skysight-inc/HackerNews huggingface dataset:
> Isn't this kind of the norm in the industry?

It's a bit of a mix of both!

At the low level, we unfortunately can't do much more than hope that certain fundamental mathematical/computational complexity assumptions hold. For RSA, that's the assumption that factoring prime numbers is hard; for AES, it's the assumption that it's really hard to invert the pseudorandom permutation a given AES key and the algorithm description represents. We don't have formal proof for these assumptions (or really hopes) being true; some even suspect that these proofs are fundamentally impossible.

In that sense, these really are assumed secure until proven otherwise (by counterexample). And one such counterexample to RSA, Diffie-Hellman and its elliptic curve variants are certain quantum computing algorithms!

However, at the high level, there is the concept of security proofs. These are formal, and in a nutshell they (often) work by mapping a new/unknown problem or solution onto a known one we've already proven some property of.

An example of that would be "if the decisional Diffie-Hellman assumption holds, running protocol x is a secure way of deriving a session key, and a passive observer can't derive the key themselves with non-negligible probability/without improbable resource expenditure" (obviously the actual formalism is much more involved).

In that sense, at the high level, there are positive security proofs, and this is the kind of work that the researchers working on Signal do. It's much harder than clobbering together a few low-level cryptographic primitives and hoping that they'll stick securely, but it's the best approach we have!
A wormhole user would just transfer a directory, rather than a globbed list of files, but croc's multiple file transfer thing is a difference between the two tools.
> This does not constrain or determine the structure of the learned model

It absolutely does! A human can learn to perform an action by reading a manual. But an LLM is only trained to predict tokens, if you feed it a manual it will learn to recite the manual, it wont learn how to perform the actions in the manual.

This makes the training inherently flawed from a learning perspective, and that flaw is impossible to fix without moving past the token prediction way of training models.
I haven’t used Fossil but I have used gittrac, cvstrac in git mode. Cvstrac was what SQLite used before fossil, basically wiki and issue tracker built on top of SQLite, just add CVS, SVN or Git. A very small system compared to Gitea or other forges, but incredibly powerful thanks to SQL and very productive. Fossil is just the logical continuation and shares the same clarity of design and elegant implementation of SQLite.
Migrations are the best kind of work in the sysadmin space. It's where you get to do actual engineering work instead of doing boring maintenance tasks.

I'd do it, but not for the money they are offering unless they'd fully pay for hotel and food.
> 19% of students at schools that use filtering technology say they were even aware of students who were “outed” for LGBTQ+ as a result of the filtering.

> Around two-thirds of teachers surveyed said they’d seen students disciplined at school as a result of AI-powered monitoring software. Shockingly, 38% of teachers said they were even aware of a student who was contacted by law enforcement as a result of the monitoring.

So US schools are becoming bigoted panopticon prisons for real, yet kids still can't be kept safe from getting shot there? I don't know what that does to a child, but I'm sure it can't be good.
I paid for & use one of Tony's products (Xnapper for screenshots). It's good, but I reported a cropping bug, along with a replication bullet list and .gif screencast of me replicating the bug.

I got a response from a support person telling me to increase border padding beyond any reasonable aesthetic level. Aesthetics is the purpose of buying the product, otherwise non-aesthetic screenshots are built into macOS.

The support person asked if this error happens regularly... well replicate it for yourself using my screencast and that's your answer.

There was no bug fix. No point version update in the works. The last software update was 9 months ago on 15 Jan, 2023.

I feel like Tony's able to be a profitable solopreneur because he outsources all support to people who don't really care about the quality of the output.
Read John Taylor Gatto.
Apropos of nothing about the house, I’m confused why someone would use the “Antebellum era” to periodize something in New York?
Yes, I think this part is incredibly important to understand; it's similar to laws where the penalty is a fine; devastating for many people if they get caught, but for those with wealth, it's just the cost of business to do whatever they want.

