skysight-inc/HackerNews huggingface dataset:
> Cisco and researchers have known since last week that a ransomware crime syndicate called Akira was gaining access to devices through password spraying and brute-forcing...

Ignoring just how often security holes seem to be found in Cisco equipment... this sort of stuff is a darn good argument for creative renaming of all root & admin accounts. A wide variety of attacks are impotent if the baddies don't know that (examples) your firm renames 'root' to 'tap4' and 'admin' to 'peon2' everywhere.
> how often do people choose a phone based on the quality of the voice assistant?

Must be a fair few for the amount of money Apple makes on every new release.
And congress has the power to define weight and measures =)
I don't think so. Ever since my household started putting food waste in the ward waste bin instead of the trash bin, our trash bin has been mostly empty on any given week. A few scraps of single-use plastics that can't be recycled,

Of course, that's assuming that your recycling isn't also going into the landfill, which isn't a great assumption.
"I could build Facebook in a weekend."
It happened in the 60's. Manifesting in the 80's is not surprising.
I'd guess "huge space heater" would certainly have to exceed 250 MW (that's at least 100,000 kettles).

IIRC that'd equal vaporizing water at 125 kg/s, doable but that's 10,800 m³ water per day.

Aaaand, in order to get the kind of contract from a power utility where they pay you to turn off, you'd probably need to operate a decent fraction of the day, say 25 %.

So you'd first need to build this thing and then you'd need to draw 1.5 GWh of electricity per day.

At 50 USD/MWh, you'd pay USD 27 million a year for the electricity to operate.

Not sure this'll work out financially.
Having neighbors report violations to authorities is still externalizing the problem.
Isn't NAT the only real difference? In IPv6 you get NDP instead of ARP, but you generally still need DHCPv6 for many kinds of networks. So you have IPv4 + ARP + DHCP + NAT, vs IPv6 + NDP + DHCPv6. Not that much of a difference. Especially since, for a household user, there is actually pretty little difference between NAT and just a stateful firewall.
That is a very hot take.

Seems great to me.

Even better is not have downtime obviously
What about lithium iron phosphate, lithium titanate and sodium ion batteries? Sodium ion batteries are brand new and being sold commercially right now.
Reading this is really making me sigh. What is C++? A language used to make applications or a language for the sake of the language?

It often feels like math professors discussing math for the fun of it, not for solving practical problems.
If my firewall failed then the packet won't reach my 192.168.0.1 DMZ server as it will likely never be translated from my real 12.34.56.78 IP address (as the translation would be part of that stateful firewall)

Sure there are exceptions, but you are massively reducing your risk by not having your toaster having a public address by default and having something actively have to translate it to a public address
Related:

How to learn Emacs - https://news.ycombinator.com/item?id=3821531 - April 2012 (7 comments)
There was no lost productivity due to COVID in software other than than some short term pain. Doesn’t make up 5 years of nothing
Luis from Fauna here - confirming that we are working with partners like Grafbase, who can provide a fully featured GraphQL experience for use with Fauna. We are working with the Grafbase team to help them integrate with our new version of FQL and take advantage of the declarative schema support we have added to Fauna. Get in touch with us if you want to discuss more. -L
Some security problems are in fact UX problems. Many of the fine points of this paper boil down to the fact that MUAs do not necessarily bring it to the user's prompt attention when messages are not DKIM authenticated. Some of these UI choices are, based on my personal experience, consequences of the fact that many large customers want features from email providers that are impossible to reconcile with strong authentication (i.e. they want to loop all their mail through some fourth-party system that is a piece of crap).

If you suspect you might have received an email from Anthony Blinken, I suggest checking the DKIM signature.
Without a robust public health infrastructure, I'm guessing any effort to eliminate malaria from sub-Saharan Africa will fail badly. In the southern USA for example, the mosquitos that carry malaria are fairly common, but malaria outbreaks haven't happened since 1950 - malarial cases in the USA are typically international traveller-borne and health care providers are required by law to immediately report all malaria cases to the CDC - where the return of endemic malaria to the USA is a constant concern:

https://www.cdc.gov/malaria/about/activities.html

Incidentally this vaccine doesn't look very effective in terms of preventing malarial cases in the vast majority of susceptible people. Though it may reduce childhood mortality, alone it won't do much if anything to eliminate the disease.

