skysight-inc/HackerNews huggingface dataset:
I agree with the rant and think that Linux today is overall doing a net negative effect to computing. The absolutely lack of stable API/ABI efforts and the "cavalier" attitude regarding free software are creating terrible precedents over the industry.

Linux is today the kernel/operating system with the largest hardware support, but my ability to actually use the operating system I want with the hardware I want has moved nilch. The next free operating system which even supports my AMD GPU? It's FreeBSD, and they do that by linking in the code from Linux (not even forking: forking would be way too much effort). There is _no_ other OS which supports it.

Also, you can forget about DRM support anywhere other than Linux. Netflix? Linux-only.

It's a very sad picture and much definitely worse than 10-20 years ago.
Betteridge's law of headlines - again

https://en.wikipedia.org/wiki/Betteridge%27s_law_of_headline...
The RSS hit doesn't contribute to some program manager's 'engagement' metric on the developer docs site, so we don't need it anymore!
If possible, please share, how was the shopping assistant helping out a consumer in the buying process? What were the features?
I mean Facebook can do it, a random blog can't.

Google killed Plus, so it's not like when they killed Reader. They just like killing things I guess?
Would be great if you guys also extended this to all non-US citizens.
What is the hardware like in the next version?
I guess you made it before hacker news released their API?
Your use of the phrase 'to use the British term' implying you think that's clever and relevant (and not at all contentious) is the first indicator you don't know what you are talking about.
This is the reason. Some analytics hit causes a line to go up. Program manager says line must go up!
BBC scraping the bottom of the barrel with that title.

Also, who cares that he is back? I never see any of this political garbage on my feed because the only people I follow are things that are interesting to me. I actually do follow Elon Musk and I still don't see any of this stuff on my feed.

Also, the response on Threads to this has been tip-top,

> If you STILL have an X account at this point, you've made your intentions clear in terms of supporting fascism.

https://www.threads.net/@goatburgler/post/C0rTAqsOvnX

(a lot of people leaving comments like that)

... come on, you're just casually going to start calling people fascists, nazis and whatnot because I don't have an innate need to hate someone? Do these people in their mind compute this as "yes, come over, welcome! we love to hate people we don't like".

Learn to move on and leave that stuff behind. If the platform is indeed destined to fail then let it fail and don't pay attention to it, or simply go back to Twitter and post that stuff there and watch the algorithm feed you back the same bullshit you're constantly outputting.
Do you care about the difference between GPT, Llama, Claude, Mixtral, etc.?
Sentenced conspiracy theorist and harasser of families of dead children
The kernel does _not_ have an incredibly stable interface. It is in the fact part of the reason older statically linked versions of glibc no longer work. I personally count at least two breaking changes, and only one of them got an option in Kconfig (which was related to ASLR iirc, so distros rushed to enable the "break compatibility" option). . Yet another example dynamic linking almost always makes things easier for your future users, despite the preconceptions.

Just grep your kernel's Kconfig for "ancient" -- the euphemism every developer uses to refer to stuff they don't care about and want to break.

Also, stuff in /proc, /sys, or the like is moving every other day, and some programs depend on it (sigh).
Reddit thread explaining "Bleacher Report gutting out OTP"
IIRC it was leaked/confirmed by accident or something like that
Frankly, that should be the norm.

If employees are being abused, let them ask for their rights.
Smartphone can be finicky to use, also you "lose" access to the calculator if someone call you.
Andrew Keen wrote a book on this in 2007 called The Cult of the Amateur: How Today's Internet Is Killing Our Culture.

I didn't agree with him on the copyright stuff (I loved Napster, pirate bay, sharing etc), but he was right on most of his points.
I just slapped something together with PHP includes and HTML exports from MD files. Slap the right header.php and footer.php to replace everything above and every below the body opening and closing tag and add the .php extension. Upload using an FTP program. Internet as the internet was intended. And PHP remains the best template language ever invented.
Not really. Demand on RSS might induce RSS supply. Or might have had.
I always go back and forth on adding comments to my site. Do I really want the negativity, especially places like HN, can provide? I think it's fairly common now for people to not add comment systems, of any kind, to their blogs.
More likely it is "analytics shows that only 0.01% of our readership arrives to us via RSS" or "an A/B experiment shows that the RSS feed only increases readership by 0.01%".

