skysight-inc/HackerNews huggingface dataset:
Watching the keynote, the feature where it spits out a design based on a prompt seems like a gimmick. If it doesn't work with MY design system (as opposed to curated design systems like MUI or Bootstrap or whatever) then it's useless. It's also probably not ready to design complex applications, as opposed to brochure websites and apps that fit into very common templates.

The AI-powered search features seem really promising, as finding the right design file is a problem I face every day. What they showed was the ability to paste a screenshot (e.g. from production) and have it find where that design came from, or use a text search to do the same. That's something that'll make me squeal with joy if it actually works.

Filling in mock data in designs is also a big potential quality of life improvement. The domain I work in is so specific that I'm not sure it'll be of practical use to me, but I'm hopeful.

All in all, I'm glad about the parts where they are trying to target some specific pain points with AI, skeptical about the rest.
I contact my congressional representative when I need help with the IRS. Have done it twice now. Works great.
Hmm… Is there a way to trick it to accept js that checks all boxes?
Legumes are inexpensive, healthy, filling and have a low CO2 footprint. "Beef or crickets" is a false dichotomy.
Fun! But I kind of wish it made a bubble wrap popping noise.
In physical reality there is no infinity of anything* so Axiom of Choice is irrelevant for it.

* Universe could be itself inifinite but locally everything is finite.
Okay, but where's the rent seeking?
it may be useful to examine what has been suppressed.

https://github.com/polyfillpolyfill/polyfill-service/issues/...

the goodguys now live here:

https://polyfill-fastly.io/

https://web.archive.org/web/20240229133014/https://polyfill-...
on the other hand, a profit-oriented and unfair enforcement system can and will create laws that almost everyone breaks.. then use selective or opportunistic enforcement, and steep fines. There are many precedents for exactly this in many circumstances without modern networks and sensors.
Nuitka Is a Python Compiler
This pattern has several other advantages that are worth mentioning:

- You can attach the plan to your Change Management, both for documentation and approval.

- You can manually edit the plan.

- The plan can be processed by other tools (linting, optimizations).

- The "complexity" of the pair planner+executor is often lower than a monolithic algorithm (above a certain size).

- Having a side-effect-free planner makes testing so much easier.

The big downside, of course, is that you're building a VM. You'll have to design operations, parameters, encoding. And stacktraces will make much less sense.

My rule of thumb is to use plan-execute for scripts that combine business logic with destructive operations or long runtime.
> the law has the perpetrator pay potentially huge amounts or for the rest of their lives.

As long as the law already existed

Either a law is inherently useful, or it is not. No need to cry about abuses in the 1800 regarding laws being passed today. The proposal is to fix a situational problem, not a physical one.
...doubt these shoes would benefit me in a meaningful way at this point.

You would probably be surprised. Can you race at 8:00/mile? Do you not heel strike like you're pounding fence posts? Then they'll probably work for you. I've run 50 mile races averaging around 9:00/mile in Vaporflys, and I still benefited greatly, if only because my legs weren't as trashed as they might have been in other shoes.
This is good. Why should whole world pay for the pollution created by these cows and dairy products.
Cows don't eat plants that people can derive appropriate nutrition from. They also don't generally use land that is appropriate for crops. Also, from what I understand, the emissions from the animals isn't significantly different than seasonal die off from natural grasslands they graze on. Beyond this, most of the calculated water consumption "used" is rainwater on said grasslands.
Sad thing is people support and enrich shitty conmen like this but hate to pay an opensource dev/tool/lib.
Hi author here, I wasn't aware of those, I should probably link to some existing library implementations of GCs.

