skysight-inc/HackerNews huggingface dataset:
Not literally: "Medicare and Social Security benefits will not be affected, nor will any programme "that provides direct benefits to individuals", including Supplemental Nutrition Assistance Program, known as SNAP or food stamps, the White House said."

I guess the article or link has been updated?
I'm bit surprised that browsers did not get a mention here. They are one of the big examples of how an application can be split into gazillion small processes, split along trust boundaries, while also being pretty performance sensitive applications.

As for transitive deps, I have some hopes for more "distro" like models to arise. In particular I see clear parallels in how traditional Linux distros work and how large faang style monorepos work. So maybe we could see more these sort of platforms/collections of curated libraries that avoid these deep transitive dep trees by hoisting all the deps into one cohesive global dependency that has at least some more eyes on it.
Mine roast:

- Spends so much time talking about Zig that even their keyboard autocorrects 'big' to 'zig'
- Has probably spent more time configuring Nix than actually using the software installed with it
- Could write a PhD thesis on build systems but still can't build a consistent sleep schedule

:D
My father had Parkinson's and in my experience the lack of agency he had when trying to do daily tasks even other than walking was a real mind-killer. He was dependent on my mom (and later caretakers and skilled nursing facility) to do anything like feeding, toileting etc. Obviously when he was later bedridden mostly due to the inability to move, it probably drove him even more crazy.

He decided early on to never get this treatment and I feel sad to this day that he couldn't have lived a happier last few years.
There are over 5000 YC startups, over 3500 of which are still active. For sure some of those are hiring.
That is almost the exact backwards way to talk about capabilities. It is not about "restricting" access, it is about "granting" access.

"These libraries can not access the network." No. "These libraries have not been given access to the network (and by default none are given access)."

From an implementation perspective, this is just passing in access rights as "local" resources instead of using "global" resources. For instance, it is self-evident that other code can not use your B-Tree local variable if you did not pass a reference to it to any called functions (assuming no arbitrary pointer casts). You just do the same with these "resources". It is just passing things to functions instead of relying on globals. The only difficulty is making these actions/resources "passable", which is trivial at the language-level, and "fine-grained/divisible" to avoid over-granting.
Both are relevant! Thanks!
You certainly shouldn't rely on just your phone. If you store your 2FA token in Bitwarden, you can use any of your other devices that you have used Bitwarden with recently.

The 2nd factor is only needed when it's new or occasionally in other cases. I don't know why you say it adds lots of friction, unless you are frequently signing into new devices.

And as a failsafe a printed backup code is pretty important.
> My latest job search made me want to create a startup that addresses this, by vetting both posters and users.

Turns out, maybe those recruiters that we love to hate on, do actually serve a valuable function.
Still happens for Disk Cleanup, in a way. It can get stuck at parts, and it might finish but the window doesn't go away until you hover the mouse above it.
There's a market, just not sure how big. Business class works mostly because there's a big plane full of people paying for Economy (and maybe Economy Premium) and I suspect a lot of business is upgrades for flyers with a lot of status or mostly using miles. With e-entry (not sure how it will work with ETA now), I haven't waited long in London for immigration in ages.

British Airways business class-only flights from the City airport have been off and on. Don't know their current status. I could afford business but it seems like a poor value relative to other things I could do other than maybe a co-pay with miles trans-Pacific.
I had a similar experience flying from Dublin to Seattle a couple of years ago. Take off around 16:00, land at 17:00.

In that "hour" I'd watched (IIRC) Fellowship of the Ring, Sunset Boulevard, and—out of a morbid sense of curiosity that I regret—Moonfall.
I mean sure... so is asphalt, roads, plumbing, toilets, etc. Most of us here use the bahtroom more often than we think about politics, especially american ones, so do we post plumbing questions here too? I mean... no working toilet would be a bigger problem for most individuals at that moment than whatever trump does.
Ah now I see the difference. Thank you!!
Good counter-points!

