skysight-inc/HackerNews huggingface dataset:
One risk with a bigger standard library is that you'll do an imperfect job of it, then you'll be stuck maintaining it forever for compatibility reasons.

For example, Java developers can choose to represent time with Unix milliseconds, java.util.Date, java.util.Calendar, Joda-Time or java.time.Instant
As of right now the punishment is a warning that if the behavior is repeated the warning will also be. There has to be a middle ground here, difficulty of enforcement can't be the reason to eliminate enforcement entirely.
Is that expected to last though? As far as I understand, the reason Twitter got popular for all the "culture war" stuff was because there was more people engaging with it there, otherwise they would have kept themselves to Social Truth or whatever it's called.

These people thrive on reactions, if there is no reaction to what they say, they'll get bored and move over to the place where the people who'd react is.
What are these services if not "stuff people want to see"?

Call that bias if you want, but that's all they are.
It's hardly the case that a good reason to not have a more complete standard library on the basis of having to do a tiny bit more work in a more special case to get binary sizes down.
The flex is probably because they are 15 and a bit immature.

An anecdote - I used to be the lead for an infotainment security program for a well known manufacturer. They would send me to a lot of small security meetups and training. One in specific was a security training event for some HS students, which I would define as gifted. There were roughly 40 of them, from 14 to 17 years old, and they were all extremely impressive in things ranging from reverse engineering applications to assembly code all the way Linux systems stuff.

Something like this would have been easy for them - I mean the basics of this is that the attacker sends a message to a discord/signal user and then sends a request to a Cloudfare server. Not exactly splitting atoms IMO. What I think is special about this 15 year old in question is the epiphany that it might be possible and then giving it a go. This is the true hacker spirit.
Please cite the LGBTQ oriented communities you are part of where it is considered polite to quiz people about their genitals.
I have friends on Blue Sky that I first met online on IRC in the 1990ies. You just keep migrating and finding your people over time, I guess.
In the end, the only thing Musk has done is cripple the spam filter of twitter.
It is a matter of quality over quantity.

Disabling or limiting comments does not improve the quality of the comments.
You may not like this answer but the best starting point is to define marketing in the particular context and market in which your product exists. Marketing is so highly contextual that sometimes I don't even like the word.
IMO it's a mixed bag. Being able to start the process from further away than your key fob is an improvement because it can get actually warm if you're walking to it rather than it just have a minute head start which at idle doesn't always get the engine warm enough to be nice and toasty.

For electric vehicles there's also benefits when charging because you can actually leave your vehicle and check if it's charged while you eat/shop/walk/etc to kill the time.

Then if you have kids that drive but don't have their own vehicle yet the location and speed tracking a lot of these apps provide is probably a big plus to them too. I'd certainly feel more comfortable with my kid using a car knowing I can find where they are and that they'll be a bit safer drivers since they can actually be caught speeding, I know I was reckless knowing there was basically no way for my parents to know.

None of this requires collection and storage of location long term but that's companies just following the profit motive of our entire system. It's shitty and bad they're allowed to do it but I'm hardly surprised that they do.
The only thing AI can code is glue code. But that is the majority of what people write these days. I've avoided that kind of work and AI disappoints me every time I've tried it with one exception - text to images.
Intel's compilers are now based on LLVM too.
It could be a combo of 1 and 3: a competitor (or someone who thinks they might be in the future) ages those domains, then points it to their own product later.
A poorly run government may be an end goal itself for the current administration
> Or maybe someone can explain why a researcher would leave a platform with 100x the reach

Not everyone is out after "widest reach", some people just want to have reasonable discussions about things, without overly emotional reactions. Those people have been migrating over to Bluesky since you can actually have dialogues and discussions there without it derailing instantly.
We already have 4chan/8chan for that.
Blame! https://tvtropes.org/pmwiki/pmwiki.php/Manga/Blame
IMHO there are plenty of available and cheap .com domains but you have to be creative. From my experience ai tools aren't creative enough for coming up with unique and good sounding names.
>Which is why quite a few bridges in the US and in Europe are in critical state and collapse from time to time.

