skysight-inc/HackerNews huggingface dataset:
This is an article from May 2024 about a CDC report published in March. The report itself is more insightful: https://www.cdc.gov/mmwr/volumes/73/wr/mm7312a4.htm
I would say less overuse of final, more underuse of interfaces. If everything takes/returns/stores values by interfaces (excluding data containers with no behavior) then you don't need to "jailbreak" any class to mock it.

Of course you get code bloat defining interfaces for everything you intend to implement once, and you have to enforce these rules, but this is something that could be made easier. Not in Java, but imagine a language where:

- Concrete classes can only be used in new, or in some platform provided DI container.

- Methods can only accept interface types and return interface types.

- Fields are private only, all public/protected is via properties (or getters/setters, it just has to be declarable in an interface)

- You have a ".interface" syntax (akin to ".class" but for types) that refers to the public members of a class without tying you to the concrete class itself. You can use this as a shorthand instead of declaring separate interfaces for everything.

Eg.

```

final class GDrive { ... }

public Download file(GDrive.interface drive) { ... }

class MockDrive implements GDrive.interface { ... }

```

The closest I can think of is a hypothetical typed variant of NewSpeak, but maybe something like this exists already?
Sweet, one more standard for developers to ignore.
Framonial – The All-in-One Testimonial Tool for Framer Users
Hey Framer enthusiasts!

I’m excited to share Framonial, a new platform specifically crafted for you—Framer designers and developers who want to make collecting, managing, and showcasing testimonials a breeze. I created Framonial after noticing how challenging it could be to find a testimonial tool that integrates seamlessly with Framer’s design flexibility while still being user-friendly.

Why Framonial?

Seamless Framer Integration: Built with Framer users in mind, Framonial components fit right into your Framer project.

Easy Setup: Collect testimonials from customers effortlessly through customizable forms (and we’re adding video testimonial collection soon!).

User-Specific Dashboard: Organize, tag, and filter testimonials with a dashboard made to manage them your way. Get analytics, manage projects, and edit submissions without leaving Framonial.

Powerful Customization: Display testimonials however you want. Set tags, apply filters, and define display limits with just a few clicks.

Flexible Tiers: We have a free plan for up to 50 testimonials. For power users, go unlimited with our pro plan.

What Makes Framonial Unique?

I wanted Framonial to be the tool Framer users can rely on for testimonial collection and display. From onboarding to setting up your first project, Framonial offers a clean, user-friendly experience. It’s not just a testimonial tool—it’s designed to help Framer users like you stay connected with clients, boost credibility, and make a lasting impression.

Check out Framonial and let me know what you think! I’m here to answer questions, get feedback, or discuss features you’d love to see in future updates.

Thanks for being part of this journey! Let’s bring those testimonials to life in Framer!
It’s very cool that you can get away with that.
As far as browsers are concerned the actual solution is banning Javascript from regular Web. JS is basically remote code execution (even more so since JIT became the norm); it is a terrible idea that will continue to create all sorts of problems.
Canada is fantastically corrupt, just not at the ground-level
It's always a compromise.

Part of the exercise, whether it be making an existing codebase amenable to verification, or standing up a new one designed for it from scratch, is to identify, contain, and comprehend sources of entropy within the system.

At test time, you explore (as much as possible) the state space by replacing these components with data-deterministic mocks. On a run-to-run basis you can then vary the characteristics of the data they return; either with a set of derived known-edgy values, or by fuzzing, or a variety of the two.

This sounds daunting, and for a pre-existing codebase it can be a lot of work, but the upside is very often a substantial improvement in the robustness of and achievable confidence in the implementation.
It took me an embarassingly long time (given how keenly involved I was in OpenID stuff ~17 years ago https://simonwillison.net/search/?tag=openid&year=2007) to understand that OpenID Connect is almost unrelated to the original idea of OpenID where your identity is a URL and you can prove that you own that URL.

OpenID Connect is effectively an evolution of OAuth.
When you're driving and you see people running, do you have the same reaction?

> I don't get it ... it's such a waste of time

After all, there are indeed more comfortable ways to get from point A to B.
What is the state of F# a replacement for C# to create GUI apps on Windows? Are there companies using F# for this purpose?
I can't publish/open-source it, sadly. But the paper I can share: https://www.dropbox.com/scl/fi/38e0la5m6zkc04tlm03w8/Introdu...
Palworld Developer Details Patent Infringement Claims from Nintendo's Lawsuit
> Im not talking about mandatory vaccination - just allowing it to happen.

It is allowed, however it isn’t subsidized because there is a high cost and minimal benefit. The pneumonia vaccine on the other hand is cheap and has a much larger benefit.

