skysight-inc/HackerNews huggingface dataset:
If you don't like the equivalence to slavery, pick a different example, there are three I posted and more you can probably think of on your own.

We know that the idea of a rational agent in economics is a myth, and as you mentioned, it is about incentives, as well as motives.

Students who take on debt that limits them in later life don't have all the information they need at the time they make the decision. Saying the information is available is not reasonable. These students are told they _most_ go to college to make a living.

They are not told they need to get an engineering, medical, or finance degree to make going to college worth it, economically.

They are shown all the loans they can get without an equivalent amount of effort put into educating them about the consequences those loans represent. For example, how much the loans will cost in the long run, along with estimated pay for various fields of study.

Furthermore, the loans are given for any degree program without restriction.

All the comments I made about game theory still stand, and we don't need to get into the myriad problems with our education and student loan systems. I agree they aren't perfect; I just think the argument 'I didn't get my loans paid off neither should you' is an extremely selfish one. Just because someone suffers doesn't mean everyone should. Also - in my experience people who are ready to make that selfish argument are very offended when it gets flipped on them. So they can understand intuitively the issue with the selfish position.
Hasn't the Trustee recovered 90% of the money invested? Phantom returns were ignored; at the time of the arrest the phantom returns were considered money lost.
> Some guy is poking around our system looking for exploitable weaknesses. Should we tell him to go away?

> Nah, let's pay him instead!

is a solution, but obviously can't be the solution. From a distance, white hat "vulnerability disclosures" start to look like a protection racket.
Compared to Stack Overflow, I think the Discourse forum software is just as great (if not greater) Jeff Atwood-related tech contribution.

Discourse has made it easy to create unique communities and avoid the social media algorithm hell. And it's open source and free.
On global scale if you have 100 people and 150 apples but apples are on the opposite side of the globe it is not like you can sustainably get those apples delivered all the time.

Getting 150 apples once is better than nothing but still doesn’t fix the problem.
> one of them is some sketchy murder for hire allegations from a low-credibility source

The source is a bunch of chat records from Ulbricht's seized laptop. There's a fairly detailed description of the evidence here [1].

[1] https://s3.amazonaws.com/s3.documentcloud.org/documents/1391...
What is a thermodynamic well? Couldn't find much on it.
Luigi is a symptom of an overly inactive justice system, if you don't prosecute crimes then some people take the law into their own hands (as a matter of fact). Preventing vigilantism is why having a working justice system is important to a functioning society.

DPR is according to his defenders a symptom of an overly active justice system prosecuting crimes that shouldn't be prosecuted. Though I'm not sure I personally agree with that.

OJ was just a crook.
I'm not sure. Saying that information wants anything is like saying that an LLM is capable of thought - a category error.
Warning, just kind of rat-holing on terminology a little. You've used the phrase "can make" twice now. I've always found that way of expressing it kind of weasel-y. Yes, a software developer "can make" $140-170K, by the definition of "can" meaning a non-zero possibility. A new grad "can make" $100K+. A senior software engineer "can make" $1M/yr. All these things are true. I "can win" the lottery, too, and my kid "can be" president of the USA one day. Also technically true. It's more interesting to talk about typical cases, rather than best-case aspirational ones, which I see you are doing in other parts of the thread (great!). I think HN very often mistakes the best case for the typical case, especially when we talk about salaries.

Even using typical case, salary means and medians don't tell the whole story, as the distributions can be wild.
It is not clear what the architecture for system-call capture is. Is it ptrace, ebpf or some custom thing or some combo? What is the overhead of running this?

The tool looks really cool, hopefully it moves ui state of art beyond windows xperf
Don’t use a mouse or a monitor then.
White House orders government DEI employees to be placed on leave
Because the std implementation can not force synchronisation on the libc, so any call into a C library which uses getenv will break... which is exactly what happened in TFA: `openssl-probe` called env::set_var on the Rust side, and the Python interpreter called getenv(3) directly.
Would not at all be surprised if that happens during 2025.

I think the west has been underestimating China's AI capabilities. AI is huge in China and they have found tons of "practial" applications so it's widely deployed.
The Dream Machine [1] gave me a deeper appreciation for how timesharing influenced Unix. Of course I've heard that idea before but never really thought much about the details. Commands like `who` which are frankly kinda useless for me are a lot more interesting and useful back in a timesharing context. E.g. `who` lets you see who else is currently logged on to the timeshared computer, and then you could use another program (I forget the name... `mail`?) to basically DM that person.

[1] This book was a slog for me. I know a lot of people here love it but it was like 2 months of tedium for me.
" Cybertruck Can Officially Be Considered a Flop"
Ask HN: Is anyone unimpressed by most chatbots?
I go to a corporate website, even the ones that sell chatbots themselves, like Salesforce and Sprinklr, and ask them a basic question about their product, and their chatbot just simply gives the wrong answer.

