skysight-inc/HackerNews huggingface dataset:
Because of things like mass assignment or IDOR, or injection attacks, presumably.

Handing data from the user (untrusted input) directly to the backend unchanged is going to in 99.9999999% of cases also mean it's unchecked.

"I'm not smart enough to bother sanitizing my input, or to learn about stuff that's someone else's job like security" would fit right into this "manifesto".
why are people in such a denial on this point, makes me mad...

the same field who has the most imposter syndrome rants, also has most people who think they can't be replaced by someone with less experience equipped with AI.

Everyone is talking about the junior, mid-tier programmer who will replaced, but not themselves. It just sounds like willful ignorance.
All drugs were decriminalized in Portugal in the early 2000s. It worked amazingly well!
I think it is interesting to see that hannob who wrote many articles on IT security now seems to have pivoted to covering ‘green and energy’ topics. All submissions to HN in the last year are not about IT!
Right, but if you're saying that some % of people needs to be in an office to be productive a given company can let those people go, but they have to work in an office somewhere, right?
>Amazon has no right to disable an account or services unilaterally like that with little recourse from the user.

Tell me you haven't read the TOS without telling me you haven't read the TOS.

Some Amazon employees certainly overreacted too quickly by disabling this guy's services, but Amazon certainly has the right to disable an account and discontinue service for any reason not expressly prohibited by law (and this isn't one of them).
Doing all those things at once, it's usually cheaper to knock down and start from scratch.

The problem lies in a homeowner who doesn't have much spare cash - so they rewire one year... and then a few years later they replumb... and then a few years later they replace the roof... etc.

Overall, they spent more, but in small increments so it didn't feel like more.

Typically regulations allow things to be 'grandfathered' - so renovating a house allows you to avoid getting permission to rebuild, which may be denied.
I am not under the impression that Don Knuth books are accessible, I am under the impression that they are exactly the opposite

His books are books you read them last and you add reading them in your CV as a lifetime achievement
Had the same experience when I was setting up mine.

First I ordered some wifi connected bulbs, but had to send them back upon realizing the idiocy of having a bulb that can connect to the internet. Their recommended approach for using it was to set it up with a cloud service.

While I could've just used a separate offline wifi network, I too ended up going for Zigbee bulbs instead. Got a Zigbee dongle and set it up on my server with zigbee2mqtt and home assistant. Has worked flawlessly for years.
Is this true or speculation?

edit:
It's true.
Not for Python, I feel. In sheer volume, the vast majority of my Python programs are single-threaded. I want my programs to be very quick in runtime when they run.

Those that are multi-threaded are seeing minor to medium load.

If expecting extreme load (like Twitter scale), then Python is usually not the answer (rather go to a statically typed language like Java, Go, Rust etc).
On the Monkey Dance (2014)
I understand your point but anyone who just finished high school I wouldnt recommend to choose to be driver as professional path - unless as a temporary 1-10 years gig. It's just unlikely someone would be still a driver for the next 40 years. People who are already professional drivers for less than 10 years I would say also unlikely gonna do it for the next 30 years as a job - at least majority won't.

And I think situation with self driving cars and LLM is different. For self driving car you need it to be at least 99.99% good to be useful and initial investment is high.

For LLM is enough to be just 90% good and it already scales to millions of inferences at the same time. Investment for user is either free or 20$ per month.
How can you regulate a substance without blocking the substance if it doesn't meet your standards?
Bye Jira – personal Markdown knowledge base integrated with Jira
> After writing primarily no standard library C for 15 years, I have to say that I find Rust just as ugly and cumbersome as C++ (not debating its safety guarantees).

The safety guarantees are the whole point compared to C. So what’s the point of complaining about how things are cumbersome when you just elide that whole side of the debate?

I could complain about how C is too cumbersome with the proviso that I don’t care about portability or efficiency. But then what would the point be?
The vast majority of drug users out there are non addicted recreational users.

