and turn off filters. You will see pornography hosted by Google’s servers! I can’t understand why, at least in the spirit of these new laws, Google is exempt from age verification.

(In practice, sections 80 and 81 in the Online Safety Act carve out exemptions for “search” and “user-to-user” sites. For the former, presumably the exemption is because the actual porn is served from machines other than Google’s.)
by TrackerFF | 2025-08-11 07:29:21+00:00
I've found that no mater what country I've been to, or what social classes the people belong to, three topics have a 95% success rate when it comes to social relations with guys: sports, cars, fishing/hunting. And to some degree handywork.

It is a bit unfortunate, as I'm not at all interested in talking about those things - but they are such staple topics, that you can come off as a sort of outcast if you can't keep a short convo on those things.

Another observation has been that some topics are very polarized. In some countries you can talk pretty freely about politics, while in other places it is a faux pas.

But then again, part of finding out what the other party likes talking about is a skill in itself.
by TruePath | 2025-08-11 07:29:24+00:00
It is worth remembering that before artificial lighting the normal sleep pattern is to sleep in two segments and get up in the middle to have sex, talk, do some chores, change the baby etc. And I believe a normal sleep cycle is something like 90 minutes so if you *really* sleep in 3 hour chunks that's actually probably healthier than the normal us sleep schedule. I mean many of us find the usual wake at 7am alarm schedule to be pretty damn brutal. However, if what you actually do is kinda lie around check your phone in bed etc and then get blasted awake by an alarm that's a different story.
by willvarfar | 2025-08-11 07:30:23+00:00
Very cool!

A long time ago I used to make mosaics of game-making competition screenshots https://williame.github.io/post/143376853353.html https://williame.github.io/post/127137593983.html

The algorithm for doing so is https://en.wikipedia.org/wiki/Hungarian_algorithm

It might be fun to offer some mosaic layouts as well as the embedding-based layouts?
by sigmoid10 | 2025-08-11 07:30:34+00:00
That's just your average astroturfed marketing spin from affected companies. There are quality phones out there with good chassis (including IP68 waterproof) and replaceable battery. In fact we'd already come a long way with phones that don't require melting of glue and special one-time tools to open or remove the battery. That's literally just manufacturers trying to squeeze their customers with expensive (and exclusive) repair contracts. And since Apple already overcharges the base devices by a lot, they'd still make a ton of money after the rule goes into effect (unlike certain other brands).
by zuminator | 2025-08-11 07:31:05+00:00
As a native speaker my feeling is that if we're talking about "I'll try and X" vs "I'll try to X," they're mm@$be asking you neutrally to attempt something for the first time, but "try and get home without taking any detours" sounds as, if we've been through this issue on several occasions, and now I'm annoyed.
by sergiolema | 2025-08-11 07:31:36+00:00
I've developed many projects, and all the time, the decision was direct: let's create a container with Docker.

But recently, I've reached some dead-ends with the containers, so I'd to made the question: VM or Container?

While containers have become the de-facto standard for modern applications, the lines between these two technologies are starting to blur. The rise of new, security-focused container runtimes proves that developers and infrastructure engineers are seeking a middle ground. Let's break down the core differences and explore the tools that are changing the game.
by sam-cop-vimes | 2025-08-11 07:31:38+00:00
Erlang's runtime system, the BEAM, automatically takes care of scheduling the execution of lightweight erlang processes across many cpus/cores. So a well written Erlang program can be sped up almost linearly by adding more cpus/cores. And since we are seeing more and more cores being crammed into cpus each year, what Joe meant is that by deploying your code on the latest cpu, you've doubled the performance without touching your code.
by MrGilbert | 2025-08-11 07:32:10+00:00
> You make a bunch money too, should you pay $100 for that taco? It's nothing to you.

Looking at my yearly net income, paying 100$ for a single taco in a year would mean that 0.26% of my net income would go into a taco. Paying 0.1$ for a single taco would make it 0.00026%. According to the consensus in this comment section, that would be pretty gracious. Yes, that's where I'm going with this.

//Edit: Thanks at postflopclarity for pointing out my wrong math.
by kafrofrite | 2025-08-11 07:33:44+00:00
The answer to your question is WebKit (because iOS), kernels (XNU, Linux, Windows) etc. In case you are not familiar with the domain I'd start with user-space exploitation and relevant write ups to get my feet wet. You'll find plenty of write ups, blogs etc. so I'll skip those. Some of the books I generally found interesting are [1],[2], [3]. There's more to that, including fundamental concepts of CS (e.g., compilers and optimization in JITs, OS architecture etc.). I believe also https://p.ost2.fyi/dashboard has some relevant training.

