skysight-inc/HackerNews huggingface dataset:
No, you're just trying to push your own agenda and are arguing in bad faith. I responded to your question "why?", saying that we wouldn't want to in today's world. I only discussed increasing population in a possible far future with offworld colonies, and you willfully ignored that part.

>Again, why? The normal expectation in biology in resource constrained populations is boom | bust cycles and it's entirely reasonable to think that birth rates will pick up when back pressure decreases.

I already answered this question. Why would women want to have 10 kids if they don't have to? Obviously, you're not a woman and haven't spent much time around any.
<meme>There are dozens of us... DOZENS!</meme>

(Actually, millions... but you wouldn't know it if all you read were comments on HN and Reddit.)
In case anyone just reads the headline, this is not a good result for the SEC. Judge reduced the fine from 2B to 125m (94%) and deemed retail sales of XRP was not a security.

SEC has been trying to label pretty much every crypto a security, and XRP is probably the closest thing to one, so if they couldn’t get this…
I understand 60% of drug candidates fail in phase 3, the last and most expensive phase of testing.

There are of course lots of chemicals ruled out early, but that's before you have something you'd call a drug.
You're arguing semantics but aren't really making a counter point.
It seems like a flaw that sufficiently wealthy people can use the courts to harass their opponents no matter how weak the case. There's literally no downside. All it costs is money and he's got hundreds of billions.
Intel has shared ports across scalar and SIMD for a long time (only recently they've split them apart). I don't know whether they share silicon though, quite likely that they don't.

The complexity of using parts of vector ALUs might not be worth the saved silicon (even for something as expensive as float division, which has both SIMD and scalar versions (both operate in the same register file, just differing in the number of elements processed), both Intel and AMD have the same throughput for the scalar version and 128-bit SIMD version[0]).

It additionally allows separating bypass networks, e.g. the output of a SIMD add will never be directly used as a memory address (or, in the case of a gather, an extra cycle or two of latency is acceptable considering the amount of loads that will follow and in general the throughput-centric nature of SIMD), whereas for a scalar op that's an extremely important path. Or, in general, it allows making different tradeoffs between scalar & SIMD.

[0]: https://uops.info/table.html?search=div%20xmm)&cb_lat=on&cb_...
All his blogposts have a church image for some reason. This particular one I found amusing and now wonder if it’s intentional:

* Saint Nedelya (church in the blog)

* Satya Nadella (microsoft ceo)
Software engineering at most companies is just people pounding if statements into codebases until the errors stop. Its not sophisticated, and a 1000 monkeys banging away does end up producing products that mostly work
We can probably agree that war itself is horrific.
One of my hobbies is to dress semi-formal, go to a restaurant, and put a brown leather notebook & fountain pen on the table while ordering slightly eccentrically and following etiquette to point. I then take notes on the food before the next dish arrives, letting them see that. This seems to increase quality of service.
> Because they have the ability at any point to push software to your computer that compromises your privacy and security in almost undetectable ways. And short of them having an entirely open-source OS that will always be the case.

I don't believe such things would be undetectable. If that were the case, how would we have discovered the OCSP server?

Another point I don't understand is that, if it were made open-source, wouldn't Apple have the same level of control? After all, they'd still be the ones building the binaries. As another commentor noted, the XZ backdoor proved that even open-source software shouldn't be blindly trusted.
"Speaking out against the police" is not "criminal behavior".
This kind of stuff is a major reason I completely cut all Apple stuff out of my life.

When you're network is all Linux everything actually does "just work" more so than it ever did with OSX. Everything is just an SSH away, it's really pretty amazing.
Cython implements a C api for accessing the underlying data structure.

Arrays implement the buffer interface so they can be used efficiently with tools like numpy.
I have been arguing for a while that we need to implement some sort of public-key cryptography system for identity verification. It's the obvious solution, though admittedly implementing it will take a lot of effort. But it would at least eliminate a lot of issues with how SSNs are used in practice right now.
> On one hand I'm bringing a lot, a full working app in a large market

On the other hand you have no idea how to or skills to make money from it. So the person who does is bringing an awful lot as well.
I agree with all of this. :)

But if you're looking for a way out from Apple's paternalism without giving up too much practical security, getting your software from free software distributions as much as possible and treating F/OSS as your 'home base' is a doable first step for readers of this site that will go some distance. For example, on macOS, disabling Gatekeeper for software that you install via a package manager whose repositories have a code review process and which cryptographically verifies what it downloads is not a big deal. (Homebrew does such verification, but not for all packages. You can tell it to refuse to install what it can't verify in this way, though. So all my Homebrew apps get installed only if the package has a checksum in the repos, and when installed they get --no-quarantine.)

