skysight-inc/HackerNews huggingface dataset:
I don't think the Firefox OS team was ever bigger than maybe 100 people at the absolute most, and I feel like it was closer to half of that. Admittedly it's been over a decade since I left, so my recollection could be wrong, but it was never "most of the resources" by any metric.

It was a tiny percentage of the overall staff; I traveled to the Toronto office to work with some of the graphics devs (the area I primarily worked in) and the floor we were on easily had 200 people in that one -- relatively small -- location.

B2G/FFOS gets a lot of well-deserved hate -- I quit after a year -- but its impact has been wildly blown out of proportion.
This is more a political discourse that a business or technical one.

You sure can establish that there is a qualitative difference on the type of censorship carried out - congrats.

The main point I spelled out is that there is no comparative advantage (technical or business wise) on working on these products in the west as you have to implement and operationalize the same amount of censorship / safety.
Honestly, it feels like they just pick a nation based on the current narrative. They already have plenty to bash Russia with regarding the Ukraine war, and they need to keep sinophobia alive and kicking, hence China.

Plainly I have no real evidence for this, other than the constant lack of evidence for their claims, and the doubts that are cast within the infosec community when data is available.
That is a unnecessarily narrow definition of competition, and businesses don’t steal clients (absent illegal methods), they provide better products or services at a preferable utility to price ratio such that customers choose them over another business.

Just like a person performing better in a job interview isn’t stealing from other applicants who performed worse.
Fat cells have a 'memory' of obesity hinting at why it's hard to keep weight off
so he recognized that twitter was too bloated..but then went into an elon rant that turned out to be wrong
I remember having to do that once in like ~2017 for a job, and it felt really dehumanizing. Hopefully AI video gen tools can fix that!
We haven't laid off any engineers in years.
It's a chicken and egg problem. Companies would likely look at every application if there were only a few. But if there are 1000 for every position and most are automated then companies have to automate filtering on their end too.
Wondering about folks who keep up to date with the industry,

Does anyone use specific keywords or tools to get latest LLM research and their ideas?

Something like Goolge Scholar + keyword "LLM" ?
That is a waste of resources that cannot prove the safety of arbitrary code. If you want safe code, use code only from trusted sources.
On platforms thar require aligned loads and stores (not x86 nor ARM), a direct pointer cast sometimes uses an aligned load/store where a memcpy uses multiple byte loads/stores, even on a good compiler, since memcpy() doesn't require that the pointers are aligned. This can be mitigated by going through a local variable, but it gets pretty verbose.
You're not in a position to judge quality unless you're looking at hundreds of applications. If you don't trust those of us who do, that's on you, but I'm telling you: we can tell.
hey a couple thoughts: you have Typescript and TypeScript and can you make a checkbox that filters out anything crypto-related?
Why on earth would it be better? Trillion dollar corpos in the turbo-capitalist West are already far more powerful than most states.
Agreed. The only solution to the housing problem is building public housing. Yes, theres all kinds of problems with that but a nice side effect is it reduces housing costs for all income groups.

But of course for those who bought a house for financial investment purposes (retirement plan, rent seeking, flipping) solving the housing problem is not a benefit.
I presume you will have to simulate a user filling in the application on the browser, how is that part done? given all the anti spamming measures.
> The percentage of revenue from Google has fallen every year since 2016.

"Fallen" is too strong a word: Google still provided 81% of Mozilla's revenue in 2022.

This share probably decreased in 2023, but that's mostly because the revenue increased by $40M thanks to financial operations (see "Interest and dividend income" in Mozilla's annual report for 2023).
“Wall street” is the one rewarding Tesla with a market cap almost an order of magnitude more than Toyota, even though Tesla’s net income is not much higher than Toyota’s, and Toyota moves many more cars.

