MurphyA/hacker-news huggingface dataset:
by JdeBP | 2025-08-19 17:41:45+00:00
What's the likelihood that it's a hex dump one of these?

* https://github.com/virtualxt/virtualxt/tree/develop/bios

Because if you look back far enough you'll find that this is based upon something called fake86 written by a Mike Chambers in 2010, of which there are many half-written derivatives including this:

* https://github.com/lgblgblgb/fake86/tree/master

obviously replicated here:

* https://github.com/xrip/pico-286/blob/0d2c76ba51572addaeed8a...

and which loads a pcxtbios.bin file in several flavours, including but not limited to:

* https://github.com/lgblgblgb/fake86/tree/master/bin/data
by jmcphers | 2025-08-19 17:41:46+00:00
It is true. Some things you can't build in extensions for VS Code are:

- core services (Positron's core language system is an API, and R and Python are extensions) - native panes (you can contribute webview panes but they're slow!) - toolbars for other panels, or global toolbars - modal dialogs or any UI other than notifications and quick-pick lists - custom layouts

At a higher level, Positron is a platform that contains data science tools for _other_ extensions to use, and doesn't make sense as an extension itself. The R and Python extensions are the first two we built, but the platform is extensible to other languages.
by logifail | 2025-08-19 17:41:55+00:00
"DeepMind Technologies Limited, trading as Google DeepMind or simply DeepMind, is a British–American artificial intelligence research laboratory which serves as a subsidiary of Alphabet Inc. Founded in the UK in 2010, it was acquired by Google in 2014 and merged with Google AI's Google Brain division to become Google DeepMind in April 2023"

Q: Is the HQ nominally being in London at all relevant given it was acquired by Alphabet/Google? I'm sure the accountants have the tax status all sorted by now...
by KingLancelot | 2025-08-19 17:42:57+00:00
Wasm is ANYTHING but basic.

Fuck javascript, fuck wasm, fuck html, fuck css.

Rebase it all on XML/XPath/XQuery that way you only need ONE parser, one simple engine.

This whole kitchen sink/full blown OS nonsense needs to end.

Edit: You’re clearly a wasm shill, wasm is an abomination that needs to die.
by viega | 2025-08-19 17:42:57+00:00
The kernel is responsible for maintaining the wait queues, and making sure that there is no race condition on the state that should preclude queueing.

It does not care how you use the queue, at all. It doesn't have to be done with a locking primitive, whatsoever. You absolutely can use the exact same mechanism to implement a thread pool with a set of dormant threads, for instance.

The state check in the basic futex is only done to avoid a race condition. None of the logic of preventing threads from entering critical sections is in the purview of the kernel, either. That's all application-level.

And most importantly, no real lock uses a futex for the locking parts. As mentioned in the article, typically a mutex will directly try to acquire the lock with an atomic operation, like an atomic fetch-and-or, fetch-and-add, or even compare-and-swap.

A single atomic op, even if you go for full sequential consistency (which comes w/ full pipeline stalls), is still a lot better than a trip into the kernel when you can avoid it.

Once again, I'm not saying you couldn't use the futex state check to decide what's locked and what's not. I'm saying nobody should, and it was never the intent.

The intent from the beginning was to separate out the locking from the waiting, and I think that's pretty clear in the original futex paper (linked to in my article).
by ecshafer | 2025-08-19 17:43:05+00:00
https://github.com/posit-dev/positron

The source code looks very open.

This moving the goal posts of open-source to exclude anyone making money off of it is annoying. I can get the project for FREE and I can see the source code and make changes to it. How is it not open source? Because I can't also turn around and sell it?
by rickdeckard | 2025-08-19 17:43:10+00:00
That's not what I'm pondering.

On payment there is a clear transaction and a contract is made. Both parties agree on their duties for this exchange.

In this case there is no contract, instead the selling party doesn't want a contract (paywall) to reduce friction, but is packaging the product with something the user is supposed to consume, and is now seeking to secure this ROI somehow.
by switchbak | 2025-08-19 17:43:13+00:00
Yes - and they will craft that to align with their incentives, not yours. Many of which may well be decidedly against your interests. As this becomes the focal point of how people think and reason about the world it's not just the creator of the AI that will exert this control, but other powerful actors who often work against your interests.

