skysight-inc/HackerNews huggingface dataset:
If you don't assign CVE numbers to every security-related flaw, no matter how minor the flaw may be, you must come up with a way to draw the line on what flaws get CVEs and what ones don’t. That would be worse in pretty much every respect.

As it is now, I can look at a CVE and determine for myself and my organization whether it something we need to care about. I’d rather that decision stay in my hands, not someone else’s.
Yes, this is the nuance so many of these discussions miss.

Keep a close eye on your local UV forecast, avoid peak times, and you should be pretty good.
You're also not entitled to free content.

If this was a project to let you watch Netflix or ESPN without a subscription the discord around it would be much different.

Is journalism really less valuable than Stranger Things.
> I have no idea how you can actually test everything.

While a worthy goal (if unattainable sometimes), in this case, folks would settle for "test anything", which would have caught the regression.
>The half-life of the software I work with is maybe 3-4 years, and during major projects many things get rewritten or replaced.

Games decay quickly. But Games engines ironically enough iterate much more slowly than many other types of software. You'd be surprised how much of UE5 still has UE 1 code at its base.

The main exceptions to that is the renderer, and even then: openGL still isn't out the door yet. you can work on maintaining the Vulkan/DX12 backend for decades to come. Thinking of the half life as the renderer instead of the entire engine makes this task much less daunting.
Vrsfml: Emscripten-Ready Fork of SFML
My issue is not explaining how the code work. My issue is understanding why the code exists at all.

The default workflow is to follow the commit history until I don't get to where and when the code in it's current shape was introduced. Then trying reading the commit message that generally link to a ticket and then acquire from tribal knowledge of the team why it was done like that. If it is still necessary, what can we do today instead, etc...

And similarly when designing new code that needs to integrate on existing piece of code... Why there are such constraints in place? Why was it done like that? Who in the team know best?
I have sub to Claude now due to projects/artifacts (caching really) but aider with new gpt4o works well
> Off leash even, I have always wanted to give my dog the most freedom possible. To heck with human rules.

I regularly meet people like that when I'm camping. I find it pretty frustrating. So many rules like that have basis in reality, they are not just meant to annoy.
It's not standardized. And putting notifications on or right next to a control you're INTERACTING WITH is not "arbitrary" at all; you must be looking at it, because you're using it.
> What would that "something other" be?

Depends. Where is the problem? Is it the quirkiness of SQL? Perhaps something like QUEL or Datalog would yield better results? Is it declarative programming that it struggles with? GPT, for example, seems to be optimized for Python in particular. Perhaps an imperative approach is easier for the LLM to understand? It doesn't even have to be a language suitable for humans. Perhaps it would fare better with something like SQLite's byte code language?

> If the goal is to talk to a SQL database

While being able to talk to an existing SQL database would no doubt simplify the problem in a lot of cases, which is of merit, I doubt that is the actual goal. The user doesn't care about the technology, as they say. Getting the expected results out of the database is undoubtedly the actual goal.

SQL as a target is all well and good if it works reliably, but the claim was that it doesn't. If some other target performs better, there is no need to cling to SQL. It is merely an implementation detail.
No one will be getting a promo for solving this problem.
We love that feature too and use it quite a bit ourselves!

> Not quite sure if this should be a separate category?

We see ourselves at the intersection of generic browser-automation agents and generic coding agents. MinusX integrates deeply into jupyter/metabase (we had to do a lot of shenanigans to get the entire jupyter app context) and has more context than RPA agents do today. It is possible that eventually all these apps will converge, but we think MinusX will be more useful for anything data related than any of them for the foreseeable future.

To paraphrase geohot, we think that the path to advanced agents runs through specialized, useful intermediaries.
esghound laughed when i told him spacex will launch 4/20. in reply to a three hour podcast

space is the realm of government. all this is talk that will get nowhere
There is another brand that works like you want it to, Breville smart toaster. It generally gets the toast to a consistent toastiness, but if you want a bit more you just twist one of the two wheels on it
Not exactly that, someone can change the unit used to display the temperature for authenticated users.
Very few people use the recommended amount of sunscreen (it's more than you think) and even when you do, no sunscreen blocks 100% of the photo-aging UV energy that hits your skin (note: still wear sunscreen - absorbing 5 or 10% is better than 100% of the radiation you would otherwise absorb). This also means that (contrary to what weird sunscreen-truthers will tell you) wearing sufficient sunscreen does not prevent you from producing vitamin D - sunscreen is not the same as never seeing the sun.
I was surprised by how many "that's OK" answers this got. All known secrets should be either masked or tokenized, which means replacing them with either asterisks or an irreversible hash of the original value.

It's a security bug if one cannot configure the masking or tokenization process. One should be able to specify the names of sensitive variables and regular expressions for known dangerous-to-log strings.
I have worked both at Ruby and Python shops.

