MurphyA/hacker-news huggingface dataset:
by jrtc27 | 2025-09-10 07:43:42+00:00
No. The capability itself lives in normal memory intermingling with data just like any other pointer. There is no "capabilities memory", it is just memory.

In MTE, you have the N-bit (typically 4) per-granule (typically 16 byte) "colour"/tag that is logically part of the memory but the exact storage details are abstracted by the implementation. In CHERI, you have the 1-bit capability tag that is logically part of the memory but the exact storage details are abstracted by the implementation. If you understand how MTE is able to store the colours to identify the different allocations in memory (the memory used for the allocations, not the pointers to the allocations) then you understand how CHERI stores the tags for its capabilities, because they are the same basic idea. The difference comes in how they're used: in MTE, they identify the allocation, which means you "paint" the whole allocation with the given "colour" at allocation time (malloc, new, alloca / stack variables, load time for globals), but in CHERI, they identify valid capabilities, and so only get set when you write a valid capability to that memory location (atomically and automatically). This leads to very different access patterns and densities (e.g. MTE must tag all data regardless of its type, whereas CHERI only tags pointers, meaning large chunks of plain data have large chunks of zero tag bits, so how you optimise your microarchitecture changes).

Perhaps you're getting confused with details about the "tag table + cache" implementation for how tags can be stored in commodity DRAM? For CHERI you really want 129-bit word (or some multiple thereof) memory, but commodity DRAM doesn't give you that. So as part of the memory controller (or just in front of it) you can put a "tag controller" which hides a small (< 1%) fraction of the memory and uses it to store the tags for the rest of the memory, with various caching tricks to make it go fast. But that is just the tag, and that is an implementation detail for how to pretend that your memory can tag data. You could equally have an implementation that uses wider DRAM (e.g. in the case of DRAM with ECC bits to spare). Both schemes have been implemented. But importantly memory is just 128+1-bit; the same 128 bits always store the data, whether it's some combination of integers and floats, or the raw bytes of a capability. In the former case, the 129th tag bit will be kept as 0, and in the latter case it will be kept as whatever the capability's tag is (hopefully 1).
by m4tthumphrey | 2025-09-10 07:44:01+00:00
I am a huge Plex power user; watching something at least once a day.

Unfortunately, Plex is a bit of a mess these days - constantly pushing Live TV on us, requiring internet access to access local media (this is a killer whenever internet goes down), overly complex, clunky remote access (altho this is much better these days). But it still isn't bad enough to make me try and migrate. I love my local setup (Sonarr and a custom app for movies as Radarr is OTT for the amount of movies we watch) and Plex is very polished (compared to the alternatives) but I do wonder how much longer it will be around.
by chrismorgan | 2025-09-10 07:44:02+00:00
> A semantic line break SHOULD occur after an […] em dash (—).

I agree with this, however it means that no existing markup language supports semantic line breaks, because every last one of them just turns the break into a space—and em dashes are, in most locales, not to be surrounded by a space. Consequently, you’ll end up with a stray space if you do this.

My irritation at being unable to break after an em dash (which I want to do quite frequently) was one of the things that headed me down the path of designing my own lightweight markup language (LML), to fix this and other problems I observe with existing LMLs. I’ve been using it for all my personal writing for something like four years now (though a a fair bit has changed since then), and I expect to finally have a functioning parser before the end of this year.

One of the other fun complications of this kind of line break in source code is languages that don’t have a word divider—inserting a space at all is incorrect in them.

CSS presently just leaves such decisions UA-defined <https://drafts.csswg.org/css-text-4/#line-break-transform>:

> any remaining segment break is either transformed into a space (U+0020) or removed depending on the context before and after the break. The rules for this operation are UA-defined in this level.

My LML currently turns segment breaks into a space unless the line ends with an en or em dash, unless there’s a colon or a space before that. I haven’t got anything in place for languages with no word separator yet, but it is unusually well-suited to such languages.
by Findecanor | 2025-09-10 07:44:19+00:00
Here's my hot take: A small metal loop for tying a wrist strap to.

All other cameras have wrist straps as a safety feature. From flimsy ribbons on the smallest (smartphone-sized) to padded leather on the largest. They were common on feature phones too. But smartphone makers want people to drop their phones, so people would have to buy new ones, I suppose.

You could get a case with a wrist loop, you say? Not on any of Apple's cases, anyway.
by kajimelo88 | 2025-09-10 07:45:38+00:00
I’ve been experimenting with how A.I. (mostly Midjourney + SREF) can be used to explore new forms of typographic design.

This mini-lab is part newsletter, part playground. It shares: - Prompt experiments (Art Deco, floral filigree, editorial cuts) - Visual breakdowns of results - Open challenges + tools for visual creators

I just launched it — the first 50 subscribers help shape the direction. Would love feedback or collab ideas from other hackers, designers, and curious builders.
by masklinn | 2025-09-10 07:46:03+00:00
Unicode implementation was always a ton of work. Far as I can tell there have been few novel features beyond ZWJ sequences maybe? I don’t know if these are treated separately or as ligatures by engines.

