skysight-inc/HackerNews huggingface dataset:
I would like to see CloudFlare implement workers with WASM as the first class citizen, and a general purpose API not tied to JS workers.

Up until now you've been able to deploy WASM code (e.g. effectively can use any language), but it runs within a JS context, rather than natively.

Just a bit more overhead/awkwardness in deployment. I believe eventually all services will be deployed directly to WASM (securitized) runtimes, rather than via containers, similar to how we moved from images -> containers).

There's very little benefit currently to trying to use something like Rust on the edge (in CF), because a lot of the perf advantage is negated by the overhead and startup times.

e.g. https://github.com/WasmEdge/WasmEdge
Tend to agree, though I don't always practice it. Boring is also subjective, even if it's a metaphor for mature.

The same sort of arguments could be said for "choose what you know", "choose what you understand", "choose what you can hire for", "choose what you can afford".. the list goes on.

Like most things in life there are no cheat codes.
Real positives aren't much better! A friend of mine worked with an MRI researcher and therefore had an opportunity to undergo a number of elective MRIs for free. They consistently turned up minor issues (labral tears, bone spurs, etc.), even in body parts that he assumed were perfectly healthy. Bodies are complicated, and we can compensate a surprising amount before things become an problematic. Learning about all of these isn't always helpful, and can actually cause harm (e.g. stress) once made aware.
Some experiments with magnet, water, blood etc.

https://www.youtube.com/watch?v=E-yHv91Y_oI
Sure it is. The whole reason for why YouTube Music exists is that YT is very convenient for uploading and sharing audio tracks (and to defy copyright restrictions). There are huge amounts of "videos" with no graphical elements, that only exist to stream sound. And so, many podcasts upload their episodes to YouTube because it's a truly ubiquitous, universal platform for audio and/or visual needs.
Ever heard of productivity?

The industrial revolution reduces the amount of people necessary to provide social security for the elder, modern technology can do the same unless you don't want workers to participate on the rise of productivity.
Quantum properties are randomly determined from a set of possible outcomes. (e.g if you measure "up vs down" you will never get "left", but it's physically impossible to know if it will be "up" or "down" until measurement.)

They also happen in context, not in a vacuum. Whether or not I make another cup of coffee might come down to fundamentally random quantum events, but that doesn't mean there's any chance I get up and brew a cup of steamy elephant piss because I don't have any on hand.
OT: check out my annoying screensaver based on the bouncing DVD logo. https://github.com/pryelluw/mac-dvd-screensaver
Congrats on the launch.

While I agree that low code is often a trap, I imagine this is a very difficult space. Once you go away from low code and towards low effort, you're then in the realms of supabase and pocketbase, which have that particular niche nailed pretty well without marrying to a particular front end framework.

I personally now wouldn't stray from pocketbase for internal apps because an alternative offered hosting and some UI components (when I have a whole internet full of hosting and UI components -- see: tough space, selecting for people who do have some coding ability). But I can see how a really well integrated solution could be valuable to others who happen to click with its flavour and degree of opinionatedness.
But the xz backdoor didn’t involve a build script that tried to compromise the machine the build was running on. It involved a build script that compromised the code being built. Sandboxing the build script wouldn’t have helped much if at all. Depending on the implementation, it might have prevented it from overwriting .o files that were already compiled, maybe. But there would still be all sorts of shenanigans it could have played to sneakily inject code.

I’d argue that Rust’s biggest advantage here is that build scripts and procedural macros are written in Rust themselves, making them easier to read and thus harder to hide things in than autotools’ m4-to-shell gunk.

