skysight-inc/HackerNews huggingface dataset:
9. We should move toward formal verification for the trusted core of systems (compilers, kernel, drivers, networking, systemd/rc, and access control).

With regard to 1, there are some other practical steps to take. Use deterministic builds and isolate the compilation and linking steps from testing. Every build should emit the hashes of the artifacts it produces and the build system should durably sign them along with the checksum of the git commit it was built from. If there need to be more transformations of the artifacts (packaging, etc.) it should happen as a separate deterministic build. Tests should run on a different machine than the one producing the signed build artifacts. Dropping privileges with SECCOMP for tests might be enough but it's also unlikely to be practical for existing tests that expect a normal environment.
correct me if i'm wrong but you still have to get the context populated. It's still the RAG pattern you just put more data in the prompt than before.
https://archive.is/lHVwP
I was once told mdd was mortgage driven development. Make code as confusing as hell so to they keep you on and you can keep paying your mortgage.
Prior research by the same lab in 2015:

https://www.eurekalert.org/news-releases/610899
Modern ORMs are pretty efficient [1]. Some developers use the ORM for the "write model" and native SQL for reads/reports, if you are read-heavy.

[1] https://michaelscodingspot.com/npgsql-dapper-efcore-performa...
IIRC, they did report the bug, and it was rejected.
just block all of Google's IP blocks (most of the internet wont work properly, but thats ok)

Go to https://whois.arin.net/ui/advanced.jsp and Search for “Google LLC”, by Organization… Click each organization found and then select “Related Networks”.

Then block all that shit.

If you just want to block youtube, just do it at router/domain name level? just dont forget any of their domain names...
RFC: Is there some straightforward way to use a Pi-hole like setup to 302 redirect `reddit.com` to `old.reddit.com`?

I'm sure there are myriad browser extensions that will do it at the DOM level, but that's such a heavy-handed solution, and also lol I'm not putting an extension on the cartesian product of all my browsers on all my machines in the service of dis-enshittifying one once-beloved social network.
When I studied group theory, I would have been so much happier if someone told me we were talking about nonzero numbers, or invertible matrices, or functions. A little of bit of concreteness would have helped enormously to motivate the topic.

When I took real analysis, I would have been so much happier if the teacher had presented some historical context: what pitfalls had mathematicians fallen into by misunderstanding infinity?

That’s just how my brains work. I need some context. I suspect other brains are like mine too.
I will use an ORM if it makes sense for the app in question, and then heavily tune it.

Usually, though, I get better performance and less fragility out of leaning on carefully-crafted SQL+indexes to do the heavy lifting.
It can be, but in real applications only a small percentage of queries are performance problems, and you're probably better off optimizing those than writing and maintaining hand written queries.
Signals only made sense in the past of desktop programming languages, because the ones on mainstream lacked lambdas and closures.

Smalltalk, and Lisp derived ones did just fine without them.

Modern JavaScript already has them as well, no need for what is basically a closure with a listeners list.
libc is kind of special, but surely many language environments have different standard lib implementations?

Java has OpenJDK and Oracle JDK.
Looking at drama around Ukraine war, it’s already lost.
How India could become an Asian tiger
A Review of Alfred North Whitehead's"Introduction to Mathematics" [pdf]
Ah, I see, that makes sense
Can’t believe they mentioned “Autonomy” here which definitely dates the piece - I’ve never ever heard it referenced. Was a part of an Autonomy cms upgrade at a previous job and it’s pretty old and bad - but got to learn a lot..
Am interviewing for a job now and they seem to have Coldfusion as part of their stack - prefer that to autonomy..!
It is really asstonishing how dev hostile those game consoles were. Like, "we know how to do it but invent it yourself".

Nintendo could have released sane sdk:s and not make every dev studio figure out what works. Like, maybe share a toy version of the source of Super Mario and Zelda or whatever to show how an engine is made.