Bridges aren't comparable to buildings.
The standard is the actual deployed base, not the book it's written in.
I find this American style of leadership fascinating. It is certainly easier than the Dutch style of endless meetings and giving everyone a say.
System: "You are a senior staff security engineer and researcher. Use the latest techniques and the internet for any new techniques to find any vulnerabilities in the code below. Do not give any explanations, only the fixed code"

User: { AI generated 1600 line handler "getUsers" with sql injection, n+1 queries, an exposed secret, plaintext passwords and credit cards, and lots of unused variables }
Ha that never even occurred to me because I've had the Subaru Starlink for years.
the key was my naivety as a 22 year old. I honestly didn't know any of the reasons why it couldn't work!
Literally never had this issue on X.
The maintainer said that LLVM has 10M lines of code making it too hard to improve, so he's building its own.
That sounds weird to me: but good luck I guess?
I've heard this argument about spell checkers in Word, browsers, etc as well.

Anecdotally, I wouldn't be surprised if there was some truth to it: in the early 2010s I saw tons of people saying "defiantly" that meant to type "definitely", and I couldn't figure out why. Then I misspelled "definitely" once and saw the spell checker suggested "defiantly", and it finally clicked.

Spell checkers have definitely improved since then (I can't remember the last time I saw the definitely/defiantly mix-up), but I can't help but wonder how bad suggestions have affected the way people understand languages.

A similar phenomenon exists on TikTok with words taking on contradictory or even opposite meanings, though this doesn't seem to be caused by spell check so much as constant incorrect usage rewriting the definition in people's minds (like "POV: you're getting mugged" when it should actually be "POV: you're mugging someone" or "POV: you're a bystander watching someone get mugged").
These clearly aren’t long term subs; The price increases reflect as much. It’s the payperview of yesteryear.
Agreed with the sentiment of the author, but are teams really arguing for pulling in dependencies in the name of security?

I’ve seen the exact opposite — every dependency introduces a new opportunity for vulnerabilities, and to be judicious in pulling in new ones due to the potential security risk.
I believe this post is relevant to HN because we depend upon our ecosystems in order to function as engineers.

This incident has been largely unreported in the US mostly due to the dominance of reporting on the federal government lately.

But this is incredibly relevant and significant.
This is basically CSP no?
What reach? Reaching tousands of bots?
Wow, i vaguely recall using it!
I have a little JS library that has an analogue within cargo which really helps with this: https://www.npmjs.com/package/downgrade-build

It means I can keep my dependency spec broad, because I actually test my releases with minimum supported versions. Cargo has (or maybe had -- I can't find it any more) a similar feature built in.

Renovate will even broaden (rather than replace) dependency specifications, if asked, so if my package works with both the old and the new version then I can make a patch release with the wider dependency spec and not break anything.

(On which note: I can really highly recommend using Mend Renovate to keep dependencies up to date: https://www.mend.io/renovate/ )
That wouldn't be the case if ordinary compilers outputted buggy code 5% of the time like a SOTA LLM does. (I am being quite generous to LLMs here)
Given that it's a DB under the hood, we really need some new terminology to understand what's happening when there's a disc format change. I think that some of these format changes are in fact schema changes, which makes them a bit less risky (but not entirely risk free). I get the impression that after it is considered stable there may still be schema changes.
> Yes, there are buttons. No, it doesn’t support double-tap or long press.

how do you diff between div/mul if not by double tap?
Bluesky has a nuclear block which really helps.
I don't either, but that's because I stopped using Twitter ages ago. It's a very reliable solution to all of Twitter's problems.
Clearly you’ve never worked in the groupthink of academia.
We were always profitable and growing at a sustainable pace, so never needed funding.

