skysight-inc/HackerNews huggingface dataset:
Finally a comment that mentions the obvious.

As an outside observer, I don't know the company culture directly, but I have to assume Baker is not the type of person to just leave that role. If she wanted to leave, she could stay until a permanent CEO has been found.

It must have become obvious by now, even to the board, that Mozilla has been a sinking ship under the destructive influence of Baker.

Growing dissatisfaction within the employee base could play a role. But judging from the comfortable bubble they live in due to google money coming in regardless of performance, it seems this is more about the board seeing the stagnation that endangers their own future income as well.

I would not be surprised if, internally, the resignation was planned together with Baker already 2-3 years ago, and her pay rise was part of the internal deal to compensate her.

I helped create Librewolf, which originally was still called Librefox. Mozilla complained about the "fox" part of the name. While that behavior is probably understandable, it shows the type of company Mozilla has become, where a small irrelevant open-source skin of Firefox is seen as a threat. Mozilla, unfortunately, has long been a wolf in sheeps clothing, working together with Google behind the scenes to harm the open non-commercial internet.
As far as I understand prepared statements don't help here as the JIT output is not saved but generated for each execution. In this case I'm also using an ORM (EF Core) which doesn't expose the ability to prepare statements.
The infuriating part is when they spin this as some sort of employee privacy move, as if the employee (now ex-employee? But not really, because of WARN) has no input in that decision.
This makes my blood boil. If I "bought" these shows, you are literally (and sadly legally) stealing my stuff.

And money is not even the issue. My "unreasonable" request is that I get to keep what I buy.

Piracy offers me this. It also offers me a free product, but that's mostly irrelevant. I have a gigantic bandcamp library precisely because they let me download drm-free files (but even they pull up stuff; that's ok, I have my local files).

Pirate everything. Rip everything. Keep backups.
That IS the best answer.
Climate change disaster timelines are longer than AI timelines.

Geometric growth doesn't feel like much until you slam into the wall.
> But in practice that's a lot of work.

In practice there are no built-in mechanics to deal with representatives. Wait X years for reelection is not the option.

Liquid Democracy would be a possible solution, in which you have the right to vote on all policy directly, or delegate and revoke your voting rights at any moment to a representative. That would be the only way to deal with representatives that promise one thing in campaigns and do something different once they are in office (aside from the many other benefits it would bring).
Do you recall the old days (like 2006?) when having Apple earbuds was a fashion statement?
> oft-changing-but-rarely-majorly data

I think you're referring to SCDs, and there are plenty of well-defined ways to track these within relational databases:

https://en.wikipedia.org/wiki/Slowly_changing_dimension

Why git?
OpenBSD's team has already reacted and added Word to OpenBSD

* https://marc.info/?l=openbsd-tech&m=170742832804260&w=2

* https://news.ycombinator.com/item?id=39309638
A lot of the weak security now being exposed by the Flipper Zero (but they already existed and were actively being exploited) are the result of trading in security for convenience.

An example: Contactless payments, I can pay up to €50 by just pressing my bank card against the receiver. Very convenient, but, anyone can hold a receiver up to where I have my card and steal money that way. There's insurances of course, in this case the bank is pretty clear in saying "we know this is a risk and you will be compensated", same as with their apps etc. But it is a tradeoff.
That’s over the top hype than any thread to reality. They sure did a great job at making a portable _monitor_. But, to do anything other than numb consumption of Apple sanctioned content, you’re going to need a keyboard and a Mac.
And remember that thing lasts 2.5 hours on a battery hanging by your hip.

Sure, it’s a first gen device, and it is supposed to evolve into something that solves several shortcomings, but it certainly does not have the bones for a “true portable computing” platform.

They could even add a miniature M* SOC in there to let you wear a MAC on your nose, make it lighter, thinner, etc over the years, but it is still a thing on your nose that you need to interact with an external keyboard.