And if you can switch to Linux on the desktop, it's reasonable to approach app sandboxing in an opt-in way. It's nice to be able to do that, especially as some of the UX pain points are still being worked out. It's also nice to know that no matter what nice capabilities your OS offers for securing your system by treating apps as untrusted by default, you'll ultimately be in control.

Sandboxing is also somewhat a separate issue from code signing and notarization, and idk what's even really practically available on the Linux desktop for that. But I'm not really sold on those so much for use of those outside the enterprise. I imagine most people here would opt out of those given the choice.
Handing a third party company what is essentially a kernel level shell on all your equipment is absolutely insane.

I bought Cloudflare stock after this because it's obvious to me their customers aren't really thinking.
The key difference between then and now is the structure of media. We do not have Walter Cronkite. We do not have the Fairness Doctrine. We do have Citizens United. This leads to professional zealous advocates dominating the information space. To blame individuals for a lack of critical thinking skills in this environment is like decriminalizing violent crime and then blaming bloodied individuals for a lack of firearm and hand combat training.
"none of the of the" Genius level comment that demonstrates the need for a quality review of ones work.
I have often blamed software engineers for being complicit, however we should avoid a system that forces a worker to bear the cost of this choice in the first place.
> No one was in 1918 and everyone was exhausted […]

The US had just entered the war after the Zimmerman telegram, and so Allied powers had more man power and more industrial strength. The Central powers were the ones that were exhausted, especially after the Hundred Days Offensive.
I’m not concerned about the technical solutions. Any technical solution has to be implemented by people.

The thing not mentioned in CrowdStrike’s report is anything about people— especially management. Bad management and understaffed teams will defeat any technical solution, any day.
More details viewable here: https://gazette.readthedocs.io/en/latest/
> ...it means you failed, so skip it next boot. Succeed? Remove the mark. Tada. Resiliency.

Better yet, it's high time that PCs booted like (some) mobile phones do: there's two copies of the OS. The running copy is read-only. The other copy can only be replaced with a monolithic "image" that has is validated with a HS256-based digitally signed Merkle hash. Either the entire image is bit-for-bit valid, or it is rejected.

If booting to the new image fails twice, automatically roll back to the previous known-good image.

This isn't "hard", it isn't even that much work. Heck, Windows can already boot from WIM images and VHDX disk images! The code is already in there, it just needs to be turned on.
Typically closer to 89-90%. Costco generally makes a 10% project. Merchandise is practically break even and memberships is where all the money is coming from. Merchandise and sga together is 98%.

Circling back to the insight that costco is designed to make profit from its memberships and not its merchandise, though they are certainly making margin off selling items as well. That's why they go through phases of cracking down on memberships.
Also

> The $125.035 million fine is well below the $1 billion in disgorgement and prejudgment interest and $900 million in civil penalties the SEC sought.
I downloaded my 23andme file and uploaded my DNA to GEDmatch in the past. I wonder if I turned on “let law enforcement use it” and if I should turn it on now. I need to think about it. I like catching bad guys as much as the next guy. It does make me uncomfortable that it could be used wrongly or even against me if I did nothing wrong. Maybe those are unreasonable fears, I don’t know.
>> the US didn't have the resources for more

> They were correct that the US didn't have the resources for a second uranium bomb.

Because the difference between a uranium bomb and a plutonium bomb is meaningful when you're the target…
Bun is great!

What is Bun team next big goal? I mean, what is the team cooking up?
That's close to what I tried to say.

Perhaps you prefer: A company must think it's likely that they'll have a good return on all development costs, not just the costs of drugs that happen to be successful, to continue to invest.

> if profits are high, the industry expands to try more kinds of drugs, stopping when the attempts on the margin are just profitable enough (on average).

Of course, something like pharmaceutical products, with exclusive sales of specific products, few sellers, strategic conduct relative to other industries (insurers), and heavy regulatory influence is not guaranteed to converge to normal profit.
Name it Nexus, after that timeless sci-fi novel Don't Create The Torment Nexus.
It reminds me of when Tavis broke Sophos [1].

For those who weren't around, Sophos antivirus was the leading "enterprise-strength" security software around. When I started at Google in 2009, all corp-issued Windows laptops had it. Sometime in 2011, we got an internal email to immediately install a critical system update and reboot our machines. When they rebooted, they didn't have Sophos anymore. Then came another e-mail that said that Windows laptops would only be renewed for critical business exceptions, and everybody else was supposed to switch over to Mac or Linux laptops instead. Note that the first Chromebooks started shipping 3 months later.

A couple days later the full report came out, and a partial version was released to the public. The tl;dr was that Tavis Ormandy (then Google's lead security researcher) had done some cursory pentesting on Sophos, and found that it had so many security holes that it was architecturally impossible to make secure. Rather than attempt to bandage the problem, the company decided it was better to give up on Windows entirely.