Meanwhile, I do a simple Google search and I see the answer right there in one of their help docs.

How am I supposed to have any confidence in using these chat bots, when the chatbot can't even answer simple questions about their own product?

And lastly, why are thousands of people enamored and hyped about this technology at conferences, etc? Sure, it's useful, but the implementation currently leaves a lot to be desired...
The organic reasons seem straightforward enough. In its context it’s an interesting perspective on a certain type of left-wing experience from that era. It fits in with a wider discussion. In the mainstream however it gets co-opted as (1) this is how left-wing structures work, they’re all like this, and (2) they’re just tyrannies with extra and indirect steps. Ergo traditional structures were right all along. No need to think about it. That feminist/left-wing stuff is just naive kids.
Are my statistics off? I quoted both the comp at BigTech and enterprise dev where most developers work.

And how many “boomers” have any clue about BigTech comp?

Are people who graduate from college who are “only” making 75K on average going homeless and hungry?
How much exaFLOPS can we expect from a 100 Billions dollars datacenter today? A rough estimate from a quick Perplexity search gives us 24 exaFLOPS for all smartphones in the world and 12 exaFLOPS for personal computers. Could a competitor to such a Datacenter be a collective effort with some sort of crypto to split the benefits?
If I were Musk I would be worried about Larry Ellison. Trump seemed to love him in the news conference.
I hear you but the magazine and newspaper can’t adapt to your engagement levels in real time to maximize their addictive potential. Many people don’t struggle with their screen time but it’s clearly a common problem.
Not sure if you are saying my point is dumb or something. But 186 million records might only apply to a few thousand individuals. What was actually exposed was billions of individual records on half the population of the USA.
Not the first sentence of the new AP link target, which is much more vague. Kind of annoying for HN to swap it out like this.
> One final note: The domain akam.ne has been registered previously — in December 2016 by someone using the email address um-i-delo@yandex.ru. The Russian search giant Yandex reports this user account belongs to an “Ivan I.” from Moscow. Passive DNS records from DomainTools.com show that between 2016 and 2018 the domain was connected to an Internet server in Germany, and that the domain was left to expire in 2018.
> This is interesting given a comment on Caturegli’s LinkedIn post from an ex-Cloudflare employee who linked to a report he co-authored on a similar typo domain apparently registered in 2017 for organizations that may have mistyped their AWS DNS server as “awsdns-06.ne” instead of “awsdns-06.net.” DomainTools reports that this typo domain also was registered to a Yandex user (playlotto@yandex.ru), and was hosted at the same German ISP — Team Internet (AS61969).

Yeesh
It's just lies they use to sell the idea that these profit driven corporations should be given massive amounts of money at the expense of the commons and public.

It's no different than sports stadiums selling the same idea to local governments:

"We'll create jobs."

"Mostly low quality jobs with poor benefits and minimum wages."

This is no different.

Whenever you hear about job claims you should be asking what quality of jobs?
I think he was. I saw photos of him there mingling with Jake and Logan Paul. Getting selfies together.
what do you suggest as alternative?

the problem is not linux, not mutable global state or resources and not libc.

the problem is not getting time at work to do things properly. like spotting this in GDB before the issue hit, because your boss gave you time to tirelessly debug and reverse your code and anything it touches....

there is too much money in halfbaked code. sad but true.
I think only people who follow frontend hype don't take traditional web frameworks seriously, especially some as mature as Django or Rails.

It may be, that very few people these days actually know how to make a website without reaching for hyped JS frameworks. The thing is, one needs to know more than just JS. One needs to know an actual backend language and learn the framework. Many web developers these days don't have this set of skills, might not even know another language than JS, even though it is not hard to learn.

Not every website needs to be a "web app". Not every website needs to be some SPA. Many are better off without being an SPA. Once you are not building an SPA, many other frameworks become very viable and proven alternatives, among them Django and Rails.
I was thinking about how governments could, if they have invested in good and simple tech, being the API suppliers (free) and an interface (paid).
They “should” know the rules, let me fill some boxes and the invoice is sent to the client and to the gov.
The overloaded market of acc software disrupted by gov? Let me dream ;)
A difference in scale. I really don't see a meaningful moral difference between murder for hire and doing it yourself.
I wonder why it is so hard for Rust to implement its own safe stdlib independent of C.
The real money is in converting sites with plugins and retaining the functionality which in many cases isn’t static. The copying of data to another tool is the easy part.
False dichotomy. If we wanted to, we could do both preservation and not lock them up.
The Silk Road represented a tiny fraction of illicit drug revenue per country. Some report-skimming would indicate less than a single digit. A series of more profit-oriented darknet markets replaced it. I don’t know what the costs were associated with its takedown but they must have been enormous. I doubt it became large enough for cartels to care much, but the effect of shutting it down is certainly good for them.

