skysight-inc/HackerNews huggingface dataset:
This seems to be rooted in a generalized problem which I'll hastily call the conscious abuse of polite understanding, or abuse of economic consensus. Another possible rubric for this, a bit more sensationalized, would be "destructive precision".

A simple example would be the hollowing-out of conventional terms everyone believes they hold the same settled definition of, such as "a flight." Instead of transacting according to what consensus suggests "a flight" meant a decade or two ago, when most would have expected this term to have thoroughly matured to the point of semantic stability, instead delivering against the most contextually minimized, stripped down interpretation of the term possible that still qualifies as valid, and attaching fees to all of the other attendant associations of value that used to be included in the scope of general consensus of the term.
Ask HN: Link to Guide on How to Build Spreadsheet Software from Ground Up?
I saw a guide some time ago on the topic of building a spreadsheet software. It is not anonymously written, and it's not on spam platforms like medium or substack, it's hosted on its own (a personal blog? a dedicated site? a github page? I'm not sure).

The guide is in written form, very profound, and discusses entire process from ground up. The author tells about their own experience, explains about different trade-offs and edge-cases.

Would really appreciate, if someone shares the link with me.
What happens with (not very frequently maintained) mailservers or appliances that used it? There are some alternatives, but not too many of them, and having one less makes the whole system more vulnerable to DDoS or legal actions (honest or not).
> Economic "models" make assumptions like markets being efficient. Meanwhile in the business classes next door they teach how to avoid competition because it's a race to the bottom

You've more-or-less verbatim described the impetus behind the modern development of behavioral economics. That older sort of classical theory which you describe -- the one which frames the world in terms of "rational economic agents" -- has been out of vogue for nearly two decades now. Sure, you can still find the idea taught in classes... but professors now treat the classical ideas more like a simplified foundation rather than gospel -- much like a physics professor teaches Newtonian Physics before moving on to Relativity.

> I'd like an economic model as powerful as the laws of thermodynamics, where everything is included if not explicitly. But I haven't seen one.

... and this is where you diverge in thinking from the new-school behavioral economists. According to the new-school, economics is a social science, a thing of statistical measurements and probabilities. Most modern economists would probably be inclined to chide you and say that attempting to characterize economics in terms of hard laws would be the same as disregarding the human element -- a reversion to the classical idea of "rational economic agents".
I would argue that there is the option to look at all the requirements at once. The disconnect with your mental model is in the definition of the piece of software being designed. You’re considering all iterations to be the same piece of software, despite ostensibly having different sets of features and functionality (e.g the ones added over time).

Consider the alternative perspective that each new feature actually makes it a new piece of software. You were able to fully design and specify the original piece up front, thus avoiding technical debt on that piece of software.
It’s interesting because I’ve seen the direct opposite. Also, it’s been at least 15 years since I’ve ever been asked for my references… but mine have never been called regardless
this is the case with almost all drugs. for example almost every antidepressants was the result of a weight loss or something like that.

drug research is worse than training an LLM. you feed it to random people and then compare effects with initial conditions and of something looks good you try with more control.
We have barely scratched the surface of the algorithms that can satisfy all the attributes of significant learning. https://www.buffalo.edu/catt/teach/develop/design/learning-o...
Although I believe, the much more serious issues are around the impact of deploying AI systems on the Human agency. These algorithms could potentially make any kind of change harder and could seriously cap human potential.
Heinlein, "The Menace from Earth"
I have been trying to be an aUtoDidAct for the last 5 years and I seriously failed. My technical skills are stagnating. My social skills deteriorated. My network is abysmal. The value of working in team with others, and being able to talk to experts is really invaluable when it comes to learning. Some stuff can't be found in books nor on internet, and you can't learn it by yourself unless you spend 10 years on the topic.

So, for me at least, I think being an autodidact is not the best option when it comes to learning.

I think some people are really creative and curious, and benefit from having more freedom, but most people need guidance. We shouldn't push the message than anyone can learn anything by himself, even though I wish it were true.
Sober take, though the ad hominem wasn't needed.
OpenAI's latest (GPT-4o) model is US$5.00 / 1M tokens [1]

For large repos it might get expensive, but many will have orgs footing the bill.

To satiate curiosity, I made a fresh rails app and it has 9141023 characters, let's /5 to estimate 'tokens' (wild guess), so to scan an entire rails app, that's about $10. Not nothing, but not back-breakingly expensive. Scanning could be reserved for non-trivial PRs and important applications where vulnerabilities are especially likely (e.g. perhaps not static sites, demos, or apps not in prod or a live environment).

Scanning only new or edited files, along with those they interact with (where sensible patterns could emerge over time) could decrease the total volume of files needing scans, thereby reducing costs.

