skysight-inc/HackerNews huggingface dataset:
This seems like you don't believe that AI can produce correct new work, but it absolutely can.

I've no idea whether in this case it directly copied someone else's work, but I don't think that it writing good unit tests is evidence that it did - that's it doing what it was built to do. And you searching and failing to find a source is weak evidence that it did not.
Do you have the RH case number / Jira issue? I can take a look.
According to microsoft: "the user".

There's companies that scan code to see if it matches known open source code or not. However they probably just scan github so they won't even have a lot of the big projects.
Premiums should be based on risk, not flat. I don't know where you are drawing that line of reasoning from. Just because the government is providing coverage doesn't mean it's all the same rate. Every insurance product has a risk model to set prices. I was just advocating that we have a non profit minded entity with deep pockets do it vs private companies motivated by maximizing profit.

Public benefit corps fit this model as do regulated utilities.
> To answer your utterly moronic question

I don’t think it was moronic at all; the point is to get to the bottom of what assumptions and axioms you’re using. What is the moral framework according to which you claim State Farm has wronged you. Only then can we judge whether your claim is in fact correct.

> because they aren't in the business of insurance

So, if I understand your implicit argument correctly, it seems to be that anyone who sells a product be forced to sell it to anyone, no matter how costly it is to them.

There’s no McDonalds in Barrow, Alaska, presumably because running a McDonalds there would be prohibitively expensive. Is that immoral? Should they have an obligation to open a store there?
Executive Order on Strengthening and Promoting Innovation in USA Cybersecurity
Try having a chat with a HCI person. Or in a pinch ask a LLM to emulate one for you. It's a useful perspective to have for a lot of stuff.
Loved the Twin Peaks tv series. Also the eighties Dune movie is a gold mine for awesome clips. RIP.

https://www.youtube.com/watch?v=m4NWOyPp1yg
It's ridiculous that there's no software implementation to do this, it's a huge problem.

Auto update should be able to include the kernel, initrd and grub cmdline from the running system I have no idea what's holding this back since evidently code already exists somewhere to do exactly that.
> We can draw the line in many places.

That doesn't make those places equivalent.
People who go without insurance because they live in an uninsurable location would leave those who remain insured better off, because the insurance company would be less likely to need to make an exorbitant payout to the victims in the disaster-prone area. This is of course true as long as insurers don't manipulate the market to keep premiums high despite their total expected claim outlay lowering.

As an insurance buyer, in a hypothetically ideal market situation, you would want all those who also purchase from the same insurer to have the lowest risk of needing an expensive claim paid. The lower the expected payout * risk of disaster means lower premiums for the insurer to still make an expected profit.

I think what will happen is simply: Houses are built in places which are more insurable, existing danger-prone houses will exist until they are destroyed, until then they will increasingly be status objects for the elite who can afford the loss and have inaccurate risk appraisal. The fact that so many valuable objects are kept in Malibu/Palisades homes despite fires happening there a lot (as recent as 2018) indicates homeowners in disaster-prone areas aren't acting perfectly rationally.
It's not about features.

It's about the obviously popular meme: "Foreign(er) BAD".
Seems people didn't read the link and are downvoting you, possibly because they don't understand what you're talking about.
No, I think he is claiming that if they kept flying straight they would not collide with any debris.
I kinda figured it was self-destructive arson (detected or undetected) or gross negligence, and I'm mostly paying for those.

Similar to when I look at causes of death for my age group and can pretty much eliminate the top 2 of 3 causes for myself.
Ask HN: As a developer, when you see glaring bugs on a major bank's website
When I see something broken on a website, my inclination has always been to try to send a reproducible report to the devs / owners / whoever. Lately, though, any kind of technical contact is conspicuously absent from most large companies' sites. I assume that's because tech contacts just got flooded with mail from frustrated, non-technical users. In a lot of cases it seems like the app store reviews are the only way to surface actual bugs.