The big thing is that historically those features were ignored due to being low demand, the desirability of emoji made emoji great vessels for getting those features implemented and tested by engines.

I think creating fonts is what’s gotten a lot more intensive, fallback fonts are a thing but the integration between different fonts is not always enjoyable.
by euLh7SM5HDFY | 2025-09-10 07:46:45+00:00
The sheer volume is the issue. Recent XZ backdoor shows it can happen to everyone. I am pretty sure JS has most packages, updates and contributors - and it makes it the best ecosystem to target. That anemic standard library doesn't help of course, but 2FA and package signing is required for all package repositories, here and now.
by davorak | 2025-09-10 07:47:09+00:00
> why you find charter schools such a nonstarter JUST because they tend to have more support among those on the right

So my general impression is that the republican party, nationally, note I am distinguishing the republican party form political right in the USA, has not been supportive of education in terms of financing or in promoting the necessary environment to ensure high quality and consistent education.

My general impression is that the republican party is for charter schools.

An argument that says trust/invest in the system promoted by the party that has been undermining/unsupportive of the current system does not invoke my trust/sympathy.

This is not a topic I have done rigorous investigations on, but what little I have done normally shows a lack of hard evidence and apples to apples between charter schools and traditional public schools.
by somenameforme | 2025-09-10 07:47:40+00:00
Interesting! Yeah, this is a significant decline across the board. I'm curious what it is in the US in particular that's driving such sharp declines. Because many places in the world did things like shut down schools during COVID, have internet/social media, ongoing obesity epidemics, major immigration from low education sources, demographic/fertility issues, and so on. Yet somehow looking at the latest PISA (2022) [1], the US now sits between Malta and Slovakia in math. And if these scores are any indicator, we're probably looking at a further decline in the next PISA results, which should be released this year.

[1] - https://worldpopulationreview.com/country-rankings/pisa-scor...
by formerly_proven | 2025-09-10 07:47:54+00:00
> I mean at 2GHz, and 2/3c, the signal travels about 10cm in 1 clock cycle. So it's not negligible

That's 0.5ns - if you look at end-to-end memory latencies, which are usually around 100ns for mobile systems, that actually is negligible, and M series chips do not have particularly low memory latency (they trend higher in comparison).
by MangoToupe | 2025-09-10 07:48:01+00:00
I offer another explanation: we simply don't value educated people. Kids have few role models who are educated or value knowledge. Careers emphasize narrow expertise. Business leaders often show very little understanding of the world outside of squeezing money out of others. We live in an age where access to knowledge is prioritized over knowledge itself, and dogma is difficult for most to tease from contradictory observations. We no longer portray reading or discovery as pleasureful in itself. Why would we? There is no money in showing the complexity of the world.

Simply put, if you were a child now, why should you care about education when it doesn't appear to be the key to anything you want? Money has taken the place of knowledge. On further inspection, this should not be a surprise to anyone who has bought into the dogma of a transaction-oriented reality.

Children these days are raised just as much by a culture that never figured out how to resolve the contradiction between making money and having values.

Blame is futile, though. Hold your children close and raise them the best you can, for there is no reversing the tide.
by eitland | 2025-09-10 07:48:22+00:00
I see it the exact other way around:

- everyday bugs, just put a breakpoint

- rare cases: add logging

By definition a rare case probably will rarely show up in my dev environment if it shows up at all, so the only way to find them is to add logging and look at the logs next time someone reports that same bug after the logging was added.

Something tells me your debugger is really hard to use, because otherwise why would you voluntarily choose to add and remove logging instead of just activating the debugger?
by rldjbpin | 2025-09-10 07:49:20+00:00
i recall them being one of the first ones to release a mixture-of-experts (MoE) model [1], which was quite novel at the time. post that, it has appeared to be a catch-up game for them in mainstream utility. like just a week go they announced support for custom MCP connectors to their chat offering [2].

more competition is always nice, but i wonder what can these two companies, separated by several steps in the supply chain, really achieve together.

[1] https://mistral.ai/news/mixtral-of-experts [2] https://mistral.ai/news/le-chat-mcp-connectors-memories
by watwut | 2025-09-10 07:49:37+00:00
Small companies use it as competitive advantage against existing businesses.

The market is fully captured and you do not win by having better productivity or by being able to attract better people. You win by attracting a lot of capital and by being able to eventually create quasi monopoly. You think hot AI companies are somehow productive? They are in massive looses. Or that all those corporations have super productive workforce? Anyone who worked there knows they dont.

