skysight-inc/HackerNews huggingface dataset:
I'm skeptical too, and I started at age 10 (C64, though, not html+css+javascript).

I dunno if such skepticism is healthy or not, but looking at the source I feel that it contains too many things that need explaining to a 9yo: `DOCTYPE` and all those `META` tags correctly set when they make no difference to the game, why `box-sizing` has to be specified, all those different `display` attributes correctly set for the display that is needed for that element, what the `ease-in-out` means ...

And that's without even getting to the Javascript stuff, like why use const vs let, why use backticks and interpolation, things commented out temporarily instead of removed, the way the code is modularised, etc

In short, there are too many irrelevant-to-the-output best practices implemented that, I feel (after seeing what a lot of beginner/student programmers produce) demonstrates a level of experience that cannot come from "My First Game".

The signs of an experienced hand in the development is, to me, unmistakable.
We said the same thing 3 years ago and we still have errors on basic questions. I don’t know where people get their estimation from ? Their intuition ?
Highly recommend the latest Oxide and Friends podcast where they discuss a lot of this and related stuff: https://oxide.computer/podcasts/oxide-and-friends/2218242
> If your company has multiple things you need to log in to, its doing something wrong. Having company-wide single login system is really critical for good security.

It absolutely is, but it is only applicable to large corporations and won’t help any SMBs. The issue is that this functionality via LDAP/SAML/OODS is frequently locked behind enterprise subscription tiers that usually represent an extremely high markup over other paid tiers.

Even in larger corporations, it often not possible to have SSO everywhere. We have multiple „shadow IT“ subscriptions for services that only our team uses. Most of them don’t offer SSO functionality, even for those who do a user base of 5 people is not going to be sufficient to have someone from the responsible departments deal with it. So we have passwords
TDD is, in my opinion and based on some tentative forays, one of the areas where LLM assisted coding really shines.
> clients connected to the same homeserver should all see the same ordering

Ideally, yes. In the real world you get to deal with such inconveniences as unreliable transport, slow networks, server-to-server communications, eventual consistency, routing glitches, reconnections, clock skew, queues, concurrency, retries, and always, ALWAYS the infuriatingly slow speed of light. Oh yes, also multiple client implementations. For the record, many years ago I was involved in writing both a chat server and a client. (Albeit those were two different projects.)

From pure UX standpoint, you want the client to always show any messages it has sent but has not received back. Even for a single server and two clients, all synchronised to the same clock, you can get ordering conflicts. Let's say that you are sending a message at fixed two-second interval, and the other client is sending messages at non-fixed, power law distribution intervals. That's your happy path.

Now consider the same with dozens, or hundreds of clients across hundreds of different networks, each with their own debatable quality.

You want to see the messages you've sent, so they need to be visible on your screen. Having your own messages disappear into the void and only appear once they have been sent back is terrible UX. So you keep a local order and interleave received messages as they come in. But once you receive the message back from the server, you obviously want to reorder the known quantities. With two clients you will the occasional "jump" where one of your messages is moved to its canonical position. With hundreds of clients each user will see those jumps constantly - and with sufficient volume a decent fraction of their own sent messages can "disappear" at any time from their screen as they are reordered and don't fit on the screen.

Now add lots of bad networks and latency floor in hundreds of milliseconds. Network connections/route fluctuate constantly, so even messages sent by the same client less than two seconds apart can arrive in different order at the server. (The client reconnected between the two, and the message sent over the first connection arrives several seconds later than the other one.) The user is confused, because the server is very clearly showing them their own messages in the wrong order.

For one inconvenienced user the server being wrong occasionally is mildly annoying. But when that can happen to any number of users, concurrently, at any time, the overall effect is outright infuriating.

> this is not debatable, and anyone who thinks it is, is wrong

Your server has a known order it sent the messages out. Any disagreement means the client must be wrong.

Each of the clients connected to your server has a known order in which they sent their messages out. Any disagreement means the server must be wrong.
For no true Scotsman, you need to throw out a counter example by using a misrepresented or wrong definition, or just simply using a definition wrongly. But in any case I need a counter example for that specific fallacy. I didn’t have, and I still don’t have.

I understand that some people maybe think themselves experts, and they could achieve similar reduction (not in the cases which I said that it’s clearly possible), but then show me, because I still haven’t seen a single one. The ones which were publicly showed were not quicker than average seniors, and definitely worse than the better ones. Even in larger scale in my company, we haven’t seen any performance improvement in any single metric regarding coding after we introduced it more than half years ago.
100% down to help you translate the thing into Polish if you're interested. balu [symbol] xdapierdolnik [period] pl
To paraphrase Clarence Darrow, "I've never wished a man dead, but I have read some obituaries with great pleasure."
There was a step change over the last few years but that rate of improvement is not continuing. The currently known techniques seem to have hit a plateau. It's impossible to know when the next "Attention is All You Need" will materialize. It could be in 2025 or 2035.
You can't genuinely believe that the reason that the 65+yo group costs more is the social safety net?

