skysight-inc/HackerNews huggingface dataset:
So, the feature of "Here's a set of easily pulled libraries" is an anti-feature because it makes it easy to pull supporting libraries? I suspect this is actually about developers and not Rust or JS. Developers choose what dependencies to pull. If nobody pulled a dependency it would wither and die. There are a lot of dependencies for most libraries because most developers prefer to use dependencies to build something.

But I digress. If we're talking build system, nobody is forcing you to use Crates.io with cargo, they just make it easy to. You can use path-based dependencies just like CMake/VCPkg,Conan, or you can DIY the library.

Even with crates.io, nobody is forcing you to not use version pinning if you want to avoid churn, but they just make it easy to get latest.

It's easy to build software on existing software in Rust. If you don't like the existing software or the rate it changes don't blame Cargo. Just do it the way you like it.
> If OP is willing to maintain a rust crate that takes in no dependencies and can determine terminal size on any platform I choose to build for, then I will gladly use your crate.

I already mentioned this on twitter but not a lot of people work this way. I don't have to point you farther than my sha1-smol crate. It was originally published under the sha1 name and was the one that the entire ecosystem used. As rust-crypto became more popular there were demands that the name was used for rust-crypto instead.

I have given up the name, moved the crate to sha1-smol. It has decent downloads, but it only has 40 dependents vs. >600 for sha1. Data would indicate that people don't really care all that much about it.

(Or the sha1 crate is that much better than sha1-smol, but I'm not sure if people actually end up noticing the minor performance improvements in practice)
Containers took off because it was the easiest way for developers targeting Linux to get a predictable runtime environment. It freed them having to worry about the differences between Debian's OpenSSL or Red Hat's OpenSSL libraries or even the differences between different versions of a distribution. You don't see nearly the same level of uptake among Windows developers because not only is there only one Windows API for everyone to target but also Microsoft is willing to bend over backwards to preserve backward compatibility.

Containers also predated "modern sysadmins"; prior to docker, Google ran its prod software in chroots for the same reasons as above:

>The software run by the server is typically run in a chroot with a limited view of the root partition, allowing
the application to be hermetic and protected from root
filesystem changes. We also have support for multiple
libcs and use static linking for most library uses. This
combination makes it easy to have hundreds of different apps with their own dependencies that change at
their own pace without breaking if the OS that boots
the machine changes.

https://www.usenix.org/system/files/conference/lisa13/lisa13...
Phishing. Regular visits to these domains will 301 redirect them to you, but there's at least one URL that will instead be handled by the scammers themselves.

They'll then send out an email campaign with a From: address in the counterfeit domain (which will have valid SPF/DKIM/whatever), a subject like "Example.com: You've been invited to join a project!", quickly-come-see-this-secret-stuff body copy, and a call-to-action button linked to that URL.

The page hosted on the URL will have your branding and everything, and collect a bunch of personal information and/or access credentials for the scammers.

Taking down this stuff is tedious, but you can try -- least you can do for now is display a prominent 'this is not an authorized example.com domain' warning for inbound visits from these redirects, create a public Knowledge Base-like article warning about this abuse as well (making very clear this has nothing to do with you), and block the domains involved on your inbound mail server.

Silver lining: apparently your SaaS is successful enough to be used as a lure for scammers. Congrats?
Yea, somewhat disappointing. My mx 3s mouse has problems with the click switches and the mouse isn’t all that old. I’ve also read about others with the problem. I would also like to be able to buy a replacement case for when the rubber starts to come apart. Has not happened on this mouse yet but on all other rubberized mice I’ve had.
Replacement key caps for my keyboards would also be nice.
In a hurricane you are eating so you don't starve. While there are reasonable limits to what you can serve before you should stop serving anything at all, most vegan food is far from unreasonable.
I often wonder about this: obviously Rust is fashionable, and many people push to use it everywhere. But in a ton of situations, there are modern memory-safe languages (Go, Swift, Kotlin, Scala, Java, ...) that are better suited.

