MurphyA/hacker-news huggingface dataset:
by CobrastanJorji | 2025-10-26 05:27:13+00:00
Man, if I'm trying to decide which company to work for, and I see a blog post from its CTO crowing about regularly checking in code on Saturdays and Sundays, I'd start backing slowly away. And when I got to the bit that said "AI has made me three times as productive," I'd turn and run.

Your job at the top is, more than anything else, pushing down a healthy culture. That includes things like setting an example of not working through the weekend. If you're doing it, your reports and their reports will feel the need to do it, too. Don't. And if you do anyway, certainly don't brag about it!

And then listen to this insanity:

> Our team had considered potentially having the customer build their own integration on top of our API in order to get around this requirement, and scoping it out properly would have required many meetings across product, legal, and engineering. I built and shipped a working version in a day. It wasn’t perfect, but it solved their immediate problem and preserved goodwill with the customer.

That's something you're willing to share out loud? Your company's technical process (which you're fully in control of, Mr. CTO) is so cumbersome that it seriously hinders your ability to execute, but, being above that process, you personally choose to circumvent it, foregoing required legal or engineering reviews, and shipping it immediately to your critically important customer? If one of the engineers who worked under you did that, you'd probably have fired him.
by peterdemin | 2025-10-26 05:28:30+00:00
Spot on, even though I'm not from the US originally. I changed three countries, chasing the job pool availability. Although I can't say I'm looking down on people who figured out how to live fulfilling lives without a job. I find this extremely fortunate. As for me, when I'm not building software products at work, I do it at home in my spare time. And one thing I noticed is that the job is a great amplifier of my efforts. I don't think I can have the same success or even impact through my pet projects. So, in a way, not being proactive and fully engaged at work is wasting time. Not being lazy per se, even though that might be related.
by jitl | 2025-10-26 05:29:39+00:00
I don't know exactly but none of the diagram building languages I've used have been a great experience. I guess they just feel "rough in the hands" somehow to me. There's always some point of frustration I get to with the layout systems. They're essential for quickly visualizing graph structures and such but even smaller hand authored ones end up feeling unwieldy too. Can't put it in to works but it feels like there could be a major improvement beyond what even D2 studio offers, when it comes to the language and workflow around it.

I feel similarly about charting libraries.
by peterdemin | 2025-10-26 05:29:52+00:00
I've seen this point a lot on the web, how people compare AI to junior devs, and bring up the idea of replacement. This is, of course, a pipe dream. In fact, I work with a few people just from the college, and I see how AI helps them get up to speed faster. Even senior engineers benefit a lot from AI coding. Their value to the company is not in how fast they can churn out new code, but in the deep domain understanding they build, and in the agency to drive the project they are responsible for. As for the "destroyed steps behind me", I wouldn't take the same steps if I were starting my career now. My point was to actively seek and learn what's needed by the industry.
by renewiltord | 2025-10-26 05:30:11+00:00
There's nothing wrong with it but most people striving to do this would make each bit clickable to detail or something so that you can read at your level. I imagine this was a constraint of the site framework or the author's writing style.

But hey what the heck, it's fine. An LLM can rewrite it to whatever level of knowledge you like so the deepest level is optimal.
by radu_floricica | 2025-10-26 05:31:34+00:00
Yeah, happened to me too. Brief but intense. Strangely, only the first time.

When I got out I told the technician (I though I had a panic attack, and was puzzled that it happened at the end of the session), and she said "oh, it was probably the contrast, happens rarely". Apparently rarely enough that they don't warn the patients. To be fair it was harmless, and they'd have many more cases of nocebo nausea than actual nausea.
by nebula8804 | 2025-10-26 05:31:38+00:00
Well we saw what happened during the GFC. People got so desperate that they took a chance and voted in a black guy and more importantly a fresh face. It seems quaint now but it was a super radical move back then especially for places like the midwest. Came from a place of desperation. At the same time it also activated some of the worst among us.