People over 45 are very likely to already infected with one or more strains at which point the vaccine does almost nothing. It’s far better to give that shot to the younger partner in such relationships because they are at risk either way.
Principal - the same but directors and VPs are his best buddies. Distinguished - the same but the founders, C suite and the board are his buddies.
i am absolutely serious. pike for example does not need imports. if a reference is not found in the local namespace the compiler will find it in the module path and resolve it by itself. there is no ambiguity because each module has a unique name.

we accept type inference but don't do the same for module references? why?

pike does have an import statement, but its effect is to include all members of a module into the namespace instead of just resolving the ones that are really used.
and instead of speeding things up, using import on modules with lots of members may actually slow things down because the namespace is loaded up with lots of unused references. sometimes import is used to help readability, but that's rarely needed because you can solve the same with a simple assignment to a variable.

if you can show me an example where import resolves an ambiguity, i'll try to show how pike solves the problem without import.
I really miss working in F#, such a productive language. But I still enjoy keeping tabs on the updates.

I always thought the tooling was quite good, given the size of the community and Microsoft's apparent apathy towards it at times. The biggest pain point for me was accuracy in code test coverage.
Satcom 3 was lost after launch in 1979 and wound up in a non-geosynchronous orbit.

On a tour of the satellite manufacturer, RCA Astro, years after the loss, we heard this story: during the transfer of control from NASA to RCA Astro contact was lost and not re-established. Eventually the U.S. military was asked, "Errrh, did you see where Satcom 3 went?". The answer came back "Yup, looks like isn't in the geosynchronous orbit you expected".

The thought was that during the handover a command to fire the apogee motor was inadvertently sent and obeyed!

The fix for FUTURE launches was a protocol of checksummed commands. Beyond that, the new, more cautious sequence, became:

1. uplink dangerous command.

2. spacecraft verifies checksum and downlinks a copy of the proposed dangerous command

3. a keylock on the RCA command console is turned on and the "execute that dangerous command" instruction is uplinked.

4. upon verifying the execute command's checksum, the dangerous command is executed.

No further launches suffered a failure similar to Satcom 3.

Satcom 3's hulk is still in orbit.

See: https://nssdc.gsfc.nasa.gov/nmc/spacecraft/display.action?id...

https://space.skyrocket.de/doc_sdat/satcom-1.htm#:~:text=Sat...
The trouble is final is not final in Java, private is not private. I mean you can lock it down but you usually won’t. With reflective access, breaking the rules is one method call away. Common Java libraries such as meta factories (Spring, Guice), serializers (Jackson, GSON) and test frameworks regularly cheated in the JDK 8 era and a lot of us are running with protections for the stdlib turned off.

Normally a JDK 21 would let you get private/final reflective access to your own “module” but not to the stdlib modules but so many libraries want private access to stdlib objects such as all the various date and time objects.
There is some air in the gap, I suppose.
I've talked to several recruiters and HR people who were prepared for quite a different answer than I gave to this question.

I got the feeling that several interviews were carried out afterwards out of politeness or because the recruiter "had to" do it, but the interview ended before it began. Than, there's either ghosting or almost immediate (like up to an hour past the interview) copy-paste email along the lines of "we decided to go with another candidate".

A few recruiters however were open that they've checked the salary for similar position in my country's capital city (Warsaw) and it's much lower than what I'm asking. Pointing out 20+ years of experience and listing accomplishments seems less important for a lot of businesses, than paying as little as possible.

I got a few links to these "check salary for [level] [position] in [city]" websites from recruiters. All these seem to be crafted in a way that undervalues employees by artificially lowering country-wide salaries to ridiculous levels.
Show HN: Auto generated form UI with HTMX and Starlark
https://github.com/claceio/clace is a project I have been building as a way for teams to easily deploy internal tools. As part of that, I added the ability to create simple auto generated UI for backend actions. The goal is to make it easy to develop and deploy automation scripts, instead of using Rundeck or Jenkins to run scripts.

Clace is implemented in Go. Starlark (python dialect) is used to configure backed actions. You define the params and what action should run (like run a shell script, run a HTTP API or a database call). Clace will show an auto-generated UI. The UI uses HTMX for interactivity, using OOB swap. The results are shown as text, table, JSON tree or even custom HTML reports.

https://utils.demo.clace.io/dict is demo dictionary app (app source is at https://github.com/claceio/apps/blob/main/misc/dictionary/ap...).
Quite the horrifying read, and absolutely a case that will be used as ammo to tear down S230.

I love S230 in principle. I don’t think platforms should generally be held accountable for the postings of their users to a point. On paper, it’s an excellent safeguard that has enabled the modern internet for better or worse.

