skysight-inc/HackerNews huggingface dataset:
When I am using Chrome on the phone to read the Google Discover news feed I am often horrified how shitty the experience is. Popups, cookie warnings, almost no article is visible initially, and some of them actively make it hard to scroll to the text. It looks like there is no use friendly news site left in Google's feed. I prefer LLM slop, thank you very much. The only attractive proposition is the fresh and targeted feed. Probably Google is not allowed to offer a reading mode that hides the cruft.
> Finally, cryptographic warnings are being eliminated. Historically, as end-to-end encryption was rolled out throughout Matrix, not all apps verified the identity of their users, triggering confusing and unactionable warnings to users. We are now shifting towards only letting devices whose ownership has been verified by their owner participate in conversations, killing those warnings - as well as other underlying protocol changes to eliminate warnings.

As the operator of a small instance for family and friends, that's an important topic. The very frequent use case is : "I lost/replaced my phone and didn't save my passphrase". Does that mean that the account would be lost ?
Premature architectural optimization.
Not exactly what you want, but https://www.flightconnections.com is nice to learn "where I can fly from airport X in 1 hop / 2 hops".
Could it be preview and hosted on https://static.app/ ?
This is how they sell new phones. The grand majority of new features don't require the latest hardware, but artificially restricting it increases sales of new phones. None technical people can't usually tell the difference between hardware and software clearly enough to understand this nasty trick.
DH + HMAC on its own doesn't give you authentication, anyone can establish a symmetric key. It's possible to build authentication on top but it requires pre-shared data or PKI.
Sorry can you elaborate on this? What part is propaganda?
Ask HN: Is Programming Dead?
On X people claim 100s of thousands of tech layoffs, ghost jobs, a dead industry. I don't see this anywhere else. Hackernews seems alive, wellfound seems alive (though impossible to get an interview) recruiters seem alive, though seemingly have no jobs. What is going on? What is reality? I am asking this on X and dev.to as well. Are we being silently replaced?

Edit:

I see posts like this often on X:
https://x.com/Scobleizer/status/1836662119770849535
> a system composed of a bunch of microservices but the team size means that you have more services than people

The thing I keep trying to get people to recognize in internet discussions of microservices is that they're a solution to the organizational problems of very large companies. The right size is one "service" per team but keeping the team size below the "two pizza limit" (about eight people, including the line manager and anyone else who has to be in all the meetings like scrum masters etc).

If your website needs to scale to hundreds of developers, then you need to split up services in order to get asynchronous deployment so that teams can make progress without deadlocking.

Scaling for a high number of users does not require microservices. It does as you say require multiple instances which is harder to retrofit.

> additional negative points for it being Oracle

Amen.
The vulnerability has been patched, but I suppose the browser still makes a firebase query for every website you visit?

That's pretty bad, whether or not they track these requests, just seems wasteful.
Yes, unless you incorrectly assume “source is available” directly maps to “is open source”.
It hasn't existed for so long! Jeez, kids these days. As a movement it's really only about 30 years old, and that in two separate phases:

1. The GPL/GNU period. The software is mostly called "free software-as-in-freedom". The community is small, volunteer driven, highly ideological and focused primarily on cloning UNIX for commodity PC hardware. Most developers aren't using this stuff at all and work with entirely commercial toolchains.

2. The Apache 2 period. The software is mostly called "open source". The community is huge, frequently driven by corporate donations, not particularly ideological anymore and focused on developer tools / libraries rather than operating systems and desktop apps. Developers now regularly incorporate open source libraries into their commercial programs.

The transition was slow but I'd pick 2008-2010 as the crossing over point. Before that time if someone said they wrote open source software you'd make a weak assumption that they worked somehow on Linux related projects in their evenings/weekends. After that time you'd probably assume they were writing some library and had even odds it was their job.

