MurphyA/hacker-news huggingface dataset:
by saagarjha | 2025-11-12 02:48:17+00:00
If they are unable to fix CVEs in a timely manner, then it is very reasonable for people to judge them (accurately!) as being unable to fix CVEs in a timely manner. Maybe some people might even decide to use other projects or chip in to help out! However, it is dishonest to hide reports and pretend like bugs are being fixed on time when they are not.
by tpmoney | 2025-11-12 02:48:34+00:00
According to https://xcancel.com/argvee/status/1986194861855478213#m, google is a customer of fflabs.eu (https://fflabs.eu) which is just such a "support contracts" arm. Certainly the fflabs.eu site claims at the bottom that Netflix, Google and Meta are all customers of theirs and the site also claims that their team is comprised of a number of ffmpeg contributors including the "lead maintainer" (https://fflabs.eu/about/).

Additionally, a search of the git commits shows a regular stream of commits from `google.com` addresses. So as near as I can tell, Google does regularly contribute code to the project, they are a customer of the project maintainer's commercial support company (and that fact is on the support company's website) and they submit high quality bug reports for vulnerabilities. What are we mad about again?
by robot-wrangler | 2025-11-12 02:48:46+00:00
I guess I don't see those as big downsides because I don't think people usually want binary data or quoted strings back from a CLI command, nor do they want column oriented output, nor "user friendly" tables.

Answering --help with JSON is a good example, how bad is it really if the response is JSON? Well, using less works fine still and you can still grep if you want simple substring search. Wanting a section is probably more common, so maybe you'd "grep" for a subcommand with `jq .subcommand` or an option with `jq .subcommand.option`, and maybe get yourself a fancier, JSON-friendly version of less that handles escaped quotes and newlines. Tables and tab-or-space delimited output overflow char limits, force the command-generator to figure out character wrapping, and so on. Now you need a library to generate CLI help properly, but if you're going to have a library why not just spit JSON and decouple completely from display details to let the consumer handle it.

Structured output by default just makes sense for practically everything except `cat`. And while your markdown files or csv files might have quoted strings, looking at the raw files isn't something people really want from shells or editors.. they want something "rendered" in one way or another, for example with syntax highlighting.

Basically in 2025 neither humans nor machines benefit much from unstructured raw output. Almost any CLI that does this needs to be paired with a parser (like https://github.com/kellyjonbrazil/jc) and/or a renderer (like https://github.com/charmbracelet/glow). If no such pairing is available then it pushes many people to separately reinvent parsers badly. JSON's not perfect but (non-minified) it's human-readable enough to address the basic issues here without jumping all the way towards binary or (shudder) HTML
by skydhash | 2025-11-12 02:49:28+00:00
> Got a link to what you meant? This is pretty hard to search for.

http://acme.cat-v.org/

http://www.youtube.com/watch?v=dP1xVpMPn8M

> *I'd challenge people that are making cool stuff to show it, and then ship it.

Emacs has the following builtin and more

- Org mode (with babel): Note taking and outliner, authoring, notebooks, agenda, task management, timetracking,...

- Eshell: A shell in lisp, similar to fish, but all the editor commands are available like cli tools.

- comint: All things REPL (sql client, python,...)

- shell-command and shell-mode: The first is for ad-hoc commands, the second is derived from comint and give you the shell in an REPL environment (no TUI).

- term: terminal emulator, when you really want a tui. But the support for escape sequences is limited, so you may want something like `eat` or `vterm`.

- compile: all things build tools. If you have something that report errors and where those errors are located in files, then you can tie it to compile and have fast navigation to those locations.

- flymake: Watch mode for the above. It lets you analyze the current file

- ispell and flyspell: Spell checking

- dired: file management

- grep: Use the output of $grep_like_tool for navigatoin

- gnus and rmail: Everything mail and newsgroup.

- proced: Like top

- docview: View pdf and ps files, although you can probably hack it to display more types.

- tramp: Edit files from anywhere...

And many more from utilities (calc, calendar) and games to low level functions (IPC, network,...) and full blown applications (debugger, MPD client). And a lot of stuff to write text and code thhings. All lisp code, with nice documentation. That's just for the built-in stuff.

