MurphyA/hacker-news huggingface dataset:
by 1718627440 | 2025-09-20 16:49:06+00:00
This doesn't matter at all for programs like Git. Any non-free standing program running on a modern OS on modern hardware trying to access memory its not supposed to will be killed by the OS. This seams to be the more reasonable security-boundary then relying on the language implementation to just not issue code, that does illegal things.

Yeah sure, memory-safety is nice for debuggibility and being more confident in the programs correctness, but it is not more than that. It is neither security nor proven correctness.
by giardini | 2025-09-20 16:50:06+00:00
hypeatei says >"fascist thug"<

You don't know the true meaning of "fascist", so why do you misapply the word? Why don't you look the word up in a dictionary so you can reserve it to use it properly and find another word to use here?

"fascist" this! "fascist" that!

I hear all day in the news and none of the fools speaking has a clue what the word means. Nor do they seem to have a vocabulary large enough to house the appropriate words. Probably b/c they were demonstrating instead of studying in university class.

Try "bad" (that's what you mean!) instead of hiding behind a smokescreen of cryptic, archaic or important-sounding (to an idiot audience) wordings. But then fools like you always had no meaning. indeed:

"a tale told by an idiot, full of sound and fury, signifying nothing." - William Shakespeare
by roughly | 2025-09-20 16:50:06+00:00
With microorganisms it’s particularly interesting because the time and space scales are so different there’s no coherent narrative between humans and bacteria - it’d be like a species of sentient space nebulas seeding a promising planet with proto-humans so we’d eventually plant fruit trees there or something. In one sense, yes, if you were one of the eventual resulting humans, you’re the result of an alien species enslaving humans to do their bidding, but you’re living your entire life just generally doing what you’d do as a human totally unaware of your apparent enslavement and with no apparent restrictions on your movement or decision-space. I’m not an ethicist - anything that doesn’t involve the full consent of all parties gives me pause, but I’m not quite sure what the conversation there looks like.
by 0_____0 | 2025-09-20 16:50:51+00:00
Any passive phase change thermal solution is doing the same thing - take thermal energy from one place, and distribute it for dissipation. My point is that the geometric configuration isn't that important, it's doing the same work the same way. Not really worth arguing about, I just suspect that the branding people love that they had a new buzzword in "vapor chamber" to bandy about.

I liked this article from 10 years ago that actually goes into detail about how Fujitsu actually constructed a super-thin heat pipe (really just a very long vapor chamber) https://spectrum.ieee.org/superslim-liquid-loop-will-keep-fu...
by dfxm12 | 2025-09-20 16:51:09+00:00
I was annoyed that to get the safety features on the car I wanted, I had to get a configuration with a touchscreen (ironic, I know).

However, once I took it for a test drive, I was relieved to find that almost every button I want to press while driving can be found on the steering wheel without looking. Only the air con controls are left out.
by laurencerowe | 2025-09-20 16:51:12+00:00
The H1B salary requirements are based on prevailing wages for the job location. So for Software developers in San Francisco, based on the experience level of the job that will be:

Level 1 Wage:$65.24 / Hour - $135,699 / Year Level 2 Wage:$77.71 / Hour - $161,637 / Year Level 3 Wage:$90.18 / Hour - $187,574 / Year Level 4 Wage:$102.65 / Hour - $213,512 / Year

(Compared to the all levels $175k occupational median vs the $74k all occupation median.)
by ertian | 2025-09-20 16:51:27+00:00
Home ownership rate is higher now than it ever was in the post-war period, actually. It peaked in 2008, and has fallen since then...still higher than the 50s and 60s.

Also, did you ever spend any time in those post-war homes? Most of us would be appalled at the idea of living in a bare-bones 1000 sqft box (with more than 2x as many children per average family).
by Groxx | 2025-09-20 16:52:03+00:00
not changing working code to prevent issues is unsafe.

we can go in circles all day with blanket statements that are all true. but we have ample evidence that even if we think some real-world C code is safe, it is often not because humans are extremely bad at writing safe C.

sometimes it's worth preventing that more strongly, sometimes it's not, evidently they think that software that a truly gigantic amount of humans and machines use is an area where it's worth the cost.
by non_aligned | 2025-09-20 16:52:29+00:00
I would be surprised if that's the case. For commonly-used functions, you quickly learn knob shapes and their general locations. I'm sure you can adjust volume without looking in both cars.