But that means it’s important to build those things from source! Part of the movement you cite consists of watt, which ships proc macros as precompiled WebAssembly binaries mainly to save build time. But if watt were more widely adopted, it would actually make an attacker’s life much easier since they could backdoor the precompiled binary. Historically I’ve been sympathetic to dtolnay’s various attempts to use precompiled binaries this way (not just watt but also the serde thing that caused a hullabaloo); I hate slow builds. But after the xz backdoor I think this is untenable.
Even if all contributors have verified identities, sign their commits, etc it isn't enough. Consider the real-world case where a developer's laptop is hacked and the attacker subtly modifies their local source tree to introduce a vulnerability that is unwittingly signed and committed by that developer. I've seen cases like this in the wild caught in code review.

It always made me wonder how many such cases don't get caught, since code review isn't consistently thorough.
Scientists announce new world record of artificial sun at 100M degrees
> each day we are silent we become more complicit in this horrific genocide

Credibility lost.
It really depends on which parts of AWS you're using. Spinning up a bunch of EC2 instances and treating them like colo'ed servers has pretty much always been boring (other than the excitement of not having drive to the DC when you need to reboot something).
To expand on this, many states have a large white pine lumber industry. The white pine is highly susceptible to a type of fungus harbored by currants.

The fungus does not spread from white pine to white pine, only from currants to currant, or currant to white pine, so eliminating the nearby currants protects the white pine industry.
Local disk space for internal apps is a concern for you? I’ve never thought to measure the amount of space that a Django Admin app or a custom-built React admin app might take in my hard drive… At any rate I know I prefer having every environment locally and not only in the cloud, and I suspect I’m not the only one.
I was responding to your point about isolates and cold starts. Snapshots are unique to Python, but V8 does not seem relevant here, all this is doing is initializing the linear buffer that backs Wasm memory for a particular instance. We have a lot of ideas here, some of which are mentioned in the blog post.
Yup, I've actually gotten pretty decent results out of an LLM for subjects I'm already pretty familiar with. If we ever figure out the hallucination problem, LLMs could revolutionize education overnight.

I think that almost everyone would benefit enormously from having a focused and dedicated one-on-one tutor. Just imagine if you could call up the leading world expert in any field at any time to ask any question you could possibly have. We as a species would get so much more done.

At least that's what I want AI to be in the next decade or so. A tool to push humans to a much higher potential where we can solve our own problems more effectively. I'm afraid we'll skip that step, though and go straight to worshiping the AI that makes the most paperclips.

Anyway, I'm still experimenting off and on with local LLMs to get me closer to where I want to be. I'm not sure it's much faster to use an LLM and continually verify its output, but it does at least provide structure and guidance for my own self-teaching.
Where was this? In Maryland they would break, a lot, but I never heard of them exploding. I don't think the people in our development loved them. Certainly I had seen a few too many across somebody's lawn or walk.
Why does innovation or humanity need to exist? I don't see an obvious point or reason to life at all; much less the "growth and innovation" needed for the economy.
this of course calls to mind that famous quote from literature:

My name is Inigo Montoya, you unfairly taxed my inheritance, prepare to die.
Many-Shot Jailbreaking
> Once you start having to manipulate large arrays or do any large amount of math nodejs preformance goes into the dumpster.

We’re talking about web applications, no? You probably shouldn’t be manipulating large arrays or doing large amounts of math directly in your web application server. That should be isolated in some type of service or worker, which could be written in another language. Or maybe there’s a NumPy-like package for Node.js, I haven’t looked.

The question then is where do you draw that line of using another language? It probably depends on your application, but I think Node.js is perfectly suitable for typical web applications backends.
Spot on. The counter should be sound regardless of any social or cultural context, a process where being polite or rude, pushy or not is irrelevant.
Whataboutism means point to some particular other place that's worse. I'm talking about the entire country. For a US state to meet your standards, we'd need a 51st state. And California in the 1990s wasn't that either.

Again one exception, SF was nicer just 8 years ago, and probably better in the 90s before tech companies ruined it. That city is exactly how you describe it now. The rest of CA is not.
I had a flick through the docs but I don’t quite get how deployment / connection to dbs etc works.

