skysight-inc/HackerNews huggingface dataset:
I'd be wary of almost any startup that hired without any form of interviewing whatsoever. The big difference is that you walk into the interview as a default-yes rather than a default-no, ie: they're on the lookout for any red flags that would cause them to have serious reservations but if no flags pop up, you're assumed in.

At big companies, there's more of a formal process but the key is get the attention of the hiring manager and make sure that hiring manager has enough juice to quietly backchannel to whatever process to treat this as a default-yes conversation. A good sign of how effective your manager is at a Bigcorp is how well they know how to work their internal system to get the right people onto their team.
The US has the worst health outcomes in the OECD - in particular for life expectancy, infant mortality, healthcare access, and chronic disease. So if you care about health, “another example” is literally any other OECD country.

And every one of those FAANGs would not exist without ASML, a European company.

You obviously don’t know what you’re talking about. I’m checking out of this thread.
I have to admit that I expected something else when I saw the title.

Nonetheless, this looks really cool, congrats! What would be some use cases for this? I can think of scraping data.
C++20 – Back to the Future Meta-Programming
[dupe] merge "Disney's Internal Slack Breached? NullBulge Leaks 1.1 TiB of Data" https://news.ycombinator.com/item?id=40955693
It's part of the PI spec rather than the base spec: https://uefi.org/specs/PI/1.8A/V2_DXE_Boot_Services_Protocol...
This one is particularly egregious. It has a quote, then a few lines down (if not the line immediately after, like in the first case) has a paragraph which is just the quote. Why is it making us read the same thing twice in a row?
Type systems in languages like Haskell or Rust are very very very far from being able to "guarantee correctness". They can only realistically be used to specify extremely basic properties of your program ("doesn't have side effects", "doesn't write memory concurrently", this sort of thing).

For any more interesting properties (say "this function returns a sorted version of the input list", or "this function finds the smallest element in the set", or "this transaction is atomic"), you need something like dependent types, and that comes with a hell of a lot more work.
I always like to make the destinction between models on architecture for developers (the solution description) and the models describing functionality (the problem description). One is a result from the other. Both sometimes are not written down but exists in team-members heads. Both are used for communication. Both should be in sync.

If an analyst can create the "perfect functionality model" than a developer can parse this into the "perfect software", provided he created the "perfect architecture model" to assist this. See my other post on MDA and MBSE.

When developing (parts of) complex software, I always liked doing something akin to "Unit Testing" (plus a custom UI/report) that basically checked the boxes of a Architecture-Model I wanted to adhere to. With near-instant compilation (or hot-reloading) it becomes easier to see a live reflection of the data going through your pipeline live.

A good End-To-End (E2E) test can do the same for a Feature-Model, e.g. using Test Driven Development (TDD) or any derative of this. However todays tooling is still behind on this, compared to tooling developers have for architecture. Only a few solutions exist and those are tech-giant level (IBM) or contained and highly specialized for one business sector / problem domain.
Gemini AI caught scanning Google Drive hosted PDF files without permission
He was saying it would've been easy for the shooter in question (ie, a random 20-year old).

Mind you, that former sniper was also a Republican congressman so I would not be surprised if he was just using the opportunity to build the Trump Messiah narrative.
> I feel like the invariant with "AI" is the software engineer saying "with enough data and statistics I can not understand the problem domain." It's fundamentally a rejection of expertise.

Nature doesn't understand the problem domain, and yet it produced us. Capable of extraordinary achievments.
I've given up... can't do work anymore
> You are asking for the manager to sell you an option.

For free. This is why no one will agree. But if you price this as an option, and pay for the contract I can this working out.
2400 Watts times 85 days
It was 100% a reasonable-sounding theory before we knew any better.

In the real world if you saw someone going around a car park, trying the door of every car you'd call the cops - not praise them as a security researcher investigating insecure car doors.

And in the imagination of idealists, the idea of a company covering up a security vulnerability or just not bothering to fix it was inconceivable. The problems were instead things like how to distribute the security patches when your customers brought boxed floppy disks from retail stores.

It just turns out that in practice vendors are less diligent and professional than was hoped; the car door handles get jiggled a hundred times a day, the people doing it are untraceable, and the cops can't do anything.
Interesting experiment, I must admit I can't resist trying it myself. Helping to solve the replication crisis, one comment at a time :P Trump, Biden, Democrat, Republican, election.
Thank you very much for your suggestions. I think I am beginning to understand the community standards around here now. I would like to apologise again though, I hadn’t realised that my posts were too promotional.
> When go came out, people said source was better.

Well, when GO was first released it was in fairness not the same CSGO that exists today. Valve took over from Hidden Path after release and it took a couple more years of development to make it competitively viable.

