skysight-inc/HackerNews huggingface dataset:
>> the reason why we tend to have poorer black vs whites is because of lasting damage from institutional racism over the last century that precluded many opportunities contemporary whites had to begin building generational wealth

Yes. And even after the institutionalized racism was banned in various forms, the social system of racism continues to this day in the form of lower wages for the same jobs, less chance of hiring or buying a home with the same qualifications.

What I am saying is that this is the indigenous European attitude toward migrants, and it is creating generations of ghettoized people who no longer believe they can integrate, just as generations of Black people in America gave up on integration, seeing that they were still kept out on a daily basis even after having achieved legal equality.
I wrote this in another thread already, but the fuck up was both at crowdstrike (they borked a release) but also and more importantly their customers. Shit happens even with the best testing in the world.

You do not deploy anything, ever on your entire production fleet at the same time and you do not buy software that does that. It's madness and we're not talking about small companies with tiny IT departments here.
I'd say no. Kolide is one such attempt, and their practices, and how it's used in companies, are as insidious as those from a proprietary product. As a user, it gives me no assurance that an open source surveillance rootkit is better tested and developed, or that it has my best interests in mind.

The problem is the entire category of surveillance software. It should not exist. Companies that use it don't understand security, and don't trust their employees. They're not good places to work at.
And nothing at all was lost.
Even without cameras I am pretty sure (from my past reading on ADAS systems) that you can infer driver attention from steering wheel angle position.

If you analyze patterns in wheel angle and rate of change of angle over time, I would suspect that drvers who are texting/'looking down a screen' are going to have very distinct series of 'abrupt' correction patterns.

Where that telemetry is available in cars post 2010's then it should absolutely be used in forensics.
Counterpoint: don't.

The problem with the kind of dirty work the article suggests is that, often, it's invisible. The benefits of solving a lot of these problems are just far enough removed the work that you will work your arse off and other teams will be the ones shipping faster and getting the credit. You'll spend your day fighting fires and the guys running around with a can of gas and a pack of matches are the ones who the execs will see "making things happen".

If you get a manager who understands what you do and has your back, and you get satisfaction from a job well done it can be rewarding. But if either of those changes you can also be on a fast track to burnnout and disillusionment.
Show HN: Ristretto, an OSS sandboxed code playground/notebook written in itself
The little man is told he has all the control but really he is along for the ride. The big man plots the course and convinces the little man their interests are shared when they may not be.
I understand how you feel, but if EDA had settled on Python, many of the same things we see would still be prevalent. They would be slightly reduced due to Python being a slightly less dynamic language than TCL but I am not sure it would matter.

The problem with EDA automation software is that it has been historically written by people with low skill in software development. Their domain of expertise is hardware. These shops also have not had for the most part a cohesive culture that spanned projects. For an org that focuses on digital design, the other 80% of that task is verification, but this has been prone to outsourcing and has had more churn on project to project.

I could be wrong, as I am outsider in this industry but this is what I see from my interaction with the EDA space. It puts up with horrible bugs, tools are hard to compose, the installers are crufty and target ancient OS versions. The secrecy within in the industry itself has made it a very late participant in open source.

So much conspires against any language that EDA would adopt.
Do you log in to the site with Firefox Focus?
Meat processors. No wonder listeria incidents, salmonella and a bunch of other food born diseases are on the rise.
> I don't think so. It's probably a real threat to human survival, but most people lack the perspective to recognize that. Humans are great at denial.

If you don't think so, like the OP, then my youngest point of view about the reason why youngest generation must be fearful of the futur is indeed invalid. I really see no flaw in this reasoning, billions of people are probably gonna dies but that's not gloomy at all...
Tcl is/was worth it for Expect alone, which is humorously best described as "AutoHotKey but for your command line". That sentence feels way more anachronistic than it is.

Of course, these days, Python also has Expect-like capabilities, so.
Show HN: Open-source back end learning platform
I know they are signed. But is that enough?

Attackers today may be willing to spend a few million dollars to access those keys.
Apparently they are pooping on the beaches there.
Multimodal RAG (With Chameleon 7B)
So... Racket?
Twitter is by far the best source of news and analysis currently. Outpaced only in some areas by niche, usually also crowd-sourced, sites like HN.

A week ago twitter had pictures and videos from several angles of assasination attempt on Trump when media still reported "an incident." The difference is wild. Ditching twitter is like going back from old-school news tv to a telegraph.

Anyway, I have strict tracking protection enabled and x.com loads fine. Firefox 128 on Ubuntu, official snap.
Recap – AI Engineer World's Fair 2024
Well, kernel code is kernel code, and kernel code in general takes input from outside the kernel. An audio driver takes audio data, a video driver might take drawing instructions, a file system interacts with files, etc. Microsoft, and others, have been releasing kernel code since forever and for the most part, not crashlooping their entire install base.