The games would surely have been prettier as a result.
That would be a shame. I think the app permissions model, at least as Android does it, isn't a very good solution at all.
As you might know not one tool fits all, I still have strong preferences for the following. It helps me get going faster and get things done right first time and helps in ease of maintenance.

Language: Typescript.

Frontend Framework: Astrojs [1] or qwik [2]

Frontend Library: React if it requires 3d and other frame-motion like animations, else will not use any frontend library or might throw solidjs if required for some state etc.

Backend: Cloudflare functions, google functions

Auth: Lucia-Auth [3] if required

IDE: VS code with neovim , once deployed to git, I might some time use code-spaces

CSS: DaisyUI [4] with tailwind or Bulma

CSS Library: TailwindUI [5] makes most of the components ready to use and comes from the makers

CMS: Astro content collections or Sanity [6]

Deployment: Cloudflare (Highly preferred) or linode/digitalocean/netlify

Database: turso [7] or neon postgres [8] with (drizzle orm) or cloudflare durable objects

1. https://github.com/withastro/astro

2. https://github.com/BuilderIO/qwik

3. https://github.com/lucia-auth/lucia

4. https://github.com/saadeghi/daisyui

5. https://tailwindui.com/

6. https://www.sanity.io/

7. https://turso.tech/

8. https://neon.tech/

Also huge fan of firebase and their emulators and whole eco-system.
It's Pareto principle at play, in RL you usually need to highly optimize just a very small portion of the queries - let's call it 20% for the sake of tradition, though it's realistically <5% IME - to get almost all of the speed-ups worth the trouble. ORMs then help you to write the other 80% quickly and in a maintainable fashion.
Battle of the Redis Forks?
I hope Open Source maintainers and the big companies get the message -- they need to change the financial outlook of open source maintaining.
Your second paragraph reads more like you are talking about query builders rather than anything in the domain of ORM. ORM happens after the query has executed and you have a relation already in hand. Everything that happens before the relation is made available is outside of the ORM purview.

Some ORM toolkits bundle query builders as a secondary feature, but they are still logically distinct features.
I completely agree, there's no reason any engine can't have VVT. I believe that famous northern european supercar guy, I think "Keurig" or something like this is is name - he took an old beater car 4 cylinder engine and superpowered it with some pneumatic / AI controlled valves - I think it's called "FreeValve" or something like this.

As for two strokes being "less efficient", efficiency is in the eye of the beholder. We see on the recent key bridge collapse lore that indeed these mammoth cargo ships run two stroke engines, in this case, two stroke turbodiesels which formerly were the mainstay engine of american trucking. The humble weed eater or chainsaw also tends to use two-stroke - why? because they're far more efficient, almost twice as efficient, in power-per-pound of engine i.e. in applications where lightweight is needed. An added benefit is mechanical simplicity. The double-power notion follows from the name, these engines give power every two strokes versus every four strokes. Two strokes are also really interesting in that exhaust manifold geometry interacts with the engine stroke with pressure waves, look at any two-stroke dirtbike and some will have these goofy-appearing exhaust manifolds for this reason. Granted the major challenge of two-strokes is dirty/pollution and being oil-burning by their nature.
When I worked in the UK in the 1980s, lunchtimes were occupied with one of two activities...

Monday-Thursday, we would go for a run, often alone on our individual schedules, but sometimes in a group. The target was a pub a few miles away. We would sprint down the hill, touch the pub, and run back up to the site. It was a serious pursuit, there was a fiercely contested leader-board maintained in the office. New junior hires were challenged to beat the old-beards - many of which were ex-military, very proud, and very hard to beat.

Friday, we would would drive to a pub (occasionally the same hallowed turn, but often some other local hostelry), have a long lunch, drink a few beers (most of us did not have to drive home), and discuss old times, new technology, big projects, legendary deadlines that were beaten, and stories about sport or running. What was left of Friday afternoon was just tidying-up work and a some admin, combined with a little chit-chat about the venues and parties that would occupy the weekend.
Memory-constrained environments.
Didnt we just have a thread full of people laughing at how made up this disease was? Wasn’t there some report about that previously, just maybe a month ago? And this “report” seems to be by 3 news organizations.
Yes, it is better. The reason is that when every email operator is small, the overall email community can pressure them to go fix things. You start by sending notes to postmaster@... with problem reports. If things go ignored you start blocking them and then they wake up fast.