With touchscreens, it's not just that you lose the tactile component, but all these interfaces are modal, with buttons that disappear or move around depending on the screen you're on.

Oh, you're on the radio screen? There's no way to adjust seat heating from here... or if there is one, it's in a different place than on the AC screen.
by cogman10 | 2025-09-20 16:52:58+00:00
It's additionally ridiculous because git is a code management tool. Maybe they are using it for something much more wild than that (why?) but I assume this is mostly just a complaint that they can't do `git pull` from their wonky architecture that they are building on. They could literally have a network mount and externally manage the git if they still need it.

It's not like older versions of git won't work perfectly fine. Git has great backwards compatibility. And if there is a break, seems like a good opportunity for them to fork and fix the break.

And lets be perfectly clear. These are very often systems built on top of a mountain of open source software. These companies will even have custom patched tools like gcc that they aren't willing to upstream because some manager decided they couldn't just give away the code they paid an engineer to write. I may feel bad for the situation it puts the engineers in, I feel absolutely no remorse for the companies because their greed put them in these situations in the first place.
by skydhash | 2025-09-20 16:53:01+00:00
> You always have variables. Not just at the function level, but at the class level, object level, etc.

Aka the scope. And the namespace of whatever you want to access. Which is a design problem.

> And it's not about symbol completion, it's about remembering all the obscure differences in built-in function names and which does what

That's what references are for. And some IDEs bring it right alongside the editor. If not, you have online and offline references. You remember them through usage and semantics.

> And no, off-by-one errors and edge cases are firmly part of coding, once you're writing code inside of a function.

It's not. You define the happy path and error cases as part of the specs. But they're generally lacking in precision (full of ambiguities) and only care about the essential complexity. The accidental complexity comes as part of the platform and is also part of the design. Pushing those kind of errors as part of coding is shortsightedness.

> Not typing all the code and keeping track of loop states and variable conditions and index variables and exit conditions. That stuff is boring as hell, and I've written more than enough to last a lifetime already

That is like saying "Not typing all the text and keeping track of words and punctuation and paragraphs and signatures. English is boring as hell and I've written more than enough..."

If you don't like formality, say so. I've never had anyone describe coding as you did. No one things about those stuff that closely. It's like a guitar player complaining about which strings to strike with a finger. Or a race driver complaining about the angle of the steering wheel and having to press the brake.
by PaulHoule | 2025-09-20 16:53:08+00:00
Yeah, I was watching an interview with left-wing economist Robert Reich who dismissed that a lot of working class and minority people liked Trump because they harbor their own ambitions of social mobility.

Reich said that was all bullshit and there was no social mobility, but that's the attitude of a professor who got his start when it was a lot easier to break into academia -- since then he's seen many many people enter the bottom of the funnel and very few make it to the end.

Contrast that to people in the construction business who probably know two Italian brothers who escaped a failing agricultural economy in the south of Italy and bought a bulldozer and made a reputation for themselves putting in sidewalks or curbs or the Polish immigrant who grew his construction empire and wound up owning 50 medium-sized apartment buildings or the guy who went to architecture school, made it big in asbestos remediation and deconstruction and is now moving into advanced manufacturing. These entrepreneurs aren't distant figures like Elon Musk or Mark Zuckerberg but rather the kind of people I meet at birthday and graduation parties because their kids play on the same sports teams as people who work as accountants, hairdressers and jobs like that.

Getting a PhD and being Jewish or Black are two things that, like Reich, are likely to make you think life is a zero sum game:

https://socialeconomicslab.org/wp-content/uploads/2024/05/ze...
by SirMaster | 2025-09-20 16:53:12+00:00
My comment has nothing to do with that.

