skysight-inc/HackerNews huggingface dataset:
No, judging from the Disclosure Timeline at the very bottom, it appears the lengthy remediation is due to ServiceNow dragging their feet. Took them over a month, plus a followup email, just to get them to respond to the initial report.
Loads of proposals, all missing the obvious: solve poverty. Portugal and south Europe in general suffer greatly from it. Stats make the region look good on paper but reality is very different.
Anything run-time has to come from JavaScript.

TypeScript is syntactic expansion layer over JavaScript.

"C preprocessor, please give me arrays that know how big they are at run-time. Oh, and access to the calling function's local variables!"

"Common Lisp defmacro, give me continuations usable anywhere!"

A macro layer can bring you the pie in the sky, but only (1) at some nonozero cost and (2) with additional representations that are not understood by regular code that is not in that framework.

Suppose a TypeScript type object is attached to every run-time object created in TypeScript. Firstly, those objects become more bloated and expensive to construct. [Edit: not really: all objects of the same type can have a pointer to the same meta-data which is created once]. They will need run-time support in their execution environment in order to have those type representations. Objects not created by TypeScript-generated code will not have anything like that attached to them, so places in the system where the two domains interoperate won't be able to rely on reflection; it will need a fallback for objects that don't do reflection.

I think serialization can be done without reflection. Because at the time when the static language is being processed, you could annotate certain types as requiring serialization. Then for those types, TypeScript would generate the marshaling routines.

Generating marshaling stubs from an interface language has been done in the C world for decades. It doesn't require any run-time types. The generated marshaling stubs just know how to walk objects of the type that they handle, and that's it.

It looks like in TypeScript, serialization is just punted to JSON, which is inadequate because when we are deserializing, we want to check that the JSON blob has a type and shape compatible with the TypeScript-level type. (Or even for that that type to be inferred in some way.) There are some libraries that try to do something in this direction like ts-serializer.

I think it's something you really want in TypeScript itself.

Basically round up the half-dozen or so use cases for reflection, and provide for all of them somehow without actual reflection. It's an X/Y problem. People really want to do Y (e.g. serialization), and believe that they must first solve X (have metadata in objects for reflection).
Talk about burying the lede, 11 years ago they privatized their drug oversight operation and cut funding by over 80%. Gee, I wonder if that could have an impact?

> After years of economic crisis, Portugal decentralized its drug oversight operation in 2012. A funding drop from 76 million euros ($82.7 million) to 16 million euros ($17.4 million) forced Portugal’s main institution to outsource work previously done by the state to nonprofit groups, including the street teams that engage with people who use drugs.
> Who? Be specific. This displacement is happening rapidly, it should be easy to point out.

I just freakin said who. That is very specific. What are you looking for me to name Jessica, former content lead at AcmeCorp?

> How many truck drivers have been laid off from this technology which hasn't been deployed widely / left the experimentation phase?

None, yet.

But you are missing my point. This stuff is beginning to happen. Much has yet to happen. You are betting that it won't happen, and I am saying you are wrong. Very little of this will empower people where they are, at the lowest rungs of various corporate ladders. But it will empower their taskmasters, who will happily shed them with the same bullshit excuses they've always given: "Not my problem" and "Sorry, it's just business."

Since you're so damn optimistic about the future, what are these jobs that these people will be retraining to? That don't exist yet. Please share just a little bit of your visionary insight.
Because of quite possibly the dumbest anecdote I've ever heard? I'm not sure morons anonymous has much influence in the real world.
In the UK polytechnics used to fulfill this role and they did it well as long as the sector was well funded. Once the cost accountancy rot set-in under Thatcher every higher education institution became desperate to be re-classified as a university for fear of losing custom from the new breed of students with loans to spend. As I said, once you tie education to the job market the ideal is lost and there is no place in the world for Literature, Philosophy, Sociology, History etc.
The problem with complex languages is that while you can choose to eschew complexity in the code you write, you very often have to deal with the complexity in the libraries you use. So in languages like Rust and C++ you tend to have a high degree of complexity (at least by way of high degrees of abstraction) in the standard library and the wider ecosystem because abstraction (and thus complexity) are valued and idiomatic in their respective ecosystems—it makes it very hard to opt out of. For example, at least for a good while, there wasn’t a great JSON parser library except serde which is immensely complex and I would spend a lot of time troubleshooting errors in the macro expansions for things that would Just Work in Go’s encoding/json (of course, there are plenty of legitimate grievances with encoding/json, but these are mostly orthogonal to the simplicity/complexity discussion).
I never understood why people say this is an obvious no-no security wise.

How is installing something from Homebrew any more secure?
100%, as I was reading the article I was remembering the different types of concurrency mechanisms I've used and I think it's helpful to have something like goroutines as a first-class language feature but it's not new in any way.

