skysight-inc/HackerNews huggingface dataset:
The idea as I (who is not GP) see it is not that diversity makes scanning harder, it’s that it makes the blast radius smaller. Notably, though, that means we have to be talking about diversity of implementations, not just deployments—numerous deployments of just a few pieces of software can be problematic in their own ways, and of course there have been bugs with huge consequences in Apache, MSRPC, or—dare I say it—sendmail since the very earliest days.
Yes -- Tim Apple
This is easily one of the worst websites, with worst usability I've seen. It's even impossible to decrease the font size? Even the cursor on link hovers is wrong. I'm close to thinking that it's deliberate.

I hope this author won't design any other website than his own.
> n.b. you don't multiply the parameters by experts to get an effective parameter count.

I actually took the 314B from Grok's HF page [1] which describes the model as "314B parameters" when explaining why it needs a multi-GPU machine.

I certainly agree that parameter count isn't everything, though; clearly things like training data quality and fine tuning count for a lot.

[1] https://huggingface.co/xai-org/grok-1
GoCodeRemote is a jobs board curated by me, for developers, with a focus on flexible and positive work environments. There’s no AI, no scraping, and no signup required. The Apply links go (as often as possible) to the actual company jobs page.

There are plenty of job boards around but they often suffer from spam, scraped incorrect info, flooded with recruiters(LinkedIn), months old stale jobs, or they only promote positions from specific agencies.

Let me know if you find this useful or any improvements you would make.
> I agree with this. We recently removed all tracking (eg google analytics) from our homepage because we didn't want to have a cookie banner. The result: everything is going fine. Turns out we didn't need the tracking at all. Should've done it way sooner.

Thank you. The industry needs more such testimonies showing that letting go of tracking is okay and won't sink the ship.
I don’t know about the new Bing popup, but there are certain things that Microsoft already doesn’t do on EU Windows because they are not legal there, such as currently for DMA compliance.
I'm an old dinosaur of a developer but I do remember enough XCode to know that it would throw enough warnings when API calls were going to be deprecated. And you could ignore those warnings and ship your binary. But eventually those warnings come true and your binary won't work in later OS releases.

Microsoft was a dream to work with. They more or less made sure old API calls continued to work long after they stopped developing it. Usually just some wrapper code in their libraries to manage it automagically.

Part of it I feel is Apple is quick to cut insecure APIs while Microsoft will let them linger for a while and try and patch them.
What a terrible misreading of parent's comments, that's completely not in the spirit of HN and its guidelines[1].

You may feel like a cog in society, and at present, this is often not the case, compared to the situation which I talked about in a sibling comment[2].

If you disagree, try this: find a new job and put in your resignation and say that you're leaving effective immediately (or with a very short notice). Most likely, you'll have your manager and HR scrambling to get a proper handover, and sometimes followed with private comments berating you for your "lack of professionalism" and other comments like "why are you doing this to us" and "can we keep you for a little longer, please" (in violation of HR policy for the maximum notice period).

In an age where AI has replaced most humans, people would lose all leverage, and would be forced into zero-sum games (killing and maiming other people to steal their wealth) as they would not have any other mechanism to prove their worth and improve their standing in society.

[1] https://news.ycombinator.com/newsguidelines.html

[2] https://news.ycombinator.com/item?id=39743566
Yes? There's a 1000x difference between those speedups.
Where did you get that it’s posix valid? Like link to posix spec? Or hearsay? I know what you mean but haven’t found such. (SIGTERM is catchable though so it does seem a bug/overkill sending SIGKILL instead of SIGSEGV or even SIGTERM.)
When manually reviewing a lot of these sites it was not identifying PII that were in non-english since the automated scanner checks the variable name for known data types (e.g phone) but that would only work for English sites.
Also, there is a cost associated with searching. Consumers may intentionally forego the effort for perceived low marginal gains (especially in nominal rather than percentage terms, e.g. "I'm not going to waste my time to save a quarter." even if the quarter is a significant percentage difference). This is one of the factors in the success of Amazon. People "value" convenience.
Wow I had no idea that my comment was a Rorschach test.
My reading of the tax code in California is that the tax is pro-rated over the time you were resident in CA. E.g you get a grant with a 4 year vest in California and move away after 1 year: 1st year California gets all the calculated tax, second they want 1/2, 3rd year 1/3, 4th year 1/4. Roughly like that (it’s actually counted in days).
> The entire 'gamestop' thing was about proving this and they utterly destroyed a few brokerages. ESG is basically dead at this point.