[1] https://nostarch.com/zero-day

[2] https://nostarch.com/hacking2.htm

[3] https://ia801309.us.archive.org/26/items/Wiley.The.Shellcode...
by georgemcbay | 2025-08-11 07:34:02+00:00
Finding issues in large complex projects is generally easier than smaller projects. More code, more bugs. But its still difficult to find serious issues on the level of a sandbox escape in Chromium just because Google's long-running reward system means lots of people have spent lots of time looking into it, both manually and using automated fuzzer tools.

Back in ye olden days of 2014 I randomly stumbled upon a Chrome issue (wasn't trying to find bugs, was just writing some JavaScript code and noticed a problem) and reported it to Google and they paid me $1,500. Not bad for like half an hour's work to report the issue.

https://issues.chromium.org/issues/40078754
by dig1 | 2025-08-11 07:34:22+00:00
Sandbox escape with high-quality report in Chrome: $250k [1], yet Mozilla will offer you $20k [2] for that...

[1] https://bughunters.google.com/about/rules/chrome-friends/574...

[2] https://www.mozilla.org/en-US/security/client-bug-bounty/
by esperent | 2025-08-11 07:34:24+00:00
I recently played South of Midnight, which is one of the best games I've played in years. I'm really surprised it didn't get more attention. I think it has the best sound design of any game I've ever played and beautiful art and story throughout.

It uses a stop motion style for character animations, which is pretty close to low frame rate, I'd estimate around 15fps (at least the way it was implemented there). I have to say it was the one part of the game that I disliked. I could see the purpose, I could see that it fit well with the general art direction. I just found it very uncomfortable and tiring to look at after a while. Fortunately they were smart enough to acknowledge this with a menu setting to disable it.

If you do decide to artistically lock your game to a low frame rate, please do your players a favor and allow them to unlock it.
by SlightlyLeftPad | 2025-08-11 07:34:32+00:00
Pretty pessimistic frankly. Management at all levels pushing for nearshoring SWE labor, meanwhile we’re training AI as a long term solution to fill the skill gap in the same nearshore labor. We were hired to be smart people and it’s frankly an insult to gaslight us into believing that it’s simply because it makes us more productive. Of course there’s a push for it with the intent to replace us. Why else would it be forced down our throats?

I’m looking for a way out of tech because of it.
by dontdoxxme | 2025-08-11 07:36:01+00:00
Bugs are "High value" in different ways, you have to find the companies willing to pay highly. Most of the high payers are on bug bounty programs (like hackerone.com) and don't always give you ability to talk about bugs later.

Google is quite unique here, particularly given Chrome is paying easily 10x what Mozilla would for a sandbox escape. Apple is in the middle -- per [1] a "WebContent sandbox escape" would be $50k, but to get $250k on their scale you need to combine that with a kernel bug.

So if you want to optimise for "value", you have to pick the targets that are easier (still not easy, obviously).

[1]: https://security.apple.com/bounty/categories/
by culebron21 | 2025-08-11 07:36:08+00:00
I think the article and the book tend to forget the terrible living conditions in cities back then, and instead psychologize them.

More than half of people in big American cities lived overcrowded -- that is, >2 people in a room, INCLUDING KITCHENS! Many rented just a bed for half a day! They slept, and the other half the other person, who worked in night shift, slept on it.

In big cities, the traffic in the streets, with horse carriages riding on cobble stone, and cars, started at 6:00 and lasted till midnight. Steam locomotives made a lot of noise and smoke. That's cortisol, lower immunity, more other consequences.

And bear in mind, not everyone had electricity, not to speak of central heating. You had lots of chimneys everywhere. Not everyone had sewer, tap water and so on. I guess, a good deal of these people migrated to cities from more quiet places, and since there was no notion of harmful environment.

We tend to be surprised why modernism got so much traction, and even the best architects hated cities (e.g. Frank Lloyd Wright, who wrote something like "a city plan is a fibrosis"), but the reasons were everywhere, real and brutal.

So I'm pretty sure the reason for people being nervous, is quite physical, not "people were scared", as you may conclude from the article (although this is not explicitly stated).

[EDIT] Forgot about the social environment. When you move to a big city as an adult, without the college/university to give you social fabric, you're quite lonely. And in big cities this fabric was getting thinner with urbanization. And you're short on money, can afford only a bed, and count every cent. I think it's a more serious reason to get neurotic than times changing too rapidly.
by dragonwriter | 2025-08-11 07:36:37+00:00
> Wasn't the first iPhone basically just an iPod with a sim card?