If not for the state of the Web, you could probably just went straight from init to Emacs.
by beedeebeedee | 2025-11-12 02:50:09+00:00
Nietzsche is brilliant and the best thing he did was to inspire other people to their own thoughts. That is what was needed then and needed now, and at all times. The article didn't share much insight but glad to see him talked about, if only because it gives us permission to talk about deep things. Everybody should embrace their role as philosopher, take it seriously, and develop themselves- and through that, prompt others to do so as well.
by lacy_tinpot | 2025-11-12 02:50:15+00:00
"Note: the Purdue/Sackler campaign surrounding opiods is already well-known, but AFAICT, it has no relationship with vaccines."

Pharmaceutical companies betraying the trust of people has nothing to do with the people not trusting the pharmaceutical companies?

You think the opioid campaign is the only real wrongdoing by pharmaceutical companies??
by nine_k | 2025-11-12 02:50:49+00:00
But it's not the technologies that are a problem most of the time. It's that:

- DoD / DoW is a chaotic project owner, trying to squeeze in colossal and sometimes self-contradictory lists of requirements, which it wants to change often.

- The US government is a poor customer, which runs out of money from time to time.

- The US Congress is a cantankerous financier, which haggles for the money every year, and demands the production to be distributed all over the place, to bring jobs to the constituencies which voted for the congresspersons.

- The companies that produce this stuff are few and mostly cannot be easily replaced, and they know it. This is because in the late 1980s the US government decided that it has won the Cold War and will not need the many competing manufacturers of military gear any more. That proved to be a bit shortsighted, but now it's a bit late.
by johnnyanmac | 2025-11-12 02:51:32+00:00
>The older and more jaded I get, the more I realize this is just not true. The most important metric is the meetings and visibility, for a larger org.

Well we can divide it in 4 ways:

- the "sales engineer" (not a literal sales enginer, but one who wants to sell themself) wants to maximize visibility.

- the startup engieer wants to pitch just enough, but mostly wants to ship

- the craftman engineer (or the researcher) wants to get things done "right"

- the blue collar engineer wants to check off tickets.

Your metrics of success will vary, and some engineers are more punished in some spaces than others.you'll need different skills to navigate depending on your environment
by anvuong | 2025-11-12 02:51:42+00:00
Encoding/decoding tokens doesn't automatically mean lossy. Images, at least in term of raw pixels can be a very inefficient form of storing information from information theoretic perspective.

Now, the difficulty is in achieving an encoding/decoding scheme that is both: information efficient AND semantically coherent in latent space. Seems like there is a tradeoff here.
by jryio | 2025-11-12 02:51:54+00:00
Yes and I'll add that Go routines can model task queues in Go code easily - then schedule and cancel those task reliably using context cancellation and channels. All while being executed concurrently (or in parallel).

Go is the sweet spot in expressive concurrency, a compile time type system, and a strong standard library with excellent tooling as you mentioned.

My hope is that, similar to Ruby in web development, Python's mind share in LLM coding will be siphoned to Go.
by bleh | 2025-11-12 02:52:00+00:00
The camera is what finally pried my SE out of my hands, replaced by a 17 Pro. Hate it. Heavy, no more Touch ID, forced into iOS 26. Even the button placement drives me bananas. The amount of times I accidentally take a screenshot because I’m trying to adjust volume...

Still have my SE. When I pick it up, it’s striking just how much better it feels.
by kccqzy | 2025-11-12 02:52:21+00:00
I was recently tasked by my manager to investigate whether we should replace LLVM-based JIT with something else in an internal work project. And I came across this nice opinionated document on GitHub about how one might implement SSA in a compiler. The author, pizlonator, is pretty famous and is behind the B3 JIT compiler in WebKit.
by brailsafe | 2025-11-12 02:53:22+00:00
Although deeply cynical, it's hard to wholly disagree, with the exception of specifying the current leadership. I think it's a problem composed of really bad system-level feedback loops at multiple levels of government and society that extend decades back and are only now becoming this evident recently. I do think that in terms of the tenure of the Liberals, they've had a rare amount of time to try and mitigate where we're at now, so I can't say I'm a proponent.