A year or two ago, one bank I use (Charles Schwab) started showing completely incorrect daily account balance changes. Their checking account balances were being merged one day behind their brokerage accounts. I tried to contact them, even called the phone line asking who I could talk to that worked on their app. (Their app is horrific, by the way). It was not until weeks later that they seemed to read their app store reviews and realize there was a problem; and then it took them a month to fix it.

Similarly, just now I discovered a new bug in Chase's banking website. A fairly simple thing: Pending transaction totals stop showing up after you switch to filter other transactions. This is probably like a 2 second fix for whoever wrote that module. But I spent 20 minutes searching their online contacts without finding anyone to report a bug to.

Is this the future? Is this where we're at? What's the channel you use to get the devs' attention in these cases?
American, living in area prone to natural disasters: "Is the WHOLE WORLD becoming uninsurable?"

The answer is obviously "no" since there are other parts of the world that don't live on a hurricane highway nor build houses made from firewood in an area prone to wildfires.
The discussion around operating system package updates is definitely important.

I’m also curious to hear how teams handle dependency updates in software development projects, things like versions listed in package.json, build.xml, or similar files. How do you decide when to update these kinds of dependencies, and how frequently do you do it?
Seems like your issue is with your RSS reader not RSS itself. You most likely also don't need LLM to filter content a word filter would catch...
yeah sorry the idea there is to move over stuff from our handbook like https://ritza.co/handbook/how-we-work/our-production-process... - but it's hard to separate what is specific to us and what is more generically useful so that is still a WIP.

I think it's hard to advise a process as it's quite personal. Some people write down bullet points and expand, others write and rewrite until it's what they want. I think we're far from having enough research to know if one way is 'better' than another or not, so for now we mainly just advise writing as much as possible (https://styleguide.ritza.co/improving-your-writing/how-do-I-...) and figuring out what works for you.

Structure is really hard so I don't have any easy answers for you there either, but https://styleguide.ritza.co/ritza%27s-writing-rules/Style/#k... talks a bit about how the writers job is to go through exactly what you're describing so that the reader doesn't have to.
Because although in the recent LA case we're dealing with rich folks who could shoulder the increased burden, often it's the poor areas that are riskier, and where the people there have little choice over where they can live.

There's no universal solution. A "free market" approach will work in some areas, and fail spectacularly in others. Same goes for a full-on centralized control approach.

And in all cases, you also have the confounding factor of bad actors gaming the system - and your current tools may be insufficient to meet the challenge.

So you need a human guiding hand to make sure things don't go too far out of whack.

This isn't an either-or decision. Stability doesn't care about whose motives or approaches are more "pure".
U.K. restaurant selling $177 pineapple pizza: the price for 'terrible judgment'
I agree. In theory you need to just distribute serialized patches but in a real world backend scenario you may need to integrate with knowledge of current document state, user identity, and possibly even some level of access control.

I’ve wanted to use Y.js with a Go backend multiple times but gave up each time due to time constraints as it’s hard to find simple reference implementations.

I’ve been checking back over the years but it still seems hard to do this outside of Node.js.
That's false. Hurricanes are not getting bigger or more frequent due to climate change.

They aren't getting bigger or more frequent at all.

NOAA has stated this multiple times and you can read an article addressing it here:

https://www.climate.gov/news-features/blogs/beyond-data/can-...

It's well known that hurricanes go through multidecadal swings.

Why this keeps getting repeated when it's obviously false is beyond me.
In a fiercely competitive market, I also made one. named: rednotevideodownload dot com :(
The best one I know is the New Forest in England, which is from 1079.
https://www.phoronix.com/news/LAVD-Scheduler-Linux-Gaming seems like a real use
Seems to be about timing side channels on GPUs.
Also trialed Devin, it's quite impressive when it understands the code formatting and local test setup, producing well formatted and test case passing code, but it seems to always add extraneous changes beyond the task that can break other things. And it can't seem to undo those changes if you ask. So everything requires more cleanup. Devin opened my eyes to the power of agentic workflows with closed loop feedback, and the coolness of a slack interface, but I am gonna recommend cancelling it because it's not actually saving time and it's quite expensive.
> After a "bad" page percentage threshold is exceeded just stop wasting your time crawling that domain entirely.