The average Ruby dev works at a mid to small sized company, probably a startup, and they are usually contributing to some proprietary SaaS product on top of Rails. Progress is always happening in the Ruby / Rails world but it's really slow.

On the other hand, Python has three popular web frameworks and a huge data tooling ecosystem that just keeps getting better. It's just easier to get things done with Python these days and the gap is so huge that I can understand OP.
Don't lawyers withdraw motions all the time?
Cursor is electron/vscode based. Zed uses a custom built rust UI and editor model that gives 120fps rendering. (Or was it 60fps)

It is really smooth on a Mac with ProMotion.
Victoria Metrics launches its cloud offering
Can you plugin other LLMs
Ala: https://dublog.net/blog/open-weight-copilots/
A message log can also be visible...? The only differences between messages in toasts vs messages in a log is that toasts control the user rather than the other way around.
Skin tone is modifiable, within some limits.

If you maintain a base tan (equivalent to 2 hours in the sun or 10 minutes in a "standard" tanning bed, per week), the melanin is highly photoprotective for any additional UV exposure.
Your product idea is cool, the actual sell-able data to me, from a data scientist perspective, that is actually actionable (corp words!), is nil. I can't even figure out what you actually collect.

Also, your website runs like a dog, and make me not want to find out. It runs like a dog displaying dots ... on a sphere. With like, four (4), other images of note. Seriously, talk to one of these WASM demo people, this is sad for a company that posts here. "Book a Demo" with somebody that can write WebGL. I booked and canceled an appointment on Thu (4) Aug (8) 22, 2024 8:00 on your incredibly vague G. Calendar signup. It's a 42 joke. Learn WebGL.

And while you're at it, stop making websites that write 1000x / $ and "Book a Demo" without even vaguely mentioning cost. Give me a $100,000, I'll give you a $100. This sounds like an excellent business from my perspective. How bout you hand me your bank account, and I'll hand you $100.
There's two ways to make extensions to Zed, providing context for AI. In the post they show off making a Rust -> WASM based extension and also mention a server based model. There's also a third option -- Zed is open source. You don't have to use their auth, it just makes collaboration easy.
I'm 100th as talented and would consider accepting a $10M investment.
I only had a quick skim so far, but I did not feel like the article gave a firm enough rationale?

I have seen scenarios in Texas when there is seemingly no other infrastructure or geography that could explain the over building.
> I honestly don't know why the Germans are trying to turn an old Chain Home radar station in the Shetlands into an orbital rocket launch site.

Well, they aren't. RFA is just one of many customers, which also include British and US companies. SaxaVord spaceport is operated by a Scottish company and there's no connection to anything German other than some customers being German companies. Lockheed Martin UK and Californian ABL Space Systems are operating from there as well.
Like other apps that use SDL, this (Pragtical) is blurry on Gnome with the scale-monitor-framebuffer experimental feature enabled and scaling set to some value other than 1.00.
Its use case is limited and even in those cases where is it well suited, you have to be ready that its purpose is to at best inform, not educate.
Avoiding these kind of leaks is one of the core motivations behind the Invariant analyzer for LLM applications: https://github.com/invariantlabs-ai/invariant

Essentially a context-aware security monitor for LLMs.
This is awesome, but still requires that apple gets their act together and expose/document their private objective c apis
>His “Little Exterminator” operated through a delicate watch mechanism that moved a tiny saw, releasing a chemical that smelled like cayenne pepper, killing anyone within one hundred feet.

A 100 foot lethal radius sounds utterly unbelievable, especially in the 1800s. What could this be? Where did he procure it, how did he work with it? How did they know it smelled like cayenne if it was so incredibly potent? Come to think of it, how was the (suspiciously round) number derived? Did this guy carry this impossibly deadly contraption around, or was it perhaps on a shelf in his shop to be knocked over by a careless punter? How did the other shops on the street feel about this?

No, I call bullshit. This is uncritically repeated advertising copy made up by a known conman who made money selling weapons to terrorists. Dollars to donuts he pulled a Doc Brown and his "Little Exterminator" was nothing of the kind.
So...

> Q: Why are Texas interchanges so tall?
>
> Frontage roads need grade separation, adding a layer.
> Texas has lots of frontage roads.

OK, I buy that Texas has more grade-separated interchanges on average... but I'm not seeing how that turns into "Texas has more higher interchanges" which is what it feels like that question is asking. Frontage roads don't generally exist where 3+ highways intersect, so that shouldn't be relevant for high ones, it just raises many 1-high to 2-high.

Or do they, in Texas? Or is it just that Texas has one famous one and people extrapolate that to mean the whole state is absolutely smothered in interchanges, until it looks like a scene from The Fifth Element?
> It is believed to be only nuclear reactor built in a school environment and he showcased his work at the Cambridge Science Festival recently.

