skysight-inc/HackerNews huggingface dataset:
Many of the arguments are silly and stupid. It's not wrong to call something what it is, especially when those propagating the arguments seem to be so immune to correction. They clearly aren't operating in good faith, but rather, at best, latch onto an argument whose conclusion they like without bothering to check if the argument makes any sense.
Without aliases makes each part understandable without having to jump around and hold extra context in your head:

SELECT
staff.first_name
FROM staff
INNER JOIN students ON student.mentor_id = staff.staff_num;

Whether or not you agree on the exact number [0], humans have limited working memory and aliases that don't group up concepts use it up unnecessarily.

[0] https://en.m.wikipedia.org/wiki/The_Magical_Number_Seven,_Pl...
Well, yes and no. From the perspective of an infosec professional who is focussed on supply chain security I can tell you that your package having an attestation from a trusted platform like GitHub or GitLab gives me a warm feeling. It is not the only thing we will look at but definitely part of a longer list of checks to understand risk around dependencies.

With an attestation from GitHub I know at least that the workflow that ran it and the artifacts it produced will be 100% traceable and verifyable. This doesn't mean the code was not malicious, but for example it will rule out that someone did the build at home and attached an alternative version of an artifact to a GitHub release. Like how that was done with the xz project.

It is fine to not like GitHub, but I think that means we need more trusted builders. Developers cannot be pushed toward just GitHub.
Mixpanel Cofounder Suhail Doshi Offers Writer Patronage and Relocation to SF
You'd think that the $160+ million fine given to Google for incorrectly implementing their consent thingy would be a deterrent, but clearly not.

While the OP of this comment chain stated that laws are best if they are abstract, I think in this case the EU should have mandated an implementation as well, for example a browser based consent setting. Can be global, can be per-website. But the (ad)tech companies wouldn't like that, because as it turns out if given a fair choice, the majority of people would not opt-in, and they don't like that. Even though a small percentage of visitors that do opt in would already generate statistically significant results.

It's the same with the alternative, e.g. US sites simply not allowing access from the EU. They could just not have tracking. Advertisers could serve non-tracking ads, based on e.g. IP geolocation. But they don't like that because it's not as targeted as before the EU laws.
Worst...Do a search for Paris Airport Charles de Gaulle main website.

Watch in horror how in 2024, with all their AI and Algorithmic gurus, Google will serve you as top answers series and series of cloned sites. Sites run from multiple remote countries, that are literally visual replicas of the airport main website and clearly trying to impersonate the main website.
> I don't understand why educated people expect that an LLM would be able to play chess at a decent level.

You shouldn't but there's lots of things that LLMs can do that educated people shouldn't expect it to be able to do.
Since roughly 2014 there have been so many rug pulls in the Python organization that no one believes anything any more.

It always starts small: "Oh, we just want everyone to be nice, so we have this super nice CoC document. Anyone who distrusts us is malicious."

Ten years later you have a corporate-backed inner circle that abuses the CoC to silence people, extend their power and earning potential and resort to defamation and libel.

It is possible that the people here who defend this corporate attestation-of-provenance-preferably-on-our-infrastructure scheme think that nothing nefarious will happen in the future. Well, given the repressive history of Python they are naive then.

It just takes pip to add a flag to enable "non-attested" packages. And of course they'll name it something like --allow-insecure-potentially-malicious.
> Things were very rough for most of history, everyone was constantly stressed to keep up with their minimal necessities to live, it was not in any way relaxed.

I have heard this argument many times before but it is mostly not true. Most village farmers do lead a more relaxed and relatively stress-free life. You just need to visit/observe/interact with them to see the difference.

The main reason is the difference between Acute Stress vs. Chronic Stress.

Chronic Stress has what has exploded exponentially in urban areas after the Industrial Revolution and the current IT Industry has made it even worse. There are just too many things to juggle all the time each of which has a deadline with consequences (because process and efficiency) however trivial it might be in the larger scheme of things. The farmer doesn't have that many things to worry over and so only has episodic bursts of Acute Stress over truly consequential things the management of which is easier.

