MurphyA/hacker-news huggingface dataset:
by pron | 2025-09-23 16:16:30+00:00
What about every Java/JS/Python/Rust/Go programmer who ever created a CVE? Out-of-bounds access is, indeed, a very common cause of dangerous vulnerabilities, but Zig eliminates it to the same extent as Rust. UAF is much lower on the list, to the point that non-memory-safety-related causes easily dominate it.[1]

The question is, then, what price in language complexity are you willing to pay to completely avoid the 8th most dangerous cause of vulnerabilities as opposed to reducing them but not eliminating them? Zig makes it easier to find UAF than in C, and not only that, but the danger of UAF exploitability can be reduced even further in the general case rather easily (https://www.cl.cam.ac.uk/~tmj32/papers/docs/ainsworth20-sp.p...). So it is certainly true that memory unsafety is a cause of dangerous vulnerabilities, but it is the spatial unsafety that's the dominant factor here, and Zig eliminates that. So if you believe (rightly, IMO) that a language should make sure to reduce common causes of dangerous vulnerabilities (as long as the price is right), then Zig does exactly that!

I don't think it's unreasonable to find the cost of Rust justified to eliminate the 8th most dangerous cause of vulnerabilities, but I think it's also not unreasonable to prefer not to pay it.

[1]: https://cwe.mitre.org/top25/archive/2024/2024_cwe_top25.html
by 1718627440 | 2025-09-23 16:16:31+00:00
Yes, Hello World is 10MB in Rust even when optimizing for size. Hello World in C is 16kB, even after static linking everything including GNU libc, it's only 810kB. I really wonder what that large program does.

This program is still dynamically linked:

linux-vdso.so.1 (0x00007ffe6d8fd000) libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007fb0a62c6000) libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fb0a60f2000) /lib64/ld-linux-x86-64.so.2 (0x00007fb0a636d000) libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007fb0a60d0000) libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007fb0a60ca000)

Not sure, why it needs all these dependencies, this is C Hello World:

linux-vdso.so.1 (0x00007fffea181000) libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007faebae6a000) /lib64/ld-linux-x86-64.so.2 (0x00007faebb087000)

And I think the C binary is already bloated.

To stress it again: The Rust Hello World program is 2.5-times larger then the whole Git executable with functionality of 20 years!
by privatelypublic | 2025-09-23 16:16:32+00:00
No, there was a vending machine smart lock that if you hitachi'd it right it'd unlock.

And, I phrased it wrong: most people expect to be able to walk into lowes and clone a key. And while it seems assa has been on a buying spree since I last looked at them, I do not associate them with anything you'd be able to find at big box store. When I think assa abloy I think "you better have the key card or you're SOL."
by ben-schaaf | 2025-09-23 16:16:55+00:00
That's cool, but the 5850u is from 2021, around the time Microsoft started pushing hard for modern standby. Other laptops of that generation also have a S3 bios setting: https://www.reddit.com/r/GamingLaptops/comments/yvpae5/to_al...

The oldest AMD chip framework sells is two generations, and to me knowledge don't have S3 support.
by floatrock | 2025-09-23 16:16:59+00:00
To make this more than "this is just the xkcd population map joke" https://xkcd.com/1138/ , better title could be "Distribution Search of Zip Codes in the United States".

Point here is to type 0, 1, 2, etc. in the search box to see how zip codes with that prefix are geographically distributed.

I read an interesting story where this distribution comes from the manual mail sorting days... before computer sorting, postal workers could read the first digit and drop it into one of 10 boxes based on what part of the country it was going to, and so on for each additional digit.

Other countries have said "ah f it, it's all computers these days anyways, lets just make all addresses arbitrary random codes with no correlation between code distance and geographic distance. A database lookup at computer speed is a database lookup no matter what."
by constantcrying | 2025-09-23 16:17:33+00:00
The German car industry will not survive and Germany, together with the EU will go through a major economic crisis.

That the Netherlands adds 500 jobs making EUV machines is a tiny consolation for mass unemployment in Germany, Italy, the Czech Republic, Hungary and France with millions of jobs lost.