That being said, I suspect Dario has very skilled engineers advising him.
It would be nice if uv had something like uvx but for scripts...uvs maybe? Then you could put it as a single arg to env and it would work everywhere.
You can do a lot with capabilities at the language level, if the language supports it. It doesn't require effect types: it's extremely boring from a type system perspective, which is an advantage.

Imagine these changes to a language, making it "capability safe":

- There is a `Network` object, and it's the only way to access the network. Likewise, there's a `Filesystem` object, and it's the only way to access the file system.

- Code cannot construct a `Network` or `Filesystem` object. Like, you just can't, there's no constructor.

- The `main()` function is passed a `Network` object and a `Filesystem` object.

Consider the consequences of this. The log4j vulnerability involved a logging library doing network access. In a capability safe language, this could only happen if you passed a `Network` object to the logger, either in its constructor or in one of its methods. So the vulnerability is still possible. But! Now you can't be surprised that your logger was accessing the network because you gave it the network. And a logger asking for network access is sufficiently sketchy that log4j almost certainly would have made network access optional for the few users that wanted that feature, which would have prevented the vulnerability for everyone else!

I talked about there being a single monolithic `Filesystem` object. That is what would be passed into `main()`, but you should also be able to make finer grained capabilities out of it. For example, you should be able to use the `Filesystem` object to construct an object that has read/write access to a directory and its subdirectories. So if a function takes one of these as an argument, you know its not mucking around outside of the directory you gave it.

Capability safety within a language is stronger than the sort of capability safety you can get at the process level or at the level of multiple machines. But we want those too!
I think the secret of DeepSeek is basically using RL to train a model that will generate high quality synthetic data. You then use the synthetic dataset to fine-tune a pretrained model and the result is just amazing: https://open.substack.com/pub/transitions/p/the-laymans-intr...
If I understand correctly, this also affects Asahi Linux, right?
+ Deepseekai recently being in the headlines + Lack of knowledge around simd extension. Modern social media is interesting...
I bet there were definitely some viable candidates in there, but I don’t think we had the resources to properly screen with the volume we got, so unfortunately, we didn’t get to sit down with them.
OK, but that's not this part of the law; this part is entirely specific to ByteDance and its TikTok subsidiary. Non-ByteDance Chinese companies would fall under the separate extra-process bit here:

> (B) a covered company that (i) is controlled by a foreign adversary; and (ii)
that is determined by the President to present a significant threat to the national security of the United States following the issuance of
a public notice proposing such determination; and (II) a public report to Congress, submitted not less than 30 days before such determination, describing the specific national security concern involved and containing a classified annex and a description of what assets would need to be divested to execute a qualified divestiture.
Oh thanks a lot! Appreciate it :) We're always open to collaborating with anyone!
I'd really be curious to recreate this or to know if any of their results included using private browsing mode?

I only bring it up because one of the reasons I use Safari with private browsing as a default is because, if I were to login to a site like Facebook in one tab, open a new private tab in the same window and try going to Facebook, it would not recognize that I had already logged in from the other tab. Chrome nor Firefox do that.
To clarify the title: this is a newly published article from 2025, looking back on 2024. It doesn’t say much other than noting that the floor was hit in 2024. The full report requires sharing your information with them though.
Weren't they all alien UFOs? Or clowns?
That Roast was EXTRA toasty. Love it. The second one was WAY off base though. I've only used MacOS. The other two were super appropriate though.