Another related point is that the farmer does live closer and more entwined with Nature than urban folks and this has been shown to be better for psychological health. We are evolved to interact with Nature and not isolate ourselves in a concrete jungle and grey cubicles.
Criminals Are Still Using Bogus Law Enforcement Subpoenas to Obtain Users' Info
I always assumed they were and are breaking the law.
I am personally curious into what Linked will devolve eventually.
Not the OP but...

> programmers to master the debugging tools of their ecosystem. I've seen countless experienced developers use printf-based debugging and waste hourse debugging something which could've been easily figured out by setting a breakpoint and stepping through your code.

If you're wasting hours with printf-based debugging, I don't think you've 'mastered the debugging tools of the ecosystem'.

There are multiple ways to debug - step debugger tools, printf, logging to a file, etc. Each have their place.

If you're spending hours on any one approach, and perhaps that's the only approach you know, that's a red flag.

If you've spent hours going through printf, logging and step debugging and STILL don't have a good answer... bring in external eyes.

I've found/fixed bugs in a few minutes because of adding some log stuff first, because in those cases, it's the easiest approach. In other cases, running a debugger and setting a couple breakpoints is indeed the easier approach to start with, and I've done that.

Sometimes you find it with the first approach, sometimes you need to try the next approach.
I asked in response to another comment[0] above somewhere but do you have any recommendations for more recent producers/djs on the ragga jungle sound?

[0] https://news.ycombinator.com/item?id=42136943
These articles are a response to bad faith brigading of bad arguments.

Maybe you should focus on the behavior that makes articles like this necessary?
I figured the model was that they're all keeping it secret for competitive reasons, especially if they're all trying to derive tech from it. Maybe if you admit aliens are real, the public demands you show off the resulting new toys, and the skunkworks types don't like that. Especially if they're not actually ready.
Knowing ASL does not make me Deaf. And knowing Mandarin does not make me Chinese.
> As for rebates, with the US Election, the idiot that won stated many times he wants to eliminate all incentive for EVs.

Interestingly how quickly he started saying F-U to mister Musk..
The judge in the case put the brakes on the sale after it was revealed that the bankruptcy trustee did not accept the highest bid, and instead allowed the Sandy Hook families to 'assist' by pledging their massive judgement towards the auction.

It isn't reasonable to pledge money they didn't have because the families aren't the only creditors of the estate. The rest of the creditors get a lower recovery if the assets are "sold" for the price of one group reducing their claim.
Priceless! Well done Jan. Thank you for sharing this amazing project.
> If you have a fairly shallow bug ... But most of the bugs that I see aren't that shallow

Oh come off it, debuggers shine the brightest when there are lots of unknown unknowns. With printf debugging you can peel back exactly one layer at a time (oops, need to log one more thing) whereas with a debugger you can slice through the Gordian knot.
This standard does support SLSA attestations. We’re enabling upload support for them pretty soon.
Same, after learning the hard (pun intended?) way about hark links, I just default to soft links.
Oh, it's absofuckinglutely mind altering. There's just a threshold you haven't crossed yet. Were you huffing the gas out of whipped cream cans, or discharging tiny little whippet cartridges into balloons, or did you have a four-and-a-half foot industrial G cylinder and Hefty Contractor Load & Carry Extra Large Garbage Bags?

There's a point where you "pass in" instead of passing out. Just don't try it standing up. You'll try to brush something off your shoulder, then come to the profound realization that it's the floor.

Here's a classic book all about it, "Laughing Gas: Nitrous Oxide" ("HILK HILK"), which goes into much more detail than the article:

https://archive.org/details/isbn_9780914171522

Look for the hissing U-Haul in the parking lot of a Grateful Dead concert.

There's a reason it's called "Hippie Crack".
That companies will go with malicious compliance 9999 times out of 10,000. So ensuring compliance would require immense enforcement efforts from the get-go that still haven't really surfaced.
Lots of people here saying the banners are simply unnecessary, but with untargeted advertising paying over 90% less, it simply is necessary for any website with ads.