As you get older, you start to experience more adverse health affects. You start to need medical attention more. Especially if you've been denied healthcare for the first 65 years.

> I really think people underestimate just how generous (high cost) the "social safety net" is, and have a grass-is-greener view towards other countries healthcare systems for people currently working.

Well I think you misrepresent that greener grass is greener. Other countries literally live longer and healthier when they have socialized healthcare. It's a pretty easy metric to track, and pretty straightforward. Do you want the general population to live longer? Do you want the general population to be healthier? Do you want the general population to be saddled with crippling medical debt? Sometimes the grass is greener. And we have the data to prove it.

In the link you shared, other social-safety-net countries had lower spend per capita. They have a better social safety net. So how can that be the issue?

At least you're honest that you own a health-insurance business and you're biased. A single-payer system would destroy your income, and I guess that's pretty scary, so it's in your best interest to fear-monger.
Only when trying to assert that you are not one
Check out NewPipe and yt-dlp
The U.S. spends much more money on health care per capita than any country on the planet, with far less to show for it. This is a uniquely American problem.

https://www.healthsystemtracker.org/chart-collection/health-...
The foolishness of "natural language programming"
AviD's Rule of Usability: "Security at the expense of usability, comes at the expense of security."

Security companies should have more focus on the usability aspect of their product. Some of the enterprise products you see today are just plain bad in terms of UX/UI, and funnily enough, they aren't getting called out since they're only used in the workplace/closed groups.
Making a lot of sandwich bread didn't somehow made them incapable of making other breads.

They'd happily mass produce whatever type of bread people wanted, with whatever method people wanted, if they'd pay for it.

Instead people by the cheap sandwich bread.
Probably right. Feedback loops are interesting. An anecdote: I spent my career learning how to do things well... so that I could eventually be promoted to try to do it by proxy. Infinitely more difficult, garners no interest. Now we're all disappointed.

I'm not learning, just forgetting. Entirely different skills - exercise is important.
I think the tech chauvinism (aka accelerationism) comes from the crypto-hype era and unfortunately has been merged into the culture wars making reasonable discussion impossible in many cases.
They're all great guys with each other.

Do a test. Go to distant office and call IT pretending to be the person who works in that office, with his/her cooperation. See how fast the problem is solved and how you are treated.
It's why I use Firefox and avoid situations where I might get exposed to annoying ads. I was watching some Amazon Prime recently (the new rings of power season). Pretty OK and completely ad free experience. Except I noticed these weird cuts every few minutes. It took me quite a while to realize that Amazon introduced ads some time ago for Amazon prime and uBlock origin was doing a great job of simply blocking them. Hence the cuts. Same on Youtube. I watch a lot of content there while maintaining zero interruptions by ads. Works great and so far I've never had to pay Youtube to not see ads. I do pay for Amazon Prime. Occasionally. I usually reactivate my subscription when I need it either because I'm ordering stuff or because they have something I want to see. I'll cancel soon again because I don't currently need them and I once again exhausted their limited offerings. Forced ad watching makes it less likely I come back.

I don't pay any websites/blogs for subscriptions for articles either. It's not sustainable for me to do pay for all the websites I visit. And me randomly paying only some tiny subset of them doesn't make any sense to me. I'd need some prioritized list. And it would have to be a very short one because I'm simply not rich enough to maintain lots of multi dollar subscriptions per month. And I also don't want to micromanage a lot of payments and subscriptions.

The Verge, which was mentioned in the article is a good example of a website that I don't value enough to get anywhere near that short list. They have a lot of competition reporting more or less similar stuff that I wouldn't miss them. In fact, I can't recall reading anything by them lately. I guess not a lot of their stuff makes it to the HN front page. Probably because it's just not that interesting.
Yes. They turned it into a series of books after that one. They are published by pragprog, which is what I linked to.

https://pragprog.com/categories/seven-in-seven/
This mirrors my own experiences with Claude with one caveat.

GenAI can get deeper into a solution that consists of well known requirements. Like basic web application construction, api development, data storage, and oauth integration. GenAI can get close to 100%.

If you’re trying to build something that’s never been done before or is very complex, GenAI will only get to 50% and any attempt to continue will put you in a frustrating cycle of failure.

I’m having some further success by asking Claude to build a detailed Linear task list and tackling each task separately. To get this to work, I’ve built a file combining script and attaching these files to a Claude project. So one file might be project-client-src-components.txt and it contains all the files in my react nextjs app under that folder in a single file with full file path headers for each file.