The econ 101 thought experiments are just that - thought experiments about ideal world. They have much less to do with how actual companies operate.
by ThrowMeAway1618 | 2025-09-10 07:49:46+00:00
>It's not hard to be in the median yet one of the worst states, if NY/CA/FL/TX all have shit scores (I have no idea if that's the case). You could conceivably be at the median while being one of the worst 5 or 10 states.

I wonder where you went to school. Median means that half of the sample is above and half the sample is below.

To explain (and I'll use small words so you'll be sure to understand), the median of the fifty states is that 25 are above the median and 25 are below it. See how that works?

Here's a simpler example in case you're still confused:

Steve makes $5/hour

Bob makes $8/hour

Reggie makes $11/hour

Sylvana makes $14/hour

Benoit makes $17/hour

The median wage is then $11.00/hour. Get it now?

Check out this very complex page[0] (let me know if you need help with the bigger words) that discusses this idea. Good luck. I suspect you're gonna need it.

[0] https://en.wikipedia.org/wiki/Central_tendency
by jrtc27 | 2025-09-10 07:50:09+00:00
Yeah you need a compiler, linker and OS. That's true of any security technology. CHERI may be more significant in that regard because it's a bigger rethink than just stuffing some extra metadata into the existing types, but it's not at all intractable. We, a research group, maintain CheriBSD, a "full-fat" port of FreeBSD to CHERI (Morello and CHERI-RISC-V), so to a big tech organisation it's a small investment. The cost to tech companies is not making it work, it's often much more boring business factors.
by FirmwareBurner | 2025-09-10 07:50:17+00:00
Depends. What is a country? The land borders? The people? The government? The leader? If you take out all the Germans out of Germany and replace them with other people is it still Germany?

My point was that accountable democracy requires direct vote from the people and not via second hand, not that Germany or Italy aren't countries. And if EU wishes to be a country it needs that level of direct accountability which is impossible.

Otherwise if you force it it's gonna be another Yugoslavia or USSR where most people are pissed because they're not being ruled by someone of their own culture that they can directly vote for.

These forced multi-culti nation states under one roof abominations don't work. It's been known since the Tower of Babel yet the elite ruling class think this time it will be different because it worked in the US, a country younger than most universities in Europe.
by account42 | 2025-09-10 07:50:56+00:00
Skin tones for emojis shouldn't be a thing at all.

There is something weirdly dystopian about a consortium and ultimately mega corporations deciding what aspects of you are important to distinguish yourself from others, what options for those should be available or what concepts you may use to express yourself. But this is also a wider problem with emojis beyond just skin tones - the selection of foods for example is best described as what a California hipster would think of and hardly representative of what someone around the world would want to communicate.

And then there is now the problem that instead of defining building blocks for communicating concepts, Unicode now feels the need to enumerate all concepts individually. This is not just extremely limiting in what you can communicate but also horribly inefficient where with each new version fully compliant implementations need to add thousands of additional glyphs.
by dijit | 2025-09-10 07:51:07+00:00
Unironically there are bags that I used to associate with drug dealers that are becoming common: https://www.jdsports.co.uk/men/mens-accessories/bags-and-gym...

I wouldn't be surprised if discomfort from having a bulky phone in your pocket drives this.

I am also guilty of buying a bag (not this kind) for my phone because it's so much more comfortable (and makes my trousers last longer) to not have my phone in my pocket.
by maxbond | 2025-09-10 07:51:18+00:00
People generally downvote large blocks of generated text. Perhaps it wasn't your intention to argue for a particular position, but given the context, it's the natural inference. So some downvotes may be because they disagree with the position you appear to be arguing for.

If you want to neutrally answer a rhetorical question in the context of a debate, you're going to have to disclaim that somehow. Otherwise, there's no way for us to know, and the comment walks and talks like an argument.
by wiether | 2025-09-10 07:51:53+00:00
PSA: If you are the owner of your Plex server and follow the _Sign out connected devices after password change- as they suggest, your server claim will also be expired.

So you'll have to get a new claim from https://www.plex.tv/claim and set it on your server; through the PLEX_CLAIM env var if your setup involves Docker.

They talk vaguely about it under _Common Issues_ but it wasn't on the original email, so I lost 15 minutes of my day because of this...
by nicbou | 2025-09-10 07:52:50+00:00
If you make enough money, it frees you to do other things - impactful things. For example, if you make twice as much as you need, you can work half as much. That leaves a lot of time for projects you care about. The problem, I think, is that people's lifestyle usually catches up with their income, so they never feel like they have enough. They just work the same jobs for decades, but come home to slightly nicer things every year.
by lucketone | 2025-09-10 07:53:12+00:00
> The incentives don't pencil out.

Devils advocating:

If I am already an owner of real estate, I’m interested not only in monthly rent, but also in property value (I can sell it or I can use it as collateral for a loan).

