skysight-inc/HackerNews huggingface dataset:
We have 4 interal-only projects that all kind-of depend on each other and are all rolled out at the same time:

backend, frontend and two shell wrappers for the frontend (electron for windows, cordova for ipad)

The total code base is still small enough for network/file system to not care (~10 devs working 10 years.)

Since we're on Azure Devops, we currently have to create a pull requests for every project. If you change the naming of an API variable, you'll have to create two pull requests. You'll have to review those individually. The automatically triggered test runs will fail against the respective "old" version of each other and create noise.

If, instead, we'd have a structure like this, the changes could be together:
/src
- backend (C#)
- frontend (TypeScript)
- ...

Note that we're not planning to have a "shared" library or "common" editorconfig files, or changing _anything_ about code internals. Just tracking the folders in git together.
Keep in mind that the study is conducted with schizophrenic and bipolar disorder patents that are on medications, are overweight and gained weight while on their current medication and ..."with at least one metabolic abnormality, such as insulin resistance, hypertriglyceridemia, dyslipidemia, or impaired glucose tolerance."...

Given this study design, I don't really find the results that surprising.
I remember when I had ADSL2, I would get increased packet loss when it rained. After I failed to find the culprit, technicians from ISPs tried to debug it to no avail. It turned away when the connection got upgraded from ADSL2 to VDSL2.
I hope one of these "large file/many files" extensions becomes part of git core eventually. They are too much of a hassle to deal with and many servers don't even support them.
> As far as I can see, the best choice for writing bootstrap-related software in 2024 is still C99

That seems a bit silly, since going from ISO C99 to C++ is only one more build away[0] and from there you can practically build the whole world as you please.

> CMake is absolutely out

Considering how hostile Meson is to platforms other than *nix[1], I doubt there is any realistic alternative here.

> I still haven’t forgiven it for deciding that the space-separated output of pkg-config meant it was a “list”, then emitting that list as a semicolon-separated string into my build commands.

I'd be curious where the issue opened by the author is, since this would be a pretty big problem if it was truly an issue. The CMake module processing the output of pkg-config is also just using an existing CMake command[2], so the impact would be greater than just pkg-config related code if there really was an issue.

[0]: https://blog.dave.tf/post/finding-bottom-turtle/

[1]: https://github.com/mesonbuild/meson/issues/8153

[2]: https://gitlab.kitware.com/cmake/cmake/-/blob/f8ba5b12ca842c...
You are wrong on both accounts.

Nokia had 22B revenue last year.

https://en.m.wikipedia.org/wiki/Nokia
That's a fair point. The more I think about it, I can see the argument for protecting someone against a known bad thing at a point when they cannot comprehend how bad it really is. The magnitude is different from watching TV, porn magazines, or video games. However, I do worry that the earlier list can be gated because of their physical nature. However, Kids are going to end up being exposed to Instagram, TikTok, Youtube, and whatever else unless one cuts off Internet access altogether, at which point the losses pile up more than the wins.. There is no easy solution than to admit this problem will exist, and we talk often to the teenager and give doses of reality however possible.
SEGLDR did dynamic code loading.
Location: Toronto, Canada
Remote: Only
Willing to relocate: No
Technologies: Writing, editing (if you want someone who doesn't sound like or use ChatGPT)
Resume/CV: https://www.linkedin.com/in/torontowriter
Email: jonathanacohen@gmail.com
HAHA thats pretty cool even as just a concept to show how ping works and can be manipulated.
I’ve used CF Pages for static sites with great results and am intrigued by all their open-source-LLM-as-a-service offerings. Main issue preventing me from building more on CF is lack of Python support. Excited to try this out.
Very little?

