skysight-inc/HackerNews huggingface dataset:
There might be a correlation between people who push their memory consumption to the limit and people who never opt into anything they don't directly benefit from, thinking that such optional stuff would hinder them from using all of their memory for personal benefit. OTOH, those people might realize that telemetry will eventually increase efficiency, allowing them to do more with their available memory...
Ultralight has proprietary components you cannot statically link to.
Many protocols still relevant today make use of that structure, it still has widespread use.
What is EPSS? A new rating system for vulnerabilities to replace CVSS
(Co-author here) I found about the EPSS project the other day so my colleagues and I decided to do a deep dive on it and share our notes.

Has anybody else been following this? Are there any other efforts or exciting new projects happening around CVEs that might not be on people's radars yet?
CMake is pretty simple internally. Every "keyword" is a function call. Every function call is implemented as a class. The simplest way to hijack it would be to have a function that calls out to your external interpreter/tool with the state you want. I could see doing that in a couple of ways:

* Add a builtin command [1] that takes a string or filename and calls the interpreter with any additional data you want to pass.

* Add a flow control command [1] that passes the inline block to the interpreter of your choice. You'd probably have to override cmFunctionBlocker as well for this.

Note that this can't fix the deep design issues in CMake like the insane string representation.

And no, I'm definitely not in therapy from CMake-induced PTSD.

[1] https://github.com/Kitware/CMake/blob/master/Source/cmComman...
Re-Evaluation of the Concept of Work
Someone posted a link to the subreddit in question and it was flagged quickly. I gave it a brief look and while I don't condone the name, many of the concepts presented there resonate with me. Maybe it's something to ponder upon before flagging.
IMO you should store the size of your strings. If you know the sizes already then you can just memcpy/memmove.
It will be destructive to society in the amount of toxic speech. Lay off all the content moderators, ok buddy..

https://www.theguardian.com/technology/2022/nov/20/twitter-f...
> [..] A 40 hour work week does take up time, but still leaves enough time for other activities. [...]

And then, there are all these (low-paid) jobs where 40 hours won't keep you alive, all those people that need to commute an hour each way and so on. And the , it's easily a 50-60 hours/week if you take door-to-door time.

Yes, change your life and get something better. But that's sometimes not so easy.
It is a surprising number. I assume that it also includes the development and manufacturing of the devices that they sell that use Alexa. They clearly sell those devices at close to cost. Or below?
Everything Chamath says is purely out of his own self-interest. He's been a hypocrite for years.
not that i know of, but there's a lot of research papers, under the topic of "graph visualization". we read a ton of these and combined and modified ideas for TALA.

The folks at ELK are doing fantastic work in public as an academic team out of Germany.

https://www.eclipse.org/elk/documentation/algorithmdeveloper...
https://www.rtsys.informatik.uni-kiel.de/en/team/soren-domro...

Graphviz's papers are also must-reads (for hierarchical layouts):
https://graphviz.org/theory/

In general they are surprisingly readable even without an academic background. Sometimes they go into proofs of correctness like method X really results in minimal edge crossings, and those are gnarly math, but skippable. The bad part is that a lot of these research papers have code that's just broken or wrong, or is NP-hard.
> the question should be: "How did I initialize an Account without a Contact?"

Well yeah that's exactly what static analysis can tell you - what code path led to that.

You're saying this project should be what it already is.
Crosswalker: A general purpose tool for text-based crosswalking
> Cicero doubled the average score of human players across 40 online games, and ranked in the top 10% of players who played more than one game.

If Cicero has played more than one game of Diplomacy, it has failed to trounce humans who learned the key lesson after one game that the only winning move is not to play.
It's small enough you can just buy them online: https://www.uspeglobal.com/listings?selected_categories%5B%5...
ZFS: The Last Word in File Systems (2006)
I use Mycroft with the home assistant vm running on Proxmox. I’m surprised how easily they integrate. And when the internet goes out I can locally control things from a laptop.
Cannot speak to all of them but I know a couple work on sides personal projects the rest of their time. Doesn't matter if they are in the office or at home.