Personally I don't love the idea of living in a Sci-Fi dystopia, regardless of who owns what.
by iotku | 2025-08-19 17:43:42+00:00
The server browser is deliberately hidden, neglected, and full of spam on the modern versions of CS.

It's no longer the "default" way to play, and only a select amount of people get around to using it. Despite a much larger playerbase, there is far less activity than there was in the past.

There's still community servers out there (and niche communities like surf and bhop when still possible), but they're only still around for legacy reasons. If there wasn't any lineage there it would have been removed entirely in GO.
by The_Fox | 2025-08-19 17:43:49+00:00
Yes although somewhere there will be an `if` statement to determine if the process being started should get the complete environment or a key to get the other keys or whatever. Best to make that `if` at the highest level of the architecture as possible and wrapped in something that makes it obvious, like a `DangerousUserCodeProcess` class.

The only other safety I can think of is a whitelist, perhaps of file pathnames. This helps to maintain a safe-by-default posture. Taking it further, the whitelist could be specified in config and require change approval from a second team.
by mytailorisrich | 2025-08-19 17:44:02+00:00
> Freely given consent is a lawful basis, allowing for processing even if it's not necessary for legal/contractual reasons that would qualify the processing for another basis (or a mix of necessary and unecessary).

Again, this is all a narrow and militant interpretation of "necessary for contractual reason", not least when all data show that the people are fine with it. In a contract, a form of quid pro quo is necessary, if targeted ads are the form of "payment" asked and if there is no imbalance of power or coercion (and it's hard to see how being refused access to a random website any sort of coercion or serious negative consequence) then there should be no issue and the "deal" is actually the main aspect of the contract. Any other outcome is either that the GDPR is badly drafted or that this is an ideological agenda at play (obviously I favour the latter).
by baerrie | 2025-08-19 17:44:10+00:00
Rigor is only valuable because the nuance of our existence, captured in the humanities and beyond the dichotomy of true or false, has been erroded away by an entire society built on top of abstract economic concepts in place of true communal bonds that sustained humanity since our inception. This is why Europe and many countries other than the US have healthier humanities, they still have some vestiges of true community that is the heart of humanity, not merely the honor among thieves we see in the US that unites us.
by iamlintaoz | 2025-08-19 17:44:26+00:00
Great question. Currently, the database landscape is very fragmented. We are faced with a multitude of database choices (different ACID guarantees, data modalities, scalability, and so on). Data pipeline become very complicated, and we believe there must be a better solution. That’s why we developed a common architecture called DataSubstrate and built different APIs on top of it. EloqKV with a Redis API is just one of them; we also provide a MySQL-API RDBMS and a MongoDB-API JSON database (both open-sourced). Our goal is to create the next-generation database foundation to support the growing demand from new generation of applications. We believe future AI agent-driven applications will generate huge volumes of queries and data that will be difficult to handle with existing solutions.

EloqKV is only slightly slower than Dragonfly—about 10–20%—but for good reason. Dragonfly is a pure in-memory database with a highly optimized network layer and a very specialized design. EloqKV, on the other hand, is a full-featured database with all the checkboxes you can think of: fully consistent, durable, distributed transactions, fault-tolerant, tiered storage, and more. Despite this, we incur very little overhead compared with state-of-the-art, purpose-built databases when we have the same workload guarantee. Our thesis is that we may not need dedicated specialized solutions if we can achieve comparable performance (and cost) with general-purpose systems.

We will also add vector support very soon. Please stay tuned.
by jonnycomputer | 2025-08-19 17:44:42+00:00
len(list(filter(lambda line: all([abs(x) >= 1 and abs(x) <= 3 for x in line]) and (all([x > 0 for x in line]) or all([x < 0 for x in line])), diffs)))

Well, point taken about the ordering, but there are many more legible ways to have written that code. Not everything has to be a one liner.

even:

def f(diffs): cond = lambda line: all([1 <= abs(x) <= 3 for x in line]) and ( all([x > 0 for x in line]) or all([x < 0 for x in line]) ) items = filter(cond, diffs) return len(list(items))
by pessimizer | 2025-08-19 17:44:45+00:00
What's not going to help is focusing on the suffering of pornographers, when porn is being used as a pretense in order to monitor and restrict communication in general. Most people don't care about the suffering of pornographers. Even the consumers of porn: enough has been made already, it can be copied and preserved forever with no quality loss, we're on the verge of being able to magic it up with AI to match our personal scripts, nobody needs more.

