skysight-inc/HackerNews huggingface dataset:
As an indie developer and content creator, I've always struggled with managing my various side projects efficiently. Existing tools like Notion, while powerful, often require too much setup and customization. That's why I built SideProject, an iOS app designed specifically for multi-project management.
Key features:

Local-first architecture with iCloud sync for data privacy and offline access
Built-in data analysis and visualization tools (e.g. Boston Matrix, income regression)
Flexible time allocation system with 5 modes for batch data entry
Smart notification system that learns from your habits
Minimalist UI using native SwiftUI components

Some interesting technical challenges I faced:

Implementing custom charts (like PieChart) for iOS 16 compatibility
Designing an intelligent reminder system that merges notifications to reduce disruptions
Balancing simplicity with power user features in the settings page

Lessons learned:

The importance of "Build and Sale" - especially the "Sale" part for indie devs
Avoiding the trap of infinite iteration
The need for better project management theory integration

Future plans:

Exploring on-device AI capabilities (e.g. using Qwen 2.5 for local summarization)
Improving mechanisms to incentivize user promotion
Focusing more on "Ship It Fast" philosophy
Loss of smell

Financial problems including getting scammed

Sleep problems including acting out one’s dream while dreaming

Personality changes including becoming more withdrawn from one’s social circle

Driving difficulties including getting frequent scratches on the car and avoiding driving
This is a great timing for me for this post. Lots of good if somewhat obvious advice.

I'm considering picking up on-call duties in my new role. In my last company they expected us to do on-call as part of the job but only during what they defined as "working hours" which didn't fit with my schedule. That was one of the reasons I left that particular role. But here they give an 18% salary boost for the on-call duties, and I love debugging hard production problems which is a huge plus.
Not doubting your Mr. Luntz's influence but it turns out gaming is an old term for gambling which still causes legal nightmares for anyone in my area trying to serve alcohol at a video game themed location. Ancient laws ban gaming and alcohol to be co-located.
I'm afraid you missed the point. Life is full of risk, why risk your money and the possibility of addiction when life is hard enough?
> Additionally, paging someone when they should be sleeping is also abusive.

My current job does this, they expect you to respond to pages at 4am

You're telling me this isn't a thing other places?
In an ideal world, all intellectual property would become public domain after 10-15 years, including all research, schematics, wire diagrams, source code, marketing materials, etc. When you go to the various offices to get your IP recognized you must also submit various materials and continue to do so for the life of your property rights.

Again though, in an ideal world. In reality any major changes to something like copyright would probably get you killed even faster than judges who are hard on drugs. The most that we, the people, can do until there’s some amount of backbone in our various countries is to remove ourselves from the primary market wherever we can. For instance, I have been on a successful Nintendo boycott for the last 8 years, and it’s been even longer for Disney. I buy anything I want secondhand or pirate it directly, I don’t pay into SaaS but use alternatives, and I feel a lot happier being ungovernable in this way.
Own the community hate, and change the name to WorstPress?
There's always Conservapedia if Wikipedia isn't working for you!
I mean… it’s also Wordpress. Terrible PHP from yesteryear, the Denny’s of software. You don’t choose Wordpress in 2024, you end up there.
A random blog I found through Kagi Small Web is one man's journey to visit all the pubs in the Good Beer Guide: https://simeyeveritt.wixsite.com/brapa

It's such an interesting look into these slices of life, both current and former, that are so unlike my own experiences.
Gossip of course rises to the top

I was an ISS Flight Controller for 6 years and worked in NASA mission planning and the idea that a us astronaut was “losing it in orbit and intentionally drilled a whole” is pretty ridiculous

It’s obvious that the “hole” was some kind of miss by QA on the Russian side on the ground and it’s in Russian media interest currently to spread any unfounded speculation out into the interwebs

Both the Russian Cosmonauts and US Astronauts were eminently professional people hardworking and dependable people and the also ground crews across the world who work night and day operating the station such that no ISS Crewmember should ever deserve to get their names dragged in the mud over this

https://www.snopes.com/fact-check/nasa-astronaut-sabotage-is...
Language Agents: From Reasoning to Acting
Don't... don't come to HN for reasonable conversation about these things.
Replicating the results from someone's original data is difficult and time consuming, and other researchers aren't getting paid to do that (they're getting paid to do new research). And of course the (unpaid) reviewers don't have time either.
Future or events that haven't happened yet can't be proven out because it's an unknown.