Roast
Claims to be a full-stack developer but probably spends more time organizing their Magic: The Gathering cards than organizing their code repositories

Complains about Linux audio issues for 16 years straight but still hasn't switched to Mac - that's some commitment to suffering

Says they can do both frontend and backend but their true specialty is writing sarcastic comments about tech trends
Crowdstrike's security reputation matters a lot more. I'll bet the customers assume the competitors have the same reliability problems, they can tolerate a little downtime, and going with nobody is even worse.
With RFK you're going to see huge populations of unvaccinated, border control won't help in that scenario with how contagious it is, but immigrants will provide a scapegoat. RFK is probably going to push for removing MMR vaccine requirements for legal immigrants too. His organization got many killed in American Samoa from measles.
RTF-Website. The intention is to remain subsonic over land:

https://boomsupersonic.com/overture
> There's a political duopoly, both parties are obviously, blatantly corrupt, and many voters on both sides plug their noses and choose what they believe to be the lesser evil.

Even if both parties are obviously, blatantly corrupt to about the same extent there is still large variation among individual politicians in both parties.

P.J. O'Rourke, a well known conservative author and journalist, said it well in 2016 when he announced this:

> I have a little announcement to make ... I'm voting for Hillary. I am endorsing Hillary.

> I am endorsing Hillary, and all her lies and all her empty promises. It's the second-worst thing that can happen to this country, but she's way behind in second place.

> She's wrong about absolutely everything, but she's wrong within normal parameters.
GoDaddy had really good marketing at one point and as of the last time I used it, which was years ago, they make it very difficult (I'm pretty sure by design) to leave. Their UX was one of the worst I've ever experienced in my life and they were consistently moving things around to make it worse. They essentially trap you, and someone without either the savvy or diligence will just give up.
to drop .py extension, you need to add `--script`
The secret is to basically use RL to create a model that will generate synthetic data. Then you use the synthetic dataset to fine-tune a pretrained model. The secret is basically synthetic data imo: https://medium.com/thoughts-on-machine-learning/the-laymans-...
The best hires I’ve ever been around have been from a previous connection to someone. It’s so much easier. Unfortunately, none of our small team had someone fitting who wasn’t looking to make a job change at this point.

I do have a few friends that may be interesting within the next quarter though, so I’m crossing my fingers.
I pine for an in-between world. My youtube feed and Watch Later list is filled to the brim with 40-90 minute videos I'll likely never get to. Youtube seems determined to push longer videos on me. I'd much prefer more 8-15 minute videos which seem to be as rare as hen's teeth. It feels like you either get 4 seconds or 45 minutes. Nothing in between.
Because it's enlightened self-interest. I personally love paying taxes that go to these functions because they keep people in homes and off streets, they keep people from dying early.

You may like the stench of death and despair all around you - I sure don't want to live in that world.
So this is like Birthday paradox but for PINs.
When people are talking about $100M-$1B frontier model training runs, then obviously efficiency matters!

Sure training cost will go down with time, but if you are only using 10% of the compute of your competition (TFA: DeepSeek vs LLaMa) then you could be saving 100's of millions per training run!
For the majority of usecases I have seen: solving a sufficiently large painpoint, understanding/formulating the problem, having/getting the right data, fitting well into a workflow of the users.

All the technology challenges are actually on the "cost" side of the equation. Meaning, that the aim wrt business value should be do as little of it as possible (but not less!). For some use cases this can still be quite a lot... But more often on the "all the pieces need to be in place for the whole to work at all" rather than "each piece needs to be super optimized".
Thanks for the clarification. You are absolutely right, in my post above I accidentally used the word "parallel" that caused the confusion. It wouldn't even be practically possible to use PLATO to observe them.

Here's a visual if that's helpful to any reader: https://www.researchgate.net/figure/Geometric-Probability-fo... .
I'm curious what all you want to run that you don't want to access the filesystem? Or the network?

Like, I get it for a few things. But it is a short path to wanting access to files I have created for other things. Pictures and videos being obvious files that I likely want access to from applications that didn't create them.

Similarly, it is a short hop from "I don't want any other application to be able to control my browser" to "except for this accessibility application, and this password management application, and ..." As we push more and more to happen in the browser, it should be little surprise that we need more and more things to interact with said browser.
I would highly recommend you give it a try. In my ~20 years of doing development professionally, I've never found anything that comes close to the productivity you get out of Rails on a new project (even if you're new to Ruby/Rails).

