skysight-inc/HackerNews huggingface dataset:
WTF!

Just wait until we have AI searching for Zero-day and writing exploits code for them...

Or AI-assisted-Pen-testing-as-a-service <-- HackOne or someone similar should be all over this...

What is Palantir doing for GPT crawling of logs and writing filters/rules/queries...

Or firehosing data through an AI Deep Packet Inpector etc...

Security is going to be the most interesting space to pay attention to going forward...
The Makefile one is important. Make is still the best tool for managing a dependency graph, adding project commands, building artifacts of any kind, whether it be building docker images, binary objects, or spinning up integration environments. You can use make anywhere and everywhere, it's powerful but it's also simple on the surface and battle tested.

For DevOps in general I have learned to KISS, always know how your tools work, and focus on observability and low hanging automation. If you can't observe or understand how your systems works, you're screwed. You need metrics, logs, statistics, in one place that you can easily build queries with. You should be able to see everything at the fleet level down to the innards of each machine with no troubles.
> Recursive queries will not scale to handle _very_ large edge tables

What do you consider large ? We have a 12-year old telco application with a few million objects in Neo4J, doing fault impact calculations... Would PostgreSQL handle that easily nowadays ?
Possibly! We post jobs to https://www.scratchfoundation.org/careers
> [...] I had the VP engineering discuss GPT-4 in a meeting and was considering firing and closing down junior positions

I'm curious, how does the VP of engineering figure senior developers are created? Out of thin air?

I wonder if we'll see more of this short-term thinking that will eventually create a serious shortage of experienced engineers in the future. I realize no individual executive is under any obligation to ensure the well-being of the industry at large, but if none of them care about it, they are dooming it.
This again verifies identities and in no way software. What's the point?

If you decide to trust "the Python Foundation", what does this key do for you if you're already downloading binaries from python.org? And if you don't, how much does the fact that they have a key help you? Anyone can get a key.
I understand what you are writing. But it only holds for you because your idea of ballpark is exceedingly wide. It's doesn't hold at all for the usage numbers I look at without your socalled ballpark being several magnitudes.
Flatpaks do exactly that.
Not in Canada, though. They use the metric system.

On a more serious note, I am surprised parking on sidewalks is a thing over there. It really is a massive problem here in Bulgaria. Has been for decades at this point
Convinced European and Italian here. While I feel zero respect for our new corrupt government, this could be a bold, yet necessary, move, provided it is really temporary and motivated by concern about personal data misuse. New developments in AI can offer bad players the most incredibly powerful communication weapon ever created, and although I'd be strongly against any kind of blockage, I can agree that things in that field are progressing too fast and we (as society) need time to fully understand the implications and dangers should it (read: when it will) be used to take advantage of people, and grow the necessary antibodies.

edit: minor additions/corrections
A horrifying amount of applications out there that I've seen are basically just that - wrassling some text around, but with a billion layers of unnecessary abstraction.

I get to see a lot of peoples code in my job. Most of it is ridiculous levels of over engineering
They already have these inspections, though I don't know that they bother checking ELD stuff. Truck weigh stations are on almost every interstate near state lines where they check trucks coming into the state for compliance with weight/lighting/legal cargo/licensing/etc.
If you are looking to utilise this with Django, there is the brilliant Django CTE project that enables it and other CTE queries with the Django ORM:

https://dimagi.github.io/django-cte/#recursive-common-table-...
There is a Redshift serverless offering now, not sure how it compares though. I think it's not 100% there when it comes to not having to think about the underlying infra yourself...
I get where you're coming from but Telegram is objectively better than WhatsApp due to several reasons:

- Privacy controls for each user.

- No hard requirement for a phone number.

- Cloud encryption.

- Open Source clients.

- Telegram's track record.

- Business model not revolving around selling user data.

WhatsApp is a black box and nobody has any good arguments for it other than 'supposed' E2EE that nobody knows anything about. The fact that WhatsApp's T&C forbid you from even reverse engineering the obfuscated binaries and Facebook being the force behind WhatsApp, I'm still surprised that people take their E2EE claim seriously.

It's like me promising you that I'm not looking at you, while I stand facing you, right behind you.
Reminds me of doing a site survey at a somewhat remote cell tower, prior to performing some expansion work. Was told there was sensitive, classified military communications equipment inside the shack at the base of the tower, and had to perform work carefully around it lest we damage something.

Couldn't tell me what kind of vibrations etc I had to keep my equipment under, as those details were classified. While I was there, I watched a Verizon tech show up to fiddle with their equipment inside the shack, which happened to have the door frame somewhat out of square. The tech's solution to getting through the tight security door? Unlock it, then smash on it with a sledge hammer until it came loose and swung in.

I guess the fragility memo hadn't gotten down the line to the service techs.
The collateral damage of careerism is objectifying your coworkers as either enemies or things to manipulate in order to advance yourself. It's the belief that all software devs are temporarily embarrassed FAANG devs.