In the real world, the options aren't just an RSS feed vs. "load the page daily". Readers also come from search engines, social media, link aggregators and non-RSS news feeds.
Ask HN: Fake email using my domain
Weird. Someone has created an account with one of the major money-sending apps using a fake email on a domain name I own. I can see this because I receive the emails sent by the app vendor via the domain's catchall account. So whenever this person tries to login or change their password, I see the confirmation emails sent by the app vendor.

To be fair, it could have been an innocent mistake on the part of the person who signed up... maybe they meant to type .net instead of .com or something like that.

I contacted the vendor to tell them that the account is not authorized or known on my domain, and asked them to cancel, but they will not unless I send them an email using the 'from' address of the unauthorized account.

So, questions:

1) Is this a common thing? And if this is potentially illicit activity, what is this person thinking or hoping they'll be able to commit?

2) Even though I'd be using my own domain, should I intentionally impersonate someone who may (or may not) be attempting inappropriate activity in order to get the account removed? Wouldn't that - on its own - be a potentially dangerous or illegal act?

{sigh} modern problems.
Except, the jab didnt prevent infection or transmission, so what difference does it make?

More pertinently, you are referring to the ends justifying the means. If Hitler had succeeded in making a utopian society where everything is just great, would he have been justified in the methods he used to achieve it?

There will always be some ambitious goal, something society could achieve, if we could just get these people on board. You know, they are just in the way, they are holding society back! What follows that logic is never good for society, and look at what its created in ours; there is a contingent of ~60 million americans that never got vaccinated and are royally pissed about those mandates, probably tens of millions more that were effectively coerced into vaccination, and of these groups a disproportionate amount are gun owners.

So, greater good, is it a good thing that something like 50 million gun owners now see their political opponents as a threat to their way of life? Do you think that kind of force could be stopped if things ever turned sour in this country? Are you so certain in the authority and power of your own political alliance that you dont think thats, an issue?
Ukraine applied to integrate with a NATO Membership Action Plan (MAP) in 2008. On 20 September 2018 the Ukrainian parliament approved amendments to the constitution that would make the accession of the country to NATO and the EU a central goal and the main foreign policy objective. In other words, Ukraine has a lot to do with NATO. Also, NATO Membership Action Plan involved Georgia.
RSS feeds are still very much around regardless of Google's actions. I'm looking at it from a user's perspective, not the operator's perspective, at what service is being offered? My question was why google reader was good, not why it was popular.

As for my search engine, I genuinely don't track my users, so I really don't have the fainest how many users I have. 4 people or a million people use my search engine, and I make the same amount of money from it. If I want the search engine to do well, I have to use my own eyes to assess how well it performs.
Slowly remove RSS from everything and in the and claim that "RSS is dying tech, no one uses it, we have metrics to show it"
RSS is still very much around though. Most websites that aren't silos offer them. In fact, big problem is that many websites offer too many RSS feeds, and websites that don't need them offer them; makes algorithmic curation much harder.
I helped build a tar-backed filesystem for MirageOS[0]. It is definitely easiest to make it append-only. I did add in-place renaming, updates (of file content), pre-allocating a file and removing the last file.

We also scan the filesystem on boot and keep a mapping in-memory of file names to file metadata and block offsets, and update this memory representation when modifying the on-disk tar filesystem. If you have a lot of small files this is maybe not a great idea as you will be storing most in memory, though.