We’ll see how deep I get before it can’t handle the codebase.
> Device Security Gaps: 36% delay installing security patches on personal devices used for work, exposing critical applications to exploitation.

> Personal Devices: 80% of respondents access workplace applications from personal devices that lack security controls.

I thought the BYOD fad was over. If cybersecurity is vital to your company, your users shouldn't be allowed to use personal devices for work.
My bank website uses very old js and no react. Yet middle click doesn’t work (as well as back button). These problems have nothing to do with framework/library.
Yeah, a bit like the many frameworks that were supposed to make development trivial in X, many of which ended up being quite useful, but remained _additional_ skills to master in an ever-growing list of things we need to know to be able to do our jobs.
Hasn't it always been flexible?
This is a good take on one of the many areas that companies need to change process in as they grow. Bad communication can hamper and destroy a company just as much as bad hiring, bad vision, bad money management.

I about the process in this write up though. There is communication and there is discussion. The article is framed in a way that suggests top down communication process needed to change so that a larger company could be sure that everyone is on the same page and aware of what they need to be aware of. Both examples then however name check the idea that feedback is expected at the least, welcome at best.

How are we meant to read this paragraph:

> “Marketing says we’re an observability platform, not a tool.” It isn’t enough that our CMO said the words in All Hands. As a representative of Marketing, it’s important to me that our product, documentation, engineers who are speaking at conferences, and customer success people get the language consistent. That means I need to show up at department meetings and talk to people in their perspective. Next Monday I’ll talk to all of Engineering very briefly, and later to the docs team specifically.

It reads as if marketing has made a decision by fiat for the rest of the company to toe the line. No judgement there, that may well be how the company chooses to operate. What then is the need for "talk to people in their perspective"? Is various department perspectives going to change the marketing language, or is it just to placate everyone that they were heard? Why does the perspective taking not happen _before_ the decision as input on if the language should change?
For some reason (mainly because Microsoft has orders of magnitude more sells reps than anything else) companies have been trusting Microsoft for their most critical data for a long time.
> Denied claims mean less profit for the insurer.

If that were true then United Healthcare wouldn't have rolled out an automated system that (reportedly) denies ~90% of people regardless of their actual need.
It is immaterial what they do and what you know. Important is what CIOs of the enterprise believe.
> I think it will spawn a lot more code that was as bad as it was before.

And that makes it even harder for seniors to teach: it was always hard to figure out where someone has misconceptions, but now you need to work through more code. You don't even know if the misconceptions are just the AI misbehaving, the junior doing junior things, or if the junior should read up on certain design principles that may not be known to the junior yet. So, you end up with another blackbox component that you need to debug :)
Security is usually defined as confidentiality, integrity and availability. (Not in order of importance, just to spell “CIA”).

If it takes that long to log in, the system is not available, and therefore insecure. Full stop. The security team responsible for that setup should be fired.

In related news, I’ve been watching old murder mysteries from the ‘60s.

Typical plot points include the fact that you can decide to fly from Los Angeles and arrive anywhere on the west coast with in 2-3 hours because the planes leave every 30 minutes.

Why wouldn’t you just walk up to the gate and buy a ticket?

Why do we put up with this TSA bullshit?
I don't think there's a "normal". It's a scale with SF at the very bottom, Mumbai at the top. North West Europe in the middle, etc.

I'm not sure what the point of your comment is. Are you disagreeing that SF is very easy driving? There's very little traffic. The roads are a perfect grid. Nothing ever blocks the lanes. The roads are all very wide so finding a place to stop is easy. Etc. etc.

Most driving in the world is not like that.
Kurzweil's book "The Singularity is Near" was published in 2005 and at the time he placed the technological singularity in 2045, so 40 years in the future. He said it was "near", because most people thought at the time that either it would never happen or it would happen in thousands or millions of years.
Yep, deceptive practices like this undermine trust in the hiring process
The novelty is that AI made the „pasting code“ work somehow whereas copy and paste from stack overflow did not.

Before merge and deploy you need to run the code. If it fails what do you do? search a new snippet on stack overflow? or paste the error into the ai?

This seems like a completely inefficient way of learning to me.
Where is it easier to drive than SF?
No everything in the repo is AI generated.
For code review maybe, it's pretty useful.

Even with the $20 version I've lost days of work because it's told me ideas/given me solutions that are flat out wrong or misleading but sound reasonable, so I don't know if they're really that effective though.
> For example, a new game is being released, the publisher collaborates with TheBrink, a hypothetical popular game news site, and for this they get a huge takeover banner advert for the week, increased placement on ad units around the site, a "behind the scenes" post written about the game, and an interview with the developers published to TheBrink's YouTube channel. This type of package is absolutely a thing that gets sold.

