skysight-inc/HackerNews huggingface dataset:
Probably fear that bad extensions would tank performance, tarnishing the reputation of the overall browser. Now that such reputation is more or less established (i.e. people use FF on Android without big problems, it's not considered particularly slow etc), they can dare a bit more.
I couldn’t tell you I don’t eat McDonalds or dog food.
> s*t on Firefox devs

The nerd rage is targeted at Mozilla's dishonest and incompetent managers, no? The actual dev work is top notch.
I deeply disagree with this. With Good Old Fashioned Dev Tools like Zero TurnAround, ReSharper, PyCharm, Clang tools, etc. the tool was specific to the language stack. Esoteric languages would simply not have many tools. All the LLM-based tool needs is to hoover up some code on GitHub, or even just your other project files as context, and it will start generating useful stuff. On top of that, translating between languages just became a whole lot easier.
You think it was that? And not the higher margins on SUVs, or the fact that the SUV version is based on a consumer vehicle that actually sells?
And how did that work out for him?
How is that a unique threat vs steroids?
Calm down, buddy. Read what I wrote a bit more charitably rather than trying to score points.

Obviously, a prerequisite to becoming more intelligent than a human, is to become equally intelligent as a human. I don't believe LLM's will ever be equal in intelligence to humans, ergo I also don't believe they will become superior in intelligence to human (which is how the linked article defines "AGI").
Author here.

Thank you. :)

One thing I am going to do in my new project is catalog all bugs fixed after first release with the following data points:

* Is it a C bug?

* Is it in a stable module of the monorepo? (I will mark things stable after they have been tested.)

* Is the bug in a release, even if it's in an unstable module?

* Is it a build bug?

* Is it a test bug?

* Etc.

I'll keep the catalog in a human- and machine-readable format. This should provide a good set of data.

I would be thrilled if people downloaded my code for human study, analysis, and code archeology.
You are always at the mercy of someone else's ToS, even if you own your hardware.
That's not even the half of it.

In order to have age verification, you need identity verification, i.e. tying your identity to your activity. Classic chilling effects. If you're in the closet because you come from a religious family or have a religious boss, can you risk some random site or government bureaucracy getting hacked and outing you? Strong anonymity is essential for free expression.

Then the requirement to identify yourself is friction, so sites will want to avoid it, which can only be accomplished through censorship. Ordinary sites not solely focused on X-rated content will be "moderated" down to the level of children, even when they have adult audiences, because they don't want to be locked behind the porn filter.

Instead of having diverse communities tailored to all different kinds of people and ideas, you bifurcate the world into nerfed risk-averse corporate censorship and explicit smut. The only place you're allowed to have an adult conversation is Pornhub, which is not exactly known for quality intellectual discourse.
It looks like both Pat Gelsinger and Lisa Su have no clue about software and can't even delegate this. They expect "the community" to do the software for their extremely complicated hardware.

If you see the presentations by Nvidia's Bill Daly [1] it shows they've been evolving hardware and software together. The CUDA programming model was a massive bet a long time ago. And they deservedly won ML/AI.

Unless Intel and AMD do a radical change it's game over for them. They will lose to ARM and Nvidia.

[1] https://www.youtube.com/watch?v=kLiwvnr4L80
Oh... glad to see. I just wrote a pissed off feedback message in their unsubscribe page last night.

I accidentally signed up for a "yearly subscription that bills monthly"... I misread it and thought it was just a monthly subscription.. and get this.. if I cancel early I get billed the full yearly amount.... AND there is no way to turn off auto renew.. so now I have to set my own reminder at the end of year to cancel my subscription, and if I forget I need to pay for another "yearly subscription billed monthly".. that I cannot cancel without a fee.

Abusive BullSh**
> Good QA'ers know more about how the product actually works than anybody else. More than PM's, more than sales, and more than most dev teams.

Not disagreeing with this, but there's one thing they won't always be aware of. They won't always know what code a dev touched underneath the hood and what they might need to recheck (short of a full regression test every single time) to verify everything is still working.