No, the iPods that were like iPhones (iPod Touch) were after the iPhone, not predecessors. The main iPod at the time of the iPhone introduction ("iPod Classic") had a small, non-touch screen in the top area of the face (except, most of the face taken up by the physical "click wheel" control, and a hard disk for storage, and other immediately pre-iPhone iPod's were basically scaled down versions of the same design (with Flash memory on, IIRC, the Nano and Shuffle, and no screen on the Shuffle.)
by bravetraveler | 2025-08-11 07:36:55+00:00
Ditto. The contributions are saying 'hello' and soliciting input, in one. Also providing the contributor with an opportunity to learn the product in their terms.

I know, I know. The horror of an individual for us all.

I assume the proposition is this: one has no chance to produce value without firm guidance from the onset. Or the time learning is a tragedy. I doubt both of these very much. PRs are another conversation.

The others are free to take their turns. In this hypothetical, apparently, the other side has been unresponsive. Where's their ire; left behind at the bar?

Sorry we didn't apply the correct social pressure or wait until everyone was available at the same time for a call, I guess. I understand how that might hurt optics... I, the baby with superpowers in this scenario, just don't/can't care.

Handholding isn't a requirement. Guess what is: communicating the changes. Look at the PRs. Now that management is involved, we can have a meeting about them going unattended.
by flembat | 2025-08-11 07:37:51+00:00
Look at computer systems that cost 2000 or less and they are useless at running LLM coding assistants for example locally. A minimal subscription to a cloud service unfortunately beats them, and even more expensive systems that can run larger models, run them too slowly to be productive. Yes you can chat with them and perform tasks slowly on low cost hardware but that is all. If you put local LLMs in your IDE they slow you down or just don't work.
by JimDabell | 2025-08-11 07:38:07+00:00
> I'm literally debating against a conspiracy theory.

You’re debating against things people have directly experienced for themselves. You asked:

> Isn’t it just much simpler to accept that they indeed provide value in making good judgements?

It is not simpler to accept that when you have seen with your own two eyes multiple cases where they definitely were not making good judgements.
by johnisgood | 2025-08-11 07:38:35+00:00
I always say, that if you want to learn a language, then surround yourself with it.

I learned all languages I know this way. When it comes to Polish, I mainly saw people writing in that language without knowing much. Translator came to the rescue. I picked up common words and phrases that way, and it helped with grammar, too, but it was not a fast process as it is a difficult language. I do not speak it well, although I speak it understandably enough, because I did not listen nor speak to people in the language much, as opposed to English, and this includes movies, TV series, etc.

Spanish was easy, all it took was a translator and long conversations with 2 people and some music. :D Pronunciation is not an issue, my native language helped.

French would have been a bit more difficult to learn, as I have tried, then lost interest and reasons to do so.

I am trying to learn Arabic, but for me, that is a whole different one.
by CoolCold | 2025-08-11 07:39:13+00:00
You are probably talking about VMs - those do have traffic limits. Servers, on the other side, with default 1Gbit NICs doesn't (let's say until you consume 80%+ of bandwidth for months)

Quoting:

> Traffic

>All root servers have a dedicated 1 GBit uplink by default and with it unlimited traffic. Inclusive monthly traffic for servers with 10G uplink is 20TB. There is no bandwidth limitation. We will charge € 1 ($1.20)/TB for overusage.
by sour-taste | 2025-08-11 07:39:24+00:00
I feel like it's the opposite. In a huge project there's bound to be many weird interactions between components, and it's about picking the important/security relevant ones and finding edge cases. In this case the focus was on the interaction between the renderer process and the broker. That forms a security boundary so it makes sense to focus your efforts there - google will pay for such exploits since they can in theory, when combined with other exploits in the renderer process, lead directly to exploits that can be triggered just by opening a web page. So, yes, chrome is a huge project but the list of security-relevant locations to probe actually isn't actually all that long. That's not to diminish the researchers work, it still takes an insane amount of skill to find these issues.
by yoz-y | 2025-08-11 07:39:32+00:00
While I’ve yet to meet somebody into fishing or hunting, I agree about cars and sports. Unfortunately since I have interest in neither it can be hard to fit in sometime.

Weirdly, as somebody non interested in these common topics it also feels like it’s up to you to figure out a topic of common interest and it really isn’t.

About sports also, most people super “into” sports don’t do any. Which is ironic because a conversation about technique is something I’ll gladly have.