skysight-inc/HackerNews huggingface dataset:
This is naivity on "cryptobro"-levels.

If security, reliability, performance and maintainability matter (and they do, always) you need to plan your software to be data-centric. I don't see how plugging together a few libraries solve that for you.
Btw: external libraries are written by developers as well. And your developers have to not only read that code and documentation, but consider each of those a liability and a future maintenance issue. Most software engineering isn't bolting libraries together, most software engineering is about knowing how data is stored, how it is flowing, how much risk is involved with using which dependencies, who has access to what if they exploit any given section of code, and much, much more. That is why only morons think no-code tools can replace capable developers: the hard bit isn't writing the abstract cryptic text — that is in fact the easy bit — the hard bit is not shooting yourself into the foot as the complexity grows and finding a solution where all the above mentioned qualities are not in conflict with each other.

Do you work in marketing? Cause your stance would make me think your shop is a bottom-of-the-barrel bordering-to-fraud el-cheapo software house that customers instantly regret to having worked with. This is at one level with the infamous "my teenage kid can do graphic design" — which tells you more about what that person thinks about graphic design than about graphic design itself. If you are a manager you'd be wise to realize a serious software project yourself at home, this might teach you a thing or two.
Any one else remember going to the ATM machine with their Atari Portfolio to get some "Easy money" in the early 90s? ;D
There are explicit instructions on x64 and aarch64 for sign and zero extensions. There are also common patterns like 'xor r64, r64' to clear out a reg (and the zero-register arm variant). Why are there no higher level language abstractions for these types of patterns? Or maybe there are and I'm just unaware.

I would really like to see single operand operators, similar to 'i++'. '!!i' to do 'i~=i', '<<i' to do 'i=i<<1'.

The 'rep' instructions are also nice: https://www.felixcloutier.com/x86/rep:repe:repz:repne:repnz

Imagine doing something like this in C or Rust: 'int i=10;rep i printf("called %u times", i);' where rep would store the value of i in rcx, sets it to zero and stores in rax and jmp's to whatever function or codeblock you specified (could be inline code, or lambda expression), rcx (i) times, passing 'i''s current value optionally to the target code block. It would essentially be a shorthand form of 'for(int i=0;i<10;i++){printf("called %u times",i);}' except it's easier to use for simpler constructs like 'rep 8 <<i;' (just an example, you can just do 'i = i << 8;') if you combine it with my earlier proposed left shift operator.
Does anyone know how would this interact with the USMLE, does it override it?

Not sure why the downvotes for an honest question, could you at least point out what's wrong?
How ironic that not having firmware updates is good... I found the following April 2022 Reddit thread [0] that I remember visiting back in the day.

[0] https://old.reddit.com/r/kindle/comments/u8u7up/disable_auto...
Well VS Code can’t open sone of VS project types, more specifically it couldn’t open the one based on JS and JS build tools. I’ll check with Rider.
> being easy to talk to

What does that look like in practice?
I used Firefox password manager for years, and moved to Bitwarden for:
- Passkey syncing
- Bitwarden on Android works properly, compared to Firefox's dedicated password app that's abandoned.
- TOTP support (to use with some apps I don't want the strongest security)

But you are maybe right, if the only browsers you use are Firefox desktop/mobile.
whoa, did rust absorb the churn-loving former js devs?
OMG, I stopped paying for DataGrip and Rider about six months ago and still have full access to them on my work PC for daily use. My personal Mac, though, immediately flagged the expired license once it was up. I actually thought it was some kind of bug on my work setup that let me keep using Rider, DataGrip, and IntelliJ, but I guess it’s just how it’s designed to work if you stay on the last paid version?
I think it’s more accurate to call title this “… - A Better Webpack?”

It’s a build tool that swaps an underlying Webpack process with a Rust-powered process which aims to be API-compatible. With the Webpack ecosystem.

The Vite developers are working on the analogous Vite replacement, which is an API-compatible Rust rewrite of Rollup: https://rolldown.rs/
That is a false dichotomy. You are blonded by your hate for USA. You must have bean groomed by the communists.

