skysight-inc/HackerNews huggingface dataset:
SiriusXM | Senior Engineers - Platform Engineering | Full time | Hybrid in Dublin, Ireland

SiriusXM is opening a brand new technology office in Dublin, and Platform Engineering is looking for several senior-level Software Engineers and Cloud Engineers to build and enhance our internal cloud developer platform. If you get excited about building tooling and paved paths to help internal developers create, deploy, and operate cloud-native applications quickly, reliably, and securely, we'd love to talk to you!

Please apply directly:

- Senior Software Engineer - https://careers.siriusxm.com/careers/jobs/16102?lang=en-us.
- Cloud Software Engineer - https://careers.siriusxm.com/careers/jobs/16313?lang=en-us (apologies for the formatting on this one)

I'm also happy to answer questions via email (in profile).
There are two types of feature - business feature and infrastructure feature. From my experience, once business feature is built, it's hard to remove it because it's a product question.
That does not sound right. Induction cooktops don’t do anything if they are turned on without a pan on top. The worst that can happen is the pan heats up. If there’s nothing on top, or something that is not a pan, it will just turn itself off after a couple of minutes of doing nothing.

That page is about cooktops with resistive heating, not induction. These get hot when they are turned on, even if there is nothing, or something not magnetic, on top.
This looks to use Web Sockets, not WebRTC, right? I don't see any RTCPeerConnection, and the peerServer variable is unused.

I ask because I've spent multiple days trying to get a viable non-local WebRTC connection going with no luck.

view-source:https://thelongestyard.link/q3a-demo/?server=Seveja
Or a parent that's tired of the alarmism and peer pressure to parent a certain way, like abstinence pledges? The whole premise of these sorts of campaigns are based on flimsy evidence.
You're both right, but are coming at this from different directions. In the past a rainbow table was intended to reveal as many passwords on a system as possible once you got a copy of the passwords. If one of them happened to be a high-value account, great. But maybe access to an ordinary account is good enough for their (nefarious) purposes.

It's also possible to build a rainbow table when you already know an account is high-value and have the salt. You can't go download that rainbow table - you'll have to compute it yourself, so the cost to the attacker is higher. But if the account is valuable enough to justify targeting specifically, you'll do it.
This was a great read. Thanks to the author for the vulnerability.

In this thread and others, HN does a lot of talking about the fixed properties of these languages and frameworks.

Something I don’t see much is: choose the tool that you and your team are most familiar with.

It’s relatively easy to learn a new language, but it takes a long time to learn an ecosystem. Learning that ecosystem takes time away from focusing on your customer.

I recently started a new web app and tried to use Django because of the batteries-included framework “should” have been the right tool for the job.

But I haven’t used Django in 15 years and it was slow going. After a few weeks of slow going, I rewrote the whole thing in Typescript in a week. Not because of any general argument that TS is better, but because it’s the ecosystem I know well. Not by choice, but as a function of the jobs I’ve had.

I’d like to suggest that it’s okay to choose the tool you’re most familiar with, because you’ll move faster, write better code, and frankly web apps can be written in any of these languages.
Next.js 15 Deep Dive: Building a Notes App with Advanced Features
In this blog article, I'd like to go through the most important Next.js features which you'll need in practical scenarios.

I created this blog article as a single reference for myself and for the interested reader. Instead of having to go through the whole nextjs documentation. I think that it will be easier to have a condensed blog article with all of the nextjs important practical features which you can visit periodically to refresh your knowledge!

We will go through the bellow features together while building a notes application in parallel.

App Router

Server Components
Client Components
Nested Routing
Dynamic Routes
Loading and Error Handling

Server Actions

Creating and using server actions
Integrating server actions with client components
Data Fetching and Caching

Using unstable_cache for server-side caching 1. Revalidating cache with revalidateTag
Using unstable_cache for server-side caching
Streaming and Suspense

Page-level streaming with loading.tsx
Component-level streaming using Suspense
Parallel Routes

Creating and using named slots
Implementing simultaneous rendering of multiple pages components
Error Handling

Implementing error boundaries with error.tsx
Stripe is a tough place at all levels, I saw more staff engineers get fired there than anywhere else.

