skysight-inc/HackerNews huggingface dataset:
I am sure it will be as successful as do-not-track.
Yeah, this annoys me too. I actually find the "forced merge" (`--no-ff`) style even worse because you can never tell if you're looking at "real" commits or just crap because they couldn't be bothered to rebase.

Must say, though, I think "history" is completely the wrong way to think about version control. It's not about tracking history, it's about tracking versions. History is the crap, unrebased commits. Rebasing turns the history (throwaway, works in progress) into versions.
> 1. WHOIS isn't encrypted or signed, but is somehow suitable for verification (?)

HTTP-based ACME verification also uses unencrypted port-80 HTTP. Similar for DNS-based verification.
The Struggle over Digital Infrastructure – TechPolicy.Press
Wow, some pretty strong opinions here. Did somebody say Nazis?

Tech innovations are always a mixed bag, but there are some great ideas in this, like selective disclosure, where you don't have to reveal all your personal info (address on driver's license) when proving your age. Is uploading a picture of your physical credentials to pretty random web sites supposed to be a better solution?

I also think people deserve to have well described data and interactions, and their "wallet" should become a coherent place of organizing long term information. These standards create that possibility. Letting companies dominate and invent things to their needs as they go along is not a better solution.

It takes some strength from governments to do this properly, which some will point to as backward (witness the reaction to iPhone AI features). But companies have not found the end point of innovation, it needs to be kept open and directed by broad people needs, not the current shiny.
Boar's Head plant posed an 'imminent threat' years before listeria outbreak
I would clarify that as running code somewhere you don’t already control. The classic approach would be a malformed request letting them run code on someone else’s server, but this other pull-based approach also qualifies since it’s running code on a stranger’s computer.
Yeah, but you can't really discuss the topic itself, right?

I do think this is a weakness of Gerrit. It doesn't really capture "big picture" stuff nearly so well. At least on GH you can read the top-level comment, which is independent of the commits inside it. Most of the time I was deep in Gerrit doing review or writing patches, it was because the architectural decisions had already been made elsewhere.

I guess it's one of the tradeoffs to Gerrit only being a code review tool. Phabricator also didn't suffer from this so much because you could just create a ticket to discuss things in the exact same space. Gerrit is amazingly extensible though so plugging this in is definitely possible, at least.
The problem is, those addresses are completely interchangeable, nothing stops e.g. malloc() from allocating addresses somewhere around the very top of the legal addresses instead from starting near the .data's end. In fact, it seems that mmap(3) in general does pretty much that by default, so reusing address's top-bits is inherently unreliable: you don't know how much of those are actually unused which is precisely the reason why x64 made addresses effectively signed-extended integers.
Related:

We spent $20 to achieve RCE and accidentally became the admins of .mobi - https://news.ycombinator.com/item?id=41510252 - Sept 2024 (75 comments)
Mhh, I'm not so sure I would count that breach against them. It was an inside job from an employee who wanted to export money. I would guess most companies fail at that threat vector.

Thought that link made me curious, why did UI have peoples social security numbers? (I'm not American)
The comic is about re-inventing the wheel. What you propose "standards evolving" would be the opposite in spirit (and is what has happened with DNSSEC, RPKI, etc)
> I don’t even know what “project 2025” is

Then maybe you should actually look up what it is before throwing out a lot of falsehoods and conjecture about it.

> As far as I can tell it’s just a smear device

The smearing is coming from inside the house then. It is written by the people Trump appointed in the past and likely to appoint again. They're proud of their work, they've talked about it a lot.
> Your bank was terrified of losing access to US markets, so your bank forced you to prove you're not a US person to be super safe about US tax compliance

It's more that a lot of them got fines a decade ago because of that so now US citizens are just straight up banned from most European banks.
Nushell is plenty fast, works with structured data (also has a vi mode if you care, I do) and works equally well on Windows and Linux. You can install it with winget on windows and with cargo or the system's package manager on linux.

https://www.nushell.sh/
> If it were real, I’d know.

And yet you can't even bother to check out their website or listen to the leadership of the Heritage Foundation talk about it.
I'm launching a competitor for Iron Mountain. It's called DevNull LLC. Just send us your files! We'll take care of it don't worry.
Related: https://news.ycombinator.com/item?id=41215727
GitHub lets you do this, but only when writing a review for someone else. Not when addressing someone else's review, in which case your complaint 100% stands.

And yes, it absolutely drives me nuts, honestly. Why can I batch review comments, but not resolutions! Another thing Gerrit gets right! GitHub... Please...
> It's always exciting to see new approaches to code reviews - GitHub has its strengths, but it’s far from perfect.

This is nice sentiment, it's positive reception to an idea and polite to the incumbent.