[1] https://openai.com/api/pricing/
Oh. Totally happens--probably especially at small companies/startups. I'm just saying it probably isn't a great bet if that's your main reason for going to the school.
removed due to obligatory disclosure liability
FPGA-Accelerated Password Cracking (2023) [pdf]
Cleopatra, Hypatia, Cornelia, Calpurnia,...

Also their mythology was full of powerful women, why would an oppressive and patriarcal society would tolerate having a woman as the goddess of knowledge or hunting?

Probably women were happy in their housewife role, so were my grandmothers.
When i go to work i put my phone in a locker.
The response from bind is not great. Sure, one individual bind resolver may have lower amplification factor with those rate limits, but it is much more than 1x. As a consequence, 100k of such resolvers could do a burst that could saturate the victim bandwidth.
That's very good for you, you should count yourself lucky. But i think we should trust people when they tell us how they feel. Do you live paycheck to paycheck? Are you aware that a majority oh Americans (55-69%) do, defined as struggling to save or invest anything past the monthly expenses?

I'm a late 20s man who made it into tech, I'm doing great! My friend who got into tech might kind of hate their corporate job lives but they're monetarily at least able to pay their student loans after 5 years of working. A few kids were able to start construction/lawn businesses, i don't know the details but they appear to be doing well. Every single other person that i know, who's finances I'm aware of directly, or indirectly (social media posts, etc. ) is having a hard time right now. I can count on one hand the number of people who feel good about the current US economy that i know, i speak and have spoken to dozens of people about this.

Literally only the comp sci graduates are having a good time right now, and even that's starting to tighten. Jobs are getting more scarce, people have to take pay cuts to be able to actually have a life again, etc. You could say I'm doing well right now and then i could say that must mean everyone is doing well and the whole thing is propaganda. But there's a lot more than just successful people out here, we're on HN anyways, that says a lot about our socioeconomic status and friend groups.
Just replace python with mac or apple in your comment and I think you will understand.
I think LLMs have a lot of promise for automated vulnerability research. However, to pick at two small things:

1. The vulnerability classes chosen (XSS, CSRF, SQLi, etc.) have well known, basic "shapes" that don't vary as much in the wild as other classes, e.g. memory corruption or logic bugs. The latter also have a common subset of shapes, but frequently require long sequences of dependent operations to reach an exploitable state. It would be interesting to see more research tackle these vulnerability classes!

2. The standard for "proof of ignorance" in the field is cutoff dates: it's taken for granted that, because GPT-4's training cutoff predates any of the CVEs, they must not be included in the training set. This might be appropriate in some cases, but it's harder to confidently assert for publicly disclosed vulnerabilities: a public CVE may be subject to extensive semi-public documentation and conversation before being made "public" in the form of a CVE, and it'd be interesting to know whether any of that has been included.

Edit: To make the point in (2) more clear: it's somewhat common for a CVE to come from a public issue tracker, where a user reports a bug or piece of unexpected behavior that ends up being exploitable. That issue tracker doesn't get labeled with the CVE itself (from the LLM's cutoff perspective at least), but it contains much of the information needed to derive the exploit. In such a case, it's hard to establish that the LLM has successfully produced a novel exploit rather than just regurgitating what it was trained on.
A newer Model M on a Mac. I had to swap the alt and ctrl key, but otherwise default key bindings.
> A lot of sites out there are still not supporting IPv6 because ... you'll never guess, but dealing with DDoS on IPv6 where your attackers can rotate through addresses quickly is not easy.

Sure it is. You block the /64.
TV movie from the 1980s helped change the course of the Cold War
It seems pretty clear to me that changing one’s body is preferable to changing who you are. The former is something you’re born with, but the latter is something you can decide for yourself.
If you were willing to live with a Turing-complete grammar in a general purpose language, I wonder how it would ideally work and what you’d be able to gain in trade.

Sort of a supercharged version of Lisp reader macros.
That's a fantastic concept. I did pretty badly so it looks like I need to practice more.
What decade are you from, the 2010s? Today you need an LLM, preferably two, to do anything. Just like half a decade ago you needed a blockchain to do anything.
There's already people with 2-3 part time jobs. I don't imagine if a 4 day work week became the norm, that suddenly it would become the only available option either...
Whenever anyone recommends conda I automatically assume they don't know much about python.
This is tangental, but I believe Persi Diaconis recommended like 13 riffle shuffles* if national security is at stake. Who knows, maybe one day nuclear launch codes will depend on the Solitaire cipher.

* Depending on how chunky your shuffle is. A pro card dealer can do almost a perfectly alternating riffle, which is obviously no good for national security.
Typst[1] is another tool which implements document generation from the ground up.

