skysight-inc/HackerNews huggingface dataset:
For us it’s compliance related first rather than any real security upgrade; we must use mtls between all services (finance) and it’s simply less to manage to use a service mesh.

The cloud provider could read the memory of a k8s node and in theory capture the session keys of two workloads on the same node, and we can’t really protect against that without something like confidential computing.

We get some other benefits for free by using istio though like nice logs, easily sending a chunk of traffic to a new release before rolling it everywhere, or doing fully transparent oauth even in services which don’t support it (oauth2proxy and istio looks at the jwts etc).
Funky! I live a few mins on foot away from this Zoo and have a year-long ticket for the little one (it doubles as a nice central park of sorts, with several playgrounds). I actually recognize these two.
Wino-Mail Built-In Mail and Calendars App Clone for Windows
Will Rogers said "Good judgment comes from experience, and a lot of that comes from bad judgment."

I can't think of any substitute for experience. You can read and study what you call concepts and patterns, just like you can read about baking a cake, but you can't get experience from study. You practice, make mistakes, stretch your abilities every day, and with luck you find good mentors.
The limits are engineering, not physics. Atoms need not be a barrier for a long time if you can go fully 3D, for example, but manufacturing challenges, power and heat get in the way long before that.

Then you can go ultra-wide in terms of cores, dispatchers and vectors (essentially building bigger and bigger chips), but an algorithm which can't exploit that will be little faster on today's chips than on a 4790K from ten years ago.
> I only ran 10 trials since AI companies have inexplicably neglected to send me free API keys

Sure, but nobody is required to send you anything for free.
Editors don’t syntax highlight SQL queries written as strings. That’s the main reason I write my queries with uppercase keywords in my Go programs
You are right, going from 4 to 8 is a huge challenge.

Minor point: classes are using the same syntax but you are right they typically won't work because the constructor have changed, in PHP4 it was a function named the same as the class, in PHP5 and on it's __construct, the PHP4 version was deprecated in PHP 7 and removed in PHP 8.0.

create_function is just gone. So is each(). Oh and HTTP_RAW_POST_DATA. The list is long.

If you have used == and in PHP4 we did that, come on, don't be holier than holy and claim you only used === in PHP4 then PHP8 will have some surprises for you.

In my experience rector became usable last year-ish, if you tried before, give it another whirl.
Yes. Solarwinds.

Code checked out from the repository was not the same that was used to build the actual release. These are not high-likelyhood incidents but when they do occur, they tend to have high impact.

And more recently, semantically similar code-vs-build mismatch: CrowdStrike. The broken release was modified after the actual build step, as per their own build process, and the modified artifact is what was released.
I actually think it could also have been something that resetted the T2 chip during the process..

I bought a new MacBook and wanter to transfer data using the cable / migration assistant. I think it froze. After that it wouldn't boot, and there was no partition table. The SSD worked after formatting though.

The cable was a cable directly from Apple, but yeah product return fraud on Amazon could be scary with these kinds of attacks
So based on your argument they actually operate in 1D since roads go in one direction and lanes and intersections are constrained to a predetermined curly line.
Why do they need to, except for letting them read postings and follow selected users/entities?

To avoid the cesspool effect, Bluesky should just charge publishers (anyone who wants to post) a high monthly fee, and make user accounts for reading free. Then governments or companies or anyone else can just use it as their announcement service.

People who want to chat can use Reddit or whatever.
> so early websites couldn't even place text over images

I take offense at this! We weren't that stupid back then! We just put the text 5 times on the page, with position: relative, 4x in the outline color, each copy with a 1px offset in a different direction, and the final one in the text color. That trick worked with pretty early CSS.
Why do people continue to use this term "code smell", instead of "hard to read code" or something similar, more equivalent??? First seem almost offensive to an author.
Well... I still get SMS spam. I assume spammers just use other people's hacked phones.
I use it all the time and it works great. You need to know what you're doing.
Bash in Terminal.app on macOS, with a bunch of rc files that have been evolving with me over many years. My own terminal palette. My own colorscheme in Vim. Fira Mono.