My experience this these tools is that they generally end up having a convoluted system in order to let you use the tool while connecting to your own dbs without handing over access or you hand over access.

Could you explain how it works in your case?
Product skill issue. They're Google, surely they can find a way to insert ads into an app. The article itself suggests several ways they could innovate, surely some of it is monetizable:

> What’s most frustrating in this case, though, is that Google had an opportunity to do something genuinely great in podcasts. Podcast discovery is a problem, and so is finding information buried inside hours of audio. What Google should have done was find ways to actually connect its services. When you discover a podcast you love in YouTube Shorts, it should have offered you a one-tap way to subscribe to that podcast in Google Podcasts. It should have made transcripts searchable in Google so you can find the moments and insights you’re looking for right in the audio.
Productivity doesn't matter as long as all the wealth generated from the increases is captured at the top.
In "Ghost in the Wires" Kevin Mitnik details one of the ways he obtained information was via a law enforcement receptionist* who he managed to trick into believing he was law enforcement over the phone. He obtained information this way multiple times over multiple years, and fostered a phone based friendship with this woman. He seemed to have no qualms in doing this.

He was also turned on by multiple people who he considered close friends. In the book it did not seem that he had considered that it might not be a "them" problem.

*my details may be off here, I read it some time ago
Vercel is very cool, but I wish we made more progress in technology that is easy to self host than a service.
Does anyone know how this approach differs from the approach taken by the popular(ish) dejavu project?

https://github.com/worldveil/dejavu
> The computer still needed about 20 minutes between moves.

Wow. Coding and debugging that is... a whole other level of difficulty compared to coding these days.
I definitely appreciated (and still do!) having my mind blown as a kid by the sheer sense of humor that developers have.

It feels like we lost many subtlely important things in the drive starting in the 2000s to "clean up" software and their development.
It's as fast or even faster than Java that you mentioned. In my experience, comparable to Golang.
Location: Vancouver, BC
Remote: Yes, hybrid works as well
Willing to relocate: Yes
Technologies: JavaScript, React, Express, Git, Node.js, Mongo, Python, Java
Résumé/CV: https://drive.google.com/file/d/1u8pWt2LnTR57BWVk_Le66X0dX0vIjgs8/view?usp=sharing
Email: memm.milad@gmail.com

Hi, my name is Milad Mehri, currently studying for my B.Sc in Computer Science at the University of British Columbia. I have developed several projects using Typescript, Javascript, and React, including interactive games and websites. Most of them can be found on my github: https://github.com/milad-mehri .

I am interested in any position that will provide me with a hands-on opportunity to develop new skills and learn more about the tech industry.
Generally anyone that references performance/bottlenecks without data, they’re just parroting their bias. This post is “nu uh!”, but with more words.
Apple Store Employees Say Coworkers Were Disciplined for Supporting Palestinians
It’s a public company, he can’t treat it as his private company even if he invested $230M and it’s only worth $150M now and he’s trying to make up for his losses
I can agree with you but the title has a characters and I think the main point of this study is to measure glucose, as they say in the first paragraph

> Smartphones can now measure glucose, a key marker for diabetes, as well as other molecules and biomarkers, thanks to their built-in magnetic compasses
What's the difference between gross profit and net profit?
I think you're probably correct that you likely aren't the target audience here. Version control is a loaded term. This would be a terrible replacement for perforce or anything for diffing something like a CAD file.

The real focus of the system is for things that are better managed by people who aren't engineers but end up interfacing with code very tightly. The idea was to focus on the peripheral functions that come up in UI engineering and enable e.g. translators, copy editors, and designers to essentially commit to a codebase without having to understand git or know how to handle plaint text merge conflicts.

> I suspect that many of the people who influence the adoption of VCS are likely deeply technical and will likely actively avoid products that are opinionated on the target output when using the VCS.