If you got told tomorrow you had to start every conversation with "are you okay if I remember this" or you lose 90% of your salary, guess what you'd do.
> the fact that we've never detected any means they've probably never detected us either

I do not think that your conclusion necessarily follows. They could easily be much more advanced than us, just as we are much more advanced than we were 500 years ago.
1-Bit AI Infrastructure
The takeaway line:

> But what’s not suggested as a fix is one of the more obvious solutions: move away from utilizing subpoenas and rely on warrants instead.
The argument was that with current word-based methods an LLM can puzzle out mechanistic problems better than a human. Turns out it can't at all, it makes errors that no human would. Anyone who looks at such attempts recognizes them as blather that is not rooted in reality.

The parent poster posted a paper where an AI guesses the Hamiltonian (nice, but with iterative methods you at least get an idea of the error associated with your numbers, not sure how far anyone should trust AI's there), maybe methods that do guesswork on topological networks would help. But I haven't seen those yet.
Sounds like there were multiple levels of failure here. Curious that the headline seems to suggest "remote work" was the culprit.
Yes, it’s bound to a specific commit; we just don’t present that in the web UI yet. If you click on the transparency log entry, you’ll see the exact commit the attestation came from.
State of AI Agents
Training works as expected:

https://news.ycombinator.com/item?id=38893456
Good analysis. One correction though, EmailOctopus does offer auto-plan downgrades. Screenshot of the billing page on our account: https://share.cleanshot.com/VJdQPrjP

After trying a few also we ended up with EmailOctopus because of simplicity (we only send plain text emails) and cost. The trick was using their Connect [1] plans so it could send via our AWS account, which is cheaper (we pay $30/mo for the 10,0000 subscriber plan).

I also tried Loops and wanted to love it since they're perfect for SaaS companies, but back when I tried them we just got a ton of spam subscribers since they didn't have any built-in mitigation, so our list (and cost) grew.

But that was in their very early days, so I assume they've resolved it by now and I'd like to try them again at some point since they're much more modern and purpose-built for SaaS (and a YC company).

[1] https://help.emailoctopus.com/article/161-what-is-emailoctop...
I think it would do the industry a service. Foreign EVs are 75% better quality than Teslas in my experience. I would buy a Kia EV that I can open the doors of in the winter that doesn't have parts falling off of it for the same price as my Tesla in a heartbeat. If the company tanks Elon Musk will lose what credibility he has left and I'll never have to hear about him again. Win win for America as I see it.
True, although for a remote attack there's no reason it can't just be reinfected after the reboot.
No other "Level 2" engineer was available? Or were they also unable to authenticate? For a national air traffic control system?

Looks like this is the official report they're working from:

https://www.caa.co.uk/commercial-industry/airspace/air-traff...

(note the DD/MM/YYYY date format there)

On the one hand, obviously some top-level people need to be shown the door. On the other hand...this is the UK. Where properly-functioning government and gov't services have been Utterly Verboten for the past 7+ decades.
How computer scientists got password policies so wrong
There are many kinds of Communism.

To the extent that one may argue that Communism has to be anarchic, I think that it is doomed to follow exactly that path — but this is a flaw with anarchy, not with Communism, and would also affect e.g. anarcho-Capitalism.

I would also argue that the flavour of Communism seen in China, from Mao Zedong to wherever you'd like to say it's become "state Capitalism", was overall a success despite the Great Chinese Famine that was unnecessarily severe due to people wanting to win favour and avoid getting purged.

You may be surprised by my position on such a severely bad thing, which I am openly calling out as severely bad. This is not to minimise it, but because I see similar failures in very non-Communist systems — the UK had, for different reasons, a similar failure of governance with the Irish Potato Famine that made that unnecessarily severe. Given the timings, I suspect the Irish Potato Famine formed part of Marx' reasoning when writing the Communist Manifesto in the first place.