Had some bad managers and then some good ones. Did my time and got out.
I built a modern POS system that works entirely offline after my store lost $3k in a single day due to internet outage. While cloud-based POS systems offer convenience, they become useless when connectivity fails.

Here's what makes it different from other POS systems:
- No internet required - everything runs locally
- One-time purchase, no subscriptions
- Super lightweight (20MB install size)
- Open source so you can customize it
- Built on SQLite, so your data is always accessible
- You OWN the software (full rights of the source code)

Key Features:
- Fully offline operation (no internet needed)
- Native desktop app built with Tauri/Rust (20MB install size)
- Modern UI with Shadcn/UI components
- Real-time inventory management
- Built-in analytics and profit tracking
- Local SQLite database for reliability
- Zero subscription fees

Tech Stack:
- Frontend: Next.js 14, TypeScript, Tailwind CSS
- Backend: Tauri with Rust
- Database: SQLite with SQLx
- State Management: Zustand + React Query
- UI Components: Shadcn/ui

The app performs all operations locally, making it ideal for:
- Stores in areas with unreliable internet
- Businesses that want data sovereignty
- Merchants looking to avoid subscription fees
- Small retailers needing simple, reliable POS

Details/Purchase: https://ramiguess.gumroad.com/l/heebq

I'm particularly interested in feedback from:
1. Store owners who've faced similar connectivity issues
2. Developers who've worked with Tauri/SQLite for business apps
3. Anyone with experience in retail software

The source is well-documented and adaptable for different business types. Happy to answer questions about the implementation or business logic.

---

Note: This is my first commercial Rust project, transitioning from Node.js backend. The performance gains and reliability have been remarkable.
> By leveraging provider-aware (Vodafone,Orange,Telia, etc.) NAT puncturing strategies we create direct UDP-based phone-to-phone connectivity.

> We utilise parallelism by opening at least 500 Internet datagram sockets on two devices. By relying on provider-aware IPv4 range allocations, provider-aware port prediction heuristics, high bandwidth probing, and the birthday paradox we can successfully bypass even symmetric NATs.

U mad. Love it!
Show HN: Private, in-browser, CSV-SQL query runner using SQLite-WASM
Upload CSV, and start querying, all locally without any data leaving your browser. Can handle large CSV's easily. Download query results once done. Uses sqlite-wasm binary.
At Mexico's school for jaguars, big cats learn skills to return to the wild
Everything in life needs a healthy amount of "fuck it" attitude.

The second I learnt this and started living by it my happiness shot up and my anxiety went down.

Who cares if you mess up, you have to stop living by your ideas of other people's ideas of you.
I want to try to set it to `auto` and see what spicy things it comes up with.
Considering that each kernel / kernel size is usually custom tuned on NVIDIA, I'd say no. Working in this field at several different companies, there are likely thousands of hand-tuned variations of a simple GEMM kernel. Each one required an engineer to look at specifically, even if they're all variations on a common theme.

As far as I know (and again, I work in the field of AI compilers), we're still a ways off from complete end-to-end generation of highly optimized kernels. If you want it to go fast, you need to write it by hand [1], and then test and validate.

Moreover, chip makers are constantly adding new features (Tensor Cores in NVIDIA for example), so the compiler is always playing catch up and at some point an engineer has to sit down (likely a team of them) and think 'what's the best way to exploit this hardware functionality for software performance?'. Then they have to test and validate that, and then either write a kernel, or attempt to put that know-how into a compiler.

Multiply this times the number of kernels in a typical suite, and... yeah.

And that was my point about herculean effort on modern chips. Assembly language isn't just the old 'Add register 1 and 2 and dump in R3' anymore. It's 'Use this instruction to access memory in this way, so that it's in a compatible format for the next instruction' and 'oh yeah, make sure your memory synchronization primitives are such that the whole thing is coherent'. Good luck!

