MurphyA/hacker-news huggingface dataset:
by it_is_beautiful | 2025-09-19 23:53:43+00:00
The issue is deeper, I think. When I go to software meetups, I feel bitter. I used to have friends in technology, but most of them I cut off without a word, and those that reach out I resent. When I'm outside of my hometown, I feel like I can't relate to anyone, and when I'm back... it's hard to describe. I'd rather disappear than have anyone see or think about me. It's hard to even go get groceries now. I used to have "my people", but now I don't have anyone (except a few family members, -ish) that fits that. The common denominator, of course, is me.

I have times of regularity, where I'm charismatic and talking with people. But even then I find that all my stories end with "... that person drives me crazy!" ... Well of course they do, seems like everyone does.

The faults I judge the most in people are the ones I struggle with, or ones I've seen other loved ones struggle with where I wasn't able to help. I want to be kind, to be empathetic really, but I feel so afraid, so incapable of helping, guiding, or even listening empathetically in any way that my reactions are ...bad. Unkind, or alien.

I've been trying. But it's been getting worse.
by abirag | 2025-09-19 23:54:18+00:00
Hey, I’m the author of this exploit. At CodeIntegrity.ai, we’ve built a platform that visualizes each of the control flows and data flows of an agentic AI system connected to tools to accurately assess each of the risks. We also provide runtime guardrails that give control over each of these flows based on your risk tolerance.

Feel free to email me at abi@codeintegrity.ai — happy to share more
by jghn | 2025-09-19 23:54:29+00:00
Don't worry. The actual text declares that DHS has the discretion to give exceptions to companies. [1] I'm sure this does not at all imply that what this policy really means is that companies who bend the knee won't see this extra charge.

[1] https://bsky.app/profile/josephpolitano.bsky.social/post/3lz...
by bigyabai | 2025-09-19 23:55:08+00:00
I think you're discounting the MiG-31 in this engagement a bit. I like the F-35, but it was only going to be useful here if they fired an AMRAAM. They didn't - the F-35's radar and datalink advantage was never used. It never intercepted the MiG-31s or attained visual identification.

Let's start with this, Russia knows that NATO fears escalation. As long as their MiGs don't open fire, they can maintain an ambiguous international stance (even if they were definitively wrong). SAM operators would hesitate to open fire; in training they learn that modern decoys can spoof RCS and potentially endanger civilian aircraft in the confusion. So, they raise the issue with their allies and see if a response can be scrambled to deter further airspace violation. Assuming Russia never intended to escalate, this is the point in their plan which they bail out.

You're correct that Zaslon is largely useless here; the IRST is much closer to SOTA and well-integrated with the R-77 and R-73 missile family. These are pretty demonic missiles if you're a stealth aircraft, and they can be queued off-boresight to deter anyone from wanting to get close: https://youtu.be/a6TiPNW512g
by sokoloff | 2025-09-19 23:55:21+00:00
If I'm concerned with the overall citizen population's job prospects, the relative size of the increases matters more to me than the absolute change.

If I created 1 nepotistic software job for my kid and 3 jobs for software professionals not related to me, I think very few people would look at that and say "Oh, well three times as many non-nepotistic jobs were created, so we can ignore the one..."
by wvlia5 | 2025-09-19 23:55:22+00:00
I've been happily unemployed since 2022. Not planning to be employed ever again. Have enough money for the rest of my life already. Not because I'm rich, but because I live cheaply.

Working on self-improvement: excercise, eat/sleep well, defeat phone addiction, become social. I enjoy drugs once a week. I travel all year in some beautiful places. Spend ~2 hours every day trying to find a wife.

In 5-10 years (wifed up or wifeless), I'll buy a house in the forest and spend the rest of my life playing piano, studying math, and creating tech for fun.
by cyberax | 2025-09-19 23:56:44+00:00
Memory protection games just don't scale. You're modifying global structures, resulting in tons of contention. That's also why compacting GCs prefer to use card marking rather than mprotect.

About 2. - that's exactly what I meant. The downside is that now you have to write a full x86 emulator, maybe including SIMD instructions. Good luck.

