skysight-inc/HackerNews huggingface dataset:
As the article points out, $212m will upgrade the entire train control system to a modern one (they admit to be "five generations" behind). Phasing out floppy disks is a consequence of this. They're cereinlynnot paying someone this much to just replace the floppy disk system but nothing else; that would be insane. The headline is a little flippant, and they don't mean it literally.

Many people on HN these days seem to reply without reading the article headline first...
Why is this worse than a company renting out physical copies, though? This is the way games rentals work for physical copies. The renter buys one copy and rents it out numerous times. (It's also the way libraries work for books, of course.)
Dude. I don't judge my knowledge after the answer is given to me. If I was the junior programmer assigned to the author and they were having this chat with me I am telling you as a beginner I wouldn't be able to do it.

Of course if you show me the answers I will think I can do it easy, because answers in programming are always easy (good answers anyways). It's the process of finding the answer that is hard. And I'm not a bad programmer either, I'm at least mediocre, I'm just unfamiliar with web technology.
They are upgrading the whole system, the floppy is just easiest-to-explain part.

> The new control system is supposed to be five generations ahead of what Muni is using now,
[...] challenges in maintaining expertise in 1990s programming languages have further encouraged the SFMTA to seek upgrades.
I forgot how much I loved this task switcher (Android 9)
Cool design. It’s well done for it being a 20 minute effort. And that’s where these things currently shine.
Isn't that just a (expensive) library? And libraries are constantly being lobbied against by publishing groups, yet there doesn't seem to be major harm (financial) caused by them.
Do you call people pedophiles when they hurt your feelings? If so, you're an asshole too. Do you do it to your 22.5 million followers? Then you're an even bigger asshole.

> What do you feel about Musk providing Starlink to the Helene victims?

To the extent that he did: great! People believe it was philanthropic to a far greater extent than it was. He didn't give away or even loan any Starlink terminals, he gave people essentially 2-3 free months of service after they purchased the ~$400 terminal. The free service is cool! Generosity is good and I'm thankful he gave away what he did.

And obviously it's great that Starlink exists at all to be able to help out in such a situation, even if victims and/or the federal government are footing the majority of the bill.

And FWIW, I think Musk's heart was in the right place trying to help those kids. I was very excited by his work while it was happening. But yeah, the pedoguy thing was a turning point and, unfortunately, quite indicative of an overall slide into a very, very weird mindset that afflicts him to this day. It's a real bummer, because he's obviously capable of incredible things.
Congrats! I noticed it was initially closed-source and now it's opened, nice! Is it a project funded by HuggingFace? (Not immediately clear to me).

I've built a macOS assistant too (more advanced though), with focus on privacy and easy of use (https://getfluid.app). I'd love to open-source it, but not sure about sustainability of such business model. Right now I'm experimenting with a fully private paid Llama hosting (for GPU poors).

Good luck :)
Not everyone... Some might also be useful idiot or uncompensated trolls doing it as a hobby?
It's not. None of the UI is present in webview. Webview is just the 'rendering pane'.
git bisect.

I have a friend, he thought rebasing for linear history was not worth the effort. I told him to do it, because I once had to find a regression over thousands of commits in a merge-heavy code base and it took days. He was not convinced.

Then he had to find a regression. It took over a month.

With git bisect's binary search, it would have taken half a day.

My friend now rebases.
And scalachess is written in scala, to piggyback off a post earlier this month that claimed the language is dead. The project is very successful and has been around and maintained for years.
I'm a fan of SSH certificates and cannot understand why anyone would set up certificate authentication with an external third-party CA. When I'm selling people on SSH CA's, the first thing I usually have to convince them of is that I'm not saying they should trust some third party. You know where all your servers are. External CAs exist to solve the counterparty introduction problem, which is a problem SSH servers do not have.
And decoders.
What about extending the protocol to an actual channel-bound challenge-response one, without the need for a (risky) out-of-band key exchange via a QR code?

