skysight-inc/HackerNews huggingface dataset:
The FTC also recently put out a statement that is fairly pro-open source: https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/202...

I think it's interesting to think about this question of open source, benefits, risk, and even competition, without all of the baggage that Meta brings.

I agree with the FTC, that the benefits of open-weight models are significant for competition. The challenge is in distinguishing between good competition and bad competition.

Some kind of competition can harm consumers and critical public goods, including democracy itself. For example, competing for people's scarce attention or for their food buying, with increasingly optimized and addictive innovations. Or competition to build the most powerful biological weapons.

Other kinds of competition can massively accelerate valuable innovation.
The FTC must navigate a tricky balance here — leaning into competition that serves consumers and the broader public, while being careful about what kind of competition it is accelerating that could cause significant risk and harm.

It's also obviously not just "big tech" that cares about the risks behind open-weight foundation models. Many people have written about these risks even before it became a subject of major tech investment. (In other words, A16Z's framing is often rather misleading.) There are many non-big tech actors who are very concerned about current and potential negative impacts of open-weight foundation models.

One approach which can provide the best of both worlds, is for cases where there are significant potential risks, to ensure that there is at least some period of time where weights are not provided openly, in order to learn a bit about the potential implications of new models.

Longer-term, there may be a line where models are too risky to share openly, and it may be unclear what that line is. In that case, it's important that we have governance systems for such decisions that are not just profit-driven, and which can help us continue to get the best of all worlds. (Plug: my organization, the AI & Democracy Foundation; https://ai-dem.org/; is working to develop such systems and hiring.)
That's weird because the dozens of UI designers and also UX designers and researchers (UI design and UX Design are not the same thing) I know are employed doing exactly what they were trained to do. If you think UX was at an apex in the 90s, you haven't actually looked.
You COULD also make way less than a FAANG salary.

At FAANG you will definitely make exactly as much as a FAANG salary.
There's a semantic difference between "accented letter" and "different letter that happens to visually look like another language's accented letter".

"Ą" in polish is not "A" with some accent. And the idea behind unicode was to preserve human written text, including keeping track of things like "this is letter A1 with an accent, but this is letter A2 that looks visually similar to A1 with accent but is different semantically". Of course then worries about code page size resulted in the stupidity of Han unification, so Unicode is a bit broken.
Huh, I've never had it not be like that. It's great for bumper traffic.
What is Firefox supposed to do?
Primitive types and schemas.

Complex types and objects don't exist.

Embrace Mereological Nihilism.

It's fun at meetups to tell everyone your programming paradigm is Nihilism.
> In the string -> Email example, it's probably enough to parse your string and just call it an email. You don't need to try to encode all the rules about an email into the type itself.

There is also the in-between Rust approach. Start with the user input as a byte array. Pass it to a validation function, which returns it encapsulated within a new type.

#[derive(Clone, Hash, Ord, Eq...)]
struct Email(Box<str>);

// validate UTF-8 +
fn validate(raw: &[u8]) -> Result<Email, EmailValidationError>;

What is annoying is the boilerplate required. You usually want your new type to behave like a (read-only) version of the original type, and you want some error type with various level of details.

You can macro your way out of most of the boilerplate, with the downside that it quickly becomes a domain specific language.
Indeed. And breakpoints and stepping across concurrent context actually works in JS, which is nice.
The input videos already have that dimension, so that can't be the answer.
SSDs can be pretty lightweight. And also sometimes the fake ones have a piece of metal or even a rock glued to the inside of the thing to make it feel heavier.
There may ultimatley need to be taxes on wasteful energy use. Less so on infastructure but very high on frivolous energy waste for things like crypto and AI as absurdly wasteful toys without meaningful use.
Babies don't come with instructions. But in Oregon, they now come with a nurse
I had a clever boss (circa 2002) who generated interesting ideas all the time. He came up with, why don't we just tack clear, plastic/rubber bumps onto the glass of the touch screen to create tactile buttons. He proof-of-concepted it and it worked.
That sounds a lot like async/await. Any errors thrown in an async context bubble to the callsite awaiting it.
This is one of my favorite programming books of all time. A lot of small light bulbs went off reading that book. It really opened my mind to C and its oddities.
Do you just need to model them aesthetically, or do you need to calculate their physics and material properties too? Like are you actually going to manufacture these bikes, and how will you ensure they can properly support the rider and withstand all the dynamic forces?
It would be great to have a competitor in the search space that's easier to integrate than Elasticsearch.
Computer program 'paints' porphyrin structures in the style of Piet Mondrian
https://archive.ph/Kgh2S
I think with the whole menagerie of green locks, green bars & EV sites replacing/cluttering the address bar (meh [0]), only showing PSL+1 [1] (which actually does help security, but vocal power-users hate [2])...UI/UX designers are probably loathe to mess with it again.