I think CS2 will eventually get there as well, it just feels too early to be forced to switch, as you say.
I too like to argue by claiming that my opinion is the default position that doesn't need to be backed up with reason while everyone who thinks otherwise better come up with an irontight proof that theirs is better. Checkmate.
PUBG Mobile
> You cannot avoid risk in investing, it's a natural part of the situation.

You can, and should, diversify risk. You should invest outside the industry.
> Doesn't this just shift having to protect the gathering unit to having to protect the resource itself?

I'm not really sure what this means; you still need to protect the unit, but you can put it anywhere you want. Mana exists in your inventory and doesn't need to be protected. Golems will fight back while under attack and therefore don't generate mana during that time, but they become productive again immediately when the attack is over.

This strikes me as fairly different from, say, Starcraft, where workers can only function within particular small areas and having them outside those areas deals severe economic damage in the form of opportunity costs. The fact that everything you ever build is made of golems mirrors the Zerg mechanics, though.

But I am not a big RTS person and I find the overall conceit of the genre pretty annoying. There's no such thing as a battle where technology levels change mid-battle. In an actual battle, if you have infantry and you want artillery, what you want doesn't matter because you have infantry and that's not going to change. In an actual military campaign, if you have infantry and you want artillery, you do that by getting artillery shipped to you. You can't make your own.

Civilization focuses on technological development and includes military engagements that can't stand up to even the friendliest critical analysis. RTSes go the other way; they focus on battles and include a rump technology mechanic that can't stand up to analysis. The problem here is that technological development is measured in decades, or longer, and battles are measured in hours. You can't have a working game that does both things.
5G is intrinsically a “difficult to undo” infrastructure investment

Street by street, dozens of ABS boxes with highend RF gear that can only be touched by high-skilled, expensive technicians and riggers
Rust for Filesystems
> yes, when all password hashes were available to all users, and therefore had an expected bruteforce/expiration date.

Pretty much anyone I've spoken to candidly about rotating passwords has said that they use a basic change to derive the next password from the old. For example, incrementing a number and/or a letter. If that was as common a practise as I suspect, then rotating passwords doesn't add much security. It just meanstthat hackers had to go through a few common manipulation strategies after breaking the hash.
Those ICs have decomentation and i2c pins that allow the vendor to debug them. Providing that documentation to the user (along with any keys needed to make use of it) would be the modern equivalent to electronics service manuals.
Technically yes, but a laptop as a desktop replacer is sound only if you need to use it also on the go and most of the time you are on the go. Otherwise a desktop is much more sound: while some laptop can be docked (any most can be used as docked even without a proper station) it's a nonsense setup if you aren't really "on the go". A desktop is cheaper, easier to maintain.

My main point is simple: hybrid work is dumb: you still need to be near the office, witch typically is in a dense city, where accommodations tend to be tight, so WFH there is not cheaper than the office nor much comfy, you reduce commuting but still need to commute in a dense so unpleasant environment, and you do not have the advantage of single family homes in most cases where you have room for many things at home, from freezers to p.v. and so on. Also offices are even LESS utilized, we already have in cities big buildings used for less than 12h/day with hybrid "home" usage climb but still less than full remote and office usage plunge even more. You need laptops or double desk setup, again wasted resources and/or reduced comfort for what? Just to get physical ads (shops windows) while commuting, the need to commute more simply because being in tighter places you can't stock much at home, all just to make the finance capitalism, the surveillance capitalism to survive a bit more? NO THANKS.

There are some jobs who need desktops and can't be from home, so laptops do have a reason to exists, but they should be niche products not mainstream desktop. So far the idea "a real desktop for anyone is too much resources, while mobile devices, subnotebooks can be given to anyone" prove to be PR bullshit because it sound logic, but given the little useful life of such devices compared to desktop (few years against 8-10-12 years for a personal generic desktop that can still be upgraded partially) and the nearly no recycling prove we waste MUCH MORE resources in building crap: smartphones, tablet, smart watches, TV, ... instead of a single desktop per human. So if we can give a mobile device to any humans we can give a desktop to anyone, if we can't we MIGHT still be able to gives desktop.

Mobile is needed in most cases for slavery, the rest is just a niche. It's about time to understand that, stop the utter style of a desk with a small laptop and a smartphone and a smartwatch and some all-in-ears battery powered crap to have a simple desktop, with a good monitor, a good "conference style" combined device (mic+speaker+cam), a damn trackball and mechanical keyboard. Things built to last at least 8 years for 99% of the people. Less integrated as possible to be less hard to recycle and easier to partially upgrade.
That's why I phrased it that way.