Even going one step up into a higher-level language, you have to know how the kernel gets compiled to make it worthwhile. Again, it is trivial to write a correct opencl matrix multiply, but that's never going to be the highest performance. You have to know the hardware intimately. This is where having the software co-designed with hardware is very important. Basically, every AI chipmaker of any importance does this, including the startups, like Groq and Cerebras.

[1] A lot of kernels share basic patterns, so its not as hard as it sounds, but definitely requires engineering effort to get the design right.
Rewrite it in any framework that _doesn't_ make you dependent on platforms waiting to milk you dry when usage takes off.
I identified with this story quite a bit. I had a similar experience at a cut-throat big name tech company. It's extremely political and the business has to run extremely sharp to succeed. Hence the hightened politics and management involvement at that level. You did a great job with the writing! It was fun to read, and interesting to hear the story. Best of luck in the future
This seems both pessimistic and conflating two issues. It's entirely possible that generating code is a bad idea but LLMs can be effective at finding vulnerabilities in human written code. Also, this is an applied research project, you have start small to prove the idea and iron out the wrinkles then you can find efficiencies to scale up later.
I thought Python didn’t support cgi scripts any longer.
I would stay with Nextcloud but maybe ditch the AIO. If you are not locally hosting, then look at Opalstack. I've been happy with them on my Mastodon instance there.
I think that would be challenging due to the nature of a potential man-in-the-middle attack here. An attacker could view and change contents of the request therefore making the hash check useless (other than for integrity)

Automatic updates and/or checks to a domain from a desktop app is a security angle that doesn't seem to be given as much attention overall. There are other scenarios like a hostile domain takeover (e.g. the original author stops renewing) which I haven't found a good solution to.
> Unless you have proof of active exploitation

Wouldn’t a “good criminal” just exploit it forever without getting caught? Your timeline has no ceiling.
Justine gets very close to the hairiest parsing issue in any language without encountering it:

Perl's syntax is undecidable, because the difference between treating some characters as a comment or as a regex can depend on the type of a variable that is only determined e.g. based on whether a search for a Collatz counterexample terminates, or just, you know, user input.

https://perlmonks.org/?node_id=663393

C++ templates have a
similar issue, I think.
I second this. Well put
This might also be of interest to anybody who enjoyed these articles: https://www.scratchapixel.com/.
> Who gets to prioritize which restaurant to mention?

That’s an easy one! Whatever restaurant or fast-food chain paid the most, obviously. That’s be triple-dipping: get money for the car, get money from the “customer” because obviously such premium features require a subscription, and then get money from businesses who want to attract the “customer”.

The best thing is that you can do the same with service stations. Or car parks.
> Is it even possible to support generalized string interpolation within a strictly regular lexical grammar?

Almost certainly not, a fun exercise is to attempt to devise a Pumping tactic for your proposed language. If it doesn’t exist, it’s not regular.

https://en.m.wikipedia.org/wiki/Pumping_lemma_for_regular_la...
I have Nothing against anyone who does the best they can in a bad situation.

Observing Intel, my feeling has been that "best you can" has been "bail out" since just after the PPro. The company has worked hard to waste a whole generation of talent and possibility. It took immense effort.

Anyone who looks at that performance and says "I was proud to be part of that" is not someone who will be happy working beside me, anyway.
Did you choose the legacy C trigraphs over || for aesthetic purposes?
It's a strange choice to put a PDF with links on a website that contains just links.
Why don't put the links on the web site, as the web was invented to be used for? What's the benefit?
i have friends that i worked with, who would gladly be a reference, and i would not mind them doing it, but really, at best they could confirm that i am a nice person to work with. and i would never use anyone as a reference who would not do that. so the whole thing feels rather meaningless.

but that's not the only thing. in germany it is common to ask for written reference letters which are called "arbeitszeugnis" (work report card, like the report card you get from school). that term makes me feel like i was a kid. it clearly establishes a hierarchy. i am the lowly subordinate employee and you are the superior employer that i am to look up to. it gets really wierd when i consider that i have been on the other side as an employer myself. (and by law these letters must be honest and may not contain unfounded negative statements which makes employers avoid writing anything negative because they could get sued.)