I know that the component I adjusted for this feature might have also affected the component over in spots X, Y, and Z, because I looked at that code, and probably did a code search or a 'find references' check at some point to see where else it's getting called, and also I usually retest those other places as well (not every dev does, though. I've met some devs that think it's a waste of time and money for them to test anything and that's entirely QA's job).

A good QA person might also intuit other places that might be affected if it's a visible component that looks the same (but either I haven't worked with too many good QA people or that intuition is pretty rare, I'm guessing it's the latter because I believe I have worked with people who were good at QA). Because of that, I do my best to be proactive and go "oh by the way this code might have affected these other places, please include those in your tests".
My family actually waited till 1971 to leave. By then Sadam was in power.

It doesn’t matter that much. The Muslim world these days is deeply antisemitic.
Three Person Team Best Practices?
I've been solo coding (with a bunch of minor contributor/collaborators) a project for a while. We're adding two junior developers to the effort, both who have cut their teeth in enterprise/startup type environments for the last 5 years or so. One of the things that appealed to both of them, was being part of a smaller, less constrained/bureaucratic effort. And or me, I've hit that point of "go alone go fast, go together go far", so I'm excited too. I've been part of different teams in the past, and was a big advocate of XP back in the early days of Agile movements.

Somewhere between my disciplined cowboy crusade, and the ticket driven cube farm experience these guys have had, is a happy medium, more regulate than what I've been doing, and much less regulated than what they've been experiencing. I'm curious any feedback/suggestions from others in a 2-4 person team of best developer practices. I will prefer discipline over process, but recognize there has to be some process. We use git of course, and currently are (mostly) focused on mobile dev efforts (no web things).
>I'm shocked that Hacker News of all places would immediately leap to conspiracy theories.

Why? Postulating alternate solutions, and testing them, is the essence of hacking.
The words "chapter 135" fill me with dread.
QA has always been about risk management. There are multiple ways to manage risk, and some of those ways can be more cost effective to a business. As software shifted towards SaaS offerings, deployments (and rollbacks) became quicker, customer feedback loops also got lightning fast. Team's can manage the risk of a bug more efficiently by optimizing for mean-time-to-recovery. This muscle is not one that QA teams are particularly optimized for, thus their effectiveness in this new model was reduced. I've found that holding on to QA function in this environment can severely dilute the ownership of quality as a requirement from engineers.

QA is still extremely valuable in any software that has long deployment lead times. Mobile apps, On-Prem solutions, anything that cannot be deployed or rolled back within minutes can benefit from a dedicated QA team that can manage the risk appropriately.
> CAR-T therapy can have severe side effects, and recipients must first undergo intensive chemotherapy that kills off many of their existing immune cells.

Damn, that really seems like a last resort.
Your user agent string or the actual browser code? The former is notoriously just set to whatever makes websites happy. An easy way to test is see if a current feature actually works as expected e.g. https://jsfiddle.net/fxc9a8uc/1 "test1" should be green at the top right.
The US may be one of those countries depending on the result of the current Epic vs. Apple & Google cases.[0][1]

[0] https://www.theverge.com/23994174/epic-google-trial-jury-ver...

[1] https://news.ycombinator.com/item?id=38607424
Reminds me of the Chauvet Cave in France, which also holds cave-painting, where the large number of visitors changed the atmosphere of the cave, causing mold and damaging the paintings.

To preserve it a replica cave ended up being built for tourism, with the original being closed off except for scientific excursions
This is progress, but Mozilla needs to do more. Firefox for Android still lacks the ability to sideload add-ons, a feature that works on the desktop version of Firefox. This means Android users aren't able to install extensions outside addons.mozilla.org (AMO) unless they switch to a Firefox alternative that supports it, such as Iceraven[1] or SmartCookieWeb-Preview.[2]

For me, the most important add-on that has been removed from AMO is Bypass Paywalls Clean, which is the easiest way to bypass paywalls on popular news sites. In April of this year, a French website filed a DMCA copyright takedown notice, causing Mozilla to remove the extension from AMO.[3] The add-on developer (magnolia1234) did not want to challenge the DMCA notice, probably because it would require them to break anonymity and be subject to legal liability.[4]

Fortunately, in September, another developer (dbmiller) was willing to reupload the add-on to AMO as "Bypass Paywalls Clean (D)" with no changes.[5] The hope is that dbmiller will keep this add-on up to date with the source and challenge any DMCA notices filed against this new upload.

