skysight-inc/HackerNews huggingface dataset:
This is imho one of the big draws and competitive advantages of TikTok. TikTok is by no means immune to this, but it handles it much better than Youtube or Instagram. It actively shows you some amount of content outside your current bubble, and reacts strongly to any signal you give it about that content (including watch time). It also seems to stop showing you topics when you show continued disinterest.
Indeed.

I'm very frustrated by all of the "this has shown how fragile FOSS is" hot takes I see appearing. I think it has shown us how awesome FOSS is: If this were all closed source software, chances are we'd never have known about the issue, nor would an entire community now be able to have an open conversation about how to mitigate it in the future, applying their combined brain power to the problem.

And there's a fair amount of obvious steps to take now:

- Re-visit the pro/con of anonymous contributions. Re-visit identity verification. Maybe do a SPDX-like thing for governance/contribution work flow mechanisms for project to report how they work and what stance they take, to allow downstreams to risk-rate. Some projects will very much want to continue to allow anonymous contribs for excellent reasons, and that's fine.

- Phase out build and module systems that drive published tarballs differing from repo tags.

- Have distributions verify that tarball contents match repo tags on import of new versions. Yes, this requires that projects have a repository that is reachable online. I think for critical SW that's OK.

- Don't accept build systems that silently disable security features when dependencies are unavailable. Not building a security feature should always be a decision point and manual opt-out.

- Come up with better metrics for maintainer burnout and heartbeat signals.
Check your math on that
Show HN: I built a search engine for 200k open source icons
The common thread running through all this --- an excessive focus on accounting.

It's not possible to develop a really thorough, realistic assessment of most businesses by simply focusing on the numbers. Those who manage by the numbers now have a significant history of falter and Boeing is just the latest.

Did Dave Calhoun earn his "golden parachute"? Did he leave behind a company that is significantly better off?

Accounting is a record of how you've done more so than an indicator of how to proceed.
It's actually climate change because people kept saying 'oh I like warmer weather's.

And while you sound a little bit negative about it: without heat pumps and evs your nuclear power plants are worthless anyway.

It would have needed a lot more left and right to really reap in CO2 savings from 100% nuclear.
> The xz fiasco has shown how a dependence on unpaid volunteers can cause major problems.

To be honest it has also shown that it wasn't all too wise at all to introduce a completely needless dependency on a rube-goldberg piece of software in what was otherwise something created by security-minded people.

openbsd -> openssh

vs:

systemd Linux distros -> openssh -> (lib)systemd -> endless potential venues for backdoors (oh, look, we just found one)

I'd give Theo de Raadt a thumb up and Poettering a thumb down here, again.

Seriousy, why the fuck did Linux have to be polluted with that gigantic squid that systemd is, throwing is tentacles about just everywhere. I know, I know, there are distros out there not using systemd but they're rare.

I find it very weird that so many people keep downplaying the role of libsystemd here (makes me wonder what their agenda is).
Cloudflare's engineering is top notch. I wouldn't expect anything different than what you would get from any of the other major cloud providers.

Workers are also extremely fast/performant and inexpensive... if you are working on a company those two aspects can be fairly important to the success of some types of companies.
We should not think in absolutes, but in terms of tools. What risks come with using a certain tool.

In your Rust example, using C is like using a power tool without any safety measures. That doesn't mean that you are going to get hurt, but there is an expectation that a sizable fraction of users of such tools will get hurt.

Rust is then the same tool with safety measures. Of course it is still a power tool, you can get hurt. But the chances of that happening during normal operation is a lot lower.

I think xz is a good example where open source happened to work as intended. Somebody noticed something weird, alerted and other people could quickly identify what other software might have the same problem.
Fighting cookie theft using device bound sessions
The job postings say European time zones only, but this says Americas as well, can you clarify?
Pelying on unpaid volunteers, particularly when trillion-dollar corporations expect urgent support for free. It's unsustainable and underscores the need for a more reliable system that doesn't exploit volunteer labor.
I was responsible for drawing 1/25th of this gif back in the day. There was actually way more tiles created but this is one version that went viral. Crazy to see it still pop up like this every couple of years.
Seems like the conversation usually boils down to just the term 'fiber'.

