MurphyA/hacker-news huggingface dataset:
by jrtc27 | 2025-09-13 18:19:36+00:00
> Unfortunately, the time between free and revocation introduces a short-but-not-zero window for UAF bugs/attacks. This time gap is even explicitly acknowledged in the Reloaded paper!

Yes, revocation is batched and asynchronous. This does mean that capabilities remain valid beyond the language-level lifetime of the allocation. However, that does not mean that, within that window, we have not dealt with any UAF attacks. The vast majority of UAF attacks do not care about the fact that the memory has been freed, but rather that the memory has since been repurposed for something else (whether the allocator's own internal metadata or some other new allocation). Cornucopia (both versions) ensures that this does not happen until the next revocation pass; that is, it "quarantines" the memory. Effectively, when you call free, it's "as if" the free were deferred until revocation time. Therefore, if your capability is still valid, that memory is still only in use by you, and so the vast majority of attacks no longer work. This protects you against UAF in a similar way to how making free a no-op protects against most attacks. This is not all attacks, very occasionally the bug is a result of something like undefined behaviour that follows, but I don't know if we've found even one real-world instance of a UAF that this approach isn't going to catch. I'm sure they exist, but the nuance is crucial here to be able to reason about the security of various models.

But yes, MTE+CHERI are complementary in this regard. We have drafted ideas for using MTE with CHERI, which would (a) let you immediately prevent access (noting though that the capability would remain valid for a while, still) (b) let you recycle memory with different MTE colours before needing to quarantine the memory (hoping that, by the time you run out of colours for that memory region, a revocation pass has reclaimed some of them). That is, in theory it both gives stronger protection and better performance. I say in theory because this is just a sketch of ideas, nobody has yet explored that research.

I also note that MTE does not fix the undefined behaviour problem; it will only trap when it sees a memory access, but vulnerabilities introduced due to compilers exploiting undefined behaviour for optimisation purposes may not perform a memory access with the pointer before it's too late.
by nunez | 2025-09-13 18:20:20+00:00
From the abstract of the paper [^0]:

> Like students facing hard exam questions, large language models sometimes guess when uncertain, producing plausible yet incorrect statements instead of admitting uncertainty

This is a de facto false equivalence for two reasons.

First, test takers that are faced with hard questions have the capability of _simply not guessing at all._ UNC did a study on this [^1] by administering a light version of the AMA medical exam to 14 staff members that were NOT trained in the life sciences. While most of the them consistently guessed answers, roughly 6% of them did not. Unfortunately, the study did not disambiguate correct guesses versus questions that were left blank. OpenAI's paper proves that LLMs, at this time of writing, simply do not have the self-awareness of knowing whether they _really_ don't know something, by design.

Second, LLMs are not test takers in the pragmatic sense. They are query answerers. Bar argument settlers. Virtual assistants. Best friends on demand. Personal doctors on standby.

That's how they are marketed and designed, at least.

OpenAI wants people to use ChatGPT like a private search engine. The sources it provides when it decides to use RAG are there more for instilling confidence in the answer instead of encouraging their users to check its work.

A "might be inaccurate" disclaimer on the bottom is about as effective as the Surgeon General's warning on alcohol and cigs.

The stakes are so much higher with LLMs. Totally different from an exam environment.

A final remark: I remember professors hammering "engineering error" margins into us when I was a freshman in 2005. 5% was what was acceptable. That we as a society are now okay with using a technology that has a >20% chance of giving users partially or completely wrong answers to automate as many human jobs as possible blows my mind. Maybe I just don't get it.

[^0] https://arxiv.org/pdf/2509.04664

[^1] https://www.rasch.org/rmt/rmt271d.htm
by Saline9515 | 2025-09-13 18:22:27+00:00
> This may be an accurate description for fully-depreciated nuclear plants, but it doesn't reflect the economics of new-build nuclear at all.