My goal was really to make the simplest, dumbest thing possible that still works. It can't compete with more serious GCs like that, but hey, it's intentionally not meant to.
Of course not. "It came to me in a dream".
To be fair, when it comes to React, I don't think there is a realistic "new shiny" yet. NextJS is (was?) looking good, although I have heard it being mentioned a lot less lately.
One of the major parties is deliberately sabotaging it (along with USPS, FDA, and NOAA) so they can point out how useless it is and it should just be shut down.
That's right. So if Golang wanted to do async/await, it would probably be in a fully parallel way.
You're vastly underestimating the difficulty of drawing humans. Move your hands just a little bit and you have a completely different geometry. Humans are MUCH harder to draw than a motorcycle. A motorcycle pretty much always looks the same.

It is much, much easier to draw your link vs. a human.

An aztec castle (edit: not sure if this is a "castle" but age of empires 2 taught me that's what it is) always looks like that. Foliage has many variants but all of them are basically fine. Same for rocks. The seal has minor variation. Probably not a lot that the model cares for. The seal is wrong anyway.

Man kicking a football has many possible interpretations and most of the model errors are simply reflecting the model being bad at deciding to do just one.

The model could be bad because it simply has less data, but it's much easier to explain it as bad because it's a smaller, less capable model. Just like we see with LLMs
Many years ago, I built a Bash script to do something similar.

https://gist.github.com/leoherzog/1dcffe776af200cd9117

Very cool!
Show HN: Proactive Security Monitoring for GitHub Actions Workflows
Hey HN, it's Farrukh and Umar. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats.

Why we built this:

As friends and collaborators for over a decade, we've been working on various startup ideas in dev tools and infrastructure. In 2017, while building an ML ops toolkit on Kubernetes, we got hacked. During a pilot with a fintech customer, our cluster became victim to a crypto-jacking attack.

As it turned out, a dependency in our container base image contained malware (a Monero miner) which triggered inside the customer's environment. Needless to say, we lost the customer and racked up a massive cloud bill as a tiny startup. This first-hand experience introduced us to one of the biggest challenges in software security today.

The Problem:

Modern engineering teams rely heavily on 3rd parties—from open source packages, base images and 3rd-party tooling to build & deploy software quickly. But this creates security blind spots exploited in modern supply chain attacks. Some high-profile cases targeting developer environments include:

(1) event-stream: a malicious transitive dependency injected a wallet-drainer payload into the build process for CoPay’s bitcoin wallet
(2) SolarWinds: a compromised build tool injected malicious code into downstream releases
(3) Codecov: a bash uploader script inside the testing tool stole secrets when run in CI

While most teams today incorporate some form of security scanning, it typically focuses on known vulnerabilities. In contrast, we detect zero-day threats and harden your build & release processes against malicious activity. With a focus on developer experience.

Enter listen.dev: a tool to analyze the behavior of your GitHub Actions workflows. How it works:

- Native integration via a simple workflow step. You can instrument your build, test, and release processes in any language or stack.
- Observes low-level behaviors using eBPF (network, file, process signals) over each run
- Detects anomalies and malicious activity using threat intelligence and out-of-the-box detections for known bads (e.g., info stealers making unknown network connections, reverse shells, tampering of builds etc.)
- Offers in-line PR feedback with context, plugging into existing toolchains via webhooks

Behind listen.dev is a team of builders and OSS maintainers with years of experience in security observability and developer tools—having previously worked on eBPF runtime security projects like Falco and Tracee. We're seeking feedback from DevOps and security folks to help us improve.

You can sign up for free at https://lstn.dev/hn, install our GitHub action in under a minute, and start monitoring your repos.

We'd love to hear from you–any feedback and questions are welcome. To learn more see https://docs.listen.dev and a video of how it works: https://lstn.dev/demo-video
I think llms can create a good interaction based on the exchange. But is the real question is what make humans unique that these algorithms cannot do.
This is not some random cgi script to generate a photo gallery that was whipped up over a weekend. This is systemd. It touches every aspect of each distribution that chooses to use systemd. It is important software. There is a minimum level of care that should go into development and release of software that does what systemd does.