Again, free trade is an insane idea when the proposition of one side is an existential threat to the other side.
by fpsvogel | 2025-09-23 16:17:52+00:00
Adsolutely. I agree that our lives aren't determined by family background, and we can draw on many other resources, both within ourselves and from other people besides family.

If I overstated my point, it's only because I was pushing back against the idea that education, employment, and a traditional family are equally attainable by all, and if someone has failed in any of these areas, it's because they lack virtue compared to other people (many of whom had more advantageous starting points in life, but supposedly that doesn't matter).

Or in simpler terms, "poor people are poor because they're bad and they deserve it". It's a sentiment that's been very useful for the ultra-wealthy class, and detrimental to everyone else, not just the poor.
by astroflection | 2025-09-23 16:18:58+00:00
> Is there a reason why you wouldn’t pay ahead of time? I just understand why you couldn’t buy a few dozen/hundred/thousand dollars worth of credits, and wait until it runs low.

Maybe you want to buy the service that is priced the lowest at the moment. Example: providers of inference services could drop their prices if they are underutilized. You could then have your system check for the best price and purchase only what is needed at the best price.
by dsr_ | 2025-09-23 16:19:09+00:00
I know it feels like everyone is in tech, but, in fact, there's no evidence for that here:

After I graduated, I had a brief stint as a Nursing Home Administrator until David Jr. was born, then stayed home and hatched a couple more pups over the next few years. In 2000, I formally joined the family real estate business and worked there until I was diagnosed… with ALS (I kept working through my long battle with cancer 12 years ago) … Yikes!! Cancer…THEN ALS. Ugh, Honestly, you can’t make this stuff up! I am very proud of the book I wrote about my journey through cancer. Check it out, it’s called “F Off Cancer” by Linda Brossi Murphy.
by gosub100 | 2025-09-23 16:19:13+00:00
How do you serve a warrant in a house with 12 unrelated people? How much easier is it to commit rape, petty theft? How much more communicable disease such has Hep-B is spread with N people sharing a bathroom? How much more likely is a house fire? How much more likely is domestic violence due to conflicts over the kitchen or utilities?

I think these laws are built with at least some creedence.
by RAMJAC | 2025-09-23 16:19:24+00:00
https://github.com/RAMJAC-digital/edk2-rk3588

This may be slightly out of date, but these patches allow HDMI out on uefi for the Max, and can probably be easily modified this for the Ultra. If there is interest I can look into this later on tonight and test on an Ultra. The HDMI device tree isn't too bad, you can kinda guess the address offsets, but you will need to dive into the 3588 refernece manual. There are some design flaws in these boards around using SPI for the wifi and bluetooth and haven't had these work yet. Vulkan hardware support is alright, and can run Chromium and Niri without issues. Ghostty doesn't as it is OpenGL only.

I use these baords for aarch64 linux builds and a basic desktop environment, and it's been pretty rock solid with EDK2. Take a gander ya'll.
by pseudosavant | 2025-09-23 16:19:27+00:00
I like the autocomplete too. Probably the best pattern, but it does usually do that by leveraging paid Google Maps APIs I believe.

I was frustrated that this seemingly open data wasn't openly available. Anything that asks for city+state+zipcode can ask for zip code first, auto populate the rest. For the edge cases where the city is wrong, the person can still type in the city like they would have needed to anyway.

It is worth noting that a package would never get delivered to the wrong place because the city wasn't correct but the ZIP code was. The USPS routes based on ZIP codes, not city/state.
by ZeroGravitas | 2025-09-23 16:19:43+00:00
Amazon Prime has this feature and calls it X Ray:

https://www.aboutamazon.com/news/entertainment/what-is-x-ray...

It shows the profile photo and character and actor name of people in the scene, which is a nicer UI.

I think it shows soundtrack songs too.