[0]: https://www.troyhunt.com/extended-validation-certificates-ar...
[1]: https://blog.chromium.org/2020/08/helping-people-spot-spoofs...
[2]: https://www.reddit.com/r/chrome/comments/h11gde/how_do_i_sto...
[3]: https://www.wired.com/story/google-chrome-kill-url-first-ste...
So if I'm not using Chrome or Firefox, how do I check for revoked certificates? This just makes the web less open again.
this comment needs to be at the top
>> The attitude this instills is that of having to work hard, while scheming against the taxman, to improve your life.

Sounds like a lot of politicians I know. Really, how is this not being "Smart" and gaming the system? If we're all upset about being "fair" then we would have changed the system.
Harvey.ai raises $100M Series C led by GV at $1.5B valuation
You guys really need to get over your bellicose POV of the world. Actually, before it destroys you. Really, is not necessary. Most people in the world just want to leave in peace, and see their children grow happily. For each data center NK would create there will be a thousand of peaceful, kind, and well-intentioned AI projects going on. Or maybe more.
> I forsee problems connecting with the right market

Finding the right market is hard work and consists entirely of rejection until you find it and entirely of rejection if you don't.

> * Clients who have meaningful IT budgets...

> * Clients who are too small...

Selling is hard work and mostly or entirely rejection. Finding reasons not to sell is much easier and avoids the hard work and the psychological tolls of rejection.

> How would you sell what I've built?

One customer at a time. That's how selling is.

On a brighter note. Hardware is a useful abstraction. Customers with big budgets will pay handsomely for annual service contracts and you can fly out in business class, stay in a nice hotel and markup the cost 25% in the materials section of your time-and materials invoice.

Good luck.
Mozilla and Chrome were requiring it via the incorporation of the Baseline Requirements into their policies. The removal of the requirement from the BRs won't appear in the release notes of their policies.
The browsers, generally, are not onboard with improving OCSP and supporting OCSP stapling. Chrome already doesn't check OCSP at all.

Apple and Firefox are all working on out-of-band revocation information based on CRL data. Presumably Chrome and its family are going to go down that path too, but I'm not sure I've heard commitments from them yet.

Firefox has the best documentation on what's happening: https://blog.mozilla.org/security/2020/01/09/crlite-part-1-a...
Better tools do not solve structural human problems.

But

Is a sign of better management if there are better tools in use.

ie: Good devs/managers will pick better tools/methodologies/practices because well, there are better devs, right? And if there are not, is a part of the path to become one to do it.

*p.d: However, sometimes by mistake or maybe design, better tools/environment cause people to do better...*
Why Lifestyle Creep Is Mostly a Myth
ROCm is buggy and largely undocumented. That’s why we don’t use it.
Is it elaborate? Such a fake out is a trope of basic game theory that would be easy to see for someone who understands basic data analysis. And the implementation would be trivial compared to the work the malicious actor has already gone through to sponsor the memberships.
The DoE has also been a fairly active purchaser of GPUs for almost two decades now thanks to the Exascale Computing Project [0] and other predecessor projects.

The DoE helped subsidize development of Kepler, Maxwell, Pascal, etc along with the underlying stack like NVLink, NGC, CUDA, etc either via purchases or allowing grants to be commercialized by Nvidia. They also played matchmaker by helping connect private sector research partners with Nvidia.