Let me introduce you to: newspapers, radio, television, books.
And it is completely uncontrolled.
How do you generate these? It's not always bypassing anything for me...
It is, but gated gambling (accredited investor requirements) and you get something fun to talk about at parties and online (versus degenerate options trading or horse racing, which is out of vogue).
All of them? It's a backdoor into Linux to gain unauthorized access to computers that even specifically only works for that attackers specific private key. We have trial by jury where I guess you could argue that this carefully crafted backdoor was just some sort weird accident, but we also have prosecutors to make the obvious counterargument and investigate what these folks were going for. Though frankly they're probably state actors that we're never gonna catch. But literally all of part a. I still don't understand if I'm actually just missing something obvious about our criminal justice system that would mean the US has no ability to prosecute even moderately complex crimes by slightly sophisticated actors that didn't reach fruition, since by your reasoning we'd also never be able to prosecute essentially any organized crime anywhere as long as they keep their targets a secret? If the attempt didn't occur then did someone just trip and fall on their keyboard over a period of months to accidentally carry out sophisticated social engineering to write a carefully hidden backdoor into a package targeted at hijacking widely used operating systems?
To play devil’s advocate for a moment…

Wouldn’t this break Deep/Universal links which send a user directly to a specific location within an app?

I get that there are potential security/privacy concerns, but if you are in full control of URL schemes, isn’t that purpose of this feature?
Isn't it more the opposite, it's the parent umbrella brand owning e.g. Techcrunch. I assume the Yahoo News content is just rebadged from subsidiaries, but I don't know.

184 million of them probably by accident; 180 million of them bouncing at the obnoxious cookie wall.
Never understood why our industry seems unique in our willingness to do unpaid work for giant corps. Your compression library isn't saving the world, it's making it easier for amazon to save a few bucks.

You have the right to be paid for your time. It's valuable.

I enjoy coding too... but the only free coding I do is for myself.

Use a proper license, charge for your time and stop killing yourself doing unpaid hobby projects that cause nothing but stress.
Qpackt- a Modern Web Server
"The law makes personal use possession a misdemeanor punishable with sentences of up to six months in jail. However, it also creates avenues for treatment instead of criminal penalties by encouraging law enforcement agencies to start programs that would move defendants toward addiction and mental health services.
Kotek said in a signing letter that “deep coordination” between courts, police, prosecutors, defense attorneys and local mental health providers is vital, adding that they are “necessary partners to achieve the vision for this legislation.”"

I respect the legislators for trying something different, and more integrated between different departments that can be part of the solution. We're not Portugal, but it was worth a try.
Mitnick, at this point, has deceased.

Read up on red teaming and social engineering in general. Many more examples of red teaming are available, for example. I thoroughly enjoy these specific stories on Darknet Diaries podcast.
> Far too many people, including developers, seem to just accept upgrades as always-good instead of carefully considering the risks and benefits.

Another example of this was log4j: if you were still using the old 1.x log4j versions, you wouldn't have been vulnerable to the log4shell vulnerability, since it was introduced early in the 2.x series. The old 1.x log4j versions had other known vulnerabilities, but only if you were using less common appenders or an uncommon server mode or a built-in GUI log viewer (!); the most common use of log4j (logging into a local file) was not exposed to any of these, and in fact, you could remove the vulnerable classes and still have a functional log4j setup (see for instance https://www.petefreitag.com/blog/log4j-1x-mitigation/ which I just found on a quick web search).

Did log4shell (and a later vulnerability which could only be exploited if you were using Java 9 or later, because it depended on a new method which was introduced on Java 9) lead people to question whether always being on the "latest and greatest" was a good thing? No, AFAIK the opposite happened: people started to push even harder to keep everything on the latest release, "so that when another vulnerability happens, upgrading to a fixed version (which is assumed to be based on the latest release) will be easy".
A service that measured "credibility" or "activity" of a username/email could be really useful here. At least, it would be a leading indicator that something _might_ be up. In particular the aside here about the email addresses are suspect:

https://research.swtch.com/xz-timeline#jia_tan_becomes_maint...

would be useful info for Lasse Collins before taking the pressure campaign seriously.
BTW, if anyone here is looking for a replacement to Artifact --

I've been working on https://www.forth.news. We're a news feed for news; scroll/follow like social media, but all posts come from verified journalists who agree to an editorial policy. Would love to know your thoughts.
Are you writing temporary files to temp or /dev/shm ? I would hate it otherwise. Of course, others my prefer to have RAM used by other processes...
That still doesn’t explain why you can’t cache. I would think that each code snippet itself is still cacheable. Or do you amalgamate all of them into a single download? Even still, I would expect most users to be fetching the same amalgamation, in which case caching should be beneficial…
A better keyboard than QWERTY
Construction Crew Severs Secret 'Black Line'
Surely that's an incredibly broad categorisation ?

