skysight-inc/HackerNews huggingface dataset:
While I am in the same camp as you, there is one exception: Music. Especially music with lyrics (like suno.com) - Although I know that it's not created by humans, the music created by Suno is still very listenable and it evokes feelings just like any other piece of music does. Especially if I am on a playlist and doing something else and the songs just progress into the unknown. Even when I am in a more conscious state - i.e. creating my own songs in Suno, the end result is so good that I can listen to it over and over again. Especially those ones that I create for special events (like mocking a friend's passing phase of communism and reverting back to capitalism).
As a customer and user of WPEngine, what role do you see wordpress in that relationship? Generally when I buy things I try to take some consideration of the sub-contractors and suppliers to the supplier of service, but I am aware that I do not have a direct relationship with them.

I doubt the courts will demand that WordPress foundation must provide servers and bandwidth indefinite and free of charge to anyone, especially when there is no contract between WPEngine and WordPress foundation. When Youtube removed API functionality and under a night destroyed companies that relied on those free API's, courts did not demand that Youtube went back. It is inherently risky for companies to depend on someone else servers and network service being provided for free without any contract.

The more easy path forward would be for WPEngine to switch dependency. Debian has an reliable repository. Core wordpress is already packaged there, it get updates, and a handful of the most popular themes are also packaged. If that is not enough then WPEngine could spend employee hours to package more themes. No need for proxies or workarounds. I would estimate that 90% of the customers on WPEngine could continue to exist using just that.
It generally is a major distraction from the content and feels like a pattern from a decade+ ago when technical blog posts became the hot thing to do.

You can certainly jump over it but I imagine a number of people like myself just skip the article entirely.
Wikimedia Toolforge: Migrating Kubernetes from PodSecurityPolicy to Kyverno
Why, are you taking notes on how to perform a criminal conspiracy?
INT8 FlashAttention
> the degree to which you have to ask yourself if you want to use String or if you want to use &str

In practice, there isn’t a ton of thinking to do about this: if it’s a struct, you want String. If it’s a function parameter, you want &str, and if it’s a function’s return type, you want String. Doing that until you have a reason not to is the right call 95% of the time, and 4% of that last 5% is “if the return type is derived from an argument and isn’t changed by the body, return &str.

It does take some time when you’re learning, but once you get over the hump, you just don’t actively think about this stuff very much. Google’s research says Rust is roughly as productive as any other language there, so far. That doesn’t mean it’s universally true, but it’s also some evidence it’s not universally false.
> Everything was digital at UC Berkeley back in the early 1990s and before.

I can't believe I have to say this, but not every university is UC-Berkeley. Digitization isn't free and requires specialized labor and technology.

And are you really saying that in the late 1980s, all dissertations were submitted digitally? In what format?
Nice! Did AOLServer (now Naviserver) do that? That was the major Tcl webserver that I remember.
Only safe Rust can guarantee this, and only as a consequence of any unsafe Rust being correct.

Most of the popular Garbage Collected languages of course also have a way to escape, in some cases via an "unsafe" keyword or magic unsafe package to a language where the same safety rules do not exist, in this sense the difference in Rust is that it's the same language.

I'd actually say the more memory safe option would be a language like WUFFS where it pays a high price (generality) to deliver categorically better safety and performance. Most software could not be written in WUFFS but also most of the software which could be written in WUFFS isn't.
You will like this then, that was the main demo from the Quickwit team.

https://common-crawl.quickwit.io/
If you can't train at altitude, I'd focus on distance/time in. Go on long runs, long hikes, long bike rides. Endurance. Elevation gain is good too. Try to at least mirror the conditions per mile in your training. Hill intervals are useful - walk up a big steep hill at a steady pace, and then walk back down; rinse/repeat. A solid cardiovascular base should prepare you just fine.
So many less moving parts to manage/break.
I think these debates wind up missing the middle zone, partially because there's not a one size fits all in terms of teams and scope relative to a company. Specifically the issue I've found is that while I agree Product needs to be steering the ship, that Product Representatives find their way too far down the hierarchy.

Or another way of looking at it: On a typical team one often finds a PO, Scrum Master, and a Tech Lead. The PO reports upwards to a broader PM. The TL reports upwards to a broader EM. I'd contend those are 3 people filling the duties of what should be 1 or 2 people's worth of duties.

Imagine there's a PM at a company responsible for some portion of a/the product. And suppose there are 3 dev teams working towards it. In my mind there should be a PM for that product, detailing the what and (idealized) when. They're the ones talking to customers, coordinating with other PMs in the company, etc.

But their involvement with engineering should end at the sprint level. Instead what I've found is there's often a lower level "PO" who attends daily standups, will debate micro-level prioritization (do this before that), etc. And to me this really should be at the team/team lead level to decide. What's more, I've pretty much *never* seen this "PO" persona do any outward facing customer work - they're almost always just representatives of the broader PM organization.