I totally agree. You can modify the output to your hearts desire. This was a big part of our design.
Looks pretty cool :) We can help with the anonymization piece if you're interested in checking us out - github.com/nucleuscloud/neosync
Their dev kit would include a Mac and cheese.
You're going to teach your developers? Because I just couldn't find enough Golang devs around. Node.js is well known.
TIL antenatal is not written "anti-natal"! People who attend antenatal classes are certainly not anti-natalists. One of those terms should really be dropped from the language.
> It’s no surprise that fertility is dropping in many countries, which demographers attribute to factors such as higher education levels among people who give birth, rising incomes, and expanded access to contraceptives

In other words, highly educated people who have money don't want kids? That makes zero sense to me. From a personal observation, people who have higher income usually have more kids than a typical family can afford.
Shut down the ability to distribute fake "source code" in releases
Right, of course, $40k is not cheap in absolute terms. But for a luxury long-range AWD electric crossover, it's significantly cheaper than the competition (at least here in the US), and also much cheaper than the same car cost a year ago.

My main point is that if prices have come down a lot, yet Tesla is now selling fewer cars than before, then it seems like there must be other factors in play besides price.
Indie Starter Updates
We don't have any evidence they are dangerous. There are some phenomenon like magnetophosenes. You could also look up what a magnetar would theoretically do to a body, but nobody is getting close to one of them anytime soon.
Sounds like the issue wasn't the performance of TS per se, but rather the use of some ORM led to inefficient database queries being executed. This sort of screwup is possible in all languages.
seems like labor is about to get more expensive - esp skilled labor
True, storage was also a thing, I remember using some hacked together GmailFS program, where you could split a large file among a bunch of email attachments that were sent to yourself and tagged, then you could download and reassemble those files anywhere.

I used it to store FLV music videos I found, it was... the okayest form of cloud storage.
Wow.

The procedure to set this whole thing up entails the following packages:

python3-pip
revng/orchestra

Both have questionable maintainer integrity issues similar to the famous libxz/liblzma backdoor[1]

While the concept of lifting up to intermediate representation (IR) code is quite novel, this one is too hot for me to touch ... as an InfoSec guy.

1. https://news.ycombinator.com/item?id=39865810
Can someone explain to me if the article in The Information on this topic is completely dumb, or whether I'm dumb for misunderstanding it: https://www.theinformation.com/articles/microsoft-unbundles-.... (You don't need to pay, just read the few paragraphs visible for free.)

The author claims there's no benefit to consumers because prices went up. The whole point of the rule is to prevent MS from killing off competition by keeping the prices low. So the benefit should be in the form of a healthier ecosystem (and long-term high quality / price tradeoff) rather than the price level today.
Conceptually I really like unikernels, but I don't think they have much purpose in the software world today.

A lot of companies aren't running their stuff on metal anymore, they're running on Kubernetes. It's what people know and are familiar with. How many people know unikernels? How do you even debug an app running on a unikernel? How do you convert a "legacy" app to be runnable on a unikernel?

There are already very stripped down Linux distributions out there for running apps on Kubernetes like Bottlerocket OS. This removes the majority of the attack surface that unikernels remove. And you get to keep the Linux ABI.

Unikernels may strip out a lot of bloat and attack surface, but they also introduce a lot of complexity of their own.
About a decade ago, the industry shifted from slow, carefully evaluated infrequent updates (except for security) to frequent, almost daily updates that are mandatory. I'd say this was pioneered by the Chromium team and proved to be beneficial. The rest of the industry followed.

Now we're in a position where most projects update so quickly, that you don't really have a choice. If you need to update one component, there's a good chance it will require that many more as dependencies in your project will require an update to be compatible.

The industry as a whole sacrificed stability and some aspects of security for faster advancements and features. Overall I'd say the net benefit is positive, but its times like these that remind us that perhaps we need to slow things down just a little and do a bit of a course correction to bring things into a better balance.
Well, that or own the company.
Wasn't VAX assembly very orthogonal and nice? I can understand if it was used as a compiler target, whereas x86 strikes me as harder to deal with?