They introduced functionality that deletes files and failed to run it through its paces before release. That's not merely failing a smell test, it's a big red flag that the developers of systemd should not be working on something as important as systemd.

Oh, and now the creator of systemd wants to add on functionality for privilege escalation. Knowing how they handle systemd, do you think they'll do a good job at making sure their proposed 'run0' thing will work as it says on the box, or is it going to have untested warts?
Is there a way to work with source code? I've been looking for a rag solution that can understand the graph of code. For example "what analytics events get called when I click submit"
I am quite happy with mine. I installed LineageOS (GSI image without Google stuff) on my Rabbit R1 - the goal is to have a less addictive mobile device that can do offline maps with GPS and otherwise be a modern iPod (listening to podcasts and music) - and it's quite good for that. Using the wheel to zoom in Organic Maps is fun :-)

I hope to find the time to blog about this soon.
> GPLv3 means you can't use it with code that you distribute outside your organization without complying with its license. It's not an issue for internal tooling.

It is. E.g. if you have a contractor working with your company, then giving software can be considered "distribution". And the contractor can gain the right to re-distribute your internal software.

It's OK to use GPL for software that runs in separate processes (e.g. GDB), but readline is really sneaky because it's a library.
Funny that it was commenting on the exact opposite, that Reagan was senile and had lost control of the CIA. Without the context it does look like he's a superhero though.
Addiction is a disease, it should be treated as such. We shouldn't be relying on the afflicted to heal themselves. It's no different than asking someone depressed to just "think happy thoughts" and expect them to magically will their condition away.
This is basically a holy grail for us technical writers. I know quite a few people working on it.
And how do you measure/calculate that red meat is priced lower than it should be?
Data lakehouse Onehouse nabs $35M to capitalize on GenAI revolution
One company looking to capitalize on this is Onehouse, a three-year-old Californian startup founded by Vinoth Chandar, who created the open source Apache Hudi project while serving as a data architect at Uber. Hudi brings the benefits of data warehouses to data lakes, creating what has become known as a “data lakehouse,” enabling support for actions like indexing and performing real-time queries on large datasets, be that structured, unstructured, or semi-structured data.
This is a similar pattern to Terraform, correct? (Plan/Apply). I like this pattern, however, when implementing it into automation it presents a conundrum. Often, code will be checked into a repository with a "plan" attached to it. Great. Merge after plan is approved, then automation executes the plan. However, lots of providers will only show errors on the "execute" phase (e.g., on apply, "resource already exists" errors, etc.), leading to a ridiculously slow feedback loop of having to open new PR's, go through all approval chains again, merge, execute plan again. Debugging a simple issue like a misnamed variable can take days this way.

I have yet to see a graceful work flow here in a production environment and would love to hear about one. (No I will not use terraform cloud)
The political capital class protects their own. They have incentives to decrease power of IRS.
> panic is Go's term for an exception

No. An exception is a datatype. Not completely unlike an error type in concept, but intended for erroneous conditions that could have theoretically been caught at compile time (i.e. the programmer screwed up), as opposed to conditions that are not decidable at compile time (i.e. something happened in the outside world).

In Go, panic creates an exception, which may be the source of your confusion. The exception contains any metadata you passed to panic along with other data, like a stack trace. This is not panic in and of itself, though.

> but when writing idiomatic Go one would prefer error types over using panic

Not really. Idiomatic Go says that errors are in no way special and is faulty to think of them as being special. They are just values like any other. Go exceptions allow attaching any value as metadata.

The official line is that panic stack traversal should not cross package boundaries, but internal use is perfectly acceptable. Even the Go standard library does it.
Figma Slides
What the license allows and what the company rules say are often not the same
> Taxes on producers inevitably get passed on to consumers.

Which raises the cost of living in your country.

Which reduces the quality of life of your citizens

And reduces the competitiveness of your exports on the global markets.

I'm all for protecting the global environment, but capitalism puts concrete boots on the people of any country who spends any money on it whilst other countries do not.