My Tesla remote updates ... hmph.

It doesn't feel like this is inherently impossible. It feels more like not enough design/process to mitigate the risks.
> amazing stories

Please share them!
Babies have feedback and interaction with someone speaking to them. Would they learn to speak if you just dumped them in front of a TV and never spoke to them? I'm not sure.

But anyway I agree with you. This is just a confused HN comment in paper form.
So if a text says your name 100 times, you automatically wrote it? He has nothing to do with Project 2025.
>Thankfully, today, we have great programming languages, like Python, that people enjoy using both for large software systems

Python is absolutely terrible to use as a stand alone language. Almost everywhere it is used (ML, Data Science, Scientific computing, etc.) it is used to call C or C++. The amount of serious Python software that doesn't makes extensive use of calling to other languages is very small.

Python alone has very severe shortcomings, that make it totally unsuited for stand alone development.
It's most significant, though, that you even say "Brits from Pakistani muslim backgrounds". No one says "French from Algerian muslim backgrounds". A French person with an Algerian background can only be a descendant of one of the million or so ethnic French who colonized Algeria, and is in no case a Muslim. The UK is far ahead of the continent in terms of integration, and the US is light years ahead of that.
Stop spreading mis-info about Trump and Project 2025 which he is not involved in.
Proprietary and non-proprietary are quirky across the board. For any piece of software, you literally keep hundreds of official releases, sub releases and patch releases, and if the design support team knows what they're doing, they provide was to specify the right version for each design module.

I can live with it: these tools are very complex and they don't have a lot of users. It's hard to make the bug free.

But you don't make software buggy deliberately. It's different for Tcl. Some people made a conscious decision to create that POS language and others thought it was a great idea to add it to their software.
So basically a local server. Guess we're on trailing edge of "move everything to cloud" now, slowly eeking back into having more local infrastructure again.
It's hard to understand what is wrong, let alone do something about it when complaints are so generic.

At the same time I understand your sentiment. After all, TeXmacs hasbeen for a long time a one-man effort. Joris was doing everything: programming, documentation, website, community support... How many people work/have worked on Word?
The page also says that their projected timeline for an alpha build is in 2026, so yes.
Is this new or outstanding from when they switched the domain over two months ago and Firefox experienced problems?

https://news.ycombinator.com/item?id=40386418
By far the easiest if you just want to go from markdown to online blog would be a static site on Github pages. I use Hugo [0] with a custom theme but there are even easier options if you don't even care about style. In particular, I have used Grip [1], which can generate HTML from markdown.

[0] https://lukesalamone.github.io

[1] https://github.com/joeyespo/grip
if that were the case, i wouldn't have such problems with client certificates.
Honest to God I had a product manager who comes to me and says "yeah. we're going to kick off that FOO project so why don't you get a few programmers started on it," and I reply "sure, just get me some requirements," and he shoots back "nah, we're agile, we don't do requirements. just start coding something and I'll start filing user stories in jira." for fun I checked in a map reduce function written in erlang and dropped off a copy of Mythical Man Month with a printout of this image tucked away in the front.

https://howfuckedismydatabase.com/nosql/

it was our vp/eng's suggestion and we all had a pretty good laugh over it and I spent a bit more time talking about process with the product team (who were mostly decent people for the most part)
This is a complete guess, but it could have to do with the twitter.com -> x.com migration. Still trying to load twitter.com assets, which are now third party.
I don’t work with CS products atm, but my experience with a big CS deployment was exactly like this. They were openly quite hostile to any suggestion of testing their products, we were frequently rebuked for running our prod censors on version n-1. I talked about it a bit in this comment.

https://news.ycombinator.com/item?id=%2041002864

Very much not surprised to see this now.
Just redirect to Nitter:

// ==UserScript==
// @name Redirect to Nitter
// @version 1.0
// @description Automatically redirect from twitter to nitter
// @match *://twitter.com/*
// @match *://x.com/*
// @run-at document-start
// ==/UserScript==

(function() {
const nitterInstance = 'nitter.poast.org'
location.href = `https://${nitterInstance}` + location.pathname // + '&' + location.search
})();
And the high priests guarding the knowledge.
From the article on The Verge it seems that this kind of update is downloaded automatically even if you disable automatic updates. So those users who took this kind of issue seriously would have thought that everything was configured correctly to not automatically update.
This may be a bit unrelated, but it is actually possible to run Xenix in a browser: https://www.pcjs.org/software/pcx86/sys/unix/ibm/xenix/1.0/
Basically more iOS, less PC.
So your definition of "best" news is fastest available?
The trouble here is that we're dealing with a concentrated market and neither Google nor Apple are selfless philanthropists. "We need Apple to protect us from Google" only leaves you wondering who will protect you from Apple. What we need is for both companies to be broken into a dozen or more pieces so none of them has market power in anything anymore.
Osho Rajneesh: Is Democracy the Best Form of Government
I’m gonna take your words at face value and ask you a question: what do you gain in gettin access to that news a few minutes in advance?
> If you get a manager who understands what you do and has your back