It was about how only big companies have the resources to make big computers that take up a whole room that are powerful enough to run smart AI models.

But if tech progress is any indication, in say 50 year or probably less, we will have the power of a modern day datacenter in our pockets and be able to run smart AI models locally without it being a large corp monopoly.
by CamperBob2 | 2025-09-20 16:53:43+00:00
How do you get rid of the C in the CH4, though?

By the same token, I've always thought it would be interesting if someone came up with a way to retrofit gas stations with something that could split the hydrocarbon molecules without burning them. Then we'd really be able to reuse existing infrastructure (handwaving away the storage-density problem of course, which the subject of this article might help with.)

But same problem... the carbon and the hydrogen really, really like to hang out together.
by lustre-fan | 2025-09-20 16:54:02+00:00
> do you have something set to monitor HN for mentions of Lustre?

Nothing, beside browsing hackernews a bit too much.

> "But Lustre doesn't support NVMeoF directly. It uses a custom protocol."

To be specific, Lustre is a parallel filesystem. Think of it like a bigger version of NFS. You format the NVMe as ext4 or ZFS and mount them as Lustre servers. Once you have an MGS, MDS, and OSS - you can mount the servers as a filesystem. Lustre won't export the NVMe to client as a block device. But you could mount individual Lustre files as a block device, if you want.

> To confirm, you're saying there'd need to be something like an EFA equivalent to https://kernel.googlesource.com/pub/scm/linux/kernel/git/tor... (and corresponding initiator code)?

Essentially, yeah.

> I think you're saying there's already in-kernel code for interfacing with EFA, because this is how lnet uses EFA?

Yes. EFA implements kernel verbs support. Normal user-space applications use user verbs i.e. https://www.kernel.org/doc/html/latest/infiniband/user_verbs.... Kernel verbs support allows kernel-space applications to also use EFA. This is currently implemented in the out-of-tree version of the EFA driver https://github.com/amzn/amzn-drivers/tree/master/kernel/linu.... Lustre interfaces with that with the driver in lnet/klnds/efalnd/. NVMeoF would need some similar glue code.

> Does this mean you can generally just pretend that EFA is a normal IB interface and have things work out? If that's the case, why doesn't NVME-of just support it naturally? Just trying to figure out how these things fit together, I appreciate your time!

There are some similarities (the EFA driver is implemented in the IB subsystem, after all). But the semantics for adding/removing ports/interfaces would be different - so it wouldn't "just work" without some changes. I don't know the full scope of the changes (I haven't dived into it too much). Although, I suspect support would look fairly similar to drivers/nvme/target/rdma.c.

> In case you're curious, I have a stateful service that has an NVME backed cache over object storage and I've been wondering what it would take to make it so that we could run some proxy services that can directly read from that cache to scale out the read throughput from an instance.

If you're looking for a scale out cache in front of s3, that's essentially Lustre/s3 integration https://docs.aws.amazon.com/fsx/latest/LustreGuide/create-dr.... It's a filesystem, so I guess it depends on how your service expects access objects.
by nine_k | 2025-09-20 16:54:07+00:00
PulseAudio also drew a lot of disapproval, until Pipewire appeared and finally did the same thing (and more) well.

Maybe systemd (service management, logind, the DNS resolver, the loggig system, etc) will eventually be re-implemented in a way that does not have the irritating properties of the original systemd.

/* I'd say that systemd feels like typical corporate software. It has a ton of features to check all the requisite boxes, it's not very ergonomic, it does things the way authors wanted and could sell to the corporate customers (who are not the end users), not the way end users prefer. It also used to be bug-ridden for quite some time, after having been pushed upon users. It comes from Red Hat (which is now a part of IBM), so you could say: here's why! But, say, podman also comes from Red Hat, and does not feel like such corporate software; to the contrary, end users enjoy it. */
by sacredSatan | 2025-09-20 16:54:17+00:00
I agree about clarity, so this is just an aside but that's what makes it a fun experience for me. It's unlike reading anyone else (although I haven't read many authors). I'd say no country for old men was still pretty straightforward, but I had to re-read sentences and whole paragraphs with blood meridian.