This is incoherent; people getting memed into buying a dying retailer and losing money in the process proves nothing, and ESG is now pretty deeply ingrained as it becomes impossible to ignore the side effects of not caring.
"One Size Fits All": An Idea Whose Time Has Come and Gone (2005) [pdf]
>pretty sizable amount of people that care less about the philosophy

How does it show that?

It shows that they prefer to get on with their day over clicking cookie banners. It says nothing about whether they agree with the philosophy of the GDPR.
I'd be willing to give them the benefit of the doubt in this instance, as 14.4 seems to be a duff release. Haven't seen this many major issues since High Sierra.

I'm currently tracking these 3 for our staff:

https://appleinsider.com/articles/24/03/14/the-macos-sonoma-...

https://appleinsider.com/articles/24/03/16/oracle-advises-us...

https://appleinsider.com/articles/24/03/12/latest-macos-sono...
Am I missing some basic here? Why is the title misspelled? "preventDeault" vs "preventDefault"? It's correct later in the article (in the conclusion) but I found this very difficult to read through and just started skimming until I gave up on that and just searched for "preventDefault" (and the misspelling).
Yeah, I submitted it with TORCS in all-caps, but HN does some title normalisation.
We confirmed that the gambling site is not fake data, I dont know about the lead one.

Why we are saying its more is there is likely other services not in our scan list that could be vulnerable.
How can you stop it? If company A refuses to build it on moral grounds, company B will.

It is reshaping society in much the same way the industrial revolution did. Luddites resisted change, for precisely the same reason people aren't happy about AI, and it's now a derogatory label.

It's much better to adapt to a changing world but precisely what that entails is still up in the air.
As long as there is no AGI, no software engineer needs to be worried about their job. And when there is, obviously everything in every field will change and this discussion will soon be futile.
The city taxis are wayyy dirtier than Uber too, reviews were a godsend.
And yet the electrical engineers have (considering) very little trouble keeping huge national and international electrical power grids stable. Despite billions of self-interested humans using electrical power with zero-ish regard for that stability.

Admittedly, it does help that those with the real power, whom the EE's ultimately serve, want stable electrical power grids. Vs. the folks who the economists serve want wealth, power, legitimacy, status, excuses for blatantly self-serving official behavior, ...and plausible deniability, when things keep miserably going wrong from the PoV of the 99.9%.
There is a law that lead to almost every website, including every official EU website, to have a cookie banner. If you refer to the "cookie banner law" everyone will know that you mean that law.
Related:

There is no EU cookie banner law

https://news.ycombinator.com/item?id=39706375
Couldn't agree more.

Thankfully I believe this is largely just overblown hype. Silicon Valley has gotten way too high on it's own supply of bullshit and the AI craze is that being taken to the next level of insanity. Regardless, the tech industry is amoral at best. We are so obsessed with "can we" (or rather "can we convince a VC that we could") that we never take the time to stop to consider "should we".

Ultimately, watching tech find new and innovative ways to fool and to fleece people has, at times, almost made me feel shame that I've been part of this industry for almost 25 years now.

We are addicted to the idea of disruption and the monetary rewards that come with it. Generally we don't care if we sink the rest of the world in the process either.

Damn shame, that.
> There needs to be a mechanism to punish people who persist in allocating capital in wealth-destroying ways.