I guess it also depends on how you classify “drug user” or “addict”.
Show HN: NRF52840 emulator to run and test custom radio protocols
Describe Markup Language
Could it be that (largely homeless) drug addicts are moving to cities more tolerant of homeless drug addicts?

edit: Apparently not https://sfstandard.com/public-health/san-francisco-homeless-...
How does software get slow enough that it's one of our favorite things to complain about? There are multiple causes, of course, but I think one of them is death by a thousand cuts, that is, lots of little performance compromises that ostensibly don't matter. I don't always do everything in the optimal way, but I appreciate that Rust at least gives us the possibility of having safety without compromising speed, and I think it's good to push harder in that direction.
Free markets in lobbying, not so much for actual commerce.
Write in C/C++. They target older hardware well and you can still use modern tooling. The key is to not introduce multiple layers of bloat that makes our multi-core pocket supercomputers slower than an 80s PC.
Apart from the vast majority of its definitions?

But the minority definitions are exactly why I added the “or” part.
I think what the GP means is that "megaupload" is easier to search in a search engine than "mega", with the latter being more likely to return irrelevant results first.
The important lesson here is: never commit to an ecosystem. Always be ready to hit eject and move to a competitor without a second thought. I keep too broadband accounts. I disconnect and reconnect the other at the slightest annoyance, like a fee to fix bad signal, delayed repairs, etc, you're out. Amazing how quickly they come back begging. I also put virtual debit cards on most subscriptions. Easy to just stop paying, no credit reporting issues, no hunting for account cancellation pages. It takes some work, but being a subscription/provider nomad pays off.
"It is difficult to get a man to understand something, when his salary depends on his not understanding it"

So, it is "Your salary depends on your ability to convince others that you can not be replaced." basically.

Everyone is talking about "that other developer who has less experience, they will be the one to be replaced". The more I hear, the more suspicious it gets to me. Like everyone is so sure of themselves.
From the article.

"""
But as Florida Politics noted previously, lobbyists, including Taylor Biehl and Jeff Sharkey of Tallahassee-based Capitol Alliance Group, hammered out a deal adding language to the bill that should keep Tesla galleries open.

The change confirms newer manufacturers like Tesla, Rivian and Lucid are authorized to hold a franchise dealer license for direct sales of EVs if they are not otherwise prohibited under federal law. That carve-out apparently does not extend to traditional manufacturers such as GM, Ford, Honda and Toyota, all of which now make battery-powered cars.
"""
Yeah got the email today, had to go digging in the PDF on my phone still seems very poorly communicated IMHO.
So are other new automakers:

> The change confirms newer manufacturers like Tesla, Rivian and Lucid are authorized to hold a franchise dealer license for direct sales of EVs if they are not otherwise prohibited under federal law. That carve-out apparently does not extend to traditional manufacturers such as GM, Ford, Honda and Toyota, all of which now make battery-powered cars.

It's basically a protection racket for existing dealerships for traditional automakers, to ensure they don't get any bright ideas to avoid ~~middleman~~ dealership markups by directly selling the vehicles.
Wow a Florida law that has different enforcement for specific individual companies?
Agreed. I had this problem for a while but realized I wasn’t doing myself any favors.
Archaeologists find 3000-year-old sword, exceptionally well preserved
Authoritarian control is really an addiction.

The CCP just can't give it up --- even after enjoying decades of unprecedented growth by relaxing their grip just a little bit.
Actually, no, you're the one stuck on a misconception.

Renewables + storage can provide "synthetic baseload" at a cost that will likely be lower than nuclear in most places, especially for a new nuclear plant whose construction has not started yet (it will compete with renewables + storage of the future, since they are installed much faster and don't have to start now to be done at the same time.)

