skysight-inc/HackerNews huggingface dataset:
Seemingly we have also forgotten the pain brought by session cookies. Applications relying on session cookies typically broke when users opened several tabs and switched between them, users used the browser 'back' button or accessed the system with two devices simultaneously. It was difficult and required a lot of discipline to write a good application with session cookies. At least when you use them for more state than just authentication data.

I for one am very happy that we have passed the age of session cookies. That doesn't mean that everything is perfect now, but applications generally work better than they used to do before the JS+API pattern.
I have a love hate relationship with rails.

I think rails is quite powerful and great for prototyping. But I’ve noticed lots of rails developers optimize so heavily for making things DRY, they make the most hard to debug monstrosities full of meta programming all so they could write a thing one one line of code instead of 3.

Still for starting out it’s pretty awesome.

If your company grows enough that you have legacy data models that no longer fit the designs demanded by customers -
First: congratulations, that is awesome.
Second: you are either going to want to be very careful how you add new things to your legacy data models, and how you define your boundaries, OR consider migrating off rails. If you start just slapping things on whatever data model is most convenient, to keep up with demands from product, you are going to be in a world of hurt that will take exponentially longer and longer to get out of.
SAML is much, much worse than OIDC.

https://news.ycombinator.com/item?id=28080553
I think the author is not aware that most modern apps don’t interface with traditional files. Many modern apps rather use S3 with presigned urls.
But this is exactly my point. Those apps exist, and are popular. But they can't use NFC because of Apple's limitations on hardware APIs. So, QR payments are popular.

All those apps would use NFC for many of those use cases if they could. Which brings us back to the start of this discussion: which use case has QR payment, but not NFC (and thus requiring a camera in addition to a NFC chip in a smart watch)? Answer: the huge (international) market of non-NFC payment/ticketing apps.
Same experience - people are getting hired, just not me
Everything is copyrighted in some countries. The swiss urheberrecht is generated automatically upon creation of the object. You dont have to add © or add it to a register. You cannot transfer the urheberrecht, only usages of your object.
> Concorde at least made more money than it cost to operate (and maintain).

This overlooks development costs. Wiki says:

> Delays and cost overruns increased the programme cost to £1.5–2.1 billion in 1976, (£11–16 billion in 2023).

That is an astonishing price for 20 aeroplanes!
Oh, but they do! There used to exist a boatload of malware on Android disguised as common conscience apps, famously flashlight apps/widgets.

As a random example, see this one ( https://www.welivesecurity.com/2017/04/19/turn-light-give-pa... ) which is a banking trojan cosplaying as a flashlight widget.

Now there is a more or less sophisticated permission system which users then bypass by still accepting any prompt if you promise them anything shiny...
Act like a reasonable adult and people will be nice to you and call your by your given (or chosen) name.
Ironically I think you’d be more likely to go to space on such a planet. Imagine being barely able to jump, let alone fly. You would want to leave more than anything. It would be like a space race, against the universe.

I’m imagining some sort of mega cannon or railgun as a propulsion method to fling them off the planet.
Author is wrong but it would take me whole blogpost of its own.

No cookies are not gone because of GDPR.

You can have JWT token in a cookie. Having it in local storage is bad practice and it should be in http only cookie.
So no global xPhone/grok soon
Ask HN: Building Software with ADHD?
Hey!

It's been 4 years since I started programming. I went through the german apprenticeship system for the first 2.5 years, got my degree and am working as software developer since. Currently I am the lead developer of a small 2 man startup that is somewhat profitable. I am adding this so you can judge my experience better.

For the first years of learning I jumped from language to language (because I really like learning new languages). I mainly do web development but after a while of doing so I quickly got bored with it. At least the high level stuff of bulding API routes and frontend related functionality. I wanted to go deeper and learn more.

I am active in multiple dev communities and heard often that it's good to build stuff from scratch to see how it really ticks.

This made me want to build a HTTP server myself.

