skysight-inc/HackerNews huggingface dataset:
Yep. I introduced Rubocop at a past gig… only to watch my colleague write worse code playing whackamole trying to adhere to the rules.

I kept telling him that the whackamole is a sign to rework things at a higher level - that the Rubocop rule catches symptoms, and that he needed to address the cause, but…

PS - to be clear, I love Rubocop and swear by it. In that circumstance, I needed to introduce it differently, is all.
If no one ever downvotes what you say, you're probably not taking enough risks in your commentary. (But if you know most people will downvote it, especially if you know it's going to be flagged, you probably shouldn't say it. Not for any big reason, just because it's rude.)
No OLED = skip.
Your microBlaBla just causes headeaches.
They didn't say it was weird.
> In unstable you get a timely fix from upstream, in stable you get a fix by the security team.

For anything that is serious enough, you will get a security fix straight away for both unstable and testing (through the testing-security repository).

For things that are not really that important, yes, you will get the fix later.
This kind of rain/flooding happens every 10-20 years in the region :(. Varies a bit with its intensity, but pretty much everyone has lived through at least one. (Lived 13 years near Dénia, 100km from Valencia)
AI will make the problem of low quality, fake, fraudulent and arbitrage content way worse. I highly doubt it will improve searching for quality content at all.
I think the modern advice that you should always negotiate and ask for more is deeply distressing for many people. They do not want to feel like they are being taken advantage of but they also don’t really want to engage in a negotiation.
They get scholarships literally just for being women. You have Google, use it. Stop being a pathetic contrarian. You can be wrong all you want but reality still exists.
Ah cool, TIL, thanks for the link. I didn't realize that was possible.

I know of the CDX index files produced by some tools but don't know anything about the details/that they could be used to dedup across WARCs, I've only been referencing the WARC file specs via IIPC's old standards docs.
I remember in like 5th grade rural PA schools learning about Boolean operators in search engines and falling in love with them. For context, they were presenting alta vista and yahoo kids search as the most popular with Google being a "simple but effective new search platform" we might want to check out.

By the time I graduated highschool you already couldn't trust that Boolean operators would be treated literally. By the time I graduated college, they basically didn't seem to do anything, at best a weak suggestion.

Nowadays quotes don't even seem to be consistently honored.
Seems like Russia owns Alphabet now. Then we're not allowed to trade with Alphabet and their cloud anymore. What a disaster it is to come.
This subtly wrong thing happens maybe 10% of the time in my experience and asking it to generate unit tests or writing your own ahead of time almost completely eliminates it.
Security is based on a combination of:

* The integrity of registrar accounts that are the root of trust for most DNS zones (this was, last I checked, the overwhelming source of DNS corruption attacks),

* The security of one or more DNS lookups, depending (some CAs, like LetsEncrypt, do multi-perspective lookups), and

* The WebPKI Certificate Transparency system, which tracks the issuance of all certificates that Chrome and Mozilla will accept in a public ledger.
>Vanguard runs on Ring 0. -> Ring 3 software can also read your hdd so is not a problem.

Can also read process memory of the same user.
Did you dismiss two years of my accumulated writing about LLMs as "tutorial regurgitation"?

Maybe you clicked the link to my series of posts that are in chronological order - https://simonwillison.net/series/using-llms/ - looked at the very first one about trying out GPT-3 from June 2022 and stopped reading.

I probably shouldn't share that link any more!
If the hack has to be in kernel, it will be in kernel, so what's the point anyway.
I'm guessing that the airport was this one maybe? ttps://en.wikipedia.org/wiki/Window_Rock_Airport

Also IIRC (cum grano salis) the federal buildings in the Hopi reservation do observe DST and the state buildings in the Navajo reservation don't. But don't quote me on any of those actually existing.