When it comes to concurrency I think it's good to go through the curriculum:

- main loop + interrupt handler

- processes (fork)

- multi-core concerns

- threads (now is a good time to learn about mutex, semaphore, critical section)

- lightweight threads (fiber, coroutines, green threads): learn how they are different

- async/await statemachines written by the compiler

Ok, now we have the background info to make wise choices and call things by their generalized names to avoid holy wars.
The average rate of organic content on Facebook is 5%, and has steadily increased the amount of paid content that users get on their feeds compared to organic content.

Feel free to provide a source that show a decrease in advertisements on Facebook.
When I was a teenager, I guess I spent some time like that, wrangling the GNU userland into coherence on Gentoo. But after a couple years, I came out the other side, and that's why I chose to run niche distros as my main OS. I knew that whatever was disagreeable, I could swap out for something else. I knew that whatever was missing, I could package it myself.

And at some point, it really did stop being a problem. One of my biggest frustrations at work, where my only choices currently are macOS and Windows, is that they can't seem to provide me a workstation that functions reliably and predictably compared to what I've gotten used to on my 'fav niche distro'. It boggles my mind how unstable contemporary proprietary desktops are, especially when you tack on the meddling of corporate IT with obscure policy tweaks and a host of corporate spyware. I've even found hardware compatibility and integration pretty lacking on both systems compared to NixOS.
> Something I never really noticed before is that we only use our calendars to look forward in time, never to reflect on things that happened in the past.

This is called a "diary" and is as old as humankind.

I use a calendar to track workout sessions. All in the past.
"Barcelona" is the code name of the Threads project. The Threads Android app is called "com.instagram.barcelona".
> don't see all of the free advertising being given to those they hate the most

This generally only washes where either the subject matter is obscure, or where the subject has a message that they want to broadcast for free (you could argue that Donald Trump has done well out of the latter principle; the media spent years effectively promoting his nonsense because it got more clicks than normal politics).

However, I can guarantee you that everyone who reads The Atlantic is well aware of the existence of both Twitter and Elon Musk, so the "free advertising" thing doesn't really make much sense here.
I like the little joke at the very end.
Apple plans a slow, appointment-only rollout of Vision Pro
Ok.

I don't like React.
That sounds like SF's outsourcing to nonprofits.
This is a big deal. The study concludes that it makes you twice as likely to die from CVD. Normally it’s not a big deal when the chance of death doubles, because it normally starts at a tiny percent, but CVD is one of the leading causes of death!
That's a mistake. Imagine you're instead a carpenter.

You're being called up because the problem is specialized.

Now as a carpenter, you go to the container store and then go back to your shop to dismantle prebuilt products and glue a bunch of different pieces from different containers together and present the Frankenstein cabinet as the product back to the customer. Also, you're on the hook for maintaining it.

Is it faster then just doing it yourself? Higher quality? Cheaper? Maybe...

Competency is the key skill here - someone could claim they're competent in both the NIH and framework way and they choose frameworks because of their vast power of assessments but statistically speaking, they're probably just choosing the frameworks because they lack the competency to DIY and are Dunning Krugering themselves.

A lot of this depends on the types of jobs you decide to take on. The boring ones are pretty easy to do with frameworks but the interesting ones are wildly unclear whether you're saving or wasting time by choosing one path over another especially if you're interested in the product's reliability and longevity.

The amalgamation of frameworks approach makes long term upgrading somewhere between very expensive and impossible. Dependencies, schemas, templating, test syntax can all change in totally incompatible ways as your version gets abandoned and you get locked in to whatever was hot 10 years ago. So much for security patches.

Eventually you'll end up forking the dependencies you once used to save you time and then patch them yourself - code ages way quicker with (most) frameworks.
>in suid binaries; like ping

ping hasn't required suid in ages, there's net.ipv4.ping_group_range and CAP_NET_RAW.
Terrible idea. Weirdo lawyers have done more for poor and marginalized than silk stocking lawyers ever could. You reduce lawyers to divorces and traffic tickets and you cut off access to justice for the masses.
Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow.

What an abomination of something seemingly so simple made into something so horrendously complex and bloated.

I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users.

It behaves like it is constantly broken.

People talk shit about it all day, every day.