I don’t personally hold the opinion that Ross Ulbricht shouldn’t have been pursued according to the law- or support his pardon- or even that darknet drug markets should exist! I’m also not really interested in crypto.

However I strongly believe that a completely different approach to drug laws & regulations is necessary to make people safer and reduce crime.
Sublime seems like a good replacement - cross platform, Open anything, gets out of your way, automatic saved buffers, etc.
Just a note:

“Ivan I” likely stands for “Ivan Ivanov” which is the Russian equivalent of “John Smith” a fake common name
Trump admin fires security board investigating Chinese hack of large ISPs
It's normal for all species, humans included. We generally aren't carrying large loads of parasites, but that's not because not doing so is normal. It's because we put tremendous effort into getting rid of them. This is one of the theories for why human body temperature seems to have lowered since the measurement was standardized at 37 C.

There was a poem written about the phenomenon:

Big fleas have little fleas

upon their backs to bite 'em

And little fleas have lesser fleas

and so ad infinitum
I am not sure making things safe by default is a good idea. This always comes with a cost. Thats also the reason why basic data types (array, dictionaries, etc) are generally not thread safe… because its usually not needed or handled on a much higher level.

Its a different story for languages/environments that are supposed to be safe by default and where you have language features that ensure safety (actors, optionals etc) but not for something like libc which has a standard it has to conform to and like 100 years of history.
Laws pushed through… based on what political will?

Legislators, the general population, regulators, etc., have finite amounts of time, energy, and determination.
no it literally happened at publix the other day, its like a mall cop mentality I guess. I suppose it is not that strange because most bills have traces of cocaine on them https://en.wikipedia.org/wiki/Contaminated_currency
Elon Musk admits he cheated at some video games
Oh I was talking specifically about tax cuts because of a more efficient government.

Budgets can be balanced, of course. In some contexts it may be harder to do.
Indie Hackers, boringcashcow.com
Anthropic has to say this or Anthropic does not see their next funding round.
Yes, this API is only available in Chrome and Edge on PCs it seems:
https://caniuse.com/?search=filesystem%20access%20api
It would be a tremendous amount of work, and would take years. Meanwhile, the problems are avoidable. It's not exactly the "rust way" to just remember and avoid problems, but everything in language design is compromises.
There’ve been two new generations of kids that have been born since the “China is doomed” headlines have dominated the news. At some point, maybe, everyone should take them a bit more seriously? If one calls current US administrations methods “course correcting”, the same person should assume that another giant can do the same.
That makes total sense. Do you know if it is still an issue? If so, maybe other articles have appeared about it?
A few moments' research reveal many reasons to think the evidence was real, eg:

Ulbricht's right-hand-man Roger Thomas Clark, who was involved in one of the murder-for-hire conversations, admitted the conversation was real during his trial:

"In his own remarks, Clark didn't comment on that murder-for-hire conversation—which he at one point claimed had been fabricated by Ulbricht but later conceded was real."

https://www.wired.com/story/silk-road-variety-jones-sentenci...
> CNAME pointing to a Heroku/Shopify/GitHub

At least Gitlab (similar to Github pages, I never used Github Pages, always Gitlab Pages) gives you a verification TXT record in your Gitlab Account, which needs to stay in DNS as TXT. So if I used to host hi.example.com on Gitlab (& my own TXT record was hosted, and publicly visible), now I don't own example com, or gitlab account got deleted (but still left DNS CNAME records intact) and scammer gets the domain, when he grabs domain and adds hi.example.com to his Gitlab Account to scam people, his Gitlab Account will have his own TXT record. (now) His hi.example.com can never point to "my" gitlab project or page.

https://docs.gitlab.com/ee/user/project/pages/custom_domains...
It feels like chatbots are a required element to have at some point. Someone decides they have to have one. I wonder if they actually track if people use them / solve anything with them.

The only time they've ever "worked" for me was on Amazon.com but even that exchange / request for a refund could have been done with a form... I don't think it did anymore work than that.
> The full truth is that any individual voter has a negligible effect on the outcome of an election.