Learning Rust, like any other language, is a strategic investment that pays off with experience. Companies that are willing to invest, benefit accordingly.

Evidently, several companies that care about memory safety and programmer productivity have invested and benefited from Rust.

Finally: this is subjective of course but the borrow checker isn't something that necessarily needs fighting 'for a month or two'. There's just so many excellent resources available now that learning how to deal with it is quite tractable.
Please explain how 10lbs translates to 40lbs?
Weight is strongly correlated to risk of cancer, heart disease, etc. and BMI strongly correlates to body-fat percentage. If you are a gym-rat outlier then congrats but that doesn't make BMI useless.

https://www.hsph.harvard.edu/nutritionsource/healthy-weight/
Ideas are nothing but a (potential) head start, execution is everything.
Tesla's First-Quarter Vehicle Sales Fell 8.5% as EV Market Cools
They're presumably referring to the brand of phones, which was sold/licensed to HMD Global.
PocketCasts or nothing.
OP's information density estimations seem quite optimistic to me. For 2D barcodes such as QR codes, it is generally recommended to use 4×4px blocks or equivalent. So assuming a 600dpi printing and scanning device you would have to encode your data at "150 dpi" or so.
Just, what?!
I tried keto and felt good and lost weight, but everyone keeps telling me it's bad for my heart. I'm 30lbs overweight and don't have much energy, so that feels bad for my heart too.
> With it, I have a supersecret .ssh/ directory, which grants access to do a git tag, which will publish without needing to know the pypi secrets at all.

That isn't how trusted publishing works. It uses OpenID Connect, which both requires a privileged workflow (in the case of GitHub) and is itself self-expiring.

There's a lot of information available in PyPI's documentation about how it works[1]. But the basic version is that short-lived tokens always reduce attacker exposure, since they prevent a temporary compromise from becoming a permanent one (i.e., via theft of a long-lived credential). Similarly, auto-scoped credentials always reduce credential misuse, since they prevent users from over-scoping their API tokens to get things to "just work." Both were observed issues on PyPI prior to trusted publishing, and were a huge part of both the original API token and 2FA rollouts.

[1]: https://docs.pypi.org/trusted-publishers/
Yes! I'm also using CF Pages, and a couple Worker functions, and really love the CF ecosystem. Very easy to get something running quickly, and not have to worry much about infrastructure.

Very happy to see the Python addition. I'd like to see first-class Go support as well.
Show HN: HighIntent – Unearth your best leads with tailored matching
Hey Folks!

HighIntent helps business teams find, refine, and rank leads matching product description, ICP, and shared interests. It first finds relevant leads with matching rationale and 360° info. Secondly, it refines leads with lookalikes based on the persona of your existing leads. Finally, rank your leads with best-in-class signals.

Be certain that you’re engaging the right leads with matching rationale like “lead’s post aligns with your problem statement”, “lead’s past experience matches with your tech”.

Here’s the gist of how it works:

1.Enter your product info, Linkedin bio, and any existing leads from your CRM.

2.Express your ICP in natural language like “Tech leads in US startups” or “Marketers at EU retail companies”.

3.Get relevant leads, refine with lookalike and ICP suggestions, and rank them with rich signals.

Sign up for early access and get discounted pricing. We look forward to hearing from y'all :)
Anecdotally it seems very fast.
Gift article link (will require JS enabled):

https://www.wsj.com/business/autos/teslas-first-quarter-vehi...
Quadrature | London or New York | Full-time | ONSITE | https://quadrature.ai

We are seeking experienced, hands-on, software developers to join our team here at Quadrature.

