skysight-inc/HackerNews huggingface dataset:
Asahi Linux has come a long way. I think the only finicky thing I dealt with was Bluetooth audio so switched to a USB DAC which works fine, and they don’t have hdmi over usbc working yet, but the hardware hdmi port works fine. (edit: just realized they are not up to m3 yet, just m1/2)

Besides that the fedora gnome desktop has won me over, I was able to install everything I wanted from the software app (logseq, gnucash, thunderbird, filezilla), stable as a cow

A couple of QoL wins against macOS (besides coming with a package manager {even windows has winget now!} and, you know, being free): they’ve combined the functionality of Spotlight with Mission Control/alt tab, just tap cmd and switch apps or search for app/file/setting. I cannot reacclimate to having two different shortcuts on Mac now. Drag window to the side for split screen or top for full screen works fine. The other is small: when I mouseover the volume slider in the taskbar I can scroll to control it. Mac does not, have to click and drag. Call it a finishing touch.

I liked it so much I slapped an SSD into a 2014 Intel Mac mini (can you believe we had gigabit and usb3 over 10 years ago?) and put fedora workstation on that too. Truly the year of the Linux desktop (for me anyway).

EDIT: oh yea! Only other annoyance is Signal doesn’t work on either! Electron builds fail for aarch64 (not asahi’s fault) and even on x86-fedora it throws up warnings that it doesn’t know what secure keychain to use, would I like to store database plaintext? Uh, no! I’ll just go back to email ffs
I have an M1 mac with Asahi Linux and Hyprland, and I just love it. Its sleek and powerful but has the freedoms of Linux and I hate that MacOS feels like playing in a padded room. Like wth is up with Finder? Its awful. But if I ever need photoshop or w/e, I just boot into the Mac partition and call it a day.
Government so small you can drown it in lake Tulare
Can you say more about where the "3 out of 4" comes from? I'll admit that I've worked on hiring committees in exactly four places, so it's been a straight 0 out of 4 for me. (One at a small liberal arts college; one at a tech consultancy; one at a state agency; another one at at govtech consultancy.)

We can haggle over how many is enough to make a sweeping generalization, if you'd like. But I don't think that's productive for any of us if we want to debate whether loyalty tests actually existed, or whether "DEI" reduces to religion, as the parents have claimed.
Early C# often depended on libraries that were MS-specific, partially native code, and are often no longer even available.

This changed around 2014-ish, as a result C# has been really stable for a decade.
site returns a db error for me

edit: working now - https://archive.today/Ly7Jv
From https://news.ycombinator.com/item?id=29141796 :

> There are a number of options/equity calculators:

> https://tldroptions.io/ ("~65% of companies will never exit", "~15% of companies will have low exits", "~20% of companies will make you money")
It's a tool, and just like other tools, it multiplies human labor and intellect.

I don't need to spend a decade becoming proficient with a pocket knife, and then another decade becoming an expert with an ax.

Instead, an experienced person can show me how to be safe with a chainsaw in an afternoon.

I won't be an expert with the chainsaw, that still takes many hours of experience, but I don't need the knife and ax prerequisites.
Many years ago Apple added twitter support at the OS level. At that moment, they chose to become an ad network instead of a technology company. The hardware is very nice of course and just like you it’s the only reason I stay.
C# is my second favourite language, despite it being OOP first. My personal fav is F#.
This is Hacker News. Go post low effort comments somewhere else on the internet.
Seagate responds to fraudulent hard drives scandal
> Making “move” and “destroy” distinct operations increases the flexibility and expressiveness.

No, it does not. It's an artefact of the evolution of the language and highly undesirable. Rust has destructive moves (and copies built on top of moves, rather than the other way round) and it's far cleaner.
I’m surprised they didn’t mention the reason that the rejection sampling method is surprisingly fast: the probability of needing to resample N times decreases exponentially with N. So even for the 3D case, where 50% of your samples get rejected, the EV for number of samples required is about 2.

This is also a good case study on the difference between throughput sensitive vs latency sensitive applications. The rejection sampling is fast on average, but the analytical solution likely has a much tighter upper bound on how long it can take. In a throughput application you care about EV. But if you need to minimize latency, then you care about the upper bound.
The Flagship 18A Intel Xeon Clearwater Forest Just Moved
We were doing an integration with a partner for our customers, and the contact I was working with insisted on using some OpenSSL primitives that were exposed in PHP:

(a) they reversed the public + private parts of the key, and were upset when I communicated the public part of the key in cleartext

(b) they speced that the string being encrypted could not exceed 8 bytes ......