But the cost of recessions, especially pre-Keynsian ones, falls most heavily on workers?

> but the US has been on the warpath to protect people from having to recognise that they keep giving their money to charlatans

They keep electing them. There's a huge popular demand for charlatans backed up by the charlatan news channel. It's probably going to result in a Liz Truss level financial disaster at some point.
> Hate this way of thinking where the government (with seemingly good intentions) tries to stop something but leaves a loophole where all our lives are made more tedious and then people defend it saying the companies should just not do it, well we needed the law in the first place so it's a bit silly thinking to suggest they stop doing it after the law, no?.

We deal with similar issues developing and releasing software. Instead of not ever releasing software, or only writing perfect software that never has issues, we have a couple of options.

1) In critical life or death situations, spend a ton of time modeling all states of the system and program in a way that very strictly controls for these states, with a lot of testing. See NASA/JPL coding standards for critical systems.

2) For less critical situations, or those were modeling all states of the system are impractical, we release, observe, and iterate. Yes there will be edge cases, bugs, and loopholes. But we can observe them, iterate, and release updates.

I think case 1) is impractical for changes to large legal and economic frameworks in the real world given how many variables are at play. If we could model the entire economy and see how it would react to a given change, the world would be a very different place in lots of ways already.

A lot of politics seems to work against 2) and that hurts our ability to improve things. "I will pass a law that does X" and "I will repeal the law Y that is not working, see look at these loopholes!" are good political campaign statements.

"I will gather and analyze data on the operation of the current system and support an iterative change that intends to improve things, implement that change, and then observe the results to determine if future changes are needed" is hard to rally around either in campaigning or when actually doing the work of getting political support to pass law.

I think decent example of this in government, although far from perfect, is the feedback loop of the NTSB and FAA. The NTSB's job is to observe and report on failures of air safety, and the FAA's job is to apply those lessons to future air regulation. Of course there are many examples of this not working perfectly, but it's a more concrete feedback loop than most governmental action has.

More observation of the analysis of the impact of laws after they are passed, and follow-up iterations where we compare the expected and actual results and make updates, would probably result in a lot less gnashing of teeth over "bad government regulation" but I'm not sure how we get there politically.
Appeal to nature is bad as a source of ultimate truth, "nature does it this way therefore it must be better." But it's good as a source of hypotheses, "nature does it this way, perhaps we should try it?" This paper seems more like the second.
We jumped the shark long ago, we (technologists) have been contributing to this for decades: we’ve benefited handsomely from the consequences with our big salaries and hero worship. I don’t disagree with your broad point but you’ve had your head buried in the sand for a long, long time if you think society is “about to” be destroyed.
Umm, freight is $500?
I was responding to someone with a recent example of a slower Android phone. I know many Linux and Android users who already have Raspberry Pi’s and similar devices they could use to set up a pihole. People who go down the “fully free” Linux path or even are using more experimental hardware have the same issues.

Pihole can (I assume) also work on WiFi too.
Few reports comparing Cranelift to LLVM from this day old reddit thread [1]

- 29.52s -> 24.47s (17.1%)

- 27s -> 19s (29.6%)

- 11.5s -> 8.4s (26.9%)

- 37.5s -> 29.6s (28.7%) - this measurement from TFA.

To put these numbers in context, all the perf improvements over the last 4 years have helped the compiler become faster on a variety of workloads by 7%, 17%, 13% and 15%, for an overall speed gain of 37% over 4 years. [2] So one large change providing a 20-30% improvement is very impressive.

When you add that to the parallel frontend [3] and support for linking with LLD [4], Rust compilation could be substantially faster by this time next year.

[1] - https://old.reddit.com/r/rust/comments/1bgyo8a/try_cranelift...

[2] - https://nnethercote.github.io/2024/03/06/how-to-speed-up-the...