If you have an interest in the financial markets and wish to work in a team developing our next generation systems we want to hear from you.

In return we'll offer you a highly collaborative environment where you will be able to see the impact of your work on our bottom line. We have zero silos and teams engage across our business to achieve our shared goals.

You can learn more about what we can offer here: https://quadrature.ai/working-here/benefits

To apply please reach out to:labeed@quadrature.ai
The One Fiber Optic Cable No One on the Dig for Tysons Rail Wants to Hit
Apple has Apple Pay, a store monopoly, tax dodging (double Irish), stock buybacks, and probably more issues with the FTC. Oliver at HBO isn't trying to be a financial institution.
I've done a ton of low-budget analog hardware debugging, and the major problem with hardware debugging is each attempt to fix the problem takes a long time. If I had wanted to test every idea I had I could easily waste a week. Not to mention that I can't just run some automated test suite after the fact. For hardware, approaching debugging methodically is a necessity, not just best practice.

We don't typically have log files for hardware, but I'm always surprised when otherwise extremely intelligent people first try to debug by applying "fixes" that shouldn't have any causal effect on any weird observations we've gotten. I have no problem with people coming up with theories because each modification takes time, but each theory should ideally explain the data...
This is a distinction without a difference. The US government said, "you aren't allowed to strike, if you do there will be consequences."

The strikers backed down because the violence they feared. The government has a reputation, and if they say "we're going to hurt you" they probably will.
It's not even clear whether a monorepo stretches across teams or not. I think many people are argueing about different things.
> "Shortage" is the summary.

Yes, economically it summarizes a situation where price is unable to rise. Your regional milage may vary, but I've seen a few shortages around town lately. Here are a couple of them:

1. Price gouging laws prevented the price of toilet paper from rising when supply stocks were low in 2020. Instead of them selling for thousands of dollars per roll (or whatever it would have taken to satisfy the market), people were running the store as fast as they could to cheaply buy up everything they could get their hands on, soon leaving the shelves bare. Eventually stores had to place limitations on how many rolls individuals could buy. Here, a price-based mechanism failed to manage resource allocation, so other mechanisms (first-come, first-served initially, followed by rationing) came into effect.

2. Laws intending to maintain fairness in the medical system prevent medical practitioners accepting any amount of money from patients (i.e. the price cannot rise above zero) as to not allow those with means to offer more money to pull a doctor away from surgery to look at their common cold symptoms. As a price-based mechanism is not available, we resort to a needs-based system. If you show up with cold-like symptoms and someone else shows up with a heart attack, and there is only one doctor available, you have to give up on seeing the doctor no matter how much money you have to spend. Sorry.

That's what shortages look like, from the economic point of view.

But what does "shortage" summarize socially? I respect that you have a social take, but you've still not explained it. You hand-wavingly say it summarizes supply at a "reasonable" price, yet fail to offer the mathematical formula for determining what is reasonable. No doubt because it cannot be described mathematically as it is just arbitrary judgement.

But if you accept that it is, indeed, just arbitrary judgment then how can it be summarized further? I can't read your mind. You have to explicitly tell me what judgment you have made. Once we have established what you have judged, why are you providing a secondary summary? All the information I need to know about your judgment has already been communicated.

"Shortage" works economically to summarize a situation as the conditions that define it are external. But socially, it seems the conditions are internal and thus needs to be communicated in full anyway, so there is nothing left to summarize. This so-called summary doesn't say anything.
> Supercentenarian birthdates also exhibit ‘age heaping’ distributional patterns that are strongly indicative of manufactured birth data. Finally, fewer than 15% of exhaustively validated supercentenarians are associated with either a birth certificate or a death certificate, even in populations with over 95% death certificate coverage.