Presumably this is from Amazon's IMDB so does the new age of LLMs mean you can generate a similar DB with no copyright worries?
by tencentshill | 2025-09-23 16:19:44+00:00
The cure is a simple pill, provided by a company with a long history of corruption, prosecuted for "promotion of drugs for unapproved uses, failure to report safety data and kickbacks to physicians in the United States".

A company that operates like that sees opportunity in this US administration.

https://en.wikipedia.org/wiki/GSK_plc
by advisedwang | 2025-09-23 16:19:52+00:00
The author did not even talk about why these laws are in place, so I think it's worth mentioning that these laws are there to prevent slums. I'm not saying there's no place for them, but "busybodies and do-gooders who prevent people from using their own property" is extremely dismissive of efforts to solve a huge problem that existed in the 19th and 20th centuries. In fact, it sounds like the author would argue that being a slumlord is the right of property owners.
by parineum | 2025-09-23 16:20:13+00:00
> Giving money to a foundation (which they may or might not own) for greenwashing

What evidence would be required for you to believe that a donation to an environmental cause wasn't greenwashing?

Your list of exceptions seems fairly obviously aimed at making the task impossible because it's all based on interpretation of motives. You're essentially discounting all actions that have positive societal effects as long as doing so is motivated by money which is counter to the point I was making.

Giving money away to charity, by the meme interpretation of fiduciary duty, would be illegal. Instead, companies do it all the time because it makes them look better which might improve their business outlook in the future. That satisfies fiduciary dury despite it being a red line in the accounting books.

Wouldn't you like to live in a world where people care enough about doing good things that they'd prefer to patronize companies that do good things? That seems like an incredibly positive effect, regardless of the business' motives.
by lokar | 2025-09-23 16:20:39+00:00
To me, this makes little sense, but I support the goal.

The goal should be to to give the visa to the company/worker pair that will most benefit the US.

One obvious positive signal is compensation. But we also know this will tend to shut out smaller firms since options won’t count.

I would look at allocating some fraction of the visas to small firms that directly hire the candidate (no consultants / body shops) with a pretty low limit per firm.

Also, from the POV of a highly qualified candidate and a company that really needs them, a lottery is a terrible solution. The body shops have no issue spamming the process, they don’t really care about and individual application.

We need a system that allocates better, and removes or reduces the randomness.
by potato3732842 | 2025-09-23 16:20:41+00:00
>what care was available

This phrase is doing so much heavy lifting as to actively mislead people (i.e. lie with plausible deniability).

Take a subsistence farming community for example. If there aren't enough calories in the stockpile to feed everyone over the winter deficit they're gonna realize this in the fall and the less productive people will get their food rationed first and hardest and odds are some of the old (so like 50s) or otherwise infirm people who are in this huge calorie deficit are gonna keel over from a minor cold or something during the winter. The calorie math is what is and no amount of "well they cared for the elderly when times were good" misdirection is going to change the raw math of how frequently times were bad and the number of elderly, infirm, etc, that a society routinely subject to those sorts of "purge lite" events is going to be carrying at any one time.
by Daishiman | 2025-09-23 16:21:07+00:00
> Can you prescribe some specific test to tell objective design aesthetics from the "groupthink" ones? If not, then what are you saying, other than "I know when I see it, but not everyone does"?

When you develop a good eye for clothing your sense of taste will be detached from fashion trends. Whether you like oversize pieces or not, you can tell whether the fit is good because fit is a matter of crafstmanship. You can tell from the color scheme what was the artistic attempt and whether the attempt was reached. You can tell the quality of the fabrics. You can tell the historical references a piece is inspired by and whether those references are coherent.

You develop a taste for cocktails and wines and you can try a cocktail that you don't personally prefer, say a Negroni. But you can tell whether the acidity and sweetness levels go well with the ingredients of choice, whether the aromatics are high quality, whether the glass accompanies the drink and if the drink was served at the correct temperature.

If you know about cuisine and someone executes a dish based on a specific style, you can immediately tell of the chef knew about the underlying theory behind those styles and how well they were executed. And they decided to purposefully make a break from a style, you can tell if that made for an impactful quality result or if they should have stuck to the original.
by alistairSH | 2025-09-23 16:21:16+00:00
I agree - I only meant reasonable in relation to typical home sizes.