In the words of Bush jr.: Mission accomplished!
> It makes me truly excited for our future in a way little else out there does.

Hate to break it to you, but Space X isn't it. You can't have a CEO that is not aligned to the truth and reality to lead a company into something that is beneficial for humanity.
I can assure you that I received nothing of the sort. In fact, I only found out because I called about transferring my policy to a new house. And yes, I read all email/snail mail sent by them. I was given zero heads up.
> I always found it funny when insurance marketing talks about "personalized rates", when the goal is to DE-PERSONALIZE the risk.

Actuarial science is not often associated with “fun” but they have been partying for centuries.

“In 1662, a London draper named John Graunt showed that there were predictable patterns of longevity and death in a defined group, or cohort, of people, despite the uncertainty about the future longevity or mortality of any one individual. This study became the basis for the original life table. Combining this idea with that of compound interest and annuity valuation, it became possible to set up an insurance scheme to provide life insurance or pensions for a group of people, and to calculate with some degree of accuracy each member's necessary contributions to a common fund, assuming a fixed rate of interest.”

> you can either isolate the LA customers and charge them the "real" price of the risk […] or you can include them in the broad pool

Maybe you don’t understand that the insurance business is based on including everyone in one pool (so it can swallow a large clustered crisis more easily) AND charge them (more than) the real price of the risk.
Microsoft bundles Office AI features into Microsoft 365 and raises prices
It is a promotion, I agree, at least at most companies. They usually have a single ladder and many times from senior engineer there is nowhere to go except management.

Some companies, however, do recognize the need for multiple ladders, so you can also be promoted within engineering, with a salary that is higher than middle management.

It is a problem, if you switch then to a company that does not have multiple ladders, though.
> I don't understand why anyone would use passwordless disk encryption

You want to install and operate a device at a remote site with restricted (or no) VPN access and where you don't trust the local staff?
> I bet you can figure out a way to tell me your SaaS price, in ballpark terms, and what it depends upon...

They can't if the price is arbitrary and subject to negotiation, like a car at a dealership. Not saying that happens everywhere or even most places, but it's one explanation.
I'd guess the most common scenario is for someone giving away the entire computer, not fiddle with components. Or theft of the full machine.

This feels like one of those half-security measures that makes it feel like you're safe, but it's mostly marketing, making you believe *this* device can be both safe and easy to use.
Assuming the worst in these cases is always a good idea.
> 200ms for round-trip and DB queries is complete bonkers

Never lived in Australia I see
> So, if I understand your implicit argument correctly, it seems to be that anyone who sells a product be forced to sell it to anyone, no matter how costly it is to them.

That is clearly, clearly not my argument, but I have a feeling that you're one of those bad faith "and yet you participate in society, curious!" guys, so I'm done here.
Oh! Second stage. Misread.

No, second stage has 3 vacuum engines and 3 atmospheric engines, so they'll have to be able to throttle for the cutover.
What do you mean avoid "reset --hard"? Why or why is it not enough in practice? I use it quite often, along with "alias git-restore-file='git restore --source=HEAD --'". It seems to work.
It seems straight out of science fiction
They want to find more researchers that are motivated to build upon it for the much improved, private, next version.
> The biggest cost of RSS feed items as a consumer is figuring out whether something is worth reading

I'm working on an RSS feed reader, and it has a feature that solves that problem. For every subscribed feed, it shows the percentage of items that you actually bookmark and read. So if there are feeds that you subscribed to but don't read, you can easily find out which they are and unsubscribe from them.