This is where my issue starts:
I have read about 150 pages of RFC standards regarding the protocol and got extremely overwhelmed. I cant make out on where to even start. After 2 days of reading man pages and trying stuff in C I managed to connect to a socket and make it listen to pretty much anything that was coming my way.

This is where I lost focus. I would have to read the HTTP RFC again and again because I either already have forgotten what I have read, or distracted myself with something. Sometimes I have to read pages 3 times to even somewhat understand whats written on there.

This issue translates to pretty much any bigger project I start. I cant focus on "difficult" implementation details. I quickly lose motivation to continue a project, once I struggle or find something shinier.

In 4 years of programming, the only "big" projects I have finished were for work, because its harder to distract myself in the office and I actually get paid for working on these projects which keeps me motivated.

How are you guys, if you have ADHD, handling these things? How can you bring yourself to work on the same project for more than 2 weeks?
Asking whether someone should be free isn’t just about human rights

It’s also about self-determination. We can keep asking about the latter down to the individual level. It very much depends on context.
This is exactly how it use it too
So when they said they would run the government 'like a business' they actually meant a Private Equity hostile take-over informed by 1970 McKinsey consultants.

It's day 8. Good luck all.
> That's a broad statement.

It isn't. Anyone who does software development for a living can explain to you what exactly is the day-to-day work of a software developer. It ain't writing code, and you spend far more time reading code than writing it. This is a known fact for decades.

> If the IDE checks types and feeds errors back to the LLM,(...)

Irrelevant. Anyone who does software development for a living can tell you that code review is way more than spotting bugs. In fact, some companies even have triggers to only trigger PR reviews if all automated tests pass.
Ya, but Trump is also the kind of person who doesn’t like to be called names but likes calling people names. A lot of people are going to feel compelled to lean into that.

It is going to be a long 4 years.
The main problem is that engineers in the Western world wont get to see the benefits themselves because a lot of Western companies will outsource the work to AI-enabled, much more effective developers in India.

India and Eastern EU will win far more (relatively) than expensive devs in the US or Western EU.
It is a mysterious thing how the influencers of various kind
in software engineering, have to jump from something new to
something new. Even if the "new" new has been created a long
time ago.

Using old systems is in no way fashionable.
Everyone wants the latest whatnot on their resume to be more attractive
for future job opportunities.

We are forever stuck in a fast fashion web.

I like to think about typed vs non typed langauges
For a long time they both existed in relativ harmony
(much more so than emacs vs vi).

Then it became the THE THING to use non typed langues.
In part because "having to write the type in the
code was far too much work".

We got young software developers who had never used a
type langauge but who had joined the "church of non typed".

Skipping ahead, some influencer discovers typed languages
and how it solves many problems.
What about that.

Choices are good.
We can make informed choices as to what tool makes the
most sense in the context of what we are trying to solve.
(and its fit with the team and the legacy code etc)
(in (the 'end)
(will (speak we) lisp))
"Rachel Reeves will give a major speech on growth in Oxfordshire today"

I think this says it all about the buckets of salt needed with these announcements.
I haven't even read the article but the way I use this is to familiarize myself with new stuff. You can't plan a system when you have no idea how it's going to work. That's why it's called discovery, you just write code and see how things work, then you refactor or just throw out everything and start from scratch once you feel ready to actually build the thing.

If you just write whatever you happen to come up with and keep it that's just regular code monkeying.

It's also not a technique you use for an entire system, hopefully you're able to plan most things. But maybe a part of it integrates with a complex api you haven't used before, then it's nice to just take some time to figure out how that api really works at a level that's hard to achieve just by skimming the docs.
Yeah a relative of mine had it decades before Covid.

A better term may be "Long Virus" since multiple viruses can trigger it, Covid just happens to be the most recent pandemic.
Isn't decompiling illegal in the US?
You can use whatever editor you like .. some weirdos even use vim.
> 1. AI Spam. I categorized the inbound we got the other day from a job post. Out of 172 daily applicants, we got 22 that looked reasonably like a person, and 150 that were primarily AI generated messages. Which are pretty easy to spot because they're 500 words of tech jargon and rehashing the job description.