For the purpose we had in mind it worked fine: A content addressable mirror of package archives. The archives exist somewhere on the web and the package file has a link to the archive and a checksum. We can then download the package and store it by the checksum. This gives integrity that the tar filesystem does not offer. Removing the last file works great if you only have one download job. Otherwise if a download fails and it is not the latest file you can rename it to `failed/<hash>-<random>` and do garbage collection in the filesystem at a later point.

[0]: https://github.com/mirage/ocaml-tar/blob/main/mirage/tar_mir...

Update: interestingly, this was motivated after trying to use a (mostly) LittleFS-compatible filesystem which unfortunately didn't work very well for us at the time (bugs, poor performance).
> I don’t really get why people bother with JSON-LD—does it actually help anything?

It helps with Google SEO which makes sense, as schema.org is essentially stewarded by Google.

> In theory it’s neat, sure, but in practice does anything actually use it and wouldn’t use the traditional meta tags if it weren’t there?

Yeah, for basic things like the website metadata it's redundant with meta tags. It becomes more useful when it comes to more rich types like e.g. a recipe.
The issue is that the RAM needs to be close to the CPU and the edge that is the closest to the CPU is probably where designers want to put the cooling exhaust and radiator.
On the Internet, nobody need ever know.

P.S. Squirrel!
Peak HN.

Where do you find this shared view of what is considered the least valuable part of the curriculum?
Are you actually fine tuning or using RAG? So far I am able to get very good results with llamaindex, but fine tuning output just looks like the right format without much of the correct information.
It means the Red Book CD audio 'frame' was 1/75 of a second. I don't know what Director did.
isnt TIOBE based on search results or something? I really doubt there is more C# being written than JavaScript. Their list never seems accurate.
Were they able to verify the fake email address somehow? If not they can't actually use the account and you can safely ignore it.
Exactly. EU's VC situation is dire compared to SV, which maybe isn't that bad if you think about what the VCs are actually after, but in this particular case it's a matter of national security of all EU countries. The capability must be there.
How does it aligns with being censorship proof and/or prone to cancel culture?
The first of those is surely a valid technical requirement, right? (I'm not a GDPR expert, by any means.)

In order to send you bits via IP, the server needs your IP address. In order to know the type of bits to send, it needs to understand the content-type, encoding, etc that your device supports.
> All data in of itself is useless. A sample pool of 10,000 volunteers is pretty good in the realm of statistics.

The point isn't the size. The point is there are too many confounding factors. It could be that people who work longer hours do so because they are high on trait conscientiousness, which also causes them to report low productivity

It could even be because they are conscientious that they actually work slightly slower, and/or it could be that people who are less conscientious just don't care as mcuh about producing what was expected.

To paraphrase the late Hitch: productivity metrics are not great. Neither is the word "connection" in science-adjacent reporting.
They may well reject applicants for dumb and automated reasons, but they would not inform the applicant of the reason for the rejection.
To clarify this - most ISPs implement per customer bandwidth allocation, so a malicious actor should not be able to take share from other customers.

The FQ thing is a part of a larger dispute. Without FQ is is already the case that, irrespective of L4S, fairness is implemented by end hosts, and an end host (eg a server) can ignore congestion responses and take more than a fair share. This is not an issue which L4S introduces, but some argue that L4S "makes it easier" to take a larger share.

The people behind FQ argue that the network should guarantee fair sharing, but not everyone believes they have chosen the right fairness metric. In particular one of the main proponents of L4S does not, as can be seen from his paper linked here: https://news.ycombinator.com/item?id=38598023
If keeping up with Google dev blogs is important to you, at Monitoro[0] we support alerts even if the website doesn't offer RSS. You can also catch specific updates, for example if a new post mentions a Google tool you're using at work.

Feel free to get in touch with me if you need help or have questions.

[0]: https://monitoro.co
I can agree with this, I’m currently building a system that pulls data from a series of pdfs that are semi-structured. Just testing alone is taking up 10s of $ in api costs. We have 60k PDFs to do.

I can’t deliver a system to a client that costs more in api costs than it does in development costs for their expected input size.