A fun fact circa 2012 was I was writing a PHP server that needed to talk to a Windows server to schedule things. Windows server used Microsoft's own timezone system, not IANA or anything like that. I went looking for an implementation of IANA <-> MS conversion. I ended up finding all these forum posts by Windows Phone (RIP) users in Arizona who had the wrong time on their phones. So it was nice to know that 1) there was no fixing it and 2) they eat their own dogfood.
I think the Fusion posts are still available in the free version - afaik certain things like overriding the feed speed no longer work though.

And I only briefly looked into it, but most Fusion post-processors are just Javascript! (or at least based on it)
I see that as: it doesn't matter, therefore let's do one consistent thing and you'll never get a person saying "this should be x=true". RoboCop forces it one way and I never have to have a syntax/formatting discussion again.

You may think it really really doesn't matter, to the point that whatever form should be accepted. But then, would you accept my "def foo (x =true ,y= false )"? I've seen enough PRs with that kind of code to know that people will submit it one day.
I should clarify I don't use WARCs at all with archivebox, it just stores raw files on the filsystem because I rely on ZFS for all my compression, so there is no offset alignment issue.

The wget extractor within archivebox can produce WARCs as an output but no parts of ArchiveBox are built to rely on those, they are just one of the optional extractors that can be run.
Sorry Siri
Just Announced – Cyberpunk 2077: Ultimate Edition Coming to Mac
Oh I think they're very well done and very pretty! But lately this discomfort has started to creep in, as you note. Like something you'd see in a WALL-E spinoff: everyone has left the planet already but Buy n Large is still putting out these glorious promo videos using stock footage. Or, like, post-AI apocalypse, all the humans are confined to storage bins, but the proto-AI marketing programs are still churning out content.
that'd've

I know what you mean, but that is the first time I've encountered that contraction in print or even in conversation.
It probably does. But an amazing number of commenters think they are prompting the copy & pasting, and hoping for the best.
Counterpoint, play any game without anticheat and realize just how much worse it can be. (and before someone says it, custom servers with dedicated admins doesn't scale and tends to cause lots of petty drama)
That assumes they have general connectivity.

I help run a bunch of gear in a data centre, and all of our IoT stuff (PDUs, cooling) don't have gateways to the public Internet. They're on a segmented VLAN/subnet which you have to contact through a jump box: no routing anywhere else.
> I could pirate every game I have on my Steam account.

According to the CrackWatch subreddit, there were 29 games released with Denuvo in 2024. Of those, only one has been cracked and it was done via a demo bypass [1].

You can pirate many games but not, for example, Final Fantasy XVI.

[1] https://old.reddit.com/r/CrackWatch/comments/p9ak4n/crack_wa...
Why isn't server-side anticheat a possible solution? Cheats can spoof inputs purely through visual output as well, meaning there cannot be full trust client-side.
You're assuming accidential collision. Images can be generated that intentionally trigger the hash algorithm while they still appear as something else (a meme, funny photo, etc.) to a person looking at them. This brings many possibilities for "bad people" to do to people they hate (like an alternative to swatting etc.)
... I found it a bit poignant / emotional as well! ... those engineers in a dusty office beside McDonalds... quietly keeping the mission going... in touch with something that's beyond our solar system now... True engineers! No glitz... quiet dedication...
I'm not advocating for taking away users rights, just pointing out that the current model doesn't really jive with the desire to stop cheaters. This is going to be a never ending cat & mouse game.
People pay for cheats. Companies are built arround cheat making. That now you need hardware to cheat is a bussines oportunity for some.
>And for me, the idea that they might replace my aging phone with a newer unit, is a big plus. As I think it would be for almost everyone.

except that isn't generally how factory repairs are handled.