It can be hard to recruit for as mentioned, but I've never had an issue with it unless you have constraints (on-site, salary, etc).

Try to stick with the "Rails Way" as long as possible. It's tempting to adopt patterns that have become popularized (services objects, etc), but they can work against you in a Rails app.
That'd be relevant if it pointed to a problem with the etymology of the term Alpha Wolf.
Hey I'm all for not using either, that's what I do. And I get banning it on government phones. They ought to ban almost everyhring on those, but especially foreign controlled apps. And I don't like what China does to their citizens either.

But you'll never convince me that the main reason for the ban wasn't to replace Chinese propaganda with American / Billionaire propaganda and tbh that one's less charming.

And if your imaginative worst case scenario is that they use my data to root out and extrajudiciously kill ex-Chinese dissidents in America then idk why that would be a problem for me since I don't know any of those. I do know some American activists, though.

I can easily invent way more damning fantasies of what the US Govt could do to me, a US citizen, if they had an admin willing to subvert constitutional norms and more visibly use the PRISM surveillance tools.
Nothing in the container space would qualify as "easy" for me. I am talking about native OS features. Also linux only (afaik)...

Or even, for that matter, some sane capabilities for browser extensions.
A number of US carriers offer lay-flat seats for at least some of their coast-to-coast domestic flights. UA has over a half dozen Dreamliners flying back and forth daily, all with Polaris cabins. I know AA and Delta have routes with them, too. I agree, a two-hour flight time would be better!
Sorry, Dario's Claude itself disagrees with you

> The comment about software engineering being “fully automated by 2027” seems to be an oversimplification or misinterpretation of what Dario Amodei actually discusses in the essay. While Amodei envisions a future where powerful AI could drastically accelerate innovation and perform tasks autonomously—potentially outperforming humans in many fields—there are nuances to this idea that the comment does not fully capture.

> The comment’s suggestion that software engineering will be fully automated by 2027 and leave only the “0.01% engineers” is an extreme extrapolation. While AI will undoubtedly reshape the field, it is more likely to complement human engineers than entirely replace them in such a short timeframe. Instead of viewing this as an existential threat, the focus should be on adapting to the changing landscape and learning how to leverage AI as a powerful tool for innovation.
Case Study: Merlins Place
Actually, it happened _long_ before that - 2018 was when I became aware of this technique, but I'm sure there's previous art: https://nullprogram.com/blog/2018/07/31/ (Prospecting for Hash Functions for those who already know).

That said, this is really brute forcing, not what the OP is asking for, which is providing a novel proof as the response to a prompt (this is instead providing the novel proof as one of thousands of responses, each of which could be graded by a function).
Because digg-style "bury brigades" are still a thing.
A person who takes a $175k/y but works 3.5h/d instead of 8h/d really costs the business $400k/y.

Your colleagues' network of high quality instant hires is only interested in switching to $400k/y opportunities.

This coin has many sides but it isn't complicated.
It’s happening in other parts of the research world too: a couple colleagues of mine were talking recently about a paper we found at a conference last year that had a web page to go along with it with a domain and fancy graphics and such. For a boring programming languages paper. We concluded this is the modern way to try to jack your citations by getting noticed for everything but the technical content of the work, which is a bit off putting.
> Could you share the basis for saying they do, for those who are not primatologists?

You can look it up yourself, plenty of published research. I'm not a primatologist either but still managed to educate myself.

> Has someone objected?

You seem to be, in the most snide and backhanded way possible.

More generally yes people have been preaching (since the 60s majorly but obviously before that) that being kind, and that peace and love is and mutual reciprocity is not only one way to go about in life, but _it's the only way_ that you should pursue. And this very much the mainstream opinion. Meanwhile central banks have been printing money at zero interest to give to their friends, Saudis have been selling oil, states have been buying up weapons, bribing the US, etc.

