skysight-inc/HackerNews huggingface dataset:
This is a new problem created by the rise of very complex fintech companies using middlemen to handle transactions. The FDIC is proposing a new rule to require better record keeping to try to prevent issues like this in the future.

https://www.fdic.gov/news/press-releases/2024/fdic-proposes-...
> the largest banks for typical consumers like Bank of America or Wells Fargo or Chase

These banks are up front about not competing on rates.
Academia can be criticized as unsustainable as the OP does because the number of graduate students exceeds the number of secure employment positions available after one defends one’s dissertation or does a postdoc. However, the American model of PhD students being impoverished while studying isn’t the only one. In several European countries, the norm is for PhD students to be university employees under contract that receive a pretty standard middle-class salary. In various other countries, decent middle-class funding may have to come from outside the university, but it’s a semi-automatic process for anyone whose research plan was solid enough to get accepted as a PhD student in the first place.
Personally I liked very much the more standard car-DIN-form factor visual plugins. They could also be stacked with separate equalizer or playlist controls.

https://images.app.goo.gl/XY3baSW3ZRtwZcSf7
I wonder at OpenAI, Anthropic etc, how many people actually believe in "creating generalized artificial intelligence"
Congrats to them, but posting Mistral’s emails to the company is particularly cringe. But are they just assuming they have permission or did Mistral agree to be a public reference to this extent?
Yes. Marc Andreessen is worth about $2 billion. he should be personally paying for the audit.
Lots of espionage and surveillance within government and contractors.

Lots of body shop contractors are fake people anyway. Pretty easy to imagine placing a compromised person in a low sensitivity area, then moving laterally.
The argument is not between NIH and external deps. The argument is over needless complexity and brittle unreliable bits (which can come through either channel) vs keeping things simple.

In my experience, younger developers will push both (in-house and external) directions at once, actually. Building out complex edifices with sharp corners over a maze of transitive dependencies that few understand.

It's the same thing: A fantasy that a framework will solve the problem, combined with a fantasy that they can develop said framework. It's an urge we all suffer from but some of us have learned the hard way to be careful about. (And others who are great at self-promotion have been rewarded for it by naive investors and managers.)

Finding simple solutions takes humility and time.
What do you mean "as they do?"

Twitter/X has been free and clear of government interference. Sure it's getting sued and advertisers are leaving, but that's because of specific choices that Musk made after being told what Twitter needed to do for its employees and clients to continue interacting with it.

I got a ping from an X recruiter. I ignored it, because the last damn thing I need is Musk doing a little bit too much K and deciding he needs another 75% layoff.

I'm not gonna lie, if you look at the state of Twitter these days and blame Democrats, you're kind of a clown. Musk is doing just fine wrecking it on his own.
1856: Secret ballot introduced and all adult men given the vote
> Seems like a rather large moral hazard if we don't

Based on what? The catastrophic failure rate is low. And if you’re sensitive to that risk, don’t bank with a firm that’s selling you on sticking it to the man or whatever.
Firstly the Sun itself rotates roughly once a month, and secondly if the probe wasn't going round the sun, it would be called the Solar Impactor, not the Solar Orbiter. Or maybe the Solar Evaporated Slag Cloud when it got close enough.
I took a position at a prominent London university to teach one of their courses and I did it for the love of it, because it was less than two days contracting for an entire term of lecturing and marking. Forget that coming into college to teach was effectively an entire day of my time for a two hour lecture or seminar, I think I was paid by the hour. This practice goes on everywhere and the real losers are the students/customers.
And coming soon is an implementation of clojure, made to run in yaml (https://yamlscript.org/). Made by the creator of yaml.
Kinda feels like Synapse was really just a fancy money laundering operation.
If anyone is making you feel ashamed for using one of the most fundamental, bread and butter debugging techniques, that's a red flag about that person. Not you. If there are better tools available, fine, use 'em. But there is absolutely nothing wrong with tossing out a console log to see what's going on.
AI Jesus is ready to dispense advice from a booth in historic Swiss church
Which, admittedly, seems like a much harder problem.

