MurphyA/hacker-news huggingface dataset:
by StillBored | 2025-09-16 22:10:22+00:00
Its worse. The day I discovered that std::array is explicitly not range/bounds checked by default I really wanted to write some angry letters to the committee members.

Why go through all the trouble to make a better array, and require the user to call a special .at() function to get range checking rather than the other way around? I promptly went into my standard library and reversed that decision because if i'm going to the trouble to use a C++ array class, it better damn well give me a tiny bit of additional protection. The .at() call should have been the version that reverted to C array behavior without the bounds checking.

And its these kinds of decisions repeated over and over. I get its a committee. Some of the decisions won't be the best, but by 2011 everyone had already been complaining about memory safety issues for 15+ years and there wasn't enough politics on the comittee to recognize that a big reason for using C++ over C was the ability of the language to protect some of the sharper edges of C?
by tsunagatta | 2025-09-16 22:10:45+00:00
> You can write simple and readable code in C++ if you want to. You can also write complex and unreadable code in C++ if you want to. It’s all about personal or team preference.

Problem is, if you’re using C++ for anything serious, like the aforementioned game development, you will almost certainly have to use the existing libraries; so you’re forced to match whatever coding style they chose to use for their codebase. And in the case of Unreal, the advice “stick to the STL” also has to be thrown out since Unreal doesn’t use the STL at all. If you could use vanilla, by-the-books C++ all the time, it’d be fine, but I feel like that’s quite rare in practice.
by gmueckl | 2025-09-16 22:10:45+00:00
I am not saying that these languages will stay around forever, mind you. But we have solidified the tech stacks involving these languages by making them ridiculously complex. Replacement of a programming language in one of the core components can only come through gradual and glacially slow evolution at this point. "Rewrite it in XYZ" as a clean slate approach on a big scale is simply a pipe dream.

Re Matlab: I still see it thriving in the industry, for better or worse. Many engineers just seem to love it. I haven't seen many users of Julia yet. Where do you see those? I think that Julia deserves a fair chance, but it just doesn't have a presence in the fields I work in.
by Empact | 2025-09-16 22:11:00+00:00
My mantra: trust no inbound communications. If something is in fact urgent, it can be confirmed by reaching out, rather than accepting an inbound call, to a number publicly listed and well known as representative of the company.

These scams will only get better, they will impersonate your loved ones, your best friends, your children, and plead with you to save them by handing over money or information, but it will all be a ruse. The only things that can prevent this outcome are: positive ironclad proof of identity / personhood / company representation, or ongoing rejection of belief in inbound communications.
by awesome_dude | 2025-09-16 22:11:27+00:00
Just, FTR, you can also tell the Mac OS to reboot to Asahi, and you can tell Asahi (via CLI) to reboot to Mac OS

https://www.reddit.com/r/AsahiLinux/comments/1c2yasr/can_i_b...

When I was first getting my feet wet with Asahi I was using these methods a lot.
by ajsnigrutin | 2025-09-16 22:11:38+00:00
US sure likes israel...

https://www.timesofisrael.com/liveblog_entry/saar-urges-250-...

250 us legislators had to fly there (probably paid by the taxpayers) a few days ago.

Sadly, looking at the US politics, whichever side you vote, israel wins.
by jandrewrogers | 2025-09-16 22:11:43+00:00
I think there is significant merit to rewriting a legacy C++ (or C) codebase in very modern C++. I've done it before and it not only greatly reduced the total amount of code but also substantially improved the general safety. Faster code and higher quality. Because both implementations are "C++", there is a much more incremental path and the existing testing more or less just works.

By contrast, my experience with C++ to Rust rewrites is that the inability of Rust to express some useful and common C++ constructs causes the software architecture to diverge to the point where you might as well just be rewriting it from scratch because it is too difficult to track the C++ code.
by respondo2134 | 2025-09-16 22:11:47+00:00
>> and keeping them to well-known and trustworthy (security-wise) creators.