However, the fact remains that Bypass Paywalls Clean was unavailable on Firefox for Android for 5 months because the browser did not allow sideloading. In the announcement, Mozilla says their mission is to maintain "an open and accessible internet for all" and that extensions are meant to help users obtain "more personal agency out of their online experience". To achieve this mission and better distinguish Firefox from browsers that gate add-ons through app stores (Safari on iOS), Mozilla should allow users to enable sideloading on Firefox for Android as an option.

[1] Iceraven: https://github.com/fork-maintainers/iceraven-browser

[2] SmartCookieWeb-Preview: https://github.com/CookieJarApps/SmartCookieWeb-preview

[3] https://www.ghacks.net/2023/04/20/mozilla-removes-bypass-pay...

[4] https://gitlab.com/magnolia1234/bypass-paywalls-firefox-clea...

[5] Bypass Paywalls Clean (D): https://addons.mozilla.org/en-US/firefox/addon/bypass-paywal...
https://maps.app.goo.gl/zthJpFFBPvWCgHJ98
I fully agree with you. There are more founders, engineers, designers and product people out there who do as well. I will not work with anyone who supports genocide going forward in my career.
Co-founder @ Phylum here (https://phylum.io). We've been actively scanning dependencies across most open source package registries (e.g., npm, PyPI, Crates.io, etc.) for a few years now. Quite successfully, I might add, with recent findings targeting financial institutions [1], North Korean state actors [2], and some of the first malware staging to be seen on Crates.io [3].

The fact that an attacker was able to pull this off against a _secure_ hardware device is shocking but not surprising. The mechanism by which they did it is interesting and fairly insidious. Unlike a lot of other attacks that will publish the malware to the registry, this one pulls the payload from a CDN. So, static analysis of the loader (i.e., the intermediary package on npm) is unlikely to yield sufficiently interesting results. Solely focusing on the obfuscation angle is also not of particular use since quite a bit of packages are obfuscated on npm (like, a surprising amount of it. In Q3 2023 we saw over 5,000 _new_ packages shipped with some form of obfuscation).

Nonetheless, our automated platform pinged us this morning about some changes to this package and our research team has been digging into it to determine the impacts.

With that said, we've produced (and open sourced!) several tools that aim to help with software supply chain style attacks:

1. Birdcage is a cross-platform embeddable sandbox [4]

2. Our CLI is extensible and integrates Birdcage so you can do things like `phylum npm install...` or `phylum pip install...` and have the package installations be sandboxed [5]

We've also got a variety of integrations [6] along with a threat feed of software supply chain attacks (of which the Ledger package and other APT attacks have appeared).

Happy to answer any questions! A collective of us are active in Discord (https://discord.gg/Fe6pr5eW6p), continuing to hunt attacks like these. If that's something that interests you, we'd love to have you!

1. https://blog.phylum.io/encrypted-npm-packages-found-targetin...

2. https://blog.phylum.io/junes-sophisticated-npm-attack-attrib...

3. https://blog.phylum.io/rust-malware-staged-on-crates-io/

4. https://github.com/phylum-dev/birdcage

5. https://github.com/phylum-dev/cli

6. https://docs.phylum.io/docs/integrations_overview
Folks also underestimate how complex these libraries are. There are dozens of projects to make BLAS alternatives which give up after ~3-6 months when they realize that this project will take years to be successful.
Yeah it's a failure to understand the constraints of the medium & the artists' accommodations to them as itself part of the art. "We sharpened Monet's paintings into full detail" type of thing.