When the iPhone was first introduced, sure it lacked copy and paste, ability to run Flash(in more use at the time), and several shortcomings, but it had the interface(touch screen with just the fingers) nailed perfect that made it the success it is.
Rails for SaaS/CRUD, haven’t done anything semi-static in a while, but would probably go with Webflow.
Presumably things like "your credentials to the account that we deposit RSUs into" or "your picture of the beer they served in the cafeteria one time that you liked".
You now had to deal with react instead of the DOM. Mission accomplished.
It seems DO uses the same methodology for their customer support.
Firefox is a pretty good browser, I wonder what caused people to switch.
Agree you can't kill all the badness, but e.g. web security has gotten better in many respects primarily (I have no proof of this claim but I was a pentester for a long time) because of improvements in libraries and frameworks.

I don't think Rust offers anything special in this regard however.

Rather I think it is better understanding of the security nuances of particular problem domains that lead to api safety improvements.

Devs today are not particularly better at preventing xss or sqli than they used to be but the default tools they reach for have APIs that make it harder to do the wrong thing.
That sounds totally doable by using off the shelf tech, could even be versioned. A couple developers (front and backend) can deliver a MVP for this product in a matter of weeks.
Well, if you like crashy programs as opposed to insecure ones, sure!

CHERI would stop memory issues being exploited, but it won't make your program work correctly when those same errors are encountered.
I wonder if this is the beginning of the end of in-flight entertainment. Once the Wi-Fi gets reliable enough, people will probably just start using their own devices and streaming services. Which of course becomes a great cost-cutting opportunity for airlines as they could potentially ditch their own systems. I have no idea what % of costs the in-flight system represents, but if the margins are as thin as people say I'm sure they'll jump at the opportunity.
I mean, there are these two comments [0] [1] from some time ago.

Looking more closely at your original argument: "I'd love to donate, but if only Mitchell Baker weren't making such a mess of it"; I've only read "I'd love to donate, but Mozilla won't let me donate to the browser". First, I think a lot of the comments in the search fall under the category of "Mozilla isn't well run and I don't think they'd spend my donation well", because I think you have to file every comment about Baker's salary increasing while revenue and Firefox market share are decreasing in that folder.

But second, I think the two options you gave up there are actually the same option. I think a lot of people commenting here think Firefox is the only thing that Mozilla should work on, the overwhelming majority of resources should be spent on it, and you should be able to donate directly to it. Anything else is poor management and not worthy of their donation.

[0]: https://news.ycombinator.com/item?id=36381450

[1]: https://news.ycombinator.com/item?id=36381450
That's how I feel; I'm confident that if I had one it would end up in a drawer alongside raspberry pi's and ESP32s and the like, but hearing it may be banned is a compelling argument to get one.

That said, this is the most popular one, I'm sure there's clones out there already that fly under the radar.
Chambers doesn't look like she has any other digital footprint in general apart from the one LinkedIn page that still doesn't contain any personal info other than her workex and education.

I would argue this is much better than having your own website and putting out more information about yourself than is needed.
From Dutch we've had uitwaaien, gezellig and now niksen.
Having uses both, it just feels like trading one set of quirks for another set of quirks.

In general, hooks seem tidier, but the quirks of useEffect seem rather more surprising than the old way.
Node, TypeScript, ESLint, Tauri, and a bunch of custom ESLint rules and a bunch of custom unit tests.
> but most of those were useless.

Has anyone ever made a calculator that manages significant digits ?