“Wall street” (or “the west”) is getting far more on Tesla’s long term ability to grow net income than on Toyota’s.
I can’t explain why they are faster but I can demonstrate it. I think the best example is putting two man pages with different fonts side by side.
What happened to university job fairs were you can talk to actual people? New grads should be leveraging those first.
They only have to do so because it's nearly impossible for a new grad to stand out from the foam of AI applications. This is part of the trend that created the need—it's a toxic feedback loop.
Honestly, it does not appear like a research institute at all. It looks like the styling that the owners of People's Magazine or the National Enquirer would use to market their 'research nonprofit' where the actual research contribution is 3% of their revenues, while supporting fat salaries for an executive staff. It just looks too consumer and not academic, not serious. It is simply too feel good. It has the trappings of respectability, but not really. It's too slick. I also never spent the time to look deeper, the loud consumer targeted presentation drove me away.
Any bar or hotel has a public bathroom. Most restaurants as well.
> pseudo encrypted, where the encryption is done using software that is also controlled by the adversary

I'd say there's a very real use for this, though, which is that with mobile applications it's more complicated to compromise a software deployment chain than it is to compromise a server-side system. If you're a state-level attacker and you want to coordinate a deployment of listening capabilities on Signal, say, you need to persistently compromise Signal's software supply chain and/or build systems, and do so in advance of other attacks you might want to coordinate with, because you need to wait for an entire App Store review cycle for your code to propagate to devices. The moment someone notices (say, a security researcher MITM'ing themselves) that traffic doesn't match the Signal protocol, your existence has been revealed. Whereas for the telcos in question, it seems it was possible to just compromise a server-side system to gain persistent listening capabilities, which could happen silently.

Now, this can and should be a lot better, if, say, the Signal app was built not by Signal but by Apple and Google themselves, on build servers that provably create and release reproducible builds straight from a GitHub commit. It would remove the ability for Signal to be compromised in a non-community-auditable way. But even without this, it's a nontrivial amount of defense-in-depth.
> The only person tackling the verifiable hardware side of things seems to be Bunnie Huang with his work on the Precursor

Bunnie's work is inspiring, but he is not alone.

As far as verifiable hardware goes, I would argue that Tillitis TKey is more open source than the Precursor. However, they are very different products, and Precursor is a lot more complex and capable. The only reason TKey is more open than Precursor is because TKey is able to use a completely open source FPGA flow, whereas Precursor cannot.
If the car industry is that important to the west, then we can nationalize it and strip the current ownership/management of everything they gained from the venture, since they've clearly squandered their lead in the space in favour of siphoning of cash instead.

Alternatively, we could reduce the relevance of the car market entirely by transitioning towards a transportation system that is not focused on automobiles, favouring trains (these are still competitive when built in Europe afaik) and bicycles (we'd have to learn to make these in the west again, but this is a smaller leap than doing the same for cars). This also helps with the energy consumption issue since these modes of transportation are vastly more energy efficient.
Better does not mean good. Quantum indeed fixed many of their old performance-problems, but at the same time they lost so many in terms of ability, and performance still feels second rate compared to Chrome. But to be fair, this also depends on what you do with them. And yes, I do use them both.
> if I ever win the lottery and don't need a job I'm going to spend some time learning Plan 9.

I'd recommend adding OpenGenera and IBM's systems I and Z to that list: a whole bunch of us build careers out of unnecessary unix make-work too
I read hacker news daily
They do. Ireland just had an election I voted in and is forming a new government with multiple parties. The UK, after years of TV worthy Tory party drama, had its most transformative election in over a decade. I see active and engaged multi-party democracies with peaceful transitions of power and long established and respected laws for calling elections, no confidence votes (e.g. France, yes it happens) and so on.
Ask HN: Is there a Hacker News email digest that links to content directly?
I've used hndigest.com for a long time, which for some ungodly reason needs to track my clicks and has its own server as a proxy when opening any URLs in the digest.