[1] https://www.forbes.com/sites/andygreenberg/2011/08/04/google...
> Seventy-six intelligence reports assembled by the department’s homeland security unit

Why does a city police department even have a "homeland security" department? Isn't this just finding what they are looking for?
I see. So all software engineers can charge what they want until the moment they join another software engineer. The moment the two of them work together on a shared enterprise, their margin must be capped.

As an employer, hiring single-person LLCs provides such a strong advantage in this universe over hiring employees. The former can't charge you more than a small percentage. The latter can charge as much as they want. I suppose we would all be like Uber drivers.
Just remember, BSD is dead now.
Bun is a JavaScript runtime, bundler, transpiler, npm package manager, and test runner all-in-one.

It isn't accurate to say Bun is a JavaScript engine. We use JavaScriptCore as the engine, which is the same engine used by Safari (WebKit). The engine is responsible for running the code and a number of language APIs (Array, Object, Number, RegExp, etc). The runtime is responsible for things like I/O, filesystem access, the event loop, and implementing a very large number of non-language APIs and modules
Unfortunately no, the only fix is for apps to adopt the newer APIs.

The alert dialog is to direct you to disable screen recording permissions altogether, not to disable the warning.
You assume that using Crowdstrike software was a sound business decision before outage. It might have been just well marketed snake oil that was adding very little protection and just didn't hurt until the outage.
Rust isn't a panacea, and the US Government really isn't pushing for Rust adoption.
Japanese Society in 1968 [video]
Extremely low quality post by the submitter. Yes these shouldn't happen, but software engineers -- so far -- are all human. It's more useful to talk about the ways this could be mitigated than to just post a few sentences repeating that it shouldn't happen.
This reminds me of the droid in the 1987 Robocop movie:

https://www.youtube.com/watch?v=TYsulVXpgYg

What could go wrong?
Philippe Petit's poetic (and illegal) walk between the Twin Towers (1987)
Three month suspension for Python core developer
SSH is built in to macOS and can be enabled in a few clicks.

https://support.apple.com/lt-lt/guide/mac-help/mchlp1066/mac
Not a lot of nuance in your view of the U.S. role in WWII.

For example, your point:

> Japan did the Pearl Harbor attack: up until then the US was still a neutral country in WWII.

The U.S. Export Control Act (July 1940), freezing of Japanese assets (July 1941) and then the oil embargo (August 1941) are examples of some of the nuance I see.
https://archive.ph/GAbwQ
Ah okay, that makes sense - very cool!
From what I understand, this was a failure in parsing a configuration update file, and while they do end-to-end testing for releases of the Falcon code with the latest configuration, they don't (or didn't) do so against all configuration updates in the interim.
Opportunity for a new type of firearm, perhaps? Part of the attraction of the shotgun is that the spray of shot lets the shooter be less accurate against moving targets. A hovering drone, being more stationary, would be a better target for a rifle.

If the robots get good at shooting down fast-moving drones, that'll be impressive and intimidating.
Breaching AWS Accounts Through Shadow Resources
ghost.org - start there and build something custom if the concept shows signs it's working
That's a bit of a chicken and egg problem, isn't it? We can only avoid a system that forces a worker to bear the cost if they first decide to bear it.
Sad to hear as someone currently building an app with screen recording capabilities. Hopefully the outrage is enough for them to reconsider
Mem0: Three Prompts Created a Viral AI Memory Layer
> If most software engineers want to legitimately call themselves engineers, the field should be formalized as an engineering discipline, including coursework, certification/licensure and, better yet, apprenticeship-like experiences required for "real" engineers working toward their Professional Engineer license.

I agree, although in reality it's not chiefly developers themselves who are responsible for quick, lazy approaches, is it? Developers are typically the parties most pained by technical debt. If the discipline of software development is to become software engineering in earnest, there will have to be some pressure all the way up the management chain— pressure strong enough to outweigh software's low cost of iteration. I imagine this is really rare outside of highly regulated industries and very specific applications, and even with a formalized software engineering discipline, many companies will prefer sloppy software development and many competitive markets will 'select for' such companies.
I still think it was intentional, someone activated the CrowdStrike feature that was purchased by the DoD.

Maybe people with inside knowledge of recent events were trying to make an exit so they had to smash the glass and hit the red button to stop air travel so they could snag them in time?

Making it a perfect update failure is clever enough, but the name of the product is the best part. Imagine a system that can stop breaches even after they occur ;)
Feasibility of keeping Mars warm with nanoparticles
What commonly happens in these organizations is they have a software delivery path that has a lot of these best practices but soon people figure out that it is too slow so they invent a new, faster, path. From what I can tell Crowdstrike had a lot of the usual best practices like canary rollouts on their binary but they didn't on this configuration file despite it having the same consequences of a bad binary push. This wasn't even an edge case, it reliably BSOD'd every windows machine that got this update.