The work makes it worth it, makes it that much more rewarding to me personally. It's like choosing to play a difficult videogame, because you know once you overcome it, it'll be great.
by IgorPartola | 2025-09-20 16:54:17+00:00
I am not discounting the importance of the group being able to recognize the smartest person or people. But of the hundreds of thousands of Athenians we only recognize several dozens to maybe a couple hundred individuals as having moved the needle.

You can also think of it as “the maximum intellectual capability of the group is limited by the intellectual capability of its smartest members”.
by jeroenhd | 2025-09-20 16:54:28+00:00
systemd-sysupdate already exists. systemd won't run the software repository of course, but with systemd-sysupdate together with some overlay mounts you can get Steam Deck-like ease of use system updates.

For software management in R/W environments, there's the podman + systemd combo that'll let you run containers like normal systemd services.
by rrdharan | 2025-09-20 16:55:07+00:00
https://access.redhat.com/articles/2201201 and https://github.com/git/git/security/advisories/GHSA-4v56-3xv... are interesting examples to consider (though I'm curious whether Rust's integer overflow behavior in release builds would have definitely fared better?).

> Unless the end goal is to rewrite the whole thing in Rust piece by piece, solving hidden memory bugs along the way.

I would assume that's the case.
by giantrobot | 2025-09-20 16:55:47+00:00
Even a fixed touch UI is dangerous. You can't brace your hand easily to hit a touchscreen and your hand will bounce around while driving. Hitting the wrong button is as or more distracting than having to search for a control. Then there's the shitty UIs with small buttons that are hard to hit accurately even at a dead stop. It seems like every touch screen UI takes all the sins of modern crappy web design and turns it all to 11.

They're just terrible UX for the inside of a vehicle you're driving.
by vlovich123 | 2025-09-20 16:56:31+00:00
Lots of reasons. The most obvious ones that come to mind:

1. People like a variety of custom cases that themselves have features (eg wallet cases random designs etc). If it’s built into the phone that customization capability is worse because you now have two layers of protection making for a very thick and heat-insulating design.

2. It’s valuable to have partners that make accessories for your device. If you kill that line of business for them, other things may go away and those partners will want to work with you less.

3. An integrated case will still suffer cosmetic damage. But now without the option to replace, you’re stuck with that damage.
by ertian | 2025-09-20 16:57:09+00:00
So you'd be better-off if SpaceX and Google were Chinese companies?

Also, a lot of the wealth from the tech industry does spill over to the larger community. You're strictly better off having it. If the US had just stuck with their 1970s economy on the theory that any new industries wouldn't distribute their benefits equally, it would be vastly smaller, less powerful and less wealthy. Surely that's obvious?
by IgorPartola | 2025-09-20 16:57:12+00:00
I don’t subscribe to one specific model but the thing is that you very rarely if ever see a group of average people achieving something great without a few outliers mixed in. In some situations the greatness of some was exactly enabled by others simply not getting in the way.

You might bring up something like Bell Labs as a counter example but my point would be that it was a large group of exceptional people and you got synergies out of putting them together but compared to the society in which they existed they were each individually outliers too.
by Jweb_Guru | 2025-09-20 16:57:30+00:00
I agree with you in general, but we understand enough of the mechanisms for how selective pressure occurs that we know it is often not the deciding factor in population-level changes. For example, the smallest and most rapidly replicating bacteria have such intense selective pressure that they even select against noncoding introns (extra energy during replication!) but this effect is already gone for larger and less rapidly-dividing bacteria. A lot of stuff simply does not affect fitness (either direct reproductive fitness or species survival) enough for that to be the deciding factor in its propagation, and without recognizing that an awful lot of evolutionary biology / population genetics isn't going to make much sense.