I'm talking about the wholesale market, which works as an auction, where producers give their price for units of capacity, and the clearing price is set by the marginal producer. Typically, nuclear reactors will give their marginal cost, near 0, and let the more expensive producers set the clearing price. Given that capital cost is a sunk cost, it doesn't matter to nuclear plants as long as the market price is above the marginal one. So called "renewables" do this as well, but have to account for the risk that mother nature doesn't provide, and therefore factor in the risk of having to buy coal or gas-produced electricity on the spot.

> Net demand on CAISO can go from about 2 MW to 30 MW in the summer.

Well if this is the case this is not a "nuclear sized" market then and other ways of supplying capacity are better. But remember that it's estimated that blackouts are much,much more costly society-wise than whatever marginal price you could pay for electricity, so having a baseload and some excess capacity is always good. This is also why many electricity producers are nationalized. It's not a market like the others.

> Flamanville

France has the strictest regulator of the world, which adds a lot of costs, and Flamanville required to re-learn many things after losing the expertise from the 70's. For the record, an airliner should be able to fall on Flamanville without any problem, due to regulations.

> Curtailements

Excess electricity is sold in Germany, which lacks a much-needed baseload, especially since they have a big industry. Most people ignore that electricity consumption follows Pareto's law, with around 1k industrial plants consuming around 50% of the electricity (sorry no source for this, my econ teacher said in a class a few years ago!).

> SMR

Yes, still in development, many different designs so costs estimates are difficult to make. I'm citing Wikipedia's[0]. The good thing is that the possibility to build them serially should decrease a lot the costs as demand ramps up.

[1] https://en.m.wikipedia.org/wiki/Rolls-Royce_SMR
by estimator7292 | 2025-09-13 18:23:41+00:00
Foreign workers are cheaper because you can use their visa to extort them. If they get whiny about pay, you threaten to fire and deport them.

It's really that simple. SV likes foreign workers BECAUSE SV salaries are high. Businesses will do literally anything to save a few cents, at any cost.

There are enough qualified domestic candidates. Your bosses don't want them because domestic workers demand wages that fit domestic cost of living. Foreign workers can be extorted into accepting much less than a domestic worker will.

This is all very simple and straightforward. Your big mistake here is in assuming that capitalism is fundamentally moral or logical. It is not. Literally only one thing matters and it's maximizing profit at any cost.
by graeme | 2025-09-13 18:24:01+00:00
A bunch of stuff can go wrong with oil:

* You can use cheaper types that are nothing but omega 6

* You can heat them too high for their smoke point

* They can oxidize and go rancid

* You can use an enormous amount of it

Likely one of the main reasons a lot of restaurant food may not settle as well as home cooking. But in principle a restaurant could do the reverse of these four points.
by saulpw | 2025-09-13 18:24:28+00:00
The main challenge with any creative effort, including and especially programming, is motivation. "Easy coding" gives you small mental wins that build your dopamine circuits and give you something to chase. When people say that "AI takes the fun out of coding" they mean that they're not getting those rewards anymore. It might make coding easier (though I'm not sure it actually does, ultimately), but in the process it takes away the motivation.

The ones who are excited about this are the ones who are motivated by the product. When AI can whip up some half-baked solution it sure looks like you can focus on the product and "get someone to code it up for you". But unless it's a well-understood and previously executed solution, you're going to run into actual technical problems and have to fix them. But your motivation to deal with the irritating pedantrics of the modern computing stack (which are the same as all technology ever, with orders of magnitude more parts) hasn't been built up. There's no beneficial flywheel, just a fleet of the Sorceror's Apprentice mindless brooms that you hope you can get work enough to ship.
by bsenftner | 2025-09-13 18:24:56+00:00
I found that emphasis to be similar to two teams building from opposite starting points, and never meeting in the middle.

The issue with "learning to learn" is that it does not include the foundational skill of "how to communicate". Far too often it is not a lack of desire to learn, it is the inability to communicate what one is trying to learn. When seeking help, not only does the seeker have difficulty expressing their situation, those trying to help are not taught how to listen and will offer solutions to an issue only starting to be explained. This difficulty is then compounded by self conversation bias that negatively spins against the person seeking. That is two very high hurdles: negative self bias, and inarticulate communications while seeking guidance.
by bobthepanda | 2025-09-13 18:25:08+00:00
Also we have a much longer tradition of western European cooking on a pedestal. Asian recipes really only start showing up in American media in the 90s, and blew up in a serious way in the 2010s.

