skysight-inc/HackerNews huggingface dataset:
This really, really isn't true.

Like, basically all clinical trials with a placebo arm and a no treatment arm (particularly for pain and depression) show a pretty significant difference between the two arms, suggesting that something's going on there.

There was that famous meta-analysis from 2001 that showed no significant effects, but that averaged over a _lot_ of trials where we wouldn't expect much of an effect (cancer, particularly).

When you look at trials that could plausibly be placebo-susceptible you do find an effect.

Can you explain why you think it's mostly regression to the mean?
Eh, a counter argument to the book also is that, it makes the US what it is. I haven't read that book but I have travelled and worked extensively in countries like Canada and UK and let me tell you - first hand, I have seen just the sheer increase in productivity in the US and the hopeful nature it has.

Compare that to Canada whose slogan is "We have tried nothing but are all out of ideas.".

So the positive thinking and forward and upward mindset that is present in most American large cities is palpable and contagious. It makes things happen and keeps stagnancy at bay.
IIRC websites are best when they don't monetize.

And businesses are best when they do.

As long as consumers are getting their money's worth.

And the internet was better when most websites did not monetize, since there was no need.

For about the first decade, major ISPs automatically provided you with enough web space for a personal home page on their server, when you signed up to be on the internet with them.

Perfect for a text blog (nobody called them that yet) or something like that, and the normal state of affairs, as intended, was that most people with an internet account could post a web page at no additional cost, so there was no need to monetize anything. If all you wanted to do was have a website, that was expected of everybody eventually once they were on the internet to begin with. All you had to do was upload a well-formed index.html file to your personal web address space according to your ISPs generic procedure.

The main reason to monetize a website (a good one too) would be for online business use. Almost all other websites were never supposed to rely on a monetization strategy just to cover costs. That way an online outreach or business could at least be launched without the need for any further financial resources. Obviously the right thing to do. It was expensive enough just being on the internet.

And there was no need for ads or financial consideration at all on non-business websites, which made up the vast majority for a while there, and coexisted perfectly with Amazon when it came along as a purely commercial website. When ads show up on websites that otherwise have nothing unique to sell, it still instinctively feels so unnecessary. Rather than triggering positive consumer response, it feels more like you're not getting your money's worth for some reason before you even buy, reducing your inclination for spending even further below the non-motivated level you had when you first came to the non-business website.

When it comes to monetized websites worth visiting, I still enjoy the ones best that are the online part of an ambitious business, rather than having the website be the business itself.

Either way, as long as consumers are getting their money's worth, I can't complain.

But there used to be so much more refuge for non-consumers and information surfers.

And by now with the cumulative joy that has been lost on the path to a fully-monetized online experience, it's quite disgraceful by comparison.
Chinese space firm unintentionally launches its new rocket
There was a time when a VCS could just be a slightly better VCS and it could probably gain traction.

But now, for both better and worse, git is no longer just an app or a tool, it’s just a fundamental library and protocol that IDE:s, Build systems and project/work management systems build on. It has become almost too late to change.

The semantics of git are “ok”, but mostly it’s just a big leap ahead of cvs and Subversion. As always in any git thread we’ll see people (including me) expressing hope that Pijul will one day be successful enough to break the git monopoly.
Building a LLM-Powered Obsidian Plugin with Ollama
Boeing agrees to buy Spirit aerosystems
Well, except that his fix can't easily be pushed back into the source tree because he doesn't know what other software is only working because of the original fix. Presumably it must have been needed by at least one other person, probably also after a crazy long debugging session, or it wouldn't have been there at all. As this code is in a public repo for the default library of a well-used language, it's pretty much a given that fixing this by just removing those lines will cause a regression for someone.
> It's going to apply to the amount of servers that an attacker has low-privileged access (think: www-data) and an unpatched sshd.

Right, which is almost none. www-data should be set to noshell 99% of the time.

> or just locally for some reason).

This is all that would be relevant, and this is also very rare.
> Just how much lead leeching into your water is an acceptable tradeoff?

Chicago is the worse here because the plumbers union wanted to remain in control and so mandated lead long after everyone else was greatly reducing it.

Having been in the construction industry I can tell you from experience that they are no better than anyone else at doing their job safely or right. Some are good, some are corrupt - just like every other industry.
I despise the modern "smart" device and actively look for "dumb" things, but if it's going to have a BLE chip in it, it needs to be updateable to fix vulnerabilities. There are mountains of devices from earlier years that are basically wide open radios now because of this.

Personally I'd much rather the damn thing just have a built-in display with hardware controls.
Interesting.

Switzerland an Norway both have a very moutaineous terrain.

Does that make it more difficult to fit many channels?
> average travel speed in Midtown fell to 4.5 miles an hour in May, the lowest ever recorded for the month. 2024, he said, is on pace to be the worst year ever for traffic congestion.