It's called https://lighthouseapp.io
Ha! I had forgotten that message.Thank you for reminding me. I used to read comp.lang.lisp for the extensive and increasingly bizarre flame wars and for the wider philosophical discussions. Eventually I got to the point where I thought "OK I'm done now" and left and never went back.
> "install this library and text editor integration and boom you have an app", which doesn't give you a good mental model for what's actually happening.

I was interested in working with CRDTs and collaboration in general for a while now and this has been the biggest issue whenever I tried to get into it. Websockets also seem a bit harder to find (free) hosting for.

Btw, your other tutorials on CRDTs were also a great help.
But that's a thing: if the article becomes outdated during the course of the week - was it even important for me to read? Assuming I'm not a daytrader or anything like that
What I am wondering if to what extent (if any) I can protect myself as an end user from this kind of spying by just not connecting these smart devices to the internet.

A while I read about smart TVs bypassing pihole-style blockers by using hardcoded IP addresses and DNS server addresses.

I don't even know how smart cars work. Do they have their own SIM card or something like that? Either way there are so many ways they can subvert obstacles. For example a car could scan for unprotected WiFi networks and connect to one if found.
Designing a rocket that's strong enough to survive 100% thrust at maxQ also wastes fuel, because you've overbuilt.
Threaten people just because you don't like their pricing on one non-vital item on their menu?
This is often used in relation to the processor architecture. The 64 is added to indicate it's a 64 bit CPU architecture.

This is to distinguish it to the for a long time common 32 bit CPU architectures.

Looking at the current market you could think that there are mostly 64 bit CPUs sold nowadays, but many people still use (older) 32 bit CPUs.
Wow... geese and ducks filter food like baleen whales
> The trick is a technique called fractional indexing, in which indices are fractions rather than integers.

How many times you can use fractional indexing before it stops working?
> The only thing that I've learned, this is all in line with California’s state-approved computer literacy recommendations.

That's seriously fucked up!
We had. Then the anthill fell on the side, standard oil got busted with many others, turns out we had not in times of crisis, then we had, than we had a war, beef with communism ,which got unions negotiation powers, so we had not. Than communism failed, history ended and we thought we could keep the masses placated with bread and netflix. Rights are as strong as society was stable. Now we have a dictatorship to protect property rights,which is the equivalent of forbidding physics tought to prevent rain. So now we have and the havenots aint having it.

Ps: Which sort of private property are we talking about? Vital resources to organize societal complexity? Or useless economic blubber?
Stability is not a property of a single element of a system but of the whole thing.And it cant be propped up by dams.
I'm surprised anyone trusted Telegram to begin with, as it has never, ever been secure, especially not on desktop.

It was not secure, it was only pretty and feature-rich, I guess.
I understand this concern deeply. For developers who've spent years mastering JavaScript patterns and component architectures, the idea of "returning to CSS" can feel like a step backward. They remember the pain points of global styles, specificity wars, and maintaining large CSS codebases.

But this perspective misses how fundamentally different modern CSS development has become. When you embrace CSS as your primary architecture, you're not just writing styles - you're building a design system. You can make typography following certain "musical" scales, colors maintaining precise OKLCH relationships, and spacing flowing from consistent ratios.

It's also about the simplicity in semantic HTML. Consider a real example: a typical React component library might need four different versions of text styling: Text, Description, DialogDescription, and AlertDescription. Each requires its own component definition, TypeScript interfaces, and style declarations. But in a CSS-driven system, this complexity vanishes. A single typographic scale handles all text needs through mathematical relationships.

This systematic approach leads to dramatically less code overall. Where JavaScript monoliths often grow to thousands of lines, a CSS-based system keeps in hundreds.

Nue is of course not for everyone. It's specifically designed for developers who see CSS as a creative medium - who get excited about the possibilities of container queries, custom properties, and calc() functions. For these developers, CSS isn't just a styling language - it's a powerful system for expressing design.
Ahh, the strike through doesn't render on mobile. Yes, I think we are just agreeing with each other.
The website is not from the authors. Seems fraudulent

HF: https://huggingface.co/spaces/hexgrad/Kokoro-TTS
Very nice exploit.