Focusing on how it makes pornographers almost as poor as average workers is almost an advertisement for internet censorship; I may have to call my rape a "grape," but at least a pornographer will have a bad day.

Being against porn is an issue for the base, politicians don't actually care. When you swallow their arguments whole, you've already lost.
by jdefr89 | 2025-08-19 17:45:01+00:00
Yea they sound like plausible enough arguments.. I often test my vague input against structured ones and for many tasks it didn't seem like hallucinations happened significantly less. Honestly the more structured you have to be, the less "general" your model probably is, and in theory you want your model to be as general as possible. Seems like here, you're simply helping it over-fit.. At least that's what my intuition tells me but I am yet to really check that out either.
by jeffchuber | 2025-08-19 17:45:20+00:00
if you want or need to optimize for speed, cost, scalability or accuracy.

dedicated solutions have more advanced search features enable more accurate results. search indexing is resource intensive and can contend for resources with postgres/redis. the cost and speed benefits are naturally more pronounced as data volume scales.

for example - chroma has built in regex+trigram search and copy-on-write forking of indexes. this feature combo is killer for the code-search use case.
by eszed | 2025-08-19 17:46:29+00:00
Thank you. That's really good.

I'd say in response that he's missing (or, at least, gestures towards but doesn't explore) an element of post-modernism - at least in literary criticism, which I know more about than specifically film - which is that it's inherently a critique of power relationships. The key post-modern observation is that all narratives are deliberately constructed - in other words, someone chooses what to include and what to leave out - so Who tells a story, and Why they tell that story in that particular way, in order to advance What view of the world is instrinsic to understanding them.

Maybe we - artists, critics, and audiences alike - are generally exhausted by that right now. Politics are particularly fraught, and decades of post-modern art and thought certainly can't claim to have advanced utopia, so what we're calling meta-modernism is certainly a response, but it's closer to (my generation's rallying cry) "whatever, man", than it is advancing a solution to anything we see ailing the world at the moment.
by giancarlostoro | 2025-08-19 17:46:48+00:00
One key way I use JetBrains AI or any LLM is to ask it what's wrong with my code, and get some insightful remarks that make reasonable suggestions. I havent used it to do PRs yet, since my employer has not invested in such tools, but I imagine it would help to catch big issues that we might miss and approve.
by ndriscoll | 2025-08-19 17:46:56+00:00
Looks like someone pointed out in the related thread yesterday[0] that this little known site[1] is using it for client-side templating.

[0] https://news.ycombinator.com/item?id=44909599

[1] https://www.congress.gov/117/bills/hr3617/BILLS-117hr3617ih....
by tgv | 2025-08-19 17:47:13+00:00
Trying to get it concise isn't easy. There is a cultural, shared definition. Fantasy simply isn't everything that involves fantasy. It has some specific ingredients. It seems to me that the fantastic element in Fantasy is the setting/environment/world where the characters operate, but that setting is not the important part. The story is about the characters, who usually behave realistic (given their options). It also tends to have a historical nature, although not accurate.

In sci-fi, there's often an (hypothetical) future setting/environment/world involved, but that doesn't really define the difference. The important part in sci-fi is how the events evolve in and how the characters react to and interact with that world, and how that particular definition of that world determines the outcome. The fantasy part is the main ingredient. It's a thought-experiment.