A world in which AI churns out amazing proofs would be pretty radical though.
I get it - you'd like await semantics in a function without having to expose that detail to the caller.

You can't get it directly in javascript but you're only one step away. Just not awaiting your function in the caller 'breaks the chain' so to speak, so that at least the caller doesn't have to be async. That way you can avoid tagging your function as async completely.

Therefore one syntax workaround while still being able to use await semantics would just be to nest this extra level inside your function -- wrap those await calls in an anonymous inner function which is tagged async, which you just instantly call that without await, so the function itself doesn't have to be (and does not return a promise).
There isn’t, because the indented way to use Parca is to profile production and always-on.

However, we wouldn’t be against adding a mode like this!

FWIW both the server and the agent are single statically linked binaries so while it’s a bit more set up it’s not terribly difficult either[1].

[1] https://www.parca.dev/docs/quickstart/
You don't want to be accused of promoting your books, but some moron will complain anyway. It's impossible to avoid all the morons in the Internet!

Anyway, my recommendation is to add an explicit section of the RHS that says "Books" with a link to each book. Bonus points for an image of the cover of each book.
That’s a great point, in a similar vein I routinely see people post photos on social media taken with their phone, side by side with a photo taken by a high end camera, saying “I bet you can’t tell the difference, expensive cameras are a waste of money when phones are so good”.

Well of course, you’re comparing 1.5 megapixels compressed JPEGs. If you display those photos on a large monitor - let alone print them - the differences will be immediately obvious.
I only use print debugging when working on the web, and your mention of console.log makes me think maybe you're in the same boat.

It's an absolutely damning indictment of the developer experience for the web that this is the case. Why aren't our IDEs and browsers beautifully integrated like every other development environment I use integrates the runtime and the IDE?

Why hasn't some startup, somewhere, fixed this and the rest of the web dev hellscape? I don't know.
Print debugging has no problem inspecting pointers, you just gotta decide ahead of time which pointers you want to inspect and which members of the structure it's pointing to are relevant.
Because the AI model is built around statistics and prediction --- not logic and reason. In other words, it's
primarily a talking database.

Asking a database for logic is a mis-application. Acceptable logic can be produced in some cases --- but this is due to random chance (it just happened to find a similar problem encoded in memory) more so than any "thinking" or reason. Do you feel lucky?

Ask for any logical result not seen before (like creating a puzzle) and it is likely to fail miserably. Memory is a poor substitute for logic.

How many applications can accept faulty logic at high cost? There are some but these are rather limited in my opinion.

The ultimate test --- would you do business with a bank run by AI?

Would AI bank consistently offer better interest rates on savings and loans than a conventional one? Or would it be easily victimized by con artists? Would it simply refuse any further loans as a result?

If AI can't run a bank successfully, it certainly can't run the world.
A good news outlet would not credulously label is as "accidentally" in a headline of all places without sufficient evidence. They don't even support this in the article other than that's what OpenAI claims what happened.
Not to mention that there is incentive to keep having oncall pages, because that's how you get paid. Or not participate at all. On the other hand, with a flat payment, there is a big incentive to prevent issues and not have(reduce) ooh incidents, and participate in the rota.
Energy shaming isn’t a conservative schtik. The OP is right, why are we picking and choosing? Shame them all. Disney, Six Flags, Universal Studios, Sea World, Bush Gardens
I disagree with this previous premise: In finance, you should never assume incompetence over malice. It very rarely works out that way. Malicious incompetence maybe.

I suspect it's informed more by confirmation bias fed by the news cycle than actual facts. And Misty likely the rule of thumb featuring incompetence still holds.
Researchers spot black hole feeding at 40x its theoretical limit
It's just a standard example of a code that works classically but not quantumly to demonstrate the differences between the two. More or less any introductory talk on quantum error correction would mention it.
lol i did not only the other commenters did but yeah thanks :)
Dissecting M8trix
SDL provides..