I don't know about Apple specifically, but other groups (Samsung, Microsoft, Lenovo) will happily swap your unit with a factory refurbished or warranty-repaired unit as long as it was sufficiently qualified before hand -- so the 'replaced with a newer unit' concept might be fantasy.
Neither are Wayland compositors.
I think this post is addressing some of the weaker security arguments against putting anti-cheat software in the kernel. The issue isn't that such software provides no value (obviously it does if developers continue writing anti-cheat kernel drivers despite the backlash). The issue is that software running in the kernel can unintentionally enable vulnerabilities that would be impossible if the software was running in usermode. It doesn't require compromising any supply chains.
I think a lot of the anti DRM crowd (who aren't just into it for piracy) believe;

1. DRM works (or more precisely, it has gotten somewhat better at working over time).

2. It will proliferate to everything that can possibly have electricity in it.

3. In the long run this will lead to an authoritarian dystopia which will make modern China look nice by comparison.

By 2124, you will own nothing and you will be happy, or the Neuralink Assistant chip you were given as a kid will restructure your brain to "correct" this deficiency of happiness with your situation.

This is only half satire, I do truly fear this is the direction that improved information technology will move the political economy equilibrium.
Working more on the SaaS starter kit Achromatic (https://achromatic.dev).

The idea is to provide a high quality boilerplate specifically for web apps.
Try the TCP algorithm... raise your rates until you start losing dollars, then back off until peak cashflow restored. Try again every so often.
DRM is often removed after a little while since it is meant to delay the cracking at launch, where most people are going to buy. Anticheat is not.
The M1 was pretty fast when it debuted. If you own an M1 Mac its CPU has not gotten any slower over the years. While newer M-series might be faster, the old one is no slower.

The M1s are likely to remain pretty usable machines for a few years yet, assuming your workload has not or does not significantly change.
If you're still barking in the general direction of google and similarly sized search engines, good luck. I'd rather look towards kagi and brave.
I'm not saying there isn't a problem. I am saying that you can't extrapolate from 70% of IT people in your circles being unemployed to the entire economy imploding Great Depression style.

Even in IT circles, it's still better out there than it was during the GFC (2009, 10% US unemployment), and way better than it was after the dot-com bust (2000, <6% overall unemployment, but much, much higher in IT).
You don't go to prison for possessing images of adults being raped, last I checked. Or adults being murdered. Or children being murdered.

I don't think making the images illegal is a good way to handle things.
Yes, unless this was edited later on.

> 'might replace my aging phone with a newer unit, '

unless you just want to argue about the semantics and differences between 'aging', 'newer' , and 'new'.
Recraft introduces a revolutionary AI model that thinks in design language
Ok [1]

"Since then, technologies like Grayshift’s GrayKey—a device capable of breaking into modern iPhones—have become staples in forensic investigations across federal, state, and local levels."

"In other cases where the FBI demanded access to data stored in a locked phone, like the San Bernardino and Pensacola shootings, the FBI unlocked devices without Apple’s help, often by purchasing hacking tools from foreign entities like Cellebrite."

1 - https://www.firstpost.com/tech/the-fbi-was-able-to-hack-into...
> Why does this pose an issue in game-hacking? Well.. As we all know, game-hackers go to extreme lengths to achieve their common goal: winning. This is the sad reality of the cat-and-mouse game of game-hacking, as cheaters will not abide by any rules or morals.

I feel like this is a flawed basis of assumption and also just a mis-framed situation as a whole. Cheat developers and the people that use them en-masse aren't really the same people. By trying to suspend their narrative on player greed being the enemy, they undermine a point that otherwise has some very practical responses if you don't resort to relative extremism.

For one, if exploiting software to win was the ultimate degenerative goal of every video game, I don't think people would want to pay for online experiences. People still buy and play games because they like the intended experience, and while cheating exists it's a one-sided aberration that isn't an obvious by-product of an endless greed for winning. I don't like cheaters, but any businessman will tell you that one person's abuse of a service is no excuse to degrade another customer's experience.