Currently the proxy is not feeling well and returns a Heroku application error page after a long timeout. Any alternatives?
The real problem are the web applications and encasulated web applications (electron, etc) which download their executable code entirely anew each time you run them. They can just add something like require('fs').readFileSync(process.env.HOME + '/.ssh/id_rsa').toString() and send this to their servers, and you won't even notice that (since it doesn't require an update on client because the client is just a browser with full permissions that loads obfuscated code from their servers every time you launch it).

An installed binary is much more verifiable and secure and trustworthy.
https://theinventors.org/library/inventors/blmatch.htm

Others claim that Boyle did not create a usable match
The way I see it, most companies already use modern ATS to stack rank every application based on their resume using AI and then just go down the list. If you aren't already using a system like this at your company then you're playing at the same disadvantage most applicants are playing at.

Applicants are already having to send hundreds of applications to get a response and it's not because of tools like this. It's because they spend hours every day sifting through job postings and having to apply to as many as they can, and there are tens of thousand of engineers doing it every day. It's a tough market.

The plea of the recruiter and hiring manager that their job is too tough to sort through "too many" applications from people desperate to put food on their table and pay their rent is hard to empathize with. Especially when you are getting paid to do it and aren't at risk of homelessness like the annoying bugs flying around your prized job postings.

It's also hubris to think you can sit there and easily sort people into passionate and dispassionate buckets with a 100% accuracy like a god. And what? People who don't love whatever random service you work on don't deserve to have a job and rent money?
The truth is most of the people you work with every day are only there for the paycheck. If they can get a bigger pay check or better work life balance somewhere else, they'll leave.
Looking forward to all the "Show HN: Automated AI video job applications" post coming in 2025.
First, LD_LIBRARY_PATH works well (or has for me). If for some reason the elf interpreter is unable to use the older libc, just use the old elf interpreter. Second, do static linking to achieve what you want. Then it will run on the older Ubuntu trivially.

That of course requires updating the application when a vulnerability is found in a library, but this is no different from Windows where you have to update many applications to fix vulnerabilities in third party libraries. The number of vendor updates to fix the same libjpeg of libpng issues on Windows is truly staggering.

The Qt libraries do not use the GPL. They use the same LGPL that GTK does. You are making stuff up to bash open source UNIX machines (which is what Linux machines are).
Ask HN: How would you like to wrap up 2024 and welcome 2025 based on your past?
Aren't SLAs pretty much the same thing. You get some kind of compensation when it's the sla is broken
I really like using Light for coding and Extra light weights for comments. It's a fantastic font.
What value would a rewrite in rust bring?
The axiom is used to give an alternative construction of real. Everything starts with some axioms somewhere.
> All you're accomplishing is burning out those of us in hiring, which makes the market worse for everyone.

The fundamental difference of course being that the applicant might need the job to eat and put a roof over their head, while the hiring people are employed and doing their job.

I get it, it sucks to be burnt out. But the often forgotten nuance of the job market is that there is a huge power asymmetry in hiring.
In the UK, that "new economy" was even explicitly motivated by strong unions in industrial labor, and Thatcher really hated unions. It's not that far-fetched that something similar happened in the US.
Apps fingerprint you much, much better, and can access more data (despite what apple marketing says), your argument is moot.
The demo look good and I appreciate the speed with which sysz appears to facilitate systemd management: https://asciinema.org/a/BLsJz73uF7DdQj7FVGqLPhqCa

systemd-pilot appears to have some stand out features like the ability to edit service units and also manage services remotely. There's one missing feature that could give it an edge over sysz's speed: The ability to favorite/bookmark/star certiain systemd services so that they could be located quickly.
Yeah, that's what I meant by "captcha like" - mechanisms that prevent automated applications such as in person only; doesn't have to literally be captcha. Anything that fulfills the same purpose will do.
I wonder if this history was the inspiration for the parts of Neil Stephenson’s Baroque Cycle where the protagonists had to boil vats and vats of urine to make phosphorus?
Done! Email subject is "HN DS Interviews".
So much spam around this model. LocalLLaMA is stuffed with spam posts and even hacker news is getting spammed. Who has actually ran this model and verified performance? Does anyone know of a decent review from a trustworthy source?
I mean, the Hispaniola was there for decades...
What’s also funny is that the promoters of the “China is stealing all of our IP in exchange for their labor” folks never mention why corporations don’t just pull out?