And no "AI" bullshit whatsoever.
This thread is about elephants.
Exactly this, lies the whole problem with Mastodon.
Are you stupid? Most people don't have any money invested in anything.
This, exactly.

And possibly requiring browser vendors to implement Do Not Track in an accessible and user-friendly way. (Those whose business models are reliant on ads might need a firm nudge there.)
A GP in this thread linked to Inkycal, which is a RPi0W based solution, no batteries:

https://github.com/aceinnolab/Inkycal
Understood. Based on my many years in a large org, what you’re describing depends on the large org, and more specifically on management.

I’ve seen both : bad managers who let the boat crash and wouldn’t listen, and very good ones ( leading thousands of people ) understanding there was a problem, owning it and fixing it.

There are large orgs which are like what you want ( I work in one of them and that’s why I’m not leaving). I suspect there are not many of them though !
Graphene might be great, but the Google specific hardware that is the only thing it will run on might not be as trustworthy.
The next wave won’t be monolithic but network-driven. Orchestration has the potential to integrate diverse AI systems and complementary technologies, such as advanced fact-checking and rule-based output frameworks.

This methodological growth could make LLMs more reliable, consistent, and aligned with specific use cases.

The skepticism surrounding this vision mirrors early doubts about the early internet fairly concisely.

Initially, the internet was seen as fragmented collection of isolated systems without a clear structure or purpose. It really was. You would gopher somewhere and get a file, and eventually we had apps like like pine for email, but as cool as it was it has limited utility.

People doubted it could ever become the seamless, interconnected web we know today.

Yet, through protocols, shared standards, and robust frameworks, the internet evolved into a powerful network capable of handling diverse applications, data flows, and user needs.

In the same way, LLM orchestration will mature by standardizing interfaces, improving interoperability, and fostering cooperation among varied AI models and support systems.

Just as the internet needed HTTP, TCP/IP, and other protocols to unify disparate networks, orchestrated AI systems will require foundational frameworks and “rules of the road” that bring cohesion to diverse technologies.

We are at the veeeeery infancy of this era and have a LONG way to go here. Some of the progress looks clear and a linear progression, but a lot, like the Internet, will just take a while to mature and we shouldn’t forget what we learned the last time we faced a sea change technological revolution.
if my billion net worth were coupled to that being the case i'd tweet that as well
Someone needs to put a stake in those stakeholders.
I’m not talking about compile times. I’m talking about the way people should communicate respectfully.
Yeah, this one. Why?
Blink shell on iPad Pro, tmux, plain bash with a few aliases, vim with few plugins. No AI, no shell plugins, no junk on the screen to make it into a Christmas lights display. If your "shell interactions" feel slow try unloading some of the baggage. If you find the shell "archaic" try to reframe that as tried and tested and well-understood.

The beauty of using the command line shell comes from the simplicity of plain text and direct interaction with the tools, not from trying to create a GUI experience or polluting it with Copilot assistance.

I don't know about your setup with emacs, but both vim and bash can execute a line displayed in the terminal without adding anything to them.
Probably because they got a government contract under which they receive funding for 3-5 FTEs over 24-36 months in return for quarterly reports - and a tool like this makes the DARPA PM happy. They're one of those "Cyber Defense Contractors"..
Bluesky is a decentralized service similar to Mastodon, so you don't need to maintain an account on the US service if you don't want to. I don't know if they're actually connected or not.
Any relation to the MS Dialog Editor?
“Code smell” does not mean “hard to read code”, it means “an unreliable but still useful indication that there may be something wrong in the design of the code connected to the piece described as having the ‘smell’”.

And the reason it continues to be used is that it is a concise idiom that is useful.
>I'd like to find a way to help them roll over on their bosses

They're unlikely to do this, because scam call centers are typically a branch of local organized crime syndicates. There is nowhere for them to roll, because their boss' boss also pays a bunch of crooked cops and whatnot.