If there's a grand old 6 bedroom house in a downtown area, it would probably make sense to allow 6 unrelated tenants. My only concern there would be homeowners subdividing rooms ad infinitum to get more tenants. But, there are probably solutions to that that don't involve arbitrary caps on household size.
by ProllyInfamous | 2025-09-23 16:21:26+00:00
Exact opposite problem at my former rental: Two different properties with different ZIP codes... but they had the same address on the same road, just a mile apart (different jurisdictions).

I lived in a house; the other location was a nail spa. Strangers sometimes visited thinking they were at the right address (they weren't) to get their nails'did (they didn't).
by mcpar-land | 2025-09-23 16:22:12+00:00
> OpenAI created AI tech decades ahead of estimates. And they just signed a 100B deal with Nvidea.

Definitely don't look into the financial details of that deal with Nvidia!

> Every engineer I see in coffee shops uses AI. All my coworkers use AI. I use AI.

Okay

> AI nearly solved protein folding.

FAH predates OpenAI by fifteen years and ChatGPT 3 by twenty. Do not fall for Altman's conflation of LLMs with every other form of machine learning he and OpenAI had nothing to do with!
by dylan604 | 2025-09-23 16:22:20+00:00
Being in prison is the punishment. It is not restitution, but as part of the punishment restitution could be imposed. It's hard to pay that restitution while incarcerated though. Some people advocate that just because one has been released from incarceration that they should still not be allowed to vote until any moneys owed have been paid. That could be fines from the court as well as restitution to victims.
by Hilift | 2025-09-23 16:22:23+00:00
How it works is the county or muni specifies the number. This is similar to allocating land for single family or multi tenant. You can of course bypass this and rent rooms or have a group house, but renters may not have the same legal protections.

No-one wants to live like MacArthur Park area in LA, that has 4x the density of Manhattan, NY, where every apartment has a shadow family that is evicted every year or two.
by ekidd | 2025-09-23 16:22:41+00:00
I mostly wind up using Arc a lot while using async streams. This tends to occur when emulating a Unix-pipeline-like architecture that also supports concurrency. Basically, "pipelines where we can process up to N items in parallel."

But in this case, the data hiding behind the Arc is almost never mutable. It's typically some shared, read-only information that needs to live until all the concurrent workers are done using it. So this is very easy to reason about: Stick a single chunk of read-only data behind the reference count, and let it get reclaimed when the final worker disappears.
by boburumurzokov | 2025-09-23 16:23:12+00:00
Thanks for explaining this! I just think of a new developer experience that wants to try out Verdent and pay after. I usually do not pay for a tool that I have not tried and see what it does. Showcasing content or demos is not enough. Take the example of Lovable, they offer 5 credits to send few prompts and if you want to continue, you need to pay.
by simianparrot | 2025-09-23 16:23:13+00:00
Sanctions are not war crimes by any definition.

I am fully aware of the US' history in the middle east, as well Europe's role and my own country within Europe. But that doesn't mean we should accept this kind of rhetoric from enemy states.

If you go down this rabbit hole of "historical rights", where does it end? The truth it it never ends. You go far enough back and we're all the assholes.

So all we can do is move forward and respond to threats like these the best we can.
by weinzierl | 2025-09-23 16:23:44+00:00
"It's true when you ride a skateboard with a helmet on."

Rust is not the helmet. It is not a safety net that only gives you a benefit in rare catastrophic events.

Rust is your lane assist. It relieves you from the burden of constant vigilance.

A C or C++ programmer that doesn't feel relief when writing Rust has never acquired the mindset that is required to produce safe, secure and reliable code.
by grayhatter | 2025-09-23 16:24:18+00:00
> To 95 percent of the people that eagerly inform me of their “autism” : you are belittling a debilitating condition that many people suffer from, and no, you are not autistic, you are inconsiderate and socially lazy.

> You may be inconsiderate and socially lazy because it’s difficult to not be, but you could put in the effort to not be if you wanted to.