A global binding agreement, backed by sanctions, is the only approach that will work.
https://archive.is/XJzDZ
Meat should always be more expensive than vegetables due to inefficiencies. But due to subsidies it isn't.
> it has a ripple effect on many of the things you documented

Welcome to the world of technical writers :D

(In other words, I'm suggesting that this is always the case and it's not something peculiar to DDD. I would argue that DDD has just made you more sensitive to what we go through every day. But yes, if you try to create a final doc and the features aren't stable, you're going to have some wasteful churn.)
Not much to contribute other than "this is great." It's one of those things I didn't know I wanted until I read your article.
I'm not that much older (turned 40 recently), but my happiness in life comes from:

* Having an amazing partner who is kind, supportive, trustworthy and fun to be around. We don't have kids but raise a cat together.

* Having hobbies outside of work that intrinsically motivate me and bring joy. For me this is muay thai (kickboxing), bicycling, hiking, camping, kayaking, board games, singing, and trivia. Some of it I do alone, others I do with friends, but they bring relief through the week and give me something to look forward to after work.

* Working in small to medium-sized values-aligned organizations. For me this is the environmental & renewables field; for you it could be something entirely different. But it makes SO much difference to go to work in a place where people are passionate about the job because they believe in the cause, not just to pick up a paycheck.

* Working in an office environment and getting to know your coworkers. This isn't for everyone, obviously, especially if you're an introverted remote worker. But it's made a HUGE difference in quality of life for me and I wouldn't choose to work fully remote even if I could. (I actually have a remote job right now, but I don't like that part of it... wish I could meet the team in person).

* In general, treating people well, balancing their needs with yours respectfully but honestly. Little extra doses of kindness go a long way. As a result I have some close friends and many acquaintances whom I enjoy spending time with, whether it's coding together or playing a game or grabbing a beer.

* I've been programming for like more than 30 years (started as a kid) but that was never really my passion in and of itself, just a means to an end (a paycheck, yes, but also the ability to support causes I care about). It's just a thing that I do, not the thing that defines me, and so my happiness doesn't have to depend on it. I'm not even a very good programmer, just an average one who can communicate with clients & teams well.

* Trying new things every so often. That could be traveling to a new place, learning about a new culture (whether abroad or domestically, like one of the subcultures around you), learning new non-tech skills (makerspaces and meetups are great for this), taking classes at community colleges, watching documentaries, reading books, etc.

* Forget regrets. Learn from your mistakes and choose better paths, sure, but don't dwell on would've-could'ves. After a while, your life becomes full enough you won't even have the mental capacity to remember the regrets, much less the time to sulk about them.

In general, anything EXCEPT chasing riches. I think the traditional "American Dream" is kinda nightmarish and can lead to unbalanced lives and fragmented communities. It's better, IMO, to make just enough money to sustain your needs and spend the rest of your time and energy with the people, activities, and places that you love. If you don't have those in your life, find them! You have to cultivate hobbies/passions and relationships both; they don't just magically appear out of nowhere.
We live in an era where academics use gpt to spew out papers, and have an audience (not all) who use gpt to summarize and extract the meaningful content from it.

We truly live in the informations age.

On a side note, do people still use ChatGPT to fill out their papers? I found Claude to be way better at spitting out more content. In my experience, ChatGPT has been in the middle while Gemini is the worst, it even cuts-off in the middle of the sentence.
The Living Computers Museum finally isn't
I created an automated SEO agency called Backlinker AI. For anyone who is not familiar with SEO, half the battle is getting Google to see you as an authority. You can become an authority by earning backlinks from highly relevant, credible websites.

Every day, reporters are looking for "experts" who can provide quotes for their articles. I set up Backlinker AI where anyone can pay $250/month to register for a persona. Anyone reading this post is likely an expert in something like marketing, coding, AI, technology, or entrepreneurship. I have an AI bot that looks through my current database of clients, matches them to relevant questions based on their bio, then writes unique quotes for each person and submits them to the journalist on the client's behalf. We send 75-100 pitches a month and guarantee you get at least 3 DR 30+ backlinks. One of my AI clients got 20 backlinks in one month, but he only paid $250.