So if you use this PCR state machine, the problem is that the step before initrd doesn't require the correct password to move the PCR forward? It accepts any password that decrypts the next stage, which didn't have its integrity verified here.

Seems there are multiple ways of solving this, and adding integrity checks is only one. It could also let the TPM verify the disk decryption password (when it's needed.)
There are a few shareholder-friendly patterns to get this done, but it is domain-specific. I’d say it’s more “rip off the bandaid slowly and carefully”.

Eg a common one is to wrap a new no-op new service around the old one, and gradually replace parts of the old one (the “strangler fig pattern”).

This is technically great, but it’s also financially great because you are don’t spending large sums on a big-bang rewrite. You’re spending relatively small sums on a “pay as you go” basis, something board members and shareholders do like.

But of course this depends on how your systems are set up.
I agree. Sony isn't winning the console market. In terms of both unit sales and combined hardware/software profitability, I think it's pretty clear Nintendo is doing best. Although, Sony might possibly net more total revenue due to higher priced hardware, from a Return on Capital perspective Nintendo is doing better.

I think Sony probably feels they are doing okay, although they think they should be doing better than they are. It's Microsoft's XBox business that I think is in long-term trouble. While they may be profitable at the moment (I don't follow it closely enough to know), the brand and forward trends aren't looking good. To me, the massive acquisition spree buying leading game companies was a very risky 'bet all the marbles' kind of move. It was so expensive that to justify it, they not only have to win but win big. It's a huge bet on making their Game Pass service not only grow but increasingly profitable. And it has to win PC gamers and console gamers with a unified service. Maybe it'll work but the high costs and constraints limit the number of ways they can win while the number of ways to lose remains vast.
So we are in fact talking a non proto-Sinaitic script?

One that presumably did not succeed, and was superseded by proto-Sinaitic?

Or perhaps influenced / led to proto-Sinaitic?
Sure. And some of those people are black hats ;)
Calling me pathological doesn’t really strengthen the argument.

One can certainly imagine a textbook QA tool that doesn’t infer emotions. If one were introduced to the market with the ability to do so, it would seem to run afoul of the law, regardless of whether it was marketed as such.

The fact is that any textbook QA systems based on a current frontier model CAN infer emotions.

If they were so forward thinking, why ban emotion detection and not emotional abuse?
What model does Devin use? How would it change if it used o1 or even o3 for times when it gets stuck?

IE. Generate the initial code using GPT4o/Claude 3.5, then start testing the code, when it gets stuck, use o1/o3 to help.
> significant foreign intervention during the modern

Same applies to pretty much every western country besides perhaps Switzerland and to a lesser extent Sweden.

Anyway I think you’re going back far too much. Countries like Algeria, Morocco, Tunis, Jordan and even Egypt or Syria were mostly left to their own devices since the ~50-70s (most instability in those countries that led to foreign intervention had internal causes).

Where are they now? Compare them with South Korea or Taiwain (which were both very poor and run by extremely oppressive regimes until the 80s). Same applies to much of Eastern Europe.
Yeah, I'm surprised that the damages of the LA fire occurred, because it was known beforehand that California had a fire problem (and also have an earthquake problem I think).

I'm here in Eastern Europe and our buildings can withstand a lot of things.

> we need to take action to mitigate their impact in the future. As a foreigner, it seems to me that Americans prioritize building cheap homes over constructing better and more resilient ones.

As an European, it baffles me as well.

If this doesn't happen to "cheap" homes here, why does it happen in California, to rich people's houses?
Musk've had Cybertruck QA team on this one.
curious what is this in context to, and which industry? I assume this isn't SaaS sales?
If you're thinking that this is good (and it is), you should love the GDPR which bans this sort of thing entirely without needing an investigation beforehand.