In today's world when microsoft or gmail or yahoo start misbehaving in email handling, what are you going to do? It is impossible to reach them and while you could block them, they will never notice and you're only hurting yourself.

It is the classic problem of centralized power which hurts everyone except the (near-)monopolists.
Most of his well-known projects have public git repositories that you can clone, inspect, and contribute to.
I had the same thought. Also, it seems wildly improbable that a real news story about this tech would lack even a passing mention of The Hunt For Red October, yet here there is none.
Why Did This Guy Put a Song About Me on Spotify?
Calendaring and Scheduling Developer's Wiki
I recall on an ask reddit a group of gastroenterologists were answering questions. One thing that stood out was they said "let your stomach rumble it's a necessary part of gut health".

Fasting would help initiate that, but I think so many people these days never stop eating long enough for their stomach to rumble.
The U.S. government suppressed a strike just last year in the rail network.

Labor is gaining power, but there's still interrupts coming from the government.
That seems to be the exact point the author makes: you need to know some fundamentals to properly use databases. Even if you are not doing super complex stuff.
Definitively not for porn and alike, no issues for my banks or public administrations services. I use them since they was introduced...

Beside that I criticize two aspects:

- many state (at least here in EU) have chosen private companies to provide identity services at least for eIDAS level two authentications (user+password + OTP, essentially) witch can't be trusted and generally impose Android/iOS macrospy devices, so something insecure and untrustworthy by default;

- many states have introduced smart-card BUT with proprietary middlewire and crappy crapplications to use them;

both trends MUST be demolished from the ground before digital identities became the norm for all serious things. We need instead to build a chain of trust model where the public sign a citizen subkey as a proof valid for the public, and private parties might agree something similar each others for their customer/purposes.
To Fight Climate Change, We Could Block the Sun
I see the opposite. A nation state aggressively attempted to take over another, and the world reacted swiftly and largely in unison. The lesson seems learned, at least for now. If the lesson had been lost, everyone would have done nothing.
Taking away people's ability to kill themselves is very close to murdering them?
How would it have changed anything in this specific case?
I believe if you own a network, it's possible to lock YouTube to an age range which means however that works, it can probably be used to block it.
This is almost impossible for remote OSS maintainers. Do you want people to upload passports? And what if a three agency can easily produce whatever material you want?
I would be much more concerned if it had a privacy policy, to the point where just having one means I probably wouldn't use it. That is not common practice for Free Software that runs on your machine. The only network operations that Ollama has is managing LLMs (ie: download Mistral from their server).
Not that easy. I have sibo and depending on what I eat and how I eat it, it changes the effects it has on me. Also the amount and frequency. For example, if I have raisins at the start of my meal then I don't see issues, but if I have them at the end of my meal then I do. If I have it here and there then no issues, but if I have it a few meals in a row then it'll give me issues.

And raisins affect me within 20min, but if I were to face something like potatoes or tomatoes then it doesn't give me issues until hours later (after my next meal or even the next day).
if these projects have any value, someone will clone them to a public repository.
Is it common for you to write the header file to say a BST and the compiler didn't rightfully throw an error?

That's what you are asking the LLM to do, you are generating code not searching for an error condition.

The parent comment is saying maybe as a writer, writing the actual story isn't such a bad thing...

Just a different perspective, live your own life. If the story is good I'll enjoy it, who wrote it is for unions and activists to fight. I've got enough fights to fight.
I think this is the future, for better and for worse. Functional governments are already the ultimate authority on personal identity.
Let's use the current theory that this is a state sponsored attack. If that's the case, another Jia Tan will be recruited. The identity of a single person simply doesn't matter. All that matters is that the attack was attempted.