Edit: I mean, if (e.g.) both inputs to a binary operation have 5 digits of which only 3 are significant, then does said calculator grok this.
The challenge isn't that people don't want to engage; it's that the demands of daily life, such as working long hours to make ends meet, leave little room for the kind of sustained political involvement that wealthier individuals can afford. When we say that people delegate their power to figureheads, it might be more a reflection of an unequal system that doesn't effectively support widespread civic participation, rather than a choice made out of apathy.
Controversial opinion: Redux (and the Elm architecture behind it) only works with a typed language like TypeScript (or Elm) which takes away the error-prone part. With good type completion, some of the "pretty tedious" part goes away as well.
In my state resorts have the legal right to allow / deny uphill travel, regardless of whether it's public land or not. This is for several reasons that are mostly related to safety:

- There's a large amount of people that skin up and hike here, enough to present crowding issues if it's allowed

- Grooming being done in the early morning when people want to start hiking, and it's hard to see hikers regardless of if they use lights or not

- Areas that are roped off from above can be closed for unstable snow with high avalanche risk, or may be subject to bombing operations (hand placed explosives and artillery to induce avalanches before they are caused by skiers)

Check your areas rules, many allow it under certain conditions like time of day, routes, lights, etc. It's a good idea to make friends with someone on the patrol team so you know which areas are safe (and contain good snow ;) )
Backend: Node with sqlite, Postgres or MySQL.
Front: Vue with Bootstrap
If you are going to go vertical then do it properly.

OpenAI could just build their own framework for internal use that works well on their silicon (see Jax+tpu)

Their starting point? Triton plus some triton libs. Jax chipped away at TF like this, and no reason why Triton can’t do the same to PyTorch.
Strong article so far, I'm still reading, but I found it rather jarring to have a cartoon in the middle with a white couple cherishing a baby and a black woman killing one...
> Mozilla, unfortunately, has long been a wolf in sheeps clothing, working together with Google behind the scenes to harm the open non-commercial internet.

That's a pretty strong claim, probably one that requires providing further proof of that happening, than just pointing to "comfortable bubble due to google money" and Mozilla defending their trademark.
Science News (the one in Science magazine) is written by journalists.
In central Europe, we have the complete company organigram in namely, so it can't be that bad.
> You put in your two weeks? Nah, you're out the moment you hit send on that email. Manager alerts security, who then come over to your desk. You get your jacket and whatever you walked in with and get walked out.

This will work for the first 5-10-20 people, then word of mouth goes out about this policy and your evil designer is downloading everything the day before sending their resignation mail.
It's unlikely that anything beats GPT-4.5-base. Mistral is good but still far behind.
1) To start the science that they use is normally of subpar quality. Sometimes even fake.

I can't see why two decades of sociology articles about how playing violin to octopuses make them more lively, should count more than two decades of biology articles looking for cures again each octopus disease known and found by farmers. One of this approaches helped greatly to reduce pain in octopuses, the other just wasted our time.

2) They cherry-pick facts relentlessly.

Evidence that goes against their agenda are systematically ignored and the authors mocked. They have a tunnel vision about the themes or interpret the facts as is better for them. See point 1.

3) They pick random facts to push random taboos on some organisms, but declare other similar organisms moral to eat

Just because they rank lower in their personal preferences or cultures. Cricket pie anyone?

4) They attribute malice or incompetence to their targets by default

People trying to domesticate octopuses "moved by greed". Maybe they want to help alleviate famine? We don't speak about this. Only our acts are pure, they say, while keep asking for money.

5) As their science is weak, they are unable to foresee the holes in their plan, or the collateral damages of their acts.

6) Even worse, they know but choose to ignore the consequences

After researchers spend their time informing them again and again of the collateral effects that their actions will have, they proclaim that is for a bigger cause and couldnn't care less about the consequences. They act by a sort of pseudo-religious ideology with random dogmas that can't be changed a Milimeter, even after proven false. Check the history of grey squirrel in Italy, or racoons on Japan.

7) They never, ever, will offer help to fix their own ecological disasters

After they cause economical damages of millions of dollars and waste the time of everybody, then shrug and just change their target.

8) They are prone to be deceived and manipulated from outer agents with their own agendas, that treat them as disposable.