..an image decoding library.

..an audio input/output library.

..a multi-channel audio mixer.

..ttf and rtf font rendering.

..networking.

..runtime shader cross-compilation

..its own entire graphics abstraction layer / API.

..its own shader language, shader compiler, and shader bytecode format.

I don't know at which point something becomes 'high level', but SDL is only 'minimal' if you use a subset of its functionality.
All UK universities do this. Not necessarily a bad thing unlike how the article portrays it. PhD students (and depending on the institution, postdocs) in the UK get a stipend that has no mandated teaching hours. Teaching allows PhD students to earn some extra income within the university.

We certainly still have a compensation problem in academia. Bright STEM PhD grads don't want to earn £30-40k as a postdoc when earning £150k+ in big tech or finance isn't unusual. However, PhD students earning a little side income by marking lab reports or programming assessments isn't necessarily bad.
I have a home grown websocket library I wrote in TypeScript for node.js. When I measured it a couple of years ago here were my findings:

* I was able to send a little under 11x faster than I could process the messages on the receiving end. I suspected this was due to accounting for processing of frame headers with consideration of the various forms of message fragmentation. I also ran both send and receive operations on the same machine which could have biased the numbers

* I was able to send messages on my hardware at 280,000 messages per second. Bun claimed, at that time, a send rate of about 780,000 messages per second. My hardware is old with DDR3 memory. I suspect faster memory would increase those numbers more than anything else, but I never validated that

* In real world practical use switching from HTTP for data messaging to WebSockets made my big application about 8x faster overall in test automation.

Things I suspect, my other assumptions:

* A WebSocket library can achieve superior performance if written in a strongly typed language that is statically compiled and without garbage collection. Bun achieved far superior numbers and is written in Zig.

* I suspect that faster memory would lower the performance gap between sending and receiving when perf testing on a single machine
Terence is fascinating in how different his thinking is even from most other mathematicians.
We'd be at the same spot, single-header files are still useful.

A single-header file is not a 'full-sized' library compressed into one file it's codebase is designed to actually be minimalist. Many libraries have single files that are the same size as their alternative single-header.
Some of the trickiest bugs to hung down are those involving concurrency and non-deterministic timing. In these cases, stepping through a debugger is not at all what you want, since you may actually change the timing just by trying to observe.

To see the nature of the race condition, just put some print statements in some strategic locations and then see the interleaving, out of order, duplicate invocations etc that are causing the trouble. It's hard to see this type of stuff with a debugger.
Debugger vs print? No, the most smug response to that debate I ever heard was "Neither, I use unit tests".
The X (Twitter) to Bluesky Exodus
Yesterday I needed to take an unstructured document with about 1,200 timestamps and substract 1 second 550ms from each of those.

I could have written code for it, but Claude output a perfectly valid HTML page I could locally paste my document in, which gave me the accurate output I needed.

This is knowledge work.

Today I had another document, about the length of a small book, where H3 and H4 titles were mistakenly provided in the wrong language. I needed those 159 titles to be changed while preserving the rest of the document, with a very specific maximum word count per title. Claude did this with a single natural language prompt. (though I had to tell it to "go on" every couple hundred lines)

This is also knowledge work. Knowledge work is not generating new knowledge, just like manual work isn't about generating new hands.
Shame? My perception is that the situation is quite the opposite, in that tons of people online proudly proclaim at any opportunity that they only use print-debugging.

Which in some cases I see as related to a sort of macho attitude in programming where people are oddly proud of forgoing using good tooling (or anything from the 21st century really).
I think in many scenarios, print debugging wins the cost/benefit analysis - new project where I don't want to learn how to set up a debugger, trying to debug something really custom or specially formatted, etc.

