skysight-inc/HackerNews huggingface dataset:
I've also run (and even participated in!) in academia.

In academia (at least the country I was in), it's very hard to move up a salary level. There's a lengthy internal, for higher levels even an external, review process with letters of support that have to be written, a panel that meets only every few months, etc. Going from academic level A to B can take six months. It's far faster to have your supervisor create a level B position hypertailored to you and have you apply, for me that took less than half the time. No letters of support, only one interview panel, you can finish all prerequisites in a few weeks.

Plus your supervisor gets to, as it's called in OP's article, 'talent-hoard'; there might be a good CV coming through for a future position.
The issue here is the SysV amd64 ABI. You could also just make your language-internal ABI not be SysV? As long as these aren't exposed to SysV C callers, you can use any calling convention you want.

https://llvm.org/docs/LangRef.html#calling-conventions

For those curious, the relevant diff in neatlang is: https://github.com/Neat-Lang/neat/commit/f4ba38cefc1e26631a5.... It looks much more involved than changing the emitted LLVM calling conventions. Possibly the author wants these types exposed with some deterministic calling convention to C programs.
Yeah, like humans don't have ten fingers. Hint: 10, so what are those people thinking? ;-)
The entire point of what I’m suggesting is to have a device identify itself.

If you set your phone to randomize its MAC address, then it should not send anything that specifically identifies it. If you ask your printer to connect to your corporate wireless network and you tell it to use WPA4-self-provisioning or whatever it’s called, then it should fully identify itself. Also, it’s a printer, and anyone in WiFi range is presumably privy to its existence.

Sure, if someone else spoofs the network, then they might collect the printer’s provisioning info, but one way or another the printer needs to decide to trust whatever network it ends up connecting to. And with a sufficiently well designed protocol, if the printer connects to the wrong network, then the owner of that network can’t actually impersonate the printer to the real network, because the derived keys won’t match.
I'm sorry HN, but you continue to downplay long covid when there is evidence like this for a biological pathology right in front of you.

Please stop saying it is psychosomatic. Please stop saying only unfit people get it. People stop saying it is caused only by the vaccine.

All of these things do nothing helpful. The science will continue to push through these opinions regardless.

Why can't the discussion be focused on the actual finding here which is that we have a much clearer model of what is causing PEM / exercise intolerance in symptomatic long covid patients versus asymptomatic controls via amyloid deposits, mitochondria dysfunction, and muscle structure changes.
I'm all gung-ho for FPGAs since that's a huge part of my job, but I have to admit that GPUs will always be easier, faster, and more convenient for just about everything you'd want to do as some type of accelerator. There would only be exceptions for power usage, and maybe peak throughout.

Where FPGAs shine best are in embedded or very obscure applications where GPUs are way too big, power hungry, or cannot support enough parallelization of your specific algo.
I’ve applied to 20+ nvidia sr software engineer jobs since february of last year and every single one had an internal manager referral (former colleague at another company).

I got 3 interviews. The hiring managers were nice, but they just had so many other applicants to choose from that I never made it past the first interview.
No, it went back to 30s now.
Mexico City is a wonderful place to visit, if you stay in the nicer areas! (It's the biggest city in North America - there's a lot of both "nicer" and "not-nice" areas) I remember the Museo Soumaya being pretty spectacular when I was there a year ago, and Chapultepec Castle was pretty cool too.

Personally I didn't find the National Archeological Museum to be quite as spectacular as the feature article did, but it was certainly worth spending a few hours there! The restaurant on site was also worth a mention - it went the "authentic dishes from different regions of Mexico" route and did it quite well.
Back when I was younger, I was phone support for a phone company's DSL department. They sent out an email telling the customers that we'd never send emails asking for their passwords. Then, less than 3 weeks later, they sent out a mass email telling customers that we had security issues and that they needed them to send their passwords to us.

I'm pretty sure this is common.
It doesn't, or at least it doesn't for traditional applications. UWP (store apps) might, but I've never seen it.