What we can do is make a logical and theoretical extrapolation. If AI progresses to the point where it can do every single task you can do in seconds, what task is there for you left to do? And how hard is the task? If LLMs never evolve to the point where they can clean toilets, well then you can do that, but why would the boss pay you 300k to clean the toilet?

These are all logical conjectures on a possible future. The problem here is that if AI continues on the same trendline it's traveling on now I can't come up with a logical chain of thought where YOU or I keep our 300k+ engineering jobs.

This is what I keep hearing from not just you, but a ton of people. That analogy about how technology only created more jobs before with no illustration of a specific scenario of what's going on here. Yeah if LLMs replace almost every aspect of human intellectual analysis, design, art and engineering what is there left to do?

Clean the toilet. I'm not even kidding. We still have things we can do but the end comes when robotics catches up and is able to make robots as versatile as the human form. That's the true end when the boss has chatGPT clean the toilet.
Yes, JWTs are so simple compared to what came before that it's hard to argue with them. Just make sure your verification doesn't allow none or old ciphers and you're basically fine.
You forgot to place "vertically-integrated unobtanium" after ASIC.
That is exactly why he cut them off. They aren’t contractually obligated to pay. The only “contract” is the implied social contract of building your company on open source.

If they want to play hardball about what’s required instead of acting generously, like Matt has done for decades, then they are getting their just deserts.

Matt isn’t obligated to be nice to dick heads. WordPress.org isn’t obligated to provide service for free.

WP Engine decided that they would only do what’s good for them. Fine. If they piss in the pool, they can’t be mad when everyone else gets out. It is irrational for WordPress to continue acting like there isn’t an extractive entity in their midst.
Yes, of course there can be. But I cannot ignore the harms in doing so, by misrepresenting the data in a way that disallows others to understand what is or isn't there -- it happens regularly. These datasets are often used as a political tool and contracted with local universities to show that they're providing data... though not actually providing the accurate data. Simultaneously though, people who don't know data will champion the data as accurate because it comes from a university program.

Sometimes what can happen is that somebody inexperienced will try to make some assessment of the data and come to the exact wrong conclusion because they didn't know what not to trust. But it gets on the news anyway and damage is done.

We can do better than that.
Thanks for taking me down the rabbit hole. I didn't know there was an esoteric programming language called Piet.

https://en.wikipedia.org/wiki/Esoteric_programming_language#...
Some time back I was reviewing ... a list of user-defined colours, discovering that yes, even that feature can be abused.

Though I'd generally not consider c0ffee to be such an instance.

It is a decidedly un-coffee-like colour, however.
It's Concourse and Century Supra: https://mbtype.com/
In my experience Steam is actually extremely good in this area. I have games in my steam library which haven’t been sold on the steam store in years, and I can still download from the steam servers and play without any issues or friction. Some of them are EA and Ubisoft titles that were pulled so those publishers could sell exclusively on their store launchers.
It's a custom one, you'd have to check the source and try to copy it manually.
Just a question for other people who have been in industry longer. I'm somewhat new, wondering if my company's oncall is "normal" or abusive

My current company has a rotating week of oncall. Happens every 2 months or so. Oncall gets paged first and is expected to be available 24/7. But if they escalate further, whichever dev or manager it gets escalated to is expected to be available 24/7

By 24/7, I mean, they don't tell you that you're allowed to sleep. They just fired a manager for not being willing to wake up in the middle of the night for pages

Edit: also a bunch of people on our team think it's normal to ping and ask for help on non oncall stuff outside of business hours (like 7 or 8)

Edit 2: I forgot to add, we are not paid anything extra for oncall (or any additional work time outside of business hours). It's salaried
Up to v1.3.0 now, which has added a LaunchAgent to keep the settings updated and ensure the nags don't recur.
I was just thinking about this, I was at the beach so I was thinking about sneaker waves.