Chiang sets up a world, and his interest is in how that world affects "us" (the characters). It's not about the "arch" of the characters, but it's about the effect the world has on them.
by dc396 | 2025-08-19 17:47:33+00:00
It's unclear to me what "make the DNS security model cohere with IPSEC" means. DNSSEC was a direct response to the vulnerabilities identified by a number of folks and documented by Christoph Schuba (https://www.cerias.purdue.edu/assets/pdf/bibtex_archive/94-0...). ISC was hired as a sub-contractor by TIS (I signed the contract for ISC) to implement DNSSEC in BIND specifically to address the transaction ID flood vulnerability.
by tadfisher | 2025-08-19 17:48:29+00:00
> Why are these variables needed for this entire tooling?

They are not. The Github API secret key should never be exposed in the environment, period; you're supposed to keep the key in an HSM and only use it to sign the per-repo access token. Per the GH docs [0]:

> The private key is the single most valuable secret for a GitHub App. Consider storing the key in a key vault, such as Azure Key Vault, and making it sign-only. This helps ensure that you can't lose the private key. Once the private key is uploaded to the key vault, it can never be read from there. It can only be used to sign things, and access to the private key is determined by your infrastructure rules.

> Alternatively, you can store the key as an environment variable. This is not as strong as storing the key in a key vault. If an attacker gains access to the environment, they can read the private key and gain persistent authentication as the GitHub App.

[0]: https://docs.github.com/en/apps/creating-github-apps/authent...
by cholantesh | 2025-08-19 17:48:37+00:00
Great post; I'm reminded of how firstly 'no-code' was often used adjacent to 'low-code' in blogspam and press releases, but also how the only shop I've ever worked in that used such a tool had an ever-expanding team of devs building stuff with it, as opposed to the non-technical users it was supposedly meant to target.
by ActorNightly | 2025-08-19 17:48:42+00:00
Yeah this article gets a whole bunch of history wrong.

Back in 2000s, the reason why nobody was pursuing neural nets was simply due to compute power, and the fact that you couldn't iterate fast enough to make smaller neural networks work.

People were doing genetic algorithms and PSO for quite some time. Everyone knew that multi dimentionality was the solution to overfitting - the more directions you can use to climb out of valleys the better the system performed.
by lapcat | 2025-08-19 17:48:45+00:00
> I mean, you kind of asked for a response from mods by asking me to speak to the guidelines

I was requesting that you literally quote the relevant passage(s) from the guidelines or from other sources, which is simply copy and paste, not speaking for anyone.

You claimed that something was in the guidelines, but I read the guidelines and didn't find the thing you claimed, so direct quotes would seem to be the natural next step, not emailing the moderators, which feels like overkill.

> I don't think it's fair to call what I originally said an accusation per se, because I don't think it's necessarily up for debate what I was reminded of, as I am an authority on my own state of mind.

You can be reminded of anything you like, in your own mind. When you publish it, as a reply to me, it becomes for all practical purposes an accusation. I have thoughts about various people, including you, that I refrain from publishing.

> You yourself said you weren't finding it very entertaining, which to me seemed sarcastic and flippant

No, I was quite honest and sincere, about that and about the purpose of HN itself. The HN guidelines say that on-topic is "Anything that good hackers would find interesting", "anything that gratifies one's intellectual curiosity." That's more or less entertainment. Highbrow, perhaps, but still entertainment.

> If users and mods acknowledge your point as being worth discussing, yet disagree with your desired course of action, where would you like this conversation to go from here?

I understand disagreement, which is fine. I also understand that summaries are subjective (which I also think is fine). What I did not understand was your comments about "bad actors", "charlatans", and "sophists". This is a threat model that does not seem very applicable or realistic in the context.
by alsetmusic | 2025-08-19 17:48:51+00:00
This question feels out of touch and I'm in my mid-forties.

Yesterday, I saw a couple moving musical equipment into my building and asked who was the musician. The person said I could find them on Insta. I had hoped they'd be on Soundcloud, as I'm a musician and post my music there. Insta is what a lot of young people use.

Before the pan, someone I matched with on a dating app rejected me when I told them I don't have social media accounts. She accused me of being a psycho (saved me from a bad first date). This is how a lot of younger people (she was like 10y younger than me) see the world.