Japan in particular is not food self sufficient and has a declining agricultural production so is not spending as much money on convincing people to export food. Plus technically a lot of Japanese food is not grown or caught in Japan and so can be made elsewhere using the same recipes.
by tialaramex | 2025-09-13 18:25:19+00:00
Not really? .NET has a "Common Language Runtime", which you can think of as analogous to the Java VM or to Beam.

A transpiler might read PHP and spit out C, or Java or some other existing programming language, spitting out the code for a virtual machine doesn't make you a transpiler unless you're going to argue that all compilers are just transpilers, it's like one of those "Actually goats are fish" arguments. OK, but now the word "fish" is useless so why go to this bother ?
by riversflow | 2025-09-13 18:26:18+00:00
Ima guess they mainly mean exercise, but also sleep.

Personally I obsessed about diet for a decade before I finally got religion about running for 30+ mins every day coming up on 2 years ago(I now typically run for more like an hour). It has made far more of an impact on my well being than any diet or fasting regimen… which, mind you,I was extremely strict about, like eating disorder levels of obsession. It has also made catching quality sleep a complete non-issue. I won’t lie, it took many months of consistency to feel these benefits, and I personally didn’t really see them when I was doing cardio only 3 times/120mins total per week on a bike and resistance training. My understanding is that this is probably a result of metabolic adaptation. Much the way I learned that the bacteria in your gut is a culture you grow and maintain, happy gut = happy me, I now think of my muscle mass as a crucial metabolic organ that needs to be properly conditioned for my bodies energy systems to function properly. Strong metabolism = little metabolic waste accumulating in your tissues and more of the machinery your body needs to work.

Unfortunately we live in a society where you have to make this a lifestyle, I personally find I have to keep my run very high on my list of personal priorities to stay consistent, as it is rather disruptive to my day. I have reflected that a lot of that is around cultural norms, so if this sort of routine was much more normalized it would be easier to integrate socially while still maintaining it. Sweaty people are only really annoying if you aren’t sweating with them. With how much sharper, more energetic, and emotionally regulated I feel, it amazes me that more employers don’t incentivize it-maybe someday.

That said, I’m in my mid 30s and I’ve never felt better in my life, so I’d say it’s worth while. I feel strong, faster, and much more durable, with virtually no pain and less illness/infection/inflammation than I had even in HS. Meanwhile my contemporaries are complaining of back and knee pain, frequent illness, poor sleep, dietary intolerance and out of control and appetite. They say, “I’m getting old” and I just shake my head.

I know it’s cliche as hell to say we were born to run, but seriously, our species almost certainly has an evolutionary legacy of running a lot, and I think many of us can tap into that legacy if we so desire.
by OhMeadhbh | 2025-09-13 18:26:36+00:00
I posted this mostly to get the phrase "Soft Secession" into the HN search index. But it seems to me red and blue camps could have some beefs with federal over-reach. It's interesting to note there are several places where individual states deal directly with each other without going through the federal government. I'm thinking mostly of how Uniform Commercial Code is coordinated between states (spoiler alert: it's not through the US congress.) I do sort of wonder if we're headed for a Soviet-esque conscious decoupling of the union. It seems you could probably do so officially and mostly non-violently if 75% of the state legislatures voted to dissolve the union. Not that I'm recommending such a thing. Times are hard, but the uncertainty of having to reconstruct polities after the end of the union seems... risky. I can easily imagine a post-union world where The Empire of San Francisco slaps tariffs on hoodies manufactured in the Berkeley Free State. I don't live in Florida, so I guess I'm okay with them declaring themselves a constitutional monarchy run by the Trump family. But I'm not sure I would want to visit. It has always seemed to me the political union is a venue which requires you to step outside yourself to find what's possible among a large group of people, each with their own agenda. People often make the mistake of thinking states like California or Texas are political mono-cultures (they're not.) But I think every place would get a little more extreme if they were unmoored from their political rivals. Anyway... this article on "soft secession" is interesting and unrelated to the Silverberg-esque fantasy I am relating in this comment.
by forrestthewoods | 2025-09-13 18:27:07+00:00
> Or at least, that's my expectation: I've never actually considered working somewhere that does leetcode interviews.