The true threat here isn't the immediate dependency though, it's the recursive supply chain of dependencies. "trustworthy" doesn't make any sese either when the root cause is almost always someone trustworthy getting phished. Finally if I'm not capable of auditing the dependencies it's unlikely I can replace them with my own code. That's like telling a vibe coder the solution to their brittle creations is to not use AI and write the code themselves.
by GuB-42 | 2025-09-16 22:11:53+00:00
And then, there is /usr

It was supposed to be the user directory, but because someone didn't have enough space on /, it was somehow decided to put some stuff in there, so you have /usr/bin, /usr/lib, etc... But the user directories moved to /home, making /usr hold everything but user directories. Decades later, we still don't know what goes in /usr and what goes in /. In theory, what you need to boot the system should go to /, the rest goes to /usr, but in practice, there is no real rule, just don't break the scripts. Nowadays, distros tend to link one to the other in hope of making some sense without breaking too much stuff.

All that because someone was lacking disk space at some point in history.
by jdiff | 2025-09-16 22:11:57+00:00
No, it certainly doesn't. But lies are the only relevance "antifa" has, and if you ask the people caught up in it, they'll adamantly insist that antifa is an extensive organization with identifiable leaders and cohesive plans that are executed widely by a unified member body.

None of that's true. But we should be aware of the lies being told, at least the ones told widely.
by craftkiller | 2025-09-16 22:12:05+00:00
They could still be useful as a dumb display without voice or gesture. Imagine being in an airplane and wanting to use your laptop. You'll be hunched over with terrible posture. With a pair of AR glasses that support displayport alt mode, you could plug in your glasses and sit with proper posture, your screen displayed in front of you as a virtual 40" display, while you touch type on your laptop sitting on the food tray. Perhaps you're in bed and want to watch a movie. You could pop on the glasses, plug in your phone, and enjoy while while fully reclined, achieving the most comfortable least effort movie viewing experience. Maybe you're traveling and staying in hotels where you want to get some work done. Programming on tiny laptop screens sucks if you're opening more than 2 files at a time, but what if you could just pop on your glasses, plug them into your laptop, and program on a virtual 40" display?

My understanding is the current tech is not sharp enough for serious productivity, is too heavy for extended wear, and has a short life due to overdriving tiny OLEDs, so I'm not ready to purchase one yet. But some day those problems will be solved and I'm absolutely going to jump on that.
by hermannj314 | 2025-09-16 22:12:14+00:00
I thought my point was clearly made the 1st time.

How can we promise to "do better" when shit like "no author or distributor accepts responsibility to anyone for the consequences of using it or for whether it serves any particular purpose or works at all" is in the legal agreement of the software you are using?

Making someone agree to that while simultaneously on the side making promises that the software works is used car salesman gimmicks. The only things that matters is what you put in writing.
by minwcnt5 | 2025-09-16 22:12:20+00:00
How much money they've spent in the past is irrelevant. That money all came from investors, in exchange for a stake in the company. It never needs to be "paid back". Besides which, those investors have earned all those funds back already, and then some (on paper).

All that matters at this point is how much money they'll lose/earn in the future. There are no shortage of investors willing to put money into this effort, and they're growing exponentially, so there won't be any pressure for them to turn overall profitable for several more years.
by icedchai | 2025-09-16 22:12:45+00:00
Most people don't have the temperament for FIRE. You have to live below your means, save a double digit percentage consistently, and invest.

And you have to do it for decades. You need to be able to tough it out through the worst of times (like the dot-com bubble, financial crisis, covid, and random political chaos like tariffs.)

You have to tune out the noise and always remember that on a long enough timeline, the market only goes up. And if you think it's "different" this time, it won't be for long.
by hn_acc1 | 2025-09-16 22:13:04+00:00
Yeah, it's not exactly that simple.. I worked ~15 years at an EDA company as a SW developer, got laid off in my 50s. I had a couple of people I connected with, but both of them had already retired and moved on by the time that happened.

I moved here (the Valley) because I met my wife online. Reached out to anyone I was vaguely connected to at the time. Got a few "send me your resume", none of them were a good fit.

All the interviews I got (some good, some bad) were either from headhunters, or through LinkedIn applications. In the end, a random, "don't know this company, but they want software people" ad on LinkedIn resulted in the GREAT job I've had for 1.5 years now (about a year after getting laid off) - way better pay, better work-life balance, etc.