I agree, taking extra fiber supplements can be bad, or overwhelm the gut. But you can eat vegetables, and get fiber, but at a lower volume of fiber before you get constipated.

I'm just on side that vegetables are important. And the carnivore diet people don't seem to get enough vegetables generally, and all the other nutrients in vegetables. Even thought, you can do Keto with low carb vegetables. It can be done. Thought difficult.

Also. Gluten. When I cut out Gluten, that also cut out a ton of carbs (no breads). If you just eat vegetables without grains, it is pretty low carb.

Maybe, by the time you eat just meat, or just whole plants, or even a combination of whole foods (meat and vegetables, minus grain), your are being much more healthy in general than the Standard American Diet.

really, just eating a whole baked potato can be considered low carb compared to someone downing oreo's.
If he's skimming, it's not enough to immediately stand out. They reimbursed $1.3 - $1.8 million per year, which is about how much it costs to operate a private jet.
That's an excellent point.

Frustratingly I use YARP, so I still need MS to implement zstd hah.
The issue is that QR's alphanumeric segments are uppercase only, and while browsers will automatically lowercase the protocol and domain name, you'll have to either have all your paths be uppercase or automatically lowercase paths. On top of that when someone scans the code it will likely be presented with an uppercase URL (if it doesn't automatically open in a browser) and that should alert anyone that doesn't already know that uppercase domains are equivalent to lowercase domains.

Ideally QR codes would have had a segment to encode URIs more efficiently (73-82 characters depending on how the implementation decided to handle the "unreserved marks"), but that ship has long sailed.
This is interesting because it doesn't mean that actually, it means if you want to make that choice the market will reward you now, and the market may not be focused on any one specific strategy.

You can make other choices.
Oh yeah that's a great idea - just set it up once in minikube and use it just like you were debugging something in your production k8s stack. As much as I love k9s, sometimes I just need a trace to debug something between services
Nice build! I always wanted one of those AR robot arms but I'd rather buy it off-the-shelf than assemble from scratch. I don't think anyone sells them pre-built though. This type of 'high level hobbyist robotics' is in a bit of business dead-zone unfortunately, as it's some combination of too small a market and not enough use cases to justify having a company around. Or maybe there's potential there but no one's thought of it yet.

Btw I bet your arm's movement smoothness can be improved with some different deceleration rates. It was really fun watching it sort those beans!

My research goal with one of these 'good enough' 1mm repeatability robots would be vision-guided adaptive control to complete tasks after seeing examples of them done via human manual control. Would be a really interesting ML/AI problem. Just need a reasonable hardware platform to get started. Right now I'm leaning more towards simple/smaller servo motors like in the OP of this post (plus there's the cost/time trade-off).
> 2. The founder doesn’t understand that the value in a startup isn’t the idea but the ability to execute and build on that idea.

The best startups have both.

You can execute, great. But if you have poor industry understanding and no idea what is going to work in that space. Let alone something that is going to revolutionize the space. It is, similarly, not going to work.

Your industry expert need to have 20-30 years in the space. Understand it from the ground up. That guy is actually valuable.

It's not one idea, it's comprehensive understanding of all the current struggles in the space.
Setting and Persisting Color Preferences with CSS and a Touch of JavaScript
The cultural divide between ML engineers and “girls and gays” in data science is very real and in my experience getting worse. Good but rare when the styles can be brought together.
In addition to the other comments keep in mind that the number of people actually working directly with ML at these companies is much smaller than the number of people claiming to.
Note that their Android version was very sluggish and I have some hesitation in calling out its "speed and polish".
It’s also worth noting the projected revenue for 2024 is 50-100M.
Exactly this. Corporations can pay up if they want these pieces of critical infrastructure to be more robust. Fully leaning on the passion of people in our profession to do unpaid work because we like the craft is... uncool.