To be fair, identifying an app when not delivered through some locked down store mechanism is actually problematic. DPAPI is tied to the user/machine account along with additional entropy provided by the application itself. It would be nice if MS added an option for DPAPI to use a hash of the name blessed by a CA in a valid code signing cert. However, that wouldn't matter in this case, since they had domain admin and could easily manipulate the cert store.
I think that generics is really difficult to do well when added to a language later. At the very least you will have a lot of pre-existing code, including the standard library, that would have benefitted from generics, but doesn't because it was written before generics existed. And you will almost certainly have cases where generics don't mesh well with other features. I think that if go was designed from the beginning with generics, then generics probably would have worked better in go (and similarly for java).
My understanding is that the kind of workflow used in that area is to print from a roll of paper with a bit of bleed (printing slightly larger so there’s no white edge) and then cutting down to the desired size?

It is annoying trying to get good sized frames, maybe a lot of them are custom made too? Often they’ll at least have a custom mat board cut I think.
As a parent it's just a genuinely nice show to watch. There is so much complete crap out there now that Bluey is a breath of fresh air.

A few others are good fun as well like Grizzy and The Lemmings. But Bluey reigns supreme.

Although I wish the phone game didn't have in app purchases. At least the Bluey video game on Steam is good and without in app purchases or micro transaction nonsense.
Great, now I need to stop even more often...where do I sign up? If your wife has to pee for 15-20 minutes, that often, she should probably see a doctor. Last week I drove my V8 F-150 from Raleigh to near Baltimore Maryland (~310 miles) with 4 adults and a child, a bed full of suitcases and hockey equipment (for a tournament) and we stopped exactly once for coffee. I filled the gas tank in Raleigh, and didn't fill it again until we were almost halfway back to Raleigh on the way home.

Give me 500 miles of realistic range and a 10 minute full-tank "fill-up" in an EV and I'll consider it. Until then, it's simply not going to happen for me.
I feel ya, I used to have one of these:

https://www.gsmarena.com/sony_ericsson_m600-pictures-1425.ph...

And these:

https://www.gsmarena.com/nokia_6820-pictures-565.php

Had the N900 and N95 as well. Back then it was easy to have a cool/unique phone because carriers weren't on top of their hardware lineups. Now everything is a boring rounded-corners slate. Even Sony gave up with the squared-edges on their Xperia lineup. I'm optimistic that rollable screens will bring back some real innovation beyond just clam-shells.
> I think a lot of it is just that - familiarity.

True. For example, as an European I'd obviously have some difficulties expressing sizes in inches and feet, but I'd have some difficulties too if I was buying a new monitor or TV and the clerk asked me the screen size in centimeters.
Ask HN: Do you think prompt writing for AI models will stay?
I am wondering if I should continue working on this skill set. Although I am enjoying learning how to write better prompts and it is giving me better results, should I continue going deeper into it?

I was thinking about how one may come up with a different interface soon to speak with AI making it redundant.

What do you guys think?
https://physics.aps.org/articles/v7/5 ?
Did you mean Sapote? https://en.m.wikipedia.org/wiki/Sapote
Actually there are lots of fruits called Sapote that are not the same fruit. Which of all Sapotes is your Sapote?
> Because if I can rewrite my printer to not intentionally be a total piece of shit, the company gets less money by intentionally expiring or wasting ink, DRM locking ink cartridge brands, or "service needed" bricking the device after a period of time.

This is exactly the kind of perverse incentives that I'm talking about though. And this kind of misbehavior happens way more than someone installing a 3rd party update that bricks someone's device.
How to Build and Ship Projects Fast
They are. Try to buy insurance outside of open enrollment without a qualifying life event; you can, but only from insurers who underwrite against preexisting conditions. That's for the same reason: because otherwise, people would just forego insurance until they needed it.
AI Tube
She opened the bank account and applied for the loan at separate times. So she wasn't aware that the loan being applied for was related to the bank account previously made.
I was not expecting it to be a GPL case. That's incredible. I wouldn't be able to sleep without more details about the licences at play here, so I found this helpful article that satisfied my curiosity: http://www.fosspatents.com/2015/12/google-switches-to-open-s...
Collie, a minimal RSS feed reader application
https://bmcinfectdis.biomedcentral.com/articles/10.1186/s128...
On Windows with the default cdecl calling convention structs bigger than 8 bytes don’t get passed in registers [1].