We could call it something like Web Authentication. I could even imagine small, keychain-sized USB authenticators that you have to touch a capacitive button on to approve an authentication :)
Nazi might be too strong? Don't think they used that word though?

Russia is an objectively fascist (not technically "nazi" of course) state, though. It literally ticks almost all the boxes.
A very interested paradigm introduced here by Anthropic is that this content is hosted. And the output of LLM is amde a self-hosted app, ready for consumption by consumer. Not far away from build my own site kind of thing.
I am a big fan!
In good faith I will just assume that you are incredibly naive.

Go read discussions in the Russian IT communities [1] [2]. The overwhelming reaction is not "let's go overthrow Putin!", but strong negative reaction, loss of respect, and alienation towards Linus, even across those who explicitly against the war and Putin.

[1]: https://habr.com/ru/news/852962/comments/

[2]: https://www.linux.org.ru/news/linux-general/17766938/page3#c...
I think one of the big problems with the ham scene is, ironically, communication. If you search the internet for information about using ham radio, the loudest voices are sour, cantankerous forum dwellers for whom unwanted clandestine vigilante radio regulation enforcement and compliance are the most interesting part of amateur radio. Good luck if you don't already know how taboo Baofeng, et al radios are before you write your first post. That's not appealing to most people. In fact, most find that sort of personality repulsive. Who wants to ask a question somewhere about a new interest if you're nearly guaranteed to elicit a condescending non-answer from someone more interested in making themselves feel smart than they are at being a good resource?

Communication isn't just putting the information out there, it's about sharing the good feelings people get from doing ham stuff. If there's a charismatic amateur radio youtuber or something that's way more about the joy of using radio rather than the nitpicky details even experienced hams find tiring, I haven't encountered them. They probably need to do some serious promotion. Lot's of old farts like to think young people just aren't technical enough or don't have the discipline: it's bullshit. Compare how many technical workers there are today vs 40 years ago. I'll bet 90% of what repels new hopeful hams from getting involved boils down to the curse of expertise, gatekeeping, and angry hall-monitorism among the most vocal people that haunt places that new folks might go for information. It's not just amateur radio that does this, but it might be the biggest offender I've seen at least since the Perl newsgroups in the late 90s.
Norway to increase minimum age limit on social media to 15 to protect children
To be fair, the author already put tons of work into this post. Don't begrudge them for not doing even more.
I'm not so totally pessimistic about their chances of winning. That 4th Cir. case is interesting. Carpenter touched on this subject. So did Jones in 2012. Nobody thought that Jones would be decided the way it was because practically every court had swung in favor of the cops. Obviously the makeup of the court was different, but I'm not sure this is a partisan case?
Hahaha, you're including Bjarne in that sweeping generalization? C++ has long had a culture problem revolving around arrogance an belittling others, maybe it is growing out of it?

I would point out that for any language, if one has to follow the standards committee closely to be an effective programmer in that language, complexity is likely to be an issue. Fortunately in this case it probably isn't required.

I see garbage collection came in c++11 and has now gone. Would following that debacle make many or most c++ programmers more effective?
Be careful with SSM, it can provide pretty much unlimited access: https://github.com/Cyberax/gimlet

You can use it to tunnel arbitrary traffic inside your VPC.
Underlying tech is “Openpubkey”.

https://github.com/openpubkey/openpubkey

BastionZero just builds on top of that to provide a “seamless” UX for ssh sessions and some auditing/fedramp certification.

Personally, not a fan of relying on CF. Need less centralization/consolidation into a few companies. It’s bad enough with MS dominating the OS (consumer) space. AWS dominating cloud computing. And CF filling the gaps between the stack.
No, it is not. Just create an app in Xcode and see that you have a WebView component. Easy to check: https://developer.apple.com/documentation/webkit/webview
I didn’t understand the marketing term “zero trust” and I still don’t.