[3] - https://blog.rust-lang.org/2023/11/09/parallel-rustc.html

[4] - https://github.com/rust-lang/rust/issues/39915
The US Needs Wildland Firefighters More Than Ever, but the Govt. Is Losing Them
Hm, I still have an AOL email address that my mom made for me when I was 9 years old (19 years ago). I remember signing up for spam ads (e.g. "YOU WON! Click here to claim reward"). I spent hours filling out forms to claim the prizes, but nothing ever came. Bummer.

But yeah, that email is basically trash and I never use it. I last logged into it maybe 3 years ago.
Is importing resources to a cloudformation stack still super painful vs creating them? That and the poor drift detection were the primary sharp edges I encountered.
No, the minimum delay is no more than a few minutes time of flight. But the transmission windows are only a few minutes long and they're hours apart. If you can't finish in one, you need to wait hours more to resume transmitting.
My main online banking account is from 1998. Have another cluster of accounts from 1999, things like eBay & Amazon. Have a domain name, and thus email, that also dates to 1999.

I was recently able to recover an old Ultima Online account from 1997, but that feels like cheating here.
>a good thing in principle to align driving behavior with insurance policies.

explain how it is not a roulette of penalties until you reach the upper echelons of wealth
Httpz: The internet you can trust
So you make estimates and extrapolate.

Will estimates always be right? Of course not. But nobody has perfect knowledge about anything. That doesn't make analysis based on estimates useless.
[dupe]

Some more discussion:

https://news.ycombinator.com/item?id=39726388
@KingOfCoders / amazingcto you wrote `Indeed, as an American, there is no need to force them onto you.` - I feel like that suggests some assumptions about PG here that might not be quite correct. Since PG's often in the UK, his place of birth and where he has a residence, he's sometimes in a place that has GDPR obligations, he'll likely be exposed to the full GDPR vs analytics annoyances that IP addresses, email addresses, trackers, and the data protection make likely. I've no idea what internet use would be like in the US though (I haven't surfed via the US for ages though so don't know what the geo-targetted and account targetted consent differences are). PG likely both benefits and suffers from being in multiple jurisdictions.
As for his personal identity, with terms like American and British, he might identify with both, but he did write "Keep Your Identity Small" so he might even prefer neither label, I don't know.
Regardless, yes there could be better ways at a protocol level, maybe the EU should have foresaw that rather that the noise which we have now. Guess we'll have ML agents to handle it for us soon.
> In an age where AI has replaced most humans, people would lose all leverage, and would be forced into zero-sum games (killing and maiming other people to steal their wealth) as they would not have any other mechanism to prove their worth and improve their standing in society.

I don't know about you but maybe the fact so many people determine their entire worth from their job is more problematic than inventing technology that will enable people to pursue more worthwhile objectives of their own choosing.
Not sure which is it, but supposing it's a 20+ year old account, it is very likely that:

- the site has been hacked probably dozens of time since I created the account, and my credentials are sold for peanuts these days.

- the password I used wasn't very strong at all, and it has been cracked and shared in plain text for years

- the original domain now probably is in hands of some domain parking bullshit company, selling ads.

In all likelihood, my oldest working account must be the NickServ registration on some IRC network. Though I started with IRCNet and I don't think they had a registration service.
That makes no sense, and unfairly gives preference to huge corporations. If I can invent some new machine that will cost many millions of dollars to build, should I not be able to patent it?
So you're saying approximately 3 times a week you reinstall windows on your kids machines?
It's not about cookies. Tracking without cookies also requires consent.
Maybe your build is not limited by code generation, which seems like the only thing that changed here. There was a good thread recently about the variation in what slows down compilation:

https://news.ycombinator.com/item?id=39721922
You don’t understand why companies build stuff to save other companies money?
Arm v8.4 onwards has exactly this (https://docs.kernel.org/arch/arm64/amu.html). It counts the number of (active) cycles where instructions can't be dispatched while waiting for data. There can be a very high percentage of idle cycles. Lots of improvements to be found with faster memory (latency and throughput).
Bit more relevant link directly to Jeff Gs blog

https://www.jeffgeerling.com/blog/2024/raspberry-pi-5-can-ov...