If that changes you can also be on a fast track to being fired, with a reputation for being lazy and incompetent.
There are no "ethical standards" to move to. Nobody should be able to usurp control of our computers. That should simply be declared illegal. Creating contractual obligations that require people to cede control of their computers should also be prohibited. Anything that does this is malware and malware does not become justified or "ethical" when some corporation does it. Open source malware is still malware.
Shit might happen with the best testing, but with decent testing it would not be this serious.
I doubt the general public uses Firefox with strict tracking turned on (unfortunately)
You're just moving the bugs or exploits to the specification then. Cool trick, what can I say.
The crux of the video game analogy seems to be that when you go close to an object, the resolution starts blurring and the illusion gets broken, and there is a similar thing that happens with LLMs (as of today) as well. This is, so far, reasonable based on daily experience with these models.

The extension of that argument being made in the paper is that a model trained on language tokens spewed by humans is incapable of actually reaching that limit where this illusion will never breakdown in resolution. That also seems reasonable to me. They use the word "languaging" in verb form as opposed to "language" as a noun to express this.
My guess -- there are two separate pipelines one for code changes and one for data files.

Pipeline 1 --

Code updates to their software are treated as material changes that require non-production and canary testing before global roll-out of a new "Version".

Pipeline 2 --

Content / channel updates are handled differently -- via a separate pipeline -- because only new malware signatures and the like are distrubuted via this route. The new files are just data files -- they are supposed to be in a standard format and only read, not "executed".

This pipeline itself must have been tested originally and found tobe working satisfactorily -- but inside the pipeline there is no "test" stagethat verifies the integrity of the data fine so generated, nor - more importantly - checking if this new data file works without errors when deployed to the latest versions of the software in use.

The agent software that reads these daily channel files must have been "thoroughly" tested (as part of pipeline 1) for all conceivable data file sizes and simulated contents before deployment. (any invalid data files should simply be rejected with an error ... "obviously")

But the exact scenario here -- possibly caused by a broken pipeline in the second path (pipeline 2) -- created invalid data files with some quirks. And THAT specific scenario was not imagined or tested in the software version dev-test-deploy pipeine (pipeline 1).

If this is true --

The lesson obviously is that even for "data" only distributions and roll-outs, however standardized and stable their pipelines may be, testing is still an essential part before large scale roll-outs. It will increase cost and add latency sure, but we have to live with it. (similar to how people pay for "security" software in the first place)

Same lesson for enterprise customers as well -- test new distributions on non-production within your IT setup, or have a canary deployment in place before allowing full roll-outs into production fleets.
Python is the glue. Many Python packages, which need performance, have big pieces in C. Just as he described.
Yes, that was the line where my bullshit detector went to over 9000.

"Obviously, my job is to protect the organization, but ‘protect the organization’ takes on different meanings to different people. To me, ‘protect the organization’ has always meant: protect your people from bad things."

I have no words to express how far from the truth this is. The only lawyer who protects you is the one you hire. The company lawyer protects the company from you.
GOLANG, TAILWIND, and HTMX
I'd go so far to say that almost all responses that I see under "probable spam" are legitimate. Meanwhile real spam is everywhere in replies, and most ads are dropshipped crap and crypto scams with community notes. It's far worse than it's ever been before.
Which means he is a real visionary, doesnt it?
If you've got a defendant with a war chest of several billion USD there's going to be a very drawn out legal process.
Many Gypsies do integrate, and soon they are no longer Gypsies. The ones that remain are the descendants of generation after generation that chose again and again not to integrate. See also the Irish Travellers, an ethnically unrelated group with a similar culture.
For embedded code that must never fail. I don’t want array indexing, I can just use „get“
...and the less is spoken of the time I had visited a CubeSat workshop at CalPoly carrying the actual flight prototype of my university's first effort in my carry-on - for compliance testing - the better.

I found out the interesting way when leaving the States that ic it goes into space, it comes with lots of ITAR red tape of which I and my university had been blissfully unaware.

Being escorted onto my flight (which had been held for an hour!) by a couple of State Department officials who simply told me to sit in the first available seat when we got aboard was kind of cool, though. Instant upgrade to business class, and the pax in the vicinity probably spent the flight wondering who the heck I was and what I had been up to...
Not only but also... Both the Mac App store and the iOS App store suffer from reams of useless and pointless and no doubt fake reviews Both stores are the last place to look for software, but notoriously its the only place to look for iDevice users.
(2014)

Discussion then: https://news.ycombinator.com/item?id=8290497
I'll take that over walking through cigarette butts on the beach.
I think it’s true that people in Europe feel that welfare is part of the problem here. In the Netherlands for example, one of the main right wing talking point is that refugees are given free social housing which could have gone to locals that are often on waiting lists for years.