As with all “good things”, however, bad actors have found ways to exploit it for their own ends, and an incompetent Congress has failed to reform it. Modern polarization isn’t helping, as the respective camps regarding S230 tend to be “protect it as is” or “repeal it entirely”, neither of which is appealing or worthwhile. S230 is flawed, and it must be amended, updated, or replaced with a better version that addresses common grievances.

In my subjective experience, I would prefer to see S230’s protections “scale” with the size of the platform and its function. For instance (and I know this will be a highly controversial take), I don’t think large, centralized platforms like FB or X should have S230 protections at all, because of the high degree of control, immense profits available to invest in R&D or better moderation, and the repeated failures of those companies to moderate misinformation and harmful content while also claiming to be authoritative and reliable sources of public information. On the flip side, your small (sub-10k users) community should have full S230 protections, because you’re a niche that likely serves a smaller cohort, rather than a centralized monolith of the general public.

Could such restrictions be exploited to create similar harms as the above? Of course, but at least a modest reform like that would serve as a warning shot to both sides that no legislation is ever “done”, and we must continue to adapt it to ensure it meets the needs of modern times.
open source:
keycloak
connect2id
dex
gluu

closed source self hosted:
adfs

hosted:
okta (auth0)
google
microsoft
github
amazon

these are just the ones that were viable 2 years ago
No bidi or Arabic script complexities? Calculating the line break in an RTL situation is just terrible...
Sega's killing one of the only sources of legal ROMs, delists 60 classic games
> I don’t think you want to close all sea- and airports, built and maintain a continuous line of watch towers and minefields, enforce shoot to kill orders and pay for it all right? It wouldn’t just be immoral and stupid, but also more expensive

Quite. But some people here do seem to want this.

TB is not a moral disease (there are no such), not a disease of immigrants (when I worked in Edinburgh in the 1970s it was all over the place among Scots), and is very treatable if you can a) pay for the quite cheap treatment and b) educate people to keep taking it. You can also immunise against it.
Sunrun grows installed solar and storage capacity by double-digits in Q3
Standards are nice, but the large standards organizations like ISO annoyingly charge a bit to view them. I suppose this is because some businesses/industries require "real" standards by those orgs rather than the IETF or other dirty open-source hippie collectives.
Interrupt noise can be eliminated by eliminating the interrupts themselves using user-space drivers like SPDK and DPDK for storage and networking, but (a) that would require a massive change in application architecture, and (b) it wouldn't help non-movable interrupts like softirqs or IPIs for rescheduling and TLB shootdown.

Softirqs aren't really interrupts, and they're totally under kernel control, so it might be possible to spread them out across cores or otherwise reduce their signal.

Eliminating noise from IPIs for rescheduling and TLB shootdown might require crazy architectural changes to the CPU - for instance an architecturally isolated fast timer which is basically a separate CPU, polls a queue of TLB shootdown requests and a wakeup request flag, and can exit without waking the CPU from a halt.

Fuzzing the timer seems like a hack - it doesn't eliminate the information leakage, but just makes it harder to measure. You can eliminate the signal by only reporting the amount of time that passes in user mode, but that results in a clock that can be arbitrarily slower than wall clock time. I suppose you could add a correction factor that's heavily filtered, so the final timer is never off by more than a constant amount, but this would have to be implemented as a new OS timer type with instrumentation in every interrupt handler, and then Javascript would have to be updated to use that new timer.
I'm pretty sure there is still mainstream media that haven't issued a retraction for calling the Hunter Biden laptop story fake.

Talk about election interference.
Given that Musk is Trump's primary backer, will Trump really sign off on a repeal of 230? Would be quite the slap in the face.
VS Code extension updates, Pascal LSP updates
>then you are basically betting that 85% chance something like AGI

Not really. It would just need to do more steps in a sequence that current models do. And that number has been going up consistently. So it would be just another narrow AI expert system. It is very likely that it will be solved, but it is very unlikely that it will be generally capable in the sense most researchers understand AGI today.
> > Any sufficiently complicated startup or young company contains an ad hoc, informally-specified, bug-ridden, slow implementation of 10% of Excel.

Let's give Philip Greenspun due credit for this phrase. I'm going to guess there's at least one generation who isn't familiar with it.
> So now we cannot easily mock final classes in tests

> And mocking tools have to resort to bytecode manipulation to mock the final classes

Well which is it? Presumably you use said mocking tool anyway, so it's not your effort that's being expended.

"Final all the things" really doesn't go far enough. There is little point substituting a mutable hashmap for a "final" mutable hashmap, when the actual solution is for the standard library to ship proper immutable collection classes.

In any case, I prefer to avoid mockito anyway, so it's a non-issue for me. Just do plain ol' dependency injection by passing in dependencies into constructors.
There are a few options:

https://github.com/fsprojects/Avalonia.FuncUI

https://fabulous.dev/ (which targets Avalonia/MAUI/Xamarin)

https://github.com/kekyo/epoxy (Avalonia and WPF)

> Are there companies using F# for this purpose?