So if you have the space and free electricity in 1987, sure, give me a fast VAX.

Not so much if you live in a student dorm, but I'm sure some have done that too.
The 2024 total solar eclipse is coming! Witness day turn to night & the sun's corona! When, where & how to view it safely (with eclipse glasses!)
For this to work you need the dwindling percentage of people working to voluntarily acquiesce to having a large portion of their income redirected to people who are not working.
Pocketbase is just superb. I am using pocketbase together with scalajs and svelte. It saved me so much time setting up the basics and you won't regret it once the project grows. Anything works with pocketbase but go or any js based stack has an easy onboarding.
I love reading about this kind of stuff. My neighbor has a bunch of Brazilian pepper trees, and let me tell you, those things are a nightmare. Incredibly invasive, grows extremely well in our climate, no natural predators here, and they outcompete almost every other tree. I cut a branch from one that was deforming a palm tree due to the way the branch had grown.
The boss already owns the jet. Now he makes his company rent it from him, so he can zoom around in the plane he already owns, and that he would be zooming around in even if he weren't the Canoo boss.

I don't think a company should be paying for the boss's jet, if the company isn't near break-even. I'd say the boss doesn't believe the company has legs, and he's extracting cash while he can.
Nodejs is slooooooooooooooooooooooooooooow. [0]

[0] - https://www.techempower.com/benchmarks/#hw=ph&test=composite...
it wasn't needed in our case. Selling B2B didn't require online reviews of our product.
Didn't find a lot of connection between my link and that, but it was a great watch nevertheless.
This is one of my concerns. I don’t have ML experience and have a feeling it’s a requirement for the top universities. By the time I build up experience, the opportunity cost just continues to rise
If there is no innovation then standards of living will not improve, and the future will look bleak for many people. Nihilism is incredibly dangerous and desperate people often turn to totalitarian ideologies which promise meaning and purpose.
All Ponzi schemes rely on the influx of new capital or they collapse.
Leaving aside issues of how it could work, Lasse Collin wasn't the one who saw this attack and stopped it so how would paying him have helped against this attack?

> "Lasse would suggest Tan as a suitable replacement. Big Company's hiring pipeline would approach Tan and start the hiring process (in person interviews, tax docs, etc etc). At some point they would realize Tan isn't a real person and not hire him"

What if they find that Tan is a real person but he doesn't want to work for Amazon or legally can't (This is before knowing of his commits being malicious, we're assuming he's a fake profile but he could be a real person being blackmailed)? Collin can't leave? Collin has to pick someone else out of a candidate pool of people he's never heard of? Same question if they find Tan isn't a real person - what then; is there an obligation to review all of Tan's historical commits? Just committing under a pseudonym or pen name isn't a crime, is it? Would the new maintainer be obliged to review all historic commits or audit the codebase or anything? Would Amazon want their money back from Lasse once it became clear that he had let a bad actor commit changes which opened a serious security hole during his tenure as maintainer?

> "No. Not doing the maintenance tasks would make everyone mad, violating one of the two job responsibilities."

What he was doing already was apparently ignoring issues for months and making people like Jigar Kumar annoyed. Which is fine for a volunteer thing. If "Jigar Kumar" is a sock-puppet, nobody knew that at the time of their posts; Lasse Collins' hypothetical employer wouldn't have known and would surely be on his case about paying him lots of money for maintenance while complaints are flowing on the project's public mailing list, right? Either they're paying him to do what he was doing before (which involved apparently ignoring work and making some people mad) or they're paying him to do more than he was doing before (which is not what you said).

It doesn't seem like it would work - but if it did work it doesn't seem like it would have helped against this attack?
Using an ICE base platform for EVs doesn't make sense, and there is no EV base platform for sale/license. Companies building the EVs are holding their cards tightly to their chests for competitive advantage.