Is that not the ideal answer? Those that get to move forward are the one's that just happen to write a message that hits a non-descriptive sweet spot? A fucking Magic 8 Ball
You can't be "exfiltrating data" from an api that you pay for access to. That's just called "using what you paid for". Exfiltration is when you extract internal data that's private to the company.
> Imagine you joined a new team, and they said: our program uses a bunch of XML files as its data format, and that's why most of our business logic is implemented in XPath. Just sit there and ponder that situation for a little bit.

Been there 20 years ago! It sucks at unimaginable levels!
Yeah it definitely needs to be short! Recruiters have way too many applicants so the more succinct the better.
Do you think the people who are suffering consequences that are typically imposed by fascism care for your distinctions that we are not fascist enough?
split async function handle_button_press() {
…
}

This would cause the bundler to inject a split point & know how to hide that + know what needs bundling and what doesn’t. GWT pioneered almost 20 years ago although not a fan of the syntax they invented to keep everything running within stock Java syntax: https://www.gwtproject.org/doc/latest/DevGuideCodeSplitting....
Nowadays you can just use an LLM for translation and rewriting offensive or harassing messages and removing innuendo
Also submitted here[1].

[1]: https://news.ycombinator.com/item?id=42847147
Faulty GPS data sends Garmin watches into boot-loop
> The problem is...well I still don't really know how I should be including that? It's so much easier just to register a session cookie from a login page.

For a webpage this makes perfect sense, where would you securely store an access / refresh token on web that isn't vulnerable to XSS? In a session cookie that is secure & http only...

For native apps though that state might be more annoying to track and a auth token and refresh token is pretty easy to store securely.
As long as a team agrees to have .golangci-version as the source of truth, the people using the tool don't have to worry about having the right version installed, as the wrapper fetches it on demand.

Having the wrong version installed between collaborators is problematic as then they may get different results and spend time wondering why.

Works across branches and projects.
I’m with you on that! It’s such a great middle ground between too bright and too dark.
What extra value does it bring you compared to free alternatives like Notepad++?
I believe it must be US-only then, I don't see it in my european amazon.
> Not getting hurt isn't hard.

Are you certain?

I've done plenty of DIY projects, and as soon as you start using hand tools, the risk goes up, especially if you include cutting or drilling.
Yet the whole world runs on Linux with no issues :shrugs:
Fungi infections can also mess with your taste.
Sounds like how I use Np++
I don't know why the author blames Spring in this.

You can't swing a dead cat in HN without someone saying "just use Spring, it handles session cookies for you automatically"

Likewise why blame JWTs for needing to reauthenticate. Not needing to reauthenticate is JWTs unique selling point.

And I don't think we developers ever knew how to write distributed systems. It sounds like the Weblogic guys did though.
Anyone who suffers from what? Why is St John’s Wort good for it?

I will never watch this type of video, but it sure does sounds like whatever affected @physicsgirl was awfully serious if it left her non-ambulatory for multiple years.

It sounds like maybe you’ve had a positive experience that you might be willing to elaborate on?
> If you thought Sublime was dead, well you couldn't be more wrong! The latest build of Sublime as of this post is "4192" and was released 20th January 2025.

Since a huge chunk of value here is in the plugins (hello, there isn't even a built-in plugin manager, it's 3rd party and still haven't fully transitioned to 3.8 - and this isn’t a nitpick, the fact that it’s not part of the core, and the author went MIA is part of the problem), the release date of the editor itself doesn't determine the state of Schrödinger

> I think the thing to consider is how Sublime is basically "done" software.

Or, you know, take a look at the issue tracker, pick up a couple of dozen issues that impact you (directly or via the plugins that are blocked by these), and realize how far from reality this statement is. Or just look at your own wishlist…

> Sublime is fast. It starts instantly.