Additionally though, I'm quite happy to just forego the obvious material goals instead of emigrating, because despite the leadership, I'm a happy Canadian and love where I live, but hopefully I don't need to question that for a while. I'm not that interested in other countries atm.
by saagarjha | 2025-11-12 02:53:41+00:00
You will note the Linux kernel is not crying on Twitter when Google submits bugs to them. They did long ago, then realized that the bugs that Google reported often showed up exploited in the wild when they didn’t fix them, and mostly decided that the continuous fuzzing was actually a good thing. This is despite not all the bugs being fixed on time (there are always new OSSFuzz bugs in the queue for fixing).
by snerbles | 2025-11-12 02:54:14+00:00
At a prior job, employees wearing the logo started getting a lot of unexpected targeted attention outside the office. This ranged from lots of questions from randos about future products, to desperate passers-by handing off resumes on the sidewalk and begging for jobs, to even stalking and targeted theft. OPSEC culture wasn't something practiced there, and it was quite the rude awakening for some.

I do sticker the everloving snot out of my (removable) laptop cover with memes vaguely opposing or otherwise orthogonal to the local culture. No references to my job or place of work. Any interactions have generally been amusing to all parties involved.
by HeinzStuckeIt | 2025-11-12 02:55:14+00:00
> Some people like naziism. Those people were wrong.

In your individual opinion. In mine, too, and hopefully everyone else’s here. But the OP was clearly talking about what views are presented as “morally right” by normative social forces, and those clearly differ across time and place, often as political power waxes and wanes.
by xrd | 2025-11-12 02:55:33+00:00
Sadly, I can't disagree.

You are very right to call out that in a corporate environment getting things done is judged by the eye of the beholder. This, imho, makes this article even more naive because posthog is pretending they don't do that, and no organization is immune to it.

Ironically, GitHub started having lots of problems when they enbraced the holocracy, i.e. flat management. No one was in charge and no amount of "empty PRs" as I described above could mitigate the vacuum of leadership.

That this article made it past posthog's leadership means they might be having a leadership crisis.
by naravara | 2025-11-12 02:55:45+00:00
What do you mean? Nylon and polyester can be extremely durable, that’s always been their appeal. A knitted pocket is very likely to be a BIFL item even moreso than typical cotton or wool fabrics unless they’re specifically designed to be hard wearing, like canvas. That and the fact that it’s designed to fit any size and model of phone means it’s likely to be significantly less wasteful than putting your phone in a high end leather case that will age out when you upgrade.

Apple is clearly trying to experiment with more textile elements on its products, like with the Apple Watch band and FineWoven/tech woven cases to move away from using environmentally damaging leather and cheap feeling silicon. Stuff like this, sold in small lots, is how you test out whether people are into it before trying to work it into a product meant to sell to hundreds of millions of people.
by stinkbeetle | 2025-11-12 02:55:45+00:00
Yeah, even in those. There was like one low effort obvious troll, others are just self-expressing their dislike, pretty similar to many others here expressing their like of the stickers or the website with similar kind of quips.

I tend to just scroll on if I don't like something, rather than commenting about it. But I would be lying if I said I've never done it. It's a very human thing, on a forum like this that invites open discussion about things it is fine, and pretty obviously if the pictures have a bunch of political messages on them you would not be flabbergasted to see a some political comments. Maybe the comments are cringy, silly, wrong, not aligned with your beliefs, or unnecessary, but seeing hostility in disagreement or dislike is a pretty bad place to be.
by al_borland | 2025-11-12 02:56:42+00:00
I'm simply trying to understand what direction you'd like Apple to go when dealing with countries like China and their rules, since you think Cook is "cowardly" for how he is handling it.

I've made 3 attempts to get an answer and you keep talking around it instead of giving a straight answer. Now you've turned to ad hominem. One of us is arguing in bad faith, and I don't think it's me.
by anon291 | 2025-11-12 02:57:35+00:00
This is honestly incredibly wrong. My family is from Mumbai. Like literally the indigenous people of Mumbai and I grew up in CA and lived many years in the bay. The idea that anywhere in India is remotely comparable to the bay area (except for gated communities) is honestly the sort of deranged take that many online Indian nationals make. But for people who have actually been to both cities the difference is obvious.