I can ask around if you're interested.
You just invented Java AutoValue and Kotlin Data Classes.

https://github.com/google/auto/blob/main/value/userguide/ind...
NYC has continuously welded rail, but it’s limited to the length of a signaling block due to track circuits
The complaint:

> The title is a bit confusing as open-source separation of ... reads like source separation, which this is not.
Five Ways to Disaster-Proof the Energy Grid
Windows is great except when it does something unpredictable. It will be amazing for months at a time before it decides it's update time.

But they get a lot of things right, like their backwards compatibility via statically linked packages and a large "standard library".

Unfortunately it's all proprietary and doesn't work if you can't live with the random updates, or if you need to support small cheap embedded things well...
Does Trump still want to repeal Section 230? He was in favor in 2020, but that was a long time ago.

Now he’s co-governing with Musk. Both billionaires own social media platforms that benefit from Section 230 protections. What’s the incentive for them to push for a repeal?
You can opt out of that I think, can’t you?

Might be wise to do before you interview.
You can opt out of The Work Number. It's a bit of a convoluted process, but not byzantine - I did it a few months ago, involves filling out a form by hand and scanning it or mailing it, but I did get written confirmation that I'd been opted out.
Here is the only legal efforts I know about that’s available in some way:

https://www.fairlytrained.org/

https://www.kl3m.ai/#features

Here’s a dataset that could be used for a public domain model:

https://www.tensorflow.org/datasets/catalog/pg19

If non-public domain, one can add in the code from The Stack. That would be tens of gigabytes of both English text and code. Then, third-party could add licensed, modern works to the model with further pre-training.

I also think a model trained on a large amount of public domain data would be good for experimentation with reproduceability. There would be no intellectual property issues in the reproduction of the results. Should also be useful in a lot of ways.
anything a linter can do, can be included in a compiler. or the linter can be part of the compilation process by default. iaw instead of being optional it should be required maybe with a special opt-out, but opt-out should be frowned upon.
Online Gaming Platforms and YouTube Will Also Seemingly
also open source: zitadel
I think D day would have something to say about the “most riskiest and difficult amphibious venture ever taken.
Play Abuse SDL port in the browser
Original source: https://github.com/Xenoveritas/abuse

My fork: https://github.com/midzer/abuse/tree/emscripten

Works on mobile (tested on Safari).
TB is a disease of poverty, it doesn't spread that easily, but the risk goes up for people in overcrowded living situations and for those who are chronically malnourished.

It's not a great surprise that one would find TB in cross-border migrants, but it's an indictment of the system that the disease continues to spread over here.

Next up: lepra, also caused by a mycobacterium
We run Apereo CAS pretty successfully. Originally to use the CAS protocol, but now that CAS (the protocol) has been deprecated, we're slowly migrating to OIDC. One sort of weird note about Apereo CAS, OpenID Connect can return data in two format, nested and flat. CAS is the only server I've ever worked with, that defaults to nested. Almost no clients supports this, but the server can be reconfigured to use flat.

KeyCloak is also very good, but I'd run is as a container due to the quick release/update cycle. If I had to do our infrastructure over, I'd probably go for KeyCloak, just because it's the most used.
Nobel (the Nobel prize guy) made his fortune in Baku, IMSMR
Depending on who you’ve asked we crossed that line sometime between now and the invention of the mass market paperback. Fantasy fans have been decrying the onslaught of “(A|The) $noun (and the $adjective)? of $noun2 (and $noun3)?” books since the Harry Potter / Game of Thrones double whammy.
Pay-to-read standards like those of the ISO actively hinder human progress. Please don't encourage this behaviour.
Open gangways are still detrimental because they make it easier for showtime people to carry speakers and instruments between cars
Google DORA metric report 2024 [pdf]
Perhaps you don't understand what is happening in Ukraine and rely on Western media as your information source. Ukraine is very short on ammunition and weapons. The West has failed to provide even the basics. Ammunition is running low, the Russians received more from North Korea in 6 months than Ukraine has received since the War began in 2014. The aid the West has promised and sent is laughable, Zelensky has to come out every day and beg that they send what is promised. Can you imagine throwing a drowning man toothpicks, while you sit on the shore with a life preserver? That is what the West is doing to Ukraine and its people, it is unconscionable. The same kind of support awaits Taiwan and I tell you this while wishing the best for Taiwan but, reality suggests something different.

Taiwan is doomed if Ukraine is an example of the support they can rely on from the US/EU. It's why their President said the outcome of the War in Ukraine will determine Taiwan's fate.
2009. has been shared here many times before