Zerodha had a great article [2] how they migrated from LaTeX based pdf generation to Typst, which ended up saving time and compute.

[1]: https://typst.app/
[2]: https://zerodha.tech/blog/1-5-million-pdfs-in-25-minutes/
>None of those apps need a tray though.

What do you mean?

That each time I get of my deska nd then I go back I should either get a stack of notifications or just check each app to see how many emails or messages I missed?

Sure those apps won't crash if soem evil person makes the Tray stuff go to /dev/null.

The idea is if you listen to the users that restored the Tray,a nd the big distros that also restored it or forked GNOME you would be forced to accept the reality, but GNOME designers pretend the reality is wrong and their fantasy is real, somehow reading a book or watching a video about UX makes those guys experts and a big bunch of the community stupid.

Also , stop pretending you are stupid, we all know the big issue with CSD vs SSD , GNOME refusing to make non GNOME apps work on their desktop, check how many forks GNOME vs KDE community had and use logic to understand the real world and non the fantasy in GNOME blogs.
Yeah we're doing so well at facing this one now. Half the people who might do something about it are still denying it (while updating their air conditioning)
I wonder if this can be used to prove if all substantial React apps include cycles--even if the raison d'etre of React is one-way data flow (i.e. no cycles).
Is there a way to side-load Mozilla extensions and circumvent their store? We see now that any central-authority store is a net negative for online freedoms and rights.
So, while the loss of SORBS is troubling (I mean: yet another initially-volunteer-driven and widely-used project burning out...), it, like other DNSBLs, is not very relevant to modern spam filtering anymore.

With, like, 80+% of inbound SMTP traffic coming from Google, Microsoft, Amazon and assorted non-malicious transactional/list-based SaaSes, a simple 'I either like or dislike the sending IP' approach has been infeasible for many years.
depressing part is the current pump beats buying coca cola.
I got a design which wobbles infinitely! :D
The clip was live recorded, not looped.

https://streamable.com/0a9zmb
Melting isn't the problem, melting away is.

https://www.antarcticglaciers.org/glaciers-and-climate/glaci...
Since many (most) are not updating with every release, it's still valid as an update too. E.g. the supported PG version of Centos 7 vs the base version after going to 8 or 9 and so on.
This assumes that the fundamental nature of human beings can't be changed, which is the presupposition that genetic engineering denies.

The entire point of genetic engineering is to try to engineer people at the cellular level. A fanciful example would be modifying human metabolism to be more similar to those of birds that consume most of their calories in the form of simple sugars. Humans can't eat a diet of 100% sugar and remain healthy, but other animals can. It may be possible to change that fact, if we know how to edit our genes.
Been there for tens of thousands of years? So that means, this is as warm as it's been in that long?
Conclusion from your link:

"According to RIVM, the total PFAS intake of Dutch consumers is too high. This excessive exposure is therefore irrespective from eating home produced eggs."
Productivity is already increased, employees just never got the benefits from it.
I think RedHat has a support program that takes it out another year beyond this month
Seattle is noteworthy for being going against the norm in this case. As a midwesterner, it definitely surprised me to see so many "contra-parked" cars the first time I visited Seattle. It was one of those things that was just so deeply ingrained that it never occurred to me to park against traffic like that.
There is a delay in the perceived value of the job as well as a delay in acquisition of a degree/pedigree so the calculus must take into account the expected job value at the end of the degree.

In my view, given that the tech job value is in decline, and will continue this decline for the foreseeable future, the net present value of the job is much lower that the perceived value. Prospective students should take this into account, especially the middling ones.

When I decided to go to university in 2001 it was after the dot-com crash and classes were very small. We were told that all programming jobs in the future will be done by Indians and there was not future for us in this feild. I took the bet that they were wrong and did quite well out of. But I was also a rather gifted student with a natural affinity to programming so I figured it was something I wanted to do even if it turned out that I was wrong.

My prediction now is that this downturn in tech prospects is not a temporary setback as seen in previous downturns and is more structural and permanent. The pie is not growing fast enough to turn efficiencies into consumer surplus and instead efficiencies are driving down wages at a time where government policies are exasperating income inequality in an effort to chase GDP. I don't know how someone starting today would escape the intentional demand destruction / crushing of the middle class. Maybe there is some margin left in the high pedigree -> good job strategy but I am not confident in it.

Since I think the expected payoff of high pedigree degrees are worth less than what other people think a more economically defensive strategy of not taking on large amounts of debt and self teaching as much as possible would be the way to go even if historically that has not been true.
TBH I cannot, which is why I talked of doubt in the quantity comparison, and it’s a fair point to pull me up on. My broader point was that people associate film with chemicals often because they have been within sniffing distance of a darkroom or developed film at school. They do not associate consumer electronics with chemicals, when silicon chip manufacturing involves some true nasties that you would not be able to safely go near to with gloves and tongs like a fixer.