Consider the issue of candidates who lie in the interviewing process by hiring other people to interview on their behalf. Now replace "interview" with "attend conference". This is just adding another vector of blind trust waiting to be abused.
Coffee breath? Cinnamon gum? MAYBE you'll notice those things a foot away from someone in a one to one conversation. I can tell someone is smoking a joint across the street. I can tell the person in the unit below me is smoking weed. I can't tell you if they had coffee, cinnamon gum or are wearing perfume. The strength isn't remotely comparable. Car exhaust, while not great doesn't have even close to the bad smell weed smoke has.

And I live in country with already legal and easily accessible weed with a wide variety of strains. I don't think I'm just smelling skunk weed.
For example, we hope that Linus is not a long-term agent of the Suojelupoliisi - but how would you prove it?

Ideally, the "proof is in the code" and the review setup is strong enough that it could handle a Compromised Linus™, even if it couldn't handle multiple compromises.
Accidents & Emergency is what the Brits call the Emergency Room
What Was the Hanseatic League?
"Accident & Emergency" - you may know it as the Emergency Room, but it's commonly called A&E in the UK
"AI" is not actually intelligence, it's an advanced madlibs generator. No, you do not want it anywhere near your source code.
Structured Outputs with DSPy
Unfortunately, Large Language Models will not consistently follow the instructions that you give them. This is a massive problem when you are building AI systems that require a particular type of output from the previous step to feed into the next one!
For example, imagine you are building a blog post writing system that first takes a question and retrieved context to output a list of topics. These topics have to be formatted in a particular way, such as a comma-separated list or a JSON of Topic objects, such that the system can continue writing the blog post!
I am SUPER excited to share the 4th video in my DSPy series, diving into 3 solutions to structuring outputs in DSPy programs: (1) TypedPredictors, (2) DSPy Assertions, and (3) Custom Guardrails with the DSPy programming model!
TypedPredictors follow the line of thinking around JSON mode and using Pydantic BaseModels to interface types and custom objects into a JSON template for LLMs. The output can then be validated to provide a more structured retry prompt to correct the output structure!
DSPy Assertions are one of the core building blocks of DSPy, offering an interface to input a boolean-valued function and a retry prompt which is templated alongside the past output to retry the call to the LLM!
Custom Guardrails with the DSPy Programming Model are one of the things I love the most about DSPy — we have unlimited flexibility to control these systems however we want. The video will also show you how to write custom guardrails and retry Signatures and discussion around using TypedPredictors for your Custom Guardrails and potentially feeding your Custom Guardrails into a DSPy Assertion.
I had so much fun exploring this topic! Further seeing how well OpenAI’s GPT-4 and GPT-3.5-Turbo, Cohere’s Command R, and Mistral 7B hosted with Ollama perform with each Structured Output strategy! I also found monitoring structured output retries to be another fantastic application of Arize Phoenix! I hope you find the video useful!
Video: https://www.youtube.com/watch?v=tVw3CwrN5-8
If interested, all the code examples for this DSPy series can be found here! - https://github.com/weaviate/recipes
Agreed. I think there's a blurry gray line between pointing out a potentially unreliable source and a lazy dismissal, but if there's reasonable doubt I think it's good for HN. If the doubt isn't reasonable, it will be torn apart by other commenters, and then it's an explicit discussion that people can read and decide on
This might solve the original author's issues, AND might also attract other people to do the job. The more people, the more eyes. It's definitely not a silver bullet, but I would be surprised that OSS maintainers are fine with the current financial arrangement, or lack of it.
That particular poster frequently gets first post. They just have a lot of time on their hands.
OpenAI's Voice Engine represents a breakthrough in AI voice replication technology. Capable of mimicking any voice in any language from just a 15-second audio sample, this AI opens new possibilities for content creation and global communication, while also posing ethical challenges.
How to Reduce Deployment Risk with Blue-Green Deployments
Sounds like it's time for someone to either pay a few visits to the remote maintainer or give them a scholarship for attending a few conferences.
I think the message would more likely be "don't use open source and pay for closed source" than "give money to open source and cross your fingers that it does something".
At least two of the maintainers of the framework I originally authored (and is now being maintained by a team, and used worldwide), are retired engineers. They are outstanding engineers, with great pedigrees, and bring real technical leadership to the project.