For two, this isn't casus-belli on privacy even if it was true. All software can be exploited, but that doesn't justify creating infinitely hostile conditions for a user to run your program. This same line of reasoning, blaming the cheaters and never yourself, could be used to justify any number of nonsense mitigations like forcing players to record themselves with a webcam or plug in proprietary anticheat USB hardware. This is all a very flowery way for a developer to absolve themselves of responsibility for an extreme reaction to a minor issue.

For three - it's deflecting the issue onto a conflated group of people that doesn't really exist. The people designing exploits are motivated to do so because they like writing exploits, not because they enjoy cheating. They might sell their software or distribute it to people that do play to cheat, but the cheat designers are rarely motivated by a desire to be at the top of a leaderboard that will boot them off for obvious manipulation. So the entire concept of blaming the players for wanting to win so bad is really just an emotional "we're the poor developers" deflection. They can try to hold the moral high ground all they want, but it ends up feeling like an incensed defense of something that clearly isn't working.
> (I’d still lean towards expecting game houses to find another way, kernel drivers are still client side trust mechanisms).

Well, this problem simply can't be solved server-side only. Client-side can't be validated without rootkit (and even then it's not enough, but enough to deter majority of cheaters).
> For example: a beginner developer is possibly better served by some SEO-heavy tutorial blog post

Good luck finding those, you end op with SEO spam and clone page spam. These days you have to look for unobvious hidden meanings which only relate to your exact problem to find what you are looking for.

I have the strong feeling search these days is back to the Altavista era. You'd have to use trickery to find what you were looking for back then as well. Too bad + no longer works in google due to their stupid naming of a dead product (no, literal is not the same and no replacement).
Not even. You have to handle the negotiation like a complete asshole before your counterparty will withdraw their offer entirely. For the most part, asking (respectfully and politely) for the moon will just result in a "no, we can't accommodate that". Then you decide if you're ok with that, and accept or decline.
I've noticed only slightly larger pool of decent candidates when recruiting, but nothing crazy.

The number of unsolicited messages from recruiters with serious offers I receive haven't changed much either.

The only serious change I see is in the number of borderline spam recruiter messages coming to the linkedin profile I haven't updated in almost a decade.
> Poland is pretty strict. They will fine you if you cross the street

It's varies in different parts of Poland.

Lublin - double fine for crossing a street with an "island" between the lanes on red light

Warsaw - single fine, but ~99% chance of getting fined even if you don't see any cops around

Gdańsk - you can jaywalk in front of a precinct and unless you force drivers to honk, or act stupid in other way - no cop gives a flying fuck. Cities with tourism have cops acting on different rules.
> if a flaw was ...

I hear the point you're making and I respect the angle, its fair-enough, but ...

The trouble with venturing into what-if territory is the same applies to you...

What if the disk you took out was subjected to an evil-maid attack ?

What if the crypto implementation used on the disk you took out was poor ?

What if someone had infiltrated your OS already and been quietly exfiltrating your data over the years ?

The trouble with IT security is you have you trust someone and something because even with open-source, you're never going to sit and read the code (of the program AND its dependency tree), and even with open-hardware you still need to trust all those parts you bought that were made in China unless you're planning to open your own chip-fab and motherboard plant ?

Its the same with Let's Encrypt certs, every man and his dog are happy to use them these days. But there's still a lot of underlying trust going on there, no ?

So all things considered, if you did a risk-assessment, being able to trust Apple ? Most people would say that's a reasonable assumption ?
> like apparently individual US states can.