There is nothing like Dharavi in the bay area. There is some visible poverty in the bay, but it's not at that scale at all . Not to mention the functioning animal control, flood control, etc.
by fragmede | 2025-11-12 02:58:38+00:00
The thing is, once you add a sticker, it becomes visually distinguishable. If you're the teacher handing out thirty of the same exact thing for a workshop, an incoming class, whatever. We give out a notebook/laptop/piece of paper to each student. The first instruction is to write your name at the top of the page/book or otherwise somehow make it distinguishable. Because the problem is inevitably someone will lose theirs and the teacher just has this notebook with no name on it.

For laptops at work, everyone has the same IT issued laptop. You go to anything where there's more than one of you, go for a coffee break that runs long, the class does a standing exercise, whatever, the point is the laptops get mixed up. Now there are 29 indistinguishably the same laptop, and one with a sticker on it.

Guess who's getting their laptop back first?
by tpmoney | 2025-11-12 02:58:41+00:00
> If they were a good company they would not only report bugs but also have had developers fix the bugs, but they are selfish and greedy, everyone knows that.

Google has a pretty regular stream of commits in the ffmpeg git history, and is proudly declared to be a customer of `fflabs.eu`, which appears to be the ffmpeg lead maintainer's private consulting company. Two of the maintainers on ffmpeg's "hire a dev" page[1] are also listed as employees of fflabs[2]. Honestly, Google seems like they're being a model for how corporations can give back to OSS better and benefit from that, but instead everyone is up in arms because they don't give patches in all of their bug reports.

[1]: https://ffmpeg.org/consulting.html [2]: https://fflabs.eu/about/
by boulos | 2025-11-12 02:58:47+00:00
That is precisely what this one was. The OP posted a follow-up comment at https://www.reddit.com/r/Terminator/comments/d65pbi/comment/...:

> I have an updated, I found out that T2 4K is an HDR movie that needs to be played with MadVR and enable HDR on the TV itself, now the colors are correct and I took a new screenshot: https://i.imgur.com/KTOn3Bw.jpg

> However when the TV is in HDR mode the 4K looks 100% correct, but when seeing the screenshot with HDR off then the screenshot looks still a bit wrong, here is a screenshot with correct colors: https://i.imgur.com/KTOn3Bw.jpg
by woodruffw | 2025-11-12 03:00:02+00:00
"At no cost to Google" seems difficult to substantiate, given that multiple sources indicate that Google is sponsoring FFmpeg both with engineering resources (for codec development) and cold hard cash (delivered to the FFmpeg core team via their consulting outfit[1]).

This is excellent, to be clear. But it's not compatible with the yarn currently being spun of a purely extractive relationship.

[1]: https://fflabs.eu
by shagie | 2025-11-12 03:00:07+00:00
My work computer is spotless. My personal conference (and work appropriate - security wouldn't find anything unprofessional or untoward on it) laptop is the one with some stickers that are technologies that I want to put on there. My personal computer at home is desktop... so no stickers there.

Even crossing company culture borders could be problematic if one is a consultant or sales engineer or professional services... This is one of those "in the wrong environment, something could scupper a deal - and you don't want that to be pinned on you."
by crazygringo | 2025-11-12 03:00:47+00:00
Like I said in another comment, other coworkers of mine have tried to express themselves through misogynistic or sexually suggestive stickers. I wouldn't suggest having a Diddy sticker or anything right now.

My only point is that the "if someone is offended, that's their problem" attitude is not so black and white. People often use it to justify being an a**hole too. Obviously, gay or trans stickers are not in the category of offensive things. There are things that are appropriate to express, and things that are not. So yeah, sometimes you need to compromise on your self-expression at work because not all of it is appropriate for everyone, you know?
by zzo38computer | 2025-11-12 03:00:59+00:00
Structured output would be helpful in many ways, but JSON is not a good format for this (neither is YAML nor XML nor HTML).

