skysight-inc/HackerNews huggingface dataset:
No amount of automated tooling can account for subtle security issues, wrong understanding of the spec (something that happens easily especially to people new to the project, but also every time you work with an area of the code you're not familiar with), gotchas previously encountered, etc. There are things that humans (especially ones with a lot of experience) are good at catching that machines aren't.

If you do "review after merge" and you deploy after every merge, I think that's highly irresponsible. If you don't, then your first point still applies - there is a delay between the function being "complete" and being delivered.
See also https://news.ycombinator.com/item?id=38578872 -- 4 hours ago.
Another illustration of how bad defaults can persist forever
I agree usually “CI is running” means “human is sorta blocked waiting on this”* means the compute cost to run it reliably is probably negligible. Whether you this on the Github network or your own private cloud is then an orthogonal concern. Spot is silly although spot with immediate fallback to in demand might be a neat hack.

* Dependabot and AI PRs might be exceptions.
Unpopular Opinion?
What's an unpopular opinion in your field?

eg: Integration tests are a scam.

Their complexity grows faster than the codebase they’re testing. They’re sensitive to changes anywhere in the system. And like for what? If every time I make a change I break an integration test then it provides no value. It’s just testing if a change was made.
SIP phones could handle this trivially. You could run a server on a raspberry pi that would be plenty and easily tie into an actual SIP telephone line, so both intercom and external calls.

There are also decent products for not very expensive in this market.
What, specifically, should they have done instead?
I very much wonder if this obvious oversight was intentionally left unaddressed in order to create a requirement on proprietary sync/backup solutions and make true security more difficult (since the key material is now being synced around and could technically leak or be subject to "lawful intercept" or bruteforce of the sync service's authentication).
Like the original article explains well, the question isn't technical, it's legal. You don't have to inspect users' devices if you make selling licences illegal, because then nobody can legally make money selling them.
Monopolies and price-gouging are a violation of the social contract.
Piracy still exists.
People only read the title.
Quad9 Turns the Sony Case Around in Dresden
Not to answer your question but it brings back some nice memories. I was in college when author started this project. He worked a lot on it. After a few years, he stopped and archived the project. Looks like it's back again. Nice!

I used it in all my college demo and small projects and I loved it. The most complex GUI that I made was a oscilloscope frontend for lab-made signal recorder. It is indeed a simplegui library.
I answered this here: https://news.ycombinator.com/item?id=38580236
Deleuze is one of the best thinkers of the last century, but he requires a lot of reading before what he's saying can make any sense.
Thanks for posting. I like using networkx for various tasks, and have been meaning to start exploring other visualization libraries.
How does the US give aid to Pakistan then?
Grok cites a violation of "OpenAI Policy" when refusing a prompt
Violating a social contract is not necessarily immoral, in the same way that breaking the law is not necessarily immoral.
Yes, I definitely considered that as well. Basically, I knew that 23andme data would eventually exist outside 23andme, whether that be via hack, acquisition, or eminent domain.

I accepted that and did it anyway, taking steps to at least not be directly associated with my sequence, even if my association can be inferred or derived later. My main concern is that their testing would identify something which in the future would be a "pre-existing condition" and get me denied medical care, but there is certainly a long list of other possible consequences.

At this point I don't trust any company or agency that collects and uses data, or the promises made in any privacy policy, but I also don't lose any sleep over it.
Firstly they are not (and presupposing the latter claim begs the question anyway), and secondly if you think that then don’t participate in the use of the ill gotten goods. Nobody died because they couldn’t hear a song or watch a movie.
Ah yes, games with good writing. Difficult to come by. Not sure why. Maybe because you can't put writing on a trailer?
Israel has no capability to "end humanity" with their nukes. Only the USA and Russia have that many nukes.
Cryptographic signatures exist. This is a trivial exploit to solve...
Why do you think that the GPT-10 solves the supply paradox of AI?

And if it does, what markets are (combined) worth $80 billion (the valuation of just OpenAI) that can be taken over fully? Or with a multiple and taken over partially? And will that worth then get onto the bottom line of an AI company?

The way I see it, e.g. copilot makes me worth more. Might even make me worth 10 developers. 100 by the time we have copilot 13.37. The net results, however is not that 99 developmers are without a job, nor that 99% of my income goes to copilot. But that the demand in software development increases 100x and I make even more (The Lump of labour fallacy). Yet the Copilots out there competing in a market that's running at a loss hoping for future profits.
In this case it’s clearly immoral however, as the stakes for the pirate are so incredibly low.
Do you consider Whitehead's philosophy also vacuous?
I think I remember reading another comment from you when this happened! Glad you’re still doing okay and got some nice upgrades in the process of fixing your home!
Not a conservative, quite the opposite in fact! I simply don't trust the government to report correctly on statistics that are levers for public sentiment. Interest rates, inflation, unemployment... All of those come with an incentive to misreport, to twist behavior.