His stuff is fantastic!
My PayPal referral link no longer works for some reason: https://secure.paypal.x.com/refer/pal=cwarden%40mediaone.net
thanks for the heads up, will stay with Monterey.
It only adresses #2 insofar as it talks about baryon acoustic oscillations. They contribute to the CMB power spectrum, but in the end they are only useful as a measuring stick to calculate the Hubble constant. This theory does not explain the dark matter component seen in the power fluctuations at all. It also doesn't adress #3 at all (there are very concrete examples of lensing that any such theory would have to be able to explain).
I did take taxis in Melbourne and Sydney before and after the arrival of Uber. I never had any issues with any taxi drivers, except one racist arsehole in Townsville.
Depends. Does Apple promise POSIX compliance for current macOS?
You could say exactly the same thing about all forms of automation. We build machines to do work, often that work was already being by people which is part of how we came to know it was high value enough to be worth automating.

People will adapt and find new things to do just like they did in the first, second and third industrial revolutions already.
> Smith and Ricardo regarded nature as effectively infinite

Clearly Smith was aware of constraints in nature:

A mine of any kind may be said to be either fertile or barren, according as the quantity of mineral which can be brought from it by a certain quantity of labour is greater or less than what can be brought by an equal quantity from the greater part of other mines of the same kind.

https://www.marxists.org/reference/archive/smith-adam/works/...
Economics has an ideological assumption that equilibriums exist and that “markets” will tend towards them. Although this has some predictive capacity in a class of specific cases, it fails to explain observed phenomena in our world.

* Rise of social media. Classical economics would predict, that through low barriers to entry, there should be a nearly unlimited variety of social media platforms to choose from. In reality a few platforms dominate. Classical economics fails to account for network effects.

* Technological innovation. Classical economics treats technological innovation as a Deus ex Machima proofing into existence from nowhere. It has no predictive capacity over what and how people choose to develop new technology, such as the personal computer, networking, and smartphones.

* California energy crisis. After energy deregulation Enron, correctly realized, that if they shutdown one electricity generation plant, the demand for electricity would be so high, the profit margins on the remaining plants would overcome the profits lost from shutting the one plant down. Although this caused people to lose power, it made Enron substantial profits. Classical economics would predict that the higher demand would stimulate more production through higher prices. Classical economics does not account for long feedback loops.

As a result, we have entire subfields of economics devoted to the things that classical economics cannot deal with, such as Behavioral economics, or environmental economics. At a certain point this feels like the Ptolemaic model trying to make geocentrism work in the face of new astrological observations by making planets rotate within spheres in their orbits. By the time you get to 9 embedded spheres, each rotating within each other, you have to say the earth is not the center of the solar system and go with a different model.
A great article about how economics, economists, and econospeak are political tools used to mean anything at anytime, including opposite things at the same time (Australian political examples):

https://www.themonthly.com.au/issue/2015/july/1435672800/ric...
If only my browser showed, for each link that leads to a website with an annoying cookie banner, a small icon indicating that that's the kind of website the link leaves to. Can someone make a browser extension like that?
> Too often these folks have outright communist mindset to set the world as it suits their current needs, which to somebody like me being raised in pretty hard oppression and practically slavery from russians is a proper insult.

The cost of houses in my area went up $100k less than 2 years after I bought my house. The cost of food where I doubled in less than 20 years. Rent went up $1000.

Sorry that people wanting "affordable housing" is an insult to you. I'm sure when the Neo-Maoists promise to massacre landlords, the masses of rentcells out there are surely going to take your sob story seriously and choose to live in good American style "practically slavery" and choose not to join them. Surely they think your comment comes across as empathetic and understanding, not callous and dismissive.