It sounds like the way it works is that a typical wave is a certain height, but if two waves from a wave train hit at the same time, they might be twice the normal height. But there's no reason it would only be two at time at a maximum, is there? Waves could hit from different angles and combine at the impact point (the beach), on rare occasions.

Waves are from Extremistan, using the Taleb terminology. If the maximum wave that hits a certain beach on a typical day is 10 feet, the maximum that might hit on an atypical day isn't going to be 20 feet, it's not going to be 100 feet or 1,000 feet. There's just no telling where the top of the "atypical" distribution is. The black swan wave might wipe out everything and everyone for miles around.

But that was just me thinking, not an expert on waves. The biggest ones I saw were 6 feet tops.
Identity Proofing in the CIAM Context
>folds proteins to develop a bioweapon or something

That has been possible for a long time. The only thing needed was raw compute power to simulate it. Not sure how AI research suddenly makes itself worthy of a airstrike based on clearly unproven scenarios. What makes you think a rogue nation will sink ridiculous amounts of money building the power , cooling infrastructure, acquiring the necessary computing hardware and knowledge to build an hypothetical tool that will aid them in making a WMD - when they could just create tanks of sarin gas or anthrax for a fraction of the cost plus manpower that could be delivered to the target in multiple ways? A rogue nation having the capability to build AI datacenters, will also have the ability to do simple risk/benefit analysis.
Agreed, WP Engine shouldn’t have left their customers wellbeing up to the whims of an organization they were antagonizing.

WP Engine was banking on the free stuff from Wordpress.org, and they got burned because they bit the hand that was feeding them.
Hard to imagine the onslaught of enshittification when they start filling that huge pit of loss.
Indeed and shouldn't be done, but who hasn't done either of these? We humans are risk takers almost by nature. This world is so full of uncertainty, limiting the types of risk we participate in is both wise and needful. Thankfully, moderation is a virtue, but for some it is merely a hindrance.
I guess GP is referring to the episode, rather than the actual word . . .
TSMC is not the Taiwanese government, and besides, according to American foreign policy, the Taiwanese government is not a government either.
Author of this article learned a lot about password hashing, missed the detail that this was in logs, not the database. Usually you try to avoid logging passwords, you don’t hash them in logs.
> an advertising dollar doesn't disappear: it's paid to someone.

Window breaking gangs could make a similar same claim about their activity boosting GDP might they not?

https://en.m.wikipedia.org/wiki/Parable_of_the_broken_window
Article Title says Netherlands ; while Leiden is actually in Holland, let's not use Holland as it is too often mistaken as being the same as the Netherlands. Holland (north and south) is a part of the Netherlands.
About 94.9 GB/s DRAM bandwidth for the Core Ultra 7 258V they measured. Aren't Intel going to respond to the 200GB/s bandwidth of the M1 Pro introduced 3 years ago? Not to mention 400GB/s of Max and 800GB/s of the Ultra?

Most of the bandwidth comes from cache hits, but for those rare workloads larger than the caches, Apples products may be 2-8x faster?
The difference between public health and basic research. To stop an epidemic in flight one has to go with ones best guess and that saves lives so they do it.
Symbian was on a lot of different brands, so based on a sibling comment I’d say it was a Symbian feature.
Yeah, I think we are largely on the same page. The only thing I want to correct at this point is that Rust has no OS support yet, so any "system" library will necessarily come out as a third-party crate. Including the `windows` crate in this context is roughly equivalent to including the fully expanded lines of `#include <windows.h>`, which is known to be so massive that it also has a recommended macro `WIN32_LEAN_AND_MEAN` to skip its large portion on typical uses, but that should still count according to you I think? [1] Thankfully for auditors, this crate does come from Microsoft so that gives a basic level of authority, but I can understand if you are still unsatisfied about the crate and that was why I stressed the original figure was very off.