It's important to remember that 2008+ is ZIRP territory. Money was "free" for investors, so investment piled into a lot of stuff that often wasn't revenue generating because there was nowhere else for it to go. This era was also shaped by a historical aberration - a handful of hyper successful advertising companies whose founders were able to remain in control whilst still selling much of their stock thanks to dual voting classes. Modern developer's understanding of the open source ecosystem, along with their expectation that powerful tools are all free, is very much shaped by the combination of Fed policy and a handful of super rich patron companies that weren't under any pressure to return capital to shareholders.

Thing is none of these factors (ideology, free money, stock with dual voting classes) is historically normal or arguably sustainable over the long run, whereas ordinary capitalism is. So we might well see a reversion to the mean where things like compilers, libraries, operating systems etc become commercial again as relatively high interest rates pull funds out of tech and the supply of Stallmanists devoted to the cause of desktop GNU/Linux continues to dwindle. The recent death of a man who reverse engineered a lot of networking hardware for Linux is an example of this - how many 25 year old hackers want to do that sort of thing any more? They're all writing JS frameworks that only work on AWS these days.

If that does happen though it'll be quite slow. I think the industry would need a kind of Steam for libraries to emerge first, and it's pretty unclear what the next equilibrium phase looks like.
Millions also got by without electricity before the grid was developed. It did not keep them from becoming great men. But it did keep them from technological progress and kept women chained to the household.
I have trouble even just veryfing that on their page. So far its an instant turnoff, when I cant even find basic info.
No such issue on my end.
Sorry random question - do vector dbs work across models? I'd guess no, since embeddings are models specific afaik, but that means that a vector db would lock you into using a single LLM and even within that, a single version, like Claude-3.5 Sonnet, and you couldn't move to 3.5 Haiku, Opus etc., never mind ChatGPT or Llama without reindexing.
Draftly
Seems like ESS ist their managed solution, which uses Synapse but with an admin UI.

Thats at least how I understand it, because to "get" ESS you need to fill out a contact form.

https://try.element.io/get-started
Why would paypal email you to call them ? If they want something from you they should either call you or email it to you or show it in their portal.
How does one browse rooms on a server using Element X for Android?
What prevents a state actor to launch hundreds of ballistic missiles at you?

Is this a threat? Sure, but I don't see how it's that different from other more direct explosive threats.
[...] they're there for a reason [...] Yes it takes weeks/months to get access, then it takes weeks/months to get access.

Not exactly. Everyone has to evaluate for themselves how legit the rules are and act accordingly. More often than not, boilerplate rules are thoughtlessly applied and there is no pragmatic process to handle the exceptions to those rules.

Admittedly, it's a risk to break such rules. One has to be an adult and use good judgement. It's OK, most of the time.
> Bear in mind that "invasive tracking" is also used for protection of the vulnerable.

If we're going to go down the "think of the children" path, I'd argue invasive tracking is used far more often for persecuting the vulnerable. But anyway, if you want an ultra locked-down machine for schools running Apple devices, use MDM, Santa or whatever else, and network filtering like everyone else.

I'm getting very tired of the idea that we need to bend to ad agencies and absurd government abuse in the supposed name of protecting the innocent. It's suffocating for everyone.

Some people online are strange and scary no doubt; I know that better than anyone. But kids will be kids, and they'll do dangerous things without you knowing; people go home and talk to strangers on Discord or whatever else all day and no amount of browser fingerprinting is going to change that.

Maybe I am the crazy one, though, I don't know. But I only learned to program because I wasn't caged up; I couldn't have been older than six years old or so when my friend introduced me to this MMO, RuneScape, which I became obsessed with. And like all dumb kids, I eventually tried to look for cheats, of course, there were none, but I stumbled upon some reverse engineering forums where people were collaborating and trying to build their own server emulators for the game. It was interesting, so I stuck around, and it incrementally forced me to learn just about everything I could really need -- from software to things like "oh gosh, we've suddenly got players, but now we're getting slammed by some dude's botnet; I am twelve and BlackLotus wants $500 a month for a server with any sort of DDoS mitigation, so we need to figure out how to deal with this on our own".