Maybe one day, some time a long time ago they had a good product, and that's how it got embedded all over the place, but now, what a pile of junk!
Precisely. I had a friend who downloaded an app, but it was 2kb over the limit that he prefers to have all his apps! He promptly deleted it and left a scathing review. Naturally this picked up and a few other users refused to download the app.
The goal is not to slightly reduce emissions, it’s to get to net-zero emissions by midcentury, while preserving our ability to have modern conveniences like personal cars. Hybrids don’t accomplish the latter.
It's still majority consent in terms of voting. The point about depth of support is to point out that just because >70% of people support a given item on polls does not mean it'll translate into action at the ballot box. To re-use the earlier example: most Democrats would take a candidate that's pro-gun, pro-choice, in favor of higher marginal tax rate over a pro-life, anti-tax candidate that supports tougher gun control. The depth of support for gun-control is shallower than the depth of support for other issues. Conversely, most anti-gun-control voters will never support a pro-gun-control candidate even if they agree with them on many other issues - they'd prefer an anti-gun-control candidate even if they diverge on other issues. Depth of support is high. Thus, gun-control doesn't get passed because plenty of people who would prefer gun control still consent to anti-gun-control candidates because they prioritize other issues.

The idea is that claiming consent of the majority doesn't exist because initiatives that score high on polls don't get implemented by government is highly naive. People can, and do, consent to policy they don't agree with if it's in pursuit of other things they value more deeply.
That's a very big if, considering how many times they've slipped on process nodes in the last decade
Related: "Write libraries, not frameworks," which goes more into depth about how frameworks establish precisely such a "seam" and the responsibilities it entails.

https://www.brandons.me/blog/libraries-not-frameworks
Every time I hear “our experts’ code can look like our beginners’ code” I cringe, because experts’ time is much more valuable and they should be communicating concisely. A beginner’s job is to become an expert.
Feels like a cost of compliance to standards issue. The food labelling laws are pretty clear. Maybe vegan produce hasn't tooled up to the same extent mass produced mainstream food supply chains and manufacturing have.

It's cost. Establishment and ongoing, in the past when communicating with food manufacturers over why they don't run separated production lines (instead they label everything they do " may contain traces of") that's what they said, aside from duplication of plant, test and labelling and compliance process cost was high.

So, almost no chocolate suppliers have nut free, despite the entire process chain from bean to conching being nut free: all the production processes downstream, are nut risky.

Vegan "in the style/taste of" faux foods are often highly processed. But still, you would think milk and eggs were not going to be in any core vegan process chain. I'm guessing the culprits are not solely vegan factories, because of outsourcing at scale (except those places are the ones tooled up to do the compliance chain, so maybe it's the small batch producer who does both vegan and non vegan to get the market)

I'm not vegan but as a partner of somebody with severe anaphylaxis risk, I hope this gets fixed fast. Food safety is important.
It is dubious that the article does not mention structured concurrency even once, despite it being the model du jour
I don't tend to keep the chat logs, as the amount of them gets unwieldy very quickly. But examples of things I've done with it that are useful:

I wanted to create a web app, something I haven't done in a very long time. Just a simple throwaway back-of-the napkin app for personal use. I described what I wanted it to do, and asked what might be a good frontend/backend. It listed a few, I narrowed it down even more. Ended up deciding on flask/quasar.

After helping me setup VS Code with the proper extensions for fancy editing, and guiding me through the basic quasar/flask setup, it then was able to help me immensely creating a basic login page for the app. Then it easily integrated openAI api into it with all the proper quasar sliders for tokens/temperature/etc. Then it created a pretty good CSS template for the app as well, and a color scheme that I was able to describe as "something on adobe color that is professional and x and x (friendly, warm, whatever you want to put in)". Everything worked flawlessly with very little fuss, and I'd never used flask or quasar before in my life. You can also delve VERY deep into how to make the app more secure, as I did for fun one evening even though it's not going to be internet facing.

Another thing I did was go over some pfSense documentation with it. I had some clarifying questions about HAProxy, as well as setting up Acme Certificates with my specific DNS provider. It was extremely helpful with both. It also taught me about nitty gritty settings in the Unbound DNS resolver in a way that's much more informative than the documentation, and helped me set up some internal domains for pihole, xen orchestra, etc with certificates. Also helped me separate out my networks (IoT, Guest network, etc), and taught me about Avahi to access my hue lights through mDNS.These are things I always wanted to do, I just never felt like going down a google rabbit hole getting mostly the wrong answers.

Last example I'll give is it was able to help me set up docker-compose plex within portainer that then uses my nvidia GPU for acceleration. The only thing I had to change from the instructions it gave was to get updated nvidia driver #s and I grabbed the latest docker-compose file. I'd never used portainer in my life before, nor do I have experience with nvidia drivers within linux, and I feel like learning it was many times faster being able to ask a chatbot question vs trying to google everything. Granted I still had to RTFM for the basics, as everyone should always do.