As noted in my other comments, I'm very conscious about this problem and tend to avoid excess dependencies when I can do them myself with a bit of work. I even don't use iterutils (which is a popular convenience library that amends `Iterator`), because I normally want a few of them (`Iterutils::format` is one of things I really miss) and I can write them without making other aspects worse. But I'm also in the minority, I tend to depend on "big" dependencies that are not sensible to write them myself while others are much more liberal, and I do think that cargo-watch is already optimal in the number of such dependencies. More responsibilities and challenges remain for library authors, whose decisions directly contribute to the problem.

[1] I haven't actually checked the number of lines under this assumption, but I recall that it exceeds at least 100K lines of code, and probably much larger.
Why do they (LG and Samsung) not fingerprint things streamed from a phone, but do fingerprint anything coming over HDMI? And why do they fingerprint their own FAST services, don't they know what they showed already?
They took an investment from a new startup (Quantum Leap Research) focused on national security.
Abusive. Are you giving away your time for free too during these rotations? Bonus, overtime, equal time off?
I really hope Arch moves to a model like Debian where all packages are built by a central build server. The current strategy—having dozens of different developers compile stuff on their laptops, sign it personally, and then upload the binary blob—leaves a bit to be desired for obvious reasons.
I’ll go as far as saying we need legislation to cover this.

I do not like on call. I don’t actually mind the work but I don’t like the entitlement companies have towards it.
Many solutions involving posting data in repositories or audits are being discussed in the comments.

But given that many people are saying that they noticed and quit academia, how about also creating a more direct 'whistleblower' type of system, where complaints (with detailed descriptions of the fraud or a general view on what one sees in terms of loose practices) goes to some research monitoring team which can then come in and verify the problems.
Seems pretty normal from two Bay Area startups and two FAANG-sized orgs. Primary should respond, secondary shouldn't be disturbed unless primary seems incapacitated (no pager ack) or is at wits' end.

Edit: I should add that the secondary gets paged more often while the primary is new to the team and doesn't know how to fix everything. In return, you go on call 1/n less often in the future.

If I need to sleep in after a bad night, it's always been fine.
No. Put me on the record as saying his actions are just. I’m not reframing or deflecting anything, I agree with Matt’s actions.

The public perception seems to be against him, and managing public perception is important.
You don't have to protect lead from terrorists trying to build a dirty bomb. The radio nuclides you find in nuclear waste are also a lot more poisonous than lead, even if you ignore the radiation.
Yes. That is abusive.

Also generally if you’re ever asking if something is abusive, the answer is usually yes.
It gave me Carmela gaslighting Tony (https://www.youtube.com/watch?v=NM06kjZ4ecU) vibes, personally.
I wrote up a Semgrep rule as a comparison to add! (also tree-sitter based, `pip install Semgrep`, https://github.com/semgrep/semgrep, or play with live editor link: https://semgrep.dev/playground/s/nJ4rY)

pattern: |-
def $FUNC(..., database, ...):
$...BODY
fix: |-
def $FUNC(..., db, ...):
$...BODY
Third Party Testing Paints Dark Picture of Tesla FSD
I can read it fine?
Smart TVs Are Watching You
Traditionally, humans have addressed the imbalance between energy-to-generate and energy-to-validate by building another system on top, such as one which punishes fraudsters or at least allows other individuals to efficiently disassociate from them.

Unfortunately it's not clear how this could be adapted to the internet and international commerce without harming some of the open-ness aspects we'd like to keep.
Someone used this window breaking analogy recently here on HN - I can't remember why it came up or who said it, but is this a common framing?

I do remember it being about how a window maker paying people to break windows not being a productive contribution to GDP.

Just thought it was curious seeing it again.
Counterpoint: DARE didn’t scare me away from drugs at all, and in fact taught me how to do the more common ones and what “street names” to ask for at an age where I wasn’t otherwise being exposed to that knowledge.
> So in addition to the complete destruction of personal privacy and the normalization of the panopticon, it's also making you materially poorer. But hey, at least ads are more relevant, sorta, almost, sometimes!