(I am not American)
Names do have some importance. If you pick random words and assign them to things you deal with you will find yourself unable to reason about them. Try it, it is interesting. Yet names are not the pinnacle of design. Far from it.

Look at a mechanical watch. (For example, here: https://ciechanow.ski/mechanical-watch/). Those little details, can you come up with self-documenting names for them? I do not think so. In programming good design is very much like that watch: it has lots of strangely-looking things that are of that shape because it fits their purpose [1]. There is no way to give them some presumably short labels that explain that purpose out of the context. Yet we need to point to them as we talk about them [2]. The role of names in programming is thus much more modest. In the order of importance:

- They must be distinct within the context (of course).
- Yet their form must indicate the similarities between them: alen and blen are of the same kind and are distinct from abuf and bbuf, which are also of the same kind.
- They must be pronounceable and reasonably short. Ideally they should be of the same length.
- They need to have some semblance to the thing they represent.
- It would be nice to make them consistent across different contexts. Yet this is is incredibly tedious task of exponential complexity.

There is also the overall notation. Ideally it should resemble written reasoning that follows some formal structure. None of existing notations is like that. The expressive tools in these notations are not meant to specify reasoning: they are meant to specify the work of a real or virtual machine of some kind. The fallacy of self-documenting code is an unrecognized desire to somehow reason with the knobs of that machine. It will not work this way. Yet a two-step process would work just fine: first you reason, then you implement this on the machine. But it will not look self-documenting, of course. P. S. This is a major problem in programming: we keep the code, but do not keep the reasoning that led to it.

[1] fitness for the purpose, Christopher Alexander, “The timeless way of building”.
[2] notion vs definition, Evald Ilyenkov.
> decided to join in on the side of Hamas by shooting rockets

You answered your own objection then.
Just what the world needs, another javascript bundler.
strange that this link wasn't used, i guess: https://rsbuild.dev/community/releases/v1-0
https://archive.is/CsaUx
Do nifs have the equal process time stuff that regular elixir processes have? Where the BEAM will move the scheduler into another process if it's taking too long?

Forgive me if I'm mixing up my terminology it's been a bit since I have poked at Elixir.
Wonderful website. Kudos to the developer!
Many companies (like Vercel, Supabase, and so on) have built big businesses "wrapping" AWS. They literally compete with AWS and use AWS to deliver their offering.

This is a big market. There are room for lots of approaches.

I'm sure OpenAI, Anthropic, and Google will make a big business of this, but I don't see how you can rule out anyone else having good ideas and relying on big infrastructure providers to make them a reality.
> they can choose to emit whatever logs they want into the "transparent logs" and then emit whatever else they don't want into non-transparent logs.

The log is publicly accessible and append-only, so such an event would not go un-noticed. Not sure what a non-transparent log is.
Yeah I have worked with someone like that, but as someone who does actual work I don't see why because of that moron I have to document every step I am taking. Feel free to come in once a day and let me describe to you what I am doing, the rest is in the commit messages.

The guy I worked with was thrown out recently. Unless you work in complete isolation your peers know you are not doing your job, and once that pisses them off enough it will be more widely known.
Hey, sorry I was offline a while

I think we might agree - and my original wording was tainted by emotions.

- indeed, there was changes in code that can be sold as “attempted security fix”
- indeed, as I think we both agree, the main security issue still needs attention to this very day
People prefer to argue endlessly about private vs state funded healthcare without realizing that issue is completely orthogonal to the massive doctor shortage.

Same thing with the housing debate really. People prefer to argue snot rent control instead of just building more housing.
> you can glance at the nesting to see which ones affect the line you want to edit, and ignore the others.