Hrm. So what you're saying is you've never actually taken or given this style of interview. Nor presumably ever worked at a company that did this interview. So if on the off-chance these interviews actually were a somewhat successful tool for filtering candidates you wouldn't actually know it?

That feels like a miss.
by idoubtit | 2025-09-13 18:27:39+00:00
I don't understand why they didn't try to alter the ON condition. Instead of moving the JOIN into a per-field-subquery or a preliminary query, why not replace

LEFT JOIN event_chunks as ec ON ec.chunk_id = lc.id

with

LEFT JOIN event_chunks as ec ON case lc.type WHEN 'E' THEN ec.chunked_id = lc.id ELSE 0 END

I don't know if it more performant with Sqlite's query planner (and it may depend on many conditions, e.g. strict tables), but it looked like the obvious fix to the initial query. And it's 100% SQL, no need for a Rust hashmap.
by majgr | 2025-09-13 18:28:05+00:00
Usually, when travelling, a lot of things, like architecture, or people are different, that is why I want everything possible in focus. That is why my perfect combination for travel is (in 135 format): - 24mm/f2.8 for indoors - 24-90mm/f8, for streets, parks, forests

When I started using TG-7 for street photography I noticed that full range of focal lengths is used, 24-100/f11-f27 (in 135 format), so 28mm is too limiting. Then, telephoto 80-300 turned out to be pretty useless during last vacations. Even in mountains, photos made with wider angle were better for me, maybe I do not have good eye for it.
by actuallyalys | 2025-09-13 18:28:15+00:00
I like the mountain and house myself. The wide shot isn’t a bad photo but it is pretty cluttered and the parts don’t really work together like you say.

I think there likely are ways to effectively include the people, by getting to a angle where you can isolate a couple of them and include the mountain. I suspect you could also get a good shot with the wide angle by moving closer to the people, although this would emphasize the people more than the mountain.
by littlestymaar | 2025-09-13 18:28:49+00:00
> The French, Germans and Poles keep talking about doing just that - with "reassurance" forces or whatever the name for it is these days.

4 years and a million casualties too late though.

> If they deploy those forces they will be wiped out.

What? We've all seen the offensive capabilities of the Russian over the past three years and it's been very clear that they can't run combined arms properly, nor can they secure air dominance over a country with only old Soviet airframes, they wouldn't be able to wipe out anything in a short period and attacking allied forces means declaring war to those nations, which Russians cannot afford to do.

> European leaders' main hope was that they could sacrifice some troops to provoke the yanks over to save the day.

They'd been no need to save anything, Putin isn't dumb enough to start a fight with European countries. Putin couldn't beat Ukraine in more than three years, hoping to win against the whole Europeans would be stupidly delusional.
by pqtyw | 2025-09-13 18:29:34+00:00
And most party funding comes from the government which favours party which are already in power? Not that this is a horrible system but it does have rather obvious downsides.

e.g. that doesn't seem to be working that well in Hungary or Turkey and presumably quite a few other countries. Banning or severely limiting external funding or support makes it rather easy for politicians with authoritarian policies to keep their grip on power.

You win the election, you tweak the system to make it easier for you to win next time, you get more funding and your opponents less. Rinse and repeat and you can weaken the opposition to such an extent that you can stay in power more or less indefinitely. That's what Orban or Erdogan are doing.

Another option is you spend a lot of money, win, then change the rules to ban or limit external funding so that nobody else can do that to challenge you.
by somenameforme | 2025-09-13 18:29:58+00:00
The most disconcerting thing about this murder is that it seems like the killer was relatively normal beyond being excessively involved in online politics. In many of these things there's fairly obvious symptoms of major mental illness, or at the minimum it's some guy who's basically way down out in life. This was a young seemingly smart guy who just decided to throw his life away, and murder somebody else, probably as a result of spending way too much time in online circle jerks.
by hvb2 | 2025-09-13 18:30:28+00:00
They might be living wages in those countries. You can save a lot of money by not living like the average American.