However, if I know I'm going to be working on a project for a long time, I usually try to pay the upfront cost of setting up a debugger for common scenarios (ideally I try to make it as easy as hitting a button). When I run into debugging scenarios later, the cost/benefit analysis looks a lot better - set a breakpoint, hit the "debug" button, and boom, I can see all values in scope and step through code.
Agreed. I don't care how a team member debugs something as long as they can solve the issue.
I wrote a long-ish comment about what you can expect of QC just yesterday

https://news.ycombinator.com/item?id=42212878
you are one of those wholl be queuing to fight the evil enemy if your leader says so, fine (or send your sons to do so, depending on your age)...thats all well an dandy. Myself and every other reasonable individuals will prefer the evil enemy bleeds itself into nonexistence before that is needed.

> Human lives...

are you kidding!? these guys are after us and wont stop until their stopped
All things being equal, this is generally a little bit true, even for collisions with rigid, fixed obstacles - but vehicle design is critical here. For instance, a cab forward truck with no real crumple space does not benefit from mass, as the deformation of the pax compartment is the primary concern. A very lightweight vehicle that is very deformable and has a long crumple zone might outperform a heavier vehicle in terms of the acceleration imparted to the passengers.

The problem is that a “fixed” solid object has effectively infinite mass. This applies when the collision displacement of the obstacle can be measured in fractions of a millimeter. In these cases, the ratio of the lightweight vehicle to the effective mass of the obstacle is effectively the same as with the heavier vehicle vs the obstacle. Here, mass pays no dividends. Only the distance / time covered during the sudden deceleration, and the integrity of the passenger compartment. Of course, the efficiency and extent of restraint systems will also play a major role. But it’s not an automatic win for heavier vehicles in this case.

Notably, most collisions are not with immovable objects, but with other vehicles. In that case, mass is going to win almost every time, since the acceleration experienced by a subcompact vs a full sized SUV is about 2x, which means the forces imparted on the passengers in terms of static loads on their bodies and bones will be 4x.

For passenger survivability in most accidents, the incentives fall heavily towards using the heaviest well constructed vehicle that you can afford.
> The title is misleading because exactly one implementation was chosen for each of the tested languages. They conclude “do not use Python” because the Python websockets library performs pretty poorly.

On the contrary, they tried autobahn and aiohttp as well:

For the Python websocket, a generic module is used which is simply named "websockets". ... This is most likely a module that offers the simplest of websocket functionality. Now, it was mentioned that this only partly explains the poor performance. While writing this report, it seemed unjust not to give Python a fighting chance. So, the websocket server has been rebuilt with the more trusted Autobahn library and the benchmark test has been rerun. This new server does lead to better results ... still unable to finish the benchmark test.... [T]he Python server is rebuilt one more time, this time with a library by the name of "aiohttp." At last, all 100 rounds of the benchmark are able to be completed, though not very well. Aiohttp still takes longer than Go, and becomes substantially unreliable after round 50, dropping anywhere from 30-50% of the messages. It can only be concluded that the reason for this dreadful performance is Python itself.
Start world war 3?

The current state sees Russia being destroyed by its victim for Pennie’s on the dollar. I can’t think of a cheaper way to watch Russia humiliate and completely ruin its military. Resort to using DPRK to unwind the Kursk invasion

With no risk to NATO forces
Show HN: Binge-watch or download clips from twitch
I wanted to train my devloppement skill so I made TwiClipSaver.com at a side project from my work.

This idea come to my mind after creating many youtube video about clips compilation from twitch, for that I needed downloader for the clip and tools to find best clips so I create my own tools and group them in the same place.
In my site, you can found 4 sections:
- Download page for downloading the clip by their url
- Clips page to watch random clips from twitch
- Trending page to watch the most viewed clips by game/date
- Blog page to see news about twitch

Because I think it can be interesting for other I decide to create this website and share with you to have some feedback about the project and maybe someone have good idea to add more feature.
I use Django, HTMX and Tailwindcss/FlowBite to make this website.