No one is asking them to write code 40 hours a week. That is not realistic in coding. Most developers' jobs include a lot more than coding. They are saying they spend 15-20 hour a week on all job related work. Whether that is coding, code review, engineering, testing, research, documentation, meetings ect.
This sounds very close to AGI capabilities. Maybe I've just been thinking too much about Westworld, but I'm starting to get very concerned that people can be gradually replaced by AI agents with their own agendas (focus on this last part).
Toxic is not the highlighting of breaking the build with a trophy, it's what gets associated with it.

Imagine an "ugliest shirt" trophy, given out to whoever wheres the ugliest shirt of the week. At a fashion magazine, this may be toxic shaming. At a tech-heavy startup it might have people start buying the worst shirts they can to try to win it.

If the attitude associated with getting the trophy is condemnation, that's bad. If it's a reminder that everyone fucks and be careful, that's fine.
Sounds like you want to build a fully-working and -encapsulated simulation of the universe ;)

Even modeling a single, non-trivial business would probably be exceptionally difficult
If you think that's bad, wait until you here about what the Canadian government wants to do with the vast taiga forests.

My (unscientific) observation is that some Canadians get stuck in a frontier mentality, kind of thinking that the resources and resilience of their huge and sparsely populated landmass is inexhaustible. Especially with forestry, they do stuff all the time that would never fly in the US.
Rust can take a while if you don't know either C++ or Haskell.
i think a lot of the indie action has gone to the YouTube vfx studios
As someone that hates taking a long time to write documents and has similar resistance to reading large technical documents I much prefer to ask my specific questions in meetings. I retain the information much better that way.
All of these issues with UIDs make me believe that we should maybe transition to Probabilistic Data Structures and group users randomly together, e.g. based on HyperLogLog abstracted UIDs. Only the user device itself would have the full ID, the service would get an abstracted, probabilistic version of it, which can (and will) collide with other abstracted IDs. Thus, the service could never be 100% sure who exactly a single user is - out of a group of (e.g.) 12 people that happen to yield the same probabilistic representation.

(I know there're also many issues with this approach, so take it with a grain of salt)
> This is just covering up design problems.

Static analysis (detecting) is the opposite of "covering up".

> "How did I initialize an Account without a Contact?"

As long as your language lets you do it, your teammates will do it. And in many cases it won't be accidental either. Your teammate will want an Account with its Contact set to null.
IDK if it's quite the use case you're looking for, but at my company, we turn our CI YAML for our monorepo into Dot (Graphviz), and graph it, to visualize the dependencies between steps in our CI, & to highlight the critical path.

It's an ~100 node DAG. Graphviz struggles a bit with it, particularly with edge layout.

(Though really, the layout I want for it is a Gnatt chart style layout.)
Modern security for modern teams – elba is officially launched
Those views aren't incompatible:

1) Twitter could easily live without 10-30% staff and there was some bloat, positions to be cut

2) Believing that 90% of organization does nothing useful is insane.
> A long lived feature branch is not a problem if you rebase it to master often.

Yes but if it's a shared branch then you may have problems with this.

The safer way is to merge from master into the branch but nobody wants to do that because it's ugly.
IOW: AT&T resorts to dirty pool because they didn't win in the market
What about the low doc, low meeting culture
Ask HN: Where did the “unread” marker go?
I've been using HN for a while and asked to be one of those with the "unread" marker (an orange vertical line to the left of unread posts).

It stopped appearing today, or maybe yesterday.

Where did it go? Did I miss some sort of announcement?
> Be warned, it is considered to be a game that will end friendships that have lasted for years, and monopoly is considered to be a game that causes less bad feelings.