The DoE also did the same thing for AMD and Intel.

[0] - https://www.exascaleproject.org/
I've only heard bad things about unlimited PTO, but I've only experienced good things. I've worked at two places with unlimited PTO, and at both, I typically took ~5 weeks and nobody had an issue.

At one place I worked at, they only gave 3 weeks, but with the option to "buy" a 4th week with a slight salary reduction that effectively made that 4th week unpaid, but with the loss of pay spread out over the year. It was nice, though I actually wish I could have taken more, especially since the company did a shutdown between Christmas and New Years and forced you to burn a week of PTO at that time, which meant that you really only got 2 or 3 weeks throughout the year to do what you wanted.
Oddly, based on Statista Windows Server has 72% of the on-prem market and 50% of the overall cloud market. I digress, I am looking for the technical aspects of why to linux is favored, if all other things were equal.
FTC launches probe into how companies use data to tailor what each customer pays
I have near-FAANG base plus bonus working as a manager/tech lead at non-FAANG in a series B tech startup focused on industrial production (keeping it vague). It is well funded by tech elites and pays more than a comparable company would pay, and I've been here for a few years. I don't have anywhere near FAANG equity potential.
Often SQLite is what you will get, quite anywhere. But you might not be able to install so easily extensions.

Also a key value of SQLite is to be quite self contained and easy to build without strong dependency.

Finally, I'm not an expert of SQLite extensions, but I think that you will easily have a strong impact on performance using the extension for core type that you might use a lot in big tables.
The lack of sandboxing in desktop applications is bad, but you aren’t going to be writing code to read every web page a user visits by accident, and that’s what some browser extensions do on purpose. They’re inherently working with more sensitive data. So that’s worse in certain ways. (And they are more sandboxed in other ways.)
I think this is a very serious problem. There are still ambitious people, but ambition is now ipso facto evil (whether in business, tech, science, finance, law). That's the politically correct meme. Automatic. And hard to reverse as nieces and nephew have reported constant "save the planet" themes in school work. With "shrink the economy" being the only solution ever suggested.

When whichever cause may be yours (climate, housing, faster cat photos) might actually benefit from ambition, scale, technology focused progress, better ways to even think about anything and everything.
PrimeNumber is definitely possible in pretty much any dependent type language. Indeed, it would be pretty impossible to get any work done in Lean without it.

TotalProgram: possible in some, not in others, I think.
Levels.fyi is to be trusted. 100% accurate for Google SWE ladder at least.

Can be an apples-to-oranges comparison for some other companies with large stock appreciation (e.g. Meta), where a lot of the comp number are vested TC rather than granted TC.

The numbers accurately reflect longer term employees W2s, but not the offer you’d get if you joined today.
>just have your own children and damage them instead
Anonymous hacks Israeli Security Ministry, gives it 48 hrs. to end war
Because their plan included a mechanism for targeting ads via a service provided by Google, while crippling competing ad brokers.
The statement doesn't say it's the Best Novel. Maybe there's someone who would happily drop a ton of money to be a Hugo-award-winning Professional Artist?

Or maybe Paramount are desperate to beat Doctor Who in Dramatic Presentation, Short Form?
> Also if you want to test the locks on someone's house, you don't go to their house. You buy the locks that they are using, and test them quietly in your own location.

This is a pretty great point, because it's exactly what the guy in the article did to find the vulnerability in the traffic controllers.
Has "at-all-costs" ever been the idea? Is it the only way?
Hate to say it but I agree.
I think the world of datalog and dynamic logic programming (or perhaps Answer Set Programming with Constraints) may be very useful in scenario 2, and people are still pursuing that without waiting for scenario 1 to happen first.

Yeah, scenario 1 will also probably still happen.
There may however, be a shortage of capital for open source AI, which is the subject under consideration.