I tried so very hard and very patiently to explain to them what they were doing wrong, but they confidently insisted on their implementation. To deter fellow devs from trying this, I left loud comments in our code:

> So these guys are totally using RSA Crypto wrong. Though it's a PK Crypto
system, they insist on using it backwards, and using signatures to send us
cateencrypted values, and we send encrypted values back to them. It's dumb. I
suspect someone read through the PHP openssl function list, spotted
RSA_encrypt_private and RSA_decrypt_public and decided to get overly clever.

> This consumes a public key, and uses it to 'decrypt' a signature to recover it's original value.

> To further deter use, I will not add additional documentation here. Please read and understand the source if you think you need to use this.
I didnt understand the point he was trying to make about trusting a public key from a remote server. At somepoint you need to trust some third party public key if you want to send them encrypted data and verifying ownership is kinda left to user. Hell even signal does that, who is really checking their contact security numbers to make sure the signal server didnt send you some bullshit...
You’re not going to like this but: it’s a matter of perspective. You’re right and wrong at the same time. Call that classist if you want
Not sure the IIvx was ever the top of the line, more like the butt of jokes. The 68040s were out in Quadras already, and this was a hobbled IIci. I remember we got it when they were slashing prices near the EOL, which is what made it a decent buy.
What's your Google Photos replacement? My key use is that it recognises my son and automatically shares all pictures of him with my wife, it's very convenient.
This, alongside side the footage and mic of him signing EOs he neither wrote nor know what they are, really make it seem like they're just keeping him occupied.
Mark Zuckerberg teases a 2025 return to 'OG Facebook'
Apparently we just need to water the tumbleweeds and keep them green. I wish I were making this up.
> Need to quickly put together an application that supports enterprise OAuth?

????

That's super easy. I added support for Clerk's OAuth to our app in literally 10 minutes. It was as easy as:

> token, err := jwt.ParseString(sessionToken, jwt.WithKeySet(r.keySet), jwt.WithAudience(r.audience))

JWT is from `github.com/lestrrat-go/jwx`

I'm not sure about SAML, but at this point it's probably best to not even touch it.
I assume 100% of redheads like me have it.
Ask HN: How would you go about implementing a NL tool to gather insights?
I’ve been tasked with building an application that converts high-level natural language queries into meaningful insights from a database. The database consists of multiple tables that can be joined using a transaction ID. My current approach involves using GPT-4o to generate Python code based on the user’s query, which is then executed locally to extract insights (be it records, or graphs related to user query).
While the approach is sorta okay, I encountered an issue during a POC demo. One of the example queries resulted in incorrect results—the model used pd.merge but ended up performing a cross join, inflating the record count from 50k to 5 mil. Additionally, when queries are too high-level, the generated code often doesn’t yield the right results unless I explicitly specify which tables to use, which ideally shouldn’t be necessary.

To guide the model, I include a summary of the database schema, explaining each table and column, along with the user’s query at the beginning of the prompt. However, this doesn’t always lead to accurate Python translations.

Any idea how to better approach the problem? This tool is meant to be used by high level execs who have little to no CS knowledge. Also I'm restricted to OpenAI models for this.
Yeah it's a bit of both. Last thing gamedevs in industry wants is a bunch of players hounding them over things they 99.9% cant control anyway. That's why any devs that reveal themselves are long gone from an older game, perhaps not even in games anymore.

And yes, the NDAs on a game are bizarrely strict. For B2B stuff like engines and tools, they usually don't care too much what you discuss as long as you don't make a show out of it. For Game studios, you basically cannot say much more other than "I work here" in public unless you're PR.
>you're literally trying to tell me that racism is equality and okay.

Where did I say that?
* excluding payroll tax deductions, both personal and employer paid (which is effectively still a tax you're paying). They also pay sales tax, which isn't an income tax per se, but when you have to spend every dollar you make to survive, it might as well be.

Everyone contributes.
> didnt understand the point he was trying to make about trusting a public key from a remote server.

What stops the server from swapping SyttenPK for NSA PK?

The operating word of the quote was "just".

> Hell even signal does that, who is really checking their contact security numbers to make sure the signal server didnt send you some bullshit...

Their latest code commits include key transparency, which is one good way to address this problem.
An acre is a weird unit, but people in the US have a general sense of how large an acre is
The majority of games run well on linux. I've had exceedingly few issues. Between Steam/Bottles/Lutris/Heroic and more, the vast majority of games work with no effort.

The only reason I don't always play on Linux is games with an anti-cheat that doesn't like Linux and not having access to a some Nvidia software like DLDSR and RTX HDR. Nvidia has devoted far more resources to it recently. Linux even has DLSS frame gen now.
What about criticizing a lawless administration, filled to the gills with unqualified sycophants, bereft of empathy, kindness, and all human decency?
The idea that I can't show preference for one thing with out showing prejudice from another is a farce
That's just not an option in a lot of cases, and it's not a good option in other cases.