To me Rust is good when you need the performance (e.g. computer vision) and when you don't want a garbage collector (e.g. embedded). So really, a replacement for C/C++. Even though it takes time because C/C++ have a ton of libraries that may not have been ported to Rust (yet).

Anyway, I guess my point is that Rust should focus on the problem it solves. Sometimes I feel like people try to make it sound like a competitor to those other memory-safe languages and... even though I like Rust as a language, it's much easier to write Go, Swift or Kotlin than Rust (IMHO).
Sure. It is true that violence and unrest is something that happens more often. And not everyone that day came to storm the senate.

But, as usual, this is a case of false equivalency.

Can we agree that when violence results in penetration of the national seat of power, during the transfer of power, that changes from "civil unrest" to "insurrection"?

This is like saying "but your honor, fights happen all the time", when trying to defend yourself after robbing a bank.

I won't even go into the fact that there is ample evidence that it did not "just got violent". Even if not everyone came there to storm the senate, there is ample videographic proof of people arriving geared up and organized.

Now. Regarding those "bunch of drug dealers". In fact, Biden commuted the sentence of 1500 non-violent offenders so that their punishment was in line with the punishment they would receive today. He pardoned 49 people that mostly have already purged their sentence and today are productive members of society (and there were being kept back by their record)

Really. Spend two minutes reading through the list of pardons, and after reading about the lives of these people, then tell me if you still think those people will sell drugs to children.

https://www.justice.gov/opa/pr/clemency-recipient-list-3
And by "optimized", I'm sure the corporate raider playbook of selling off real estate and then leasing it back will happen.
- "Unfortunately our mineral oil aquarium PC kit project has been alleged to infringe on the patents held by a company who holds several patents related to mineral oil cooling of PCs."

What risible clowns. How could you dream of patenting this—oil-immersion cooling, in computing, goes back *at least* to 1961 [0] (and there's probably even earlier prior art, I can't find citations for the vacuum-tube era but it'd be very likely they had tried something like that). It's the most obvious solution in the world. "Oil-dunk hot thing for more cold" is a bronze-age blacksmith's wisdom.

[0] https://en.wikipedia.org/wiki/IBM_7030_Stretch ("The memory was immersion oil-heated/cooled to stabilize its operating characteristics")
You use in house solution??? any of these guys that want build something minimal dependency free is valid concern, I agree with that

but but what if people just don't want that??? it given people jobs and things to do (lol, this is serious)

also there are certain things better to use third party library than develop in house like crypto
That's how we get things like leftpad in the JS ecosystem.

On one side, I think if we had a good system of trust, that's not a problem.

And part of me likes the idea of something like Shadcn - you like a component? Copy it into your library. However, if there ends up being a vulnerability, you have no idea if you are affected.

For some code, that's not a problem. For other code, we truly depend on having as many eyes as possible on it.
Show HN: Visualising swarm bevaviour in fish with boids
I think there's something to be said for UX consistency even if it's "wrong" in some ways. To a first order, every basic calculator works exactly the same, and it's easy to use them all once you've learned how to use one.

In contrast, every microwave in the world has reinvented its own new system for entering a time, and added a bunch of extra buttons for useless fake features.
Exactly this. One of the first things I tell people struggling with nix is that nix is simple and almost all of the complexity lives in nixpkgs. Knowing where to look for help (is this a nix, flakes, NixOS, or nixpkgs thing?) is one of the hardest problems for beginners.