If offices are half empty across whole town, then property values are down.

On the other hand if you somehow would be able to saturate the office space, them property values go up.
by saagarjha | 2025-09-10 07:54:04+00:00
Shipping MIE (or even MTE) is a many-year effort that requires several parties. I appreciate that Daniel and the GrapheneOS team have been working on making sure the allocator is MTE aware, as well as (I assume) updating Android code to work under MTE. However, to actually ship this, you need someone to design the feature itself, then threat model it, release hardware for it, plumb it through the build system and make sure the OS is aware of it, and then there's a bunch of ongoing work that needs to be done so that it can be released. Much of this work was done by Google and Arm, not Daniel, involving dozens if not hundreds of engineers.

Daniel's position on MTE for a while has been that Google is dragging their feet in turning it on, but he fails to understand that there is more to it than just flipping a switch that he does in his OS. To actually productionize it requires a huge amount of effort that Apple put in here and Daniel, as talented as he is, really can't do. We know this because Google was not able to do it even though they wanted to. (For the avoidance of doubt: Google does want to turn on MTE, they're not just dawdling "just because". The current MTE implementation is not good enough for them.)
by boxed | 2025-09-10 07:54:08+00:00
Similarly there's a bunch of talk of "source criticism" in Swedish schools, but when you look closer at what is actually taught it sounds more like conspiracy theory or dogma and never anything actually useful.

Imo source criticism is only a thing if you have a well grounded model of the universe. And if you DO have that, then source criticism just falls out naturally and you don't need to discuss that at all anyway.
by dddgghhbbfblk | 2025-09-10 07:54:53+00:00
They care insofar as the collapse of commercial real estate is cited as a social harm of WFH by the elite classes outside the business that push RTO.

It's not an explicit decision making factor, just something that's in the background that has contributed to the overall idea that "RTO = good"

These decisions are all being made by vibes, after all, not by a cold rational analysis
by account42 | 2025-09-10 07:54:53+00:00
It's really weird how this particular kind of racism is not only acceptable in the current zeitgeist but enforced as dogma. Why is anyone's skin color their most important defining characteristic?

This feels more like virtue signaling than any kind of reason: This kind of logic lets you forever find new kinds of racism that you can then make performative fights against so that you can ignore real issues that plague the world.
by jorams | 2025-09-10 07:56:11+00:00
When they got hacked three years ago the notice included this:

> Even though all account passwords that could have been accessed were hashed (with bcrypt plus salted and peppered) and secured in accordance with best practices, out of an abundance of caution we are requiring all Plex accounts to have their password reset.

Whether that later changed for the worse is anyone's guess.
by DrSiemer | 2025-09-10 07:56:37+00:00
These days I'll just dump all relevant code into an LLM and have it explained to me instantly.

Being able to ask questions about the parts that are unclear (or just plain wrong) is so much easier than trying to cram the entire thing into my brain RAM.

In my experience it actually helps me learn faster too, since I rarely get stumped on random gotcha's anymore.
by Yokolos | 2025-09-10 07:57:01+00:00
I grew up being told by my peers in school that memorising things was a waste of time and critical thinking was all that mattered. Now I use Anki to literally memorize programming language syntax and ideas and facts that are relevant to my job (like data structures and algorithms). I wish I'd valued memorization when I was in school, because it's such a foundational thing to have knowledge upon which to build everything else.
by immibis | 2025-09-10 07:57:43+00:00
The solution that will actually work, then, is to build a platform that has the YouTube content. Don't try to convince creators to sign up for your new multiplatform thing - just rip it directly from YouTube. Now you're thinking like a VC-backed startup. Yes, it's illegal, so make sure to scale rapidly and become rich before they have time to sue you. Facebook did this to Myspace. Doordash did this to restaurant phone orders.
by rk06 | 2025-09-10 07:58:24+00:00
it is obviously more nonsense. There is no way one single will approach will work for ALL employees. some people just do not want to spend 4hrs in commute on daily basis. and any senior employee with kids would prefer to spend more time with kid than on

and that is when Office does not hinder productivity through lack of team space, meeting rooms and open office non sense or seting up equipment.
by asjir | 2025-09-10 07:58:32+00:00
The author makes an argument that at least looks like people choose YT over Nebula because YT is free. I, for example, already pay for Nebula, so I can watch it for free, but I still go to YT.

IMO it might be just a product problem. I opened nebula and:

* The same video had a better title on YT that was actually less clickbaity and more informative - assumedly because of YT algorithm for optimization

* Nebula auto set quality to 480p compared to 1080p in YT - if I wasn't tech-savvy I'd assume it's just worse quality.

* The loading times when you seek to part that's not loaded yet are 10x longer

* I missed comments

The recommendation algorithm is weaker too, I can't tell to what extent this is due to YouTube having simply more data and to what extent it's weaker engineering.