skysight-inc/HackerNews huggingface dataset:
The thing about open source is that you can just fork it. You don't need to trust them.

If the question is actually "Can we trust Microsoft with an Open Source Community?" then it get's more interesting.
It was a bit of an imitation of NYC at the peak of the pre-COVID boom, but I travel to both regularly, NYC has 100x more energy than SF. SF is akin to cities like Austin or Denver, we’re talking a city with only an 800k population.
High Rated CVSS Apache Airflow Remote Code Execution
The blog post discusses a vulnerability (CVE-2024-39877) in Apache Airflow, allowing authenticated users to execute arbitrary code via the doc_md parameter. The issue involves improper handling of Jinja2 templates, leading to potential security risks.
More to the point, the comment in the code mentions the “combinatorial” explosion of conditions that have to be carefully maintained by fallible meat brains.

In most modern languages something like this could be implemented using composition with interfaces or traits. Especially in Rust it’s possible to write very robust code that has identical performance to the if-else spaghetti, but is proven correct by the compiler.

I’m on mobile, so it’s hard to read through the code, but I noticed one section that tries to find an existing volume to use, and if it can’t, then it will provision one instead.

This could be three classes that implement the same interface:

class ExistingVolume : IVolumeAllocator
class CreateVolume : IVolumeAllocator
class SeqVolumeAllocator : IVolumeAllocator

The last class takes a list of IVolumeAllocator abstract types as its input during construction and will try them in sequence. It could find and then allocate, or find in many different places before giving up and allocating, or allocating from different pools trying them in order.

Far more flexible and robust than carefully commented if-else statements!

Similarly, there's a number of "feature gate" if-else statements adding to the complexity. Let's say the CreateVolume class has two variants, the original 'v1' and an experimental 'v2' version. Then you could construct a SeqVolumeAllocator thus:

allocator = new SeqVolumeAllocator(
featureFlag ? new CreateVolumeV2() : new CreateVolumeV1(),
new ExistingVolume() );

And then you never have to worry about the feature flag breaking control flow or error handling somewhere in a bizarre way.

See the legendary Andrei Alexandrescu demonstrating about a similar design in his CppCon talk “std::allocator is to allocation what std::vector is to vexation”: https://youtu.be/LIb3L4vKZ7U
I think the fees they tack on for online orders would ruin ordering different products from different stores. It mostly makes sense with staples that don't perish.

With fresh produce I find Pak n Save a lot more variable with quality, making online orders more risky despite the lower cost.
San Francisco has nearly 8 times higher population density than Auckland.

Add to that other factors like the size of the CA economy (wealth attracts crime), a lax criminal system, attractive social services (compared to the rest of the US), etc etc. It's an apples to oranges comparison.
Look up "projection." Narcissism is characterized by, among other symptoms, thinking everything is about you.

The OP was not about you.
Are you sure though?

AI thing is almost over for now. Need to hop on the next thing. Unfortunately, I have no clue what it could be.
Microsoft embraced open source not because it liked it, but it had to, "if you can't beat it, you join it", it is a poison pill if history tells us anything.
Something something 15 competing standards
Autonomous can still be jammed. They can and probably will still use gps, visual info, sonar, sound, magnetic fields, or pressure. All which can be jammed from the outside. And this is already happening.
Why is he using the CSC logo?
Someone has obviously simplified the code. Oops.
I hate that "modern" developers think Linux == Ubuntu and write software that only supports Ubuntu. Same thing for systemd.

"But it is just harder to learn how to write proper software that would work on a machine slightly different than my own"...
> Unlucky. Posted to HN the day after SSL expired. You need to turn on certbot-auto to renew your LE cert.