Well, there is also Machiavelli… ;-)

*) https://en.wikipedia.org/wiki/Machiavelli_(board_game)
...but you can fork it. Is the build process really too painful for that to be enough?
I don't even know where to begin with this comment? So you have no problem being paid for only half the time right? Or are you saying you deserve to steal from the company you work for?
IMO - Retail buys based off of articles in the Economist and stuff Cramer says. Institutional money will have different criteria for what constitutes "value" and where medium-long term speculation might be warranted. Based on the above the detrimental effects of a falling knife are clearly going to affect one group vs the other.
It's certainly multiple things, but some things take precedent. If Apple allowed people to install third-party App Stores, then the freedom would take precedent and nobody would be throwing rocks at them.
Everything dieing is pretty far out on the bell curve. 99% of humans? That's inside the range of reasonable considerations given how little slack we've left in the system.
I found an actual quote of a source which verifies the intention for fixed-length fields: https://softwareengineering.stackexchange.com/a/438090
A Deep Dive Down the Memory Hole
How collective forgetting became embedded in the internet and why battle lines are now drawn over who remembers what.
FAA asks for vendor feedback on $10B tech contract
Doesn't Windows still limit swap by default to like maximum 20% of the disk ? And that issue of running out of disk space because swap ate it isn't new, it really came into prominence when we switched from slow but huge HDDs to fast but small SSDs...
If I have my security consultant hat on I'd say this is a great news. Every organization that's serious about security absolutely needs security in depth, encryption of all connections (both internal and external), files, databases, data lakes, data stores, etc.

But with my dev hat on I must point out how much overhead all this adds up. Development time is doubled or tripled, and you need a lot more effort and more people and better trained people to admin/manage production systems.
Purely technical telemetry like this is indeed useful. The problem comes when telemetry is used to justify deleting useful features such as compact mode.

The "make it hard to find" to "nobody uses it" to "let's delete it" pipeline is very real. Reminds me of the "defund it" -> "it does not work" -> "let's privatize it" pipeline in right-wing governments.
The long timelines and high costs of nuclear in the US have very little to do with the limits of the technology.
Sounds like this works great for them, and an awesome environment to be a part of.

However I'd be very curious to see how this evolves as the company grows. Personally, I am skeptical that this is sustainable in the long term. In my experience, most people are a) bad at writing and b) hate reading. And as a company grows, and the number of documents that need to be written and read explodes, this work pattern eventually becomes untenable. More and more meetings get scheduled to cover topics that are not well documented, which causes people to have less time/inclination to create or consume high quality documents, and it becomes a feedback loop.

(Edited to make it clear that I am not against the idea, just curious to see how it evolves)
Also, my advice, have a cash pot. Even if it's just $20 a player. You'll only get players who are actually competitive. Also, weirdly, fewer hard feelings - I guess knowing you got betrayed for money stings less than knowing you got betrayed for fun.
Barclays using TeamViewer font to warn customers
It’s fair to say that companies like GOOG could easily be at a PE of 10 or less today with more financial discipline.

It does provide a lot of buffer against recessionary times
The US government isn't going to stop this shit anytime soon, since it was their idea in the first place.

https://en.wikipedia.org/wiki/DARPA_LifeLog

> LifeLog was a project of the Information Processing Techniques Office of the Defense Advanced Research Projects Agency (DARPA) of the U.S. Department of Defense (DOD). According to its bid solicitation pamphlet in 2003, it was to be "an ontology-based (sub)system that captures, stores, and makes accessible the flow of one person's experience in and interactions with the world in order to support a broad spectrum of associates/assistants and other system capabilities". The objective of the LifeLog concept was "to be able to trace the 'threads' of an individual's life in terms of events, states, and relationships", and it has the ability to "take in all of a subject's experience, from phone numbers dialed and e-mail messages viewed to every breath taken, step made and place gone".[1]

> The LifeLog program was canceled on February 3, 2004 (one day before the launching of Facebook),

If you live in any other country, you should lobby your government to ban Facebook, to ban all foreign social media entirely. But I fear the situation is hopeless for us Americans.
FTX Lawyer Says ‘Substantial Amount’ of Crypto Firm’s Assets Stolen or Missing
It's less boring this way and based on the article I think it would be difficult to include more information in the title anyway - the solution is simple but it follows multiple paragraphs describing the problem.