But it's so thoroughly not a new idea. It's literally the workflow git was designed to support, and is core to many long-standing criticisms about GitHub's approach for as long as GitHub has had pull requests.

And I'm over here wondering why this idea took *checks calendar* over 15 years to graduate from the denigrated mailing list degens and into hip trendy development circles.

I thought we were knowingly choosing shit workflows because we had to support the long-standing refusal by so many software devs to properly learn one of their most-used tools. That's why I chose the tools I chose, and built the workflows I built, when I migrated a company to git. Nobody gets fired for buying IBM after all.
+1 for jj

It simplifies my workflow a lot when compared to plain git. I love not having to track and stage manually, plus undo is godsend.
He's talking about big money, as in six figures, and as a gift not a loan, no strings attached. This isn't stingy, it's extraordinarily generous, with a little prudent self-defense provision attached. With a shark like that in the family you don't need teddy bears.
My SE battery will cost $80 to replace, but since I only paid $120 for the phone it's not a good deal. I'll just wait a bit and get another used SE for $120 when the battery life gets too annoying. I doubt that many other customers are ignorant or irresponsible.
The Podcast Index
Telescreen works both ways. That could come in handy if you truly have nothing to hide, or I suppose if what you are hiding must be within His tolerances.

Chalmers sent a copy of his timeline to Premier Park Ltd, the company that charged him with the crimes, and the defendant was able to prove his innocence. The charges against him were dropped.[1]

the lawyer met with the detective in order to show him screenshots of McCoy’s Google location history, including data recorded by RunKeeper. The maps showed months of bike rides past the burglarized home, NBC News reports.[2]

1: https://www.phonearena.com/news/google-maps-keeps-user-from-...

2: https://news.sophos.com/en-us/2020/03/10/google-data-puts-in...

3: https://www.youtube.com/watch?v=d-7o9xYp7eE
Hi @lvncelot

I am Tal, one of the developers of this extension.

See our FAQ regarding your concerns about the PR description, and the review process:
https://pr-agent-docs.codium.ai/faq/#answer1

In general, PR-Agent is designed to assist, not replace, human reviewers.

Many of the flows and processes we deployed are aimed at meeting this goal.
We try not to overclaim, or overpromise.
PR-Agent should not be the sole reviewer of a PR.
We believe it can definitely enhance and improve the reviewing process.
What is the speed with just one AP per floor?
Whatever xkjyeah meant when he said it.

Likely run by Russian intelligence services or their catspaws and therefore heavily monitored and logged.

US intelligence likely run their own tor nodes as well.
Technically obfuscation is perfect until it's found. And many times it's never found (the same is true for passwords in general, you could argue that's a form of obfuscation). For example who would ever find a compressed file that masquerades as completely unrelated and harmless looking plain text that was made with a custom dictionary? I think it's more about how good the obfuscation is rather than it being used at all.
Termux is an incredible project. Could not believe it the first time. You can even run a web server etc.

One challenge is to evolve the terminal / text paradigm so that useful tinkering becomes possible/confortable on the smaller mobile devices. It doesn't help that these devices are being reduced to optimizing finger swipping ("software" keyboards etc.) and little else.

And of-course who knows where it would lead if it was actually a first class member of the OS...
> born in 2006

not to be pedantic, but how do you miss something you never experienced to begin with?
> C++ code ... Now show a benchmark where the error rate is 50% or more.

C++'s policy of "exceptions should be exceptional" isn't a good answer to this either, and it introduces a lot of ugly edge cases when writing code. For instance, you have to make the judgment call of whether to handle commonly-expected errors as return values or exceptions (eg. checking if something exists, and returning it if it does).

In many cases it is impossible to make the right call. For instance, a "file not found" exception is no big deal when your library is being used in a GUI app where user actions are relatively infrequent, but if your library is used in a high-traffic server or for batch processing, suddenly all those "file not found" exceptions are eating a lot of CPU.

In general, you simply can't predict when users of your C++ code might find a case where a code path spams exceptions, tanking performance.

This problem also exists in other exception-using languages like Python and C#[0], but these languages tend to be used for less performance-intensive purposes (especially Python) so it doesn't come up as much, and generally exceptions are used even for expected errors.

[0] https://stackoverflow.com/questions/891217/how-expensive-are... (C# exceptions are 30,000 times slower than return codes)
This is such a weird response. Do you collectively interview for other jobs? No. Would you tell any other union this? No. Collectively bargain for your current job and raise the standards for everyone now and in the future. I don't know why tech is so hyper-individualist.
BBBbbbbeeeeccccaaausssseeeeEEEE!!!!
by this logic, every picture you'll ever take with your phone would be considered semi-public as phones are Internet connected.