In that particular project, we're all just Paying It Back (not forward), but other projects could likely benefit from the participation of Grumpy Old Farts.
Browser environments don't have EventEmitter. Different event APIs between browsers & nodejs. A library (3rd party or custom) is needed to make event code isomorphic.
My only point is that Tesla’s system is better than people might think from comments like the original one I responded to and has done things I’ve personally experienced that commenters on Hacker News told me were “impossible” to do with a vision-based system (slow from freeway speeds to a stop because of stopped traffic ahead).

The shift in attitude towards Tesla here and elsewhere is really funny to me because it coincides more or less with the time period in which Tesla started to actually deliver the things they had promised years ago.
Yes, but they also work for megacorp Facebook, and according to https://github.com/facebook/zstd/graphs/contributors, 300+ other contributors have made 4500+ commits to the zstd repo.

It's not quite as small-scale as 90's-style shareware was.
I mean if you’re thinking about the big picture, chronic inflammation increases cancer risk even more.

For corticosteroids, I agree… But that’s not supposed to be used long term and is a bit of an emergency resort.
Effects of riding position, helmet use, vehicle type and apparent gender
As there seems to be some doubt as to whether this is a joke or not, I’d like to posit that we’re not supposed to know and that’s the point.

The author is the founder of the now-defunct YC startup RethinkDB. He learned engineering management the hard way, and he has done a lot of writing in various places that resembles this one: they’re un-nuanced bits of advice that take a strong position. I wouldn’t be surprised if the author actually stands by each of them, but he surely is well aware that this isn't mainstream “best practice” material. After all, that would be boring. We can find an endless stream of that on LinkedIn.

Personally I find it refreshing. Too much software engineering management advice is so overly nuanced and thinned down that nobody is offended but nobody learns anything either.

A lot of the author’s articles and tweets contain a way of looking at things that I hadn’t previously considered. I don’t think you need to agree with the whole thing to take whatever part out of it that resonates. And, well, they’re ultra-fast reads.

(In this particular case, I love the headline part, I think it can help us cut away stuff that seems important but isn’t. I hate the deadline part because I think arbitrary deadlines and constant crunch mode are bad. I don’t think spakhm minds that I only appreciate half of it)
Manually writing queries has a lot of overhead cost. Your entire application now has the UI directly tied to what the query returns. You can make intermediate classes to separate the two but eventually you'll end up making a worse ORM you need to test and maintain.

What an ORM gives you is a tunable level of abstraction. I know Ruby on Rails best so I'll use it as an example. ActiveRecord has a lot of tuning you can do, like partial selects and snippets of sql where you need it. If that isn't enough, there is find_by_sql as an escape hatch. If that is still not fast enough, you can call ActiveRecord::Base.connection and skip the ORM entirely.

This will keep complexity limited to places where it needs to be complex.

In my experience, every level of optimization you do comes with decreasing maintainability.
Next logical step in this misguided way of thinking: “do a great service to the world by subverting open source software until maintainers get their due”.

No, the ends do not justify the means.
Every model will give you different results. You can try the custom models as well to see what works for you :)
Most open source contributors aren't doing it to be paid; if there isn't enough demand or support they simply stop working on it and that's it. Usually once a project is big enough then there's enough demand from users that big companies start donating both money and employee time towards a project (AWS for example had dedicated employees contributing to Redis, and Linux as a foundation is supported by countless companies). The emphasis is on the money going towards supporting the project to keep it sustained, not maximizing profit.