The next feature I would like to add it's the possibility to create user for liking the clip you like the most and rewatch it.

If you have any questions I'll be happy to answer.
Obviously you can't check for the presence of a rootkit while under a rootkit, in the general case.

Checking environment variables wasn't part of the challenge. The challenge was likely not intended to check for rootkits, because there are a thousands of other ways to place a rootkit apart from already loaded libraries. (Why check only open files? Closed files can also contain unwanted things.)

If the purpose is to check system integrity, just check all packages. That is much easier and faster.

If there is even the slightest possibility that the system is already compromised, do it from rescue media.
Ask HN: Is specializing in these cybersec domains a good direction to take?
Hey, this is my first time asking here.

A bit about myself: I'm currently a cybersecurity student at a university, not in the US. Things are a bit different in my country, but to give you an idea of my academic background, we can say it's similar to having a bachelor's degree in computer science, and now I'm in a master's cybersecurity program.

Recently, I have been thinking that I should specialize in some cybersecurity domains. The motivation for this thought process is that cybersecurity is a huge multidisciplinary field, and you can't be an expert in everything (network security, IAM, cloud security, Android security, Windows security, etc.).

Before specializing, I believe it's important to have a solid foundation, and I think I do. My background includes:

- Networking: LAN (equipment, VLAN, subnetting, routing), WAN, dynamic routing, firewalls, network services (DNS, DHCP, NFS, SAMBA, ), OSI model, different TCP/IP protocols...
- Programming: HTML/CSS, JS, C/C++, Java, Python, and shell scripting.
- A good understanding of Linux, cryptography, among other topics.

Now, the question is: which domains should I focus on? After doing some research https://pauljerimy.com/security-certification-roadmap/ and based on discussions with my professors and based on my personal interests, I have chosen the following areas:

- OS Security

- Malware Analysis

- Digital Forensics

Thus, I plan to delve deeply only into these domains. For example, regarding OS security, my plan is to:

1. Study the theory of how operating systems work. For this, I have begun reading the famous book "Operating Systems: Three Easy Pieces" You might wonder why I'm revisiting this topic since I have a bachelor's in computer science; the answer is that most courses don't go into too much detail, and I want to refresh my memory.

2. Explore the design decisions of specific operating systems (for Linux, I plan to read "Linux Kernel Development" by Robert Love; for Windows, I will read "Windows Internals").

3. Participate in CTFs and challenges that focus on OS security.

The goal of this post is to share my thoughts and to ask the community what they think of this thought process. Any thoughts, tips, or recommendations are very welcome.

EDIT: formatting.
Even printing can have some side effects on the code, by introducing some extra latency that might implicitly fix a race condition, if that’s the bug in question.
Not saying that it’s wrong, just funny to think about that race conditions are hard to debug with any kind of tool, either with debugger or printing.
The problem with all these 'print debugging is good' and 'print debugging articles are bad' is that none of them provide any context. Print debugging is just one tool in a box full of tools. Pick the right one for the right job. An article that walks through how to make that decision would be very useful. An article that just picks a side in a decades-old debate is just noise.
Family by Choice with Eng Subs
Comput-a-Dice vs. Demley Auto-Dice Mechanical Dice Games Compared
Sitters vs. Standers
Middle boxes simply block QUIC so that won’t help
You just reminded me of https://spacesounds.com which I remember seeing in the very early 2000s and thinking it was awesome.

And 4.5 million tons of mass/second may be unimaginably huge, but the Sun is so big it can also do that constantly for literally billions and billions of years. And it's not even an especially big star!
Can an app use MPTCP if they don't have a MPTCP-aware server component? Or is Apple proxying (or via VPN) the MPTCP connection as part of their services?
Oh hey - I wrote this. Thanks for sharing. My goal was explaining to non-technical businesspeople what AI is actively being used for, so they can identify places to build or buy within their own organizations.