The bottom rung guys doing the actual calling aren't gangsters, but further up the organization they are, so attempting to fuck with the organization from the bottom will not end well for you if you live in that area and lack protection.
I'd be curious to read about what percentage of active PHP devs use the recent features. The last time I worked in a PHP codebase (2020?) was half PHP 5 (bad) and half PHP 7 (much nicer). Curious if there's any real info out there on this
Not a movie I would not see.
Reminds me of the monks in the third season of Babylon 5. Who says you can't both be an IT person and a cleric?
Sure, and that's a perfectly reasonable law. There's no "oh you actually can sell alcohol after 10pm as long as your customers fill in a 5 page form, which is what the EU has caused.
>I just call them, it's not like the phone company takes a cut when you order on the phone.

Make sure you call the right number. Grubhub (and others possibly) will set up phone numbers[0] and websites[1] controlled by them and forwarded to the restaurant so they can take a cut.

[0]https://www.theverge.com/2019/8/6/20756878/yelp-grubhub-comm...

[1] https://www.grubstreet.com/2019/07/everything-you-need-to-kn...
Many of these problems stem from the fact that matrix is federated. And it's a protocol, not really even for messaging but for a federated graph database. In federation some messages may be missing and arrive out-of-order. And different clients have different capabilities. There's a really simple example client implemented in a couple of lines of bash.
Has anyone figured out cross compiling for macOS targets from a non-macOS host? For example, executing `deno compile` in a Jenkins job in a CI/CD workflow? I’ve tried numerous times and get stuck on the macOS target not passing Apple’s security rules. The codesigning example in the blog post is something I’ve tried but I feel like I’m missing something.
CTEs would be such a blessing. I am stuck using mysql 5.6. So many queries would just get simpler.
MiB: How the World Ran Out of Everything- Inside the Global Supply Chain
xfce4-terminal + bash.
The only tweak for the terminal is a custom light theme, the only tweak for the shell is a custom PS1 to show current git branch and time.
I imagine a vanishingly small percentage of the user base is still a very large number of people, that as an absolute number, would make up a significant percentage of the users of any other product.

Apple’s scale is so large, it’s easy to forget even tiny percentages are still actually really significant in absolute terms.
still banging that “mastodon suxx amirite???” drum, ey?
ESC Emoji Recommendations for Unicode 17.0 [pdf]
Agreed. I don’t understand how someone would be careful to not use biometrics and yet use a six digit passcode instead of an alphanumeric password.
I just tried on my S23+ and no, I don't get any app notification, I need to enter the pin code for that.
It's likely that in this community actually substanceless comments will be down-voted. That on the other hand is very upvoted comment by the community, so I think it shouldn't be met with such criticism.
Can you elaborate?

Personally, I was also very picky about who I follow, and also only use “Following” (never “For You”) and the only difference I felt with the Elon acquisition is less censorship — which is both good and bad — and makes it more useful as a news source.
The CEO of Bluesky is Jay Graber. (Who despite the name is a Chinese woman.)

Jack got mad that people were making fun of him for being into crypto, left for another decentralized service Nostr, did too many psychedelics and fried his brain, then moved back to Twitter.
Interviewing sucks, really hard, and when you put so much of your creativity up on the line like that it can feel like a test of the balance of your soul. Its not, its a test of whether you light up the right spots in the brain of someone you've never met. For this reason, and for many others: if you're giving 100%, don't. They don't deserve your 100% and would never even be able to benefit from it if you still give it. This was advice that not everyone needs, but I absolutely needed at one point. Hope you can find a brighter path.
The article is about a story involving elephants, and OP’s referenced zoo.
Why would the TLB misses be any different than if you read the file into memory?