Nah, the States can’t. What we actually voted for, and I voted for this too, was that if Congress passed a law that enabled States to move to permanent DST, then the legislature is authorized to pass a law to move California to permanent DST. Congress hasn’t acted, and the main guy who was pushing for this isn’t in the legislature anymore, but basically the law did nothing except send a message from Californians saying “yeah, this sounds good, do it.” but technically it was never necessary.
I suppose this is true in some abstract sense, but not in companies of any reasonable size when it comes to hiring. There are lots of things that are firmly set company-wide, like the type of health plans offered and the company contribution, that are pretty much non-negotiable. Not knowing this makes you look naive or runs the risk of just confusing the hiring manager/HR.
Well LLMs are very useful and valuable to me and many others today so it's not really a hypothetical future. I'm very glad they exist and there's no narrow intelligence available that is a sufficient substitute.
They used to give out a calendar every year filled with pictures of their executives (mainly CEO) living a lavish lifestyle. Posing with Ferrari's, ribbon cutting ceremonies, stepping onto the company private jet, etc...

You could always tell when investors or potential customers were in town because the SMCI parking lot would suddenly have brightly colored sports cars parked right out front of the office, only to vanish shortly after until the next high profile meeting.

I always thought this was strange, but chalked it up to it being a cultural difference on how business is done in Asia vs the USA, but apparently not. GoPro used to do the same thing at their office in San Mateo back when the stock wasn't circling the drain, two Ferrari's parked right outside the front door as you walked into the building. Appearances can often be deceiving I guess.
Will,

I looked at your site and didn't see a contact option. I'm quite tired and am often worthless by evening, so I'll look again come morning.
I mean, it's cool and all, but the idea of giving someone I know nothing about doesn't sound that appealing :(

Of course, I could make a separate throwaway email, but then the main benefit if this service (convenience) disappears.

Lack of a clear monetization model makes my inner paranoid even more concerned: looks too much like an attempt to collect emails for some nefarious purpose. Why else would you allow literally anyone to just burn your money? OpenAI API is not that cheap.

Sorry, maybe I'm just not in the target audience.
To me the stupidest thing was the removal of things like + and -. You can say it's because of Google+ but annoyingly duckduckgo also doesn't seem to honor it. Kagi seems to and I hope they don't follow the others down the road of stupid
Honestly, that seems quite practical — it's a good way to head off "angels dancing on the head of a pin"-style arguments between contributors.

Another way to put the bug outcome is: "Instants before the Big Bang are out of scope of this library, so if an algorithm produces incorrect values, but only before the Big Bang, the algorithm is acceptable and does not need to be improved/replaced."
Google's attempts to undermine ad blockers (2019)
why do you think them as extraordinarily smart

the title char limit made it hard to word :_

I agree with you, that's why I used "in the broad sense" otherwise we will all be saying Torvalds, Cerf, Berners-Lee, and the likes :p
And very negative for the people that selected K9 precisely because of the peculiar UX. 5.600 has been the last good version for me. I still sideload it on every new Android device I buy.
A human can't be trusted to not make memory safety bugs. At the same time we can trust AI with logic bugs.
That is why it was cheaper to buy a flight, hotel, and ticket to see Taylor Swift in Paris than to buy tickets to any show in the US.
I've just reinstalled GTA V last week and I was very surprised to find out that I now have to install a rootkit to run it.

They had the balls to add a mandatory kernel extension into a game that I've bought 10 years ago and that I wish to play in single player only.

I find it utterly ridiculous. As usual, piracy would have been the superior experience.
Give me a set of questions on any topic. I'll ask and report back. It would be best if the questions are fair and well-considered, and not obvious "gotcha" test questions.
Tech companies employ a lot of people that are not doing software development or technical roles. Think of your typical SAG (sales, administrative, general) which would include departments like HR, finance, sales, facilities, legal, etc. Seeing multiple Fortune 500 layoffs firsthand (and surviving), those departments are typically the first targets. As a company you don't want to target your core products/features in a layoff too much because that wouldn't be effective. Those roles are general in the sense that someone doing internal book-keeping can do that at any company in the US. Quick aside: is a project manager a tech role or general? I've seen PMs as general as you can get as well as very technical PMs.

The size of the Tech job market is small as part of the overall US economy and AI, as much press as it gets in tech circles, is probably useless in any physical on-site job like nursing or construction or automotive repair.