> As such, these findings suggest that extreme age data are largely a result of vital statistics errors and patterns of fraud, raising serious questions about the validity of an extensive body of research based on the remarkable reported ages of populations and individuals.

huh. need to do some more validation then.
> for operations such as dividing a bill (e.g. divide by 3), or applying 3% APR in monthly increments.

Which is why passing around ints is not the solution. And why I specifically mention Domain Models and/or Value Object.

A domain model would throw an exeption or otherwise dissalow certain divisions for example. What I often do, is something like `expense.amount.divide_over(3, leftover_to_last)` or `savings.balance_at(today).percentage_of(3.1337)`.

Sometimes, in simpler setups and when the language allows, I'll re-implement operators like *, / and even + and -. But when actual business logic is needed, I'll avoid these and implement actual domain methods that use the language the business uses.

But never, ever, do I allow just math-ing over the inner values.

So, I disagree: Both decimal floating point and integers are just as "bad". Maybe for the inner values in the domain model or value object, they are fine, but often there integers are a slightly better starting point because they make rounding and leftovers very explicit.
ex enterprise MD‘s have been among the worst fucking startup founders I’ve ever encountered. Close second to startup idea bros.
Simply putting that in the post "seeking equity-only co-founder" or similar would probably be fine.
It’s probably in your TODO list, but would appreciate non-US PIN codes at some point! (Or at least Canada)
High income improves evaluation of life but not emotional well-being (2010)
Huh?

From everything I’ve read, Jobs was deep in the weeds with all that stuff. In terms of asking all the relevant questions, finding the right experts, the suppliers to provide the right inputs at the right price, finding alternative solutions to problems, etc.

I doubt very many people knew more about bringing a new product idea to fruition from beginning to end than him.
NSF invests over $26M in open-source projects
If it isn't so, some at the NSA might be kicking themselves for not having done it.
Algojobs.io: simple tech-focused job board
Masahiro Hara – Inventor of QR Codes
I can keep my viewing of shaggy-dog stories very very infrequent on Youtube. For example, there are many channels I have come to trust.

I think I'm going to stop following links from HN into YT though because most of the ones I've followed till now are long mostly-pointless expositions.
This argument cannot be made in favor of the SSPL, considering the SSPL is literally the AGPL (like, verbatim) with extra terms.
I’ve worked with a few very talented pseudonymous developers on the Internet over the years. I can’t think of any way to vet their identities while maintaining their anonymity (well, it’s basically impossible by definition), plus if you’re talking about in-person meetups, traveling from, say, Asia to North America isn’t cheap and there could be visa issues. The distinction between maintainers and non-maintainers isn’t that meaningful because non-maintainers with frequent and high quality contributions will gain a degree of trust anyway. The attack we’re discussing isn’t about someone ramming obviously malicious code through as a maintainer, they passed or could have passed code review.
Not "questionable" in the sense that it might be malicious; the author acknowledges the changes are benign. But it's still questionable that the tarball made available to distros differs significantly from what's in the tagged release in git and nobody noticed that until now. As the xz incident has demonstrated, there are plenty of good security related reasons why that shouldn't be possible.
The way the hack works is incredibly sophisticated and has specifically sought out how to get past all normal checks. If messing with some commits would be possible this entire rube goldberg hack would not have been set up.
I've played with JS workers on a Cloudflare-fronted site and found them to be easy to use and very quick. Would love to port the whole Django app behind the site over, using their D1 database too.
I don't know about Vercel explicitly, but enterprise plans are usually more than just larger quotas. You get access to solutions engineers that will help you solve problems. You get higher uptime guarantees. You get SLAs like 24 or 48 hours for bug fixes that impact you. You get access to a phone support line where someone picks up immediately. Lots of stuff that reduces risk for your business and your customers. As a business, you can only offer SLAs to your customers that are as strong as the SLAs of your hosting service, so that becomes important once you get into the enterprise world.
I never claimed it was a GNU project, I said it was a standard library for GNU Make. And it's been around for 19 years at this point, so I feel like the FSF has had plenty of time to come to me and ask me to change the name.
Rubber Duck Debugging with LLMs