So we will probably see more of the same. There will be a hard swing to the left + more radicalism in response. This is the best we could hope for I think.
by pinkmuffinere | 2025-10-26 05:34:10+00:00
My account is a couple years old, and I’ll agree with what fekxpurrrt said — you expressed doubt without evidence, people challenged your doubt, and you’ve never really satisfied their objections. The experts do know more than you. A brief Wikipedia investigation corroborates what the experts have said. They seem trustworthy, it’s unclear why your doubt should be taken seriously.

Everyone is wrong sometimes. When you realize you’re wrong, do you update your beliefs to be correct, or do you double down?
by westurner | 2025-10-26 05:34:41+00:00
From https://man7.org/linux/man-pages/man5/yum.conf.5.html :

[ $ man yum.conf | grep -C 5 -i gpg ] gpgkey list of strings URLs of a GPG key files that can be used for signing metadata and packages of this repository, empty by default. If a file can not be verified using the already imported keys, import of keys from this option is attempted and the keys are then used for verification. gpgkey_dns_verification Should the dnf attempt to automatically verify GPG verification keys using the DNS system. This option requires the unbound python module (python3-unbound) to be installed on the client system. This system has two main features. The first one is to check if any of the already installed keys have been revoked. Automatic removal of the key is not yet available, so it is up to the user, to remove revoked keys from the system. The second feature is automatic verification of new keys when a repository is added to the system. In interactive mode, the result is written to the output as a suggestion to the user. In non-interactive mode (i.e. when -y is used), this system will automatically accept keys that are available in the DNS and are correctly signed using DNSSEC. It will also accept keys that do not exist in the DNS system and their NON-existence is cryptographically proven using DNSSEC. This is mainly to preserve backward compatibility. Default is False.

RPM packages' GPG key(s) can be specified in a .repo file, which can be updated by an RPM package from a repo with or without mandatory signing configured. Typically, all packages in a repo are built with CI build containers that all share the same signing key.

How to bootstrap the [Sigstore [TLS] pubkey, HKP (TLS) pubkey], to verify the [Sigstore hash, GPG .asc signature] of the manifest containing the [Sigstore, SHA-X] hash for each package and/or package file?
by Raven603 | 2025-10-26 05:35:28+00:00
Ever waited 10+ minutes for an agent to finish deep researching, only to get results different from what you intended? … we built this for you.

EDR is transparent, steerable and modular — you can intervene mid-run, correct course, and stay aligned in real time.

Code: https://github.com/SalesforceAIResearch/enterprise-deep-rese...

Paper: https://arxiv.org/pdf/2510.17797
by voidhorse | 2025-10-26 05:37:23+00:00
In retrospect, the Sokal hoax to me is both incredibly significant in its role as a signal flare of what was to come, and in its total old-fashioned, epistemic failure.

It was a signal flare because it is a perfect example of the kind of uninformed criticism the internet would later make rampant; the hoax tried to deflate and entire body of practice, knowledge, and language that it simply didn't understand. It was a category error. It presented a false equivalence between social facts and physical facts. The constructivists of the time are largely talking about social not physical issues. Yes, epistemology touches on the social, so that was apart of the game, as was examining the social components of science, no one, however had seriously argued that the epistemic claims of science, once their fundamental premises were accepted are contestable—Sokal, in bad faith, tried to discredit claims of an entirely different nature by effectively presenting a straw man.

Second, it is a epistemic failure because recent events, if anything, have largely proven that constructivism wins. Today, people inhabit multiple realities. Yes, the scientific method is the one that is best with respect to finding truth, but it turns out people don't really care. The constructivist insight that, ultimately, autonomous individuals decide what they want to believe has far greater force in our world today. Science and logic, unfortunately, have no binding power. Fools can and will in fact deny reality as it slaps them in the face. To really understand the present, a constructivist bent is actually more fruitful for establishing a basis for an analysis with explanatory power.