As an engineer and engineering lead who has complained about product, *this* is what I'm complaining about. You're 100% correct that I don't want to be deep diving into the product side of the fence. But I'm usually in tune well enough that I don't need 2-3 layers of Product Bureaucracy between my team and the people who are doing said deep dive.
> My point was that making meaningful contributions such a big fixes requires understanding how the code is _supposed_ to function vs. how it actually functions, that's the hard part. In the majority of cases that's simply not something the code can tell you [...]

That's kind of my point, though. I'm trying to zoom out and "think outside the box" for a minute. It's hard to compose smaller pieces into larger systems if the smaller pieces have behavior that's not very well defined. And our programming languages and tools don't always make it easy for the author of a piece of code to always understand that they introduced some unintended behavior.

To your first point: I'm not shitting on Chromium or Firefox or any other software projects, but they're honestly ALL "buggy messes" in a sense. I'm a middling software dev and the software I write for my day job is definitely more buggy, overall, than these projects. So, I'm not saying that other developers are stupid (quite the opposite!). But, the fact that there are plenty of bugs at any given point in any of these projects is saying something important, IMO. If I use our current programming tools to write a Base64 encode/decode library, I can do a pretty good job and there's a good chance that it'll have zero bugs in a fairly short amount of time. But, using the same tools, there's absolutely no hope that I (we, you, whoever) could write a web browser that doesn't have any bugs. That's actually a problem! We've come to accept it because that's all we've got today, but my point is that this isn't actually an ideal place to settle.

I don't know what the answer is, but I think a lot of people don't even seem to realize there's a problem. My claim is that there is a problem and that our current paradigms and tools simply don't scale well. I'm not creative enough to be the one who has the eureka moment that will bring us to the next stage of our evolution, but I suspect that it's what we'll need to actually be able to achieve complex software that actually works as we intend it to.
Thank you, that is the best just-so story I've read in a long while!

If the subtext is not apparent: https://en.m.wikipedia.org/wiki/Just-so_story
"In the United States, cocaine is regulated as a Schedule II drug under the Controlled Substances Act, meaning that it has a high potential for abuse but has an accepted medical use. While rarely used medically today, its accepted uses are as a topical local anesthetic for the upper respiratory tract as well as to reduce bleeding in the mouth, throat and nasal cavities.", from Wikipedias cocaine page. I remember septoplasty surgery using topical cocaine for example.
> We need to be aware of this issue as a community and potentially petition ICANN to find a way to keep the IO domain alive.

No, we need to migrate off ccTLD.
It’s been discussed, but not every trait is object safe, so it’s not a trivial task.
finally someone says it. nickelback too
Introducing Driver Experiments to the AMD Radeon Developer Tool Suite
They shouldn't have bought the domains, the rules were clear. What if the rules say that somebody else is supposed to get the IO domain?
If I buy a washing machine, it has a fixed known volume, weight capacity, power consumption, noise level. These are objective facts, no? Do you think we can have different opinions on how many kilos of clothes it can take, and be both right?

They would come from the manufacturer manual or a spec sheet or something like that.

Windows has some objective, known, minimum hardware requirements. Are they open to interpretation?

What kind of products are you buying that make you wonder how to get objective facts about them?
If you buy quality ink pens by pentel or faber Castell they will last years, depending on usage.
Compassion towards enemies is especially interesting, it takes a lot of mental effort to go against the gut feeling.
Honda recalling 2M vehicles over steering issue
Z/OS Basic Skills
That's an over simplification I think. If you're only generating a video because 'I can oooh AI' - then of course no one wants it. If you treat the tools as what they are, Tools - then people may want it.

No one really cares about a tech demo, but if generative tools help you make a cool music video to an awesome song? People will want it.

Well, as long as they aren't put off by a regressive stigma against new tool at least.
Are you saying HN broke substack?
Hierarchical Light Sampling with Accurate Spherical Gaussian Lighting [pdf]
appreciate your position but mine is that everything out of suno sounds like copycat dog water.
Most implementations of this sort of thing in practice don't verify as hard you might think.

A lot of it seems to do with wanting to be able to replace certs and have reasonable expiration times, but not really understanding how to do that (I don't mean it's not possible, i mean the manufacturers seem to not really understand how to do it effectively)

As an example, the siemens CNC controller on my metal mill is totally signed. It has an FPGA with a secure element producing verification signatures to double check cert sigs haven't been modified, Every single file system with binaries is a read-only signed cramfs file signed with a secp521 ecc key. All read-write fsen are mounted noexec, nosuid, etc etc etc.

The initial CA key is baked into secure hardware.