You can certainly do it, it might be better in some sense, it's not wrong or inappropriate or bad. But it is a new thing that didn't exist before, not simply a new way to see the old thing.
I mean, we (probably) do agree and this is an exercise in talking past each other - but the issue here is that Bitcoin appears to be preserving its value and, all else equal, something that preserves it's value is going to appreciate in price faster than the inflation rate [0].

So if someone is worried about monetary creation devaluing the currency, based on what we've seen so far, they'd be doing well to buy Bitcoin. Now you are correct that that isn't an inflation hedge. But typing out all that is a lot of words so unless someone invents a new short phrase to describe "monetary creation devaluing the currency" people are going to keep misusing the word "inflation" to mean that. And, frankly, that is what the word should mean in monetary contexts; the technocrats can go hang. Hopefully not literally, but they seem on a mission to upset people.

[0] Assuming the situation snaps back to pre-COVID trends, anyway. At the moment there is a lot of excitement and the M2 is going down.
"story" it's not a fucking story that's the whole point of the discussion.
Why should someone hardcore on data sovereignty take issue with synology?

It’s a device in your possession.
My family uses some of the later devices from Comcast and Verizon and they don't seem to have any issues requiring reboots. I do know, at least for Verizon, that their troubleshooting tool can automatically reboot and reprovision their routers, so there's no need to tell the user to do this on the phone anymore.
Jsonnet wouldn't be as bad as it is if there was just a modicum of debugging aid.

I'm slowly chipping away at that problem by implementing some tooling. For example I recently added "traceback" functionality in https://github.com/kubecfg/kubecfg

Another thing that I noticed is that most people who end up writing template libraries for jsonnet are using too many functions and not leveraging the strengths of jsonnet, namely object extension.

I opensourced a library I'm using internally at $work. It's far from perfect and sorely lacking docs and examples but if you want to give jsonnet another go I'd recommend you try kubecfg + https://github.com/kubecfg/k8s-libsonnet
Unless, of course, you find yourself in one of the languages with broken associativity or precedence.

`? :` has to be right-associative, and should have the lowest precedence of any "normal" expression (only assignment and comma expressions are lower). Note however that the middle expression does not care about associativity, though readability suffers if it has a lower precedence than the ternary itself (a ? b = c : d).

As far as prettified indentation goes:

* if any argument is itself a ternary, force a break before it

* if you have to break after `?`, indent

* if you have to break after `:`, indent unless the following is a ternary

**

Note also that logical if-then-else is not actually the only kind of ternary expression; it's just the only one that C exposes. Common other ternary expressions in some contexts include: bitwise if-then-else (aka select - note that the famous bithacks page lies about xor being cheaper, since it forgets that andnot is a primitive), modular exponentiation, fused multiply-add, bitsearch (unless your type system can supply the needle width), various "foo and right shift" that would otherwise return more than a register (foo = multiply, interleave, lcm, pow) and "foo and left shift" that would return a fraction (foo = div, sqrt, cbrt). Passing in a rounding mode or something can also add an argument to many ops.
Open and portable Postgres-as-a-service. Also available on Hetzner
> It’s the same old tired song and dance.

Yeah. "BTC Is an inflation hedge". Then BTC doesn't protect you from inflation. Then "Inflation hedge doesn't mean inflation or hedge, it really means..."

I'm tired of BTC community defining terms, and then redefining them when the statistics don't work out in their favor. I recognize that BTC community wants "number goes up", but just stick with that and be honest with yourself. Don't invent new bullshit terms for bullshit reasons that are discarded almost immediately.

> be a fantastic hedge against inflation.

Holy crap here we go again.
> Safety-driver miles are more useful for training.

Waymo does most of its training in simulation. They do 20+ million miles of simulation every single day with 25,000 "virtual" vehicles. They don't even have to put out many cars for training.

> Unlike Waymo, they haven't limited to and exclusively trained on the easiest situations in SF for the last decade.

I've got a bridge to sell you if you think driving in SF is easy or that Waymo is only doing it in the easiest situations. They cover the entire city 24/7, and in rain and fog.