Most counter intuitive thing was to not think I was missing out on anything as we didn't have VCs backing us.
This is precisely why well-designed enterprise-grade storage systems disable the drive cache and rely upon some variant of striping to achieve good I/O performance.
Calling All Medical Residents for feedback on our new AI based Scheduling app
Maybe, but I'm pretty sure that thing is not a lot of user's motivation ... at least as far as the discussion goes / their motivation to go elsewhere.

Side note: It is amusing how the current ownership's concern about bots vanished as soon as they took over.
"Democracy is the theory that the common people know what they want, and deserve to get it good and hard." -- H. L. Mencken
Def. I geek out on this stuff, as I am building my own distributed systems. I have had discussions with a lot of people in the space, like Leslie Lamport, Petar Maymounkov etc.

You might like this interview:
https://www.youtube.com/watch?v=JWrRqUkJpMQ

This is what I’m working on now:
https://intercoin.org/intercloud.pdf
I think the main problem with writing nix configurations is the lack of a good LSP. If I hand autocomplete for options, and some kind of global search (e.g. everything related to `postgres`), it would be much easier to use it.
>What irks me is how LLMs won't just say "no, it won't work" or "it's beyond my capabilities" and instead just give you "solutions" that are wrong.

This is one of the clearest ways to demonstrate that an LLM doesn't "know" anything, and isn't "intelligence." Until an LLM can determine whether its own output is based on something or completely made up, it's not intelligent. I find them downright infuriating to use because of this property.

I'm glad to see other people are waking up
I also use inline code generation, but it just seems like a more intelligent version of the code-aware autocomplete my IDE already provides. I love it, but it doesn’t feel like I’m atrophying because I’m still “driving”. It just saves a lot of keystrokes
If the goal is to be lightweight why is it app only and not just a web page?
Charles Phan, Whose Slanted Door Elevated Vietnamese Food, Has Died
Even 4chan have actual bot filters and moderation.
Ditto for any mathematics or applied maths feeds.
It's not cross platform. Does java provide such interface?
> We’re not becoming 10x developers with AI.

Of course not. The ultimate goal of AI is to get rid of the developers altogether and reduce costs (more profits!). You think BigTech are spending hundreds of billions just to make developers more productive while retaining them? That's not a profitable strategy.

The copy/paste with LLM interactive stage is just a transitional stage as the LLM improves. We'll be past that in 5 years time.

No, AIs won't replace all developers -- you still need people doing the systems designs that the AI can implement code for. But it could easily reduce their numbers by some large percentage (50%? 80%?).

Edit: I would no longer advise my kids to get a degree in Computer Science.
Except they didn't. The sats were sensors that relayed data down. Systems on the ground did the calculations. I imagine there was another revolution when proper computers started being put in orbit to do the math locally, vastly reducing the needed bandwidth.
A lot of common POSIX functionality is not missing though. I was able to write ripgrep, for example, by almost entirely sticking to the standard library. (I think the only place I reach out to `libc` directly is to get the hostname of the current system for rendering hyperlinks in your terminal.)

We also came at the standard library with a cross platform mentality that included non-POSIX platforms like Windows. You want to be careful not to design APIs that are too specific to POSIX. So it falls under the same reasoning I explained above: everything that goes into std is treated as if it will be there forever. So when we add things to std, we absolutely consider whether the risk of us getting the API wrong is outweighed by the benefit of the API being in std in the first place. And we absolutely factor "the ease of using crates via Cargo" into this calculus.
"Academia" is not science, and science is not a political bias.
Isn't the US military just a disguised jobs program? A way out for the poor and underprivileged?
But but, but Gruber is supposed to be an Apple apologist according to HN. I am confused…
No I don’t think I agree. There is lots of effort wasted shuffling problems around laterally but not solving for the actual goal, that’s what I am saying.
Yup. It's 2025, internet patterns are becoming clear-ish. Services rise, fall, people move for lots of reasons.

It's the nature of the internet now.
I started using it to get rid of all the moving parts of library versions, moving Debian releases, etc. Everyone has the exact environment locally and there is no confusion.

