skysight-inc/HackerNews huggingface dataset:
All questions like this are really saying “tell me about yourself as an engineer. Here’s a prompt.”

“What’s the most elusive bug you’ve ever fixed?” is a worse question, because it tells me less about you as an engineer, and more about the specific problems you’ve worked on. It’s a worse question to get to the heart of who you are - which is the whole point.

And, because the point is to get to know the person, you have way more breadth in your answer than you think. “Well, I don’t have a favorite bug. I hate all bugs. But I do remember a bug so horrible it took down our site at least once a day for a month…”. This is a fantastic answer - since it answers the real question underneath, of who you are.
I wonder if the “programmers” could be much sloppier back then. “Find the eigenvalues? Which ones? You know, the ones we always want!”
I found the documentation for k8 much better than Docker swarm when I was deciding between the two at the time, even though k8 was more complicated.
Ask HN: How to measure performance compromises of adtech/tracking scripts?
I'm working as a UX designer/Project lead on a website, and the marketing/ads/traffic team keeps asking me to load the site with scripts. I've tried raising concerns about user privacy, but they haven't given it much weight. So, I'm considering tackling it from a performance angle instead, things like site speed and SEO impact. Maybe I'll have better luck with that approach.

Does anyone know of any resources or tools to compare how much weight, CPU usage, or other performance overhead these scripts cause?

So far, I've had to implement Google Analytics, Google Ad Manager, Marfeel, and "Facebook Pixel" with more likely coming my way. Any advice would be hugely appreciated.

Thanks in advance.
baz, qux and fyo?

Thinking about it, asking a candidate to refactor a piece of code wouldn't be a terrible idea if executed correctly.
Your argument is weak.
redis-rs has been around since 2013, so before redis inc. was called anything related to redis (the were called Garantia data) or they hired the redis creator (in 2015) or bought the redis trademark (in 2018).

That might not be legally relevant but it is certainly ethically relevant.
This serves to highlight the need to return to a model of computing where the call stack is not addressable by ordinary applications.

The 'display' where arguments and sometimes return values are kept can continue to be done as it is now. It's just the return addresses to calls? They are the root of many of the issues plaguing cpu security today.

If a separate, un-addressable (except by call and return instructions, indirectly) stack would do much to mitigate Spectre, ROP-oriented hacks and so on.
This is solved by having dedicated devices for camera and music player! (At least for these two examples, which are also my top non-distraction / non-social phone usage.)

I don't have those yet but I wish I did! I was just thinking back to how cool the iPod was back in the day. (The one before touchscreens!)

(I was also thinking how cool it would be if it had the iPod's UI but Rockbox's (and every other mp3 player in human history) support for just putting folders full of files on it... but I guess I'll keep dreaming!)
When Is a Manager Ready to Become a Director?
This problem is specific to elisp evaluation. It is rare that you would want to work in elisp code and not be modifying your currently running emacs.

If you are working on code for any other language, it is probably using an LSP or other form of child processes, right?
I did the insane thing of .... just updating to Dalle 3. My buddy recommended Flux, haven't tried it out just out of lack of time + Dalle 3 working pretty nicely
Coinbase won Tornado Cash appeal
>That doesn't mean that no one should ever ask questions like that. If the candidate explains that they can't think of the answer at the moment and why, and if the interviewer doesn't hold that against them (as long as the explanation is valid), then it's okay.

that's totally ok for me. that's why those are only two of the questions i usually ask, not all of them. i think saying "i don't know" is just as valid as any other thing.

as i mentioned elsewhere in this thread, these questions are "conversations starters" and the good data comes from the subsequent questions.

so if you said: "i can't come up with anything" i would probably ask about the last interesting project you worked on. or what was the last programming language you tried to learn.

interviews are not only for probing for tech knowledge, they are also about getting to learn about each other :)
> I haven't seen any of those apps (or built-in OS features like screen time on iOS) not become useless in a matter of days.

This isn't consistent with the data. I'm a cofounder of Clearspace and we see that when people make it through the first two weeks, they stick around for months or years.

YMMV - because our feature set looks slightly different - half users are in a mode where you have to do pushups to unlock distracting apps which really does tend to stick for people that opt in. (like this https://x.com/_oliver_hill/status/1825605422885253445)
Maybe you should read the responses here and acknowledge the value of a community.
I get what you're saying, but I also think it's hard to overstate how different ancient cultures and experiences made people.
Sounds like the person who designed the board followed a very simple and wise rule: always connect the negative side to the ground. Can't go wrong with that...

until you have to deal with negative voltage (-5V). Another out of bounds bug.
The wording isn't good. The number does not indicate how many jumps you need to make. It indicates how far you need to jump.