Sure, it could also just be "Improving Firefox stability", but that doesn't tell me the nature or scale of the update.
It may have been hoped for, but it was an unrealistic hope.

They couldn't have fixed it while retaining backward compatibility.
Yes that is the normal case. The post was refuting the assertion that one engineer can run these services indefinitely as previously the OP had the help of SWEs oncall and also fixing bugs.
Perhaps there is an up-side to Hyundai's general lack of attention to basic security practices: Apparently it's just as easy to hack the onboard infotainment system. Someone recently published a procedure that allows owners to install a customized Linux ROM using the normal firmware update procedure. Hyundai literally used a default and well known signing key to authenticate their software updates so it's almost trivially easy to circumvent. The details were discussed previously on hacker news, I don't have the link handy but I believe it is possible to (easily) take control of the infotainment screen as well as CANBUS-accessible systems, including the door locks and very likely access all of the telemetry data destined for the dashboard instrument displays. There are probably even more possibilities that I haven't mentioned. I really wish I had more free time to hack on it because I think it would be really fun and interesting.
You are going to get rekt
I'm guessing they have thought about this and other contingencies. Just because somebody isn't a programmer doesn't mean they're a moron.
To me, some of the benefits of having the occasional meeting is to create a shared understanding of what's going on and also to enable a vigorous group discussion. I'm not sure I would know how to replicate that with writing alone.
> To clarify, these CSS hacks often use checkbox inputs for isomorphic state management and that is simply incompatible with the semantics those elements are designed and expected to represent.

The one mentioned in the article, does not use checkboxes.

It uses functionality built into HTML itself
Even for Firefox nightly, it is probably already much more stable and less buggy than tons of games nowadays.

We are now in an age that think software bug is a norm. It's respectable that mozilla still keep the standard as high as the past days.
Diplomacy is a perfect game to play one move per day among a group of friends/coworkers. Sadly I never managed to find enough people to get in board and commit to playing a weeks/months-long game
>MS has not implemented either one iirc.

Flexible array members were implemented a long time ago. The oldest Visual C++ I have at hand is 2005 and it already has them (although only in C mode).
They may decline you then.

To hire an H-1B, the company has to do a Prevailing Wage Determination (PWD), where they ask the Department of Labor what an appropriate wage for this a) job function, b) experience level and c) geographic area is. To go forward with the H-1B, they only have to offer that much for the position.
The answer may not be the best-argued one, but it links to other useful discussions, and it is correct that the forking mechanism is an important factor.

Committing is limited by RAM plus swap. You’d have to reserve much more swap than is typically ever actually used by processes, at any given time.
> And iops aside, even just the storage capacity from full inbox materialization (along with necessary indexing overhead) will bankrupt you, especially on that blazing fast storage you keep talking about.

The twitter firehose is usually bellow 50MB/s. 200GB a day of tweets will bankrupt no one. An 100TB Nimbus Exadrive that does 100,000+ iops costs about $30,000. 1 year of tweets. Thousands of twitter employees fired probably saves $3+ billion/year in salaries, I'm sure they have a hefty enough hardware budget.

> Keep in mind everything needs to be replicated to multiple regions / data centers for DR/HA, as well as keeping the data closer to users to lower the latency.

Does it really? I don't think so. Not with tweets.

For DR you can stream into a blob store like s3 in the background and have an automated process that stands up a fresh shadow cluster from it every couple of hours. Hardly costs anything with this volume of data. That is cold data, doesn't need the fancy blazing fast storage.
Building up enough of a bank to carry you through a year of expenses and try to get funding for your startup idea so you’re not spending your own money on it.