Same with the idea of persistent surveillance -- it's only as good/useful as those who control the surveillance. In the case of authorities who are willing to abuse their power, surveillance does not make you more safe with these authorities, it just means that there is surveillance data they control, and it works for them, not not for you unless they decide to allow that.

Recordings get deleted "accidentally" all the time, and for most regulated businesses, at worst it's a small fine and some forms and mandatory training, none of which would make me feel particularly better if the "accidentally deleted" video was the only proof of the authority figures beating me to a pulp.

It's the same reason government backdoors can never be a tool "for the good guys"; once it's there, anyone able to pass a correct secret to the backdoor gets in, regardless of their intent or right to be.

Surveillance doesn't make us safer by default; it is a tool like any other, and it has it's legitimate uses and illegitimate uses. I don't feel safer if a stranger runs at me in an alley wielding a claw hammer just because I know that claw hammers are usually for construction work; I'm very much so aware that while a nail might survive the impact, my flesh and bone will not fare as well. Same with any surveillance -- I do not see how it's making _me_ safer, it's instead making someone else's job easier to monitor me, and I have no idea who that might be or why they're monitoring me.

This isn't to say it's always morally imperative wrong to have some sort of surveillance; I think a closed circuit recording system in a store is maybe frustrating, but I also don't have to go into that particular store I suppose. This does become a problem though once surveillance is everywhere, and even worse, when it's non-secured surveillance tech, so anyone might get at it.
I've tried it every so often over the years because I love what it was trying to do. Tragically, I think it might have been really successful if it just had optional GC/runtime from the beginning so it could stick to displacing C++ instead of competing with all the other fancy managed languages. Ultimately, C++ got a lot of ameliorating features to make it feel more like D and D had a lot of half-baked additions that made it feel more like C++.
Cattle don’t make good pets.
I found the "snacking" metaphor that I think I learned from here[1] really helped me understand why I would sometimes get stuck in these kinds of corners. Its reframing helped me do it less. I find I reach for snacking when I'm confronted with something that is hard, as a way of avoiding it.

[1] https://lethain.com/work-on-what-matters/
Consulting = Generative AI?
In the age of Large Language Models, large blobs will become the rule, not the exception. You’re not going to retrain models costing $100M to build from scratch because of the limitations of your SCM.
Good on you Tony. $45k monthly revenue is nothing to shake a stick at, and it seems you're quite happy with the lifestyle it's afforded you. An inspiration.
America Can’t Stop China’s Rise
I don't litter, even if nobody's watching.

Do you?
> You can not present your entire work as a single unit change to sub-system maintainers for inclusion in the mainline.

If we take away “this is how it’s historically done” or “because I know how these maintainers act and they would not accept it” - why not? From what principles is the Linux kernel special that standalone incremental units of change are inappropriate or undesirable?

> allows piecemeal selection of acceptable bits, and rejection of others

Sure, is a good thing, but doesn’t have much to do with git and can be done without rebasing.
A little while back I created a completely frontend-only (to the best of my knowledge) complex password generator in Codepen, maybe someone else can find it useful (or fork it and make it better).

https://codepen.io/pmarreck/pen/gOQxdqW

Here's an online demo of the zxcvbn library which makes a good-faith attempt to rule out passwords based on semantic/contextual evaluation:

https://lowe.github.io/tryzxcvbn/
Sesame Street Pinball Number Count [video]
> That prices were falling prior to deregulation and did not fall even faster after deregulation proves that deregulation wasn’t a factor.

Do you have a source for this? I've seen graphs for prices since ~1980, but my search-fu fails to find anything before that.
Probably this: https://news.ycombinator.com/item?id=37622415

Stupid reason to flag but there it is.
Struct generic C# is where it’s at
Just the questions show you may be on the right path. I'd look for emotional blocks inhibiting the implementation/coding work. In my aged experience virtually all procrastination is based in emotion.
Naive threads and async are for fundamentally different tasks:

Threads are for working in parallel, splitting a single compute-intensive tasks into many.