Are these IP thefts or technology transfers? If corporations are having their IP stolen, why don’t they just leave?

These narratives never explain or mention this. Idk why people still latch onto them, they are completely uninteresting “China is stealing all our IP and there’s nothing we can do about it except for continuing to allow our IP to be stolen” is an IQ test and trope.

Does “theft of IP” outweigh, or not, “access to very cheap labor (read: jobs)” ?

We need to stop simping for corporations and start thinking critically about these things.
yeah what is a general tutorial to this. is there a website that keeps track of keywords to keep track of. also a website that generalizes core nn tech and frontier stuff thats promising.
ios and mac got url schemes. Sure not all developers implement it correctly. But not all sites implement a good url structure either (keeping state etc in url for sharing)
I was only responding to GP's statement that common law can be overridden by statute.

If I wanted to respond to the idea that premises liability should be eliminated then I would have responded to your first post.

And I actually do think that most people would call your position a fringe position once you actually start talking details like "but what about guns in schools?" If you truly believe that you shouldn't have to submit to a search to go ANYWHERE or do ANYTHING then you hold a fringe position.
Is there a list of projects that have used (or expanded) upon this? Curious to see how far people have taken this.
It does, at least with respect to how the US does capitalism.

The goal is to make the number at the bottom of the piece of paper bigger by a large enough margin in the next ninety days. If you can prove that there's the imminent risk of a specific cyberattack in the next 90 days and that it will have an adverse impact on getting that number bigger, fine, company leadership will pay attention, but that's rarely the case. Most cyberattacks are obviously clandestine in nature, and by the time they're found, the move isn't to harden infrastructure against known unknowns, but to reduce legal exposure and financial liability for leaving infrastructure unsecured. It's cheaper, and makes the number at the bottom of the piece of paper bigger.
This is gonna contribute to the large number of low quality/AI-generated responses job postings already get, which will contribute the ghosting and auto-refusal applicants already get, and increase the need for AI, removing the human input at both fucking ends. This bullshit is part of the problem, not the solution.
Montenegro extradites cryptocurrency mogul Do Kwon to the United States
I don't know. I haven't seriously looked for one. There's Forge which seems to be still active but I have no idea whether you can use it like you want:

https://github.com/Card-Forge/forge

You'd need an AI player API, something that lets you hook an AI player into the engine and run it without graphics obviously so you can train fast. Forge has an AI player (or more?) but I don't know if can be used that way.

I guess with a bit of elbow grease you could make a bot to play Arena (and even play against itself), but that may not be acceptable by WotC.
Thank you for your response!

This is definitely something I've been considering. I actually already have a personal domain and I set a self-hosted server (Thanks to Cloudflare tunnels). I was planning to set up a personal blog and start contributing to open-source projects, but the nature of my previous work doesn't leave me with anything to showcase publicly, I will have to build a profilo from nothing but experience.

Do you have recommendations for open-source projects or fields that might lead to paid opportunities or sponsorships?
I am unconvinced that it is more technically complex to censor a historical event from an llm than it is to remove instructions on how to create explosives.
Yes, and AML = Anti Money Laundering
>I already said: we review every application manually,

I would say your company is a rarity.
>> 3. Most importantly, deepseek is open source, which means that the other models are free to copy whatever secret source it has, eg: Whatever architecture that purportedly use less compute can easily be copied.