You're describing masking, most autistic people learn to do this subconsciously as children because otherwise you'd be ostracized from your peer group. Because that means literal death in the pre-modern society, humans have a strong inate aversion to that.

This causes a lot of stress and often leads to a life time of anxiety and depression.

It's kinda disappointing to read someone advocating for this. I had been told my whole childhood life that I'm lazy. Once I became an adult and started treating my ADHD, I stopped being "lazy", I could finally do things that I wanted to do. It's wild how night and day it was. Now I'm the only person in my family who is always doing things, and I get to call everyone else lazy. But I don't, because I'm trying not to be an asshole.

You accuse and condemn people who don't conform to a rigid ruleset for interactions that don't make sense. But everyone else who rolled a 20 on the social lottery get a pass on treating people who don't like fuckwits? Make it make sense.

> Yes, some people have more emotional/social intelligence than others. That doesn’t make you autistic, it just means you are kinda socially stupid and too lazy to do anything about it. Join the club, me too.

Sorry you've been gaslit so completely. I hope eventually you figure out how to dig yourself out of that hole of ignorance. I suspect you've been called lazy because some things are hard for you. Hard things being hard doesn't make you lazy.

> In general, anyone that has to tell you they are autistic isn’t. Autism is a pathology.

Shallow, incorrect, and unhelpful. Many people have asthma, but run and win races. Their asthma might not be pathological, but to pretend like they don't have it, or shouldn't keep a rescue inhaler in case of emergency is kinda messed up.

People treating and taking care their health physical and mental, shouldn't have to perform their rock bottom for you, just for you to believe them. And it's fucked up that you're suggesting they should!
by bdn_ | 2025-09-23 16:24:59+00:00
ZIP codes are such interesting identifiers. Their intended use was for facilitating more efficient mail sorting, they were not for providing any sort of human-friendly location data. Yet we still end up using them in so many parts of our lives for identity verification, navigation, population statistics, ...

They remind me of Social Security numbers in a way, where an identifier created for one narrow use (internal Social Security use only) ended up becoming a de facto standard (national identification number) due to the absense of a suitable alternative.

If you'd like to go further down the ZIP code rabbit hole, a few interesting codes to research are `00501`, `48222`, and `12345`. :)
by brendoelfrendo | 2025-09-23 16:25:04+00:00
I'd have to do the math, but I doubt that makes sense given the amount of power these things are drawing. I've heard of DCs having on-site power generation, but it's usually in the form of diesel generators used for supplemental or emergency power. In one weird case, I heard about a DC that used on-site diesel as primary power and used the grid as backup.
by SoraNoTenshi | 2025-09-23 16:25:19+00:00
It also drives me insane when i dump the problems i have with Rust about this exact issue, that i usually have to restructure my code to satisfy the compilers needs, and they come at me with the "Skill Issue" club...

I honestly don't even know what to respond to that, but it's kind of weird to me to honestly think that you'd need essentially a "PhD" in order to use a tool...
by bluGill | 2025-09-23 16:25:41+00:00
Reference counting has always been a way to garbage collect. Those who like garbage collection have always looked down on it because it cannot handle circular references and is typically slower than the mark and sweep garbage collectors they prefer.

If you need a referecne counted garbage collector for more than a tiny minotiry of your code, then Rust was probably the wrong choice of language - use something that has a better (mark and sweep) garbage collectors. Rust is good for places where you can almost always find a single owner, and you can use reference counting for the rare exception.
by tom910 | 2025-09-23 16:25:45+00:00
As an russians who moved abroad I think sanctions positively affect Puttin so far. Because, he got a lot what he wanted but couldn't get without sanctions: - russian companies replaced majority of international companies. Many of IT companies growed 20-40% year by year - sanctions locked money inside of the country which help to build new everything - sanctions made boost of internal culture and patriotism. Which also increased popularity of government and reduced any alternative options.

And many more similar examples. Sanctions will hurt Russia in long term but not now. Because good sanctions requires to understand the country culture + execute only that hurt countries, which didn't do western countries.