As for the why... because there's no shortage of capital for AI. It sounds like the government would like to encourage redirecting that capital to something that's good for the economy at large, rather than good for the investors of a handful of Silicon Valley firms interested only in their own short term gains.
Chinese-born chemist cleared of last conviction under US’s espionage probe
https://archive.ph/kBcaq
node:sqlite available in Node.js v22.5.1
I just watched this 1950s DoD video on the heavy press program and highly recommend it: https://www.youtube.com/watch?v=iZ50nZU3oG8
Thanks for making this library, BurntSushi.

impl Decimal {
...
/// Returns the ASCII representation of this decimal as a string slice.
pub(crate) fn as_str(&self) -> &str {
// SAFETY: This is safe because all bytes written to `self.buf` are
// guaranteed to be ASCII (including in its initial state), and thus,
// any subsequence is guaranteed to be valid UTF-8.
unsafe { core::str::from_utf8_unchecked(self.as_bytes()) }
}
}

https://github.com/BurntSushi/jiff/blob/08dfdde204c739e38147...

How much performance does `from_utf8_unchecked` buy us over `from_utf8`? It's saving iterating over a 20-byte array. Because the array fits in a single cache line, the iteration will run at the CPU's internal clock rate. I expect that a benchmark would not be able to detect the CPU time saved. Even a program that was only serializing these Decimal types at GB/s, the difference would be barely measurable.

As software engineers, about 80% of our time is spent coding. And about 80% of coding time is spent learning how the thing works. If we prioritize code clarity, we speed up 64% of our future work.

Performance optimizations always make code less clear. Using `from_utf8_unchecked` is a performance optimization. It makes the code less clear so it needs a three-line comment.

Engineering is all about trade-offs. Performance optimizations can be worth their clarity cost when they bring tangible benefits. Therefore, we need to measure. The comment doesn't say "Using `from_utf8_unchecked` because it takes 1ns while `from_utf8` takes 5ns." To make sure we're making a good tradeoff between clarity and performance, we need to measure the impact of the optimization and document it in the code.

Using `unsafe` also has a cost. Safety depends on invariants. Future changes to the code can break these invariants. The compiler is the most reliable method for detecting invariant-breakage. Let's take advantage of it. This means using `unsafe` only when its use brings tangible benefits that outweigh the risks.

I started my professional life as a Windows sysadmin. Dealing with worms and viruses was a large and unpleasant part of my job. During university, I learned about formal verification of software. It has great potential for making our software secure. Unfortunately, the tools are very hard to use. To verify a program, one must translate it into the language of the verification tool. This is a lot of effort so few projects do it. Now with Rust, we get verification FOR FREE! It's amazing!!!! So let's use it and move our industry forward. Let's make worms, viruses, ransomware, and data theft, into things from the barbaric early days.
Bstr: A byte string library for Rust
That's probably because the second order effects of UBI are obvious to anyone that's ever had a job. So you have the people that know the obvious, and the people that want to hide the obvious from the few that don't get it.

The covid handouts and raised unemployment benefits gave a sneak peak to anyone else that was blind.

Even things on the user market were on shirt supply and with high prices. In California the effective unemployment rate was something like $23+.. why would anyone sell their old lawn mower for $50 if you're getting $4000 to stay home? Why work painting houses for $4k a month when you got $4k to sit home. Magically everything cost double or more instantly... I wonder why.
Cocaine is a d2 reuptake inhibitor like AFAIK pretty much all notropics. But the speed of action and the short duration makes it very addictive. So I could readily believe people are smarter while on cocaine, just that gets shadowed by the focus on feeding the addiction.

I take modafinil which is slower and longer acting d2 reuptake inhibitor and am definitely smarter on it, it helps with my ADHD as I had dopamine dysregulation prior to taking modafinil. Because of that prior state I get a much stronger effect from it and require only a lower dose of it (50 to 100mg).
We're 3+1 dimensional beings. Time doesn't have the same metric as spacial dimensions, so you can't add them together. You can't rotate a temporal object along the xt-plane, for example, nor can you speak about an object's length along the t-axis. The three spacial dimensions are interchangeable, but time is special, so calling it 4D is incorrect.
>> Who else could be victimized by working full time, so that other people don't have to work?