In other words, the default hypothesis when we find that something humans often did in the past is bad for our health should certainly not be that there is some evolutionary advantage to the behavior. We are a fairly homogeneous population that has suffered several severe bottlenecking events, has fairly long and slow reproductive cycles, and has relatively few children. We also have aggressive active immune systems. Under these circumstances selective pressure is not super high, even before accounting for any of the modern life factors people often bring up. That doesn't mean it doesn't exist at all obviously, just that it's very case by case.
by ddawson | 2025-09-20 16:57:31+00:00
Cormac McCarthy was deeply interested in physics and mathematics and was a trustee at the Santa Fe Institute, which has a heritage connected with Los Alamos National Laboratory. I don't know a lot about this side of him, only reading about it after reading his last two novels which do show a mastery of physics that really seemed to mirror his master of bridles and guns and culture in the old west. I don't remember reading that he had actually published any of this himself but he was spoken of as intensely curious about physics.
by ksec | 2025-09-20 16:57:49+00:00
>Part innovator's dilemma, part lack of ambition, part lack of government support, part the usual UK/Euro VC situ.

I wish I am wrong. Unfortunately agrees with you on everything.

Part innovator's dilemma almost certainly happens to all companies. It is the rest of the sentence that are the problems. Ambition, Government, UK/Euro VC situ, and generally culture.

Those who are Ambition moved to the US. Government, both ruling party and cvivl servant aren't interested to making anything better and I have seen this first hand. UK and Euro VC.
by giantrobot | 2025-09-20 16:59:02+00:00
> What about physical buttons off the wheel? A well-designed car might have quite a few: window controls, sound system volume knob, temperature up-down, etc.

Those controls are typically on some surface of the car your hand is braced on. They're also very simple physical controls with a good amount of tactile feedback. It's hard to fuck up a simple push button window control or AC dial. Even on a bumpy road you'd be hard pressed to have trouble with such controls.
by Bender | 2025-09-20 16:59:22+00:00
People can speculate all day but unless you are doing hardware level diagnostics there is no way to put your mind at ease. For charging devices one can either buy "USB condoms" or just make on by cutting every wire except those used for power. It also would not hurt to check if your BIOS has options related to disabling updates to the BIOS via USB/UEFI, just don't forget you did that if the option exists.

For your case of USB to Ethernet data is required so the only other way beyond hardware diagnostics and dumping firmware is to do extensive background checks on everyone working for your ISP, FTE's, contractors, executives and all the board members. Doing that without their knowledge is very expensive not to mention does not cover all the people in the shipping logistics path. Consumer hardware rarely has a full chain of custody with attestation.

There may be some fringe cases where a USB hub may help mitigate some threats such as over-voltage. Realistically at some point one has to either trust the device or avoid technology all together. There are communities of people that avoid technology so for what it's worth you would not be alone if pursuing that route.

If the concerns are related to organizations or governments snooping Microsoft Windows Recall, MacOS mediaanalysisd have negated the need for hardware snooping like the good ol' days of KeyGhost. One tiny update could in theory upload AI summaries. Incremental updates tend to stay out of the news.
by balamatom | 2025-09-20 16:59:32+00:00
>I doubt that would be compatible with a WASM build target.

In principle, I don't see why not. In practice, yeah I can see it. In both cases, can't know without checking, and I haven't. Bevy is pretty cool though!

My drive-by suggestions would be more along the lines of https://github.com/mattwparas/steel, or the very ad-hoc embedded language of https://github.com/elkowar/eww, or perhaps most pertinently https://kdl.dev/

Maybe one of those would be minimal enough for the rest of the engine to not manage to get your way, as frameworks are known to do. As always, happy hacking!
by EvanAnderson | 2025-09-20 16:59:38+00:00
Back when I was using it similarly to the other poster (say, 15 years ago) that wasn't the case. It's still a great litmus test of security posture today.

Just using DNS for data exfiltration, in general, is usually pretty fruitful. I wrote a "live off the land" data exfil script for Windows once, using the certutil and nslookup commands to base64 encode data and ship it out to my off-site DNS server.

I'll have to try it against a Palo Alto NGFW sometime and see what alarms I trip. I honestly never thought to try.