American politics are holding the country back. Suburban areas are holding larger populations hostage.

We are facing a multitude of problems (ie, abortion, O&G regulation, climate change reversal) that see very little progress because of vocal minorities/gerrymandering.
Irrelevant.

However many do break the law, should be facing consequences. Otherwise, from the point of view of the CEO the optimal number of laws to break is all of them.
That was just an example - it fully solves trust issues if the pledge is "only make GET requests to exactly example.com/favicon.ico or example.com/style.css". This way you can't send any data (as there's no body, and encoded data wouldn't match the URLs).
The ast is just the result of a technique for parsing one style of programming involving text.

Visual programming with say boxes and lines at its core should not involve an ast.

You need to think outside the box. Your thinking of textual programming as the core and the visual programming as an abstraction above it which is how the industry has been focused since its inception.
Even a happy adoption is founded on an unstable sense of self Essays
Pumped storage is a cheaper form of storage than windgas and batteries.
Well I was certainly not expecting to come back and find a large comment thread about _this_ part of my comment. The funny thing is I know the proper usage, I was simply typing fast and rephrased my sentence structure a couple times so the "not" got lost in edits. Keep up the good fight though.
There are still controls on that, it doesn't give you access to everything. It took forever for legal to sign off on it.
What about workers? Isn’t it basically the same as offloading computation heavy work to separate thread? Also, we have WebAssembly. Afaik, js threads can now share memory using SharedArrayBuffers. So I don’t think we have this single thread limitation anymore :)
I’m having trouble thinking of any open source product that both targets consumers and has a high degree of polish.

Any ideas?

I think the best case scenario for open source user owned ai is something similar SQLite: runs everywhere, easy for developers to use, and packs a punch. If that existed for models I could see this working.
> Does Microsoft themselves build their apps this way?

I'm not sure anyone could really answer this question considering how fast Microsoft's various silos pinball between UI conventions. All of them are (I would hope) based on various iterations of their own internal tooling, but looking from Windows 7 to 8, 10, and then 11, you get such stark differences in UI language that you feel like you're looking at competing products.

That being said, I would personally very much prefer apps that are built to mimic the system they are a part of. One of the worst sins of that one, IMO, being iTunes on Windows which has always been and continues to be a flaming dumpster fire for a number of reasons, but most especially it's UI. It is a Mac app that is parked in Windows. It looks like a Mac app, it operates like a Mac app, it's UI conventions are that of the Mac, with the one major difference being they stuffed the window controls in the window in an incredibly slapdash way to account for Windows not having the system bar.

But yeah, for any marketing people here, I have not once nor will I ever give a single molecule of a shit about your brand identity. Make your software good. Ideally make it mesh with the system it's in. I couldn't fucking care less what color everything is.
Windows Forms is also making some progress on being fully AOT compatible:

https://github.com/dotnet/winforms/issues/4649
Leaked Arrow Lake diagram show more PCIe lanes, no DDR4, 2 M.2 SSD ports to CPU
A slowdown already happened once (the original pace was doubling every year), and I believe it's widely accepted that we're not going to keep the current pace for long.
Build better apps faster with Jetpack Compose
> And even for the devices that do get a WiFi connection… they run entirely isolated, on a separate SSID and VLAN from my normal devices and traffic, and with a whitelist for what traffic is allowed.

This is what I do today, and honestly I'm about to give up. We lost. Trying to get stuff like airplay / DLNA to work via mDNS is already impossible across subnets, and telling family to switch networks if they want to control X with their phones is just a shit solution. I have to disable 90% of my vehicle's "infotainment" screen to not feel spied upon, and which breaks the app I can use for remote starts, etc.

Maybe when the "Mega-Hack of 2025" happens and all IoT devices go nuclear something will change. But for now, if you buy a device it expects to be on one giant /24 and anything different creates problems. I'm starting to spend way more time than I want maintaining all the various pieces of networking glue that keeps my devices and home automation functioning. It's no longer fun, and I'm tired of fighting it.

I still have an ancient sleep number bed, with no connectivity. It's leaking, and old enough to drink. I'd like to replace it, but still can't bring myself to do it because of articles like this.

I've never felt more like Abe Simpson yelling at a cloud.
What do you use in place of it?
Quantum is unimportant to post-quantum
How the heck does regulation even continue to exist in a post-Chevron world?
Really interesting study!