Systemd can do that for you, too!
I think the whole file worth skimming through
Thanks. This is the first instance of a respected software engineer arguing in favor of this style that I have read (contrast with Dave Thomas, Kent Beck, Bob Martin, etc.)!
There are applications and workloads where storage density is a key consideration, and the set of data models isn't that small as a subset of the market. Networked storage is not a substitute for NVMe when working with very large storage volumes due to the poor storage bandwidth. For some workloads you also cannot substitute a single high-density server with multiple low-density servers for effectively the same reason (low bandwidth to remote storage). For these workloads, ultra-high density storage can definitely be cost effective within reason.

It bears keeping in mind that most popular open source software is not designed to be effective for storage densities anywhere near this high. If you are working with data at this density then you are likely using one of the closed source storage engines designed to work at this scale running straight off of the raw block device.
I never "cold" called but I lukewarm called expired real estate listings before using scripts.

They definitely work. Listed total strangers after a phone call. Remember it's a % game. If you call 30 people might get 20 angry no's, 5 friendly no's, 3 so so leads and 2 hot leads.
Not all products and services are good, yes. But you don't spring forth from the womb knowing about all the good ones either.
Perhaps an overwhelmingly obvious finding, that doomscrolling and existential anxiety are related, but important so we know it with scientific proof and can move on to doing something about it.
If the 'if' condition matching always results in a thrown exception, a return, or likewise, then you don't really need an 'else' unless you're using a language which supports conditions and resumption (conformant Common Lisp implementations, and not really anything else I know of). The 'else', implicitly, is that the flow of control leaves the scope of the 'if' block at all.

(I haven't read far enough into the code to know that this is what they're doing, but the head matter I did read suggests as much. It's a common enough pattern, especially around eg argument validation and other sanity checks a function might perform to ensure it can do meaningful work at all.)

(I do wish HN supported an inline monospace markup, the <code> to a four-space indent's <pre>...)
Embrace modern glyphs, use the summer emoji and the autumn emoji (I tried to add them here but unfortunately HN removes them from comments)
Blue Nights by Joan Didion, in which she grieves the death of her forty-something daughter, just a few years after her abusive husband died suddenly from a heart attack.

The contrast between her gorgeous but also coldly precise writing, the grieving mother vs the lauded writer, the tension of watching her muse (very delicately, very distantly) on the nature of being an adoptive mother and wondering as a reader: what sort of wounds did Joan Didion pass on to her daughter and what wounds did her daughter inherit from her biological family, the contrast between the vibrant streets of New York and the cold hospital where her daughter was dying in a coma, knowing as a reader that this writer had just gone through the grief of losing her husband a few years earlier...

It was haunting, beautiful, and, naturally, a little voyeuristic by its very nature. I still think about it to this day.
The standard definition of a correction is a 10-20% market decline. “Minor” corrections aren’t defined, though one could imagine an event that barely meets the threshold making sense.

But yes, strictly you are right - this isn’t a correction at all.

source: https://www.schwab.com/learn/story/market-correction-what-do....
>It took me nearly 2 years to adjust my body’s response to being hungry.

May be it depends on body type but It really shouldn't take 2 years. If you stop eating carbs and any processed sugar, and I do mean any. And that is with zero calories deficit. i.e Eating as much as you want.

Once you primed your body to know how to burn fat, and sustain it for a period of time, let say at least 7 days and does it regularly Your body will quickly adopt.

I think the key here is that you are not on a calories deficit but simply changing the diet. You can buy some small urine tester to test the state of your body. It generally takes me anywhere from 14 - 21 days before showing the highest level of Ketone. When I am on fasting it took me 7 days.

Once you got to that state, adjusting for Calories deficit becomes much much easier.
The fundamental point with crypto is that you can design your own with any criteria you want to fit all of your needs, but the problem of adoption still remains. If you make it behave like a currency, speculators will lose interest and it won't get adopted. If you find a government willing to impose it for transaction you will nullify the reason for crypto to exist.
Seems to have been for a while.

https://en.wiktionary.org/wiki/agentic
I've been experimenting with k8s and/or running it on prod basically since the initial release, and I've so far only had one workload-affecting bug.