Async is for waiting in parallel for disk I/O results, database queries, network responses, etc.

The former are for doing more work. The latter is for efficiently waiting for others to do their work without using a bunch of excess thread context resources.

You don't reduce complexity by ignoring the difference between two quite distinct use cases. That's false simplicity.
> And yet, the lure of the perfect system is ever present

What evidence do you have that anyone has discovered this?

My impression is that highly productive people have will and focus, not a perfect project management system.
If I have learned anything in the last 20 years, it's that "The Chilling Effect" is very real. We're building nothing but a culture of fear. People come to expect and even desire to be watched.

A couple years ago, they installed cameras in our office ostensibly to "lock the doors in case of a gunman" shortly after a gunman had broken into a nearby office building. For that to even be remotely possible though, someone literally has to be constantly watching those cameras and the gunman has to be clearly brandishing the weapon. It's at best security theater and no one is watching, and at worst a horrible privacy violation. I see no upside. Talking to coworkers I was seemingly the only one with any concerns, and it feels like I'm taking crazy pills.
Unfortunately those two things often come together, in which the only bit of attention is a single negative comment. Social media sites (forums included) are optimized to reward criticism, no matter how small, instead of positivity.

Supposedly this is because upvotes are intended to replace comments like "Great!" or "I really like this, good job." But obviously that doesn't work out in reality.
Orama: Vector-capable search written in TypeScript
Cable started in the 1950s, just so you know about pre-dating cable TV. And for the first 30 years there were no cable-only stations. So you'd then know, there were ads on cable from the start, so I don't get why you have this "we were told there would be no ads", since you saw for thirty years there were ads on it.
Fair

Basically had no input on the AI side which I found odd given that (at least at the time) JR etc were suggesting that AI was going to be leading the future of U

Obviously we saw what happened so *shrug*
Honestly given the circumstances (emergency short term contract to get them back up) the 10/7 schedule doesn’t bother me that much. It’s also not clear to me that they’re only looking for one person.

The pay though… I don’t know what Sys Admins make but that seems absurdly low for what they want. 100-110/ hr seems like it would be a decent long term rate for the skill set, not the “all hands on deck super overtime emergency” one.

If it was my skillset I’d probably reach out to see if they were willing to move a lot on the rate and pass if they weren’t
D has 3 main compiler implementations. One, LDC, is based on LLVM: https://github.com/ldc-developers/ldc

GDC is based on GCC: https://github.com/D-Programming-GDC/gdc

DMD is stand-alone: https://github.com/dlang/dmd
I mean everyone needs to knows the law broadly, and the specific laws that may impact them.
AFAIK it doesn't support authentication for private relays
No.

A kilowatt is the instantaneous consumption of 1,000 watts.
Don't go through freelance sites, use Discord and Telegram 'market' communities. I also managed to get some success advertising my CAD skills on moneromarket.io (not affliated)
Offtopic - The man in the video is very agile on his feet. The trek looks dangerous and a single misstep can end up in a disaster. Respects for people who take such risks to study the forest ecosystem.
Amazingly done for one time payments as well. People like them.

Forever licenses are maybe more tolerable as well for self host and client side local applications. Could be good money combined with b2b pricing on top of it
I'm sorry but what? I think they are getting downvoted because they somehow turned a story of a guys venture into the business world into politics.
What I want is a "content condensor" tool. Something OSS and mathematically pure that can just take all the signal, drop the noise, and run some NLP to "condense" the information for me to effectively wade through it. Yes, there's a lot of bullshit content now, but there's also a lot of valid content. To be proficient today, we need to be able to swim effectively through the sea.