In short it's just a classic example of hubris and scholars taking past each other.
by kittikitti | 2025-10-26 05:38:36+00:00
The amount of commentators that downright oppose and ridicule a CTO coding is why enshittification is so pervasive. If a CTO understands the codebase to the point where they can contribute to it, I presume that's a good thing. I sense so much fear of actual engineering and technology in the comments and it really highlights why startups are failing to innovate and create compelling products.
by exmadscientist | 2025-10-26 05:39:16+00:00
They're fine for one guy using them on the bench but they are a nightmare for mass production. The 50-mil pitch is annoying to make work with a bed-of-nails fixture, the clips are fundamentally incompatible with production lines, either robot or human, the parts are expensive, and the cycle life is not there.

I have had one too many arguments with firmware people who think these things are sufficient for production that I am just done with them by now. There are other ways to do it.
by hakfoo | 2025-10-26 05:39:27+00:00
It's interesting that we talk about the false-positive-- "we're declaring a 45-year-old a child for reasons", but it would be interesting to see the false-negative rate.

We're well into the second generation of kids raised to see a signup screen and say "Yes, I'm over 13/18/21/whatever" to get to content, mixed with a huge cohort of "the entire family is using one computer and shared account" users that will garble any sort of profile-based analysis, any estimates they're doing are shooting a blunderbuss in the dark. I can imagine a school-child urban legend mindset of "log into a new account and browse irs.gov for a few hours to make sure it thinks you are an adult" developing.

This is so clearly an industry in a "if we try to do something ourselves, we can hopefully cut off pressure towards something legally binding" panic (see video game ratings), but if they're not actually blocking effectively, you'd think that would be very interesting news to the people arguing for blocking.

If the rest of the world watches the UK step into shit and still say "we still want to get ourselves some of that", I'd much rather it be done by a government than a bunch of private companies. A government service has no commercial motive to deliver anything but the most minimal "this user has verified age 18+" responses, and has a legal responsibility to service all comers.

Leaving it to the private sector creates an splash damage scenario: spinning up or licensing a compliance service is couch-cushion change for the Facebooks and Googles of the world, but breaks a million independent small players. We've already seen this in the UK with forums closing rather than trying to comply. And you know the firms that offer ID verification aren't going to let all that juicy PII go to waste and delete it.
by logTom | 2025-10-26 05:39:35+00:00
Thank you for trying it out.

Shrine blessings are getting expensive very fast.

If you open more doors you are progressing faster and the enemies get harder, but also drop better loot.

But I see where you are coming from. I was thinking about adding Skills to the game to give it more depth, but that might not solve the missing agency issue.

Edit: Maybe a timer like: You only have 60 minutes left in the dungeon would help. So it forces you to skip some events to get deeper for better loot fast. I guess doing events like opening a chest should take more time than skipping it.
by kwillets | 2025-10-26 05:41:40+00:00
I wrote part of that -- it needed a tight summary that covers all the main components, so I packed as much as I could into a sentence or two. I believe the second paragraph is mostly from me, but it was some time ago, back when Hanok revival was fairly new, and a lot of books were coming out on the subject.

A few years after that one of the Korean dailies wrote an English article and copied my wording. :(
by tombert | 2025-10-26 05:41:49+00:00
To be clear, this wasn't some custom hack job computer or anything. This was a relatively cheap HP laptop that was just using OEM Windows 10. The hardware is about as vanilla as you get for a laptop.

Linux has the same or even greater hardware diversity, and I have never had a Linux update so thoroughly break my computer as Windows Update did for my mom's computer recently. I run NixOS unstable, I run a system update daily, and while I have had packages break, it still boots after the update. I can say similar things about Arch as well, and I think Ubuntu LTS would be even more reliable.

Windows Update is worse though, because since Windows doesn't have snapshotting in the same way that Linux can have with btrfs or ZFS or bcachefs, an update can fully just break the computer. If you install ZFS on root in Ubuntu it will take a snapshot after each update or even every `sudo apt install`, so even if I did have something break because of an update I'm generally able to get the computer into a usable state by rebooting an choosing something earlier.