Let's couple those unemployment statistics to income and see which jobs are growing. Hint, it won't be any good jobs. Which is the actual problem: too many jobs in America are "not meant for you to live on" and most economic opportunity is insufficient for significant economic improvement at the ground level of society.
This is not entirely true. The things exist, you just aren't aware of it or it isn't the form factor you want.

List a thing and I could likely give you a product that will solve your problem, it may just be out of your price range because it isn't mass produced or doesn't look the way you want again, it's not mass produced.
Looks like it is full of VC funded “open” SaaS/tools that are often very hard to self host and the company doesn’t respond to contributions.

Such lists should focus on projects with more open governance and that have open source in their culture instead of just license of some of their modules IMO.
A shelve is a dumb primitive static object though. Even a simple hello world goes over a huge amount of lines of code before it is displayed on a screen, ANY one of which being faulty could result in a bug visible to the enduser. And most of that is not even controlled by the programmer — they might call into libc, which calls into the OS, which calls into drawing/font rendering libraries, that calls into video card drivers that “calls” into the screen’s firmware.

And this is almost the simplest possible program.
Do the opposite and run WSL?
By your logic who died when someone downloaded a non approved copy?
In search of the unpopular: Having CPUs mostly sitting idle is wasteful. Modern software/algorithms/users should use their machines more effectively.

(Maybe it's through fewer cores/resources used to higher utilization to achieve the same UX as today. Or software/algos better written to make pegging resources more common.)

Also, modern web dev is terrible. Privacy matters. /soapbox
That isn’t my logic, but the artist is harmed, for one…
For the sake of the argumt, let's say there is no monopoly, but a competitive landscape filled with alternatives and switching costs are zero.

Does that change my point about the difference in those examples?
All these activities live in a grey area: "We are breaking some rules, but in such a small-time way that the big guys don't bother enforcing the them". Fly below radars, and you will have your small joys for indefinitely long.

This raises the question: is that a space worth inhabiting? Are hackintosh or homebrew PlayStation games worth it, compared to more open platforms where you are not breaking ToS?

Answers, of course, differ! But the question is worth asking.
The incompetence is astounding
Of course you can do that. If you do that, what else will you also do?

For example: Will you use oil from Saudi Arabia for your business? You could refrain because so much of the payment gets sidetracked to those 4000 princes, or because refraining brakes the climate changes a little bit, or even both.

The list goes on. There's much that's bad in the world.

Deciding to be principled about bribes and morally flexible about the rest seems… okay to me. Not particularly bad.
> Clearly you're not aware of the classic cross-ply tyre which is what classic cars used before radials became standard. These are car tyres

Yes and classic cars were extremely unsafe by modern standards

> horpitalisation or death that might have been with a less-modern-safety design from the 1930s

Or zero injuries or maybe not even a crash whatsoever with a not particularly modern safety design from the 90s
Piracy was never piracy
This is well understood in my peer group at least, and as a fractional CTO, I quite routinely find agreement with CEOs and the like on this as well. If you work hard, chances are you're not working smart enough.

I think that mode where you need to work hard and not smart is quite similar to creating technical debt: Sometimes you need to do it, usually to meet some timeline you have no control over, and it's best done consciously.

Personally, I work with multiple companies and kinda found my holy grail in that: When I find myself doing questionable work in one place, I can always switch gears to something else and get back to it with some distance and fresh ideas. As an employee expected to work 40+ hours per week for a single company, that was a lot more difficult.
> driving them on US roads

I’m not sure it would be that different on European roads either.
What are you referring to? 2 million Arab Israelis enjoy all the rights and freedoms of being an Israeli citizen without any restrictions. They vote, they travel, they are allowed to practice their religion.
>and secondly if you think that then don’t participate in the use of the ill gotten goods

If a company has a monopoly on something, you cannot just go somewhere else to get something equivalent - that's the thing about monopolies, in a lot of cases, you simply don't have a choice.
Lol. He is definitely not young as in inexperienced coder. He will definitely not going to win awards for barely sufficient documentation and docs organisation. Dude got a personality.