I had good times, and I had many terrifying times, but at the end of the day, my life would be entirely different if I grew up sheltered and shackled to an iPad with no way to truly investigate the things that interested me. I'm very glad I stole my mom's PowerBook to stay up all night in the vBulletin shoutbox with people no sane person would normally want their child hanging around.
Real-Time "Preempt_rt" Support Merged for Linux 6.12
Two comments:

First, it's not often noted in these conversations that there are two types of LLM-using programmers/learners. One kind uses it to radically accelerate the learning process, the other kind uses it so they don't have to learn. Actually, make that three kinds—the third (probably a subset of the second) has extremely low creativity and can't understand how to use LLM tools effectively, and so can't guide their output effectively, or wrangle it after the fact.

I suspect your comment is referring to PRs by the latter kind. This is not a problem with LLMs, or with people using them to enhance productivity.

Second, what is your realistic proposal for how to confront the reality that we're accelerating through irreversible technology-assisted change?

Just like, apart from catastrophes, there's no longer a concern that we won't have massive factory farms, or that we won't have access to calculators, or that programmers won't have access to Google, there's no future where programmers wont have increasingly helpful and capable AI tools.

There will always be low IQ, low performance individuals. Can you recognize that the problem—as always—is those people, not the technology?
I think that's the pitfall: there are infinite things a skilled developer can do within "mere hours of work".

The key is to find which ones are the most effective use of one's limited hours.

I developed a small daily game and it has now grown to over 10K DAU, so now I've started going back to refine the low hanging fruits which just didn't make sense to touch when I had just 10s of players a day.
Because ip geolocation has always been reliable and never inaccurate?
The Infinite Conversation
Very interesting stuff. I wonder how this one camera (one viewpoint), flat images models work in completely novel environments (not seen in training data).
I am wondering if this model could be used with stereo cameras as is.
I first thought it was broken English for "If it's not the same site, then no cookies are allowed", where I thought "same site" means the origin of the cookie and the one that reads it.
Bigger is better, it is known.
I really hope this fixed a bunch of encryption and key issues.

We ran Element for our dev team for 6 months and had to give up because frequently a person would just not be able to decrypt a message, warnings would appear but there was no way to solve this. So literally people where missing messages and just having to ask people to post the message again (because there was no way to request the keys be sent). It was a complete disaster and only got worse over the 6 months.

The notifications icon was a mess too. You would frequently see the "unread messages" indicator for a message that was in a thread sub conversation somewhere, even though all the messages had been read. So again people were missing messages.

Despite numerous people begging for threads to be disabled while Element fixed the bug, they refused to put that option in.

In the end, we had to give up and just move to Slack. I really want Element/Matrix to work. I feel like we need it to work, but the lack of support and understanding from the development team would make be warn people to not use this in a professional/day job environment.

That being said, I'll defo be trying it out again personally with the hope they've listened to the community and fix these important bugs.
This may be a naive question but can't we have the features of JPEG XL combined with the compression algorithm of AVIF? Why does it have to be one or the other? Size clearly matters, especially for the majority of the world's population who do not have access to super fast internet and TBs of storage. It's definitely a luxury not having to care about file sizes.
If that were actually true you wouldn't be using your phone right now, or you were at least somewhat hesitant to pick it up - and somehow I doubt you are.

If you were in Lebanon, that would be a different story, but making it some global feeling is pretty bs.
I always viewed it as "the computer needs to control things that are happening in real time and won't wait for it if it's late".
The All-in-One LinkedIn Companion for Savvy Professionals
I can't find anything on the page - does this mean Sliding Sync is now part of Synapse proper, without the proxy being needed?