But even worse, Windows updates aren't really "opt-in" like they are with Mac and Linux. Windows Updates will happen accidentally or just in the background, as was the case with my mom a few weeks ago. As far as she is aware, she didn't choose the update, it just happened and then her computer was bricked.

Importantly, Windows Update really only has one job, which is to not brick the computer it's updating, or at the very least provide an easy way to roll back if they do. Updates are important, we want security vulnerabilities patched ASAP, but if users are afraid to update out of fear of their computer being bricked and actively do hacks to disable them, then they have utterly failed at their job.

I stand by what I said. Whomever works on it should be ashamed of themselves, and they should stop being software engineers because they are very bad at it. I have never used a piece of software that has more consistently caused headaches than Windows Update; I'm sure I've used software that was more crappily written, but a system update tool IS NOT ALLOWED TO BE SHITTY.
by kamranjon | 2025-10-26 05:48:31+00:00
This is interesting! I once trained a t5 model by removing newlines from Wikipedia text and it worked surprisingly well / at the time the context length was the biggest issue.

Another, not so easy to solve issue was conversational dialogue type data, which wasn’t super well represented in the training data.

I’ve always wanted to come back to working on the problem again, because I think it’s very interesting and we will have a bunch of unstructured text as a result of STT models like whisper that do a great job of transcribing/translating but generally don’t format anything.
by stevage | 2025-10-26 05:48:31+00:00
> This makes it easier for everyday athletes to walk or run more often, for longer amounts of time, while having more fun — adding movement to their lives, extending their walking commute, or helping them to enjoy the run for another mile or two.

The people I know who run all do it for the exercise, not because they like the running. Why would you want to extend it?
by ivoflipse | 2025-10-26 05:48:32+00:00
I was going to comment the same thing, rather than push off harder, I'd hope it help brace for impact and relieve some of the weaker muscles.

Yes, I should perhaps be doing strength training, but I have limited hours to exercise and I'd prefer to spend them running rather than training so that eventually I could be running.

Another thing that happens is that your technique gets worse during longer runs, making you more prone to injuries. Maybe a device like this could either support you so you can run longer runs or compensate to make sure you don't hurt yourself.

So if this device helps with reducing running based injuries, I'm all for it

I have an electric cargo bike that I put in one of the lowest settings, if I cycle at the top speed it doesn't help much if at all. But accelerating from a dead stop is nice. This could be similar
by tjwebbnorfolk | 2025-10-26 05:49:14+00:00
If the original authors stop maintaining an OSS project, and you are one of only a very few users, you have two options: do the work yourself, or watch it die. If you are unwilling to do the work yourself, then that's a signal it isn't important enough for anyone else to do the work either.

Why should a wiki be any different?
by sjrd | 2025-10-26 05:51:45+00:00
In Scala you can do it, because you can define your own operators (which are nothing but method names), and you can extend types you don't control. You are a bit constrained by the operator precedence rules, but it's usually good enough.

It's bad practice to make DSLs left and right, obviously. But when one is warranted, you can.

For example here you could have

"x" --> "y" | "hello world"
by Vexs | 2025-10-26 05:53:33+00:00
> restart required a hardware security module (HSM) smart card.

Out of curiosity, does anyone know why? My guess would be the PW DB would be encrypted with some token generated from this card.

I've had lots of "I have a secret and the server needs it" type problems but I've never been very happy with my solutions- smart cards seem like potentially an elegant solution.
by seanhunter | 2025-10-26 05:54:39+00:00
> it's not really clear (despite definition) what a community or organization is

To make the parent’s point more obvious for people who are not used to a large enterprise context, concretely for example, at my workplace (which I would consider typical of a large organization) there are:

1) Regular employees and contractors who are employed by the main employer.