It has its own flaws, but it was so much better than the alternatives.
Relatedly, we find LLM vision models absolutely atrocious at counting things. We build school curricula, and one basic task for our activities is counting – blocks, pictures of ducks, segments in a chart, whatever. Current LLM models can't reliably count four or five squares in an image.
A pair of matched Y capacitors on a 240V appliance from a single phase supply will cancel each other out. This doesn’t help people with 208V who are using two out of three phases, though.

edit: 120V is not immune. I once worked on a project involving powering equipment in a Faraday case at 120V. The mandatory filter (to prevent the wire from conducting emissions out of the cage) instantly tripped GFCI.

The right solution IMO would have been one of:

a) A better filter that doesn’t pass 50-60Hz. This is doable in theory, but I’ve never seen one.

b) A transformer or other isolated supply outside the cage, with a GFCI inside the cage (to protect the people who may enter to touch the equipment).

c) A transformer outside, not necessarily right next to the cage, supplying the inside with two opposite-phase lines at 60Vrms each. No net leakage! This would require that everything inside accept such a supply, which rules out anything that wants a real neutral.

d) I bet someone could design a transformer with a shield between the windings that would integrate with the Faraday cage. Power would couple in inductively through the shield. Common-mode RFI would have a very hard time escaping, and different mode RFI could be filtered and probably matters quite a bit less anyway.

Of course, the actual solution chosen by the site’s electrical people was rather less classy.
We spent years developing smarter compression tools, but AI has taught us that people actually want inflation tools
Whatever you do, you get better at. Let's not wring our hands and fret over the generation of programmers that don't write assembly anymore.
>You can have conversations about science and technology without weird angry people/bots popping up in the replies and shouting at you

There's a guy on Twitter who posts about AI and has been reposting his Bluesky interactions on Twitter.

Absolutely unhinged people going off on his benign takes. It's hilarious.

People who have moved to Bluesky like to tell themselves it's the "smart place", but it's really just the place where you agree with the politics.
> People will complain that "it's hard to add a dependency to a C++ project"

The way I see it the issue is that it's hard to add a dependency _in such a way that no people will have issues building your project with it_. This is problematic because even if you manage to make it work on your machine it may not work on some potential user or contributor's.

> But that just destroys the OS package distribution model: when I choose a Linux distribution, I choose to trust those who build it.

Distros still build Rust packages from sources and vendor crate dependencies in their repos. It's more painful because there are usually more dependencies with more updates, but this has nothing to do with shared libraries.
> I think low preformers are going to get RIFed

what suggests that's the criteria that will be used for any RIF? seems to me that if you are a low performer but toe the party line that you will be safer than someone that is seen as rocking the boat and constantly pushing back.
> First, I stopped reading documentation. Why bother when AI could explain things instantly?

Because AI doesn't have the latest documentation.
Show HN: ScaleUp – powered growth intelligence platform
I built a tool that helps founders and product teams discover and analyze growth opportunities:

What it does:
• Aggregates and analyzes trending products/platforms
• Provides AI-powered growth insights
• Tracks tech stacks and market trends
• Monitors competitor movements

1. What growth metrics matter most to you?
2. What insights would help your decision-making?
3. Any features you'd like to see added?

Demo: https://www.scaleupweb.com
It's all in how you use it. Copy/paste driven development has long been a meme in the programming community.

For me, AI is like pairing with a very knowledgeable and experienced developer that has infinite time, infinite patience, and zero judgements about my stupid questions or knowledge gaps. Together, we tackle roadblocks, dive deep into concepts, and as a result, I accept less compromises in my work. Hell, I've managed to learn and become productive in Vim for the first time in my career with the help of AI.
Oh, so the Chinese governement is taking time from managing their huge country to stop that particular company from selling its recommendation algorithm.