But it’s not usable instantly because a lot of functionality is in the slower loading Python plugins, so if you have some shortcut that depends on a plugin, you can’t use it right away…

> But I prefer authoring snippets in XML rather than JSON.
> Obviously, I'm twisted.

Obviously

> have tried Helix and I think it is a lot closer to what I would want from a modern editor

Indeed, operation after selection is much more intuitive, especially when limited to the viewport, but then unfortunately Sublime doesn’t have great modal editing support, and none that would mimic Helix visual-first paradigm

> The key and mouse bindings are what you would expect from a modern editor.

That’s what you’d expect from a pre-modern editor, a modern one should have much more sophisticated keybinding support, for example, you’d be able to pick that great modal Helix or Spacemacs keybinding scheme. And have great searchable help for that instead of having to look into the void trying to understand where exactly that `` contextual javascript keybinding was set and how to disable it.
I agree with you that librarians have a very hard job. I also think from a budgeting standpoint that public libraries overspend on best sellers, but that’s a different comment. Hah.

> I don't think libraries should be sacred.

An old business partner used to ask, “what dies first, democracy or the library?”

Libraries represent democracy and the free flow of information. Their analog nature makes them much harder to turn off or alter than a website. It’s no surprise the new admin called book bans “hoaxes” so they can continue. I fear we may learn the answer to my friend’s question.
If you keep the first thing you happen to write while exploring I don't think it qualifies as exploration/discovery. Then it's just regular code monkeying.
permits depend on location. Big difference between say NYC and unincorporated land in BFE.
Yeah, I think the title of this post and the article are a little tilted… we have every right to say no or not cooperate with something we don’t believe in.
The state of all things Me/CFS is so bad. I remember reading about cases as a child in some boulevard or women’s magazine at my grandmas house, so it must have been about 25 years ago. Seemingly nothing happened since then.

Even the explosion of cases after Covid hit somehow doesn’t lead to change. In Germany many doctors still don’t know it, a lot of them think it’s psychological.

There is some research, but it looks like the study of the promising compound „BC007“ got botched by bad study design, so even after some very promising results in some participants it is likely to get scrapped.

„Hidden disease“ fits it so well, because the people affected „just disappear“, too weak advocating for themselves and with potentially every activity leading to a crash.
Not trying to be rude but the article does a pretty good job laying out some reasons why I pick it.
To echo many sentiments here: Sublime does all I want in a text editor and I use it a lot. When VSCode became all the rage, I tried it but became annoyed very quickly with the loading times and wasted resources, so I switched back to Sublime.
OMG - you mean you are losing sleep over $75? You know how pathetic you sound?
VSCode is just as fast for opening 4 GB log files
Have you tried Zed, and if so, what's your opinion?
No it's not. I mostly find closed source application with clear lines more trustworthy than openwashed software.

I'm a big Free Software supporter. For my personal projects, I only use (A)GPLv3 or later.

However, I have a problem with software which comes with "GPLv3 BUT..." licenses. We have seen how CLAs weaponized against their contributors with rugpull license changes.

Also, Zed was closed source at first. I had beta access to that thing. Then they pivoted to "Open source with closed source collaboration servers" thing, and they claimed rights on anything passing through their servers (collaboration / zed-ai).

When software stops being local-only, being Free Software loses half the meaning, because you can do all the nefarious things on the backend, without people seeing them. "We only send harmless usage data" you may say, but you don't say how you process and which other signals you mix into that data from other sources or data brokers. That's a problem.

Remember Go's opt-out telemetry debacle. The math was solid, it was anonymous, yes. However it was forced opt-out via an environment variable, so the burden was continuously on us, the users.

If the Go team didn't change it to opt-in, I was ready to drop Go as a programming language, like many individuals and companies. Now the telemetry is opt-in, and users have better control.

These things are nuanced. We should be diligent. For example, Eclipse (my favorite IDE for the last two decades) has CLA, but they never abused the power they have, plus that thing is Apache 2.0 licensed. However, Zed's actions, combined with their privacy policy, doesn't inspire confidence, so I don't use it, and share my view about Zed.