and then there are places who ask for actual school report cards or at least grade averages or want to know how i did in math in school, as if that was in any way useful to understand how i would do as a programmer decades later.
Yeah, exactly, it has never been clear that we would find a use for parallel computation outside of niches like graphics and HPC. And in fact most of the history of computing has been evidence of the opposite: useful computation has been predominantly serial in nature. But here we are now.
> This wasn’t the first case of attributing unexpected mechanical defects to invisible pests. The popular term “bug” to describe technical glitches was used as early as 1876.

I always thought the term "bug" came from people finding a literal bug stuck in the machinery of an early computer [1], TIL that Edison was using the term in the 1800s.

[1] - https://education.nationalgeographic.org/resource/worlds-fir...
I am surprised to hear that structural editing has been a hurdle for you, and I think I can offer a piece of advice. I also used to be terrified by its apparent complexity, but later found out that one just needs to use parinfer and to know key bindings for only three commands: slurp, barf, and raise.

With just these four things you will be 95% there, enjoying the fruits of paredit without any complexity — all the remaining tricks you can learn later when you feel like you’re fluent.
> I don't fall asleep that easy

So your anecdata doesn't even contradict the point? Really puzzled by this reply.
ChatGPT can't even subtract 100? The first 3 examples are over 100 years and most of those were just helping allies. Note that I also said "annex".
This is my hack and your millage* may vary.
Lately I close my eyes and scan via eyeballs for a light point and focus on it as much as I can, not sure how others perceive this. Obviously with eyes closed you cannot see anything so maybe I imagine this point, but in any case it makes me fall asleep instantly. Hopefully that makes sense ...
Not on my 13 mini w/ iOS 18.1, and I don’t remember WiFi ever staying on when enabling airplane mode.

Weird that it seems to be different for different people, though.
This looks like a great presentation for children of a complex topic. I wish there was more of this but for different, more important, topics, like PGP for example.

The graphics are nice, are they AI? Isn't there a copyright issue using such graphics?

Digital currencies are a terrible concept and I was always against it, it's basically the opposite of decentralization due to the exchanges & the complexity of the subject rendering most users at the mercy of a few in the know. On top of that, in practice, digital currencies are used for the worst things humanity has to offer! But one can hope that young people will learn useful concepts from pursuing the subject.

edit: I'm also wondering, why don't they offer a true javascript shell instead of a fake one? When asked to run the `echo $sig | xxd -r -p` command. The benefit would be that the user can experiment some more with the command line.
I'd say work on brilliant ideas if they're good for your resume.

Yeah, I know this annoys the senior devs, but after 20 years on this grind I totally get why people do it.
The original meaning of "con" is cunt. It's also used for very unpleasant or stupid people (like cunt, but much more).
What part of "cry me a river" you didn't understand? Don't go crazy because at least one of the browsers propose things that move the web forward. Geez, you should take a break from the internet. So many "?"
I’ve never had an issue on either dude of it tbh
House Speaker Johnson says GOP may try to repeal CHIPS Act, then walks it back
since i started working bakers hours at about age 16 I have had to force myself to sleep on demand.

many decades later (now I'm a white collar 9-5er) I can still do it.

It realy is just a matter of self control. (for me at least)
I believe the use comes from the concept of a writing prompt, like one might be given for writing an essay or creative writing assignment.
For what it's worth, they have MTV MEA running in my local gym and it plays nothing but music all the time.
I agree. Calling this a "RCE Vulnerability" is ridiculously exaggerated.

What's next, are we going to declare web browsers to have a "RCE Vulnerability" because they allow you to download programs from any site which may or may not be secure and then execute them?

