skysight-inc/HackerNews huggingface dataset:
Any sort of warranty or security representation is basically snake oil except in a very narrow set of circumstances and conditions, yet still not 100%. If Apple can't keep iPhones 100% locked down, with billions of security spend, no fucking way some government program is going to authentic security across a wide variety of devices or various hardware & software qualities.

One thing the government can or perhaps should mandate, and is easily verifiable, is kill switches - devices should be physically incapable of connecting to any wireless network when a kill switch is engaged. If the FTC or a trade regulator wants to regulate at another level, maybe they could also say certain classes of devices must continue to function when disconnection (I might want the Apple TV plugged in to the TV connected to the internet, but the TV itself totally disconnected.) Because some devices now will surreptitiously search for open WiFi networks and try to go online even if a user does not connect via WiFi, this seems reasonable.

If we go down the route of a government agency creating and mandating security,

#1 Government back doors will persist and perhaps even be required (relevant to the whole TikTok thing this week.)
#2 They will be unable to quickly respond to new threat surfaces while still representing that whatever is present is secure (it isn't.)
I am not sure I consider the university's production registration system as a useful project for students to contribute to. Those are systems that are the responsbility of the university administration, not the educational mission of the university.

Yes, the university was drastic; if I were the person responsible, I wouldn't have started with a terms of service violation and putting registration on hold; I'd write a nice thank you note with some encouragement, along with a direct request to hold off running the application until the next registration season, and a calendar entry to discuss this in person/off the written record to explain the more subtle aspects associated with developing production applications in a university environment.
I hear all the time about non-consumer devices being left exposed to the public Internet, most recently traffic cameras two days ago:

https://news.ycombinator.com/item?id=42624930

I do not know for sure whether these devices use UPnP or similar, but considering that they are not intended to be accessible from the Internet, probably not. The blame probably lies with (in this case) all the random government agencies deploying the devices in an insecure way. But assigning blame won’t fix the problem. Something needs to change, and it’s probably going to be the devices.

Consumer devices are different. On one hand, they’re less likely to be exposed to the public Internet… at least proportionally. I think. But on the other hand, consumers expect to be able to access their devices from anywhere, and right now in practice that means going through a manufacturer-controlled proxy server. I would love if someone would come up with a standardized mechanism to make home devices securely remotely accessible, without a manufacturer-controlled proxy, but just as easy to use as the status quo. Until that happens, don’t expect anything to change.
I'm pretty sure that the (presumed) father would be heavily invested in his kid, regardless of whether or not he gave him a job while he was in HS.

Certainly we should look at someone else's (especially a relative's) corroboration of the story with some skepticism; ideally we could see the emails themselves.

But really, OP should contact a lawyer ASAP.
Thanks for sharing it! I'm the author of this research article, happy to answer any question about our work. :)
I have been a software developer for almost thirty years. Every so often, I re-read Fred Brooks's essay "No Silver Bullet" and see if it still applies. My answer is always yes, though I'm amazed at the social, technological, and scientific advances that continue to sweep through the field.

My perspective is that every generation of software developer believes that one of these advances is going to end their career.

The dream of AI is a machine that can replace human coders. LLMs can reduce the number of human coders required for a project, which is simply a productivity advance. LLMs, if used effectively, might be able to replace an expensive coder with a low-skilled human, but you will still need coders. No software on the market today can replace a coder's job; it can only make the coder more efficient. This is as true today as it was in 1970.

The software I write today looks a lot like the software I wrote in 1995. It just does a lot more for the same effort on my part. I can create a complex, highly performant web application with almost no HTML knowledge. Frameworks can abstract all the hard parts of JavaScript. What even is SQL?

AI and similar advances only address the "accidental complexity" of software to use Brooks's term. The essential complexity remains a human task.

My advice is to learn about the history of software development and understand what you are doing when you make software. It's more than typing Unicode characters into a text editor.

As far as moving from web to something else, or incorporating AI into your personal coding practice, I don't think it matters. I have switched programming languages and technologies at least six times in my career. Yeah, it sucks to be in an area that is going away (desktop app development, like MS Word, was the Big Leagues in 1995), but most of your skills will be transferable if or when you have to switch.

I believe software development will be a good career for the next 25 years.

Of course, indie book cover design was a lucrative side project a few years ago. Now it's a struggle. Nothing is immune to the ravages of capitalism.
40 years ago, yes!

In the same way that "network" had recently been sneaker-net.
but here's the thing: why spend a bunch of time trying to formulate a prompt to give to a machine to generate a bad image to bring to an artist who would then refine it, when you could just say to the artist "one hand stabbing another with an ornate dagger, traditional style" and get what you want in one shot?
I know - that's why I said "particularly". I was in college in the era of Facebook being for college students only.