So applying online CAN work.
by vitaut | 2025-09-16 22:13:18+00:00
Note that {fmt} provides a lightweight API (`fmt/base.h`) with a superset of `printf` functionality and optimized for build speed (https://vitaut.net/posts/2024/faster-cpp-compile-times/) and binary size (https://vitaut.net/posts/2024/binary-size/) through type erasure. Variadic templates, while OK in simple cases, won't scale for more realistic ones (especially once you start adding support for more types) and won't work even for basic things like positional arguments.
by pitpatagain | 2025-09-16 22:13:44+00:00
The total prevalence of all high-risk cases went down in the study, from 46% in the pre-vaccine era to 32% post vaccine.

16/18 were chosen because they are highly carcinogenic and cause the most cancer, they are the two most aggressive high risk types. They cause 70% of all the cancer but are much less than 70% of the cases of high risk strains.

It takes real mental gymnastics to downplay how positive this vaccine is.
by dotancohen | 2025-09-16 22:14:02+00:00
Go read this UNHCR report. All the evidence is just circular references to other bodies who reference each other. The most damning thing they could pin on Israel was that "Israel admits 83% of the casualties are civilians". That idea was because Israel could name 17% of the casualties in Hamas registers as members of the organization. But assuming that every other casualty is a civilian is quite a stretch. For one thing, Israel doesn't know the name of every militant it kills while he's aiming an RPG at them. For another, there are many other militant organizations in the strip, notably the Islamic Jihad. For a third, typically 75% - 90% of the casualties of war are civilians by the UN's own numbers.
by roadside_picnic | 2025-09-16 22:14:08+00:00
"Homeless" is not the same as "living on the street". People living in hotels, temporary trailers (in some places even tiny homes count), living with a friend temporarily, etc are all homeless. Plenty of Americans are much closer than this than you might think working in tech. 50-60% of Americans currently live 'paycheck-to-paycheck' which means the second work stops they're on a timer for missing bills to start coming in.

I've had the luxury, working in tech, to have lost a job and had the opportunity to take a few months off before searching. Even this was incredibly stressful in practice, but I never had to worry about losing my place of living.
by pmarreck | 2025-09-16 22:14:38+00:00
Someone keeps trying to hack into my main Google account (I keep getting 2FA requests), which unfortunately was part of some early crypto activity and was traced back to me, and I don’t know what to do.

I myself can keep denying them but I have a toddler and if he accidentally accepts one of them, I’m screwed.

And since it’s impossible to reach anyone at Google, WTF do I do?
by 0xbadcafebee | 2025-09-16 22:14:51+00:00
With Javascript, yes, but also with all programming-language package managers and software development culture in general. There's too huge of an attack surface, and virtually no attack mitigation. It's a free for all. These are solvable problems, though. Distros have been doing it the right way for decades, and we could do it even better than that. But being lazy is easier. Until people are forced to improve - or there's some financial incentive - they don't.
by roenxi | 2025-09-16 22:15:18+00:00
Either go ague with Wikipedia, or put some argument in the comment when making claims you expect people to verify themselves. People are just going to look it up on Wiki.

> SpaceX was founded by Elon Musk in 2002 with a vision of decreasing the costs of space launches, paving the way to a self-sustaining colony on Mars.

https://en.wikipedia.org/wiki/SpaceX 2nd paragraph
by dlenski | 2025-09-16 22:15:29+00:00
This is indeed a sophisticated and alarming attack, but…

> the attacker shuffled my staked ETH and other tokens through multiple transactions, then drained the account.

Live by the decentralized, irreversible, climate-destroying, scam-and-slavery-enabling currency, die by the decentralized, irreversible, climate-destroying, scam-and-slavery-enabling currency.

> Google enabled Authenticator cloud sync by default.

Adding that to the list of reasons I use FreeOTP instead (https://f-droid.org/en/packages/org.fedorahosted.freeotp)
by arjie | 2025-09-16 22:15:29+00:00
It is actually not straightforward to do. Safeway Pharmacy refused to actually give me the vaccine when I showed up saying I'm not in a group that's eligible. One Medical told me that it would be a $400/shot 3-shot regimen. I'll probably just travel to India some time to visit family and get Cervavac there instead of Gardasil here. It's about $20/shot.
by jagged-chisel | 2025-09-16 22:15:36+00:00
> … I had to authenticate with them before they would tell me anything.