Most internal combustion engine cars have a lead acid battery to start it up and run the spark plugs (or preheat the glow plugs if diesel). They don't get called "hybrid" or "battery powered" because the batteries aren't the propulsive power themselves.

This is akin to that: the batteries run the pumps, they're not the propulsive system itself.

Ion drives can be run off battery, but you can't launch with those.
in commonwealth english () are "brackets" and everything else gets the shape modifier
> "Let's go production with it now and we can secure it later" - no, you won't. A better question to ask yourself is "If we don't have time to do it correctly now, will we have time to do it over once it's broken?"

I guess the idea is generally that if we go in production now we will make profits, and with those profits we can scale and hire real security folks (which may or may not happen).
As pi never repeats itself, that also means that every piece of conceivable information (music, movies, texts) is in there, encoded. So as we have so many pieces of pi now, we could create a file sharing system that's not based on sharing the data, but the position of a piece of the file in pi. That would be kinda funny
> Doing software right will require a lot of planning, irrespective of whether that planning occurs up front or as you go.

I'm not opposed to planning but I'm opposed to the kind of meta-planning game that is wont when scrum is involved. I've been in meetings where the thing we're planning is literally to change one line of code and we say as much but the PO still insistently asks if it shouldn't be multiple stories. The whole thing eventually took man days in meetings even though we insisted it was extremely quick. Turns out the whole thing was sold upstream to management as a big feature so a single 1-point story wouldn't cut it.

As a contractor I can at least remind myself that I'm getting paid for sitting through all those meetings but as someone who likes to actually do things I feel like I slowly die inside.
Also needs mention:

- Having an OS that treats users as "suspicious" but applications as "safe".

(I.e., all Unix-like systems)
> The cost of storing the size of every allocation is relatively high

Thus it would be great if we don't push the burden to the allocator. It'll also need to store the size somewhere, adding to the cost for every allocation. Pay for only what you use.

Fortunately C++17 and C23 (free_sized) have already fixed this.
On average yes. An index tracker will get the average market return ignoring fees, so its returns will be those of an average active fund.

However, the active find will charge higher fees.
Yes, it's on my list to do this, at least on mobile.

(defrost is correct about how to contact me but I did see your message semi-=randomly)
I would like to see improvements in the speed of feedback - particularly from language servers - but the value of those 'basic' guarantees is more than worth the current cost. Unexpected side effects are responsible for almost every trip I've taken with a debugger in any large Java or C++ project I've ever worked on.
Why go through all that effort, when it's just tau/2.
RaftKeeper is a high-performance distributed consensus service that we extensively use online for ClickHouse metadata services.

Due to the limited resources available online about analyzing Core Dump files, this article documents a process of using LLDB to analyze a Core Dump file from the RaftKeeper project. I hope this can provide some assistance to others.
Sleep researcher here. The most detailed you can find would be "principles and practices of sleep medicine", but that would not give you direct advice on how to solve your problems, more a general understanding of that.

If it's Insomnia, consider a cognitive behavioral therapist. If it's something else, look for the right expert. It can be also an external condition (e.g., do you live close to railways, airports, chemical plants?), diet and lifestyle, genetic factors etc...
Without knowing what is your main sleep complaint is difficult to advice you.
I wasn't taking a vacation, but you could say I was in a cage.
I really want to be able to program with swimlanes for concurrent systems. I think BPMN is close(ish) but I would like it to be typed in a way which can check of the types of the code I write in a box.
More than currently do. Rates are low in higher income countries.

We never really teach these things, which is a shame because I think they have such value over time.

I've spent a lot of time helping people with budgets and I've found a few things to be common. To make this easier I'll just say "people" as a general thing of those coming for help.

1. People don't get why they're running out of money

2. They don't know what they're spending

3. They've not connected the idea that knowing what they're spending money on is important to figuring out where their money is going

This isn't a slight, it's just interesting to see that this connection has never really been made. Money is treated as an emotional thing rather than a mathematical thing.

And this is those who get to the point of seeking help - they're actively asking for help and have never tried just tracking their spending. It's an entirely new concept.

The next big thing is that people talk about unexpected costs coming up and have never stepped back to look at the issue more broadly.

Some find birthdays an "unexpected cost" but they're not actually a surprise if you are able to look ahead more.

More unexpected are repairs and replacements. But stepping back although your tires were a surprise this year and your brakes a surprise last year, the idea that something would need dealing with on your car isn't.

The 3-6 mo savings is really a goal before suggesting moving on to riskier investments rather than "oh just have this". One day of spending is better than none. A week is better, a month better and 3-6 is better still. Beyond that the benefit drops massively, so you can start putting away money for much further in the future.

It's boring but that's imo because there's not much to basic personal finance.

If you spend more than you earn you are screwed.