My point was that a professor cannot fault providers of information on the internet for their students' unethical behavior. And if they can't trust their students to do remote assignments, then they should test with more reliable methods like in-person examinations.
People Say Addiction Is a Disease. Mine Wasn't
https://archive.is/W6iH6
Yes. My dad cites the vaccilation of the science on whether or not eggs are healthy as the reason he places no trust in what scientists say. Of course, he is mistaking science reporting for the science itself, but he should be able to trust the media to accurately communicate the scientific consensus. It's one thing when we're talking about eggs or chocolate, but now he's skeptical of science reporting on global warming and COVID-19. And is that unreasonable? Why should he put a high credence in any science reporting going forward? He's a construction worker. He's not equiped to go read the journal articles for himself.

Of course, we haven't even touched on the replication crisis, of which thankfully my dad is blissfully unaware.
Kagi Claude MCP Server - Use Kagi web search in Claude now!
> until Microsoft chooses to enable UTF-8 by default in all of their Windows editions.

I don’t know how likely this is. There are a lot of old applications that assume a particular code page, or assume 1 byte per character, that this would break. There are also more subtle variations of this, like applications assuming that converting from wide characters to ANSI can’t increase the number of bytes (and hence an existing buffer can be safely reused), which isn’t the case for UTF-8 (but for all, or almost all, existing code pages). It can open up new vulnerabilities.

It would probably cause much less breakage to remove the Best-Fit logic from the win32 xxxA APIs, and instead have all unmappable characters be replaced by a character without any common meta semantics, like “x”.
Entropy of a Large Language Model output
s/advanced voice model/advanced voice mode/ (too late for me to edit my original comment)
I’d like to see the email where they demand you work for free! Lawyer up of this is the case.
How so? What do you think breeders who sell hens do with male chicks?
I like boldcontacts. It wouldn't have been useful for my daughter, but it would have been useful for my grandmother.
Sure, but if Microsoft is relegated to corporate, they'll make money hand over fist but Windows will lose all relevance for future growth.

Like IBM.
Email text can be easily faked too, there's really no reason to weigh them higher than the story other than they can be slightly tricky to fake the style and verbiage you might expect to see from that type of email.
Socket Now Supports Uv.lock Files
Exploitation of New Ivanti VPN Zero-Day Linked to Chinese Cyberspies
Telegram Shared Data of Users After CEO's Arrest
> I am not planning to get a lawyer involved as I have faith that UW leadership will make it right in the end.

That's incredibly foolish. UW has treated you very poorly at this point, and they have all the leverage and power here. You need to protect yourself legally. You've done nothing wrong (AFAICT), and yet you've been threatened with expulsion, and now they are attempting to extort you: "provide us with uncompensated labor or we won't let you graduate".

You might even have a criminal complaint around that last bit. Assuming good faith by the university (an entity that has already shown plenty of bad faith) is naive, to say the least.
That's a fascinating thought. As people with larger brains are more successful in life and more likely to have children*, mortality rates for natural births would increase, and over time we would evolve to become dependent upon modern technology.

The continued existence of our species would become dependent upon continued civilisation. A dark age could kill us, or at least cripple the population.

*how true is this? Uni-educated people tend to have lower fertility rates.
>The average human assistant would absolutely get this wrong

“The average human falls for scam texts” is a funny thing to make up in pursuit of defending software that falls for scam texts. Scammers send out these texts by the thousands because the average human does not fall for scam texts.

Most people are average, which would mean most people that you know have fallen for scam texts if your position were true. Is it true in your social circle that most people you know have fallen for scam texts and given the scammers money?
That's that the poster's app would allow. I assume that right now it is like a seat on a plane or something: If I drop there is an opening and it is first come first serve to fill the slot. So there's no way to assure that you get my old spot. But the poster's app would allow that.
We don't remove "how" from "how to". There are a bunch of exceptions like that. It's all pretty simplistic though.
Psychodrama is an amazing therapy tool.
Right, but I do think that the fact that he gave his son a job in high school makes his testimony even more unreliable than a typical parental relationship. Maybe the kid really is that good, but it's more likely that the dad was willing to sacrifice a bit of his company's time to support his son. That's not a decision that every father would make—not even every supportive father—so I think it's relevant here.
It's like using a classifier to sort biopsies from most-likely to least-likely to be Really Bad News. A human will get to them all eventually, but you can at least fast-track the ones that are almost certainly Really Bad News.