And guess what? All of those people have lot more power and influence on the world today, than a guy living in the desert preaching how humans should be perfectly balanced at one with each and nature.

> How is that 'alpha wolf' behavior?

Zuckerberg retaining complete voting shares wasn't a power play?
Altman returning to oust the board and be CEO of OpenAI wasn't a power play?
Investors leveraging the outsized gains from an early success to bet on further outsized gains isn't a power play?
Oh thanks :) Yes agreed we do need better GTM - temporarily it's still me and my brother running Unsloth, so for now we're just prioritizing many more engineering releases :)
CA, NY Attorneys General sue to resume federal funding of Medicaid, FEMA, PEPFAR
It's not "free money". Posting exclusively on Meta's apps means missing out on the biggest portion of their audience. For a very lucrative channel they could be giving up much more than they gain.
I agree with the sentiment but

Local prosecutors and police do not have limitless resources… poorly used and a lot maybe, but I think people would be surprised what the constraints are.
In related news, their ISO 27001 certificate just expired. Seems in line with their overall security posture then
https://img1.wsimg.com//Sitecore/6/1/registrar-iso27001-cert...
I was on a team looking at real life communication behaviors in 2000 or so, when email was pretty new to “normal”
folks. We learned it was very common for people on their home computers communicating with family to just reply-all to the most recent message to the family. This meant the subject line was somewhere between useless and actively confusing, so they ignored it.

What they really wanted (without knowing how to ask for it) was a multi-party chat application, but one with attachments and universal addressing — which in 2025 we still don’t have, thanks to rent-seeking. Fortunately, email was defined before anyone realized how much money you could make by maintaining a walled garden.
A physics simulator's rules will be derivative of known physics. If we ask it to push the boundaries of known physics, then we can't verify it without real-world experiment. Absent that then it's basically Chegg on steroids: "Tell me, based on what we believe about how the universe works, about X." is the implicit preface to every physics question.

To the extent that someone can figure out a way out of this epistemic box, I'm interested.
Do you mean mainly deepseek, or did I missed something big?
>The solution was to use the java api to move the mouse back and forth over the progress bar.

And I thought browsers highjacking the scrollbar was bad!
> Or maybe this is yet another good investmemt?

I don't understand the "or". Yes, if you have plenty of money you can make up-front investments that lower TCO[0].

[0] https://en.wikipedia.org/wiki/Boots_theory
Toasted? With, like, an oven? Or do you mean with champagne?
Is it just me, or does the linked microsoft.com page hijack the back button?
Nope. Here's mine:

Predictions for 2025

- Personal Projects

Will create a custom D&D campaign management tool combining their software expertise with their tabletop gaming passion

- Technologies

Will transition away from Java/TypeScript and dive deep into Rust or Go for systems programming

- Knowledge Growth

Will become more involved in tech ethics discussions, particularly around AI regulation and worker rights

- Hacker News

Will start contributing more technical deep-dives about gaming technology and distributed systems
These kids were very well educated and went to some of high end schools according to the article
You are correct that since nostr is censorship resistant, you can't really prevent someone from posting something, but you can prevent being exposed to it on your side.
If it's a single nostr account (npub) sending you something you don't want, then you can block or mute them (the blocking is done in your app on your device). If they try attacking you at scale, then you can rely on web of trust (i.e. only allow content from people you actually follow, and 2nd degree) - this is now often the default.
My email for one of my CC accounts is like ...+banksucks@gmail.com because it allows plus-addressing, but doesn't like my domain.

In other words, don't worry, they'll find a way to block your email one way or another. :P
You are making great point. Thanks!
Yes, but that’s only a few hours away through hyperspace !
"U.S. Doge Service" Uses Next.js App Router
Many microsoft.com pages do. I don't know how it hasn't infuriated them enough to fix it.