As when employees work full time so that shareholders can be given dividends? Part of me would rather a cut of wages go to support thousands of people on welfare who "don't have to work" rather than that cut go to a handful of billionaires who also "don't have to work". Our economy already supports an array of non-working people (retirees, disabled people, passive shareholders). So I'm not going to get hung up on the principal. We broke that glass long ago.
I see your points, but if all other things were equal what technical advantages are there over Windows Server.
You're correct that it's a last resort, but its primary role is to, literally, charge back to the original merchant. "[letting] the processor know that their customer isn't holding up to their end of the agreement" is a side benefit. As is eventually dropping the merchant when there are too many chargebacks to justify supporting them.

> Through a chargeback, your bank can try to get your money back from the seller on your behalf it isn’t a legal right, but your bank is committed to helping you, and will treat any claim fairly.

https://www.visa.co.uk/how-you-pay-matters/chargeback-purcha...

> When a customer disputes a debit or credit card transaction, the card issuer must determine whether to provide that cardholder with a refund for the transaction amount—also known as a chargeback.

https://b2b.mastercard.com/news-and-insights/blog/what-is-a-...

> A chargeback is a rules-based mechanism, with time-sensitive workflows, that enables the issuer and the acquirer to determine the financial liability of a disputed transaction.

https://www.mastercard.us/content/dam/public/mastercardcom/n...

> A chargeback occurs when, after investigation of the dispute, we debit your account for the amount of the disputed transaction and credit the Card Member with this amount.

https://www.americanexpress.com/au/merchant/chargebacks-and-...

Notice none of them talk about it being a feedback mechanism. Because it's not. It's a refund mechanism used as a last resort.
Reflexive? Take a look in the mirror. The condemnation is based on arguments that you can try to refute; or you can be reflexively enthusiastic, it’s up to you.
Market is in the gutter.

Many job ads are fake and only there to confuse shareholders about the company health.

Interviewers are looking for the tiniest bit of excuse to fail you along the process while quite often they are looking for lesser engineers than themselves as this buys them job security.

Offers, when they come, are much worse (terms + money) than what they were 2 years ago.

Most of the companies don't want to invest even a day on you so you have to have the exact package they're looking for.

It is fully a (job) sellers market. OTOH if you are a company and you find it hard to find people in this market then you're doing something really wrong.

EU-Greece here.

Good luck.
Design and Control of a Bipedal Robotic Character – Disney Research
Show HN: React Native Finisher Kit That'll Automate All the Complex Stuff
Hey HN,

I've been automating mobile builds since 2017, publishing a course on mobile automation back then. Over the years, I’ve configured Mobile CI/CD for various companies using Bitrise, Codemagic, GitHub Actions – over and over again.

To simplify this repetitive process, I’ve created a React Native "finisher kit" that automates Mobile CI/CD setup.

Here’s what it offers:

- Initial setup with monorepo support, multiple environments, unified configuration, testing set up, features like Push or iOS Live Activities…

- Easy app creation for App Stores + Fully automated code signing, building, deployment,

- Single place for configuration (AWS), reusable for local development, builds and deployment either locally or in the cloud,

- A seamless system to manage configurations for Apple, Fastlane, Google, and more…

It allows you to create your Mobile CI/CD with any of these providers with a single CLI command and keep it up-to-date. Switch between providers just by changing the config.

It supports both React Native CLI projects and Expo.

I built it to save time and reduce the complexity of mobile app development, hoping it will be as helpful for you as it has been for me.

I’d love to get your feedback and thoughts.

Thanks!

Igor
As you've rightly pointed out, we have the mechanism, now let's fund it properly!

I'm in Canada, and our science funding has likewise fallen year after year as a proportion of our GDP. I'm still benefiting from A100 clusters funded by tax payer dollars, but think of the advantage we'd have over industry if we didn't have to fight over resources.
The reference (an excellent read!): "Parse, don't validate" https://lexi-lambda.github.io/blog/2019/11/05/parse-don-t-va...