[1]: https://learn.microsoft.com/en-us/cpp/build/x64-calling-conv...
My fiancée made a wonderful series of 3 watercolor paintings for me of the musical instrument I play. She’s not a pretentious paper art genius (she makes digital art for video games), so she just used the standard size she bought at the store that came as a full stack of tear-off pads for watercolor: 14”x20”, assuming that we would just be able to slap them in frames when we were done. All the local framing shops and even the chain store quoted us hundreds of dollars just to cut the border mats that would adapt them to standard frames. Online I found a solution that was tens of dollars for all 3 frames and mats and it really made me feel like a loser for going out of the way to drive around and shop local in the SF Bay Area.
It's good to think about things carefully for extended periods of time without distraction because it allows you to understand things you would not have understood otherwise.
You are right in this. It seems they're also in the process of figuring it out.
If I had to guess, it’s a matter of setting up the Huffman tables such that every code ends up with a length of four bits, and then prepending that precomputed Huffman table onto the “compressed” stream. Then you can abuse the zlib library as a decompressor mapping the 4-bit “Huffman” codes to regular bytes.

Of course, this won’t be anywhere near as efficient as just implementing the decoder in C, as Huffman decoding needs to be much more general than just unpacking fixed-width chunks. But it will definitely be an improvement over naive loops.

I wonder whether .hex() could be pressed into service as a very scuffed 4-bit unpacker? Maybe something like .hex().encode().translate() to get an arbitrary palette mapping?
> What’s always true is that if you take too many risks and lose enough of them, the time saved by the shortcuts will be massively overwhelmed by the time lost dealing with them.

Yeah that’s my current project to a T. Now product wonders why it takes so long to get things done. Not sure how we’re going to dig out.
Yes, and I also know this means that the US can spread out within metro areas, not that it must spread out. Did you know that?
Weren't users willingly sharing that data with eachother? Encrypting it wouldn't make sense in that use case.
thanks! but here we were discussing specifically the distinction between the approaches to concurrency that require you to explicitly structure your code around yield points, like async/await, and the kinds that don't, like preemptive multitasking and what i'm calling cooperative multitasking. this is unnecessarily difficult to discuss coherently if you insist on applying the term 'cooperative multitasking' indiscriminately to both, which i've shown above is in violation of established usage, and refusing to suggest an alternative term

i'll see if i can flesh out the wikipedia article a bit
I can't think of a less compelling DNSSEC use-case than enrolling your own SSH servers, which strangers on the Internet never log into, into a global PKI. That's a complete mismatch of threat models. Why would you give the United States Government a say in whether you trust your own server? It's your own server! You don't have the problem DNSSEC tries to solve.

I don't like trust-on-first-use either. Fortunately, it's easy to solve: just use an SSH CA, which is what most shops with significant numbers of servers do (because it's drastically easier to administer than individual keys).

I've never seen this "technitium" blog before. It's very long. If you want to see me pick it apart, submit it tomorrow and see if you can get it on the front page. Very few people are reading this thread, so I'm definitely not going to close-read it just for this.
What I’m wondering has nothing to do with signal strength. I’m wondering if the protocol differences have any effect on reliability in situations where the wireless connection is less reliable. Because, for example, there’s less negotiation on reconnecting to the network or something.

After all, reliability is a cross-cutting concern :)
naive mode
Or ABIs in general, really.

As any Asm programmer can tell you, this is one of the low-hanging fruits that compilers can easily be beaten at --- don't blindly follow convention, do what makes the most sense in a specific scenario.
> That is a much smaller percentage of the population, more like 1% or less.

(French) https://www.sante.fr/covid-long-2-millions-de-personnes-pres...