The bug caused the scheduler to get stuck meaning pods assigned to nodes kept running, but no new pods would be scheduled.

https://github.com/kubernetes/kubernetes/issues/124930

That's a pretty good track record, and indicates a level of fail-safe design (everything continued working, even though a critical components kept crashinglooping).
The irony is this kind of describes k8s as well.
"Apparently, Cloudflare never received" is a much bigger deal than anything else surrounding this.
Yes, but often density is at odds with readability.
It's diff.
This sort of code strikes me as an ideal candidate for translation into a declarative, rule-based, table-driven system. Such a thing is more comprehensible and more verifiable than ad-hoc imperative if-clause-rich code.

Messy code of this sort is usually a sign of a missing abstraction.
However, if you search for the legit OTC drugs you buy (not the junk they're promoting), they have those.
The real horror show is the way nobody is encouraged whatsoever to back up their EFI folder to begin with, ever.

This type of recovery from backup by copying a single file is not exactly a one-step process, but much better than if there is no backup nor experience with the recovery process.

It is kind of a switcheroo having the bootx64.efi replacement process be hidden by the (various) install wizard "routines", but the design of UEFI was intended to be opaque in this area especially.

If for no other reason than to perpetrate more fear than there should be about multibooting.
In the case of LLMs, I think their training is the supreme authority.
Hmm, I think any example where it can get stuck is going to be a bit contrived since really it's a question of how easy it is to recognize a valid prefix. Say for example you want the LLM to generate a valid chess match and it ends up in a situation with just 2 kings left. If you're not careful with your definitions you could end up in an endless loop that never ends.

That said if you know all valid prefixes in your language in advance then you can always realise when a token leaves no valid continuations.

> It absolutely will. But so will adding an extra newline

A newline is less likely to dramatically drop the quality, a greedy method could easily end driving itself into a dead end (if not grammatically then semantically).

Say you want it to give a weather prediction consisting of a description followed by a tag 'sunny' or 'cloudy' and your model is on its way to generate

{
desc: "Strong winds followed by heavy rainfall.",
tag: "stormy"
}

If it ever gets to the 's' in stormy it will be forced to pick 'sunny', even if that makes no sense in context.
The top manager. The shift managers make about that, but the top managers who mostly do paperwork and are rarely seen on the floor do better.
SEEKING WORK - Remote, travel possible depending on location and duration.

Location: North-east UK

What I do: Senior backend dev / tech lead / fractional CTO

Are you being held back by a constraining architecture, slow backend, or a team lacking the depth of experience you need for the next stage of your growth?

Most recently CTO of a regtech startup, I've spent the past 20+ years in a wide variety of tech roles building both products and teams, giving me the perspective to get your project moving without being bound to a particular language or stack.

Previous work:

* Deterministic AI for medical device regulations and other complex legal systems, including novel language and runtime for regulatory computing (Elixir, Raku, Rust)

* EDI message passing / reconciliation for US dental health insurance market, including X12 parser (Clojure, Common Lisp, Perl, XQuery)

* Custom domain specific language (DSL) to encode business rules for computer vision system (Common Lisp)

* University library data migration project, with a focus on completeness and validation. (Clojure, Elixir, Ruby)

* High-reliability, long-term timelapse platform for inaccessible locations. (FreeBSD, Arduino, Python, Shell)

* Migration of existing Node.js+Firebase service to Golang+PostgreSQL on AWS

* Feasibility study investigating the possibility of writing custom code to interface with a biometric timeclock (Common Lisp)

Got something you think is a good fit? Drop me a line at mike -at- lambdafunctions -dot- com
I've obviously only skimmed the code, but honestly it doesn't look that bad to me. Sure there are things I would do differently, but I've seen much, much worse. At least the code follows a single convention, and has the appearance that everything was thought through and that there is method behind the madness, as it were. I'd take this any day over the typical mishmash of styles, lazy coding, illogical code structure etc. that I've encountered so many times.
Google Discontinues Chromecast Line
Musk’s tweets and the unimpeded use of the platform for misinformation and coordinated violence give me the impression that he cares less about turning it into a profitable enterprise and more about its use as a tool to push his agenda and affect the cultural and political changes he desires.
No, just fork it.
Or maybe between one version and the next they only found one bug (there may have been bugs in the first version which weren't fixed until the third or later) - this seems more plausible to me since it's... rather difficult to count bugs until after you know about them.