Otherwise fun!
We have a maintained alternative to storing encrypted secrets in git, but don’t store the (wrapped) encryption key there, thereby avoiding the biggest downfalls seen here. And a first-class api and tooling in multiple languages to obtain said secrets.

Here’s the GitHub link for the rust version of SecureStore: https://github.com/neosmart/securestore-rs
Russia-linked hackers exploited Firefox and Windows bugs in hacking campaign
Security dept. would like to have a word.
Comparing Bluesky and Twitter
I agree - but it’s nice to have good communication skills on your team. I’ve performed over 400 technical interviews, and one of my big takeaways is that you want lots of different kinds of challenges for candidates. Programming. Knowledge tests. Debugging. Whiteboard problems. Story telling. And so on.

I think this question is great, but a great interview should never lean too heavily on just one modality of assessment.
I've run Nextcloud for years primarily for webdav file sync and calendar+contacts. It pretty much just works. That's not to say there isn't any jank, but it's mostly if you try the more obscure apps e.g. I've set up the phone track feature and it worked for a while, but I've had trouble with it recently. Probably fixable, but I just haven't spent the time.

I would say it is the core component of my self-(vps)-hosted setup and easily the most valuable.
Of course, 'like everybody else' the output of AI needs to be examined closely. Anything else is irresponsible. But the OP title implies something else - that using AI at all is somehow an existential risk.
This looks like it's based on a timer, and prevents you from using the app if you use it for, say, too long. Is that right? I have legitimate longform uses of my browser app as well as bad ones.
Covid layoffs decimated the industry and it will take a decade before efficiencies recalibrate.
If you don't collect the data, you're not obligated to give it.
Or in other words - A cultural fit.
Their point is that hunter-gatherers or subsistence farmers have no use for a writing system. A complex urban society does.
…i’m sorry, what? k8s can be as simple or complex as you make it.
Isn't it good for building and querying custom indexes? Doing that with mysql or postgres is very difficult or impossible depending on hosting solution.

Or would you still prefer to build on top of memcached?
Looks great!
What about some Zapier support?
Doesn’t work if your work uses SSO like Okta
Is this a bad thing, really? I’d much rather prepare for the worst case and be pleasantly surprised to be a bit early.
Not every old website used to have a forum, typically it was a blog website with or without comment ability such as [1].

> my history on Claude or ChatGPT might be vaguely interesting reading for others

So why not to write a blogpost about the most interesting interaction?

[1] paulgraham.com
Cities subjected by some empire or another were sometimes forced to tear down their walls and there were perhaps periods of relative isolation and peacefulness during the founding of some cities where one wasn't immediately necessary, but even very ancient settlements commonly had at least palisades. There are probably some other exceptions; Sparta famously did not have walls under the philosophy that nobody should ever dare even try them, but they were also blessed by geography.
Once you start thinking about how to live on Mars, you really appreciate the Earth's biosphere.
Oh, I was there. heeheeBUNGholeheehee
Wouldn't it be sufficient to "just" write a kind of context manager that watches the macro expansion and then looks at each step what's being done and divvies that up into safe and unsafe execution, so that at least the example of the article

(rx (eval (call-process "touch" nil nil nil "/tmp/owned")))

doesn't just automatically run? Obviously it's a lot of work depending on how sophisticated you want that to be but you probably don't need to rearchitect much.
I think that part of the reason the Cucuteni–Trypillia megasites are not mentioned so much in this context is because they look like enormous villages, missing many of the characteristics of a city which are present in Sumer.
I feel like capability systems are... the right solution to the right problem at the wrong time.

By that I mean, in an ideal world, nefarious code should never end up on my system in the first place. Regardless of whether it gets ran, regardless if whether it is properly sandboxed to avoid damage. At the end of the day, I don't want bad code in my system at all.

"Easier said than done" is why I said "right solution, right problem, wrong time." But it comes at a cost. A rather extreme cost, in some cases. Walled garden app stores. Runtime overhead.

Development overhead. I'm not just a user, I'm also a developer, so these things end up being roadblocks I have to navigate. And I have to navigate them for no reason of my own. I am not trying to steal my users' data. But in a way, I am getting punished for the actions of others.

Anyway. No solutions here.
Show HN: App that makes you do pushups every time you unlock your phone
This is generally a pro for me. I can skip to the bottom of a file and see what the main purpose of it is, knowing that it's the only place that could reference everything else in the file.
You might enjoy the book "The Language of Mathematics: Making the Invisible Visible"
Congratz on the launch!
is it relevant for early-stage products with small teams or is it an overkill? we're just kicking our observability tools (Vercel, AWS - ECS infra)
Here's a thread from Nic Carter which goes into more detail about Operation Chokepoint 2.0: https://x.com/nic__carter/status/1861748485424316627
It's true that some startups just randomly try other ideas when the first one doesn't work - and some of those incorrectly call that flailing a "pivot." However, that isn't the actual concept behind pivoting.