It's the standard of living that Americans expect. In order to afford that you need x amount of money. For example, if people in a different country don't need a car (let alone 2) and live in a 800sqft home with a family of 4. What does that mean for an acceptable minimum wage?

I don't even know what you mean by cheap labor. If you mean illegal practices below minimum wage, sure. But the average farming salary for example is over 17 [1] dollars an hour. Meanwhile in China, the average manufacturing salary was 97500 yuan [2], which is ~13680 dollars a year. That's 13680/12/168 = 6.8$ an hour.

So knowing this the basic question is: Is the American consumer willing to pay more for the same product because American workers need to be paid 2.5x more. The answer is just simply no.

Can you impose tarifs to offset that difference? Sure, the end result cannot be anything other than prices going up

1: https://www.indeed.com/career/farm-worker/salaries 2: https://www.statista.com/statistics/743509/china-average-yea...
by boredhedgehog | 2025-09-13 18:30:39+00:00
> He created the "Professor Watchlist". You can imagine what thats for.

According to its About page, it's for documentation only; "TPUSA will continue to fight for free speech and the right of professors to say whatever they believe".

> He also said Medhi Hasan should be deported.

Apparently, Kirk said Hasan's visa should be revoked, as he was unaware of Hasan's citizenship. But Kirk also said in his rant to "get him off TV", which indicates that his instinctual reaction does include silencing people he disagrees with.
by pqtyw | 2025-09-13 18:31:49+00:00
> giving all campaigns a fixed stipend off public money

How do you allocate that? Surely you can't give anyone who asks the same amount. So you favour parties which are already entrenched. Of course that has quite a few upsides but it doesn't seem like an inherently democratic system.

In worst (of course not unavoidable) you also might end up with indirect equivalent of what your re trying to ban, e.g. private media companies with a lot of resources that are biased towards certain candidates influencing public opinion (without crossing the legal boundaries) or those already in power using the state media to do the same.

e.g. in Hungary most funding comes from the government. How did that work out for them?
by maksut | 2025-09-13 18:32:13+00:00
I disagree with this. The tooling around JVM is great or at least good enough.

Maven is mostly smooth sailing comparing to Python's env solutions or JS ecosystem. Maven is 21 years old. A quick search says Python has/had; pip, venv, pip-tools, Pipenv, Poetry, PDM, pyenv, pipx, uv, Conda, Mamba, Pixi.

Debugging is just fine. Modern debugging tools are there. There is remote debugging, (although limited) update & continue, evaluating custom expressions etc. I don't know what they complain about. If using Clojure, it is also possible to change running application completely.

Monitoring tools are also great. It is easy to gather runtime metrics for profiling or monitoring events. There are tools like Mission Control to analyse them.
by Karrot_Kream | 2025-09-13 18:32:18+00:00
To add onto this, I really don't think emacs has that big of an initial learning curve nowadays.

If you enable cua-mode and get the LSPs working, you get the same experience as any other big editor like VSCode or Zed pretty close to out of the box. The arrow keys, mouse, and cut-copy-paste do exactly what you'd expect. There's menus, there's toolbars, there's scrollbars. Don't let the "emacs ricer" screenshots fool you; a lot of people disable those things for aesthetic reasons. Probably the kludgiest thing emacs has still is the default scrolling mode which scrolls through a page and then bumps the entire page forward by 1, like older editors. You can change these with a few lines in your config.

Alternatively you can get good out of the box experiences with an emacs distribution (like Doom Emacs) or one of the many minimal configs out there (I'm partial to [1])

Lumping this in with something like vim/neovim is a bit silly because the basic navigation commands and editing experience of emacs is mostly the same as other editors. Sure, underneath this is all run by an Elisp VM and an event loop which maps Elisp commands to keypresses, but as a user you only need to dive in when you feel comfortable.

[1]: https://github.com/jamescherti/minimal-emacs.d