Of course now the greatness of the feat depends on how much testing there was between versions, but given that it was the shuttle there was probably a lot.
Yeah, at this point I am not going back.
It would be interesting to see the NASA approach compared to how SpaceX does things. Considering that they have done manned missions they seem to have very similar requirements.
DoShare - https://doshare.me | Hiring Interns

Location - Hybrid (Remote or NCR,India Region)

We are looking for people who would be part of the founding team.

Flutter Developer Intern (min. 3 positions)

AI/ML Developer Intern (min. 3 positions)

Data Scientist Intern (min. 2 positions)

UI/UX intern (min. 2 positions)

More details and how to apply: https://dub.sh/TFZse3B

Not your field, but want to join? mail your CV/Resume at careers@doshare.me and we'll have a look.

[Mails from Finance or Marketing background are also appreciated.]
I'm sure I'm going to offend a bunch of people with this, but my experience has been similar to yours, and it reminds me of something "Uncle" Bob Martin once mentioned: the number of software developers is roughly doubling every two years, which means that at any given time half of the developer population has less than two years experience.

If you're an experienced dev, having a peer that enthusiastically suggests a bunch of plausible but subtly wrong things probably net-net slows you down and annoys you. If you're more junior, it's more like being shown a world of possibilities that opens your mind and seems much more useful.

Anyway, I think the reason we see so much enthusiasm for LLM coding assistants right now is the overall skew of developers to being more junior. I'm sure these tools will eventually get better, at least I hope they do because there's going to be a whole lot of enthusiastically written but questionable code out there soon that will need to be fixed and there probably won't be enough human capacity to fix it all.
As someone who is not that much into music or Drake: What am I looking at here?
That's a fair point, and probably argues more for being able to take time off. It's also worth noting that for most people outside the immediate circles (and from whom inward-dumping seems most prevalent and toxic) aren't utterly enmeshed in the constant struggle.

Caregiving itself is extraordinarily trying and debilitating in that context. I'd like to see better understanding, support, and options there. Others' suggestions and experiences very much welcomed.

Mayo Clinic on caregiver burnout:

<https://my.clevelandclinic.org/health/diseases/9225-caregive...>

Another issue of chronic / long-term caregiving is that there are often frictions and conflicts which develop within families or other smaller groups, often pitting immediate caregivers (e.g., a spouse or adult children living with or near (an) elderly parent(s)), and more distant siblings or other relations.

Add in issues of long-standing relationship conflicts, cognitive decline, or paranoia and misperceptions arising as co-morbidities of many many long-term conditions or just simple old age, and the mix becomes all the more problematic. Oftentimes this is further compounded by support organisations (governmental or otherwise) which often aren't, or which assume an adversarial stance for or against specific parties, often unfounded.
> Pulse was only really janky in the early years; by 2010 it was as solid as anything else in tech.

Then why was PipeWire introduced as a PulseAudio replacement, and why have so many people sung its praises?

I think more people continued to have issues with Pulse for far longer than you realize.
Dear Protonvpn, please listen to this guy, he knows everything! /s

Either you operate within the boundaries of a country's laws, or you try to be lawless and hide. A VPN provider hiding from the law, gee, what basis do you have to trust them, if they can also lie and hide stuff from their users?
Personally I love this level of verbosity in code. There are still way too many levels of nested control flow for my taste—I find that makes it exceptionally hard to retain context—but at least there are early returns.
https://waynehale.wordpress.com/2012/11/12/after-ten-years-a...