Pivots are a thing because early stage startups are often pursuing an opportunity space they are betting is just emerging. Because of this there's often little data to go on when they start and they're making educated guesses about a bunch of things from product features, primary customer, go to market and business model. The concept is that a startup should very quickly develop an MVP which enables engaging with actual customers. That engagement often reveals which initial assumptions were incorrect. Hopefully they were incorrect not because they made a dumb mistake but because the correct answer was unknowable without testing.

That testing also sometimes reveals completely new customer and/or market information about a bigger opportunity in that area leading to a pivot. This is akin to sinking temporary test wells before building an oil derrick and pipeline. Even the best geology analysis can only give a probability of oil being found in a given location. Sometimes sinking test wells reveals the oil is actually a quarter mile to the East. That isn't really a pivot but more like product/market tuning. A surprising number of times, the process of sinking those test wells to discover oil leads to discovering something different but just as good like natural gas or something even better like gold. That's a canonical pivot. Experienced founders and VCs can pretty easily tell the difference between flailing and a pivot because the pivot is motivated by actual real-world customer/market response encountered while validating the first idea.

An example might be a startup whose first guess at the right product and customer was "An expense tracking program for sales people." After building a prototype or MVP and putting it the hands of some actual salespeople, they discover that, while nice to have, it's not compelling enough to buy. However, during their field visits to observe customers using the MVP they learn that field service engineers have a different but related problem in tracking parts inventory which is a major pain point.

In Steve Blank's legendary startup class at Stanford he teaches that initially a startup should be thought of as "a temporary experiment to discover a viable business." Once product/market fit and go to market are sufficiently validated with an MVP, then the process of building the real product and company begins.
Disputing jurisdiction is submitting oneself to the court, so that the court may decide the issue of jurisdiction. If you submit such a jurisdictional dispute to the court for judgement, you tacitly agree to abide by the court's judgement in the dispute.

Here, the court made such a decision, Israel is just upset they didn't prevail. If Israel didn't think the court was allowed to rule on jurisdiction, Israel would not have submitted a petition for the court to do exactly that.
I'd like to see some everyday objects as well as planets in our solar system in these same frequency ranges and color assignments for comparison.
Memo to Musk: Here's $37B in Spending Cuts
You can't extrapolate with polls with so many votes. I'm here an hour after you and Rust is at 4%. There's only been 66 votes so far, I bet you just ran into it very early.
My point is that the blame is on the system moreso than its expected outcome.
Use archive.today to bypass the paywalls. A kind soul usually posts the archive link in the comments pretty quickly here, in this case seatac76.
We can't be friends. Printf is literally the best.
“You can grate the onion, or not, its your choice really”
Sure, cilium is also much faster than istio. But I guess it depends on your workload. We don't care all that much about performance vs compliance (non-hft finance transactional stuff) and I think we're doing things reasonably well. :}
Because the country disappeared before that rules was set in place.
Thanks for the paper. I've been wondering about how well we're actually able to filter/clean out contaminates in plastic recycling. Seems more research is needed, but it does look worrisome.

As the paper also mention - stricter rules for packaging designed for clean and easy recycling is a tool in the toolbox. They mentioned a study found that a majority of contaminant detected stemmed from labels, adhesive, etc.

There's also chemical recycling which I get the impression [1] can solve some of these challenges, but don't seem to be used much yet.

[1] https://www.sciencedirect.com/science/article/pii/S221334372...
Well yes, when "code is data", data suddenly becomes very dangerous. This is recurring theme when dealing with Lisps and Emacs especially. For instance, it is also quite common for Emacs packages to save data in the form of ELisp code. When loading the data, it is simply evaluated and boom, your data is loaded. It's a powerful thing, but of course this is a security issue, and this is why we can't have nice things...
Open source implementation of OpenAI's "Canvas"
A significant number of C++ codebases use exceptions. Google famously doesn't, but Meta, alike in dignity, does. GDB, now C++, does. At least some AI labs do. C++ exceptions are normal and common.
What about screen readers and mobile users? There's all these useful accessibility tools that would also have to be reinvented for canvas based apps.

Text selection and getting it to bring up a keyboard is iffy on the canvas-based things you linked to (I'm looking at them on Firefox for Android on a Pixel 6). Sure, the VB one is a desktop app. But the original (non canvas) version of that app likely worked with windows screen readers, and that is lost in this reincarnation onto the web. Good old fashioned DOM already has pretty good native accessibility support for mobile phone UI.

There's a lot of things that have been thought about when it comes to usability and accessibility, in both the web, and traditional desktop/mobile UI frameworks.