> Just like Tesla hasn't even attempted true driverless miles, Waymo hasn't even attempted unmapped back-alley navigation, let alone unmapped back-alleys in the middle of nowhere.

And they won't because maps are clearly a big part of their tech stack and they've found a way to efficiently maintain them. That's what gives them the confidence a.k.a reliability to remove the driver.

> You need scope and reliability to win this race, and it seems to me that the Tesla formula for improving reliability scales better than the Waymo formula for expanding scope.

So far, evidence suggests Waymo is expanding both scope and reliability faster than Tesla. They just announced airport terminal rides in PHX today. Community trackers (absence of Tesla sharing data) show Tesla's intervention rate hasn't really improved much at all and they still seem to make extremely basic mistakes. So the formula clearly isn't working as of today.
This blue light could potentially promote or hinder sleep on command
The browser is already a graph. Or am I missing something?
The movement of the water molecules is what is generating the charge difference. In effect, this is using the wind - or just the movement of air, but not in a mechanical way. It is just using the wind to generate static electricity - the same way you generate an electric potential by rubbing felt on a balloon. Movement -> electricity.

Of course it is fairly weak, but it is continuous and simple. There has to be uses for it.
How to Diagnose Flaky Tests
It seems so obvious to me that your typical engineer, who spent hours / days / whatever working on a feature, is never going to test the edge cases that they didn’t conceive of during implementation. And if they didn’t think of it, I bet they’re not handling it correctly.

Sometimes that’ll get caught in code review, if your reviewer is thinking about the implementation.

I’ve worked in payroll and finance software. I don’t like it when users are the ones finding the bugs for us.
Of course we're biased. 20,000 people have been killed by indescrimimate bombing. I would hope that makes you biased too
I just submitted an article with more information here in HN [1]

[1] https://news.ycombinator.com/item?id=38646314
> have asserted them dumping radiation into the ocean is not the cause - without any proof

Is there a passage in the article that makes this assertion or are you getting it from a different source?
what industry is that?
Agree with the sentiment of this article but the disturbing ai generated images every paragraph were definitely not necessary - do people actually need to see these?
That sounds unhealthy. The behaviour in the article sounds like a practical and sensible way to cope with impending loss.
Absolutely hellish to maintain once you get into territories of different localization, A/B testing, engineering teams that constantly change small things in UI (for valid reasons). I think it might work on a product that changes once a year, but not sure about maintainability past that.

Every time I worked with dedicated QA teams, we (core engineering) ended up leading the effort of writing maintainable automated tests. At some point, it was much easier to just do it ourselves.
Add me to the list of the betricked!
This sounds a bit like a justification of plagiarism. In science, you must cite the original work.
It's a lot easier if you can rule out the silly alternates.
Misleading post, headline states "Google not objecting to order to provide Micheál Martin with identities of those behind ‘fake adverts’"

As posted makes it sound like they're resisting it.
> if there were at least a commonly agreed base framework of concepts and ways to do and especially to name things

All of the above exist, the International Software Testing Qualification Board is one of the entities offering certifications in this: https://www.istqb.org/
> Developing superhuman AI is a game you can only play once

But that's not right. Stockfish is superhumanly intelligent at playing chess but it is not the result of a single match between its creator and itself. Humans played chess against computers over and over, for decades, and the "superintelligence" level was seen coming a mile off. Moreover it was never dangerous and those AI techniques never led to a general intelligence.

This is the problem with AI doomers like Yudkowsky. They use rhetorical skill to make clever sounding arguments that contain fallacies, and hope you won't notice. The assumption you can only "play once" is a wild one and thrown in at the end with absolutely nothing earlier in the story supporting it or backing it up.
Our First Netflix Data Engineering Summit
>That still doesn't mean that we positively know what goes on under the event horizon.

Could the inside of a black hole be an "observable universe"? I ask because our observable universe is a little smaller than its Schwarzschild radius. Ie could our edges be an event horizon too?