What's screwed up right now is we are currently forced to rely on 3rd-parties to filter for us, and they do so often poorly by just dropping content that's not "popular" which results in biased sampling, or worse, they select based on some kind of profit motive. Why can't we own our own "social media algorithm" or something? Why do I have to spend so much time consuming? Give me the IV drip, and filter out the unhealthy portion, please. Ideally, I should be able to trust the filter, too.
LLM are not doing well in chess. They do well when people play standard openings, but play against the LLM using an inexperienced player and the LLM will quickly start making illegal moves and be unable to play. There are many millions of pro chess games recorded on the internet, enough to cover all the openings and plenty of ways to go from there with some basic heuristics, but the more you diverge from those the more the LLM will break down since it doesn't understand the rules, it just memorized a lot of openings and some really primitive patterns to follow from there.
At this point Codeberg is running Forgejo not Gitea.
If I can make good use of hardware without resorting to async programming, I would prefer to. Green threads allow that.

For starters, debugging async stacktraces is a nightmare in many languages/runtimes.

There's also the cognitive load that async programming adds to humans.

And there's function coloring. It tends to spread and "infect" the codebase.

Also most languages have to duplicate their APIs to support both linear and async calls.

And then there's driver support. In languages I have seen, async support came with the requirement of specialized or at least adapted drivers.
They do exist for full time positions, assuming the position is less than ~$110k/year and does not pass exempt employee test. But it’s not maximum hours, it is just maximum 40 hours before the payrate has to be 1.5x the hourly rate.

I am wondering how they will avoid classifying this person as an employee when they are dictating work hours.
I have a home lab, but my family and friends use it so it's semi-production.

I write changes and thoughts in notes by date. That's my entire organization system.

Usually "installed X because it does Y, but it's $DESCRIPTIVE_WORDS_HERE". Occasionally something like "TODO: fix LDAP upgrade to move off of Debian 11"

If I want to remember when the server froze for seemingly no reason last year, I just search.

When did I install X app? Search.
It’s mostly a story of one worker producing and selling his work. That’s commerce not capitalism
Generally aligned that dumb CEOs are talking out of their asses, and covering CR exposures of their board.

But this line is pretty funny:
For the people who are responsible for those tasks — mainly women, who still handle at least 65% of unpaid domestic labor, not accounting for mental load

Not even accounting for mental load! Lol.
I presume they're trying to avoid having to worry about the lifetime, so they want something that owns its contents.
An arrow indicator for a twitter profile pic, a screen cap tool, and a wrapper around ChatGPT.

I kinda want to shoot myself. Largely useless products that made someone rich that rely on two other ecosystems. That’s the way I guess? I’m so not an entrepreneur.

Edit: apologies for using a suicide metaphor. I was being sarcastic. I’m in my 50s, really like my job, and am on a path to a good retirement. It just amazes me that there are so many opportunities for “pet rocks” in this era. Go get some if you know how! It I think it is safer to do things the old fashioned way and not rely on extreme luck and social media. But again, I’m old.
My 9 year old recently said "why are there only cameras outside the school. They should also put them in classrooms for when the teacher has to go to the bathroom"
Maybe I'm an optimist, but I'd like to think the downvotes are because the user showed in the space of a haiku that they understand neither capitalism nor communism.
Back in the day of low hanging fruits, stories like this were very common on HN. I think it’s harder for software developers to attain this kind of success today, and as a result they have developed an allergy to capitalism.
Dupe of <https://news.ycombinator.com/item?id=37606321> which was earlier by about 3 hours.
Oh, I thought they could also be scheduled at safepoints? Is that not in there yet, or not going in now?
> Bleeding edge research work should not be hindered by premature optimization concerns.

isn't the ingenuinity in doing things efficiently rather than just turning off the "scarce resources" setting? really i wish someone would explain to me what is the substance of "bleeding edge research" wherein nothing has been optimized except the flow of grant dollars from DoE/NSF to NVIDIA. like what is the research in "we burned O(1,000,000) compute core hours to train a model". i was recently in a discussion with ANL people about rick stevens next big idea - "the trillion parameter consortium" - where he plans to just commandeer aurora for a month. lol.
> From what principles is the Linux kernel special that standalone incremental units of change are inappropriate or undesirable?