Reimplementing those UI frameworks in canvas in a browser environment requires mapping the a11y bits too, not just keyboard+mouse input and rendering to screen.

Not to mention Qt and Gtk and the older Android framework apps all use forms of markup and styling which are inspired by XHTML and CSS and document object models......
Thank you for your questions.

First of all I know I'm getting into Red Ocean but by building better(!) product I get still get a piece. So how is it better?

Here is some features that I can differentiate:
- Conditional Redirecting: Based on location, time, browser, device, etc. (POC State: successful)
- Customizable/Monetizable Redirection pages: User can add a middle page before redirecting. (POC State: Waiting)
- Protected Links: Secure links with password protection, IP filtering, or location restrictions. (POC State: successful)
- Proxied Links: Hide the original address and only display the content. (POC State: Waiting)
- Hosted Files: Hosted small documents to make it downloadable. (POC State: Not-required)

Besides all I can built more cheaper product for more features or usage limits.

These are just the tip of the iceberg. I want to build a more extensive tool focused on link building, not just shortening links.

These are just my ideas. I want to hear more from potential users. So I posted here.

(Sorry for the late reply. HN limits comments too much).
> The classical Greeks could see Mycenaean ruins.

Apparently, they Minoans had plumbing in the 1800s BC, so I'm sure the Greeks would have been surprised at what had preceded them by a long time.
What a brilliant idea!
My Remarkable 2 does not maintain a battery charge (when not used / on a shelf) such that each time I see it and think "oh yeah I own this, I should throw it in my bag and use it for journaling today", I pick it up and click the power button and see that it's dead, plug it in to charge it, and then the cycle repeats. Also very heavy for what it is (I have the Type Folio accessory).
They want to make it "greener" for whom? I think that is the question.
That may change in the future if the populist parties gain more traction in the eastern EU.
How the Rise of New Digital Workers Will Lead to an Unlimited Age
Your compressed Overton window isn't doing you any favors. If all you see is "left" on bluesky, then you're operating on the terms that liberals and conservatives use, usually unconsciously, to further the interests of capital at their own expense.

If you look closer, you'll see that liberal != leftist, and both exist on BS, and not exclusively in echo chambers.

There's currently a shift or awakening happening where some liberals are actually self reflecting for a change, because they realize they're standing on false ground.

Also, you can see on the bluesky subreddit that many users are aware that they shouldn't be blindly trusting the curated user blocklists, if for no other reason that they're being curated dishonestly (surprise, surprise).

Old Twitter was always a steaming pile, and Musk didn't change that with X. Bluesky is actually innovative and refreshing. Time will tell how that holds up.
Because gTLD must be at least three letters long, and ccTLD must be two letters long.

That's what the rule says. But of course, such rules are arbitrary and can be changed.
I'm confused, I assumed we were talking about the network layer.

If we are talking about storage, well, SATA can't give you more than ~5Gbps so I guess the answer is no? But also no one else can do it, unless they're using super exotic HDD tech (hint: they're not, it's actually the opposite).

What a weird thing to argue about, btw, literally everybody is running a network layer on top of storage that lets you have much higher throughput. When one talks about R2/S3 throughput no one (on my circle, ofc.) would think we are referring to the speed of their HDDs, lmao. But it's nice to see this, it's always amusing to stumble upon people with a wildly different point of view on things.
Mauritius isn't really the decider here and neither is ICAAN. There is an ISO committee that if they remove the name would kick the decision to Mauritius about how to make the transition.
> I don't think that's the right conclusion

It is the "right" conclusion in general. Multiple input arguments without multiple output arguments is frustratingly awkward. I can understand the appeal of your suggestion of only accepting one input and returning one output, where the passed value might be a tuple, but I expect there is good, pragmatic reason why virtually no languages, even those with a proper tuple type, haven't gone down that road. Once a language accepts multiple arguments, though, it needs them in and out. Otherwise you can't even write an identity function. If you can't write an identity function, is it even a function?

> "go needed multi-return to be able to return errors along values"

If there was some specific reason for its addition, beyond the simple fact that it would be crazy not to, it was no doubt for map presence checks. Without that, it is impossible to know if a map contains a given key. Errors can be dealt with in other ways. It wouldn't strictly be needed for that purpose, although it turns out that it also works for that purpose, along with a whole lot of other purposes. Not to mention that we know that the error type was a late-stage addition, so there is strong evidence that errors weren't a priority consideration in the language design.
This could be a good application of machine learning to do more fine-grained clustering. The clusters won't have names but we could at least see where our coarse-grained ones were over-generalized. It's like what's happening with autism-spectrum that has gotten so broad to be less useful.
where do I sign up for this?