I'm curious as to whether the study is considering whether birds will use an otherwise undesirable tree (or a part of it) if there is some other factor (e.g. adjacent food) that also drives their behaviour. For example, I know from observing my own (UK) garden birds that many of them will perch in trees near to my feeders for an initial recce or to eat collected food, but that they don't otherwise use these trees for perching.
Blender is very popular, Godot is on the right track (though no feature - parity to Closed source)

and I think gnome has a better UX than Windows and MacOS (though Apple at least cares about UX).
Welcome to Ladybird
Teaching how to code for free checks the "workers controlling the means of production" for me.
Automation Increases Demand for Contract Work in Italian Firms
The Ladybird Browser Initiative
> There was a time when a VCS could just be a slightly better VCS and it could probably gain traction

That was also a time when the entire software development industry numbered at most 50,000 globally and was still a nascent industry.
Electric Flights Available to General Public at Maastricht Aachen Airport
Re your side note, yes this is the new HN. People use the downvote as a lazy "I disagree". On the plus side, that's mainly the people who tend to read and react within the first 30 to 60 minutes of a comment being posted. After that the votes usually right themselves.
You never use 1 for stuff like this. 1 is for poetry and creative writing. You need to redo this with temp=0 imo.
Rapamycin may slow aging. Here's one way the drug will be tested
Yes, the Debian 12 fix is out. You can verify you're patched by running 'ssh -V' and verifying you see 'deb12u3'. If you see 'deb12u2' then you're vulnerable [1].

[1] https://security-tracker.debian.org/tracker/CVE-2024-6387
Edit: ok i see it detects code.

I thought it was replacing bits of ANN with custom python functions.
(Disclaimer: founder of OpenPipe). Thanks for the shout-out. Note that we're actively working on improved evaluations that will let you add more specific criteria as well as more evaluation types, like comparing field values to that of a golden dataset. This is definitely something that customers are asking for!
Generally roads funded with public money in the US don’t become toll roads. Congestion isn’t only a problem in NYC. Imagine if every once public road became a public toll road. Something feels off about that even though I’m bullish on using market economics to solve civil problems like transit and parking.
Show HN: Simple Commenter – A Client Feedback Tool for Freelance Web Developers
Hey HN,

I'm Aleksander, and I built Simple Commenter to solve a problem I faced as a freelance web developer. This tool simplifies client feedback by allowing comments directly on your website with just one line of code. It works seamlessly with platforms like WordPress, Shopify, and Webflow. The backend is user-friendly, making comment management easy.

If you're dealing with similar challenges, check it out!
imo revision is worse.

I feel like the best terms are patch id and patch revision id.
>seems reasonable to expect that they just aren't financially viable.

Quite reasonable.

As we know, traditionally, some of the best websites were not intended to be financially viable.
This model would be great even for some desktop apps. Imagine you could offload rendering Blender projects to the cloud automatically.
The ML-based similar sound search in Live 12 has been a huge help. It replaced searching for the right percussion sound with a button on the drum rack that moves through similar sounds at an instrument or rack level. I can also use it to search for similar Foley to add variety in the textures that tie the track together.
Which open source solutions exists as an alternative to After Effects?
Griffith Park is full of trees.
> I've also seen instances where tests are written too early, using a data structure that gets changed in development

That's as clear a signal that they are testing the wrong interface as you can get.

Unfortunately, developers think of tests as testing code, not interfaces. As a natural consequence, they migrate towards testing the most complex break-down of their code as they can; it increases the ratio of code coverage / number of tests... at the cost of functionality coverage.
Here in southern california, it really seems like 50% of the cars on the road are Teslas. I can imagine that California is probably the main demographic. I wonder if they are reaching market saturation
> generating press releases nobody really cares about, online media generating images for short useless pieces meant to be filled a space between few really useful articles etc.

I can't see any evidences that those aren't really important or useful given your comment, do you have any data to support your argument?
No. I did not misread. I believe you misunderstood.

You’re saying c++ and python fit into a category of programs that is foundation-ally really just boxes and lines.

I’m saying that’s not the right way to look at it. Because you can make the opposing statement. You can say that programs that are boxes and lines are foundation-ally just text programs.

So because both contradictory statements can be made both aren’t really correct. There is no hierarchy. Boxes and lines is one concept and textual programming is another peer concept standing on equal footing. Both are isomorphic and thus translatable to each other.

The point of my post is to suggest that there are other concepts that occupy this equivalency space. Imagine a category of interchangeable interpretations of programming that are all translate-able between each other with no hierarchy. It’s similar to the space of human languages. All human languages don’t occupy a hierarchy yet all are isomorphic.
> Thank you, but no. I enjoy working on a branch and committing small changes at a time, sometimes trivial, sometimes not even compiling, sometimes formatting or whatever the hell I feel like. When it comes time to review, I squash all those trivial changes

I understand the workflow you've described here. I think the key word is "trivial". Otherwise, when I squash together many "large" patches, the end result will be a huge commit with possibly unrelated changes, and that can be really bad for code archeology. When the future me or someone else wants to revisit the history and try to understand why a change was made, it may be buried down a long list of changes in a single commit, and the commit message won't be able to proper explain the reasoning behind it, IMHO.