A negligible effect is, mathematically speaking, incalculably higher than no effect.
My bank has a banner at the top of the app if you are on a call with them. It's great if you know to check...
It's getting worse as time goes on, too. Things like Cooperation, "Common Good" and Community are not merely ignored. More and more they're being actively opposed. Individualism is no longer: "I don't need community and society." It's become: "I don't need community and society, and you shouldn't have it either!" Rugged Individualism has become Toxic Individualism.
If you drive the get away car in a bank robbery and someone inside is murdered, guess what? You get to be charged as well.
Just him though? Just the first guy and not all of the numerous people that started clones after, were tried and all received much less punishment?
The implication here is that it would be impossible to fund conservation without zoos. As a counter argument: we could just do it. Increase taxes by the amount people spend in zoos and spend that on conservation. The only argument in favour of the zoo over that other approach is that people want to look at animals in cages.
Going through their URL filtering site and requesting a recategorization is the best option for now, unless someone from the company sees it.

https://urlfiltering.paloaltonetworks.com/
The pendulum is swinging back it seems. More and more people that I know are now interested in starting bootstrapped businesses, growing them to $10k MRR or more then continuing them along or selling. Sites like Indie Hackers have popularized this model this decade than the 2010s which seemed laden with venture capital, most likely because it was the age of ZIRP.
Next up: The final solution for littering. And traffic violations. And adultery. Utopia awaits the bold!
Honestly, I also don't know anyone who has any fond remembrance of notepad. The majority of my friends on windows used notepad++ and then later sublime.

Just like how almost everyone I knew used Paint.NET rather than mspaint.
Apple naysayers have been bitching at them for decades and decades about how simplistic their apps are and how they need to wake up and join the real world by adding features K-Z to their apps in ordered to be considered a real product.

Meanwhile Apple has had to wipe away their tears at such harsh treatment with their gigantic piles of cash.

To this day I don’t understand why we have half a dozen automakers creating sleek vehicles that take care of things automagically but in computers it’s just Apple. Where’s the Audi and Lexus of computers?
ElectroBOOM!
The whole point of Rust is memory safety, not thread safety...
Show HN: Semgrep Assistant, a set of surgical AI tools for AppSec
Heya HN, excited to show off what I've been privately calling an AI cybersecurity tool built by AI skeptics. Two years ago we started a series of experiments with this philosophy of identifying small pieces of cognitive work where a human can very clearly map out the input data they need and the algorithm they'd follow to make a decision. This idea came partly out of frustration with the zeitgeist involving throwing broad AI features (e.g. useless chat bots) into products that end up unreliable and are targeting no clear problem a user might actually have. It feels kind of like a machete vs. scalpel approach.

For one, Semgrep (without AI) emits a stream of possible vulnerabilities found via static analysis, and Assistant reviews this stream of vulns to filter out obvious false positives. This happens before developers are notified, so that we can prevent posting PR comments that would annoy devs, and instead just hold those notifications for review by an AppSec team. This seems to help increase trust in the security tool overall, as devs are less likely to approach alerts with skepticism.

Second, things deemed true positives also come with specific AI-generated instructions on how to solve them. This is one of the parts where the 'surgical' approach helped immensely; we noticed that as humans we usually first try to find a past instance of someone successfully fixing a similar problem in git history, and we look at the project dependencies to see what libraries are readily available. So both these are included in the context we pass in the prompt, which leads to some very impressive code generation that uses even internal libraries correctly when it's required to sanitize data, for example.

The most recent addition to this whole system is our memories system though. When users triage findings and leave comments such as "Anything under the /dashboard/ prefix is internal access only", Semgrep Assistant parses this for information it might want to learn to apply to triage decisions or fix instructions, and checks if these new facts apply to existing findings you already had in the backlog. We had a customer whose backlog was cut by around 40% by adding just 4-5 memories that explain common reasons vulns do not apply in their environment.

I know it's a saturated space but my team believes our approach is actually useful, so we're expecting comments written with some suspicion but optimistic we can convince some of there's something real[0] here (:

[0]: https://semgrep.dev/blog/2024/does-your-llm-thing-work-how-w...
> I believe XWayland is there to stay for retro compatibility. That seems fine to me, retro-compatibility seems like a good thing. That would not be unlike XQuartz on Mac, which doesn't make us question Mac's own display server.

Yes but if more than 50% of the GUI softwares you run fallback to XWayland (including terminals), it makes no sense.

> But doesn't Wine work well with XWayland? (until they fully move to Wayland, which I think I've read they are in the process of doing).

Wine is already a compatibility layer, so adding XWayland on top of it introduces overheads and additional lags and visual artifacts in some games. There is an experimental version of wine 9.22+ that should theoretically run natively on Wayland, but it still crashes 100% of the time for me. Nvidia drivers were also notorious with Wayland, but they are getting better progressively.

I think the meme is nearly here: this might be the year of the Linux gaming desktop.
I'd highly recommend going to Sterling Hill Mine https://www.sterlinghillminingmuseum.org/ and Franklin Mineral Museum https://www.franklinmineralmuseum.org/. They both allow collection of fluorescent minerals from the mine dumps on certain days. If you go to the Natural History Museum in NYC you can see some very impressive fluorescent minerals sourced from these two locations. Also the mine tour is worth it, if nothing else.
This is standard in the US as well, probably almost everywhere. But as the comment says, there's always an exception.