It’s just my instinct based on what I know of the processes involved in manufacturing the main bits that are different between even a late era film SLR and a contemporary mirrorless camera —- displays, high density batteries, sensors, additional microcontrollers and usually two powerful CPUs.

The nastiest bit is the sensors, which are very large chips.

But given the sheer amount of electronics in it and what we know of the impacts of toxic waste pollution in Taiwan and other silicon manufacturing centres, and even just CO2 emissions, it seems likely to me that the contents of a digital camera are likely worth hundreds of rolls of film and their prints in terms of pollution impact once you consider all the processes that are involved in controlling that pollution.

The average secondhand consumer digital camera in my experience has shot in the low thousands, where that data is easily found still; it’s getting harder to find shutter activation data and it may not really be a useful guide anymore. But in the DSLR era it was normal to find secondhand kit with use equivalent to 50 to 80 rolls of film at the very most.

This is why secondhand camera companies and hire shops are so important, because they extend the useful life of what is otherwise e-waste. And I think there's a lot of delayed e-waste out there; people who own DSLRs but haven't chucked them because they are occasionally still better than their phones.
> The only people who will respond well are other people who went to the same ivy as you.

Not my experience at all. I’ve been at multiple companies where the top management came from different Ivies (or similarly prestigious universities).

They all promoted and hired people from other prestigious universities.

I have never actually seen this proverbial situation where an entire company clique is all from one, single university except at very, very small startups.

At big companies, it’s less about the exact uni and more about where it falls in the rankings. Anything top-10 is basically interchangeable.
Okay, but here's the thing that grinds my gears: when money is raining from the sky, we call "seed" the stage where someone with a nacent business concept gets funded.

Money is no longer raining, so let's take a sobered approach to identifying fundraising stages.

A nacent business is not at the "seed" stage--this is "pre-seed". By nacent, I mean someone who wrote some software over a short period of time and then joined an accelerator in hopes of turning that software into a business.

Why is this not "seed" stage? Because a market (customer) for that software has yet to be established, the team is only coming together and beta testing is still in the future.

Accelerators are offering "pre-seed" funding on the chance that their help and encouragement will get the team together and the product to a point where other investors will take interest and the product will get ready for the market.

Let's get this right:
- no final product, no market discovery, no team together = "pre-seed"

- beta-tested product, market discovered, team assembled = "seed"

Some accelerator ventures may actually reach "seed" stage in their cohort. But most of them likely will not. I've looked at hundreds of these.
People keep telling me that one day I’ll die but I never have. Therefore I never will?
Yes

Except for the @ss-kissing, the unnaturally inflexible academic environment, the pressure for publishing, etc

Then academia becomes hell
I do wonder if a better antitrust strategy would be to pursue a portfolio of actions against second- or third-tier companies like this; the current strategy of going up against Meta, Google, Apple is sound in terms of raw size of antitrust abuses going on, but they remain some of the most popular brands in the US and so it’s often hard to show consumer harm.

As a counterpoint, I suspect building momentum by actually winning a bunch of smaller cases for companies like Autodesk or Verisign where the average consumer doesn’t have an opinion, could shift the Overton Window on the issue.

I know you come into leadership positions at agencies like the FTC planning for only having 4 years, maybe the above is naive politically. Still, one can hope.
Isn't cljs kinda deprecated now that google closure compiler got shut down?
Obviously translation is possible but not "synchronously" as you wish. From what I understand 200ms is "time-to-first-token", so I still wonder how that works because, as I wrote in my comment above, typically there is no one-to-one correspondence of words/tokens from one language to another. (I didn't downvote your comment)
It's not easier or simpler since you need the exact same checks and steps, just with a different delimiter. It doesn't matter if you need to do them less times for certain inputs since you need the same checks, the same encoding/decoding steps and so on.

Do you think you would have an easier time writing a TSV parser than a CSV one? If so, why?

And wrapping in quotes does not solve anything since now you need to both check for escaped quotes and tabs/commas. It's the same but one level deeper.
Or they found a girlfriend and can finally take full advantage of them!
That’s using gambling to hedge your business position, not insuring your business against the potential loss. The bet is only tangentially related your business. If your candidate wins but the revenue you thought you’d get doesn’t materialise, you’d probably wish you’d won your bet instead.
What I was implying is, language barriers are a firewall against charismatic, manipulative psychopaths trying to brainwash you into doing unspeakable things.

They do so by turning "he has a point" into "who is this funny little moustache guy and why does he sound so angry?"