However, in the end, they only verify the CA and signing certs have the right names and properties (various oem specific fields, etc), because the certs have 3-5 year expiration dates and these things are not connected to the internet or even updated often. So they accept expired certs for the signatures, and they also accept any root cert + signing cert that looks the same as the current ones.

So you can replace the CA key and signing keys with something that looks exactly the same as their current one and resign everything, and it works fine.

A whole lot of effort that can be defeated pretty quickly.

I would be surprised if the cars were not similar - they look really secure, but in the end they made tradeoffs that defeat the system.
The Endless Grid [video]
For starters, in that it gives you memory safe bytecodes computation that aren't coupled with one specific language.
That's how Reddit is organised.
One genuine problem was the you could send snippets of code to any Tcl/Tk program running on the same X server and it would execute them. Obviously X isn't the most secure of systems and you should trust your X clients, but this made it very easy if you could persuade someone to run a "command line" program. I wonder if that was fixed?
Yes, https://github.com/jgrahamc/twostopbits
This seems quite bad, but how practical is it.

Like, the attacker will get write and read access to part or the whole of some other object allocated on the heap, when the memory is reused?

Seems hard to do anything useful with.
Challenges faced displaying large CSV file with million+ rows in CSV Viewer
I was speaking about places other than google that accept advertisements.
Pilet 5, a 5-inch cyberdeck powered by rpi5
One thing on my list for CRUD software is an „I know what I’m doing” button that bypasses validation. Usually it’s behind manager or admin approval.

It’s pretty tricky to get right and is very case by case in what it specifically means. But it’s been critical to handling edge cases.

For example, in 99% of cases, you can’t progress to stage X without doing Y. But in this case „I know what I’m doing”.

Though this puts a lot of pressure on downstream processes to handle missing data. Fortunately that hasn’t been an issue too much because validation grows and changes over time and must naturally deal with records that were created under prior validation when their state was originally valid.
I love doing that, when someone asks me for an email address, it’s always their-name@my.domain - always gets strange looks!

Edit: even more fun with catch all domains then it’s company-name@spam.my.domain
Clean Architecture in Go
Seems they were referring to the "USSR Returns" subplot of Season 9, Episode 19:

https://en.wikipedia.org/wiki/Simpson_Tide

Ironically, there's some unintended truth in their reference (i.e. to all intents and purposes the KGB hasn't gone anywhere and basically is still around, just renamed/reorged) but that's an entirely different thread.
The “plumbing” community on reddit. That’s the naming scheme reddit uses.
Nobel Prize Literature 2024
Is that a VP of Engineering? If that’s the case shouldn’t it be the VP’s responsibility to get the things done? How did that appointment happen without CTO’s approval give that it is a small company?
The government does a lot to fund and incentivize startups. It can do more than one thing at a time.
This smells to me of a team overthinking something so much that they land on something unintuitive. It smells of "over-fitting" — a solution way too specific when something general and flexible is needed.

Pressing shift three times is clever… but way too clever. Even if you stick a giant popup saying "hit shift three times to quickly exit" I'm not sure anyone in a panic will remember—loads of people don't even know which key is shift, especially when there's three buttons on a keyboard that look the same and only two are the same. I've come across people who always use shift-lock and did't realise you could use shift for anything. I'd be interested to know what UX tests they actually did, and who with.

If I was going down the press a key three times, I would have gone with pressing any key three times apart from the number keys (plus an info box when you enter the page—"hit any key 3 times to quickly exit to the weather"). Most people, I'm sure, would mash the spacebar in a panic but if they missed then it would still work.

What I would have preferred to test would be 'mashing'/chording — pressing more than one non-modifier key at the same time, so a user could just smash a load of keys at the same time in a panic.

Going to the Weather page is a great idea, though.
Nuance: Preventing Schema Migrations from Causing Outages
It's a cool way to avoid painful database-related outages.
I've never heard of DataLog before, and it seems nice.

Also, City Storage Systems is known as CloudKitchens — a new startup of ex-Uber CEO Travis Kalanick.
And another vote!

I never made it through the book (I know, bad habit of mine) but she said _one_ thing in that book that opened my eyes; paraphrased "you're not drawing the object; you're drawing lines". The first time I drew a crumpled-up blanket blew my mind.

Since then, I just find techniques[1] and ideas[2] that I implement for fun. The reaction from people is joyous.

[1] https://www.youtube.com/watch?v=7TXEZ4tP06c
[2] Unfortunately, I can't find depictions of Sergio Aragones' MAD magazine marginalia to link to here
Fair would be if everyone would pay a the same percentage on their income, no more brackets. And it should be no more than 10-15% of gross income. That's it. No estate taxe, no inheritance tax, no nothing tax.

I am pretty sure that those 10-15% are more than enough to have a functioning government that is able to serve the public pretty well.
A quick look at the ARIA aria-details attribute
There's many online resellers tho
At least in Europe until the ZX Spectrum+3 128K, drives were largely ignored not only due to faults, also due to their high price.