I do not think we need to repeat the mistakes of the past, but for me that means looking into the causes of bad governance everywhere rather than picking between the biggest teams of the mid 19th to late 20th century.

There's a place for something new — just as Marx' Communist Manifesto was written in a world where Capitalism seemed to be enriching a minority in a "meet the new boss, same as the old boss" kind of a way; and just as Smith's Wealth of Nations was written in a world where local market information could not possibly be collected let alone computed by a central government; so now do we find ourselves in a world where we have some ideas about how a Nash equilibrium can show us what outcomes are incentivised by the legal and technical things we consider building.

It's OK to ask if we can figure out how to do the (next) Industrial Revolution without Sabotage[0] from Luddites afraid of losing their jobs to automation, it's also OK to ask if we can figure out how to get public ownership of the means of production without dictatorships, and it's OK to ask how we might get government of any kind without groupthink[1].

[0] https://www.youtube.com/watch?v=cKLIivrA3g0 is popular, but probably false etymology: https://www.etymonline.com/word/sabotage

[1] https://en.wikipedia.org/wiki/Bay_of_Pigs_Invasion#CIA_repor...
‏كيف اخذ الهاكر
"Just to be clear, I'm not trying to say I think any of what I just described is "good""

Yes, this has been the problem. Many in the Deaf Community do not see being deaf as "bad", but that is the label society has put on them.
See adjacent comment above.
> who are better off provisioning API tokens the normal way

As long as those packages get digital attestation, perhaps attested by PyPI itself post-upload or from a well-known user provided key similar to how GPG worked but managed by PyPI this time.

Surely you see how this is creating two classes of packages, where the favored one requires you use a blessed 3rd party?
Electrochemical reactor grabs 97.5% of lithium from geothermal sources
Pity the Ukrainian seed bank did not survive the Russians https://www.newscientist.com/article/2321008-priceless-sampl...
Embarrassing. Do you not know Kubernetes as well?
The have a massive economic incentive to make their closed source software look as good as possible, why wouldn’t they cheat?
> It is fine to not like GitHub, but I think that means we need more trusted builders. Developers cannot be pushed toward just GitHub.

Yes, agreed. This is why the docs explicitly say that we’re planning on enabling support for other publisher providers, like GitLab.
The "reduce white point" is a great hidden feature in Accessibility that dims your backlight even further for nighttime reading. You can even assign it to a triple-click or backtap (another great hidden feature).
A physicist and his cat 'reveal' the equation of cat motion
Great example of something complex made very simple to the end user. A lot of thought clearly went into the UX. Congrats
I doubt you'd call it "fake news" if a corporate acquisition was announced, just because the deal hadn't yet passed regulatory approval.

But then again, you clearly seem to have a dog in this fight.
Later a4.8 quantization by some of the same team:

https://news.ycombinator.com/item?id=42092724

https://arxiv.org/abs/2411.04965
Show HN: I have created Steam Achievement Guide browser extension
Chrome extension: https://chromewebstore.google.com/detail/steam-achievement-g...
Firefox addon: https://addons.mozilla.org/en-US/firefox/addon/steam-achieve...
Discord: https://discord.gg/t8cBtPAczE
a POSIWID view of this is that these "government reveals UAP secrets" stories always seems like a way to issue an interrupt and neutralize volatility in another mainstream story by redirecting attention to it. it's a popular distraction tactic with a lever attached to it. a hearing like this only takes a few days to a couple of weeks to schedule and arrange, and time spent mulling the story is time not spent on the present issues. UAPs aren't secret, it's a managed narrative.

we don't need official disclosures to have serious conversations about consequences, meaning, and what we can learn from the fact of being observed. the best are probably already elaborated in fiction, notably in the star trek franchise regarding the species wide and civilizational reorientation impacts of first contact.

if anything, the need for these performative hearings indicates how far off human civilization is from an official first contact, (I would estimate at least another century or more) because they exist to nudge a very long tail of people who are psychologically and culturally unprepared for it. by unprepared, I mean their strategy for negotiating in the world will revert to a zero sum material nihilism, like that of an animal or less than human, instead of elevate their perspective to an infinite sum openness to the possibilities of a nagivable universe.
I would guess longer compile would encourage breakpoints over printf and this would be programming language specific.