The article is describing a separate problem where you can’t issue concurrent reads although that doesn’t feel true if you make use of madvise.
Apart from the funny timestamps (two-digit years ´༎ຶД༎ຶ), his files more or less are in org-mode already :-)
Essentially because the people drafting the laws are ignorant about technology, and have a kind of weird snobbery towards it. They like the shiny, but don't try and engage them in a conversation about what actually makes it tick.

Knowing and caring how the plumbing actually works marks you out as a plumber, and sophisticated people don't concern themselves with those kind of details.

(Also various corruptions in the drafting process itself, of the sort which tend to arise when you have a mega-nation with competing interests and power blocs, but in this case it's mostly just ignorance.)
So do it just before lunch
What was the largest IRC channel you lurked in (that didn’t have constant net splits?). I don’t think I ever passed 10K, and rarely passed 1K.

IRC did it on an incredibly small scale, IME.
Prohibition's Grape Bricks: How to Not Make Wine (2015)
Rebooted or turned on?

I had to create a shortcut to actually trigger a reboot, as I couldn’t find a reboot option in settings. My iPhone 13 mini on iOS 17.7.1 took 29 seconds.
Well maybe you should be, since focusing on the technology is what allows our disagreements to be impersonal.
I _really_ wish that if Element has an update prompt for me almost every single time I open it, that it would just update during the startup sequence on its own.

Or at least have an option for it. Not a 'Oh you loaded, now click this button to load again please' prompt whenever I launch it.
A lovely story, but sadly this recollection from Paul Vojta disagrees on his reaction: https://www.ams.org/notices/200605/fea-lang.pdf (see p547)
Institutional trading and satellite data – ScienceDirect
complain about specific scrummers (even many), not about scrum.

like: complain about gunmen, not guns.

methodologies and weapons do not kill people. people kill people.

that said, here's a riddle:

q: what is the difference between a methodologist and a terrorist?

a: you can negotiate with a terroris, but not with a methodologist.

also, what nradov said, here:

https://news.ycombinator.com/item?id=42143002
Most people in the broad sense don't use AI at all, at least not willingly. From your article I think "most people" in this context actually refers to a very small number of your colleagues and people you have shown your work to.

Many people who have used AI find it useless, in the sense that it doesn't add to their workflow, and just creates more distractions and sources of error. Perhaps mistaking novelty for efficiency or increased "productivity" (always mentioned but never measured) plenty of people have tried using AI. So far the current crop of LLMs have managed to attract public interest (now waning) and piles of money (seeking a return), but have failed to achieve widespread adoption because they mostly don't add much value. Almost every big company announced AI initiatives and plastered "AI" all over their press releases, but almost none have found a "killer app" for AI.

Of course if AI could "actively observe, understand context, and offer assistance at the right moment" -- the Holy Grail of current AI work -- then more people might find it useful. But that looks more and more like a chasm current LLM technology can't cross rather than something we'll see in the next version or two. I expect AI will turn out like full self-driving, just around the corner for decades, and maybe never really happening.
php 7 has been released 9 years ago.
Didn't we discuss this 4 days ago?

https://news.ycombinator.com/item?id=42105098
The rare two minute video doing its explanation and then simply ending.
> To avoid the cesspool effect, Bluesky should just charge publishers (anyone who wants to post) a high monthly fee

So they should become a subscription-based press release distribution channel? That doesn't sound too different from the "verified" account practice at current Twitter, just more expensive.
Not only on HN. Trying to publish a scientific article that does not contain the word 'novel' has become almost impossible. No one is trying to reproduce anyones claims anymore.
> what technical hurdles are stopping Apple from making a locked phone as secure as a rebooted phone

I think the hurdles are not technical, but based around user experience.
cinny/fluffychat/iamb are the greatest.
> Pick a server, sign up, share your handle

Except nobody picks email servers really anymore.

And even back in the day, during the main growth phase, people didn't really pick email servers. They picked an ISP (like AOL) which gave them an email server. And there really was very little choice.

> share your handle(email address) with your friends.

People don't use twitter to talk to their friends. They use twitter to hear from people they don't know. And they won't know which server people they want to follow have signed up for.