In practice, I get it - a network zone shouldn’t require a lower authn/z bar on the implicit assumption that admission to that zone must have required a higher bar.

But all these systems are built on trust, and if it isn’t based on network zoning, it’s based on something else. Maybe that other thing is better, maybe not. But it exists and it needs to be understood.

An actual zero trust system is the proverbial unpowered computer in a bunker.
I'm not saying the Russia invasion is not evil, but man, did you watch too many popcorn movies?

How child play and naive you're thinking of politics. If Russia ever had that degree of power to control the behavior of its citizens, it would have already ruled the world.

You can't even fully control a 5-person band and you're telling us that magically Russia is able to control millions of people, amongst which none of them know justice or human rights enough to leak any info. You know, even under the infamous assassin attempts from FBI, Snowden managed to flee to Russia. How can Russia be more powerful than the US in this way?

I'm not saying good words to any regime. I mean both the US sanction and the Russian invasion suck. I don't want another country bossing over what you can do, and I don't want another country pointing guns on your head either.
Oh dear, imagine if people bought a bunch of books, let’s say Harry Potter, and then let anyone come in and read books for a fee! Or even rent them! would be horrible!

Isn’t it hilarious how having property rights and freedoms over Things You Paid For is now unthinkable??
That's a super interesting way to look at it. Got my wheels spinning, I guess you can in a way then say... the person who makes super easy click in persistence is very winning. For example, lets say I want to make an app that hosts all the docs the founders in my "funds" accelerator thing above. I probably want to spend a week once a year upgrading that front end with the AI tools, new coat of paint if you will, but I want it to "just work" on top of however the data it's pulling is persisted on. At that point, I really could do anything I think... at that point, people are gonna build some cool stuff I'd imagine.
You should do it then.

Besides all of this is completely besides the point. This isnt useful for a programmer. These examples are barely useful for a layperson. And said layperson is paying money and time for this.
Super cool! I've had similar ideas when I first saw StreamDiffusion. The possibilities are endless
Jones relied on the fact pattern of a physical intrusion on private property (the police placing a sensor on a car). Here, the only difference between Flock and the closed-circuit cameras that have blanketed America for decades is the fact that a computer is looking at the images.
A few years ago, as my rebellion ramped up, I enrolled in a Christian Health Sharing Ministry. They published extensive disclaimers, telling members, "THIS IS NOT INSURANCE. DO NOT TREAT IT LIKE INSURANCE. WE RECOMMEND THAT YOU CARRY REAL INSURANCE."

Of course, I couldn't afford both the Health Share and real insurance, so I took the risk. But it soon became apparent that I was in over my head.

I barely understood the whole insurance claims/billing process. I had not been too involved, since Medicaid coverage had made a lot of that effortless and invisible.

So I had to learn about all these billing practices, and what's more, the Health Share had their own terminology that was parallel, but not equivalent, to insurance terminology. Thankfully, they published a detailed Lexicon document, in addition to their Sharing Guidelines.

All claims (Medical Needs) were manual. No providers would directly bill the HSM. The bills they sent to me were useless for this purpose. I needed to cajole each provider into generating an itemized "SuperBill" with all the info required for the HSM. Then I'd submit it to the HSM and literally pray.

I put up with this for a couple of years. I heard from other people how draining it was to deal with all this. So I finally withdrew. Now I carry regular Marketplace insurance.

But I'm descending into a hellscape of bureaucracy, and I'm scared of it. For years I've been trying to advocate for my health and reduce my health care costs by refusing unnecessary treatments that were making me sicker, and worsening my conditions.

But the insurance company seems hell bent on sending me on fool's errands and wild goose chases. For example, I didn't receive any billing communication for two months. Then, AutoPay failed last month. They sent me incorrectly-worded warning notices. I went around and around with CSRs about this. Finally we kicked the can down the road. They assured me that my insurance wouldn't terminate as it had been threatened.