1.2% of the French population has long COVID with large/very large impact on daily activities. 4% has long COVID more generally. So I expect more than 1% of chances of getting debilitating symptoms.
Though it could be that people with "light" long COVID recover while people with debilitating long COVID don't and make for an unexpectedly high share of the population as they accumulate. (not saying I think that this is the case, just saying this is a possible alternative explanation to "chances of debilitating long COVID are chances of long COVID / 4")
I put the bulk of the blame for that on California.

Contractor still generally cost the same or more, but California law has made it nearly impossible for contractors to Work Direct so they have job shops that skim 50% off the top.
I saw std::function and std::string (e.g. TotW 127, https://abseil.io/tips/117) being passed by value a lot in newer google3 code. Both are larger than 16 bytes.
How does search work without a database?

I notice the URL has parameters called `query` and `sort`:

```
https://standardebooks.org/ebooks?query=doyle&sort=newest&vi...
```
In short: a simple (programming) language does means that every small part/line is simple. But it doesn't mean that the combination of all parts/lines is simple. Rather the opposite.
So where do those valuable people end up then?
That's increíble rude and egocentric, "we" are you talking in behalf of Mexicans? Your comment would be really appreciated... On Twitter. Racista.
> The registrar controls your keys.

I've been managing domains with DNSSEC for several years and I've always had control of my keys.

Clarification of who controls what keys [1]:

The TLD zone's private keys are managed by the company operating
it. For a Country Code Top-Level Domain (ccTLD), the government of
the country will be managing the key. For popular TLDs like .COM or
.NET, it will be the U.S. government through the operator Verisign.

For popular ccTLD .IO, it is the government of British Indian Ocean
Territory.

The private keys for an individual domain name are managed by the
domain owner either directly or via the DNS provider hosting their
domain name.

With DNSSEC, it is pretty clear who controls the private keys and
also keeps the risks involved distributed. Which means while China
holds private keys for .cn ccTLD, it can only sign domain names under
it.

[1]: https://blog.technitium.com/2023/05/for-dnssec-and-why-dane-...
prompt engineering << being an LLM politician that guides thousands of LLM agents to do what you want
*all Mexicans.
Recent and related:

Standard Ebooks - https://news.ycombinator.com/item?id=38831219 - Jan 2024 (148 comments)
Neat trick! I implemented a similar bitpacking approach for solving matrix equations in GF(2), which can be used for things like forging CRC hashes (faster than bruteforce) and solving certain cryptography problems. Code is here: https://github.com/nneonneo/pwn-stuff/blob/master/math/gf2.p....
"Insecure mode" sounds a lot better than "default mode". If I didn't know what any of the options meant, I'd feel safe using BlockCipherMode.Default, but I wouldn't feel safe using BlockCipherMode.Insecure.
No, it's not. CBC padding oracles are just the most popular incarnation of the underlying problem.

https://crypto.stanford.edu/RealWorldCrypto/slides/phil.pdf
Hackers hijack govt and business accounts on X for crypto scams
Does the C++ ABI also spill 24-byte objects to the stack for each call? I guess I don't expect std::string or std::function parameters to be fast but it's still surprising.
Related:

Show HN: Learn how WebRTC actually works. A book on the protocols, not just APIs - https://news.ycombinator.com/item?id=24323589 - Aug 2020 (72 comments)

Show HN: WebRTC for the Curious – Go Beyond the APIs - https://news.ycombinator.com/item?id=24283943 - Aug 2020 (1 comment)
Growing a waitlist is pretty hard, any tips?
Hey yall,

I recently found out a good conversion page for waitlist pages is around 8-12 percent. Wow, pretty low. I'm trying to grow my waitlist right now for LoomFlows.com and it's actually hard.

Any have any advice or experience on growing waitlist for software products.
This was also one of my first questions. They made it sound like there were a lot of small nuances and they could not afford to spend the time working them out in detail ahead of time.
That's not what he said. He said IF that WOULD have happened, it would have been better for everyone except for the Go designers.
Seems like when there are too few browser engines we fret about monopolies and then when there are too many we moan about how we have to deal with the idiosyncrasies of a bunch of different browsers
Looks to be a lot of useful experience summarised here. I've just skimmed parts so far, but will come back and read more as time allows.