> I don't think it's necessarily about DeepSeek, but about the wider competitive picture. There are two tacit assumptions being made about LLMs - that having a SOTA model is a substantial competitive advantage

Everything is a game of ecosystems.

Windows lost to Linux on servers because it was cheap and easy to deploy Linux. Thousands of engineers and companies could build in the Linux playground for free and do whatever they wanted, whereas Windows servers were restrictive and static and costly.

Dall-E lost to Stable Diffusion and Flux because the latter were open source. You could fine tune them on your own data, run them on your own machine, build your own extensions, build your own business. ComfyUI, IPAdapter, ControlNet, Civitai... It's a flourishing ecosystem and Dall-E is none of that.

It'll happen with LLMs (Llama, Qwen, DeepSeek), video models (Hunyuan, LTX), and quite possibly the whole space.

One company can only do so much, and there is no real moat. You can't beat the rest of society once they overcome the activation energy.

And any third place player will be compelled to open source their model to get users. Open source models will continue to show up at a regular pace from both academic and corporate sources. Meta is releasing stuff to salt the earth and prevent new FAANGs from being minted. Commoditizing their complement.
No, it is adding an alternative to it. LLVM, last I heard, will still always be an option at least.
Simple Mobile Tools: open source Android apps, no ads or unnecessary permissions
what an odd comment
I read the article. It did correctly say that Linux is not an OS and that the distribution is the OS. Then it said Linux is an OS. The article author and you are the ones spreading FUD here. Much of what the two of you say is factually incorrect.
You can also subscribe to arxiv email notifications directly, but since there’s 20-30 AI papers coming out per day, it can be a bit overwhelming.

Instructions: https://info.arxiv.org/help/subscribe.html
I looked for a job last year around September and again this year. The rules haven’t changed. If you are blindly spamming ATS’s you’ve already lost.

If your skill set is generic , why would your resume stand out among hundreds of other applications? If isn’t, why aren’t you doing careful targeting?

My “Plan B” jobs were ordinary old CRUD C#, JavaScript or Python jobs looking for developers with AWS experience. I had 12 years of development experience (according to my resume) and 5-6 years of AWS experience including three working at AWS Professional Services. I was looking for remote only roles. The city I moved to post Covid is tourist heavy. But doesn’t have that many local jobs in software development even if I did want to go into the office.

Between both times, I submitted my resume to hundreds of jobs and heard crickets. According to LinkedIn’s Easy Apply, only maybe four times was my application viewed.

Blindly submitting your resume to an ATS is a fool’s errand.

Of course, at 49 (last year) and 50 (this year) I already knew this. I was in between jobs and I was like “why not”?

What did work both times is the same thing that has worked for me across now 10 jobs. I found the kind of jobs I wanted within 3 weeks each time - AWS + app dev strategic consulting working full time at consulting companies.

1. Reaching out to my network - 2 job offers

2. Targeted outreach to companies where I had a unique skill set.

A “nice to have” was experience with a particular official open source “AWS Solution” for which I was the second largest contributor at the time - 2 interviews, 1 offer.

3. Responding to an internal recruiter that reach out to me - 1 interview and offer.
No: https://www.gnu.org/software/emacs/manual/html_node/elisp/Va...

In practice, everyone writing new projects uses it, but when you choose to interact with existing code...
The loss of a father is a big loss.
This one in particular is like a world pillar just collapsed.
More Free Shells for Your Java IDE
they were not one bit dumber than you.
Am I the only one who feels that Brian's tendency to include lots of personal details (of suspects and people he doesn't like) in his articles is weird and creepy?

His reporting looks more and more like the Daily Mail of cybersecurity.

Occasionally very good investigative journalism, yet always aggressively devoid of class.
Since OP asked for evidence, maybe we should ask for the evidence that backs your hypothesis that bad reporting about China = unsubstantiated sinophobia
Depends on which country. In places like India that’s not possible. Your cell phone number becomes a de facto identity so they require all kinds of identity documents to get a SIM.