Being able to change breakpoints at runtime helps a lot when tracking down something more complex. Visual Studio breakpoints are great, and they’ve added conditional breakpoints which are even better. Previously I would approximate this by having code specifically branch to hit a breakpoint, ‘if (X) { breakHere();}’

I write a fair amount of native C++ code but only call it from either Python or dotnet so when I make a mistake here it’s usually a segfault / memory access issue which kills the process. There might be a way to debug the C++ from dotnet or Python but logging to std out helps me isolate the location of the issue which is sufficient. It’s not a big enough problem and I worry that either writing tests in C++ or learning a native debugger will pay off in time saved.
lsp-mode+dap-mode also work well but requires some manual fiddling with launch.json files
"While I've observed bloat in Zyme, I don’t think this is driving the increase in mutation resistance and survival rate"
This is evident in the human genome.
For personal blogging, platforms like WordPress and Medium are highly recommended.
It’s an eminently ideal way, given that the overwhelming majority of Python packages come from GitHub. It would be unreasonable to withhold an optional feature just because that optional feature is not universal yet.

Again, I need people to let this sink in: Trusted Publishing is not tied to GitHub. You can use Trusted Publishing with GitLab, and other providers too. You are not required to produce attestations, even if you use Trusted Publishing. Existing GitLab workflows that do Trusted Publishing are not changed or broken in any way by this feature, and will be given attestation support in the near future. This is all documented.
> what was the point of giving them the vote in the first place?

To provide tools that counter pressures toward tyranny.

> If people aren't trusted to express their will, however ill-informed, fickle and capricious, then what was the point of giving them the vote in the first place?

The phrasing here suggests some principle that outweighs societal good.

Informing voters in good faith helps them wield their voting tools skillfully. Informing voters in other ways yields other outcomes.
Tēnei Te Tangata
Multi Agent LLM's are already a thing.
Motif today supportṡ TTF and for the HD issues, you can the DPI option for X11 at ~/.Xdefaults
For those interested, this might be related: https://news.ycombinator.com/item?id=40133976
As much as I appreciate the sentiment, it is starting to look like bad things happen to OTHER people when the extremely powerful get disconnected from reality. I feel like Marc Andreessen falls into the "bad things will happen to other people" category here.
Vowel signatures in emotional interjections of pain disgust&joy across languages
> PHP has no way to install deps that actually are written in asm/fortran or c.

https://www.php.net/manual/en/book.ffi.php is not enough for your needs?
Solana is heavily centralized and doesn't offer any scalability advantage over the new breed of onchain Ethereum rollups like Base.
Ethereum is more widely adopted and vastly more robust/decentralized.
There are several open-source emergency or crisis management platforms available. One notable example is "Incidental"
Current DDD under the updated OpenMotif with TTF fonts can look much better than it did in the 90's and 00's, miles ahead than LessTif/former propietary Motif. It blends perfectly with
EMWM where I have Liberation Sans/Mono for almost everything.
Totally agree on Lazarus: it inherited the "Delphi way" of doing thins, and is a joy to use.
For those who never used it, it produces native compiled high performance code (on par with C) and the IDE itself can run for example also on ARM boards, no cross compiling needed.
Still dreaming to see it support other languages, but I guess adapting all libraries to them would be a nightmare of a task for a Open Source and Free as in beer project.
IME that kind of thing is more likely to make it 300% harder.

This idea of easy, worry-free database replatforming strikes me as kind of a shibboleth for identifying people who’ve never done it before. In reality they all have subtle differences in semantics and query optimization behavior that mean that every touch point needs close attention to make sure you understand how the behavior in that part of the system changes (assume it will change) and if that change is acceptable. Thinking abstraction layers can eliminate the need for close attention to a DBMS port is the software engineering equivalent of thinking adaptive cruise control means you can play Slay the Spire while driving to the office.