Like it or not, C can run on more systems than anything else, and it's by far the easiest language for doing a lot of low-level things. The ease of, for example, accessing pointers, does make it easier to shoot yourself in the foot, but when you need to do that all the time it's pretty hard to justify the tradeoffs of another language.

Before you say "Rust": I've used it extensively, it's a great language, and probably an ideal replacement for C in a lot of cases (such as writing a browser). But it is absolutely unacceptable for the garbage collector work I'm using C for, because I'm doing complex stuff with memory which cannot reasonably be done under the tyranny of the borrow checker. I did spend about six weeks of my life trying to translate my work into Rust and I can see a path to doing it, but you spend so much time bypassing the borrow checker that you're clearly not getting much value from it, and you're getting a massive amount of faffing that makes it very difficult to see what the code is actually doing.

I know HN loves to correct people on things they know nothing about, so if you are about to Google "garbage collector in Rust" to show me that it can be done, just stop. I know it can be done, because I did it; I'm saying it's not worth it.
Great example. Thank you. Can confirm that none of the Gemini models warned about the exception without prompting.
Ahh yes, AKA The Devil. From the Bible. Big fan of his work. /s

Yeah, it sucks. Some people can't separate the grunts just working on features from the suits up top who manage a lot of the things they actual hate. Don't shoot the messenger.
(Most) water rights in California work on what's called a "prior appropriations" system: everyone with rights is ranked in order of priority, and those with priority are allowed to exercise their full rights before the next person can exercise any water rights.

There's a separate issue where the nominal water rights in any given year significantly exceeds the amount of water available, so some people are left with no rights they can exercise and they're forced to buy from others. Further, the full natural flow isn't allocated to the water rights system. Roughly 60% of the natural flow goes towards so-called "environmental flow" to prevent various ecological disasters like salinization of the San Joaquin delta or extinction of various fish.

Farmers would generally like more water to be available so that they can exercise their water rights and they either don't understand or don't care about the consequences of diverting the already-limited environmental flows.

This is actually in the name of the EO being discussed here: Putting people over fish, which inverts a popular rallying cry for people opposed to environmental flows.
So sad, hopefully we don't have this one blamed on Obama and DEI.
Never mind the biggest capitalist in the world – it's the glaring conflicts of interest that smack me in the head here. I grew up in a middle-income Southeast Asian country that built a whole lot of infrastructure projects while I was growing up and this is _still_ an absurd level of corruption to me.
games is a terrible example here, basically everything runs perfectly fine. If you use Steam, there is absolutely no perceivable difference or inconvenience to speak of. The only argument to be made in this department is proprietary kernel level anti-cheats. Other than that, its download Steam -> install game -> click big green play button. I have like 500 hours gaming on Linux, from indie titles, to triple A games on day one (every fromsoft game, baldurs gate 3, even Genshin impact etc...) I have a Mac and the gaming selection is abysmal.

The other thing is hyper-specific and proprietary peripherals, but even then, most things work well. I have multiple drawing tablets for example, and these guys even release Linux drivers these days.

If you specialize in using Microsoft Office daily, or Photoshop, then sure... but thats not most people.

Besides that, you don't need to be super absolutist about it, you can throw Asahi linux on a mac, or an older laptop/pc. Its not all or nothing.
If all labour is displaced, where will our capitalist overloads find more income? Can’t be government because we’re being taxed now, but won’t be once unemployed.

We need jobs so we can continue to be fleeced.
The global AI race: Is China catching up to the US?
https://archive.is/LcKLF
Plenty of people experience a net loss after paying for the goods, services, and amenities required to keep themselves and their families alive.
I was excited about PowerShell at first but after doing a mid size project it, I don't like it anymore. It's such an odd language with too many quirks once you get serious. I think they would have been better off using C# syntax.
OT: How many tokens are being consumed? How much are you paying for Claude APIs?
https://archive.md/20250131205741/https://substack.com/home/...
I still prefer Go, for its first-class lightweight threads. They make _everything_ so much better to debug, compared to async/await that is available in C# and Kotlin.

That being said, Java has recently released Project Loom, but it's poorly integrated and often causes subtle issues. It'll require a couple more years to mature.

C# doesn't have anything like this for now.
Never heard of plocate but I thought fd a step down from find; it's very limited in functionality, colorful output alone can't justify that.

> [It doesn't] follow the convention of many other CLI utilities.