Some really strong websites are asking for quotes. For example, Fortune.com recently asked, "What is one reason why so many startups fail? Please share anything that a startup can do to avoid this failure." Right now, I don't have many startup clients to answer, so adding some to my repository of clients would be helpful to better answer questions like the one above.

Why I'm proud of this service:
1. Our AI-generated quotes are solid and are getting picked up by websites like Hubspot, Entrepreneur, and more.
2. Clients are saving money by using my service versus traditional SEO agencies.
> The whole complaint seems like a thinly veiled attempt to say the federal government is not actually a government.

Except with hard power! You can govern with hard power, but you can't talk to anyone.

It feels to me like a very thinly veiled attempt to sow distrust. To support a pre-constructed narrative that the government is out to get people. Feeling like the victim of government draws in a lot of votes, is one of the lowest common radicalizers available.

People are desperate to believe the US government is out there suppressing voices. There's a whole constructed reality that this is prevalent, happening en masse. There's just, like, hardly any evidence at all. Also weird as hell many of these same political factions blame Section 230, when it's expressly a shield allowing companies to host anything online without being in trouble, a defense against The Wolves of Wall Street bad guys Stratton Oakmont suppressing Prodigy.

It is inordinately hard for me to read any good faith in the outrage machine powering this all. There's a totally decoupled world of spin feeding this agenda, that seemingly doesn't need any connection to the real world to sustain & grow it's angst. And with remedies like "eliminate section 230" it's terrifying to imagine what all might be wrought by this persecution-delusion.
No. I want the world to burn.
I can do a "raw" version for IPv4 but not IPv6.
This is way off topic but 2 hours ago I was trying to figure out how to read a single line from stdio using Rust/tokio and failed to figure it out in a reasonable time. It was infuriating.
I can't think of a worse use for an LLM...
People seem to confuse physical comfort with happiness and good mental health when they aren't the same at all. Extreme physical discomfort, or lack of food/water/shelter are awful, but they don't specifically cause burnout. And people don't start "skipping to work" just because they know someone else is less comfortable, when they are worn down from years of chronic stress.
Every AI tool being released by 3rd parties is being blacklisted by my company. The primary reasoning is around sharing data with tool itself. On the other hand, if my clients allow them, there’s a long review and approval process followed by continuous audits.

Is anyone else running into this at their companies? I look at these tools and get excited but I’m continuously being blocked from using for work.
Haven't we been trying fines? Revoke their corporate charter, the survivors will take notice and behave. Or else.
> WARROAD, Minn. — Locals like to say this 2,000-person town just miles from the Canadian border is known for three things: walleye, hockey and windows.

> Marvin, which is run by the great-grandchildren of its founder George Marvin [...] faces a [...] existential problem: not enough workers at that factory, which employs more than 700 people to assemble its windows. Baby boomers are retiring from the company at a rate of about one a week and the town’s population has hardly budged for decades. That math leaves Marvin with dozens of job openings and few takers.

> At Marvin, $Relocated_Worker_Name, 23, earns $16 an hour as an entry-level assembler.

Cost of living had better be darn low in Warroad, for people to relocate to such a trendy spot at that kinda money. And the locals (what few there are) aren't much interested, either:

> Ninety percent of this year’s 81 Warroad High School seniors plan to go to four-year colleges. At a job fair last month at Warroad’s American Legion hall, recruiters outnumbered job seekers for much of the event. Marvin representatives spoke to five potential applicants over three hours.

(Meanwhile, down in definitely-trendy Ann Arbor, MI, a friend of mine just had his home water heater replaced. $400/hour for the plumber, and finding one who wasn't "sorry, already booked up" was not easy.)