Only if all the cases return! Only then is it obvious that you have independent cases. E.g. suppose we have three Boolean inputs x, y, z and want to do something for each binary combination:

if (x) {
if (y) {
if (z) {
return 7;
} else {
return 6;
}
} else { // x && !y
if (z) {
return 5;
} else {
return 4;
}
}
} else { // !x
if (y) { // !x && y
if (z) {
return 3;
} else {
return 2;
}
} else { // !x && !y
if (z) {
return 1;
} else {
return 0;
}
}
}

How would this look with early returns? One obvious way:

if (x && y && z)
return 7;
if (x && y && !z)
return 6;
if (x && !y && z)
return 5;
// ... etc

(Let's ignore that we can just calculate the output with some bit twiddling; that's not the point).

Early return can be very clear, if we can bear repeatedly testing some conditions.
What have we been up to? (CEO Update) [video]
I imagine that would do. I've never done it but I suspect there is a dispute process, even if it is corrupt (for example, administered by the collections agency).
MUI Toolpad – Full stack components for React admin panels
From the creators of Material UI, Toolpad Core offers the components needed for your next admin panel and internal tools project. Bootstrap from scratch in our CLI with well chosen defaults, or drop Toolpad Core into your existing Next.js or Vite* project.
the one feature i would love is the tab overview page from safari. i can't hardly stand browsing without it, but i try to use firefox as much as possible anyways.
I see one such comment, but either way: I meant of course "no one" not posting the type of comment you'd be likely to ignore anyway.
Or how it could be used.
Why don’t they ease up or streamline their zoning and permit process so people can build back their homes after hurricane damage?
Always interested to read how others are choosing their tools, but if you don't want to get as bogged down in these details and are more inclined towards a rolling distro, I can vouch for Manjaro Sway. I've been using it for three ywars now on the original Framework laptop and while it has had some bumps along the way I am happy for the sensible decisions the maintainers have made for me, including most of the items here.

Would be nice to see a Debian or Fedora Silverblue equivalent of this kind of opinionated Sway base.
E-nose single antenna with graphene oxide for accurately sensing VOC gases
When realtime information was first available from my public transit system, it was via an SMS system that was widely advertised at every bus stop and train station, wherein each received a five-digit ID code. So you'd text that code to a special number, and it'd reply with the "NextRide" timings.

Unfortunately, it was wildly inaccurate. Every time I queried it, it said the bus had already left (I'd been standing there 10 minutes) or it didn't take into account active detours, or something. The only thing it was good for was determining the headways between buses (15, 20, 30 minutes?) and then you could at least calculate your longest wait at that stop.

The next iteration involved installing the bespoke and quite buggy app provided by the transit authority themselves. Now this theoretically depended on the same GPS trackers in the coaches as the SMS system had. But I had major troubles with the app, and I didn't like it, and it barely did anything else, and so I uninstalled it. And I did without it for a while longer.

Now the app is improved, and it's got QR pass technology included, so I reinstalled it, and I use it more. But, for tracking the buses, I prefer Google Maps.

Our transit authority graciously shares 100% real-time tracking info with Google, and you can track any bus in Maps, including crowdsourced info, such as "How crowded? Is security aboard?"

It works really well, and really accurate; displays every delay and updates by-the-minute as buses or trains pass each stop. Sometimes I pass the time just sitting there and watching my bus make its way down the street.
https://archive.is/kfXnF
Really timely, I'm currently writing Arduino code to get my bus departure times displayed on a cheap TFT screen. There's so many projects around this, but it's the first time I see it on a Kindle. Awesome!
it may depend on the cigarette brand. they treat the tobacco differently. some will put it under ammonia fumes heh and that modifies the nicotine, cracks it of sorts, which increases the potency by two or three orders of magnitude, like cracking coke just with nicotine.
This article is really good, and covers many important issues.

There were many similar issues when it came to the earlier attempts to add concepts to C++ (which would improve template dispatch), although the outcome was more about improving C++ programmer's lives, not safety.