And you are telling me this is perfectly normal.
Or, the sensors were on the surface and a sat was being used to collect and communicate what they were hearing. A few fixed listening stations, communicating only up to sats, would have had advantages.
The mindset for acquisition is typically anything not core to an agency's mission should be bought on the open market at the lowest price technically acceptable. This tends to select against small businesses who can provide stellar services but can't just cut rates willy nilly for extended delivery time periods.

In effect, government contracting is a large jobs program.
And that is a good thing because ....
I am a huge Taleb fan but how does this relate to the article?
Because the platform with 100x the reach has been "ideologically captured" by one person.
> How are Docker / Python / Rust secure? I don't know any of the people who created my docker images, PyPi packages, or Rust crates.

I know who created the Docker images, because I'm the person who built them!

A lot of the time you can build your images either from scratch, or based on the official base images like Alpine or Ubuntu/Debian or some of the RPM base images, not that much different than downloading an ISO for a VM. With a base, you can use apk/apt/dnf to get whatever packages you want if you trust that more, just remember to clean up the package cache so it's not persisted in the layers (arguably wastes space). For most software, it actually isn't as difficult as it might have initially seemed.

As an alternative, you can also look for vaguely trustworthy parties that have a variety of prepackaged images available and you can either borrow their Dockerfiles or just trust their images, for example, https://bitnami.com/stacks/containers and https://hub.docker.com/u/bitnami

Most likely you have to have trust somewhere in the mix, for example, I'm probably installing the Debian/Ubuntu packaged JDK instead of compiling mine in most cases, just because that's more convenient.

Also, rootless containers are pretty cool! People do like Podman and other solutions a lot, you can even do some remapping with Docker if there are issues with how the containers expect to be run https://docs.docker.com/engine/security/userns-remap/ or if you have to use Docker and need something a bit more serious you can try this https://docs.docker.com/engine/security/rootless/
>I havent seen any data that shows the people who RTO and "stay" are bad at their job

Who would pay for a study like that? There's little chance it would yield positive results, and would likely just serve to cause embarrassment for the funder of said study.
Whatever their plan - if you have a trademark or similar IP protection on "Example", that might be prove extremely useful here. (If not - consider getting some protection ASAP.)

It's been a while, and IANAL - but I've seen both domain resellers and registrars cave pretty quickly when contacted with "that name very obviously infringes on our trademark".
Well, without being a neurologist, I assume at least the part of the brain that connects directly to the optical nerves (which is however not the visual cortex) has more or less an exact representation of what your eyes are seeing. So you'd probably need to stimulate that instead...
Yes. But still you’re going to make AI tools anyway… ffs.

I think AI is just giving cover to all the incompetent people in your org, and in fact will create more incompetence via the effect you yourself noticed.

Eventually you’ll find many if not most of your coworkers are just wrappers around an LLM and provide little additional benefit—as I am finding.
It’s part of his higher-level framework called Canvas.

Check this out: https://joelgustafson.com/posts/2024-09-30/introduction-to-c...

And this: https://github.com/canvasxyz/canvas
Thanks! I've updated them and they'll be published as a book (+ released online) this year.
Go and the C linux world have sold me on the fat library philosophy. You brought a library to solve a problem in a domain, then add your specific bits. You don't go and bring a dependency for each item in your check list. Yes there may be duplicate effort, but the upgrade path is way easier.
https://www.forbes.com/sites/markjoyella/2024/01/09/elon-mus...

https://www.cnn.com/2025/01/06/business/x-banned-a-journalis...

https://www.businessinsider.com/elon-musk-x-twitter-account-...

https://apnews.com/article/elon-musk-technology-business-dac...

https://www.businessinsider.com/free-speech-censorship-elon-...

https://www.msn.com/en-us/news/us/musk-tried-to-punish-criti...

Should I go on?
> I don't think anyone says you should just casually ship bugs.

I'm not going to link to it, but there's an old post from someone here, that pretty much sums up the zeitgeist.

They say that if the code quality on your MVP doesn't physically disgust you, you're probably focusing on code quality too much.

That is, quite literally, making the conscious decision to "casually ship bugs."