Definitely not, there's a student-built and maintained reactor at the Faculty of Nuclear and Physical Engineering in Czech Republic since 1990s and a second one recently finished: https://reaktor-vr1.cz/
Yeah but so is I sent a message to s random person about our business vs I sent a message to one of our suppliers
Elm allowed only certain packages to use some restricted apis as it was seen as a clique and rubbed people the wrong way.
Imagine you life for a pack, and to defend that pack, you have to bring the part that is most sensitive - your noose, towards the enemy and bite it. And its okay- you are living the rocket life anyway. Fast in, fast out, all for one, one for all.
If the "toast" can persist through that behavior, so can feedback positioned more sensibly. How does putting something on the other side of the (potentially huge) screen solve that "better?"

Not to mention that, if the operation fails, isn't it likely that the user will want to re-try? And that'll require access to the original control in all likelihood.

If the user scrolls away and the information is important, use a modal alert.
As usual, correlation != causation. In this case, higher exposure to sunlight may just follow generally from more physical activity, and correlate with a healthier lifestyle. Asking the statistics champs here if such effects have been taken into consideration?
I think the problem is the quirkiness on the English side, not the SQL side. You could translate datalog to SQL or vice versa, but understanding intention from arbitrary english is much harder. And often query results must be 100% accurate and reliable.
If it's just about keeping a link to a handful of content creators, and you aren't a multiple-hours-per-day yt addict, there is already a nice solution for that, which universally works for all web resources and is well supported by all browsers under the sun.

I'm sure thay's not ideal (e.g. not for Google trying to understand you better) for the addicts, but for the other ones, this can be the perfect solution.
I get the frustration with this workflow too. This is where having all of your issues in Git would be great, but alas no one wants to collaborate in ticket comments via Git commits...

Inevitably the issue tracker gets moved/replaced/deprecated, and so all of that context disappear into the void. The code however is eternal.
Great idea. Definitely will be using this for my next doggo!
Google's systematic, quantitative evaluation of AI coding assistance tools disagrees with your personal and anecdotal findings (which agrees with many other similar studies):

https://research.google/blog/ai-in-software-engineering-at-g...
Surely it is about not allowing others to have access to the data…
"Lossless" compression is based on information that can be discarded without negative consequences because it cannot be perceived by humans. The data is real and there, you just can't see it or hear it. If you can quantify what information humans can't perceive, you can discard it, leaving less data and possibly more amenable data for a subsequent lossless compression phase. MP3, JPEG, MPEG all benefit from this understanding of the human perceptual system.
Sublime Text is likely closer to what you're looking for.
And yet the "join" button is filled in without being joined. Let alone, the icons on the video player which have their own varied little philosophies
> the best children's books are also fun for adults!

Also Kipling's Just So stories. My eldest loved me to read them to him and it was no chore at all.
Perhaps https://en.wikipedia.org/wiki/Human_visual_system_model , https://en.wikipedia.org/wiki/Psychoacoustics
The astral team is definitely doing great work, and it's wonderful that these tools are permissively licensed, but what happens if astral doesn't work out as a business?
Invariant CTF 24: Fool an AI Agent to Extract the Secret Password
AI pioneers want bots to replace human teachers – here's why that's unlikely
Any benefits if you compile your own code base?
> 37 bridges and more than 700 columns are crammed into this one spot to keep the roughly half a million vehicles flowing in every direction each day

Truly pitiful numbers for a project of this scale lol.
What programming languages do you mostly work in?

I've been wondering if the benefits of AI-autocomplete are more material to people who work in languages like Python and JavaScript that are harder to provide IDE-based autocomplete for.

If you're a Java or TypeScript developer maybe the impact is reduced because you already have great autocomplete by default.
These publishers are lucky to get a deal from Western AI companies. I doubt Chinese AI companies will give a f'ck. In the age of China-US AI competition, this will be one advantage for Chinese AI companies.
sure, but if it was good more people was use it
> I want to be able to highlight some block of code, ask the AI to modify it in some way, and then I want to see a diff view of before/after that lets me accept or reject changes.

Zed does that - here's a clip of it on some Python code:

https://youtu.be/6OdI6jYpw9M?t=66
> It’s like everyone lost their collective mind and forgot the lessons of the past twenty years.

I think this has it backwards, and actually applies to every safety and security procedure in any field.