It turned out trying to encapsulate all the things C++ functions, even in the standard library, as a list of concepts, was basically impossible. There are so many little corner-cases in C++ which need representing as a concept, the list of 'concepts' a function needed often ended up being longer than the function itself.
> I once worked at a tiny company, and their first 'contractor' employee didn't realise he had to set aside money for certain taxes

It's a valid concern. Should be easy to solve though: add a reminder to the employee handbook, and also remind them to check out local tax codes and set aside money.

> Some countries have problems with sham contractor arrangements

This usually doesn't apply to cross-border relationships though (which we implicitly focus on here I think, given this is a thread about moving to Japan). It is possible in theory, of course, for tax authorities to go after international contractors clayming they are international employees, but I haven't heard about such cases yet.

But there's an easy way to distinguish employment and contractor relationships: if you set a specific goal and a deadline, and do not tell them how to do the job, you have a contractor. (The goal does have to be specific, though, but you can say in your contract that you will use Jira tickets for that, I believe.)

I think that overlaps pretty well with most remote work. Specifics might differ, but as a general rule this is it what tax authorities pretty much everywhere will look for.

Disclaimer: I'm not a lawyer nor a tax advisor, just doing a lot of freelance and run an Estonian LLC for fun
Some level of supply restriction is probably warranted, though less than what we have now. It would be bad policy to have talented people train intensely for 8+ years, only to have them emerge on the other side with a "sorry, oversupply, no job for you."

I think availability of lengthy and highly-specialized training programs needs to be carefully calibrated to avoid other kinds of rackets (like have been seen with law schools and certain kinds PhD programs).
> In the US, medicine is a racket where the supply is intentionally constrained.

The correct solution in that case would be to increase CMS funding for US residency and fellowship spots (which was frozen for ~25 years).

You should see this for what it is, salary suppression by importing foreign labor, in a similar vein to what the tech industry did with abusing the H1B system until fairly recently. It's easy to lower costs by cutting corners on quality, but that is not a pro patient move.
It’s exactly the same for me. Threes never gets boring. I can almost finish 2048 every time. For me, that’s the definition of boring.
Whoever, owing allegiance to the United States, levies war against them or adheres to their enemies, giving them aid and comfort within the United States or elsewhere, is guilty of treason. [1]

To "adhere" means to support or be loyal to. In this context, it refers to someone aligning themselves with the enemies of the U.S., either by joining them or providing help and resources, such as intelligence, weapons, or logistical support.

[1] https://uscode.house.gov/view.xhtml?edition=prelim&path=%2Fp...
How are you using OAuth 2.0 Token Exchange (RFC 8693)?
What are some specific use cases where you or your company has found OAuth 2.0 Token Exchange (RFC 8693) beneficial? I'd like to learn about the practical scenarios where this standard has been implemented and how it's enhanced your workflows.
> Those are the sorts of things that a browser, with access to all your web apps and browsing data, could begin to do on your behalf. And with AI tools like the new “Computer use” feature from Anthropic, that kind of thing is beginning to become automated and possible.

"simple" is probably not the word i would use.
Well it is kinda blasphemy to swear with evil proprietaryness in a loving FOSS community
I'm not going to bother slogging through everything to be able to speak in specifics for every airplane ever built, but:

A RAT provides backup electrical and/or hydraulic power for control surfaces (and other goodies). A RAT would certainly be inspected during a heavy check and likely even during line checks (e.g. an "A" check or equivalent). How often is gonna depend on the airplane. But to suggest that a critical piece of equipment isn't checked regularly is just silly.

Additionally, it's pretty much guaranteed that if an airplane comes with a RAT the RAT is required to be functional for ETOPS flights. That alone means you're gonna be inspecting it pretty frequently. ETOPS certification has three parts: airplane, airline, and humans. You'd want to look at the ETOPS Maintenance Document at whatever airline to be sure.

Outside of Asia (where domestic widebody flights are still common) I'd guess many if not most 787 flights are ETOPS flights.
Researchers and statisticians will be poring over covid data for decades to come. There are so many variables to control for that at this point that definitive statements are hard.

For example, the "US death rate" is somewhat meaningless because it encompasses multiple communities which adopted multiple strategies, with multiple levels of diligence, and covers both large concentrated populations and small distributed populations.