> JSON's not perfect but (non-minified) it's human-readable enough to address the basic issues here without jumping all the way towards binary or (shudder) HTML

It does not address most of the real issues. Programs that deal with pictures, sounds, non-Unicode text, structures of the kinds that JSON does not have, etc, will not do as well; and the input/output will involve converting escaping. (One format that I think is better is DER, although, it is binary format. I did write a program to convert JSON to DER, though.)
by jcalvinowens | 2025-11-12 03:01:11+00:00
> Someone recently said to me: “I’m tired of drinking in living rooms with overly smart people.”

So stop doing that.

"Tech people" are not even a plurality in the greater bay area, let alone a majority. If all you see is tech people everywhere you go, that's your fault. Maybe take some responsibility for your outcomes, and go more interesting places, instead of deciding a metropolis of millions of people is somehow beneath you...
by raw_anon_1111 | 2025-11-12 03:01:18+00:00
Absolutely not. No company wants to run around maintaining and updating software on multiple computers. Right now, even a small company can use an SSO provider and federate all of their SaaS apps with it and it automatically authorize a new employee.

And how do you propose to write software that works and syncs between Macs, Windows, ios and Android devices?
by xrd | 2025-11-12 03:02:12+00:00
Consider this: you could, given enough time. You probably haven't had management that gave you that time. Or demanded you take the time.

Writing things down takes a lot more time than you think. It is hard work. You get better with practice.

You would find, if you were given the time, or permitted yourself to have that time, that you would find all the skills you have accumulated up to this point would converge into that plan. There is a very exciting zen you get into writing things down and you can think about the architecture and the people and the teams involved, and it's a very different thing to create. And very satisfying.

Then you'll be a senior engineer.
Ask HN: Does "semantic sync" pain resonate? Looking for examples
by white | 2025-11-12 03:03:02+00:00
Hi there!

I am trying to validate a problem I keep seeing at bunch of mid-size companies that run on Slack, Jira, Asana, Confluence, Google Docs, often Figma, email, ...

The pain isn’t search. Tools like Glean are good overlays for discovery.

The pain is drift: decisions or clarifications made in one place don’t get reflected in the others, so truth diverges and teams lose time reconciling.

So what I’ve observed:

* A Slack thread (or Confluence comment) clarifies a requirement, the Jira acceptance criteria and the spec never change

* A PM updates Confluence, but x-functional issues (DA, Eng, Design) under the same Epic still reflect the old requirements

* Decisions happen across multiple Slack or Teams threads (including DMs) and aren’t visible to those who need to know between threads

* “What’s the latest?” becomes a recurring standup agenda item, and PMs have to route information based on internal knowledge and changes

* Service Now incidents convert/escalated into Jira tickets without and become disconnected since then

I’m trying to gauge how widespread the "keep sources semantically in sync" problem is, and to collect adjacent challenges we should consider if we tackle it.

3 questions for HN:

1. Do you see this drift in your company, team? Where is it worst?

2. What’s your current process? E.g., manual doc comments, weekly readouts, pinning Slack messages, internal scripts, ...?

3. If you’ve tried to fix it, what failed or worked?

If this is a real pain for you, resonates with you, would you be open to a short call as a potential design partner? I’ve built a prototype and want to sanity-check problem scope and success criteria, not pitch a solution yet.

Promise: I’ll summarize takeaways back to the thread.

DM or email me. Thanks!
by saagarjha | 2025-11-12 03:03:18+00:00
The reason for this policy is that if you don’t keep a deadline upstream can just sit on the report forever while bad actors can find and exploit the vulnerabilities, which harms downstream users because they are left entirely unaware that the vulnerability even exists. The idea behind public disclosure is that downstream is now made aware of the bug and can take appropriate action on their side (for example, by avoiding the software, sponsoring a fix, etc.)
by tpmoney | 2025-11-12 03:04:26+00:00
If they contribute nothing back, what are all the `google.com` email addresses in the git history doing? If they contribute nothing back, why are they listed as a customer of `fflabs.eu` which is apparently a private consulting company for ffmpeg run by some of the ffmpeg lead maintainers?

What do we think the lesson corporations are going to take from this is?

1) "You should file patches with your bug reports"

2) "Even when you submit patches and you hire the developers of OSS projects as consultants, you will still get dragged through the mud if you don't contribute a patch with every bug report you make, so you might as well not contribute anything back at all"