This mindset will damage you over the long run, and the resulting career success may or may not be able to offset it. A zero sum mindset will lock you into this view along with the accompanying anxiety.
I think it does help in some scenarios like small scripts or if you are learning something new. But often it adds an overhead. You have to check constantly wether or not to accept the suggestions.

I dont use copilot anymore (at least for now). Just chatgpt as an alternative to google/SO
> Another is that there's so much on Trump - from tax dodging, to Jan 6, to links to suspect foreign money - that it seems like a strange case to highlight.

Exactly. It's not that this particular case isn't worth prosecuting, but there's so much more that's far worse, and not much seems to be moving on those other fronts. I don't understand why it took so long and why this is the first one to finally go to trial. Was January 6 not reason to arrest him? What about those classified documents in his basement? Those sound like more urgent cases to prosecute, though admittedly a lot more recent.
They're not burning drive hours, they're burning on-duty hours which are also limited. You are limited to 14 hours of on-duty time. You are also limited to 11 hours of actual driving time out of those 14 hours. So, I guess if you are delayed more than 3 hours (minus breaks) you are kinda eating into drive hours because of the on-duty limit of 14.
Hmm, why would you say that avoiding harm is the intelligent thing to do, by definition?
Actually, it stems from the Nuremberg Trials, and actually having a goddamn moral compass.

If you're looking for something a bit more internal to the U.S., look no further than the original Declaration of Independence. While it may scare the bajeezus out of many, the responsibility for calling out governmental bullshit is vested solely with the People, and law enforcers are still People to.

Welcome to why the United States is "Home of the Brave". It takes courage to stick around in a melting pot of crazy, and you never really know who is coming to dinner, or how long the civility is going to hold out.
There's no way these companies could keep such development secret. Too many leakers in the inside.
The interesting thing is that a technical solution already exists as has been in use in Europe for decades.

Each driver has a single unique physical "driver card" which needs to be inserted into a tamper-proof recording device in the vehicle. Driving hours are recorded both on the driver card, and on the vehicle-bound recording device. Want to use two drivers in a shift? Well, you gotta put it on dual-driver mode and insert both cards. Good luck trying to explain where your ghost driver is when you get pulled over for a random check.

It seems ELD Rider is just a random Android app instead. No wonder people are committing fraud with it - there's no way to ensure the accuracy of that!
Is there a "hopefully done by date?" for the linux version?
They are not incompetent hacks. Stop calling them that! They were failed by a system that did not tell that they should learn how to do these things, and are struggling to catch up. You can point out areas of improvement without being mean.
Surprised to hear someone call Lua ugly, as I find it pretty and simple. The barebones-ness is part of the appeal for me as well.
Wild in politics... nothing is wild to me with politics ..win at all cost and angles. Make things up ..smear your opponent..etc... been playing that game forever.

Nothing for me to pay attention to just vote based on who aligns with my issues and doesn't come off like slimeball or an idiot!
Django-Cte – Common Table Expressions with Django
That implies that we don’t already have high performance web frameworks in managed (thus more productive) languages already, which is not the case. C#, Java, Go are all such languages with plenty of examples.
It didn't used to be that way, and doesn't need to be now.
>, women who artfully employ love potions and magic spells upon their husbands, and gain mastery over them through pleasure, find themselves consorts of dull-witted, degenerate fools.
I don't think that's what Castle Rock v. Gonzalez means. It pretty narrowly addresses "legitimate claim of entitlement" related to enforcement of a restraining order. Scalia specifically held that "enforcement of the restraining order was not mandatory under Colorado law," which means that a state COULD mandate enforcement, but that Colorado had not.

That said, I still think it was a shitty way to slice due process law.
I currently have some money in an Indian mutual fund through my Schwab brokerage, WAINX. What's the difference between Inri, and just investing in an Indian mutual fund? Schwab shows 4 different India-focused equity funds from Eaton Vance, ALPS/Kotak, Matthews, and Wasatch.
> I don't think America accepts immigrants; in most places there's a pleasant apathy toward them. You're not really considered "American" by most born here

Not been my experience in NYC and other places. Quite the opposite. Also have you seen European integration of foreigners up close? Middle East? Asia?

My guess is no, because these places make it far more difficult to assimilate (if not impossible)
Your experience does shed light on TurboTax, but how does it give us any insight into the IRS heuristic?
I agree, they both feel different. However they're very "sweaty"... and I don't have the time to get into them so I've bounced off both very hard. I enjoy watching people play tarkov but if I had a disk of tarkov it would long ago been burned in effigy.
Yes. They’re professionally produced like a TV episode. All presenters must rehearse. An incredible waste of time and money.
I'm not in the audience for Janet, but I really appreciate efforts like this--to write about software in a creative and interesting way. I wish there were more.
This doesn't seem to support any allegation that the NYPD "publicly threatened" DeBlasio's "children". What did happen is that the NYPD Sergeants' union inappropriately tweeted details about her arrest, after she was arrested. That's one child, for those keeping score, not "children", and it's also not a "threat" of any identifiable kind. It is definitely inappropriate, though.