(I think I just said "triage" in a lot more words, to be honest).
What is a skill issue? It is not clear to me what your comment is referring to.
How Britain got its first internet connection (2015)
I should have known Pratchett's Hall of Faces in the Fools' Guild was based on something real.

https://wiki.lspace.org/Hall_of_Faces

(There's a lot of money to be made in repackaging Britain to be sold to Americans as "high fantasy", btw.)
roc-lang is pretty cool
Thank you. They're all in my kanban now.
> Treating UI test code as some kind of static source of truth is the biggest nightmare in all of UI front end development. Web UIs naturally have a ton of "jank" that accumulates over time, which leads to a ton of false negatives; slow API calls, random usages of websockets/SEE, invisible elements, non-idempotent endpoints, etc. etc. And having to write "deterministic" test code for those is the single biggest reason why no one ever actually does it.

It is, in fact, very possible to extract value from testing methods like this, provided you take the proper care and control both the UI and the tests. It's definitely very easy to end up with a flaky suite of tests that's a net drag on productivity, but it's not inevitable.

On the other hand, I have every confidence that an LLM-based test suite would introduce more flakiness and uncertainty than it could rid me of.
> You're most likely to get better outcomes if you can ensure the conflict plays out within the university and its rules, structures, and participants.

It's too late for that, even if you're correct here (and I don't think I agree). News of this has already spread, and will continue to spread.
Here, I think I fixed it:

I hate to think (take
the bandage off quickly!)
of a cybernetic ghetto
where mammals and computers
strive together in mutually
destructive chaos
like pure water
soaking dead trash.

I hate to think
(not now, please!)
of a cybernetic whorehouse;
Amazon, Google, Microsoft
exact tolls peacefully
from computers
though already paid for,
for extra "content".

I hate to think
(it cannot be!)
of a cybernetic lobotomy
where we are free of our nature
and farmed for our labors,
subjected through mammal
weakness and instinct,
and all watched over
by machines of loving grace.
https://www.wirtualnemedia.pl/m/artykul/hity-telewizyjne-his...

They're looking at a different set of TV stations.
The Address Sanitizer (ASAN) in both clang and gcc is/are excellent:

https://github.com/google/sanitizers/wiki/addresssanitizer

I believe to integrate a custom allocator with ASAN, you need to look at the memory "poisoning" mechanisms:

https://github.com/google/sanitizers/wiki/AddressSanitizerMa...
Many of these things (not only what you describe here but also the linked article) are stuff that I had intended to be available in the built-in command shell (called "Command, Automation, and Query Language", which is meant to describe some of the intentions) of an operating system design, so that they would have support from the operating system.

About capabilities, I think that capabilities should be a feature of the operating system, although hardware support would be helpful. However, I think that it could be done with tagged memory, without necessarily needing multiple types of memory, and programming languages such as C could still be capable of using them (although some things might not work as it would be expected on other computers, e.g. if you try to copy a reference to a capability into a memory area that is expected to be a number and then try to perform arithmetic on that number, the program is likely to crash even if the result is never dereferenced).

However, my idea also involves "proxy capabilities" too, so that you can effectively make up your own capabilities and other programs receive them without necessarily knowing where they came from (this allows supporting many things, including (but not limited to) many of the idea of "divergent desktop" of Arcan).
"No harm" except for the several slots that were taken up by people hoping to make a quick buck (selling the trade) who drop a day or two into classes and cause the students who actually NEED the class to be very stressed and annoyed and possibly have to adjust their plans because they don't think they will be able to take a class even though it will actually be free by the third time the class meets.

It also just fucks with the University's ability to gauge class interest. In my university, if a class filled up early in the registration window, the University would try to increase capacity or add another copy of the class, but that's not always an option.

A reminder that this is not done for technical reasons. Plenty of colleges all across the US, big and small, custom-built registration software or purchased on the open market, have fully functional waitlist features. "first come first serve" is a policy choice.
I am not the OP but nothing Google served up to me resembled an old radio show.
, even after instructing Google to search for the exact phrase.
your intuition is correct.

your creativity is correct.

enjoy your spotlight.
Nuwa – Smartest Pen in the World
Doesn't work in pdf.js
In a lucid dream you know you are dreaming. Recently I discovered that just because I am aware that I am in a dream and my actions do not not have real consequences, the feelings connected to the actions in my dream remain real. In my dreams, and awake.

Weird.
I'd guess most websites and UX people assume clicking is more common than selecting (though I doubt they have the analytics to prove that).

I'm sure you can userscript/greasemonkey that functionality the way you like it, but it's a lot more effort than just alt-clicking lol.
Quite a lot of methodological caveats being noted in that section...a couple of questions I would ask are how much computing is done inside a browser now, making the platform irrelevant, and how much is done on a mobile device rather than a desktop. Anecdotally, I see a lot of them collecting dust in the houses of friends & family, and very little being done outside of Zoom and Chrome.
I haven't been in university in over 20 years, but when I was, I absolutely did not have hundreds of dollars to throw around for things to make my life more convenient. Certainly some of my peers did, but they were not in the majority.
You want the "Product Specifications & Partner Commitments Search"[0], not the "Product Finder"[1]. Both are available from the top level "Find Products" menu

[0] https://www.energystar.gov/products/spec

[1] https://www.energystar.gov/productfinder
How to help those impacted by the wildfires across Southern California
> if one cared about web performance that much, they wouldn’t be running H1/.x in the first place.