If you’ve been at the company long enough ask if you can take a 6 month sabbatical, that should give you enough time to test out if the idea is feasible.
that may be more political than business driven
Being one person makes it easier not harder. The meetings are quicker for one thing.
Just to set the record straight: MapTiler is *not* the maintainer of MapLibre. MapTiler is *one of* many participating companies in the MapLibre organization, which has a board and a charter [1].

Amazon has donated $300,000 to MapLibre, Facebook - $80,000, TomTom - $10,000, and lots more companies have donated. Most of the code maintenance is done by various volunteers and companies, e.g. Amazon has hired a whole team of engineers to work on MapLibre native, etc.

P.S. I came up with the name MapLibre, called people to unite around this effort, and am on the board of the MapLibre organization. [2]

[1]: https://maplibre.org/charter/
[2]: https://twitter.com/nyuriks/status/1336493514646052864
Ask HN: To founders of startups using AI/ML
How do you deal with your customers in case your model/accuracy fails miserably while in production? And here I literally mean any product using AI/ML from image recognition to forecasting models.
Flume says cities overflowing with fiber but accessibility lags
Cool! C is my main language
The people who received money from SBF failed to tag him as a fraud but also the people who gave him money also failed to tag him as a fraud so the parsimonious explanation right now is incompetence, not malice is what's been driving the situation.
Thanks, Durkie! :)
New paper: Proving Collatz Conjecture by finding cycles and diverging seeds
High-Documentation is so out of fashion, for all the wrong reasons. If you are designing anything that is intended to last longer than 6 months, documentation is a critical part of the system.

Meetings are great for communicating with people here and now, but only writing can communicate with people from the future. When you meet with your current colleagues, spare a thought for your future colleagues who haven’t yet joined, and do them a favor by writing things down.

Ability to use written communication is a major differentiator between junior and senior engineer.
Alphabet Seeks to Identify 10k Poor-Performing Googlers to Cut Staff
iCloud is the problem, here. Apple has no right to predecate my software usage on the existence of an account with them. It's equally as absurd as Windows requiring a Microsoft ID to log in.
This seems corect.

The AWK Programming Language, 1988, Chapter 6: Little Languages

https://archive.org/details/pdfy-MgN0H1joIoDVoIC7/page/n11/m...
doesn't Amazon have a similar structure, tho? i don't know what it's actually like to work there (anyone who does feel free to chime in) but i've interviewed and from what I can tell they put a heavy emphasis on documentation. it's tough to find a bigger and more siloed company than Amazon, and it seems to work for them.
>all three +political+ branches of government. … You know, the House, the Senate and the executive

Would this be more accurate? I'm not sure the judicial branch is considered political enough for "one group" to "have".
Just wait until we have AI swarms.

So far all this has been with one player, amid others, no collusion.

You’re going to be surrounded very shortly by sleeper bots, including on HN. Relying on dang and others to root out bots will be futile. A swarm could easily collude to downvote people or get them ostrasized by their own friend group, as we have already seen when it came to crypto, metoo, BLM, lockdowns, vaccines and now Ukraine.

It’s really not hard for a bot swarm to completely exploit society in these and many more ways, and we are not ready for it. By the time the botswarms arrive online, it’ll be too late to do anything.

Update: LinkedIn already has a huge problem of fake profiles applying for jobs and offering jobs. And Twitter is overrun with bots. But soon, bot-written articles will be out-shared by your own friends rather than that “hack liberal/establishment/hasbeen paper” NYTimes.com

The animatrix had a good sort of storyline on this, but it involved a lot of unrealistic violence
I was very happy with Debian on my MacBook Air roughly 10 years ago. I am a non-GUI type of guy, so I might have missed quibbles that other people had around that.
Maybe, but it wasn't funny so much as dumb and pointless. And: no, I just use it as a speaker and for setting timers.