And that's also what I want to try to avoid. Imagine generating a copy of the innermost loops, with the nearest backbranch replaced with a jump into the GC code. Then from the signal handler you just need to find the offset between the current instruction pointer and the mirror copy, adjust the pointer, and exit from the signal handler.
by WastedCucumber | 2025-09-19 23:56:44+00:00
Even if they're a long shots, I always feel a little high from the hope of climate engineering projects.

I guess freezing new water on top of existing ice might also increae the ice albedo, in the case that it's covered in some amount of black carbon, plastics, or other pollutants? But that's probably less relevant in the (more isolated) polar regions.
by toomuchtodo | 2025-09-19 23:59:00+00:00
Sounds like the metric is unreliable and cannot be trusted as input for policy, based on the evidence and ground truth.

U-6 (the most inclusive unemployment rate) is 8.1 as of this comment, the highest it’s been in the last five years: https://fred.stlouisfed.org/series/U6RATE

So, start cutting labor visas until the unemployment rate improves. The domestic labor clearly exists.
by _DeadFred_ | 2025-09-19 23:59:04+00:00
The problem you will have selling this to this crowd is we have been in the meetings. We know that 'we're going to use a consulting team on this' means lower wages. We know that 'we going to outsource this' to a company full of H1Bs is being done... to lower costs.

Maybe at FAANGs what you say is true. But at every place I've been when H1Bs ended up added (normally via consultancy or outsourcing) it was always to cut costs. And the only costs we were cutting was staff.
by X0Rsyst | 2025-09-19 23:59:05+00:00
I’m a manager in a cybersecurity consulting firm. I’ve hired half a dozen people for my team in the past year. I always check LinkedIn as well.

If someone isn’t on it, the chances are significantly higher they are fake or trying be be “overemployed.”

Does not having LinkedIn mean you’re not qualified or not real? Certainly not. Does it mean I will pass your resume over when sorting through a stack of qualified applicants? Absolutely.
by WarOnPrivacy | 2025-09-19 23:59:21+00:00
Personally, I associate sunlight with less health because of how it makes me feel - uncomfortable on a good day but often like having the flu.

Some of that is tied to our daily 85° dew points but once the sun goes down the dp feels livable.

But even without high heat and humidity, sunlight feels relentlessly, painfully bright. The best I can hope for is to ignore it.

Conversely, cool cloudy days feel like the relief after a long, bad headache. And fog is the finest weather there is.
by schmichael | 2025-09-19 23:59:26+00:00
One of the large dependencies they call out is an excellent example: pdf.js.

There is no reason for pdf.js to ever access anything other than the files you wish to export. The Export to PDF process could spawn a containerized subprocess with 0 filesystem or network access and constrained cpu and memory limits. Files could sent to the Export process over stdin, and the resulting PDF could be streamed back over stdout with stderr used for logging.

There are lots of plugin systems that work this way. I wish it were commodofied and universally available. AFAIK there's very little cross-platform tooling to help you solve this problem easily, and that's a pity.
by sokoloff | 2025-09-20 00:00:48+00:00
I'm very much free trade and pro-globalization, but it seems perfectly reasonable to me that a candidate for political office in country X should be most concerned about the overall welfare of the citizens of country X, then next for the non-citizen residents of country X, then non-citizen/non-residents last. We can argue how steep the dropoff should be, but I think most people would believe that the ordering is that one, with some possible ties.
by avalys | 2025-09-20 00:01:04+00:00
+1

The byline is “The Economist”, and the lack of links is the house style, like a printed newspaper.

A relic from the times when the name and reputation of the institution alone was enough to earn your trust.

Personally I still find them a high-quality source, especially because they are a weekly publication based in the UK and distanced (but not entirely removed) from the bullshit of the US media cycle.
by jemmyw | 2025-09-20 00:01:15+00:00
We have to rub along with people who have different political views to our own and I strongly agree that people shouldn't be forced out for opinions held that have little to do with the organization in question.

However, I clicked two of those blog links and the second one, on "consent culture" has genuinely upset me a little. And I am personally in no way deviant from his ideal norm, nuclear family with 3 kids. But the underlying message about cultural force "guiding people to the good life" fuck that, that's taking away choice, who is to say what the good life is. And calling having kids divine joy: I love my kids but that phrasing gives me the chills.