I've followed the project when I was in college and used it in my personal project.
Having n apps all actively querying various servers all the time will waste resources. The solution Google provides is Firebase Cloud Messaging which is the blessed notification service on the system which handles querrying notifications for all apps. FCM even avoids waking up the system from idle if the notification received is not high priority and can wait until sometime in the future when the device momentarily stops idling to processing everything at once before idling again.
If you own Skyrim SE there is a pretty good total conversion mod (for free) you might like called Enderal:

https://store.steampowered.com/app/976620/Enderal_Forgotten_...
Ive used Memray and it works great locally. But when I deployed my application over long running processes (i.e. in production) because I want to see memory usage over a long period of time, the profiler outputs get really large, like hundreds of gbs. They cause disk outages and also take forever to download and visualize with the flamegraphs. What do people use to understand memory usage of long running workloads in production?
It's not inherently about salary but about perceiving the work as something important you really, really want to accomplish. Money is only one of the possible motivators.
That's awesome! I wasn't aware of that. Thank you for sharing.
It sounds like it's in safe hands, good to know!
I wonder if being a fractional CTO self selects for knowing people who understand this? The kind of person who thinks you can go 110% all the time probably thinks you can’t work at more than one place because you owe your employer all your effort.
Do the web browser offerings of those apps not cut it?
Isn't that an Amiga app?
Not really. FSL has some gray area surrounding the expiry of non-compete, and I expect companies to extend their non-compete term whenever revenue gets low or a big feature gets released. Also, wouldn't this period be reset on every new version of the software, so there's a rolling 2 years you can't fork or copy?

Too much work to navigate.
Customer service is its own industry?
Most people haven't noticed the link is wrong.

On HN, one simply reads the title, assumes the content, and comments based on one’s prior beliefs.
Reminds me of this (Windows Update): https://imgur.com/a/zwyBSr0
I think their point is that the fault here is on the system that requires people comply with non verifiable warrants, as opposed to the people handing over the data.
Artists aren't the ones getting millions in salary bonuses each year.
I disagree to most German towns.
> Where is the hacker spirit here?

I'm torn on this. Is it following the hacker spirit to get more people plugged into Apple's closed ecosystem? Maybe? Maybe not? Reverse engineering a proprietary protocol is certainly hacker-y. But building a business around that -- essentially charging people to put more load onto someone else's infrastructure, who have to bear the costs (even a rich behemoth like Apple) -- I'm not sure that qualifies. If we were talking about some open source project that was releasing this app to F-Droid, maybe it'd be more clear?

> The number of Apple apologists that have crawled out to say "see? I told you so!!"

I don't think that's Apple apologism, that's just "duh, obviously Apple is going to try to shut them down, and probably succeed". It's lame. It's just as lame as when AOL kept breaking Gaim/Pidgin's ability to talk AIM's OSCAR protocol. But acknowledging that Apple is going to pull something like that isn't apologism, it's just stating reality.

(As for the AOL/AIM example, I think reverse-engineering OSCAR was actually hacker-spirit-y, as AIM was a free service open to anyone, just they didn't feel like supporting Linux users, as was the SOP of many companies at the time. Linux users were a fairly small percentage of users, so it wasn't a big thing. But there are tons of Android users; more than iOS users, globally, even. That's not really the same, to me.)

In the context of the overwhelmingly saturated messaging space, I think it'd be a lot more hacker-y to bring something like Signal up to the usability standards of iMessage, Whatsapp, Telegram, etc., and evangelize the hell out of it to get people out of closed platforms. Even Signal isn't perfect there, since they refuse to enable federation in the protocol, and only release updates to their server-side software a long time after it's been running in production. But it's certainly better than getting more people hooked in Apple's walled garden.
The years when I was at my most productive, in terms of outputting the most value for my employer (products, patents, etc), I was doing about three hours of "focus work" a day on average. I simply didn't have the energy to do more than that. The rest of my working hours were spent in low-productivity meetings, low intensity emailing, etc. My performance reviews were consistently top-notch and I was getting promoted at the maximum rate allowed by our organization.

My least productive years happened when I was working far longer hours, stressed out and miserable in a company with a "hustle culture" and very poor internal communication/documentation habits in my opinion.

My opinion is that you should prioritize your own wellbeing and if you feel that the company culture (or your manager) is preventing you from working in the way that you find most enjoyable, go find a different job.

Don't be pressured into working longer than you want or in ways that you don't like, thinking that it will help your career. Your quality of life is more important and you may actually be more productive doing things your way.
So if a company got a profit hike, reinvested all of it, then had a deflation shock, they might go bankrupt

If they reinvested all of it, it wouldn't have counted as profit. The study points out at outsized increased profit.
Anyway, look. If I had this issue (I don't since I live in Europe where everyone uses Whatsapp) that's what I would do: I would download an app that blocks SMSes from selected (known) numbers and auto-responds to them with a message like "SMSes from this number are blocked by the receiver - Please contact me on Whatsapp/ Telegram/ Signal".
Perhaps part of the problem is that even the pro-copying side keeps calling it "piracy." I'm pretty sure it's meant to induce negative feelings in the listener.
Open source is a technical detail. One can see a less drastical change that will have the same effect.