In this case at least reading through the timeline it sounds like the bulk of the discovery of the vulnerability came through paid folks though.

"shoulda put a ring on it"
Pricing also.
0.40 USD / month for a globally deployed site @ CF versus 199 USD / month for a static site with limited traffic usage @ the supposedly premium other hosts
Where are the email addresses visible? I've also seen this a few times, but never the actual addresses.
This is a totally fair point. The incongruity arises for me in that if I said in a job interview process that I'd be continuing to hold another position while adding this one, I'd get laughed out of the room. If it's critical that rank and file guys don't have divided time or loyalties, why is the standard different for the single person most responsible for success or failure of the company?
You need at least 400 Million to enter the car manufacturer market.

The investment does sound absolutely reasonable at this point.
TIL that I live _just_ over the edge in the empty side of the world. Cool. Not that it's any quieter over here.
Hiring leader for a DE/DS team at a Digital Marketing agency; I feel the exact same.

I strongly prefer folks from non-specific degree programs who come with a desire to learn as opposed to deep experience in a program tailor made for a specific niche subject where degree candidates learned on absurdly simplistic or unrealistic data and models.

The modeling itself is largely meaningless and simple to execute against. It’s the data and the insights that matter and I haven’t yet seen a niche designer masters program graduate who actually could show me a meaningful end-to-end project they were truly passionate about.
Well, kinda. China can find other markets for their cheap solar panels. In the US, the focus right now is bringing up domestic supply, which will increase global solar panel capacity.
I'm not fan of the guy by any measure, but how is this any different than the government paying to make any president's existing properties places where a president and his massive entourage can stay? It's been done by every president I can remember aside from maybe Clinton because I don't remember him having any significant places.
Identities are even easier to fake for nation state.
> Mass transit absolutely, positively does not work in the US if you have at least one child.

Here in Munich, one of the densest cities in Europe, I took the subway alone at age 7. There's nothing preventing US kids from doing the same with a bus, no matter if driven by a human or by some sort of autonomous system - except that US infrastructure at large is completely focused on cars and has zero respect for anyone not in the safety shell of a car, so it will be a challenge for a kid to even get to a bus stop safely.

But that can change, even in the matter of a few years. All it needs is the political will, a bit of funding, and in larger cities to get the homeless and drug addicts in safe housing or, for those incompatible with society for mental health reasons, into institutions.
I don't think anything is "pretty much guaranteed": things evolve
Thanks! If you have any feedback or ideas feel free to let me know. I don't put a lot of time into it because I'm not sure what I would change at this point.
If you are hardcoding anything platform related into your CML, you are doing that wrong. The default path must not be anything other than build and usage requirements. To support more usecases with CMake, you have to write less of it.
we were discussing this on the IRC. Imagine spinning up a thread, then running a bsd style pledge(2) on it to call liblzma. Kinda janky but it would work. Another option would be to just go out and call the xz util and not rely on a library to do so. That process can be locked down with pledge to only have stdin/stdout. That's all you need.

So, like UNIX does have this plumbing, its just that reaching for libraries and tight integration has been the pursuit of Lennart Poopering and his clan for years.
The core value prop is 2 things:
1. Not having to deal with authentication, team permissions, organization management and a good UI/UX. We do this by embedding the tools you create into our parent web app.
2. An AI offering (as shown in the first video) that allows you to quickly scaffold out your tool with just a prompt when developing locally. It knows about our components and auto applies code changes, so the feedback loop is faster.
Being a CEO of your family office shouldn't really be a "real job" - it should take up maybe a day or two out of your month if it's being run correctly. To me this would be the same as if a product manager had a side hustle doing some accounting for friends and family. It's fine.