I've only previously read business and tech stuff from dhh and then rarely. That does make me reassess him, I'll probably skip reading any commentary from him now.
by _DeadFred_ | 2025-09-20 00:01:35+00:00
I guess all those management meetings where we brought on teams staffed by H1Bs in order to cut costs, when our only costs were wages, didn't make sense.

Funny things is the agencies/consultancies/outsource companies all solds us on it would cut costs when the only thing changed was labor. But apparently they could cut costs without cutting labor costs? How does that work?
by mancerayder | 2025-09-20 00:02:28+00:00
For that matter it's not necessarily my country, despite my being here, and I don't necessarily have just one country I'm attached to. I'm not particularly nationalistic. However I do care about how retirement might look and how much I will have saved. It's almost as if you are implying I should accept a wage cut for the good of my country. (How that's good for the country and not just for a select few percent at the top of my country eludes me)
by ferrouswheel | 2025-09-20 00:02:51+00:00
Maybe talent in third world countries. I think it's mostly mid-tier people from first world countries.

People with actually talent and intelligence realise how messed up the USA is (and has been for some time) and prefer things like healthcare and gun control.

And if they really want the lack of work life balance and/or high paid roles, they can consult from US company like I do. Now I get the money, but I live in a decent country.

I don't think there is any amount of money you could offer me to move to the USA. Well ok, maybe when it gets to $10 million / year I would have to start considering it.
by jabbany | 2025-09-20 00:03:10+00:00
Operating systems are different though, since their whole purpose is to host _other_ applications.

FWIW, MacOS isn't any better or worse for security than any other desktop OS tbh....

I mean, MacOS just had it's "UAC" rollout not that long ago... and not sure about you, but I've encountered many times where someone had to hang up a Zoom or browser call because they updated the app or OS, and had to re-grant screenshare permissions or something. So, not that different. (Pre-"UAC" versions of MacOS didn't do any sandboxing when it came to user files / device access)
by schmichael | 2025-09-20 00:06:04+00:00
vim and emacs are over 30 years old and therefore living with an architecture created when most code was trusted. Encrypting network protocols was extremely rare, much less disks or secrets. I don't think anything about the security posture of vim and emacs should be emulated by modern software.

I would say VSCode has no excuse. It's based on a browser which does have capabilities to limit extensions. Huge miss on their part, and one that I wish drew more ire.
by keeda | 2025-09-20 00:06:27+00:00
A lot of the discussion is about foreign workers competing with native ones and dragging salaries and employment down. This is a simplistic view, because it overlooks the fact that an insufficient labor supply keeps companies from growing faster, which in turn keeps them from hiring even more people.

So there is a tension between competition and increased opportunities and wage growth through increased company growth.

But how does this work out in practice? Luckily, there have been a lot of studies about the impact of the H1B program, which you can find on Google Scholar or SSRN. An extremely quick scan shows mixed findings that are hard to summarize, which is understandable because the dynamics are complex. (Contemplating getting Gemini to do a Deep Research report on this.)

So to narrow things down, I looked for empirical studies that focus on the specific counter-factual, "how would native workers fare if there were no H1B?" Interestingly, while I actually found some, even the recent studies (from 2022-2025) rely on empirical data from 2006 - 2008. That was when the H1B moved to a lottery system, creating a natural experiment allowing for comparison between firms that won and lost the lottery. (One study does find that limited data from 2022 corroborates its findings.) Not perfect, but better than hypotheticals.

Here's a government page with a very brief overview of two relevant studies: https://www.congress.gov/crs-product/IF12966 (The page doesn't scroll, but the PDF can be downloaded.)

To summarize, the studies find that there was no negative impact on native-born workers in terms of employment, and in terms of wages, some saw increases and others saw decreases in the range of 3-5%, depending on age, tenure and level of education.

But interestingly, the 2025 study also found that winning a lottery also increased the chance by 2.5% that the firm survived. Causation and correlation etc. aside the implications for employment are clear: if a firm does not survive, all employees, native or foreign, lose their jobs. This is an example of the dynamic I mentioned above.