I think perhaps my use cases are a bit more "basic" than many HN users. Like I said I'm not asking it to do problems most humans wouldn't be able to do, as I know it isn't quite there yet. But for things like XCP-ng, portainer, linux scripts, learning software you've never used before, or even just framing a problem I'm having in steps I hadn't thought of it's been invaluable to me. For me it's like documentation you can ask clarifying questions to. And almost none of the things I've asked it would work at all if it were wrong, I would know immediately.
> solve poverty

How?
Nothing gets close to GPT 3.5 and 4 if you need to send and receive prompts in languages other than English.

Sadly, that niche is still better served by openAI.
$4,500 per charger+install isn't too bad, considering the material and labor costs.
The point that flew over your head is every one wants one spice rack. There is no scale, no one wants a 1km long spice rack or 10,000 small ones either. That you can just buy a ready made one is even more to the authors point. Most software shouldnt exist! Why even build a spice rack, indeed!
Indeed. They slashed funding to successful parts of the strategy and now claim the strategy failed. A convenient narrative for politicians, but hardly truth.
There's no spaces
at the end of the
line. Every thing
lines up exactly.
9-Slice Scaling
Are you starting a being pool for when it dies?

I'm putting 25 cents on March 7, 2027.
The only "exec" to placate is Linda Yaccarino, who's probably three sheets to the wind at Smuggler's by now.
Has anyone here on HN actually "ordered" such fake reviews?

Or were maybe involved in their creation.

I kinda get it... The pressure for a perfect 5 stars is immensive when every single competitor has it.
The British government started a war to force trade fought for three years, and enforced it militarily. It is not an interesting equivalent to point to minor, private, third party, unrelated to the government, that engaged in trade after the war, and use that to assign blame to a different country.
I've been on Twitter for 16 years (though since the ascension of Naughty Old Mr Car, it's been a placeholder account; I'd quite like to hold onto the username in case he gets bored and divests, but I don't actively use it anymore). Granted, for the first few years, say until the early tens, it was extremely unreliable, but since then it was mostly fairly solid, and any prolonged Twitter downtime was big news.

Over the last year, well, it's had... more downtime.
Drugs should be sold at the grocery store, no question asked. They should be cheap too. That would solve the drug problem.
By that very analogy, using frameworks for building a service is absurd.

A framework you would use in order to pump out a ton of services quickly, just like a factory in this case. They'd be similar, with similar functionality and such, but you can produce them quickly and upgrade things across all of them fast. They wouldn't by optimal, but time from development to launch would be quicker.

But most startups and companies start with one web service, where at that point you don't really need a framework. What you need instead is careful deliberation and implementation, together with development speed and also enough proper architecture to continue to facilitate development speed in the future, but not too much as to over-engineer things. A balance if you will.

But unless your business/startup is about pumping out 100s of websites, a framework will hardly help you achieve your goal faster.
https://www.productreview.com.au/ is the only site I've ever seen that does a good job at user reviews. Each review has to be accompanied by a verifiable receipt.

Here's their operating model, which sounds like a mix of paid brand manager subscriptions and advertising:
https://support.productreview.com.au/hc/en-us/articles/36000...
> Porto’s police have increased patrols to drug-plagued neighborhoods. But given existing laws, there’s only so much they can do. On a recent afternoon, an emaciated man in striped pants sleeping in front of a state-funded drug-use center awoke to a patrol of four officers. He sat up, then defiantly began assembling his crack pipe. Officers walked on, shaking their heads.

What were they supposed to in a different country? Arrest the guy, spend money putting him in jail, wait til he gets back out and repeat?
"Just a rich guy" was probably a little too harsh on my part.

The insights he offer do not merit the attention they receive was more the message that I was trying to get across.
Meta’s vision for Threads is more mega-mall than public square
All sorts of crap like facial recognition or object identification.

Every bit of ML you can offload on your clients is one you don't have to pay for.
In my experience, juniors almost never shout that. They are still living within the managed "website in 0 lines of code!" world the framework purports to provide.

And mids just think that's what the job is and nothing to do about it. It's not 1985 any more and 1985s tools aren't enough to write a cloud db backed ios app.

It's the seniors, and the good ones at all levels even if they aren't good at it yet, who object to complexity on a pure lack of elegance basis. They value elegant solutions and complexity is usually the ugly brute force solution that's merely complex when it's claiming to be sophisticated.

Even if they don't have any idea what to do differently, they just know that something surely can't be sensible just on the face of it. I would hope everyone at least gets the ancient "hello world by different levels of programmer" joke, and can see when it starts happening for real around them.
Wish I could have upvoted this comment a couple of more times.
How the FCC Shields Cellphone Companies from Safety Concerns (2022)
>Many Florida residents have their second set of pipes running through their attics

When/if I remodel my bathrooms I have to have this done due to my existing galvanized steel pipes being horrendously brittle and filled with 70 years of gunk. Ah, the joys of a house built in the 1950s in Florida.