While I wouldn't have too much of an issue with that, I'm pretty sure I'm a minority with that
Ability to split words into letters isn't architecturally limited - it's just a matter of training data, and made easier by the fact that the input is tokens representing short letter sequences rather than words of which there are more.

It's quite possible that more recent training data deliberately includes word/token -> letter sequence samples, but even if not I'd expect there is going to be enough spelling examples naturally occurring in the training data for the model to learn the token (not word) -> letter sequence rules (which will be consistent/reinforced across all spelling samples), which it can then apply to arbitrary words.
What about the fact these are all pictures of airports? Does that control for "any time it's not flat" or are you talking about really, really flat? Or, given your mention of angles, do you mean flat as in perpendicular to the observer?
User base #1 wants free (as in freedom and free beer) and open source software. Company wants to cater to them to generate goodwill.

User base #2 wants fully featured, fully supported, easy to use software, and doesn't care about the source code. Company wants to cater to them to make money.

Ultimately when the VC money runs out both these aims are going to be in direct conflict with each other, and you are going to have to pick a side. Companies pretty much always start by focusing on 1 (OSS contributors, enthusiasts, indie devs) and switch to 2 (corporate customers) over time. I have lost faith that any such project can walk this line successfully and stay true to group 1.
Is 7 days a week the new norm (for YC)?
I've worked for 2 major YC companies and done some one-off/contract work in recent years at a few others here in SF. Really like the startups coming out of YC.

I had to unfortunately voluntarily quit the last on-site contract due to it being 7 days a week (I tried to take off a Sunday, didn't work), on top of a requirement to be there until 8-9pm daily and occasionally pull all-nighters when there are sales demos (at the office until 7AM the next day - then stayed at work for the next day). I tried to stick it out, and even though I consider myself to have the best work ethic of anyone I know, being at an office nearly 24/7/365 to do basic React work with constantly changing directions/requirements felt pointless to say the least. It wasn't like we were building something with a clear goal in mind - and the founders did nothing. They would shoot hoops with the nerf basketball, leave for 2-3 hours at a time, come back with food, talk, etc.

Anyway, so I quit to find another gig, and in my first interview (YC company, just raised) the CEO says "We work weekends, so it's 7 days a week, just want to make sure that's ok with you".

So my question to the YC community is:

Is this the new norm for YC startups?

YC founders who are requiring 24/7/365 work:

What do you feel you're getting out of it? Better output? Or is it more about a person completely dedicating themselves to you?
I think the US was very concerned at the time that Chile under Allende would become a client state or a vassal of the Soviet Union similar to Cuba. The US still upholds the Monroe Doctrine which states that any intervention in the politics of the New World by foreign powers is a threat to the US. The US does not want any foreign interference or potential military bases in its 'backyard'.
In China, Retiring as Early as 50 Has Been the Norm. That Is About to Change.
S3 isn't a big deal. It could be you're thinking about it wrong.
Humans tend to like to stay at there they are, in the tech context especially. It takes a long time relative to the length of a career to learn new systems, make new connections, and achieve some level of independence at a new job. There's also relatively few jobs that at least pretend to be somewhat beneficial to the world while paying somewhat competitive salaries (I can't think of any that I've worked at). Then there's relationships you may have developed with your colleagues.

Finally, if everyone just leaves their jobs without trying to improve them, won't everyone run out of places to jump to eventually?
https://www.wsj.com/world/china/china-faces-the-inevitable-r...
Google &c already own most people's data. This makes it possible for it to be portable and network based.
How do you measure this personal resistance in the field notorious for its snail pace of change?

(also keyboard protocol isn't top notch, don't know about the image one)
The 2-year delay applies to all of the codebase in my experience, not just the proprietary features. Users potentially have to delay security fixes for 2 years to avoid copying non-OSS code.

Fair source is a poison pill masquerading as OSS-friendly, just like BSL and friends. It's not useful in practice, and I don't think there are any examples of folks successfully using/forking BSL/fair-source code that is now OSS. That's by design.
A) your resume should not be your first entry point to a job.

B) your resume should be tailored to the particular job. So you’d want to gauge whether it’s valuable on a case by case basis.
also, there's only so many kiosks available just like there's only so many human staffed registers. This means there's potential for waiting in line. If every one has an app, there's no line. Ever. Well, except for when you show up to pick up your order and have to wait for everyone else.

Of course all of that is just the icing on top of the data harvesting cake
The point is that, ironically, new standards may have been a better option.