1. Update the laws so that the shenanigans of the companies are finally named as they are:

- Retroactively removing a feature is stealing from the owner.

- Deleting bought digital content is also stealing from the owner.

- Spying on a user is an unlawful search.

2. Make these transgressions be investigated by the prosecutor's office, so that a citizen only needs to report it to them and not figure out how to get a class lawsuit going. This will allow security researchers to do their job.

3. Classify devices with unpatched and unpatcheable security bugs as "unfit for use" and eligible for a full unconditional refund, and extend warranties on them to, say, 15 years.

4. Obviously, make any kind of security research legal and protected from intimidation by the companies.
Sorry to put you on the spot.
Shows you people only read titles . There is a reason clickbait works
Here is another one by the same guy https://x.com/dylan_ebert_/status/1726023059008573761
It's a violation of copyright which has been around for a lot less time than "th social contract" however you define it.

So - prior to the existence of copyright - was it immoral?

And how do laws related to fair-use etc affect it's morality? "Immoral" implies something fairly clear-cut and universal, not the kind of thing where there are complex provisions defining a range of exceptions, differing between jurisdictions.

In summary - you are massively oversimplifying a complex topic so I'd have to disagree almost entirely with your formulation.
The swastika (卐 or 卍) is an ancient religious and cultural symbol, predominantly in various Eurasian, as well as some African and American cultures. In the West it is widely recognized for having been appropriated by the Nazi Party and by neo-Nazis

Context matters
How can a student not participate in the use of the ill-gotten goods of textbooks for their studies? For a researcher in a developing country for research papers? Nobody dies, but a lot of people fall behind. It doesn't beg the question when it's so obvious which industries have abused copyright law, gained over 100% in profits, and manipulated the market to gain absolute control over what is offered.

Of course, pirating an indie band's song is a lot more in the questionable area (and not done nearly as often, since piracy by nature focuses on the more necessary/popular products) but that's not what's under discussion.
Stakes have nothing to do with morality
I believe in most cases, DRM would not exist if people wouldn't have started pirating digital content. We're also to blame for the state of things.

Just like I would not bother to buy and use a bike lock if people would not steal bikes in the first place. It's a bad analogy though, like all analogies are, since if I sell my bike I can't make it stop working for the buyer at a later time. But that's the big difference between digital and physical.

I have been working on and off on anti-piracy measures for my Lunar app (https://lunar.fyi/) and as much as I want this to not affect normal users, the app can still stop working after a decade or two if the Paddle licensing server doesn't respond as I expect it for example, and I'm no longer around to fix it. This could be regarded as DRM by some.

But I would have never wasted time with this if people would not crack my app in the first place AND demand customer support and flood my dashboard with errors unrelated to the normal functioning of the app.

If piracy isn't stealing, then protecting against it isn't limiting ownership.
I’ve always dreamt of at least the EU and China (yes I know of Kylin) mandating libre software for governmental use.

Could you imagine the gigantic amount of flow of money that goes into Microsoft enterprise and Office support instead flowing into open source? And the amount of bug that amount of eyeballs would catch.

Both the Linux desktop and things like LibreOffice would see meteoric improvements within the year.

Right now there is already some chances budding (in Spain’s regional governments, Munich, France’s military), it just needs to be pulled together into a comprehensive plan and get a good push.
My suggestion for this style of effect:

Graincore
What kind of "purely symbolic" FGM do you have in mind?

Every part in women genitals is useful and removing it means problems down the road (as opposed to removing a foreskin where the damages are relatively benign - of course it is proof of a profound mental illness of the ones doing it on children in all cases).
"clearly"...

That's the bit we're disputing. It's not "clear" and it's not "obvious".
Reproduction isn’t really a human making a human. Where making means using your cognitive power to apply focus to a creative task. It is more akin to natural
biological processes. Do humans make poo, or hair?
I've noticed that people often underestimate the actual expenses associated with driving.

For instance, the Amtrak Cascades ticket from pdx to Seattle is only $26. On the other hand, when you calculate the IRS mileage rate of 66 cents per mile for the 161-mile distance between Portland and Seattle, driving adds up to $106. This calculation doesn't consider the opportunity cost of driving, as it limits your ability to do other things while operating a car. Additionally, it doesn't factor in externalities like pollution. Considering the challenging driving conditions in Seattle, avoiding the hassle of driving and parking there is a definite positive in my opinion.
Cory links as the source of this quote to a bluesky page. does anyone know how to view these things without a login? doesn't seem to be supported by bypass-paywalls or by archive.org yet.

https://bsky.app/profile/tylerjameshill.bsky.social/post/3kf...
This quote from the author is my favorite. This is so spot-on:

These companies are all run by CEOs who got their MBAs at Darth Vader University, where the first lesson is "I have altered the deal, pray I don't alter it further."