I cannot say how it was for the C64, because they were hardly seen on Iberian Penisula.
Both chrome and firefox lock down the javascript that site is running into their own box. By using a standalone process and whatever mechanism system provided. A pwned site alone isn't enough to cause damage. You also need to overcome other layer of defenses (unlike something like flash that can be owned from it's script engine alone)

It usually require multi 0 day to overcome all those defense and do anything useful. (And it is also the highest glory in defcon)

The browser is surely frequently attacked due to the high rewards. But it also get patched really fast. (As long as you are not using a browser from 10 years ago).
Don’t ask me, I’m just using the terms and definitions locals use.
I had been working both with NaCl and PNaCl back then, and truth be told, once Google made the switch from NaCl to PNaCl most advantages just disappeared. The compilation of the PNaCl bytecode on start (which was more or less just a subset of LLVM IR) took longer than even the first WASM implementations.

PNaCl definitely suffered hard from slow startup times because it ran LLVM for compilation from PNaCl bytecode to native code on startup, and LLVM is slow (I even noticed this compilation process on startup on my absolutely trivial test code). Only the predecessor NaCl didn't suffer from this problem.

There was no 'access to other native APIs', PNaCl created its own set of wrapper APIs to access browser features, and while some of those were better than their standardized web API counterparts, some NaCl/PNaCl APIs were worse than the web APIs they replaced - and for the future, PNaCl would have to create more non-standard APIs for every little feature available in browsers, because:

Integration with the webpage and Javascript was done via message passing, which was just terrible when compared to how easy and fast it is to call between WASM and JS.

The NaCl/PNaCl multithreading feature would have been hit just as hard by Spectre/Meltdown as the SharedArrayBuffer based threading in WASM.

Finally, when you look at the PNaCl toolchain versus Emscripten, Emscripten definitely comes out on top because Emscripten was much more concerned about integrating well with existing build systems and simplify porting of existing code, while NaCl/PNaCl had its own weird build system (in old Google NIH tradition). Working with NaCl/PNaCl felt more like working with the Android NDK, which is pretty much the worst developer experience in the world.
Nobody's proposing killing Google. You think this is bad because you cannot imagine an alternative history with better competition between multiple Googles
Better from a user rather than supplier

https://x.com/Unitedcajunnavy/status/1843985998721524222
JVM is one bytecode among many since 1958, no need to keep bashing against it as way to champion WASM.

Opt-in or not, it is there on the runtime.
https://x.com/Unitedcajunnavy/status/1843985998721524222

I believe this is the org that asked for it
This just repeats the whole comment with more words. Please don't copy-paste autogenerated text here unless it adds to the conversation somehow.
This really brings back some memories. My first career in IT was supporting and implementing an OS/2 Lan Server based banking implementation for a regional bank in the south. The bank deployed what was essentially a massive flat token ring based network interconnected via Fiber to regional areas and leased lines to branches. It was not Netbios over TCP/IP, it was straight up Netbios over the entire network. Given Netbios is broadcast based for resolution, broadcast storms were common across the network, so a gordian knot of filters and configs were setup at the routers to mitigate this. There was no concept of subnet based routing implemented yet.

I ended up taking a job with IBM supporting the TCP/IP stack on top of OS/2. It was a 24 year old me, and a grey beard 60 year old dude that literally supported the entire OS/2 Lan Server TCP/IP stack across the world during the time that corporate networks were just beginning to connect to the Internet. Everyone else on the OS/2 support team at IBM just punted to us anything that was TCP/IP related and thought we were wizards or something. What a wild time to be alive.
Wordpress itself is a fork, so they had to keep the license
The potential for cute stuff to 'go viral' is severely diminished thanks to high production value click-bait and mainstream content. Big Content will drown out anything that hasn't gained tons of views already by promotion through other channels.
I don’t think they realize just how large the google data collection operation is…
Also recommend Guayusa which is not illegal anywhere AFAIK.
https://x.com/Unitedcajunnavy/status/1843985998721524222

I believe this is the organization that asked for this.

Everyone is buying at retail. You can't actually get it online
Google maps was launched 7 years after google was founded. If you look up the market share of google at that time (less than half of the search engine market) I think you’re more proving the need for breaking the company up.

Maps was created because it allowed google to be more competitive, not because they were already on top of their game and could just pour billions into any product.
I don't think so.

Troy isnt publicly sharing the credentials and that's what's valuable — especially having "exclusive" access.

He blogged or tweeted about this at some point. Sadly, I can't find the link.
Might even get it in 2047. The ACM Digital Library went live in 1997. https://dl.acm.org/doi/10.1145/256175.256179 . I remember using it in 1998 or 1999.