Nixpkgs specifically needs to be entirely rethought. It has become too large and complex to manage both technically and politically with the number of contributors. Separating out the lib, stdenv/tooling, and package definitions would be a good start.
> ChatGPT is marginally better and will sometimes tell you straight up that an algorithm can't be rewritten as you suggest

Unfortunately this very often it gets wrong, especially if it involves some multistep process.
It would be cool if the researcher could have tested this before reporting
I’ve definitely become much more likely to start with small internal utility functions implemented by AI before adding a library than I would have been in the past—it’s quite effective for contained problems, I can have the AI write much more complete/robust implementations than I would myself, and if I do eventually decide to add a library I have a natural encapsulation: I can change the implementation of my own functions to use the library without necessarily having to touch everywhere it’s being used. Makes it easy to test a couple of different libraries as well, when the time comes.
omg lol "here we go, the first 'R'"
Amiga by default had an Emacs clone on every install.
At this point in time T&Cs are a generic template that stretches into a closed bubble trying to defend against any legal action. There should be a "dontsuewecandowhatever" copyright-like legend and be done with the bs.
The language is alright, the documentation and rate at which things change is the issue.

You wanted to do something and found a page about how to do it? Cool, good chance it won't work anymore cause it changed. If you do get an error from nixos-rebuild because of your nix files, the error report will probably not be useful either.
Another alternative is that they will hijack those links once they gain traction in search results. Almost as a hedge against your future success.
I am not sure what you mean by that. Do cities not want people to visit them? You can't travel through a city unless you commit to live there for a while?
I've learned it is normally pretty easy to tell what caste someone is from.

But watching a Brahmin who really believes they are vastly better than Dalits act like as arrogant as the Goa'uld from Stargate SG1 was really something.
Gleaning: The ancient practice fighting modern food waste
EasyMCP: Easy model context protocol servers in TypeScript
Framework to define MCP servers using an ExpressJS-like syntax. Or you can use decorators like @Tool() and @Prompt()
If you are on same network you can use Wake on Lan android app.
Risky line printer music on a vintage IBM mainframe (2019)
How the humpback whale made a comeback in the Salish Sea
You can always add more perimeter, so you want a lower bound on the perimeter given the area. The isoperimetric inequality (https://en.wikipedia.org/wiki/Isoperimetric_inequality) says that the smallest perimeter for a given area is that of a circle.
Guix not supporting systemd is the biggest reason I have for not giving it a go.
The proposed amendment excludes Presidents who served two consecutive terms, likely specifically to prevent Obama from coming back.
This is very cool. Can you disclose how much funding NixOS is getting via NGI Zero?
The article is about the hardware and kernel level APIs used for interacting with storage. Everything else is by necessity built on top of that interface.

"fopen"? That is outdated stuff from a shitty ecosystem, and how do you think it's implemented?
The vetting process for open source maintainers has very little overlap with the vetting process for “is this person trustworthy”.

This is true for individual libraries and also for Linux distros.
> Remember, if it's free, you're the product

That was until the 2020s.

Now you pay and you are the product.
More like top-200+ by views, though even the wouldn’t contradict much else
probably means Elon has a bunch of it he wants to offload at a markup.
The state space of CRUD apps vs. visual tools
This comment isn't intended as an opinion on RTO, but one of the things that's helped me with ADHD has been to go for frequent walks after short bursts of work – I've actually thrived at remote work for that reason. We've all had to learn our own techniques to get our brains to cooperate with our goals.
Well to be fair, in practice in this universe, nobody gives a damn about security. I meant it more in a normative way.

Nobody cares much about the security of their own code, and even less for the security of their dependencies. At least if you link dynamically, you give an opportunity to your distribution to have someone care about it.
There will be no exceptions. Trump, Musk et al don't understand compromise.
I'm actually working on a linter for dependencies that checks all your dependencies on 15+ rules. https://github.com/DepshubHQ/depshub

It's true that dependency-free software is very rare these days. The most obvious reason is that people don't want to "reinvent the wheel" when doing something. While this is a 100% valid reason, sometimes people simply forget what they are building and for whom. Extensive usage of dependencies is just one of the forms of overengineering. Some engineering teams even do their planning and features because of the new shiny thing.

The problem of dependencies is massive these days, and most companies are focusing on producing more and more code instead of helping people manage what they already have.
The federal government is one of enumerated powers; there is no limit to the things it’s not allowed to do. It would be an unending task to come up with punishments for the things they are forbidden from doing.