One strategy Google SRE uses is that the team ensuring reliability has a different reporting path than the product team - so there is always a check and balance when things like rollout policies get worked around by clever product teams.

It's a shame because I hear it's actually a pretty good product.
Mamba: Selective State Space Modeling
Hi, I'm currently an intern at K-Scale where we do humanoid robotics and sometimes, we give talk on relevant machine learning topics. Decided it'd be nice to try and share my knowledge to more people than just the founders and other interns. Here's the post:

Mamba: Selective State Space Modeling
https://nathanzhao.cc/mamba
The reason c# has such a weak open source system is two fold. Supply and demand. From a supply stand point source enthusiasts have historically hated Microsoft.

From a demand standpoint everyone uses the Microsoft variant because it's easy to use and hire for. There's a ton of documentation. Lots of issues are at the seems of different libraries, applications or frameworks you use. And in the Microsoft world it's frequently all the same. Everyone uses the same identity library, the same webserver, the same cloud, the same database, the same orm.

If you're into learning technology it's not for you. But if you're into learning about domains and business instead of tech or like having free time it's a great stack. Doesn't work well for b2c because of the cost, but works really well for b2b.
JetBrains Rider and get over your hangups so you can be productive. Now, you'll have to pay these professional developers for their work making an excellent cross platform IDE for you but you can leverage their work (and Microsoft's great language and platform tools) for your own benefit so it's a win/win.

Beyond that, no offense but I don't think C# devs don't owe you anything, it's on you if you have criteria that excludes you from using all these awesome things.

If your religious beliefs are a sticking point, then so be it.
The direct role that university research plays in drug development is overstated. The majority of cost and difficulty in pharma is _drug development_ not _drug discovery_. Pharma can do the discovery and the development, academics can only do the development. Absent academia, we'd have less drugs. Absent pharma we'd have no drugs.

Academics focus on drug discovery because it's better aligned with academic incentives and timelines (see this commentary for a brief description [0]). Drug development costs (including clinical trials, extensive and repeated med chem, etc) are borne mostly by drug companies.

Fair data on this is hard to come by because the two main sources have clear conflicts of interest (academics and pharma industry publications). One study Derek covered before (data from 1995-2007) shows only 24% of drug scaffolds were first found at a university and transferred to a biotech or pharma for development [1]. You can break this down further to highlight any story you want to support ('university ID'd drugs more innovative' vs. 'pharma ID'd drugs help more people') but they key point is that combining all the US research leads to only 24% of drug scaffolds that make it to market.

I think everyone acknowledges that outside of finding the scaffolds and the basic biology, pharma is paying the vast majority of clinical trial costs. [2] gives a figure of total NIH funding of clinical trials at 10% of overall (e.g. pharma covers 90%).

I think an argument could be made that the NIH training grants (which pay grad students in the biomedical sciences) subsidize the work force substantially, and might have a higher impact than direct research grants. I couldn't find quantitative data on this with a quick search, but I think this is often overlooked in the discussion.

Finally, a less quantitative pieces make me think the impact of the NIH/government funding is overstated even given the above numbers. In my own field (microbiome), academic research has been almost inimical to the production of quality drugs. For every disease there exists a paper suggesting that a certain gut microbe changes the likelihood/severity/X about that disease. Academic labs have incentives to publish significant results fast, and in the microbiome this has led to a) abysmal signal to noise ratio with very high likelihood of failure to replicate, and b) an epistemic closure about what types of microbiome data matter and how they should be pursued as drugs that is totally divorced from the reality of how drugs are developed. Much of the knowledge base is polluted by low-quality research that has been done for the purpose of publishing. While the NIH spends ~40 billion a year on external research grants [3], I think you have to heavily discount this for the amount of just pure "grad student needs to graduate gotta publish" material that gets produced.

[0] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC10812233/
[1] https://www.science.org/content/blog-post/where-drugs-come-n...
[2] https://www.fiercebiotech.com/research/report-industry-not-n...
[3] https://www.nih.gov/about-nih/what-we-do/budget
I have always wanted a browser automation tool that taps directly into the accessibility tree. Plenty do supporting querying based on accessibility features, but unless I'm mistaken none go directly to the same underlying accessibility tree used by screen readers and similar.

Happy to be wrong here if anyone can correct me. The idea of all tests confirming both functionality and accessibility in one go would be much nicer than testing against hard coded test IDs and separately writing a few a11y tests if I'm offered the time.
Versaille treaty consequences were predictable, predicted and WW2 did in fact occur one generation later.

https://oll.libertyfund.org/titles/keynes-the-economic-conse...