> " The vaccine reduced the risk of clinical malaria by 56 percent in children aged 5 to 17 months and by 31 percent in those aged 6 to 12 weeks - although as in previous trials, this protection declined after a year."
Let's be real - us paying them $4000 per year isn't going to make them money.

Tricking your parents into paying for things that they don't even need - that's where the money is.

Selling 20 $2mil cars per years isn't as valuable as selling 1mil "cheap" $700 iPhones per year.
IIRC FreeBSD has a quite outdated version of pf, that hasn't been synced with OpenBSD upstream in quite a while.

I like FreeBSD for the breadth of features, but in some cases it feels like they've pushed it to an extreme, a bit of a kitchen sink. I don't think you need three different firewalls, a single good one would do a better job.
Try speeding it up and slowing it down: it's not guitar hero.

Took me a few seconds.

Also, on mobile you can mega-tap.
Wow the anti apple crowd out in full force today!

“Wah Siri sucks” “wahh 5 years”

The iPhone was in development for like 8 years before it saw the light of day and everyone shat all over it and it still redefined mobile phones. Apples Silicon was in development for like 15 years and now laptop makers don’t even have a leg to stand on.

Apple isn’t going to release a half cocked ai project to the world. Apple isn’t Google who hasn’t released anything of note in like 10+ years. They aren’t Meta pouring billions into a metaverse no one wants.
Thanks! We've changed to that from https://jalopnik.com/safety-inspector-fired-for-finding-too-....

Submitters: "Please submit the original source. If a post reports on something found on another site, submit the latter." - https://news.ycombinator.com/newsguidelines.html
I understand SIO is better and Fujinet can do things on the Atari that are not possible on the C64, and can’t pretend to be a printer or modem because the 64 only used the disk port for disks.

OTOH, while autobooting or running unmodified software is not an option, nothing prevents the modification of existing software to run with the Fujinet’s extra features. The very basic stuff, the ability to load software off a disk image, is there.
Even having to enter my email address is too much. You sent it to me, you need a two click unsubscribe at worst. Otherwise it’s spam.
As you're typing in the search term, you're also given a "Name contains <term>" option in the dropdown if you're strictly searching by filename
My favorite would be modernCSV since I look at CSVs all day

Also I found this cool brew bash function i thought i share this here

brewpackages (){
brew list --formula | xargs -n1 -P8 -I {} \
sh -c "brew info {} | egrep '[0-9]* files, ' | sed 's/^.[0-9] files, \(.\)).$/{} \1/'" | \
sort -h -r -k2 - | column -t
}

This allows you to view how much space each package is taking
Location: Durham/Raleigh, NC, USA

Remote: Yes, but hybrid preferred

Willing to relocate: No

Technologies: Java, Clojure, Type/JavaScript, Python, React

Résumé/CV: https://u.pcloud.link/publink/show?code=XZsqE3VZDiwQuPmD18hO...

LinkedIn: https://www.linkedin.com/in/dmanila/

Email: danielr {at} manilas {dot} net
Apple's $200B valuation wipeout may foreshadow a post-US tech future
I use MacPorts, but I recall hearing the alternative Homebrew Emacs packages apply lots of patches onto the Emacs codebase itself and may cause stability issues. Users should be aware of this before deciding to use emacs-plus over the regular emacs package on Homebrew.

So rather than the install section being "out of date", I would say it is more conservative and may reduce the probability of users' first Emacs experience being buggy.
How?