Using the most naive approach the ai would be beaten on a cost basis by a mechanical Turk.
> You can't spit out a black box that no one knows what it does and how it was trained?

What if I want to? Who on earth has the ethical authority to claim the right to control my ability to release a set of weights? Only what is done with those weights should be legislated, and extremely conservatively.

Maybe a lot of software developers got into this career for the money, or because they like solving problems. But for me, politics inseparable from software engineering. Politics are why I devoted myself to the craft. This is the exact kind of situation in which my knowledge and skill become tools of protest.
It's hard to say. How many lines of code does it take to call

typeobj->tp_as_number->nb_add()

when `tp_as_number` is a pointer to a `struct float_as_number`, and `nb_add` is a pointer to `float_add`?

Do struct definitions count as "lines of code called"?
Microsoft Agrees to Union Contract Terms Governing Its Use of AI
That’s cool you made this site.

But I don’t think Wordpress sucks at all. It’s great in that it’s open source, runs everywhere, is easy to use, and super extensible.

I still recommend it to people who want to blog and it works out well. It’s especially nice as it doesn’t lock you into a saas like wix or square space or lots of other $10+/month services.

Personally, I just like markdown and jekyll as it’s easy enough but git is a bit too much for normies while Wordpress works fine.
I've created a hybrid system as I also was frustrated with how complicated Hugo is. Oogway [1] is a static site generator and framework for creating websites using Go templates. Take a look if you like :)

[1] https://github.com/emvi/oogway
https://archive.ph/kT5UX
Ask HN: Has anyone done the Gmail CASA Tier 2 assessment?
Hi HN,

I am building an email screening service for Gmail. Given that LLMs have more or less passed the Turing test and looking at the number of LLM-wrapper startups in the making, going forward, I doubt that humans and AI writing can be meaninguflly distinguished and email seems slated to become an even noisier communications tool.

Inspired by Hey.com’s feature, I am trying to build a service that screens first-time senders in a deterministic way (yes → all emails reach inbox; no → all emails go to trash).

My application needs to:

- receive webhooks when a new email is received

- move emails to trash, to inbox, or to archive (depending on whether it's blacklisted or whitelisted or neither)

- when a user sends an email, automatically whitelist the recipients so any replies won't be screened

Based on Gmail's policy, these operations require "sensitive scopes" and I will need to pay for a Tier 2 Cloud Application Security Assessment (CASA). To be fair to Google, most of the rules and requirements are pretty clear (create a YouTube video, illustrate the data flows etc.), but some key uncertainties remain:

1. Has anyone done this assessment before and is able to advise on the process? Specifically I am interested in:

- How much it costs or otherwise has a recommended company? (Please drop me an email at hello@inboxhero.org if you don't wish to disclose publicly.) Almost none of the companies doing the assessment publish their prices online and I am worried about getting ripped off.

- How does one write a privacy policy and/or a terms of service? I am working on this myself and don't have experience doing this. I have found some generators online, but am not sure which to use/trust!

2. From a security perspective, how does this assessment ensure that the application isn't misusing user data? I understand that I don't need to share my source code with the company doing the assessment (unlike my previous experience with pen-testing) and the assessment is done once every year (so who's to say what is happening with the data flows in the meantime). I am not sure if this is security theater.

3. In my test with early users (mostly friends and family), I am told that they are only willing to grant me the extensive permissions needed to screen emails because they know me personally. From a user perspective, what would it take for you to trust a stranger on the Internet? Is saying "I've verified with Google!!" is enough, or whether I should try other ways to build trust. Get the endorsement of influencers? Open source the code?