The bill of rights was a huge mistake, for exactly the reason foreseen at the time of its passing: it creates massive confusion that the people only have some limited set of rights.
That's how we all solve problems. If this was novel, it would be a paper rather than a blog post.

The meta-strategy of combining LLM and non-LLM techniques is going to be key for getting good results for some time.
> Let's say a given private or public organization makes a bad choice. What is the punishment? The guy who flipped the switch?

In the military, orders which tell somebody to break the law aren't legal orders, and soldiers can be punished for following them (importantly, this does not preclude also punishing whoever gave the illegal orders!) Soldiers have a legal obligation to refuse illegal orders. So should bureaucrats.
Those "edge cases" actually aren't; they're simply "emergent behaviour" of how the state machine in the ASIC works.
Ha! Hi, I think we're having parallel conversations on there as well. Well, good to make a second loop closure. I won't copy my reply here.
First computer to sing – Daisy Bell (IBM 7094, 1961) [video]
This castle is for a small local Lord that would have been subservient to the King of France. So it wasn't in their own kingdom and never intended to be one. In the 13 century Kings gave their military leaders (ie lords/knights - a lord would always be a knight) and that they were intended to protect from bandits. Those Lords then used the castle and their position to collect taxes (though generally not called that). Some of those taxes would go to the king, but most went to support the lord, his army (about 10 guards), build the castle. When the king went to war the lord was expected to turn the peasant men into foot soldiers and then go with the king.

Though if you succeed in building a castle in someone else's kingdom that means it is no longer their kingdom - either it is now your kingdom, or(much more likely) it is part of the kingdom of whatever king you are under. When kings win battles they reward the best of their un-landed supporters with some of the taken over land, those people then become lords and are expected to build a castle (or take over an existing one if it wasn't too destroyed and culture allowed it) on their new land as part of their efforts to hold it for their king.
Wow. For those who don’t know, here’s a pseudocode implementation:

Median(list) {
let len = length(list)
if len % 2 == 0 {
let x = floor(len/2)
return (list[x] + list[x+1]) / 2
}
return list[len/2]
}

Note: assumes the list is already sorted.

Managed to resist calling is_odd there!
Scale AI CEO says China caught the U.S. with the DeepSeek open-source model
Could be for phishing. Is the SAAS in a domain that involves money (payments/crypto etc) ? Then even more likely so. I would drop those redirects at my webserver level. Easy to d0.
Latest Node can run TypeScript: https://2ality.com/2025/01/nodejs-strip-type.html
But not in the UK or EU.

Need I say which law protects us..... the one a significant number of HN readers (a technical news site!) appear to remain in shocking ignorance of?
> But there is a simpler path. You write code yourself. Sure, it's more work up front, but once it's written, it's done

Well, assuming you wrote it perfectly and didn't introduce any security vulnerabilities... that you will never be alerted to, because no one else is reviewing your code.
> They might not know the exact problem or language, but they should know enough to guide the LLM.

I was in this exact situation. I worked with an unfamiliar area with a hardware SDK in C that I needed to rewrite for my runtime, or at least call its C functions from my runtime, or at least understand how the poorly written (but working) example SDK invocation works in C by commenting it. The LLMs failed to help with any of that, they produced code that was 1) incorrect (literally doing the opposite of what’s expected) and 2) full of obvious comments and missing implementetions (like “cleanup if needed” comment in the empty deinit function).

Later it turned out there is actually an SDK for my runtime, I just failed to find it at first, so the code the LLM could use or tell me about actually existed (just not very easy to find).

Those were two top LLMs as of December 2024. It left me unimpressed.

I don’t think I would be compelled to guide them, once I understood how the code works it is faster to just write it or read relevant reference.

My friend, who volunteered to waste those precious tokens to help with my project, does use chatbots a lot while coding, but he’s more of an intermediate than senior developer.