Sensible. But this whole “we called you now prove to us who you are” mess is stupid.

“Hey, this is Carol from Le Bank. Please just give us a call back at our main number found in the app or on our website. Then you can reach me directly at extension 123.”
by anonymousiam | 2025-09-16 22:15:38+00:00
I've had this same issue with BECU (Boeing Employee's Federal Credit Union). They're a really good financial institution, but like many, they suffer from nearsightedness. They know that they're "the good guys", so they feel that it's unnecessary for them to properly authenticate themselves to you. So it's asymmetrical security and asymmetrical trust.

The worst part of this (for BECU) is that they've been warning their customers about phishing attacks from entities claiming to be BECU.
by jedimind | 2025-09-16 22:15:56+00:00
>Sorry, can you point out exactly where I've lied and how?

I already quoted that exact part and even referenced the academic work which elaborated on it in detail. It was also not a "random" master thesis, it is academic work that is cited by the United States Government.

>Correct me if I'm wrong

"Entertain my Zionist revisionism". I've heard variations of your hasbara for 2 decades. It's insane that you still think that you can just lie in people's faces when everybody can just fact check you in a jiffy. You obviously don't care about the facts, that's why you persist in trying to deceive people with Zionist revisionism, but for others who happen to stumble upon this convo here some elaboration that concisely debunks these Zionist talking points:

- "The Conflict Based on a Lie" https://youtu.be/dy56Q1a0Flc - "The Masterplan for the Ethnic Cleansing of Palestine" https://youtu.be/C3cnRcfp_us

For anyone who is more interested in a comprehensive study of the history, Zachary Foster is a jewish historian whose research can be found at palestinenexus.com of which he is the founder of.
by SilverElfin | 2025-09-16 22:15:59+00:00
What does this “stake” get America at all? Will they be able to change the algorithms or censorship or amplification on TikTok? The point of the ban was to avoid national security issues from having an adversarial state (China) controlling speech in America. Banning it entirely is the best way to avoid these problems.

As a reminder, TikTok forces staff to sign pledges to support China’s political system in order to work there and get stock awards:

https://dailycaller.com/2025/01/14/tiktok-forced-staff-oaths...
by davidscoville | 2025-09-16 22:16:15+00:00
I did have saved passwords in Chrome password manager but they were old. My guess is that the attacker used Google SSO on Coinbase (e.g., "sign in with Google"), which I have used in the past. And then they opened up Google's Authenticator app, signed in as me, and got the auth code for Coinbase.

By enabling cloud-sync, Google has created a massive security vulnerability for the entire industry. A developer can't be certain that auth codes are a true 2nd factor, if the account email is @gmail.com for a given user because that user might be using Google's Authenticator app.
by Levitating | 2025-09-16 22:16:23+00:00
I run a bittorrent client in the corner of my room. The hard disk gets quite loud when it gets going, so between 00:00 and 09:00 it automatically throttles the bandwidth down to 1mb/s to prevent the noise from keeping me up.

You can actually view the interface statistics publicly here: https://collectd.levitati.ng/archpi/interface/end0
by SilverElfin | 2025-09-16 22:17:01+00:00
I doubt it. Oracle has a booming datacenter and cloud business right now. Their role is to host the data in a US jurisdiction, which they can do. It won’t affect the success or failure of TikTok. And frankly it won’t give TikTok users privacy since the data can still be accessed by software written by Chinese employees.
by dotancohen | 2025-09-16 22:17:16+00:00
> This sounds to me like you are trying portray poorer countries as lesser worth because they had the guts of calling Israel out.

No, I'm portraying non-US-aligned nations as having an interest in dividing the US-aligned nations.

What does "poorer" have anything to do with it? Is that some tactic to garner sympathy?
by titanomachy | 2025-09-16 22:17:43+00:00
> People living in hotels, temporary trailers (in some places even tiny homes count), living with a friend temporarily, etc are all homeless.

You're right. But is a 30-year-old who moves back in with their parents "homeless"?