The selling services back and forth thing, I get it, it probably saves some people some work and it might even work out better economically for the company, but the optics are never going to be solid and people are always going to question it, so imo it's not worth it, but... it is quite common.
I think there is enough opportunity in this country for my kids, your kids, and immigrant kids. We’ve done this before, the only difference this wave is skin color.
$1.7 million is 1-3 employees working to ship your product. When you're company is on the edge of collapse you should have your priorities straight. Diverting company resources to your own private jet is a preposterous use of resources and, imo, speaks volumes about where Canoo is headed.
> I'd give Theo de Raadt a thumb up and Poettering a thumb down here, again.

Poettering didn't talk distros into patching openssh to call libsystemd's sd_notify(), and if you look at the PR for dropping libsystemd's linking of liblzma you can also see him take a stance against the dependency there.
So the ML team and the DS team were both working on the same problems?
Firstly, I entirely agree with your point about planned economies. I would go slightly further and say that any system where power is centralised to too small a range of actors ultimately fares poorly, and monopoly of any type of power, government, industrial, financial, tends to lead to abuse. I’ve been wondering recently whether western economies despite not being planned are increasingly de facto centralised due to a high degree of monopoly and control by a narrow interest group.

Secondly, financial incentives are very powerful if correctly designed. At the moment they are used for things like subsidising hydrogen or adaptation technologies. But they are not deployed - for example as penalties - to deter investment in stuff that is net damaging to human wellbeing. We have a situation where banks are both financing companies that create climate change and also companies that create climate change solutions. Aside from that being GREAT business, it’s also the type of problem that might arise in a centrally planned economy (to the first point).
Aquila Family Ventures is basically a family office that the CEO likely just oversees but doesn't run day-to-day. It's a different thing than having multiple full-time jobs like Musk.
Life never lets an exothermic reaction go to waste
To add another weird tech issue to this collection: The camera shy Raspberry Pi. A model of the RPi would reboot when photographed with a flash: https://www.bbc.com/news/technology-31294745 (2015)
Did you get paid for the post you just wrote? People at giant corps are reading it right now, they're getting value from it. You deserve to be paid!

IF you understand why you'd post without being paid, you're 80% of the way to realizing why people program without being paid.
Boeing has had negative net income (i.e., has been losing money) for years:

https://finance.yahoo.com/quote/BA/financials/

https://www.macrotrends.net/stocks/charts/BA/boeing/net-inco...
As someone a lot deeper into robotics I totally get this sentiment... But I also think it's good to encourage people to share the basics, look how many newcomers in this thread find it interesting and may explore it further.

I wonder how smooth one could make a cheap servo-based robot arm operate with decent control algorithms.
Anecdotally, I'm seeing many people get hired by just building things in the wild. There's a ton of open source work going on still in the early stages, everything from inference servers to training libraries to MLOps frameworks and beyond. Being a solid contributor to any of those projects, or starting an individual project is a good start I think.

(As an aside, I also think "job in AI" is a little to abstract to comment on in many ways since the term is so overloaded in 2024)
Let’s say that that’s the problem. Who are qualified to solve it?

American programming at least is centered around a few hubs where the programmers make great wages. They work for companies which make a lot, lot of money. Much of the complaining is about professional programmers who do OSS as a hobby.

So none of the parties are lacking in resources. And no one is being coerced.

I bring this up because some problems are about exploitation and coercion. Then the soft (unreliable) solution is about morality (don’t exploit), while the hard (reliable) solution is about laws and law enforcement.

But Ethics doesn’t seem to be the appropriate domain. And not Philosophy in general.

I’ve wondered for years now: where are the economists? This is a problem of assigning resources. It’s a problem of incentives. It’s a problem of dependable and proper bus-factored maintenance. Isn’t this a kind of problem that they are trained to solve? Concretely: you have an unreliable (volunteer, small) resource and large entities that rely on it. How do you bolster that resource?