Bolting on extensions to existing protocols not designed to be secure, while improving the situation, has been so far unable to address all of the security concerns leaving major gaps. It's just a fact.
Gitlab Handbook: Acquisition Process
My understanding is that this uses a reflective display (like an old calculator), not a transflective display.
> even 1 meal of McDonald chicken nugget is bad for health

I think this isn't true in any meaningful way. Absolutely, making it (or any fast food) a big component of your diet is not going to promote good health. The more often you eat them, the more likely it will have an impact on your health, mostly from the increased sodium and trans fats. Consistently living with high blood sugar and higher LDL will increase your bad health outcomes. But in the example of the parent, it's not just the negative consequences of consuming fast food, but the negative consequences of not eating anything else (so lacking in many micronutrients).

The good news is this makes the marginal impact of one meal over your lifetime is absolutely miniscule. It's not like each meal increases your risk of mortality a linear amount.
Unless of course you work in a wild-west codebase where you can basically tell who wrote what code because everyone has a distinct style and they never converge. ugh
Mile Method
>> Government pays IT fairly well compared to 95% of all IT jobs. It’s not paying FAANG wages, but more time off, less overtime, and pensions make direct salary comparisons misleading.

> No it definitely does not. A GS-15, whose job duties would be equivalent to a CTO or principal engineer in private sector, makes _at least_ 3x less than the going rate. You are correct in that gov benefits are incredible.

What's the government pay for a senior engineer, and what's your number for an equivalent private sector salary?
Movie industry touts takedown of " largest" pirate streaming ring
That is so neat. Good job guys!
We didn't see it or demote it—it set off the flamewar detector. I've turned that off now, in keeping with the principle described here: https://news.ycombinator.com/item?id=41511529.

p.s. @dang is a no-op - I only saw this thread because I was doing our standard review of the flamewar detector. If you want guaranteed* message delivery, hn@ycombinator.com is the only way.

* Well, mostly guaranteed. I assume there are a few that fail to get noticed in the spam bin, though we check that pretty carefully.
I think that PP is generally talked about backwards. Everyone says that the least experienced programmer should drive while the senior programmer talks. When I was an intern 25+ years ago before pair programming had a name, I sat beside the grey beard who did the typing. I watched him and tried to keep up. For the first couple of weeks, I contributed nothing, but once I started to understand the code and his style, I was able to start seeing simple things, like reminding him to do a null pointer check, and then I started to see more and more stuff and I was able to contribute in real time.

I think this worked because 1) he was comfortable with me staring over his shoulder with neither of us talking and 2) I was comfortable with just watching an learning. I've tried this style with my junior programmers, and I'm too anxious being quiet and coding while someone watches me, and most juniors are also too anxious to prove that they're paying attention so they have to talk, and that breaks the flow.
If there is a comment is should be important enough to read it every single time you are near that area of code even if looking for something else in the file! They should be a reminder of something important and not obvious in the code - otherwise I'll just read the code.

Note that I distinguish comments from API documentation even though they are often both in the same code and use the same comment syntax.
I understand why people assume we do that, but actually we do the opposite—that is, we moderate less when YC or a YC startup is part of a story. There is plenty of past explanation at https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu....

Note: we still moderate such threads. We just do it less than we otherwise would.
These "wallets" are badly named, they are about credentials, not money. Think of a wallet of identity cards (driver's license, etc).
> Unless the company needs us more than we need it and we can have both better security and higher salary?

Employees typically only have such a strong negotiation lever in good economic times, which I guess is currently not the case.
Most of Garmin's smart watches use MIP transflective displays but that's slowly being phased out for AMOLED
Isn't level 5 under any circumstances? Have we seen how Waymo handles a snowstorm?
The lack of transflective and reflective display in common use is a mystery to me too -- while e-ink dominates on power usage and contrast, reflective and transflective displays (potentially) allow much greater pixel density and refresh rates, and the power requirements keep going down to the point where I think that they would be competitive.
Create a free Llama 3.1 405B-powered chatbot on a GitHub repo in <1 min
The problem isn't lack of a solution, we've had DNT for years. It's that the people who want to track you generally don't want to make it easy for you to opt out.
Mnemonic for the number of days in each month
What percent of the rest of the population is confused by not using red & green?
Seems like a trivial problem to me.

If the graph is directed, do an SCC decomposition in linear time using a graph library and then any SCC with size more than one has at least a loop, trivially extracted by following any edges in the SCC.

If the graph is undirected, compute a spanning tree in linear time using a graph library and then any edge outside the tree forms a loop, again trivially extractable from the edge and the paths from its endpoints to their least common ancestor in the tree.

Since those algorithms are already asymptotically optimal, it's just an engineering problem of finding the solution with the best constant factor given the precise data structures and goal in question.
Sometimes you really want to make a TUI videogame but can't think of a good roguelike design so you just start hacking away at what you're curious about.

I can see this tool being a fun introduction to many things you would normally want to keep as separate tools you can glue together, and was probably also just a chance for them to exercise the TUI library they also created.