People "against oil", are happy to be economically supported by oil companies. Are we sure that this activists aren't funded by <nice company killing lots of wild octopuses> to boycott <evil company farming domesticated octopuses>? or by somebody aiming to gain time to build their own farms?. I wouldn't bet my money against this.
I believe the JIT is pretty much a failure, yes. It was well-meant, but LLVM just isn't the right tool for this. I've turned it off globally. (I don't use any ORMs, so it's not simply about strange query patterns.)

Query parallelization, on the other hand, can actually be useful—and most importantly, rarely hurts.
How do you wax lyrical for an entire article about the excellently engaging ergonomics of sudo and not mention Linux/Unix family of OSes
Most optimisers cache the execution plan based on a hash of the query, hence reuse when using prepared statements vs not.

Oracle has an option to detect literals (CURSOR_SHARING) and essentially replace them with binds internally, in order to increase performance and stop the query pool getting filled up with the same statement(s).
I pick what I know best and "just works" because of my experience and the framework's maturity. YMMV

Backend: Spring Boot (Java or Kotlin depending on solo vs cooperation)

Frontend: React ("https://hilla.dev/" looks interesting, might try that next)

Database: Postgres
Mine is the CHAMP-stack. Consisting of CSS, HTML, Apache, MySQL and PHP.
Languages can actually help here! They aren't a panacea, of course, but you can do all sorts of things like encode things into the type system ("this is a safe string, you cannot put user tainted input into it without escaping it") or be amenable to static analysis ("this variable is not declared") or even manual code review ("I can understand the entire semantics of this block of code because it is impossible to override the behavior of the operations here").
> In practice there are no built-in mechanics to deal with representatives.

There is if the population agrees that the representative is not acting in accordance to wishes of the population: Off with their head – literally. What are they going to do about it with no head?

In practice, representatives by and large do act in accordance with the wishes of the constituency to the best of their ability. The larger problem they face is a constituency that doesn't want to be involved. I expect at least 95% of the population have never even spoken to their representative even just once. But the representatives are only human. They do not possess mind reading abilities, so they can only go on what the tiny fraction of the population who are active submit.

But, of course, the tiny fraction of the population who are active are probably not representative of the entire population as a whole, and so you get large disconnects even when the representatives are acting in good faith.
> Climate change disaster timelines are longer than AI timelines.

Sure ... and we've already let Koch and Co. piss 50 years of lead time up against the wall since the first global recognition of the problem in the 1970s.

Now that it's starting to bite and properly ramp up there's far too many that are stretched out lizard like on Titanic deckchairs asking AI Jeeves for another drink.
People seem convinced they need to pull in 12 different libraries and frameworks these days, and then get mad that it's complicated.

Of course it's complicated. You made it complicated.
In private DMs?
For SaaS, React frontend and Laravel/Lumen on the backend. DB is usually Postgres.
Here is the number 1 thing you need to realize about web development: it goes from simple article websites to ecommerce to full blown applications like Photopea or Figma.

People act as if it's all 'web development'. And then you get things like "We need to move back to server side rendering". And I think: why the hell did you think using a front-end only framework was ever good for your e-commerce website?

It boils down to this: figure out what you're actually doing, and get the best tools for that.

React is an awesome framework, but if you're building a simple blog, why the hell would you use that?
I always assumed that the VPN connection is shared by many HTB users, so it seemed like a good idea to be a bit paranoid about the trustworthyness of a VM that is reachable by lots of users that may want to mess around. Maybe I was wrong about that assumption :D

Anyway, apart from this possibly impractical usecase, it just seems like an interesting problem.

I'll just go with a standard bridge + ip/nftables setup then. Thanks for the input.
Hackernews became reddit. Sad days.
Are there some realistic Text-To-Speech voice models out there that I can use locally and for free?