Would be grateful for any advice, both for the security assessment and for the product in general. Thanks!
“Unfortunately” - c’mon it wasn’t an act of God that removed them
> Explain what an atom is /b and continue with explaining what DNA is /d

This works.
CAMM2: Notebooks with up to 256 GB of upgradeable RAM
How to talk to an open source software project as a large scale user (2014)
I also participate in discussions like any other regular user, but I can't look away when I see somebody butcher the english language like that (and it isn't even my first language). It takes me 10 seconds to correct someone, and hopefully the corrected person makes less mistakes in the future. Nobody loses here, I don't see any harm in this, there are only good outcomes. Once you realize how many people can't write you start to see it everywhere. Maybe I'm just autistic, maybe I care too much.
That's my quirk
Yeah I agree that the article's explanation seems unlikely. A jump from 11K to 476K years ago just seems too big, one would expect that we would have found plenty of other wooden structures in the period in between if people had been manufacturing them all the time.
Barely related, but I remember the joy as a kid of putting a computer game CD-ROM in my Walkman CD player just to see what happens and discovering that I could listen to the game's soundtrack just like a normal soundtrack CD. Can't remember which game, but it is a fond memory of mixed-mode CD technology. Can't do that with your Steam games and Spotify!
> the State has already restricted the authority of local government in this area.

What I mean is: instead of the state penalizing San Francisco for unreasonable restrictions on development, the state could invalidate those restrictions.

Yes, the builder’s remedy sort of does this, but it’s an odd, indirect solution.
GPT3.5 is the most popular MoE model probably.
HTTP/2 helps with parallel resource loading, but that’s not the problem in this case—subresources like we’re talking about here are largely going to be loaded serially because that’s how things are. HTTP/2 Server Push might have helped some of the problem, but it’s more or less died because the way it was designed had serious problems and fixing them was going to take more effort than it was worth.

But when I say “having zero subresources”, I actively mean having zero subresources. The bit that really startles people is how much faster a page with inlined scripts and styles is (up to a point, but that point is typically over a hundred kilobytes of each) than a page with subresources present in a warm cache where the browser doesn’t even need to revalidate. Letting the browser just tear through it all rather than having to mess around with caches has, as I say, a bigger effect than people normally expect.
It usually is prudent to assume that professionals in foreign fields aren't idiots; that includes archeology and their knowledge of the existance of bonfires. Just skimming the paper for a few seconds makes the reasoning of the researchers pretty clear.
I think this thread could good place to share services (self-hosted or paid) that allow to monitor site for changes and make rss/send notification.
Why So Many Pedestrians in the U.S. Are Dying at Night
Not very nice of you
Oh, they do understand. That's why they are moving it. It is too useful.

Internet users can't have nice things.
They are “actively working on a solution”, because it requires a Google-sized brain and 28477382 work hours to maintain an RSS feed of a blog. What a silly company.
That's a great idea, something like

/memorymodel:scoped_refcounted
It probably is about analytics, you're right. But to be fair, maintaining RSS feeds requires some resources, even if nominal. If the usage of RSS is low or declining, the cost of maintaining it might not justify the benefits, leading to a decision to allocate resources elsewhere.
I failing to understand your point. Use of iMessage in the rest of the world is extremely limited - we're talking figures of about 1% global use.
Embetty – embed content without compromising privacy
Not sure if it counts as dev blog but https://chromereleases.googleblog.com/ still has RSS and Atom feeds, I guess not everything got nuked.
30k Crowd-Sourced Memorial Benches
I signed up last year when it hit HN big. I didn't really found access to the community (which is my fault), but I love the feature set, and am debating with my self whether to extend the membership. 20 dollars is little to me, but it's another thing in the back of my mind where "I should do something with it".

Mastodon totally doesn't interest me, it turned out, that was a big argument for joining omg.lol back then.
>> How do you ship a Java library that uses native code? Python/Node/Ruby worlds know, but OpenJDK ignores the question.

>It doesn't. jmod files and the jmod tool were added in JDK 9 precisely for that (and other things, too).

I have never seen a lib package native dependencies using jmod. It's not even clear to me how this would be done. Everyone I'm familiar with bundles binaries inside the jar. Can you point to an example? I would love to learn a better way of doing this.