And I don’t mean in the vulgar sense of “give X and Y more money”. I mean: the current status quo is apparently unreliable, so how should things be organized in order to promote more reliability? That does not have to involve money.

This isn’t some academic exercise. Real money is apparently on the line, indirectly. The stakeholders are powerful. Why can’t the relevant professionals solve this?

Don’t get me wrong. I’m the kind of annoying person who believes that a lot of economics is mostly about propaganda. But how is this not a problem that economists can solve?
Test speed fetishism is a bad idea. It leads people to write unrealistic tests which end up passing when there is a bug and failing when there isn't.

Treating flakiness in integration tests as a fait accompli is also a bad idea. It's a bad idea - a bit like treating flakiness in the app itself as a fait accompli.
Maybe now that we have things like GitHub Actions, Bitbucket Pipelines, etc., which can run steps in separate containers, maybe most of those things could be moved from the Maven build step to a different pipeline step?

I'm not sure how well isolated the containers are (probably not very – I think GitHub gives access to the Docker socket) and you'd have to make sure they don't share secret tokens etc., but at least it might make things simpler to audit, and isolation could be improved in the future.
Why do these magnets matter so much, and what about them will enable new business models/market segments?
I cannot own a car with unreliable wiper controls. It rains to much where I live. Without a stalk I would definitely go crazy.
I love antennapod, and that is the app that I use. However, it is very much a power user tool, whereas Google podcasts was very much not. Pod verse is a very good app that is closer to Google podcasts than antennapod is. But that being said, for people on hacker News antenna pod is definitely worth checking out. Long time, very happy user since Pocket casts sold out and also completely redid their UI even though it was essentially perfection. The UI now is so much worse it's such a good example to me of how the constant push for redesign is not always progressive. Sometimes it's very regressive.
Which at its core is probably an alignment problem in the way the models are evaluated: they are measured on their short-term effects, and there exploitation rules. But if you look at the long-term effect of recommendations you really need a healthy dose of exploration to keep your users around.
I enjoyed the app. I was disappointed when they closed it because they couldn't find a revenue stream.
Keep winning at tennis? You may see more images each second
AI wasted half my day with the wrong decorator
Something I've been wondering about: is it possible to use something like mutation testing / a reduction tool to heuristically "prove" that the binary can be attributes to real lines of code in the input.

Solves a different problem to this.
A dependent saves you a rather small amount of tax. By my understanding, audits are focused primarily on failure to report actual income, or claiming outsized business expense.
Sounds more like a Dungeons and Dragons monster than a real thing. Roll to avoid an acid-based critical hit, or something.
Lightning Whisper MLX
An extremely fast implementation of whisper built on top of Apple MLX. It outperforms Whisper CPP by ~10x.
In 2023, California ranked 5th in GDP per capita, just ahead of North Dakota.

https://en.wikipedia.org/wiki/List_of_U.S._states_and_territ...
Great launch but curious, why would I use this over Retool? I’m an engineer and the thing I love about Retool is the low-code UI components (saves time sourcing those same libs) + everything done on Retool so I don’t need to dedicate local disk space to my non-important internal app.
Location: Austin, TX, USA

Remote: Yes please.

Willing to relocate: Only to Colorado Springs, CO.

Technologies: Python (Django, Pandas, Numpy, Sci-kit learn, Tensorflow, Pytorch), SQL, TypeScript/JavaScript, Docker, Git/Github, Jenkins, Jira, and a little Rust, Ruby, and Java.

Résumé/CV: https://www.dropbox.com/scl/fi/tiebc9l2panci57ycl8f9/MarkLindbergResume.pdf?rlkey=6d9z8pbnmmmchddlkgqshcxwz&dl=0

Email: mentalmegalodon@gmail.com
Does anyone have some insight into this "Federation of American Scientists" group? The article reads as if they believe that Santa and his elves control the world, and neither NIMBYs nor local governments actually exist.
Lockheed Martin Ventures Invests in Helicity Space – SpaceNews