Email is for corpses, at least that's what I think they'd say if you suggested it. Someone up the chain talked about classmates. I'd expect they are a younger demographic and the email stink would apply.
by WhitneyLand | 2025-08-19 17:49:04+00:00
“That is exactly how web standards work…”

Says who? You keep mentioning this 0.1% threshold yet…

1. I can’t find any reference to that do you have examples / citations?

2. On the contrary here’s a paper that proposes a 3x higher heuristic: https://arianamirian.com/docs/icse2019_deprecation.pdf

3. It seems there are plenty of examples of features being removed above that threshold NPAPI/SPDY/WebSQL/etc.

4. Resources are finite. It’s not a simple matter of who would be impacted. It’s also opportunity cost and people who could be helped as resources are applied to other efforts.
by LegionMammal978 | 2025-08-19 17:49:26+00:00
True, a small number of vocal opponents does not automatically make something a bad idea. But in these cases of compatibility, especially with something as big as the Web, the vast majority of those affected who do care will be completely silent. There's no hotline to call up the entire world and tell them to update their code.

(And if you did want to tell the entire world to update their code, and have any chance of them following through with it, you'd better make sure there's an immediate replacement ready. Log4Shell would probably still be a huge issue today if it couldn't be fixed in place by swapping out jar files.)
by _ache_ | 2025-08-19 17:49:30+00:00
It's odd. There multiples problems on that blog.

https://xenodium.com/emacs-as-your-video-trimming-tool/

Is fixed and also fix various typo in the blog post. Bbut has other bugs, for example, the title link redirect to the bugged URL.

But (the bugged URL):

https://xenodium.com/emacs-as-your-video-trimming-tool Have the problems with relative links you talked about.
by curuinor | 2025-08-19 17:49:46+00:00
hey, this is Howon from CodeRabbit here. we wish to note that this RCE was reported and fixed in January. it was entirely prospective and no customer data was affected. we have extensive sandboxing for basically any execution of anything now, including any and every tool and all generated code of any kind under the CodeRabbit umbrella.

if you want to learn how CodeRabbit does the isolation, here's a blog post about how: https://cloud.google.com/blog/products/ai-machine-learning/h...
by chrismorgan | 2025-08-19 17:49:56+00:00
> Many things, like WebAudio or Canvas, could be immplemented using WASM modules, which as a side effect, would prevent their use for fingerprinting.

Audio and canvas are fundamental I/O things. You can’t shift them to WASM.

You could theoretically shift a fair bit of Audio into a WASM blob, just expose something more like Mozilla’s original Audio Data API which the Web Audio API defeated for some reason, and implement the rest atop that single primitive.

2D canvas context includes some rendering stuff that needs to match DOM rendering. So you can’t even just expose pixel data and implement the rest of the 2D context in a WASM blob atop that.

And shifting as much of 2D context to WASM as you could would destroy its performance. As for WebGL and WebGPU contexts, their whole thing is GPU integration, you can’t do that via WASM.

So overall, these things you’re saying could be done in WASM are the primitives, so they definitely can’t.
by yan_hui | 2025-08-19 17:50:11+00:00
Your second paragraph says that you want a sense of purpose, direction, goals and desires.

I have done a lot of historical research into the search engine industry, and recently I decided to pursue something relating to it, and everything that I do now is colored by that goal.

The goal that I have in mind has very clear motivations behind it, and a point that I am fully behind. All the little things that I do in my daily life feel like they are building towards that point. It does feel good. From what you said, it sounds like you want something like this, to be aimed towards growth and life and knowledge. To be content and striving at the same time.

You say that you “have made it,” and you are correct. What exactly have you made though? In my vision you have made a sturdy stone block with a terracotta pot sitting on it. You have made the perfect mix of soil with just the right amount of gravel for good drainage. You have placed the pot in the right lighting conditions, you have formed the soil into a perfect little mound, and you have placed a seed in it. The last frost was a couple weeks ago and it is springtime.

You say that you “often think about starting from zero,” but the reality is that you currently are at zero. The life you have built so far is the terracotta pot and you are the seed. Your task is to grow, and the only difficulty now is finding out what direction the sun is in.

P.S. If you would like, I can fill you in on the obscure things that I have discovered about search engines, and what I am aiming for.