Beyond these studies, I follow a labor economist and it's fascinating to see how these dynamics have been playing out over the last few years in the broader economy. As a relevant example, there is a credible theory that increased immigration was what helped the US manage its inflation crisis:

https://fortune.com/2024/04/12/immigration-inflation-economy...
by Scramblejams | 2025-09-20 00:06:58+00:00
Yep, and for the rest I've gotten a lot of mileage, when shipping server apps, by deploying on Debian or Ubuntu* and trying to limit my dependencies to those shipped by the distro (not snap). The distro security team worries about keeping my dependencies patched and I'm not forced to take new versions until I have to upgrade to the next OS version, which could be quite a long time.

It's a great way to keep lifecycle costs down and devops QoL up, especially for smaller shops.

*Insert favorite distro here that backports security fixes to stable package versions for a long period of time.
by Johnny555 | 2025-09-20 00:07:06+00:00
I don't think you have to show that the talent couldn't have been trained in the USA (or rather, it couldn't have been trained into USA workers), but that the talent wasn't trained in the USA so bringing in an outside worker is the only way to hire for the position.

You can't really expect a company hiring PhD's in a niche field to show that they couldn't have spent 7 years training an American for the work.
by 0x68cdbcd0 | 2025-09-20 00:07:18+00:00
> Do you find that perspective is primarily gotten from real life conversations, or from discourse online/social media/political commentators?

Both. I worked at a company that leaned right, and there was a guy I worked with that took every opportunity to interject with his left/liberal opinion. I think people found it annoying sometimes, but we had some good discussions every once in a while. His career didn't suffer and we still keep in touch. Other companies have either been apolitical or left-leaning, and I've never observed the opposite. Personally, I keep my mouth shut because providing for my family is more important than (best case scenario) changing someone's mind, and I'm guessing that's everyone else's strategy as well.

> everyone wants primarily to be left alone, not harassed, and wants to coexist, and be respected. Is it the same from yours?

Nominally, yes. But even with that I think that's where there's a lot of disagreement. What does coexistence mean exactly? Does it mean forcing people to accept others into their spaces? What if a company wants to exclusively hire men? What if they want to exclusively hire Christians? To me, infringing on the right of free association is at odds with being left alone. Am I being left alone if a significant amount of my income is being confiscated against my will and spent in a way that I disagree with? What does being respected mean? Is it forcing people to use certain pronouns, even if you don't think it aligns with their biological sex, and it feels like lying?
by jabbany | 2025-09-20 00:07:22+00:00
I think it's just because supply-chain attacks are not common enough / their attack surfaces not large enough to be worth the dev time... yet...

Sneak in a malicious browser extension that breaks the permissions sandbox, and you have hundreds of thousands to millions of users as an attack surface.

Make a malicious VSCode/IDE extension and maybe you hit some hundreds or thousands of devs, a couple of smaller companies, and probably can get on some infosec blogs...
by zahlman | 2025-09-20 00:07:22+00:00
> There still seems to be a bunch of confusion and misinformation about what Kimmel said, so: "We hit some new lows over the weekend with the MAGA gang trying to characterize this kid who killed Charlie Kirk as anything other than one of them and doing everything they can to score political points from it."

The FCC should not be threatening ABC over this, but the statement is, on the available evidence, wrong, irresponsible and inflammatory. It's wrong because it insinuates that the killer was "one of them" (completely untrue per Utah state investigators), irresponsible because there was no good reason to believe it (the alternative narratives require some deep reading into cryptic fringe political groups) and because of the timing, and inflammatory because of the nature of the allegation (it's not a nice thing to say about anyone even when it's demonstrably true).

> What he said was actually true, in general, about conservative discourse, regardless of what the shooter's politics are.

The statement cannot be evaluated for "truth in general" because it referred to a specific incident. If he'd wanted to assert something about what "the MAGA gang" generally does, he could have done so. But the point was specifically to tie into current events.