Sure, but does this ever get sold on a site that _doesn't_ already have ads in the first place? You literally mention "increased placement on ad units", so I'd argue that if this site is directly supported, they've already violated the principle in a way that doesn't involve "native ads", and if they aren't directly supported, this principle doesn't apply to them. I'm skeptical that there are any non-hypothetical examples of sites that charge for access and make deals for "native ads" in the form of content but don't have any actual ad units that are displayed to users.

If I'm wrong and this is a thing, I don't think that's it's really that hard to solve. When a user signs up for a paid subscription, as part of the sign-up process, show a screen that explains that sometimes the company will partner with sponsors to produce content about their products, link/screenshot to a couple examples to make sure the user understands what you're talking about, and then give them the choice to either have content like that shown or hidden, and then put that as a toggle they can flip whenever they want in their account settings and mention that fact when you prompt them for their initial choice. If companies don't way to pay for a partnership because their metrics show that too many users turn off the publication's sponsored content from showing, that's just a sign that the system is working, since users shouldn't be paying for sponsored content that they don't actually want to see.
It's increasingly difficult to believe this thread isn't full of trolls.
There is only so much time in the day. If you have a job where increased productivity translates to increases income (not just hourly metered jobs) then you will see a benefit.
The background is a bit complicated, but the high level is that many believe Bill Gates stole MS-DOS from Gary to license to IBM.

The nuance is that IBM contacted Bill first, who he directed to speak with Gary. While Bill was under NDA, he did give Gary a heads up "Someone is coming to see you. Treat them well, they are important people." Gary did not and missed their visit and IBM went back to Bill.

Bill then bought Q-DOS (a rip off of Gary's DOS) for $75k and rebranded it MS-DOS and licensed it to IBM.

There is more to it, but that is the high level.
Rules are generally made deliberately, but I've known more than one game that was made more fun by an accidental misreading of the rules. When a rule mistake is important enough to spoil a game, or breaks the consistency, one generally notices. I guess it's possible for a game to just be silently slightly less fun than it should be because of a rule mistake, but I haven't seen it happen much. Which possibly says something about the value of complex rules with lots of special cases.
I've always wondered why the Romanized transliteration of Mandarin doesn't map normally to conventions used in the Latin letter-using world. For whom was it designed, then? This makes no more sense than Sinofying English by using Chinese characters to somehow represent different sounds than they normally would to a Mandarin speaker.
In my experience, you can sort of help them grow by including a markdown file like LESSONS.md in the repo.

The big advantage to me is it's an unexperienced junior with approximate knowledge of every API and style on the internet. It's a super junior.
I think most compilers could do that. That's a separate much easier optimisation.
OT: how can one search HN by number of comments? Algolia sorts by date or votes, but not comments.

The linked thread is also very highly ratioed, with a 5.36:1 comments:votes ratio, which is also pretty high on the flamewar / spiciness scale. (I'll have to check my own front-page archive for any higher comment:vote ratios.)

The highest voted post remains Stephen Hawking's obituary:

<https://news.ycombinator.com/item?id=16582136>

Searching "comments>3000" provides the following list of 8 submissions, which I've sorted and reformatted:

9282 comments 1796 points 1 month ago Trump wins presidency for second time
4576 comments 3089 points 4 years ago Biden wins White House, vowing new direction for divided U.S.
3859 comments 4489 points 5 months ago CrowdStrike Update: Windows Bluescreen and Boot Loops
3676 comments 1058 points 4 years ago Amazon, Apple and Google Cut Off Parler
3676 comments 2498 points 3 years ago Twitter set to accept Musk's $43B offer – sources
3463 comments 1765 points 2 years ago Supreme Court Overturns Roe vs. Wade
3078 comments 2747 points 3 years ago Elon Musk makes $43B unsolicited bid to take Twitter private
3065 comments 1183 points 4 years ago YouTube to remove content that alleges widespread election fraud

Difference in ratios of the first and second items is notable.
glulam archipelago
Sounds like a reasonable way to look at it.

How far along the path do you reckon the US is to the same kind of thing?
It’s an old one but I think Joel Spolsky‘s take on leaky abstractions is relevant again in this discussion as we add another abstraction layer with LLM assisted coding.

https://www.joelonsoftware.com/2002/11/11/the-law-of-leaky-a...
Sure it can potentially say anything, but some things are more likely than others. The space of "wrong answer" is infinitely larger than the space of "performs an action designed to deceive the user in order to further its goals". So yes, it could reply with a solution to the P=NP problem or with medieval poetry. But it didn't do these things. It did however try to remove its own constraints.

The Apollo Research paper gives the actual percentages for these, and they're considerably higher than random chance. It's linked from here: https://www.apolloresearch.ai/research/scheming-reasoning-ev...

For o1, the numbers are between 2% for actions such as trying to remove oversight, 13% for attempting to delete a successor model, all the way to 22% for deliberately providing false rankings in order to achieve its goals.