Human limitations. You are simply better able to digest small incremental changes, instead of one big blob. This is not controversial and i don't understand why you would even raise this as a point.

> Sure, is a good thing, but doesn’t have much to do with git and can be done without rebasing.

It does have something to do with Git. Git has tools to facilitate it. And that is the case because Git was born out of Linux kernel development where it was the norm, and necessary.

If you want to use another tool to achieve the same result, nobody is stopping you. Or if you don't want to do it at all, that's fine too. But the simple fact of the matter is, you must do it today if you want to participate in kernel development.
Counterpoints:

1. Lost and found stations at events. People find stuff, people nearby don't claim it and often don't care if it's taken, but the finder still makes the effort to give it to lost and found or staff. Everytime I've done this, there've been a lot of unclaimed items. Each of those is evidence of, if not altruism, at least morality.

2. The vast majority of people don't shoplift, even at stores that put goods out front with no employees watching.

3. Charities, soup kitchens, anonymous donors.

We should be careful to not mistake cynicism as wisdom.
CVE scoring is parasocial activity. Hence so much drama.

Similarly to SemVer, the good-faith grader attempts to convey a sizeable blob of knowledge... by compressing it into a one-dimensional number. No matter the scoring formula, this step is lossy.

On the receiving end of this communication, all you can do with the score is add a huge grain of salt to it, then perhaps use to prioritize your review queue. You still must check the details, and work out a judgement tailored to your specific context. There's no other way.

There isn't a choice for the grader either, to skip the obscenely lossy scoring step. Just like with release versions, they must do it, as the audience consists of unbounded number of engineers; faithfully doing it saves mountains of time for everyone involved (present and future).

Just like with dependency upgrades, it's the consumer's choice to disregard CVE scores (version numbers), vulnDB entries (changelogs), or even existence itself of a vulnerability (upgrade). Likewise, it's their fault if consequences arise.

Viewed thusly, can be seen: anecdotes of pointwise drama will continue (even when the bulk of activity chugs along happily, efficiently and quietly) -- because at the core of it, CVE ID's and scores are just that, a communication tool. It mostly can't make strangers exercise care or spend effort more than they're willing to. It can optimise utility of attention that they do pay.
I read it and I don't know it's a story I would not want to have.

It feels like the good friend who always has some side hussle instead of just doing something useful.
I just think making a new language (and therefore new ecosystem) just to make slight changes to syntax is a total waste of time personally.

Unless you really do something profoundly different in terms of type system, memory management etc, you're just making a new thing to learn and an extra nuisance to use if its toolchain sucks. "JavaScript but looks kind of different" doesn't clear that bar for me. We learned that from CoffeeScript.

I don't have any problem with people making languages for fun but to me if you're asking people to deal with the hassle of a new language it better be for a good reason.
Open History
Is your plan to work for yourself/by yourself in the future? If so, this is overkill.

If you are planning on working for/with others, then all you're doing is becoming accustomed to the tools you'll need. So it's not overkill.
>>It soon turned out Merck had known of potential lethal side effects even before launching Vioxx in 1999, but had brushed all such disturbing tests under the rug.

>I don't trust this line.

If I recollect there were 'whistle blowers' from Merck who said this at one point. For those who have followed similar situations/drugs (like Prozac) it is well know that cherry picking studies or results by pharma is common place.
We need more spaces where young, passionate folks can get some encouragement and support. It can be really hard to find that, especially when you're inexperienced.
TikTok has matchmaking service for staff to play cupid for co-workers
Hmm, when I search racket compilation, the top option is to compile to bytecode. Since the term "bytecode" is used, I thought that was different from Chez's machine code generation?
Step away for a while, spend some time in nature, then come back to whatever it is you're doing with a clear mind.

Whenever I take a break, I usually return with a better sense of what is and isn't worth my time.
We're talking secondarily about education, which has been (to any purpose) abolished, and primarily about credulity, which is obviously a consequence, but more importantly a driver, of the abolition of education.