> Just asking for variable name suggestions is pretty useful.

I can’t see myself asking anyone, much less an LLM, for the name of a variable. I am known to ask about and/or look up, say, subject domain terminology that I then use when naming things, but to name things well you first need to have a full picture of what you are making. Our job is to have one…
I think people have had success with using PaliGemma for this. The computer use type use cases probably use fine tuned versions of LLMs for their use cases rather than the base ones.
Can confirm. This just happened to my team at work as well. Had to urgently update to "fix" a vulnerability in the linux kernel that had something to do with bluetooth... on a virtual machine running on a rack mounted server in our own datacenter.

I swear, a lot of the security people are some of the dumbest people in the whole building. I even had to explain to one of them why I can't just skip the forced password change needed after I had to reset their password and sent them the new one. I had to explain to one of the security guys that I must not have knowledge of his password, so he needs to immediately change it. Let that sink in...
IMHO, Rust is a replacement for C/C++, which are not so easy to write correctly.

Rust should not be a replacement for e.g. Go, Swift or Java, which are a lot easier to write and have memory safety.

I wonder who actually needs Rust (as opposed to using e.g. Go) and finds it a lot harder to write than C/C++?
That's what I say when I converse about my colleagues: having a package manager from the start that greatly lowers the friction of adding or publishing yet another package deprives a language's ecosystem from something very useful: a good measure of natural selection.

Add to that a free-for-all/no curation repository situation like pypi, npm or cargo together with a too small standard library and prepare to suffer.
There was definitely some of that before. Ben Franklin, in his autobiography, writes that his Junto, a group of people devoted to self-improvement, included:

"Thomas Godfrey, a self-taught mathematician, great in his way, and afterward inventor of what is now called Hadley's Quadrant. But he knew little out of his way, and was not a pleasing companion; as, like most great mathematicians I have met with, he expected universal precision in everything said, or was forever denying or distinguishing upon trifles, to the disturbance of all conversation. He soon left us."

(from Project Gutenberg's online version: https://www.gutenberg.org/files/20203/20203-h/20203-h.htm; written ~1775? about events in ~1730)
I used Alacritty until about 3 weeks ago, switched to Ghostty. I'm very happy with the change.
Only a Human-Centered AI Approach Offers Real Opportunities for Innovation
I've often thought the same. I would love a depedency manager that not only surfaced this information, but required you to declare upfront what level your library is.

I think it would reign in the bloat.
it should work also in the phone. At least I checked it in mine and it worked... Strange..

Did you try in any other device if you can see it? Could you try to check if you can see this image: https://github-kudos.com/manuelarte/kudos/octocat ?

If you are willing, you could give me a bit more details (maybe the model of your device), and I can try to look what's happening.
Bitcoin has no intrinsic value. Holding Bitcoin as a long term store of value works until people don’t want it anymore. The second it falls out of fashion, you’re Bitcoin horde isn’t even worth the paper it’s not printed on.

To those who say Bitcoin is a revolutionary something something and I don’t get it, maybe that’s true. But as I see it, Bitcoin is only worth what it was last traded at, and there’s no way to predict whether or not someone will want to buy it for more than it’s current value. Thats just not an interesting investment to me, and it feels like gambling, so I don’t want to take participate. I hope your Bitcoin goes to the moon. If it does, send me a postcard from Shackleton Crater.
Any building that is in active use needs to get major remodels every 30-50 years, and less major remodels every 5-10. The whitehouse has had significant changes since 1950, though not to the level of the 1950 changes.
Assigning severity to vulnerabilities is a very difficult problem.

This is exacerbated by the fact that most modern exploits are chains of multiple vulnerabilities.

I think a vulnerability should be scored based on the context where the most damage could be done.
I've also seen terminal misbehaviour with neovim, not using wezterm, including incredibly slow redraws.
Don’t attribute to malice what could also be attributed to incompetence

In this case, seems pretty clear cut though.
If you're looking for a first hire, hire me.