If you don't agree that's fine, but pointing fingers like that is not.

As I said, I have chosen BBEdit over sublime 15 years ago, and still use that, and if BBEdit can detect and run any supported LSP OOTB, like magic, Sublime can do the same technically. So they should barrage the bug tracker. It's on Sublime to make it better. It's closed source, so the developer has forced themselves to fix it by making it closed source.
They often flew mail on it as their cargo.
But the plane was more a matter of national pride than something that made sense.
“Sign up for a free trial to see the rest of the job match results!”
https://www.janusproai.net/ This is janus pro website that can be tried online.
Boomers grew up without a filesystem too and things seem to have worked out fine.
You should consider trying it again, it's pretty fast now.
Can't plan what you dont know. That's the point, you discover/explore what you need in order to make a proper plan.
In Zürich the central library is crammed with students. Sometimes it’s hard to find a spot to sit down to study.
if you guys into discovering electronic music I highly recommend cosine.club (created by hurfyd)
> I do not know what was the reason to get rid of session cookies. Maybe the fear of GDPR violations

Just to clarify, GDPR has nothing to do with cookies. GDPR applies exactly the same whether you use cookies, JWTs in local or session storage, some magic session id tacked at the end of every URL or device fingerprinting.
But how much data are those popup based auth sending through? At the absolute most a few MB in a couple calls. Even if it's dramatically slower over IPC it's not going to cause issues.
That figure sounds right - if you're talking about prosecutors being punished.

A survey conducted by the Innocence Project, Innocence Project New Orleans, Resurrection After Exoneration and the Veritas Initiative looked at five diverse states over a five-year period (2004-2008) and identified 660 cases in which courts found prosecutors committed misconduct, such as tampering with key evidence, withholding evidence from the defendant or coercing a witness to give false testimony. [..] Of the 660 cases examined, only one prosecutor accused of misconduct was disciplined.

https://innocenceproject.org/why-holding-prosecutors-account...
The state of "super fast inference" is frustrating
I am talking about the 3 providers I know of which claim super fast inference: Groq, Cerebras and Sambanova. Every one of those claim extremely fast multi hundred tokens per second inference speeds on reasonably large models. Every one of those also have a chat demo on their website which seems to confirm their proposed numbers

However, for many months now, each of those providers have literally the same API page where only the Free option with low rates is available. Everything else is "Coming Soon". No updates, no dates, no estimates, nothing.

Come to think of it, there is not a single good inference provider in the whole open source models space that offers a paid API without throttle in over 50 tps consistently. There's money to be made here and surprisingly nobody is doing it aggressively
Germany has had a "blanket" fee per household for ages [0] and of course, people are pro or contra, and of course it has changed over the years and went from strictly tv/radio/car stereo to also include internet "transmissions".

The devil is in the details, as usual, and I've never gotten why they don't simply scrap this extra thing and take a (small) percentage of taxes. Either you argue the public national tv/radio is a common good that can be publicly funded, or you don't.

[0]: https://en.wikipedia.org/wiki/ARD_ZDF_Deutschlandradio_Beitr...
Indeed, I have a physical CDROM of the Tru64 source. It's interesting to look at.
I'm always up for trying new or old text editors, but they must have certain features that work out of the box for me to even consider them. A few clicks are fine, but I don't want to edit configuration files. In 2025, remote development support is a must for me.

Sadly it seems that Sublime doesn't do that yet
And the one in DC is now an Apple Store.

https://www.apple.com/retail/carnegielibrary/
Sometimes it's also nonsense. Keeping an old energy-hungry 50's refrigerator or driving a 25mpg volkswagon beetle doesn't add up.
> where I'm going to discover new music

You can use services like listenbrainz or last.fm.
Most ToS are fairly similar, so I can't tell if this is from it actually having read the Spotify ToS, or from guessing ("hallucinating") the ToS based on what Spitify does.