Something that I also quite like about having individual patches in a PR/MR, is being able to review them individually too. Makes it easier for me, as a reviewer, to be able to understand the motivations behind each set of changes. But then again, that may only apply for larger patchesets/PRs/MRs...
> if you use a correct IFR and multiply by the real immunity rate, you get a number too low to pose problems to the health system

Both the "correct number" and the "real immunity rate" were not known at the beginning of the pandemic, and, had they been different, many more people could have died before we would have realized and taken corrective action. In the face of these unknowns, wouldn't you agree that being cautious was the more responsible course of action?
Then pay for a license or make the object files available to users who want to relink the app.
> "Trust, but verify"

Even though my entire career has been software, I was an Electrical Engineering major, so I have taken VLSI design (and even designed an 8-bit ALU). My first job was writing embedded software, and would frequently "trust, but verify" the hardware through the use of a logic analyzer.

When I pulled out printouts from the analyzer to show the hardware team that the hardware had a bug, the surprised and incredulous look on their faces was priceless. The blow was somewhat softened by the fact that I'd also found a software bug.

The constant blame shifting between SW and HW teams is one reason I left that job after less than a year.
There absolutely is plenty of AI washing in the entrepreneurship space, but I do agree with you about the lackluster British VC scene (and the even more morose mainland European scene).

> do they think their views have much value

You're talking about it...

And it is the BBC - the British Broadcasting Corporation.

But imo, this is why I don't read non-trade papers. They lack the context and tend to be fairly late at identifying trends.

A good (non-tech) example is pig butchering call centers in SEA - The Diplomat (a de facto Carnegie Endowment magazine) broke the entire story, modus operandi, and money chain 1.5-2 years before it was reported by BBC or CNN.
Correct. At least that's what current research is pointing to. Makes sense from an efficiency standpoint as well. We forget how "messy" / "noisy" our minds' conceptions of reality are. We use heuristics for a lot of things, we rely on applicable, learnable patterns. And our brains seem to be well suited to this more "artistic" interpretation of reality which biases our perception of sensations.
Database engines that live as libraries inside application processes (like WT) have a more pressing need for checksums because the most common attack vector is buggy pointer arithmetic outside the library that stomps on data in memory randomly.
Varies by codec.
I think that if the documented interface of your library is "trusted data only", then one shouldn't even file a bug report against your library if somebody passes it untrusted data.

However, if you (or anybody else) catch a program passing untrusted data to any library that says "trusted data only", that's definitely CVE worthy in my books even if you cannot demonstrate full attack chain. However, that CVE should be targeted at the program that passes untrusted data to trusted interface.

That said, if you're looking for bounty instead of just some publicity in reward for publishing the vulnerability, you must fullfil the requirements of the bounty and those typically say that bounty will be paid for complete attack chain only.

I guess that's because companies paying bounties are typically interested in real world attacks and are not willing to pay bounties for theoretical vulnerabilities.

I think this is problematic because it causes bounty hunters to keep theoretical vulnerabilities secret and wait for possible future combination of new code that can be used to attack the currently-theoretical vulnerability.

I would argue that it's much better to fix issues while they are still theoretical only. Maybe pay lesser bounty for theoretical vulnerabilities and pay reduced payment for the full attack chain if it's based on publicly known theoretical vulnerability. Just make sure that the combination pays at least equally good to publishing full attack chain for 0day vulnerability. That way there would be incentive to publish theoretical vulnerabilities immediately for maximum pay because otherwise somebody else might catch the theoretical part and publish faster than you can.
I mean, you can use this logic to favor the status quo in any given circumstance. Some people are of course happy with that, but some folks want to try and improve. Not everyone has to care, but not everyone has to not care, either.

I swapped to jj because it’s both easier to use and more powerful than git. To me, anyway. And I was a “you can take git from my cold dead fingers” type person. A “the git cli is fine” type of person.
> Singular focus

> We are focused on one thing: the web browser.

It is great that this was put first
Worth noting that there are various tricks to combine the write ahead log and the rest of the on-disk data, meaning the vast majority of data will not be written more than once, and you'll still get the durability and data locality benefits of a WAL.
Mmmh, how about

#include <stdio.h>

int f(int y, int a) {
int x, z;
printf("hello ");
x = y / a;
printf("world!");
z = y / a;
return x+y;
}

In godbolt, it seems the compiler tends to combine the two printfs together. So if a=0, it leads to UB between the printfs, but that wont happen until after the two printfs. Here the UB is delayed. But will the compiler actually make sure that in some other case, the x/a won't be moved earlier somehow? Does the compiler take any potentially undefined behavior and force ordering constraints around them? ...The whole point of UB is to be able to optimize the code as if it doesn't have undefined behavior, so that we all get the maximum optimization and correct behavior as long as there's no UB in the code.