So it would appear that Business Insider's headline was sensationalist and not well supported.
The earth is round my dude.
There are essentially 2 approaches to SBOM.

1) scanning source code: it will generate also lot of false positive and a need to manually edit (ammend/correct) the SBOM. This works best with containers. One Foss tool that does this is Anchore's syft/grype. Others have jumped onto the sbom bandwagon simply because they thought it's easy (they were already offering SAST/DAST)

The other class of tools actually only looks at a binary artifact (firmware, executable, library etc) and then tries to extract the SBOM from that. I am not aware of any FOSS tool here and would br cool to learn of anything out there. But chances are some custom work is needed for each specific firmware. Only vendor I know today are Binare.io, cybellum)

For firmware and embedded this really the only way that IMHO makes sense for embedded engineering. Because you can't just scan an SDK and say "yepp it has mbedtls xyz or c-json in it ...". It won't find it because there is no specfile or something that cam be parsed reliably. Your only option would be to strong-arm the silicon vendor into supplying a machine readable sbom along with the SDK.

It also has less false positive and doesn't find vulnerabilities (or license issues D
depending on what you match for) you don't care about.

The NTIA envisions the SBOM as a key element in building a risk based approach to devsecops with Vuln Exchange (VEX) and much more. We're still far from thus.

Fact though it's already becoming part of regulation (RED, CRA) in Europe and the US (Executive Order Biden signed not too long ago)
Unlimited Powers
Great Pullpo!
Who gets the copyright?
Police state doesn't mean surveillance
I kinda agree with this sentiment, I've certainly known plenty of software engineers who weren't half what they were getting paid, mostly juniors but also a few seniors. But I've also known plenty of software engineers who were worth every cent. However, I'd argue the bigger problem is other engineers are underpaid, especially considering many types of engineering require a strong grasp of advanced mathematics and physics. Then again, most professions in this world are woefully underpaid.
Right, it's amazing to me the extent to which people are throwing their hands in there and saying "There's absolutely NOTHING that can be done!!! We must accept the AGIs however they will manifest"...

Clearly, it's a very hard problem with massive uncertainties. But we can take actions that will significantly decrease the risk of utter catastrophe.

I don't even think world-ending catastrophe is that likely. But it seems a real enough possibility that we should take it seriously.
I don't think Signal has what it takes to combat Facebook's monopoly. It's more inconvenient than WhatsApp, why would people even switch?

Telegram on the other hand does not compromise on features and user experience and still is able to deliver a system that doesn't disrespect the user data.
YouTube CEO Neal Mohan Doesn’t Think About TikTok
I had high hopes for KaiOS, but they (KaiOS and the manufacturers, not the hacking community) have chosen a path that makes them even less attractive than Android devices: locked down devices that have to be jailbroken, and ads injected into apps, whether the dev wants them or not. I also see lots of complaints about devices getting sluggish after a couple months, and then of course the manufacturers rarely update the OS.
Can water solve a maze? [video]
I mean, the article does list those places but doesn't provide any sort of numbers at all.

Who knows if John Deere hired 10k people before the layoffs and 3k afterwards. Sure some of the laid off people in this scenario could have gone to John Deere but it's more likely they've displaced other candidates JD would've hired as opposed to JD sponging up laid off people.
I have a steam deck. I can't say I understand it's impact on the gaming market though.
Or load shedding.
If it’s any comfort to you, I’m not in the jury pool.
Going to dispute this one:

> The value of a CI/CD Pipeline is inversely proportional to how long the pipeline takes to run.

Priority #1 is : test your product properly. This means "if it is supposed to do something, then you should have a test to check that it does that thing".

Sometimes it just takes some time to put together and run such tests.

In my experience some people (usually my perception is they are younger, more impatient people) who have read somewhere that tests should run really quickly, will argue that Priority #1 above doesn't matter, in the interest of their patience being assuaged.

Long ago we had product builds that took hours and tests that often ran overnight, and sometimes over days. And we shipped sh*t that worked!
It seems to me the dynamics of the failures are different - cab drivers drive smaller vehicles at slower speeds in more engaging traffic. When a semi truck crashes it makes a highly visible spectacle, and if there are other people involved, with fatalities. If a cab driver takes a micronap in rush hour traffic they bounce off someone's bumper.
One of the programmers I used to work with took an online personality test, and told us that it reported him having "less empathy than Stalin". He was a good programmer, though!
> This change, the report explains, will help GM “capture more data on how consumers drive and charge EVs.”