> I need to give you the issue from the NASA point of view so you can understand the pressures that they were under. In a developmental program, any developmental program, the program manager essentially has four areas to trade. The first one is money. Obviously, he can go get more money if he falls behind schedule. If he runs into technical difficulties or something goes wrong, he can go ask for more money. The second one is quantity. The third one is performance margin. If you are in trouble with your program, and it isn’t working, you shave the performance. You shave the safety margin. You shave the margins. The fourth one is time. If you are out of money, and you’re running into technical problems, or you need more time to solve a margin problem, you spread the program out, take more time. These are the four things that a program manager has. If you are a program manager for the shuttle, the option of quantity is eliminated. There are only four shuttles. You’re not going to buy any more. What you got is what you got. If money is being held constant, which it is—they’re on a fixed budget, and I’ll get into that later—then if you run into some kind of problem with your program, you can only trade time and margin. If somebody is making you stick to a rigid time schedule, then you’ve only got one thing left, and that’s margin. By margin, I mean either redundancy—making something 1.5 times stronger than it needs to be instead of 1.7 times stronger than it needs to be—or testing it twice instead of five times. That’s what I mean by margin.

> It has always been amazing to me how many members of Congress, officials in the Department of Defense, and program managers in our services forget this little rubric. Any one of them will enforce for one reason or another rigid standard against one or two of those parameters. They’ll either give somebody a fixed budget, or they’ll give somebody a fixed time, and they forget that when they do that, it’s like pushing on a balloon. You push in one place, and it pushes out the other place, and it’s amazing how many smart people forget that.
> There is no single canonical suite of best practices.

There kind of is, though. Most software engineering books argue for the same things, from the Mythical Man Month to Clean Architecture.

> Different languages have their opinions on how you should organise your code

In general best practices are discussed in a language-agnostic manner.
Unfortunately, you can't use this to tunnel multiple subdomains, unless you tunnel an entire domain. That's because Cloudflare won't let you issue third-level wildcard certificates, so you can't proxy *.lab.mydomain.com. Maybe I should just get my homelab a domain and be done with it, but right now running everything over Tailscale seems like a better solution.
There are less kids outside, but that is just because families are so much smaller on average and there are less kids.
Location: Florianopolis, Brazil

Remote: preferred, but open to hybrid positions

Willing to relocate: maybe

Technologies: Java, Scala, C++, Python, JavaScript, TypeScript, React, MySQL, PostgreSQL, Apache Spark, and others listed on my CV.

CV: https://docs.google.com/document/d/15lCC_DzHcZuLdU-p6uub_tuB...

LinkedIn: https://linkedin.com/in/luismo

Email: luismilanooliveira at gmail dot com

About me: 7 years of experience, with some solid experience on startups and on creating new and innovative products. I'm looking for positions on any part of the stack but most of my work history has been as a back-end engineer. I've been a major contributor to some very complex and high-performant systems, and I've always been able to push them to a higher level of quality and performance.
Brisbane, California not Australia.
I don't think he misread, because I also was puzzled. I had never heard of the term "expression" used in this way, and I imagine I'm not alone. I do greatly appreciate the clarification from you and jtsummers though. I knew of the distinction, but I didn't know of a term for it until today.
People saying 'well it must work, they're still using it'. Really? I am one of those people that as soon as I smell 'sales' talk I shut it down. If it is a phone call, just put the phone down. If it's first a handshake, don't reciprocate, and if it's an email... well, you know the rest. It's not rude to ignore a rude person. This attitude came from my dad at a time when door to door salesman traipsed the streets looking for suckers. George Carlin was right, salesmen are second only to clergymen, in the bullshit department.
I think when you work low paying jobs you quickly learn that the worst part is how most people treat you. Customers, managers, etc. We in tech take for granted how we’re treated.

The baristaFIRE fantasy seems to miss this part.