Only the experts ever cared about or learned the lessons. The CEOs never learned anything about security; it's someone else's problem. So there was nothing for AI peddlers to forget, they just found a gap in the armor of the "burdensome regulations" and are currently cramming as much as possible through it before it's closed up.
> AI autocomplete is just a toy

I disagree, when I'm writing code and it just autocompletes the line for me with the correct type with the correct type params set for the generics it saves me the mental effort having to scroll around the file to find the exact type signature I needed. For these small edits it's always right if the information is in the file.
As I’ve said in yesterday’s thread[0], contrary to many others I find the AI integration in Zed to be extremely smooth and pleasant to use, so I’m happy they’re doubling down on this.

However, personally, I prefer to have it configured to talk directly to Anthropic, to limit the number of intermediaries seeing my code, but in general I can see myself using this in the future.

More importantly, I’m happy that they might be closing in on a good revenue stream. I don’t yet see the viability of the collaboration feature as a business model, and I was worried they’re gonna have trouble finding a way to sensibly monetize Zed and quit it at some point. This looks like a very sensible way, one that doesn’t cannibalize the open-source offering, and one that I can imagine working.

Fingers crossed, and good luck to them!

[0]: https://news.ycombinator.com/item?id=41286612
HYSA varies with interest rates
Let me be very direct - what's the strength over the competition, e.g. Cody? The fact that it's its own text editor? I'm seeing the assistant emphasized but that just looks like Cody to me.
I hope that in a few years we look back at this era of "prompt an LLM for a shell command and instantly run whatever it spits out by pressing enter" with collective embarrassment.
But that's basically what fixed point is, no? Half pixels is fixed point with a single bit for decimals. Quarter pixels is two bits, and so on. I think the disadvantage is you now have to think in a strange unit that isn't intuitive. For my game I tend to think in screen sizes for things. Thinking in screen size*factor would be harder I think. Fixed point is basically just doing that for me and hiding the details really.

To be fair, rereading the post I realize I did make it sound like you would only need this for positioning sprites. I'll see about rewording it.

Or maybe we're both talking about the same thing and you're taking a different approach. That is fair too.
As cool as the engineering is, I avoid such interchanges at all costs since the being so high up gives me panic attacks when driving...
Has any long-term Emacs user delved into Zed and ported the cool features yet?

Don't take it as sarcasm, I am genuinely interested. I think Emacs' malleability is what still keeps it alive.
I can't put my finger on it just yet, but I have a feeling the average content creator isn't going to benefit from all this deal-making.
AI assistants just slow me down. Its a very rare case i find them actually useful. I am generally concerned by the amount of devs that seem to claim that it is useful. What on earth are yall accepting.
For those that want to try it, and have a rust development environment installed, the following runs Zed on Windows. (The editor part at least, I haven't tried the collaborative functions).

git clone https://github.com/zed-industries/zed
cargo run --release
> One of my programming mantras is "no black magic." If I don't understand why something works, then it's not done.

so many ppl nowadays don't care about knowing how thing works, they just push shit and cross the fingers.
Reviewing the Amazon Search Experience
This looks cool!

Feature requests: have something like aider's repo-map, where context always contains high level map of whole project, and then LLM can suggest specific things to add to context.

Also, a big use case for me, is building up understanding of an unfamiliar code base, or part of a code base. "What the purpose of X module?", "How does X get turned into Y?".

For those, its helpful to give the LLM a high level map of the repo, and let it request more files into the context until it can answer the question.

( Often I'm in learning mode, so I don't yet know what the right files to include are yet. )
There are no ip addresses in i2p.
It also perverts incentives such that no utility will communicate perhaps helpful information to other utilities or government when said information can leave them liable for fines.

Until there's some kind of hold-harmless agreement, the various industry & government security information sharing groups can only be of limited effectiveness.
The Zed configuration panel includes tools for adding an Anthropic API key, a Google Gemini API key, an OpenAI API key or connecting to a local instance of ollama.
This is great feature, but targeted mostly at junior developers who don't yet understand how particular library or framework work. But when I read the code, I spend most of my effort trying to understand what did original developer meant by this, and LLMs are not yet very helpful in that regard.
At least with fashion / shoes its something you own / more or less have full control over. With the Roblox it all feels very ephemeral.
The local compute problem is a cost problem, and most people do not have the hardware necessary and judging by trends this will continue for another ~decade.
For average office worker, during regular week it probably makes no sense to avoid exposure. On other hand sun bathing or tanning is probably not good for you either.

Sensible moderation makes most sense to me. If you are extended periods in sun cover yourself or use protection. But no particular need to avoid it in short periods.
Learned a lot that gets you a paid position at an engine company that makes a lot more than 99.99% of indie games (probably makes more than a gameplay programmer too). "When in a gold rush, sell shovels".
nvim has a really good cursor integration plugin
https://github.com/yetone/avante.nvim
Right, LLM integration should be a huge boon for junior developers.
So you are happy to have 1 million cves to look for per year per product?

Unless there’s a minimum standard it becomes noise, and the real CVEs are lost.