(I also don't really understand the objection. What, are conservatives not supposed to disavow political violence? Is everyone on the right supposed to accept responsibility for the consequences of every other right-wing political philosophy? Please be careful about https://en.wikipedia.org/wiki/Out-group_homogeneity .)
by lazyeye | 2025-09-20 00:08:28+00:00
I just feel stupid having to argue the simple commonsense that it is the citizens only that should be allowed to vote, particularly after the influx of 10 million+ (likely much more) illegals in the last 4 years of the Biden admin.

You appear to have bookmarked my comments page, which you perhaps check regularly? I'm sure I'm not the only one.

Could you do me a big favour? Could you delete my bookmark and not reply to my comments any more. I would really appreciate this.
by apstls | 2025-09-20 00:08:44+00:00
This statement is one of those useless exercises in pedantry like when people say "well technically coffee is a drug too, so..."

Code with publicly-known weaknesses poses exponentially more danger than code with unknown weaknesses.

It's like telling sysadmins to not waste time installing security patches because there are likely still vulnerabilities in the application. Great way to get n-day'd into a ransomware payment.
by kalkin | 2025-09-20 00:08:50+00:00
The weirdest thing about the zero-sum rhetoric to me is: when one person is demanding to benefit at the expense of someone else, if I'm neither of them, why am I supposed to care?

Suppose I'm not an American--like plenty of HN commenters--or alternatively that (as in reality) I am an American but I have good reasons to think that the personal benefit I derive from the presence of immigrants is greater than the cost to me as an individual, even were I to concede more generic economic arguments about wage competition. Then... why am I supposed to prioritize the interests of American tech workers over foreign immigrants?

I don't in general endorse an "I got mine, screw you" approach, nor one that says "hey GDP is going up so screw the losers", but if someone else is taking exactly that attitude just with a nationalistic inflection, it's hard to extend them a lot of empathy.
by ethbr1 | 2025-09-20 00:09:12+00:00
Imho, anything past where you've worked on LinkedIn is a waste of time.

And arguably even a negative signal. Productive people have jobs to do instead of grinding Monopoly karma. Yes, this absolutely includes LinkedIn thought leadership.

I know MS and recruiters love to push the 'it matters' line, but I'd ask the reader -- who would you rather hire: someone who wow'd in an interview or someone with LinkedIn flair?
by da_chicken | 2025-09-20 00:09:21+00:00
No, it's not really an issue. GitHub and VS Code are also Electron apps. So are Slack and Discord. Postman is, as well.

I'd also be forced to ask... what exactly are you doing with a markdown note-taking application such that performance is a legitimate concern?

But, I mean, maybe you're reading this in a Lynx session on your ThinkPad 701C.
by Herring | 2025-09-20 00:09:25+00:00
Sociologists will tell you race is a “social construct”. People can wake up tomorrow and start discriminating on the smallest shades you and I wouldn’t care about - in China there’s already a preference for light skin. In the UK they discriminate on accent/location (just within London!), and in China there’s plenty of regional dialects to choose from. Or look at class in the UK.

The point is at the end of the day their govt will build trains to every little village because that’s the consensus, they just don’t call it DEI. Westerners call it “ghost towns”… which then fill up promptly.

Is the China model perfect? Absolutely not. But it makes some strong points

https://americanaffairsjournal.org/2020/08/the-china-models-...
by caughtinthought | 2025-09-20 00:10:47+00:00
Based on the language in the executive order:

"the entry into the United States of aliens as nonimmigrants to perform services in a specialty occupation under section 101(a)(15)(H)(i)(b) of the INA, 8 U.S.C. 1101(a)(15)(H)(i)(b), is restricted, except for those aliens whose petitions are accompanied or supplemented by a payment of $100,000"

It sounds like it applies every time you leave and enter, provided you are a nonimmigrant alien on H1B (which they all are).
by eek2121 | 2025-09-20 00:12:16+00:00
Not if you want the highest quality, and they could absolutely stop even that if desired. The only reason why those methods work is due to legacy support. If they only supported the latest versions of HDMI and DRM, it would be very hard to get decent quality video/audio. As it is, even with things currently as they are, we still don't have the high quality feeds that are sent to TVs and dedicated hardware.