Software has the same problems. Usually the core of the problem is the perception that training costs too much and so problems from bad practice are encouraged until there is a class action lawsuit. I have seen this occur many times in my career whether it’s due to missing security, accessibility, or reporting.
What would a real competitor? The gap is closing, has closed in any meaningful way. I use a phone with a 7nm processor and won't be upgrading anytime soon.
It's also a saying because it's trueeee

(See: Superfund sites, this event in question, climate change, highways and car based infrastructure, etc...)
> And this is just one example of an incompatibility, there are many more

Such as? If you could provide 5-10 of your many examples and why you think that Bun's approach doesn't solve them it would be very helpful.
> Apple worked on the project that became the Vision Pro for 16 years

So during Steve Jobs tenure? Can I conclude - it got eliminated from his biography on secrecy grounds?
You're expecting incremental improvements.

Apple sometimes does incremental improvements, and sometimes does an entirely new release.

Five years to improve? Sure, probably could've done a lot. Five years to start completely new? Not enough time to make it land with a bang compared to the existing Siri.
You've got a very narrow view that I'd encourage you to be more open-minded about

No abstraction is perfect. Every abstraction, when encountered by a user, requires them to ask "what does this do?", because they don't have the implementation in front of their eyes

This may be an easy question to answer- maybe it maps very obviously to a pattern or domain concept they already know, or maybe they've seen this exact abstraction before and just have to recall it

It may be slightly harder- a new but well-documented concept, or a concept that's intuitive but complex, or a concept that's simple but poorly-named

Or it may be very hard- a badly-designed abstraction, or one that's impossible to understand without understanding the entire system

But the simplest, most elegant, most intuitive abstraction in the world has nonzero cognitive cost. We abstract despite the cost, when that cost is smaller than the cost of not abstracting.
When I click on the page it returns 404
Actually, if the router supports RDNSS (DNS info in RA), SLAAC is sufficient for household users -- no need for DHCPv6.
Related ongoing thread:

The thinking path - https://news.ycombinator.com/item?id=37426107 - Sept 2023 (25 comments)
I agree that should be the goal.
So this guy is interfering with a US ally during a war. This is very dubious - does it stray into treasonable? Is he now a foreign agent?

Or do we just capitulate, admit that US foreign policy is entirely the plaything of the ultra rich, who can do as they like with impunity?

I'm honestly stumped as to which way this will go - arrested as a foreign agent, or immune by virtue of wealth.
Bagging your own shopping? The horror, the horror!
I look at it from the "AI won't replace jobs, it will augment workers" angle. It can't and shouldn't replace meaningful human interaction. But it can be used to help facilitate them.

If experience has taught me anything, it's that all tech optimizes for the worst possible application. Experience has also taught me that you can't save everyone, especially from an ideology. But we can try to leverage tech to save the ones that want saving. It's the best anyone can do.
Of course not. It's extremely valuable.
Apple can afford to experiment and waste their money in the millions, because they are profitable in the billions. AI doesn't affect Apple's core central products at all. It's complementary.

Unlike the majority of so-called ChatGPT-wrapper and VC fuelled LLM companies burning millions a day on training and scrambling to compete with $0 on-device AI models.

Apple does not need to compete with OpenAI (Although Apple has the hardware and software to do so) and can do so at any time. Google is the one that needs to. So all of the "But but but Siri", "Siri is garbage", "Apple isn't doing anything with Siri", etc isn't even the point.

On-device LLMs or AI is the thing that matters to Apple and Siri will likely transition to a hybrid offline / online system eventually. Apple is in no rush to compete.
> It's even amazing that mRNA vaccines actually made it to the market, and if it hadn't been for the pandemic, there's a good chance that it would be another 15 years before they do, and this mRNA vaccination tech has been brewing since the 90s, I think?

I’m by no means an anti-vaxxer and believe that even if the “vaccines” did reduce the severity and number of deaths it was a win. But, I think it was a disservice to call something a vaccine that didn’t seem to reduce the chance of you catching it, the effects of the vaccine completely disappeared within 6-9 months and it didn’t keep you from catching Covid.

We wouldn’t accept that definition for any of the other vaccines like Smallpox, measles, etc
I don’t know what I would do without sieve, I use it to manage my mailing list subscriptions, eg move to folders, mark emails from specific chatty users as read, etc.

It automates a lot of manual cruft and I’m endlessly thankful for it.