Can a capitalist society operate without advertising? How are people to learn about products and services that are available? Yet today poorly targets ads waste the time of everyone involved. If ads could be made relevant without invading your privacy would you be against that?
Wow, we did the exact same trip a couple years ago, and also stayed at that amazing cabin place. Took home 80 lbs of crystals! Highly recommend.

We also stopped by the Arkansas diamond mine and tried our hand at it. Way less fun, with a near zero chance of finding so much as a speck of a diamond.
The Duckering Hyperbolic Geometry library is also worth digging into:
https://github.com/cduck/hyperbolic/
This is organized into a pip module and has a few example ipynb files to get started.
I really disagree with involve other people.

This implies that everyone is effectively on call 24/7.

You have a primary and secondary. No one else should be paged unless they’re on the rotation at that time.
Usually, at that level, an HSM (Hatdware Security Module (ex: https://www.entrust.com/products/hsm), but also a fair number of processes and procedures around things like private key generation, key attestation, key verification, certificate renewals, etc etc etc).

There are some parallels with a TPM, but also a great deal of divergence (more so than in common, really).
what’s DS stand for? discrete structures?
Yeah, I didn't even mention the other bindings (HTTP-Redirect, Artifact, etc.) because they're not widely supported. Only SAML's HTTP-POST binding enjoys "every IDP supports this exact protocol" status.

FWIW, the for library I work on -- github.com/ssoready/ssoready -- we sidestepped this issue by simply not using SAML RelayState at all under the hood. Between the fact that it's vulnerable to attacker manipulation, and the size limits, it's not worth the pain. We just implement SAML RelayState / OAuth `state` via good old database persistence.
> yet more and more people love them

I think that says more about media-technology, corporate ecosystems, and overall population-growth than about music itself.
It's expected that you will wake up for pages and figure out if the issue needs an escalation or if it can wait until the morning.

If the oncall is too heavy, you should have split oncalls for day and night.

> But if they escalate further, whichever dev or manager it gets escalated to is expected to be available 24/7

This doesn't sound right, since that effectively means everyone is always oncall. You should clarify what the policy actually entails.
...or perhaps unimpressive trees
Ah yes, a link to a Twitter account that is clearly a pro-China propaganda outlet. Solid evidence that the original article is likely correct.
While Akerlof's Market for Lemons did consider cases where government intervention is necessary to preserve a market, like with health insurance markets (Medicare), he describes the "market for lemons" in the used car market as having been solved by warranties.

If someone brings a plum to a market for lemons, they can distinguish the quality of their product by offering a warranty on its purchase, something that sellers of lemons would be unwilling to do, because they want to pass the cost burden of the lemon onto the purchaser.

The full paper is fairly accessible, and worth a read.

Not sure how this could be applied to academia, one of the problems is that there can be significant gaps between perpetrating fraud and having it discovered, so the violators might still have an incentive to cheat.
OpenPipe
> but is this a common framing?

Yes a common misconception about economics so much so it has a Wikipedia page to explain it.
So much engineering effort wasted with zero benefit to society.
[dupe] https://news.ycombinator.com/item?id=41658828 29 points by some_furry 3 hours ago
> In the mean time rent control means we haven’t completely killed off normal people who were here before.

Do you think all restaurants would just close down if there wasn't rent control? Of course not, restaurants would be forced to pay a high enough wage for workers to pay for housing.
But didn't we not have this problem only a few short years ago?

What changed?
That is the right answer. I usually charge 2-5k euros to take a quick look and then, depending on what I find, I will charge 200-500 euros/hr to start working. Currently, human written code, mostly older php will demand the highest rate; asp/vba does a good job as well at being terribly written. Overarchitected things are usually in java/c# which I find annoying but not as hard; cobol, fortran and c/c++ are usually ok. Other things we don't really encounter besides a lot of scripts in bash and perl and tcl: usually fine ( mostly don't touch them as they work ).