US deaths were not evenly spread, so there was certainly some variety of outcome with variety of mitigation.

Overall, the US death rate though is high, which suggests that it's very high in some areas. The correlation between strategy, compliance and outcome will feed researchers for a long time.
Actually yeah, sounds pretty reasonable. I haven't looked into it much yet myself – could you share some links where to start, please?
Education (ie enabling Learning) boils down to the Explore-Exploit Tradeoff.

Herbert Simon - "The criticism of Rote Learning or Practice (called "drill and kill") is popular. Nothing flies more in the face of the last 20 years of research which indicates that real competence only comes with extensive Practice. In denying the critical role of Practice one is denying children the very thing they need to achieve real competence. The Teacher's task is not to "kill" motivation by demanding drill, but to find tasks that provide practice while at the same time sustaining interest"

Put Papert and Simon together, and out pops the Explore-Exploit Tradeoff.

Its not just in Human but you can see how plants learn and how bacteria learn all run into the Tradeoff.

If most people need just 5% Explore and 95% Exploit to Survive then everything from economics, politics, society, culture ends up being Exploitative.

As soon as 1 person discovers gold in an unexplored part of the jungle, next day morning, everyone else will show up there. They don't need to spend the years running into dead ends the explorer might have run into. We see this all the time.

People have been wondering for a long time, how to Push the balance more in favor of Explore over Exploit. There is lot of historical, economic and social forces that keep the balance where it is.

Anything that cause a shift in the balance will have major economic and social fall out.
It would really help for primary care doctors to start more private businesses - much like dentists. There is no reason to be stuck in hospital systems that grind doctors so much.

The revenue savings from the hospital not taking cut might even make primary care a highly paid profession - enough to incentivize more people to take up this specialization.
Laws of UX – best practices when building user interfaces
Always wondered why there are no large scale protests against credit score. I wouldn't live in a country where corporations got such power. Not entirely sure why there is not more outrage about it; it doesn't benefit anyone but big corporations, so why does the average or even any citizen (rich people just probably pay their cable or gym even if they don't want to, but it's not benefitting them either?) just take it? It's a debilitating thing which china happily copied from you and 'improved' on.
I've worked on SourceSailor, a CLI tool that tries to tackle this exact problem, though I should note it's still in early stages. While it can't yet fully map complex codebases like the Linux kernel (that's a significant challenge), it does provide some useful capabilities for understanding smaller to medium-sized codebases.
SourceSailor generates a structural understanding of your codebase and creates reports about dependencies and project architecture. It leverages LLMs (OpenAI, Anthropic, or Gemini) for analysis and allows you to ignore files you don't want to analyze (following how .gitignore is used and parsed) to focus on relevant parts of the codebase.
However, I should be clear about its limitations:

- It's not yet as interactive as Cursor or Aider, and I am not planning to make it like that

- Large codebases (like Linux) would be challenging due to token limits of current LLMs. Though gemini may help, but we all know it's privacy policy shenanigans.

- The analysis is more high-level rather than detailed implementation specifics. Though it helps you to understand the codebase, and it tries to explain interesting parts, but ymmv...

If you're specifically looking to understand massive codebases like Linux, SourceSailor probably isn't the straightforward yet, and there will be workarounds. But if you're working with smaller to medium projects and need help understanding their structure and dependencies, it might be worth trying.
The project is open source if you want to check it out or contribute: https://github.com/PrashamTrivedi/SourceSailor-CLI
Worse isn't better, it's worse.
The correct title is Elon Musk's Secret Conversations With Vladimir Putin.

Omitting the word "Secret" makes it seem like the conversations were innocuous. Keep in mind that Musk has a security clearance that allows him access to certain classified information. If he is having secret conversations with Putin while possessing classified information that's a problem.
We do it all the time with lawyers and PhD scientists of all stripes. Why should doctors receive special treatment?

(Wrote this before your edit introducing the second paragraph)