I do wish it was more widely supported, and I try to do my part to encourage adoption (I maintain several sieve related packages for Arch Linux).
>but when it comes to malfeasance, individuals responsible for the malfeasance.

How would that work? Individuals actors within corporations are already responsible for malfeasance. If you took it upon yourself to commit some crimes to boost your KPIs so you get a bigger bonus (eg. threatening employees with violence), being in a corporation isn't going to protect you. Even if you're the boss and you're telling your direct reports to commit crimes, that's still a crime.
Thank you so much, I'll make sure to have a closer look at ESPHome!
> Meanwhile, the only competitor(Google's Android) tracks everything you do everywhere.

The difference is you can avoid the tracking easily. This is a direct result of prioritizing user control. You can install apps without telling anybody, you can get your GPS location without telling anybody, and so on. Apple, by denying user control, makes privacy worse for users who care, and it will only get worse as Apple ramps up its services business.
Would definitely be more useful if you could actually materialize the eventual result into something that's visible at runtime.

If there was reflection, it would be useful to talk about class names, function names, etc, at compile time.
I was one of the moderators on Business Of Software. IIRC (its a long time ago) it was finally shuttered because:

-it was getting less and less popular

-the software that ran it was getting creaky

Also I suppose it was marketing for FogBugz. When Trello and StackOverflow took off, it wasn't really needed anymore.

Joel was a brilliant writer. I miss his insight.
Just plant trees. Not in monocultures
What does this mean except reinforce that ad-supported media are eventually corrupted by the advertisers?
I'm very familiar with the case, HiQ was found in violation because they also created bot accounts from which they consented into the user agreement. LinkedIn lost based on merits of the scraping of public data.
And also that this combination of generation+storage must be reasonably priced. That is at least somewhat competitive. Which for storage part is still quite suspect.
I currently own a 2012 VW GTI that I bought new 11 years ago. It has 123k miles and lots of modifications. I recently compiled a short list of both EVs and ICE vehicles to compare against it; the Toyota GR Corolla was on my list:

2023 Toyota GR Corolla AWD

3285 LBS / 300 HP = 10.9 LBS / HP

RANGE: 25 mpg * 13.2 gallons = 330 mi

PRICE: 44k

--------------------------------------------------

2012 VW MK6 GTI (K04) FWD

3000 LBS / 330 WHP = 9.1 LBS / WHP

RANGE: 23 mpg * 14.5 gallons = 333 mi

PRICE: < 30k (to buy a used GTI and install the same mods including labor)

--------------------------------------------------

I think the GR Corolla is great, but even after 11 years it's sadly not really a convincing upgrade for me. The GR Corolla is less powerful (in both torque and horsepower), it has one less cylinder and less displacement, it weighs more, it gets essentially the same mileage and has the same range, and it costs much more. The Corolla does have AWD though.

Here's the common "upgrade" for me:

2023 VW Golf R AWD

3400 LBS / 315 HP = 10.8 LBS / HP

RANGE: 28 mpg * 14.5 gallons = 406 mi

PRICE: 47k

--------------------------------------------------

Again, the Golf R is also great, but it's also less powerful and weighs more. It gets slightly better mileage than my current car, but costs even more than the GR Corolla.

Finding something new that is "better" out of the box than my 11 year old GTI would cost me at least 56k (Toyota GR Supra RWD) or if I want AWD then it's more like 66k (Audi RS3 AWD). If I want something electric and "better" then it's at least 89k (Tesla Model S). These prices are really high to begin with; when you add in dealer markups they become insane propositions. For your money you'll also have to contend with with touch screens, capacitive buttons, and a bunch of other tech that you don't want or need. The market seems to be in a pretty sad state for car guys. Unless something changes I'll be rebuilding my engine with forged internals and continuing to drive my GTI.
In C, nothing you have not parsed yet (what it to the right) is necessary for what you've already parsed (what lies to the left). (Necessary for type checking it or translating it.)

E.g. to call a function later in the file, you need a prior declaration. Or else, an implicit one (possibly wrong) will be assumed from the call itself.