In America on the other hand, land was forcibly taken from the natives by colonists centuries ago. Now, if you’re looking to move to the US, you can expect to work in poverty for a few generations as a second class citizen because that’s just how the “completely fair” capitalist system is set up. Forgetting for a moment that most capital is held by a single ethnicity, and they’re definitely not going to give it away for free.
Or a stick of nicotine gum?
People can comment however they want
The incompetent US military should realize they have more satellites to lose in case of conflict. And both China and Russia have the means to disable them.
Cross site cookies are required for educational content sharing via LTI.

Every time I enable that feature, I have to write essays to client's security team for allowing it.

So frustrating.
The author does not seem to have written much code.

Also trying to get government funding for a particular language seems like a lobbying to me.
Because legal immigrants are both pre-filtered and have something to lose, it’s more reasonable to take the approach that one crime is too many with immigration, rather than comparing with the crime rate of society at large.
Windows filesystem protection doesn't rely upon the filename, but on the location.

They could have named their files "foo.cfg", "foo.dat", "foo.bla" and been equally protected.

The use of ".sys" here is probably related to the fact it is used by their system driver. I don't think anybody was trying to pretend the files there are system drivers themselves, and a quick look at the exports/disassembly would make that apparent anyway.
Last related submission from a year ago has an interesting comment from someone involved: https://news.ycombinator.com/item?id=37105056
The moment I read 'it is a content update that causes the BSOD, deleting it solves the problem', I was immediately willing to bet a hundred quid (for the non-British, that's £100) that it was a combination of said bad binary data and a poorly-written parser that didn't error out correctly upon reading invalid data (in this case, read an array of pointers, didn't verify that all of them were both non-null and pointed to valid data/code).

In the past ten years or so of having done somewhat serious computing and zero cybersecurity whatsoever, I have my mind concluded, feel free to disagree.

Approximately 100% of CVEs, crashes, bugs, slowdowns, and pain points of computing have to do with various forms of deserialising binary data back into machine-readable data structures. All because a) human programmers forget to account for edge cases, and b) imperative programming languages allow us to do so.

This includes everything from: decompression algorithms; font outline readers; image, video, and audio parsers; video game data parsers; XML and HTML parsers; the various certificate/signature/key parsers in OpenSSL (and derivatives); and now, this CrowdStrike content parser in its EDR program.

That wager stands, by the way, and I'm happy to up the ante by £50 to account for my second theory.
First, it was hours. Second, I'm there more for the tpot/schizo/alternative content. Most importantly though, it's not just a couple hours of difference, but the content is different: raw, with live comments (from the people you follow pulled up), memes, etc.

It's the vibe you used to find on usenet and then blogosphere.
First Taiwanese swims across the English channel
Who are the buyers
I had to use TCL at a company where Prof. Ousterhout was on the board. I had used it a bit at university but I was coming from a Python job so, naturally, I hated its syntax BUT:

1. The project was in ancient C++ for many reasons and even the most modern C++ is at least 5x more difficult to write code in than TCL. So why write code that runs once in the life of the program in C++? There's often plenty of code that doesn't benefit from being compiled - that looks for a configuration file, reads and validates lines and calls functions to build initial datastructures...setup code, string handling. You save a millisecond or two by doing it in C++ but only once in a program that runs for hours - why waste all that dev/debug effort?

If you choose judiciously then you can end up doing a lot of your performance insensitive, setup-type code in TCL and a great deal of the time you'll be able to debug and fix bugs in an interpreted language without recompiling anything.

2. Python, though great, has a global interpreter lock. TCL fits in with threaded programs excellently. This can be a make-or-break feature.

3. TCL's syntax which I dislike, seems to map excellently into C - calling C from TCL just seems a lot easier than in python.
This feature isn't modelling your interests. It's letting advertisers get insight into the performance of their ad campaigns without tracking individual users.

The ad agency is only able to see: their add (y), published on source z, led to x conversions, over a period of time (p).
And to those that haven't dealt with pickled/fermented daikon before, be aware that the smell when opening the container is enough to clear a room!
Other media is frustrating because it's always heavily filtered, has an agenda, and always talks like a PR release. It's like they're trying to keep some image of a respectable paper and so have to write in that stupid title - subtitle that repeats the title - first paragraph that repeats the subtitle - 30 paragraphs in complete disorder, half of which are a waste of time format

Edit: someone on Twitter obviously also has an agenda, but it's not hidden behind a supposedly impartial image (NYT, etc.), it's just some guy with known credentials posting opinions