And yeah, the paycheck-to-paycheck stat blows my mind. Somehow the standard American experience has become the latest model iPhone (financed), a new car (financed), a rented home, 4-5 meals out weekly, and almost zero money in the bank. And all this in a country with some of the weakest social security in the developed world. I'm sure the half-trillion dollars spent on advertising every year has something to do with this.
by SCUSKU | 2025-09-16 22:18:25+00:00
Read through your comment history and it sounds gnarly. I hope you find something soon. I was unemployed for 6 months in 2022-2023 and it was horrible. I guess I learned something from it, but I hated it. That said, I became employed after applying to a role by emailing the CTO after they posted on the monthly Who's Hiring thread. I've had 2 jobs from HN since.

HN has been huge for my career personally, so I made this site to help make it easier to find stuff that's good for you: https://hnresumetojobs.com/

Sincerely wishing you the best of luck.
by SilverElfin | 2025-09-16 22:18:37+00:00
One thing I don’t understand is why so many appreciate the Everglades. To me a landscape infested with aggressive animals (gators) doesn’t sound attractive or safe. Between them and the invasive snakes I feel like you would need to be on guard all the time. Maybe drain it, replace it with different animals that are friendly, and then refill it. I’m only sort of joking.
by m463 | 2025-09-16 22:18:43+00:00
I think noctua fans are just better fans, noisewise.

They have better airflow design and sound dampening/isolating screw mounts.

I think the idea about reduced airflow might be backwards - most systems use PWM to spin the fans based on CPU or system temperature. This means the systems get the airflow they need.

Also, they make larger heatsinks + fans for certain systems that allow the same airflow using a larger, slower spinning fan. which means less sound.

that said, there are some noctua fans that can spin faster than others.
by kimixa | 2025-09-16 22:19:00+00:00
IIRC Win32s (the subset of win32 released for windows 3.1) only added UCS-2 string processing, none of the system wide character APIs.

I think all the actual OS was still codepage (with the "multibyte" versions for things like Eastern languages being pretty much forks), and windows95 wasn't really much different.
by GoatInGrey | 2025-09-16 22:19:16+00:00
Even if Israel is definitively shown to be genocidal, what the hell do you do with that? Because the result of that determination is that you now have a conflict where both sides are genocidal against the other. How do you pick a side in that scenario without implicitly supporting genocide? Do you try to determine whether Palestinian lives are worth more or less than Israeli/Jewish lives, using your own arithmetic? Try to argue that some forms of genocide aren't really genocide when you "really think about it"?

I think it's an impossible problem from an ethics perspective.
Show HN: Budgero – a privacy-first budgeting app
by toma-bomba | 2025-09-16 22:19:37+00:00
I built Budgero because I was frustrated with YNAB being expensive, region-limited, and not privacy-focused. Budgero is a budgeting app that’s privacy-first, supports multiple currencies, works offline, and gives you full control of your data.

You can try it here: https://demo.budgero.app/ (data not saved).

For anyone interested in getting into beta sign up at: https://my.budgero.app (I will be sending invites soon)

Feedback welcome!
by kstrauser | 2025-09-16 22:20:01+00:00
I didn't have problems with age discrimination — I don't think — but I think because I countered it with energy and eagerness. "I'm ready to hit the ground running. Availability? Leave a laptop on my desk and I'll be there tomorrow. I'm not yet an expert in your line of business, but I've worked through 8 different industries and succeeded in each, and learning as I go is my favorite thing in the world. Let's go!"

I feel like the underlying issue is less with age and more with ossification. If you're a world expert in Visual Basic but don't want to learn that "fad" TypeScript, well, get used to being unemployed.
by magicalhippo | 2025-09-16 22:20:11+00:00
I used FreeBSD on my firewall in the early 2000s, and on my NAS from around 2007 till last year.

The big pain with jails for me was the tooling. There was a number of non-trivial steps needed to get a jail that could host a networked service, with a lot that could go wrong along the way.

Sure a proper sysadmin would learn and internalize these steps, but as someone who just used it now and again it was a pain.

Way down the line things like iocage came along, but it was fragile and not reliable when I tried it, leading to jails in weird states and such.

So I gave up and moved to Linux so I could use Docker.

Super easy to spin up a new service, and fairly self-documenting as you just configure everything in a script or compose file so much less to remember.

Initially in a VM on Bhyve, now on bare metal.

It feels a bit sad though, as jails had some nice capabilities due to the extra isolation.