2) Employees who work for different legal entities from the main employer, have different sso domains handling their auth (and email domains for systems that do sharing protections via email) but are “really” part of the same company for security purposes. Think say people who came in as part of a merger but for various reasons their legal entity and brand needs to stick around so they have different auth, email etc.

3) People who work for actually different companies, have the same sso domains handling handling their auth and the same email domain as people in bucket 1 because we’ve given them logins and are working on sensitive security stuff (think: vendors and vendor contractors in the security or legal space)

4) People who work for actually different companies, have the same sso domains etc as bucket 1 and are not working on sensitive security stuff (think: vendors and vendor contractors everywhere else)

…and people sometimes move between groups 3 and 4 on a project by project basis. Notice all of these are “bound by common policies set by the organization” so all of them are in the “organization” for TLP at least by the second part of the definition, but 2,3 and 4 but don’t share a common affiliation by formal membership so are not part of the “organization” for the first half of the TLP definition.

So if I get a TLP:Amber document, who am I allowed to share it to? I should be sharing it to some of 1, 2 and 3 on a need to know basis. Most automated permission systems will allow me only to share it easily only with people in 1 and 3 or 4, and since people can move between 3 & 4 based on assignment it’s hard to know (and pretty much impossible to tell automatically) if some degree of access violation has occurred. People in 2 are generally sool if we’re trying to share things and I’m not prepared to handwave through the scary-looking “are you sure you want to share this with person x who isn’t from our org?” Boxes.

Basically explicit enumeration is just going to be way better any time you want to be doing this type of thing in the real world.
by dilyevsky | 2025-10-26 05:56:23+00:00
> That's something you're willing to share out loud? Your company's technical process (which you're fully in control of, Mr. CTO) is so cumbersome that it seriously hinders your ability to execute

This is exactly what someone who can't be easily unseated should be doing at a company - demonstrate to middle management that the process they've constructed is whack and take away excuses for not delivering. CEO or someone else on the founding team should be doing that to sales, marketing, etc as well
by mananaysiempre | 2025-10-26 05:56:51+00:00
> [Y]ou are getting over 100bn CPM right now. The reason it doesn't matter is that this is neutrinos and they're not interacting with you.

I mean, if you actually had a neutrino detector that produced 10e10 CPM over your cross-section, then it would matter for you, because particle physicists would kidnap you to learn the secret :)
by mananaysiempre | 2025-10-26 05:58:57+00:00
Yeah, I find the 16-pin ones a little beyond my skill. They also feel silly—why can’t I have one with just six pins for D±, VBUS, GND, and CC1/2? I guess I could have a factory make a bunch of modules like that for me, but it definitely feels like a thing that should already exist.

(There are passive A-to-C adapters, so I see no reason why I couldn’t short pin pairs like that.)
by radu_floricica | 2025-10-26 05:59:54+00:00
It's... a bad article?

It takes as given that the tech is here, and it's economically feasible, but it's not giving any arguments. Just blames the people.

It's also not exactly defining the problem space. Is it talking about air-air AC with heating? Those are common and very cheap. Is it talking about large HVAC systems that include hot water? Those are indeed a hellof a lot more expensive, but also a hellof a lot more complex. And no matter what the author is saying, technology isn't to the point of giving us hot water from heat pumps. The math just isn't mathing - to take cold water and heat it up to "hot" by cooling off freezing air, you'd simply have to cool huge amounts of air. Yeah, probably, if you put a room-sized HVAC system and spend a ton on electricity - but that's where it stops being competitive.

Is it talking about geothermal heat exchangers? Because those are indeed a lot more efficient - but also more expensive for obvious reasons. You need to drill.
by matesz | 2025-10-26 06:00:05+00:00
I highly recommend checking out makepad [1] - they have +100k of rust code and the compile time is around 10-15 seconds on commodity hardware. However they are obsessed about performance. They reason for such speedy compile times, like you say, is that makepad has almost no external dependencies.

[1] https://github.com/makepad/makepad/