But now my PCP's office is coming back to me with denials from 6 months ago. I'm tearing my hair out. Indeed, why do I need to be in the loop? They are filing claims. Their billing department needs to work this out. I'm powerless to tell my [ex-]insurance carrier what to do. I already sent them proof of coverage! Leave me alone!

It's a nightmare, and I predict that it will eventually eat my entire life. Many elderly people are slaves to their physicians and specialists and medications. My own parents are on a constant treadmill of doctor's appointments, every week, blood draws, ridiculously complex medication rituals.

My sanity and faith in Christ is worth far more than cooperation with these mendacious, lying, thieving swine. Mark my words.
Well this is what tests are for. You could make the same argument about outsourcing or "kids these days" and so on
That's not actually any better, it's worse. A guide that's not updated for 5-10 years means that it's missing 5-10 years of material and newer references. Plus, as a guide it still fails, numerous sections are missing any references to follow, that is: It is a guide that often points you nowhere.

As I pointed out before: It took over 20 years for them to add a section on security. That was a critical issue when it first came out, an even bigger issue in the 2010s when v3 came out, and they only now got around to it. And that chapter lacks references for an entire section. That is not a good guide.

Make it a living document and keep it continuously updated with either expanded or deepened coverage, kept up to date with what's been learned in the industry. Then it will be useful. Otherwise, just go to Wikipedia and you'll get a better resource.
Same reasons for companies still buying “CrowdStrike” and installing that crapware. It’s all for regulatory checkboxes (ie, fedramp cert).
Goldman and Apple fined $89M over US credit card programme
What would happen if we made civil time purely solar, and just converted as needed using the best available approximation data you have?
Presence or absence of a watermark is going to have to be discussed and reviewed against mechanisms to either subvert or prove it's provenance. I don't have a view here yet beyond hoping some scheme can be worked out which doesn't intrude government controls on expression and the like, but which maintains a chain of trust and custody.

The word chain there is cryptographic chain of trust, not blocky chains.
https://archive.ph/WHyEb
They drive to remote places for cheap parking. Sometimes all night. The lines often depart from densely populated cities and bring that large capacity to the countryside. You may get thousands of seats for 2-3 customers. In the other direction it is the same. Last miles people are packed like sardines and bring in all of the revenue. If you have 500 seats a 3 euro ticket would at least pay for the trip. 50 cents is better than nothing. Shops at the train station bring in a large part of the money.

There is also a panopticon effect where people behave themselves decently if people are watching.
What a terrible tragedy, all the more because that gun should have been locked up.

Firearms instructor Claude Werner writes that “[if] you’re not willing to spend a little bit of time, money, and effort to keep firearms out of unauthorized hands, then get rid of your guns.” (1)

He’s done a lot of research and writing on negative outcomes like this one, and said it completely changed the way he views things - it certainly did for me.

I see lots of discussion about what gun and caliber to get, but the essential, potentially life saving, safety rules for living with guns are an afterthought - perhaps there’s not much money to be had as there is in selling a gun.

1: https://thetacticalprofessor.net/2016/01/24/serious-mistake-...
Comparisons like this are absurd. Why should fines associated with a small segment of apple's business be compared to their global revenue? Is the implication that all offenses should be fined based on global revenue, such that if they broke some law in Liechtenstein that the government there should be able to demand 5% (or whatever) of apple's worldwide revenue?
Hah. I did pretty much all the same stuff in my previous company.

One thing that we did a bit better: we used AWS SSM to provision our SSH-CA certificates onto the running AWS EC2 instances during the first connection.

It would be even better if AWS allowed to use SSH CA certs as keys, but alas...
Why it's done now when no new sweeping sanctions were introduced? Was Linux Foundation "circumventing" sanctions for many-many months?

The US also has active sanctions targeting Huawei, but there is a fair number of people in the maintainers list with Huawei e-mails. Double standards much?