This is not true in some C++ situations, like class declarations. In a class definition there can be functions with bodies. Those are inline functions. The functons can freely refer to each other in either direction. Type checking a class declaration therefore requires all of it to be parsed.

A one pass language is advantageous even if you're building a serious multi-pass compiler with optimization. This is because that exercise doesn't require an AST! Multi-pass doesn't mean AST.

Building an AST doesn't require just more memory, but more code and development work: more complexity in the code to build the abstraction and to traverse it. It's useful if you need to manipulate or analyze the program in ways that are closely related to the source language. If the language cannot be checked in one pass, you might need one; you wouldn't want to be doing the checking on an intermediate representation, where you've lost the relationship to the code. AST building can be reused for other purposes, like code formatting, refactoring, communicating with an IDE for code completion and whatnot.

If the only thing you're going to do with an AST is walk it up and down to do some checks, and then to generate code, and you do all that in an order that could have been done without the AST (like a bottom-up, left to right traversal), then it was kind of a waste to construct it; those checks and generation could have been done as the phrase structure rules were parsed.
$3 million a day is a billion per year in investment in R&D, which is pretty huge.

A good chunk of the S&P can’t compete with that, let alone startups.
There was a podcast with Joel and Jeff as they talked through the development of Stackoverflow. It seemed that Joel had hired Jeff to code it, and then discussed what it should be like, and then as Jeff had something to show they talked about where it would go.

Meanwhile, there is plenty of software physiology sprinkled all throughout. It was a fascinating podcast.

At least that's what I remember from it, I haven't listened to it since it came out, what... 15 years ago??

https://soundcloud.com/stack-exchange
We don't choose it based on that only because it doesn't work very well. Some technologies have to be magical and great to really take off.

For example, imagine if self-driving was everything that was ever promised. Sales of cars without it would plummet.
A World Renowned Chemist Wants to Suck Water, and Carbon, Out of the Air
Most important is to show on paper that your company is green. Other things don't matter
You’re right, it’s a bit more than the App Store.

AFAIK it also includes ads in the News app and apps that load articles from the News app (e.g. Stocks app).

Their fine print also mentions the TV app, but I haven’t seen ads there, so perhaps they’re referring to content suggestions.

This seems to be confirmed further down the line in the fine print when it says:

> We create segments to deliver personalized ads on the App Store, Apple News, and Stocks.

I’d say the main difference between Meta and Apple is that the latter doesn’t combine data from different source and only relies on their own data (what Apple calls “tracking”):

> Apple’s advertising platform does not track you, meaning that it does not link user or device data collected from our apps with user or device data collected from third parties for targeted advertising or advertising measurement purposes, and does not share user or device data with data brokers.
I think they are referring to another forum, but I guess they have their reasons for not naming it.
How does that dist compare to https://github.com/railwaycat/homebrew-emacsmacport ?
My learning path was 1) use vim/nvim for a couple years 2) use Doom Emacs. I was shocked at how intuitive Doom is for me. Of course not everyone would agree but it’s worth checking out
FOSS projects don't organize on HN, it's a public link aggregator.
That was just an engineering manager that all the press misrepresented as “head of AI” to make a more juicy story.
90%+ Coverage – Injected PrimeFaces JPA Lazy Data Model
How I achieved 90% test coverage. Real test coverage, not getters and setters. A difficult task for mainly-integration piece of software
Have you not had meetings where you bike shed the copy on a website?
Think about it like this:

Imagine a dastardly villain called up the CEO of Grindr and said, "I have a missible pointed at your datacenter. It's going to destroy either your server that has all of your source code, or the server that has all of your user data. Which one do you want to live?"

The CEO would nuke the code without a moment's hesitation. Almost all of the value of the company is in the service it provides and the data is has to enable that. The software is just a means to an end. They'd rewrite the app and move on with their lives.

Now compare that to, say, Ableton. While Ableton has user information for registration and stuff and would certainly be heartbroken to lose it, they would survive the loss. But their software is the company.
Yeah it sounds more like far-right racist