I know that ElevenLabs, Microsoft, of course OpenAI have some nice voices. But I would like to use them locally, or maybe in an app?
What? I tell my dad that the funny spreadsheets he made in the 60s are AI now.
I wrote a script that is looking at the git log of a git repository, it tries to sum up how many commits per author/number of lines changed etc, when the author was active. This also gives some indication on the 'turnover rate' or whatever. (I know lines changed and number of commits is a very bad indication, but it is some indication)

https://github.com/MoserMichael/gittools/blob/main/git-whois...
Interesting topic. Any suggestions for Linux?
I'd be interested to know how often these changes have an effect in real queries. The "Use Limit instead of Unique to implement DISTINCT, when possible" change in particular feels like it would only apply to very silly queries.

Do the PostgreSQL developers have any source of information about this?
> First, an Android browser that's as fast as Chrome (a reskin) with a built-in ad-blocker

Bromite existed before Brave and was (still is, in the Cromite fork) better in every way.
I don't think there is a language that can guarantee correct operation when you write bugs in it ;)
It's necessary but way overused. The docs have a whole page explaining how things some devs do with useEffect should be done differently: https://react.dev/learn/you-might-not-need-an-effect.

I think class based components led to really strange patterns that people thought should all be replaced with useEffect in function components.

UseEffect is sometimes necessary and then it's fine but it's a code smell too.
I'd prefer to buy a theoretical open-source R8000-R12000 based board*, but the only 'open source MIPS' stuff I ever see are low end R4000 and R5000 microcontrollers.

* Yours sincerely one of the few people that isn't offended by delay slots.

edit: and yes, Loongson is on my radar, has been for a while, but again only ever see microcontrollers rather than general purpose computing motherboards.

another edit: looks like loongson-3 3A5000 and 7A2000 boards and mini-PCs are starting to become reasonably affordable, so my dream may be reality in the nearish future.
Eight triiiiiiilion dollars the new valuation of open source
"killing"
Go, postgres, redis, vue, tailwind css. Been wanting to experiment with htmx, but haven’t gotten around to it yet.
Fancy. Think I'm gonna go with a traditional bridge for my usecase, but this looks pretty cool. Maybe I have some other uses for it for other applications.

Thank you :)
Morello provides some safety mechanisms, but it doesn't solve all problems. It only covers certain types of memory corruption issues, for example.
even with completion it's a lot of busywork: define actions, reducers, etc for every state change
TCP is also concerned with fairness (after Van Jacobson's famous paper[1]). We've long known that you can batter data through the network at speed if you don't care about other users. How does QUIC preserve fairness?

[1] https://inst.eecs.berkeley.edu/~cs162/fa23/static/readings/j...
I think admins don't need to log into an account to see private messages. Was like that at two of my previous jobs.
> Only one is too large to be developed elsewhere.

Do a company's products need to be only products that only they can produce? I mean, almost nothing fits this bill, not even things like office suites. You're ruling out stuff like milk, glass, tires, text editors, etc.

> Only one provides a meaningful challenge to the hegemony of webkit.

Like, if your argument is that they have a super important product and should only focus on that, then OK. That's an interesting discussion that maybe I agree with (maybe not though).

> The rest might as well be seen as make work programs for product managers.

This is pretty dismissive, but also probably true for at least 30% of all tech products (which are also make work programs for software engineers, management, etc). I don't know why you're singling out Mozilla here, Google has a division of people making blimps so they don't go work for competitors.
Defence in depth is a sound principle. It helps to raise the cost of successful attack, and to avoid single points of failure in your security architecture. It mitigates malicious attacks, human error and component failure.

You are right that nation states can throw more resources at an attack. All you can do is make attacks as difficult and expensive as possible for an attacker to pull off without detection (commensurate with the value of the assets being protected).
Do companies that do not have such clauses and provide comparable services exist? If not, customers are not free to refuse to engage even in theory.

If those companies exist, is there any practical way for customers to know which ones they are? If not, customers are not free to refuse to engage in practice.

The only freedom that customers (=citizens) have is to engage into a cartel (=state) to impose their collective interests (=democratic choice) on companies by force (=law).

Companies are then free to refuse to engage with states which have such customer-protective clauses in their laws.