Oh cool, a company reducing features so they can collect more data on me.
Yeah I actually opt to use fennel over Lua at every chance, including my Neovim config.
Then please take a look at how many women are in congress. How many senators. Especially on the republican side. Then tell me again how this looks like women have an equal chance to get there.

What you perceive as "women have incredible amounts of power" is actually "feminists" (as in people who care about equal rights) raising a stink about that inequality. Or your perception how the status-quo is just as it should be and any attempts to change that are "going too far".
Exactly. I'm also seeing this trend among new grads/early career SWEs. AWS, MongoDB, and all sorts of cloud first product companies have been plugging their software to the university system, and these kids come out of college w/o understanding of the computing layer below these products. Like they don't know what a server is, what a data center is, how storage works. Is that not being taught in CS programs?
I get what you're saying. The problem is that it is not really a matter of if plugins are supported or not. Helix will have plugins in the future. There is work being done towards it – mainly design work right now and they try to figure out how to approach this best, writing "demos" etc.

Plugin systems are not easy and they have a clear vision of how this should NOT end up working. In their current state putting in work into a Plugin-System does not make much sense (limited developer time that is better spend elsewhere) regarding their project goal.

As i said you can argue that the project is in its infancy and does not work for you because of that. But the main reason is not the support or lack of plugins. As i said, even if there was a plugin system you could argue that there are no plugins available for the things you want – ending up at exactly the same point you're today. Having a Plugin-System does not magically makes hundred of useful plugins appear out of nowhere.
I am not a psychological professional, and I should keep my mouth shut, but I don’t believe this is terribly unique to the tech sector. I think this is more closely linked to institutionalized people. That is, people who spent long amounts of time in schools, the military, prison, and so on. These large organizations themselves lack empathy. A person formed by such a machine will begin to find that treatment normal and replicate that treatment. As many technologists are university graduates, they’d fall into this category of institutionalized people. It doesn’t help that many then get hired by megacorps which are also institutions.
In a world where Meta uses user cookies to run targeted advertising: Users see ads they're interested in, and experience no other downsides from that targeting.

In a world where Meta doesn't use cookies to run targeted advertising: Users see lowest common denominator boring ads. None of their life is different in any other way, there's no harm they avoided.

This whole issue is baseless. If the EU wants to purposefully degrade services that half of EU citizens use every day, that's their prerogative, but you're making the world slightly worse.
You should be particular about the words you choose to be particular about because those words weren't said.
Who's gonna pay for GPT's in an economic collapse?
I have a bridge to sell you if you believe the wealthy pay anywhere near 43.92%
Manned airplanes are a conservative market, I would imagine that unmanned drones are not? Especially cheap consumer ones?
In short:

JimBob, the driver in the story, is about to hit the end of his Hours of Service where he'd have to park the truck and go take a federally mandated break.

JimBob calls the e-logging vendor, who logs him out of his e-log system, creates a fake driver profile, attaches it to the truck, and assigns all his driving over to the fake ghost driver.

To the DOT, all they can see at this point is that Someone Else was driving the truck this last week. Someone Else doesn't have to be in the truck at all, when JimBob gets stopped for a truck inspection, he can merely say "Oh, Someone Else was dropped off at the Loves five miles back and I took over this truck from him" as a bullshit lie as to why he has a fresh log on the road.

The ELD vendor and JimBob in this story are both quite flagrantly guilty of abusing the e-log.
Guess we know where the inspiration came from, heh
Are you already on Facebook?

I know lots of people who make a private group to post travel photos etc in
Agree. I’ve used it to help set up Bonjoir working across my home VPN. It wrote my the commands for EdgeOS but it kept insisting on adding commands that didn’t exist for my hardware version. I kept telling it “no that doesn’t work on my router” and it apologized and wrote the exact same thing again.

The good news is 80% of what it spat out was usable. I gave up getting it to try to give me the last 20% and figured it out myself.

One thing I’ve found helpful in those cases it to tell it that it doesn’t know what it’s talking about and ask it for good keywords to search on Google.

Someday I’d love if it just gave me the relevant links itself…
“Ran this with no errors, works great” is how you end up with Microsoft exposing everyone’s personal email via Bing.
Getting Rid of Shared Secrets: The Major Design Flaw of All CI Systems
There is something similar in Daniel Kahneman's book Thinking, Fast and Slow.

In my words, 1) The sender asks "how many X are there" (assuming that the recipient also knows that the answer is a large quantity). The recipient's mind indirectly loads and caches the concept of a large quantity. 2) The sender changes the "discussion point" to something different that also involves a quantity, however, because the original impression of the first quantity lingers, their perception may now be skewed.

Link to one such example: Studying Machine Intelligence with Been Kim - #571

https://www.youtube.com/watch?v=C8SuqeH_Mg0&t=755s