Now they need to figure out how to search for them across all servers.

People don't adopt "tech", they adopt "solutions". And everyone I hear about that tries Mastodon says it's tech, maybe even good tech, but nobody says it's really a one click solution.

Make Mastodon adoption as familiar and easy as Bluesky is and it would will growth faster.

Saying "you just have to understand these 3 things" isn't how to get adoption. And saying how easy they are to understand doesn't help either. Figure out how to make it so they have to understand 0 new things - that's how to grow adoption.
Exemptions from cookie banners for small and medium-sized businesses (SMBs) using analytics, tracking user interactions on their websites, and managing basic advertising are imperative to mitigate unnecessary economic and productivity losses.

Yeah, right. You don't have to use cookie banners if you don't use cookies.
Unless you are running ads or profiling users, you can get equivalent data from server logs.
Heroku CEO Bob Wise Departs
An Auctioneer as Rare as Any Antique
You can get a sim for a few bucks and spam under the rate limit.

You can buy jigs that hold hundreds of SIMs connected to a handful of cellular modems connected to a c&c and drip them out.
But, like email, there is a discoverability issue.

I want to find person X's email/mastodon. I know their name and they use that name attached with the account, how do I do it without leaving the application?

With Twitter, Threads and Bluesky, I can just search and find the person.
I feel like the article neglects one obvious possibility: that OpenAI decided that chess was a benchmark worth "winning", special-cases chess within gpt-3.5-turbo-instruct, and then neglected to add that special-case to follow-up models since it wasn't generating sustained press coverage.
The fact the "USING" keyword exists would disagree with you.

I also use "id" but I would say SQL was designed with the opinion that ids should be prefixed with the table name.
I don’t really understand the issue. Already if you have a mismatch, the only way you’d ever know is through static analysis. It will run and maybe crash during run time. I always joke that changing a function signature is the single most risky thing you can do in php (especially if you have any dynamic dispatch). Making it even more risky isn’t the right answer, IMHO.

Oh, and doing this would literally break class autoloading in symfony, and even the engine itself, which relies on this feature.
https://archive.is/BrssU
You can always install Croudstrike. They will take care of reboots. /s
We built planes, which works quite differently from birds, in the span of what, 100 years? I think we've long left evolution behind when building machines, thinking or otherwise, so I'm not sure why the powerful but inefficient evolutionary process is held to some gold standard here.
respectfully - TRMNL is licensed to sell all over the EU, is less expensive, does a lot more than just calendar, and looks better too. if it didn’t meet these criterion (at minimum) i wouldn’t have built it.
The Laravel ecosystem folks seem to be always up to date in recent PHP developments. At least, that's my impression.
You think the wars in Ukraine or the middle east only affect Americans?

You think the change of administration in the US isn't going to affect the global economy?
The other elephant is that while everyone has analytics, only one in five companies pays someone with an actual clue how to interpret them to look at them regularly, and only one in five of those companies has a decision making structure that allows them to act meaningfully in response to insights gained.
According to this page, urllib3 does not use trusted publishing. According to https://docs.pypi.org/project_metadata/#verified-details , trusted publishing and self-links are the only ways to have "verified details". However https://pypi.org/project/urllib3/ shows Changelog/Code/Issue tracker as "Verified details" even though they are not self-links. How come?

urllib3 does not have a recent release that could explain https://trailofbits.github.io/are-we-pep740-yet/ lagging behind.
My experience is that once success comes, business decides to quickly scale up the company - tons of people are hired, with most of the not having any experience with the hoot (or indeed give a hoot). Rigid management structures are created, inhabited by social climbers. A lot of the original devs leave etc.

That's the point when a ton of disinterested, inexperienced, and less handpicked people start pushing code in - driven not by the need to build good software, but to close jira tickets.

This invariably results in stagnating productivity at best, and upper management wondering why they are often not delivering on the pre-expansion level, let alone one that would be expected of 3x the headcount.