If you earn more than you spend, you can build up savings.

If you are right on the line, you're either statistically shocking or your spending should move one way or the other.
Something however has to be said about winning a Nobel prize then using your model to lose billions and send your company into bankruptcy.

The market is incredibly efficient at pricing many things incorrectly and Markowtiz then BSM was no exception.
Theoretically, in German you can stack the prefix, but it's also not exactly common (everybody would know what you mean though).

Vorvorgestern... would be the day before the day before yesterday.

Überübermorgen... the day after the day after tomorrow.

Instead you'd simply say the German equivalent of '3 days ago', or 'in 3 days'.

The simple vorgestern and übermorgen are absolutely in common use though.
> Don't discount the knowledge you have from being deep into an industry. The higher quality of the CUDA toolkit compared to other SIMD languages

Analysts do follow what is happening in an industry and talk to people in an industry. SOme have worked in the industry they follow.

If you want to get ahead of them you need to focus on something ahead of them - something small or specialist at the time.
I have had to debug insane Excel sheets, which were used to generate C code, based on the geometric properties of an object.

Excel works very well for describing many, simple relationships. It totally falls apart the moment you have complex relationships, as they become mentally untraceable. Functions allow you to abstract away functionality, referencing cells does not.

I am pretty certain that Excel is one of the most misused tools and suffers the most from "I use it because I know it".
Is this (Google Code Search, https://source.chromium.org/) open-source?
Nice achievement but always a bit disappointing that those records are based on throwing more money at the problem, rather than new theoretical grounds, or software improvements (IIRC y-cruncher is not open source).
Ask HN: Sources for Regions Required in Addresses for Countries
There's lots of libraries for parsing or verifying that an address is correct, but are there any libraries that will return regions required in a country address format or even better a list of required fields?

If not that - is there any online data source that one can download and get required regions for addresses per country?

I don't need to know how to format an address, which is what everyone seems to think I should want, I need to know what fields will be required in a particular country to make the user inputs.
If they were all armed (looks like a guy had a knife and another claimed to have had his handgun), why didn't they use them?
BPS.Space on youtube is working on a DIY space-capable rocket and in a recent video he mentioned that he is not doing this as a tutorial and that his guidance system likely already wanders into ITAR territory, and thus he's self-censoring which parts he shares and which parts happen off-camera.

Ultimately these kinds of regulations are fairly silly because a sufficiently determined smart person can recreate the covered technologies from scratch, but here we are.
My acquaintance works 1-2 hours a day, every day. Is wildly successful, just racked up their 3rd billion and looks sane. n=1
I can remember about 20 years ago a colleague getting quite frustrated that a bug he had been looking at for quite a long time came down to someone doing something bizarre in an overloaded assignment operator in C++.
Fair.

However, most people are using stuff like JS and Python. For them even the non-dependent type systems are an improvement.
Would the index number actually be smaller than the actual data?
I'm not sure, I've never run into this issue. I'd probably just look for another job if you want the honest answer.

For what it's worth: if a column in your database is used in so many contexts, you could document that it's simply unsanitized. Like, I prefer having as few entries for bugs and fuckups, and knowing that the database data is always sanitized helps with that. But it's not an unbreakable, absolute sort of rule.

And I never really escape strings for SQL, as I always use prepared statements - forgetting prepared statements is an easy thing for code review to catch.

I also have a project where there is HTML stored, which is not escaped because the purpose is to directly output that HTML somewhere, and it really is supposed to be HTML.

It simply depends. But as long as it's documented, and hopefully as clear and consistent as possible.
Yeah, it basically doesn't use UNIX permissions at all.
Both can be true. It’s intellectually lazy to throw up our hands and say attacks would happen anyway instead of doing our best to mitigate harms.
https://news.ycombinator.com/item?id=8018818 and https://github.com/philipl/pifs :-)
The importance of design partners for product development
> So please stop it, Firefox.

with this acquisition https://blog.mozilla.org/en/mozilla/mozilla-anonym-raising-t... Mozilla is now an ads company

it's downhill only from here folks
> Legitimate users usually aren't going to fail more than a couple times.

Have your users authenticate to the wifi with a certificate that expires after 18 months, and you'll find users will reboot a dozen times or so, racking up authentication failures each time, before they call IT support.
SQLizer JavaScript Library on NPM Converts XML, JSON, Excel to SQL Statements
As a kid I once made the perfect Lego head render, with only a ruler to measure things. I'm still proud of it and mention it whenever POV comes up.

I was going to model a lot of pieces and make a game or something, but I spent so much time on the head that I gave up after that.
"Cosmic sys admin" can terminate any misbehaving "process" that consumes too many resources. Matrix will protect itself, even if it would take a murder!