An important reminder is to not use just batteries for storage. Many bogus attempts to show renewables can't do it assume batteries are used for long term storage. This is a technological strawman argument. Use e-fuels instead. With renewables and electrolysers crashing in price, green hydrogen will become remarkably cheap.
Can someone comment on the current state of local-only voice recognition for home automation?

I'm not willing to cloud-connect anything for home automation, for the usual obvious reasons.

But if good voice control were only possible via cloud services, I could at least understand the temptation.
Even that is... perhaps optimistic: https://www.bloomberg.com/news/articles/2023-05-30/twitter-i...

(I mean, valuing private companies is far from an exact science, but you'd probably give more credence to Fidelity than Musk on this)
It would honestly shock me if the monetization from ads exceeds the costs of having a slightly shittier app.

I wonder if one of these “and oh well also sell ads” plays has ever worked? Adding secondary monetization via ads always struck me as a move of desperation when it comes from a non-entertainment app.
For application websites like the ones you listed, you'd typically end up building a special integration for crawling against their API or data dumps. This is also true for github, stackoverflow, and even document:y websites like wikipedia.

It's simply not feasible to treat them as any other website if you wanna index their data.
> So there's no way to get a battery replaced on a device with a damaged display?

Replacing the battery on most iPhones involves removing the display. If the display is already damaged, it's likely that removing it will damage it further, possibly to the extent of making it stop working entirely. Apple is, understandably, hesitant to either 1) potentially return a device to a customer in worse shape than they got it, or 2) eat the cost of replacing the display when servicing batteries.
The duress phrase my mom and I had was "I love you"
Impact. He pretty much invented the FPS genre by reading a paper about Z buffers from some guy in the Navy, IIRC. All the Call Duty kiddies owe him a debt. Who knows how long it would have taken for that whole genre to get going without him?
Nice. I hope we see much more love for Steam client on GNU/Linux in the future. Maybe even a Wayland support and well much more bugfixing.
We don't offshore our most important job
well I've got news for you https://www.reddit.com/r/berlin/comments/kve48s/spice_laced_...
I hope this helps strike down the law.
Check this out: https://fabiensanglard.net/quakeSource/index.php
https://slate.com/news-and-politics/2023/05/rich-republicans...
Using a car at all is giving up control to cops.
Assume incompetence and work backwards. Maybe he didn't believe the landscapers and didn't want to crawl around under an abandoned building to double check. Maybe he believed them but figured he could get away with ignoring it and not have to deal with yet another problem on his plate. Maybe he kept forgetting about it, even after they reminded him.
It's relatively simple to make the GIL go away: just compile to some VM that has a good concurrent garbage collector would be one approach. Yes, this will break some assumptions here and there, but not too difficult to overcome especially if you bump the version number to Python 4.

However, that leaves a lot of C code that you can't talk to anymore because the C code requires the old Python FFI. I think this is where the main problem lies.
This is my reply to a comment that was deleted here:

As always, the article is somewhat biased by the journalists and their misguided perspective: as in that they are probably using the term "drug abusers" to mean anybody using any drug, and not for what we think of as drug abusers, such as crack heads, meth heads etc.

This is not some social program from the government to help homeless use more drugs. It is simply lifting a ban on lab testing of recreational drugs. What it means is that people who illegally purchase drugs can now have them tested to verify what they contain - without the lab breaking any law. Maybe it's a software developer buying some LSD on the darknet. Maybe it's a salesman buying cocaine on the street.

There are already people and companies offering these drug quality testing services, so the law would allow them to operate in the open - as far as I understood the article.
I wonder if this will improve Linux Steam's video player performance which IME is awful at full screen res?
Persistent serum protein signature define inflammatory subcategory of long Covid
I find Rust extremely easy to read. In comparison, I was trying to read a Go codebase and found it hard to read. Of course, I've spent multiple years writing Rust and almost no time writing Go and I don't know the Go programming language at all. It was very easy to "learn" of course. But I didn't actually learn it given when I started reading code bases I was interested in I started to see weird things like

`var _ litestream.ReplicaClient = (*ReplicaClient)(nil)`

which I couldn't find an explanation for using normal means so I asked chatgpt and it told me it's an

"interface compliance check" "This line is a way of ensuring that a certain type (*ReplicaClient) implements a certain interface (litestream.ReplicaClient)."