I can't test right now myself, maybe somebody else knows.
>privacy concerns
>while researching, i saw some data being sent over to the server, like this query everytime you visit a site:

> firebase
.collection("boosts")
.where("creatorID", "==", "UvMIUnuxJ2h0E47fmZPpHLisHn12")
.where("hostPattern", "==", "www.google.com");

> the hostPattern being the site you visit, this is against arc's privacy policy which clearly states arc does not know which sites you visit.
I dunno, I've lived the other side of this where people made boneheaded choices early on, the product suddenly got traction, and then we were locked into lousy designs. At my last company, there were loads of engineers dedicated to re-building an entire parallel application stack with a view to an eventual migration.

A relatively small amount of upfront planning could have saved the company millions, but I guess it would have meant less work for engineers so I suppose I should be glad that firms keep doing this.
There was something substantially new after Snowden though - prior to his leaks if you pointed out what the US government was likely up to people would laugh at the idea and ask for more sources. Afterwards they tended just accept it.

There was a big cultural shift from the default assumption in polite company being "They're spying on Middle Easterners" to "they're spying on everyone, everywhere" when talking about US spying.
Foundations: Why Britain Has Stagnated
They wanted to reduce the duplicate work of maintaining multiple clients for each Platform, and created a rust library which can be used on all platforms.

And for the UI they use Jetpack Compose for the Android App and SwiftUI (I think that's how its called, correct me if I'm wrong) for iOS.

This way only the UI is "duplicate" but the core logic is maintained in the rust library.

EDIT: Okay just found my comment from 300 days ago: https://news.ycombinator.com/item?id=38402710
A safer approach is to treat Tor only as a special obfuscation method.
Thanks, useful detail :)
Samsung, SK hynix, and TSMC set to overtake Intel in revenue in Q3
One of the tricks for achieving the target battery life is that photo and video formats are offloaded to dedicated and very power-efficient hardware in all mobile devices. The iPhone 16 is the first to get hardware offload for AV1 and JXL, which is why it'll support these formats.

It's not just software, unlike in the PC world where going from 5W hardware decode to 50W software decode basically doesn't matter.
Does anyone still use this outdated technology?
Russ? Roxy? Is an outstanding developer. Keen to see how this goes.
Yeah, I have to keep fighting the feeling that I'm not doing things the "right" way as they are so unlike the $JOBs$ I had before, with availability zones, auto-scaling, CDNs, etc.

I have the most adhoc, dead simple and straightforward system and I can sleep peacefully at night, while knowing I will never pay more than $10 a month, unless I decide to upgrade it. Truly freeing (and much easier to debug!)
It’s been going on since 2022 here in California
People seriously underestimate the amount of clients you can serve from a single monolith + SQL database on a VPS or physical hardware. Pretty reliable as well, not many moving parts, simple to understand, fast to setup and keep up to date. Use something like Java, C#, Go or Rust. If you need to scale you can either scale vertically (bigger machines) or horizontally (load-balancer).

The SQL database is probably the hardest part to scale, but depending on your type of app there is a lot of room with optimizing indices or add caching.

In my last company we could easily develop and provide on-call support for multiple production critical deployments with only 3 engineers that way. Got so little calls that I had trouble to remember everything and had to look it up.
Thanks for responding, but this isn't super helpful - my experience has been that it is next to impossible to get a job interview as of the last year or so.

This is anecdotal, but it matches up with what I'm seeing people on social media say.
I assume this is named (also) as reference to Taylor Swift’s “Blank Space”? If so, very clever.
Have you never travelled before? Batteries have been subjected to different security measures forever.
It's interesting to compares this approach - a long fight against insomnia, then falling back to philosophy and contemplation - to the approaches of most older women I've known. A sense of the latter -

If the prospects seem good, trying getting back to sleep for 10 minutes. If that doesn't work, there's always work to do - so get up, start a load of laundry, and catch up on some things while it runs. Consider making a hole in your schedule, so you could get a couple hours sleep after the laundry's done, or an afternoon nap - but it that wouldn't work - well, such is life.