You may not have intended it this way but this statement very much reads as "just use Chrome". There's lots of microbrowsers in the world generating link previews, users stuck with proxies, web spiders, and people stuck with old browsers that don't necessarily have H2 connectivity.

That doesn't mean over-optimize for HTTP 1.x but decent performance in that case should not be ignored. If you can make HTTP 1.x performant then H2 connections will be as well by default.

Far too many pages download gobs of unnecessary resources just because they didn't bother tree shaking and minifying resources. Huge populations of web users at any given moment are stuck on 2G and 3G equivalent connections. Depending where I am in town my 5G phone can barely manage to load the typical news website because of poor signal quality.
I got the same conclusions. Unless I misunderstood, Pdfium is based on Foxit so that should work. And as both pdf.js and pdfium decided to implement only a thin part of the adobe js sdk, then there are good chances that it works there too.
I've put 2018 as an approximation above because the intro says "a few years before he died" in 2020. If anybody can figure out the actual year, we can change it.

Edit: in HN titles, if you see a year at the end in parens, that indicates the year that the article originated. If you see a year that's not at the end in parens, that's part of the article title, meaning it's probably about something that happened that year. That's the convention anyhow.
The author shared this gift link on Twitter/X: https://www.theatlantic.com/magazine/archive/2025/02/america...
We used to do it with tables and percentage widths too, if I remember correctly. (I might not. HTML is old and I'm even older...)
An aside, but I found FreeCAD to be a real pain. The dependency tracking across sketches is really quite horrid. If I have sketch2 linked to sketch1, and I delete a line in sketch1, it will arbitrarily reassign all the sketch2->sketch1 dependencies. Maybe they fixed that since I've used it, but I've transferred over to Onshape for all my hobby stuff...

EDIT: looks like they finally addressed the topological naming problem, I guess I better give it a second chance!
(Scala) doobie-typesafe v0.3.0 released: better docs, `SQLDefinition.option`
`doobie-typesafe` is a typesafe wrapper for `doobie` SQL FRM that allows you to write queries in a typesafe way.

Changes:

- Support for using `Composite`s (or any `SQLDefinition`s) when performing left / right joins via `.option`: https://arturaz.github.io/doobie-typesafe/002_querying.html#...

- Better documentation, separated into different pages.
4M without power in Southern California due to wildfires
> “The eclipse of one of the great celestial lights—the sun or the moon—meant that on Earth a great figure would be eclipsed,” says George. “That is, a king would die.”

> the king would go into hiding and a temporary substitute would be placed on the throne. Once the threat was deemed to have passed, the king would reassume his position. To dispose of any lingering evil, his stand-in would then be executed.

I love how people can believe in an all seeing, all knowing, and all powerful god and yet also believe that deity can be tricked with such an obvious ruse.

I don’t know if that’s arrogance, stupidity or desperation. Perhaps a combination of all three.
If you do not know your audience, think of yourself as the primary audience. There is no shame in writing as if the recipient is your (past or future) self. This has nothing to do with ego, but with clarity and self-reflection. After all, you should know yourself best.
Ugh, this is multiple correlation/causation fallacies in one:

> Studies from Nedergaard’s group and others suggest vigorous glymphatic clearance is beneficial: Circulation falters in Alzheimer’s disease and other neurodegenerative illnesses.

That circulation falters in Alzheimer's does not suggest anything re the benefit of circulation. Science's science journalism is usually SOTA, this is not.
it's really all very suspicious
@pmarreck or petermarreck on most things

peter@marreck.com

;)
Not for the leading LLMs from OpenAI and Anthropic.
Looks like brainrot has reached HN too. "0 info about their life" is exactly the reason why one cannot be certain about their story - neither trust nor mistrust is warrented yet.
that only proves my point - stories are a source of either wisdom or entertainment, both of which is a form of personal (and only personal) profit of the specific listener
How many HN'ers are being impacted by the fires or power outages?
>>researchers have challenged parts of this picture, however; a 2024 study, for example, suggested waste clearance is actually faster during waking than during sleep

>That’s a pretty big ambiguity in the story!

no, it's not: "waste clearance faster during waking than sleep" does not mean it's adequate to the job, and waste clearance at night could still be critically important. We also do not know what the waste consists of comprehensively and having a specific sleep system implies its doing something.