Because unlike other CLI utilities, find evaluates an expression specified as arguments. Maybe a small DSL like JQ would be better, but how would you embed shell code in it? Meh.
I read it after college when I first started working with Rails 1 after I joined a friend’s company. Funny to think that was almost two decades ago. I still remember the quirky art style, although I will admit to preferring a more prosaic book when I learned the language. But it was a fun community and the sense of creativity was really apparent.
For reference, the lease for BOEM OCS-A 0499 lease cost around a million dollars for the winning bid a few years earlier[1]. We're way off on their claim. Even if they had 20x these leases to write down it's still a small percent of the claimed loss.

[1] https://www.boem.gov/sites/default/files/documents/oil-gas-e...
Even Unreal Q&A's get thin once you start looking into features deeper in the engine. Epic's campaign to make the common dev afraid of C++ seems to have worked with ablomb. Maybe there's some closed off sections to look into, but I sadly don't have access to that anymore.

I can't imagine much knowledge out there on Rust gamedev atm. Truly a trailblazer. At that point your resources are more about community discords and arguing in github issues than anything casual.
Yes I’m really impressed with how nicely the installer works and able to choose on boot. Brings me back to my boot camp days of triple wielding. Maybe someday now that windows is on arm…

I think I read a blog of theirs to the effect that the apple developers clearly made a choice to leave the opening in the secure boot chain to allow for a separate partition to install, giving them a hat tip, it would have been easy to lock out alternate OSes (Windows secure boot with bitlocker does) but Apple lets you have it both ways.

I word of warning for others - I did manage to fubar my install when I wanted to undo it, I didn’t pay enough attention and deleted a partition I wasn’t meant to and got in a boot loop. Following recovery to reinstall macOS worked fine, just had to blow away my macOS partition, so, you know, back it up if you don’t want to lose it :)
… or any code?
Tiger Population Doubled in a Decade
There's no right, there's no wrong, there's only popular opinion.

unwelcome opinion will be flagged or grayed out by popular free will

popular truth being repeated and circular referenced

witness almost everyone in here repeating 'xinjiang' 'tiananmen'
calmly and disharmonious opinions down and going gray is like experiencing some dystopian scifi stories

that's why i love HN so much, i can't see such view in X or reddit, there're only religionary yelling, the intellectualism here is the punch line
The calculator has allowed anyone to do complex arithmetic while they're holding a calculator, required by a job or some other formal or necessary context. At the expense of retarding most people's ability to do everyday math at places like the grocery store, a context in which they won't have the wherewithal to pull out the tool. It has not increased intellect regarding anything but rote keypressed calculation.
And that policy directly led to the deaths earlier this week. The ATC was clearly not a White male from the audio.
How is c an advisable/respectable choice for a web service & cloud orchestrator system?
The more nuanced message is maybe don't write crypto code without having spent the right amount of time to understand the challenges. If you don't know about timing attacks, you aren't familiar with the many historical mistakes that are well known, you don't know any theory around ciphers or hashes, then you probably shouldn't be writing crypto code that is used to secure anything important. There are a lot of ways to get up to speed (Coursera's cryptography courses from Stanford, books etc.) to at least wrap your head around why this is a problem. Even the experts go through peer review cycles because they know how easy it is to make mistakes.

In other news, don't print yourself a motorcycle helmet on your 3d printer, don't make your own car tires, don't make your own break pads. I mean if you really know what you're doing maybe.

EDIT: I have some personal experience with screwing up some crypto code. I won't get into all the details but I was overconfident. And this was after taking graduate level cryptography courses and having spent considerable time keeping up to date. I didn't write anything from scratch but I used existing algorithms/implementations in a problematic way that left some vulnerability. This was a type of system where just using something off the shelf was not an option.
It's, um, interesting how they decided to make the site logo stick in the top corner. Kinda like a phone screen notch, but worse.
s/Encryption/Security

Roll-your-own cryptography is definitely the worst of it, but even developers that use strong crypto libraries end up misusing them quite often.

I have worked on a lot of custom made web software, and I could count the number of in-house authentication or authorization systems that didn't have glaring issues on one hand.

After nearly 12 years of working in this field, I would consider myself extremely knowledgeable in web security and I still don't think I'd be comfortable writing a lot of these types of systems for production use without an outside analyst to double check my work. Unless you're a domain expert in security, you probably shouldn't either.
The current best effort at curing HSV by way of gene-editing out the latent virus from infected cells is being conducted by the Fred Hutch center. You can donate to their research here:

https://secure.fredhutch.org/site/TR?px=1802786&pg=personal&...

In the meantime, taking anti-virals will reduce the risk of alzheimers:

https://pmc.ncbi.nlm.nih.gov/articles/PMC8234998/
Respecting robots.txt can be overridden.
> In Smalltal, you interact with your code through an code browser that is part of the system.

small spelling mistake: Smalltal → Smalltalk
Health and climate information disappearing from federal websites