> https://github.com/binkley/modern-java-practices#keep-your-b...

It boggles my mind that in this day in age, Maven still recompiles everything if you touch anything. The problem of figuring out what files need to be built and building only them was solved for C in I think the late 70s (makedepend).

I don't know if Gradle is better in this respect. (It certainly can't be worse.)
I wonder if large language model architectures can be devised to have this capability.

Right now a model like GPT 4V will confidently identify the blue (incorrect) picture as Neptune. Similarly, if asked, it says that it’s blue.

Even if trained on this new information, which supersedes all previous information on the color, it is outweighed by the sheer volume of incorrect information. The loss function optimises for statistically more common answers — not more correct answers.

We need to somehow have the AI recognise new information that supersedes older information and then invalidate its older facts.
I am pretty darn sure it is feasible:

https://github.com/nathhB/nbnet

In fact, I am on the hunt for a minimal C library to do exactly this for a hobby project and nbnet is the best candidate I have found so far. The only drawback so far is that I would love to have voice support and nbnet (rightfully so to keep it simple) does not provide it and I would have to roll it on my own.
The post mentioned a few things that Go has done that seem to be "obvious" choices today:

- automatic formatting

- unified tooling

- module/library support

I'd add more items to that list, which aren't unique to Go of course, but where Go has clearly contributed to the new consensus:

- composition over inheritance

- compiling to native binaries

- error values over exceptions

- array slicing

- no automatic integer type conversions

There's plenty I don't like about Go, and I rant about it sometimes, but I also respect it. It moved the art forward.

...now can I please compile my code with unused variables when I'm deliberately trying to make my tests fail? :-D
Vote with your wallet has never worked. Even the most basic economic principles like supply and demand have been shown to be broken in the last few years. Countless businesses have begun rent-seeking with quarterly price increases, opaque markups hidden until it's time to swipe your card, outright theft from customers and employees, etc. Even if they alienate a few people, there's always more ignorant/stupid people who won't research before they make a purchase and who will go along with whatever is done to them anyway.

And it's compounded with things like housing and food. You can't go without either unless you want to live a completely undignified existence and with a vastly shortened lifespan.

Another example to throw in there is indoor smoking too. People never stopped going out to eat or to bars when you were forced to sit in a thick haze of second hand smoke, and even if you did avoid it there were hundreds of other people who didn't care. I can't imagine how things would be if the push to get rid of it happened in more recent times rather than 20-25 years ago. Red states certainly would have never banned it and there would be droves of people going out intentionally to force you to inhale their second hand smoke to own the libs.
Yes they are all over the place around DC. Go to Carderock in September, you'll find them if you're looking for them. You'll also probably find a bunch of other people foraging for them.

To find them in the city, put DC into this site and filter for Pawpaw: https://fallingfruit.org/
I'm not following unfortunately. To be clear, what I'm saying is ciphertext = Encrypt(plaintext || Hash(plaintext)) where Encrypt(data_stream)[i] = data_stream[i] XOR random_stream[i].
I'm not following how an attacker can tamper or decipher anything in the ciphertext here. The moment you tamper with any bit, the hash would become invalid. You can XOR it with whatever you want but you can't turn it into anything valid... right? What am I missing?
Kubernetes mostly displaced tools written in Ruby (Puppet, Chef, Vagrant) or Python (Ansible, Fabric?). While a lot of older datastores are written in C++, new ones that were started post-2000ish tended to be written in Java or similar.
You've misunderstood the point. I'm not claiming that DNSSEC doesn't allow you to manage your own keys! I'm saying that the hundreds of thousands of auto-signed zones at registrars that just enable DNSSEC by default don't have end-user managed keys.
I was also shocked. I think Meta is making this for their metaverse project, and their internal Facebook data shows that most people most of the time talk like complete idiots, barely able to mash a thought out of their mouth. I’ve never heard more inarticulate training data.