For some reason this pattern was left out of the official documentation. Am I missing other patterns? I find Traits much easier to understand.

Also, like many others I give coding interviews and people writing Go always seem to run into null pointer errors. I'm not making that up. (I have no sample for Rust programmers)
A Storefront for Robots
Google around for:

https://en.wikipedia.org/wiki/NEET

https://en.wikipedia.org/wiki/Hikikomori
LP doesn't execute well, so I don't think they can have data showing their engine has a better life span (which is dependent on more than just these seals). It just makes sense from an engineering, "first principles" point of view.
It's not so nationally consistent as it seemed to be in the past.

But what you're describing does seem to still be true for at least a lot of the fly-over states.

That's kind of a large part of what all the drama has been in the last one-two decades. Part of the country has left that (and more) all largely behind, while the rest are clutching desperately to that past as if it's the very thing that "made america great".
I liken HN to an office water cooler that just happens to be next to the boss' office and HR, and both are always listening and taking notes.

People are having conversations about whatever interests them, but you're being graded on intelligence, thoughtfulness, novelty, substance and civility. Wasting too much time on trivialities is counterproductive, and half the people you talk to are trying to impress the boss by sounding too clever by half.
I'm not sure I agree — if you're working on a feature and slow builds mean it takes forever to finish it, taking the time to address the tooling before continuing feature work is a valid way to build what you need.
Make your own AI replica and let friends and fans chat with it
Create your AI replica, and chat with friends and fans. Connect on a whole new level as your virtual creation interacts, learns, and engages, adding an exciting dimension to your online presence.
GIL is one of the things that make Python an annoyance to work with. In saner languages, you could handle multiple requests at the same time, or easily spin something off in a thread to work in the background. In Python you can't do this. You need to duplicate your process, then pay the price of memory usage and other things multiple processes hinder (like communication between threads or pre-computed values now aren't shared so you need something external again). To deploy your app, you end up with 10 different deploys because each of them have to have a different entry point and separate task to fulfill.
Yes! Draining the swamp!!!
I made an effort not to click on anything political for a few months and there's absolutely no video in neither side except for the "breaking news" section that youtube adds, not even on youtube shorts. We tend not to notice when things are right, but god damn how much I love youtube recomendation algorithm. I really hope it never corrupts itself. The "Do not recommend" works, and not just for the specific channel, but the overall category and related content, it's amazing.
What's the purpose of this comment? Do you think there are HN readers not aware of changing standards historically? Or are you just trolling to stir up a culture war debate?
It might be more helpful to think of it in terms of supported use cases, rather than just pure volume.
The mental gymnastics come when we pretend illegal drugs aren't widely available today to anyone who wants them, with no quality control and via markets governed by violence. We already legally sell all manner of drugs up to an including various types of speed and opioids. The only difference is that for certain drugs, you have to go to an illegal dealer instead of a pharmacy.
>If enacted, the provisions of S6748 would prevent employers from entering into or maintaining non-competition agreements with workers, including independent contractors, absent a “good faith basis” to believe that a non-compete agreement is enforceable. The bill does not expand upon what constitutes a “good faith basis.”

"When you signed on, in good faith, you agreed to a 6 month paid notice period."
> PEP 669 – Low Impact Monitoring for CPython

Finally, 15 years later Python might also get something similar to VisualVM.
Regulatory capture? Is there a difference or do they just go hand in hand?
> The attempt by auto manufacturers to cut out the dealer would only result in higher prices and less customer service to the public,” he said. “The new car dealer is the customer’s advocate when it comes to warranty work and service on a manufacturer’s product, and this bill will protect that

So this is the reason given in the article, but what are good reasons, if any, to prevent direct-to-customer sales? I haven't bought a new car yet, but seems like every anecdotal story I get of people buying cars is always that their dealership tried to push every useless feature or additional warranty that they could.