UPD: As expected, downwotes is the only response to those questions.
Discussion (196 points, 6 hours ago, 100 comments) https://news.ycombinator.com/item?id=41926978
The first mouse pointer is a bitmap of an arrow pointing straight upwards.
Just to be clear, I'm not saying good words to any regime. I mean both the US sanction and the Russian invasion suck. I don't want another country bossing over what you can do, and I don't want another country pointing guns on your head either.

Russia is bad, but that doesn't mean I'm in support of bans like this without a reason. Just because you "have the reason to commit crimes" is not strong enough a reason to exclude you! How child's bully it is!
Court grants WP Engine's motion to shorten time [pdf]
To me, that’s the charm.
> What matters is it meets functional and non functional requirements.

Good luck expressing novel requirements in complex operating environments in plain English.

> Then he learned to code properly fascinated by the experience. But the fact remains, he shipped an application that did something for someone while many never did even though they had a degree and a black belt in pointless leet code quizzes.

It's good in the sense that it raises the floor, but it doesn't really make a meaningful impact on the things that are actually challenging in software engineering.

> Then he learned to code properly fascinated by the experience. But the fact remains, he shipped an application that did something for someone while many never did even though they had a degree and a black belt in pointless leet code quizzes.

This is cool!

> I'm fully convinced that very soon big tech or a startup will come up with a programming language meant to sit at the intersection between humans and LLMs, and it will be quickly better, faster and cheaper at 90% of the mundane programming tasks than your 200k/year dev writing forms, tables and apis in SF.

I am sure there will be attempts, but if you know anything about how these systems work you would know why there's 0% chance it will work out: programming languages are necessarily not fuzzy, they express precise logic and GPTs necessarily require tons of data points to train on to produce useful output. There's a reason they do noticeably better on Python vs less common languages like, I dunno, Clojure.
I've been managing game servers that get attacked on a daily basis for almost a decade. I've tried Cloudflare a few times (on their business plan) and seen poor results every time.

Cloudflare has a lower latency product called Argo Smart Routing [1]. When we tried Argo in 2020, we still saw 10+ ms increased latency across the board, which is unacceptable for competitive multiplayer games. That said, Discord voice still (or used to) uses Argo for voice, so there are certainly less latency-sensitive games where it would work well.

The other issue with sockets over Cloudflare (circa 2020 on business plan) is they get terminate liberally with the assumption you have a reconnection mechanism in place. I'd imagine this is acceptable for traditional WebSocket use cases, but not for games.

Services like OVH & Vultr also advertise "DDoS protection for games," but I've found these to be pretty useless in practice. We can only measure traffic that reaches our game servers, so I have no way of knowing if they're actually helping at all.

Your best bet is getting familiar with iptables and fine-tuning rules to match your game's traffic patterns. Thankfully, LLMs are pretty good at generating these rules for you nowadays if you're not already familiar with these tools. Make sure to set up something like node-exporter to be able to monitor attacks and understand where things go wrong. There have been a few other posts on HN in the past that go into more depth about game server DoS mitigation [2] [3].

I built something in the same vein for my startup (Apache 2.0 OSS, steal our code!) [4] that runs a series of load balancers in front of game servers in order to act like a mini-Cloudflare. In addition to the basics I already listed, we also have logic under the hood that (a) dynamically routes traffic to load balancers and (b) autoscales hardware based on traffic in order to absorb attacks. We're rolling out a dynamic bot attack & mitigation mechanism soon to handle more complex patterns.

[1] https://www.cloudflare.com/application-services/products/arg...

[2] https://news.ycombinator.com/item?id=35771466

[3] https://news.ycombinator.com/item?id=28675094

[4] https://github.com/rivet-gg/rivet
Most non browser apps have flags or a cli version.
I have also tried to do this and it didn't work as smoothly as you claim.

I don't think either of you are wrong; it just heavily depends on the complexity of the app and how familiar LLMs are with it.

E.g. rewriting a web scraper, CRUD backend or a build script? Sure, maybe. Rewriting a bootloader, compiler or GUI app? No chance.