Or, hey everyone, did you know that if you live in an authoritarian state, the Government can do bad things to you?
I’ve never been a huge water drinker, but this year I’ve been consciously having a full glass of water at least 2-3 times during the workday. It has been fascinating how much it has affected my mood and performance, particularly in the afternoon.
A spherical cuttoff limit is also not how the human eye sees. Light can travel from any distance to reach your eye. The view frustrum is an optimization, and there will always be cases where it fails.
I tend to cheat a little. Parboil until the surface layer is soft, pour into a large colander. Allow to steam off for a while. Toss and turn to get all surfaces properly roughed up, move into a large (steel) bowl. Add 3-4 tablespoons of goose fat, toss and turn again to coat all surfaces.

Move to a sufficiently deep (steel) baking tray, sprinkle with salt, add a couple of sprigs of fresh rosemary on top, and cook until properly roasted. No need to even turn them around.

> The variety of potatoes used is also a critical factor.

Bingo. The more "floury", the better.
If they will make voice control not require an internet connection anyways (spoiler: they won't).

It should also be an add-on function to manual buttons. Nothing in a car ever should only voice control, and it should be able to be disabled for some functions.

Imagine an unruly child: "Car, disable child locks!"
Show HN: I built Popupbuild notifications without any coding skills
Please tell your reviews on this
Ask chat gpt: which open source codebases have active ssl vulnerabilities.
We would Admire your opinion, please give your opinion
Game over for security.
I'd prefer a static PDF I can pinch, zoom, and move about on my own than some crappy, overwrought, slow, "mobile" website that forces me to jump around to different sections of the menu with links that it *hides* anytime I scroll, which of course I have to because only 3 menu items are going to be able to fit on the screen at a time.

All that, VS a PDF that shows the entire menu that I can navigate spatially, show as much as I want depending on light levels, interest, and screen size, and can all fit in one, static tab.

Of course, the real answer is that electronic menus at sit down restaurants opened with QR codes are trash. Paper never really had these problems unless the restaurant was bad at menu design. I dislike being forced to use my phone at all when I'm out with friends or family for a nice dinner. Growing up, if I used my phone at the dinner table I would've been scolded.
Exactly... if you want to be miserable at work, by all means, "slack off as much as possible".

I think we forget the big picture that "no one gets out alive" and that it's up to each of us to spend the time we have in a way that makes us happy. If you can afford to not spend 1/3 of your time at a job in order to fund the remaining 2/3 of your existence, lucky you! But if not, choosing to slack off at a job you hate is essentially choosing to throw 1/3 of your life away being miserable. (Not judging if that's your choice, but its baffling to me.)
I never really understood this. Isn't 10am ten hours "after midnight"? What exactly is the safe range of feeding for a mogwai?
I've never worked in a jurisdiction where the health code covered this. The oil starts smoking at cooking temperatures and foams and doesn't cook right. The food coming out of it looks and tastes and smells bad.

You also can't go years with it at home even with few uses. After you've fried in it once the oxidation goes much faster even if you don't use it again. Maybe if you freeze it between uses but I've never heard of that.
I found the thinkpads were too easily warped.
Probably building our calculation engine - you can read more about it here https://www.causal.app/blog/scaling

Rendering grids/tables/charts in the browser is also quite tricky if you want it to be fast!
Didn't know what Pixelmator was, looked them up and they only distribute through the App Store.

I haven't been an Apple user for over 10 years, through that macOS now uses the App Store to distribute OS updates. There is no getting around the App Store on macOS and must be used for Apple related software releases, such a Xcode.

The community that looks for applications not in the App Store is most likely quite low. It requires knowledge of the ability to side-load, how to do it, and where to find applications that can be side loaded. Homebrew installation ratio against total macOS users might be a good metric.
Kind of hilarious to make this suggestion while simultaneously revealing yourself to not understand nuance or commonsense.
You can sign updates with an offline key (ideally like a hardware key), this is what APT based repositories do/allow
The 12-inch macbook was probably the best computer I've ever used in my life. I don't think anyone has come close to its weight. Apparently it weighs in at 2.03 pounds.

Sadly, I don't think we'll ever get a computer that good from apple (or anyone) again.
and that was the last time anyone say EVa5I7bHFq9mnYK online