(Yes, I'm an old geezer. And back in the day, there were quite a few farms in my family.)
This is pretty much how it is in German universities. (Except for the covid years when exams were online and yeah anyone who studied 2020-2022 will have inflated grades due to lots of cheating. At least ChatGPT didn't exist during covid.)
It’s just another dumb social media trend, like tYpiNg LiKe tHiS. Hopefully it too will phase out. Search for “lowercase trend” and you’ll find reports of it going years back, there’s nothing worth being fascinated about.

It has seeped into HN as well. Look closely and you’ll notice several commenters type like that.
https://github.com/256lights/zb/blob/102795d6cb383a919dd378d...

TIL I can also use semicolons on lua tables, not just commas:

return derivation {
name = "hello.txt";
["in"] = path "hello.txt";
builder = "/bin/sh";
system = "x86_64-linux";
args = {"-c", "while read line; do echo \"$line\"; done < $in > $out"};
}

I like using lua as a DSL, now I like it even more! I've using lua as a html templating language that looks like this:

DIV {
id="id";
class="class;
H1 "heading";
P [[
Lorem ipsum dolor sit amet, consectetur adipiscing elit,
sed do eiusmod tempor ]] / EM incididunt / [[ ut labore et
dolore magna aliqua.
]];
PRE ^ CODE [[ this is <code> tag inside <pre> ]];
}
Hi hackers. For anyone working with VOIP solutions, maybe this finds you interesting.

It is developed in GO as library, but it could looked as framework. Still you may find that it exposes lot of low level stuff, which is intended.

Any feedback is welcome in this stage.
More you can find on the link above, and there is also seperate website built for documentation.

I am author also of SIPgo, so this project is built on top.
One past employer of a friend has an internal network using IPv4 only. Every night a database query runs on one database and updates a second database based on the results (a DSS updated from a data warehouse, I think). One of the TCP connections involved goes through five levels of NAT, internally to the company.

No one on the team liked adding the fifth NAT, but no one felt confident enough to undo any of the old NATs either.

If you use IPv6 internally you don't dig yourself into holes like that one. You have enough addresses that you can choose clarity and maintainability in little day-to-day choices and a few years later that clarity has added up.
r/LocalLLaMA
I've got 99 problems but scalability ain't one.
Unsure why that comment was flagged. smh
It's really not hard to build this safely in firebase, this could've been authored the same way in node too. I think whoever authored this either majorly cut corners or just isn't experienced enough to understand how to write authenticated controllers like this. This should scare people away from this browser, it's such a basic thing to mess up and it shouldn't have happened.
Yes, it's included (and enabled by default) since v1.114.0, which came out 3 weeks ago. It's a modified version of Sliding Sync (called Simplified Sliding Sync), but it works just the same. So you can deprecate/shut down existing sliding sync proxies.
That seems like a perfectly reasonable thing to sync. Accessibility settings are exactly the type of thing you shouldn’t have to configure again and again on every device.

Either way, you can disable syncing of system settings.
What is the middle approach in this scenario? What specifically are the templates you refer to?
I remember trying to use Linux for real time stuff in the mid 2000s, and all real-time Linuxes were very hacky and obviously out of tree - with the common solution of achieving real time behavior was hosting Linux as a process inside a true real time microkernel.

Afaik, the reason why real time Linux was considered impractical was to have hard RT guarantees, you needed to ensure that ALL non-preemptable sections in the kernel had bounded runtime, which was a huge burden for a fairly niche use case.

I wonder how they got around this requirement, or if they didn't, did they rewrite everything to be compliant to this rule?

Also, does this means that Linux supports priority inversion now?
Ah, so I can get this free opensource decentralized solution if I pay a company to host it for me on their centralized server, got it.

I mean i wouldnt have a problem paying one-time fee of around $100 if that would mean I can get that soft running locally for my groups, but I guess I am not the target potential customer group.
Merge tag 'sched-rt-2024-09-17' of Git://git.kernel.org/pub/scm/Linux/kernel/Git
This is cool, but I wish I didn't have to get past "infinite" scrolling to check the license of the icons in the footer (it's CC0). "free" is a bit ambiguous.