Same goes for maintenance, I have had many more terrible experiences with dealerships than local garages as the former tends to have a more captive customer base whereas the local garage is incentivized to actually keep you satisfied or you'll just go elsewhere.
From what I understood of the article, they're not introducing any "free analysis", they want to lift the ban on labs already doing these tests.
> "Show me language model with identity...",

ChatGPT seems to have a notion of self:

Myself (because I had the impression it just played a joke on me): "I have a personal question, does it happen that you make pranks or practical jokes on users?"

ChatGPT: "As an AI language model, I don't have the capability to initiate or participate in pranks or practical jokes. My purpose is to provide helpful and reliable information, as well as assist users in various tasks. If you have any concerns or questions, feel free to ask, and I'll do my best to assist you."

(here it clearly discusses of itself, its goal and limitations)

> "... which sources all is understanding and knowledge to its actions and interactions in the world (including learning language itself)"

Almost no human is capable of doing that, and if someone does, they probably won't look very human ;-)
I wish people wouldn't accept the vendor-driven personification of these systems.

I'm concerned that it distorts people's thinking about the nature of the system and the business relationship.
Living in Belltown (neighborhood of Seattle), we have a TON of addicts. Mostly alcohol. Most of the residents are great at functioning.

We also have the /other/ "addicts" - crackheads (et al, sic) who show up here (Belltown) and are not part of the contributing society.

The ones going to clubs/parties/raves when represented in a Venn diagram describing

addicts/over-use and those not going to clubs/parties/raves and societal contributions

is pretty dramatic.
What drugs are we talking about? I would say someone who has used a drug in the past year is a user, someone who compulsively uses or would experience withdrawal if they stopped using is an addict.

I am not sure where you are getting these 'vast majority' numbers from - if you look at publicly available stats it is evidence that there is a significant proportion of people who are addicted. Look at cocaine - 4.8 million American users in last year, 1.4 million addicts - ~30% [0]. For opioids, the proportion who is addicts is even higher. We explicitly are not discussing tobacco/weed/alcohol, which have much higher non-addict uses.

I guess I didn't count anabolic steroids, I am not sure what 'addiction' really means in that context.

[0]: https://nida.nih.gov/publications/research-reports/cocaine/w...
I feel like people have been saying this about Go for a while and I don't see how it's true. The only real idioms out of Go are explicit error handling, types implementing interfaces, and the formatter. Otherwise, you can kinda do whatever you want in Go, and I have yet to feel at home reading a Go codebase.
Sounds reasonable. Here in NL, everyone must get a new smart meter that has a separate counter for delivering back to the grid. IIRC, the grid company replaced it free of cost, if done before some date.

The old ones (Ferraris meter?) just ran backwards, which is attractive of course. Our new meter has a P1 port which can integrate into eg. Home Assistant
> It’s definitely not the merchant’s responsibility to catch when your card changes.

Well seen that the tech exists, they're not just leaving money on the table by not using it (to update card that just expired) but they're also burning money on pointless support, support which wouldn't need to happen in the first place had they updated the month/year of expiration.

I mean: we're literally talking about credit cards often keeping the exact same owner name, the very same number and just having their MM/YY of expiration changed. It's not rocket science to update in a DB after an API call. And what's the catch on at least trying? If it works, you saved everybody time. If it doesn't work, it's not worse than your current "solution".

I understand politicians and lawyer-minded people saying: "technically it's not our responsibility" but they're wasting everybody's time, leaving money on the table and wasting money on support.

It's just poor judgment to react like that instead of thinking as to how life could be made better for everybody, starting with your paying customers (which, btw, are the reason you exist).