skysight-inc/HackerNews huggingface dataset:
Boom is not currently flying their intended engines, the Symphony, which does not exist yet. (1) The XB-1 is flying with J85's just like a T-38 has, and just like a T-38 it can go supersonic with afterburners. If the Symphony is able to meet its design goals, it will not need afterburners for any part of flight. How much they will be able to deliver on that remains the biggest open technical question for Boom. (2)

1: Well, their Plan B intended engines. Their Plan A was that one of the Big 3- RR, PW, GE- would make engines for them, but none were interested in taking the risk that a difficult engine could be designed and built in enough volume to make the investment back.

2: Their biggest legal question is over-land supersonic regulations. Their biggest economics question- and probably the biggest and most important of all of them- is how much will people pay for civil supersonic?
New York to Sydney for $100 in 4 hours? My bullshit alarm is blaring. Unless they have a secret teleporter project they aren't telling people about. If you're burning dinosaurs to do that it is not happening, not unless oil becomes magically free and even then I think you would struggle to make ends meet.
Speed! You won't go back
This is maxima, not macsyma.

https://en.m.wikipedia.org/wiki/Maxima_(software)
No, its clear that it is authority the President does not have under the Constitution, and even when Congress tried to give the President a small fraction of this power in the 1996 Line Item Veto Act, that Act itself was found to be unconstitutional: its power the President doesn't have under the Constitution and could not Constitutionally be given.
uv makes Python actually usable. Freaking love that tool.
That's amazing data. How representative do you think your Aider data is of all coding done?
Hmm, one part i found interesting

> In order to make cache hits distinguishable from misses
in Safari, we reference the NOT gate-based cache amplifica-
tion primitive from [29, Section 5], adjusting the speculation
parameters for the M2 CPU. We run the amplifier 500 times
when the target address is cached and 500 more times when
it is evicted, in native and WebAssembly implementations.
Table 3 summarizes the timing distributions, with units in
ms. We observe that they are clearly separable even in a
web environment, allowing us to distinguish cache hits from
misses with WebKit’s 1 ms timer.

So i guess all the hub hub around disabling fine resolution timers and SharedArrayBuffer was for naught.
Thank you for the reply. Maybe I'm daft or out of the loop, I don't see the difference between this method and what I have seen previously as "fine tuning on synthetic data".

They also mention in the source tweet that the quality of the base model is important, which is not really accounted for in the $30 figure.
IIRC Concorde could super cruise a Mach 2 which is unmatched. It would also flight supersonic for most of its journey which is also presented unprecedented difficulties.

It was really an unique plane.
My other favorite comment I saw on Reddit today:

> I can't believe ChatGPT lost its job to AI
DOM security is a completely different beast from process isolation with WASM (in a web context or otherwise). The attack surface is vastly greater, due to the much larger API complexity.
I think it's just good hygiene.

If my weird one-off ad-hoc script needs numpy I can bake the exact tested version into an inline script dependency and run it with "uv run" and never have to think about it ever again.

If I don't do that, there's a good chance that in a year I'll upgrade numpy for some other project and now my ad-hoc script will break.

(Numpy is actually a great example here, lots of code I try to run turns out to need numpy 1.0 because it hasn't yet been upgraded to work with the new 2.0 - here's a recent example https://simonwillison.net/2024/Dec/24/modernbert/ )
Are you willing to pay 10x the price for 1/2 the travel time? And even if you are willing to pay that, are there enough people besides you willing to pay that to sustain this business model?

I'd imagine most people in this wealth bracket would just fly private. I'll happily spend 5, 10, 15 hours in a plane if I don't feel like a sardine in a can.

The Concorde failed for a reason (actually multiple reasons). And they actually had an engine supplier - the hard part - whereas Boom has been shunned by the entire industry for this critical part.
Sure, whatever you're comfortable with. On a startup, failure risk is high, choose something boring that's easy to hire for and most of all, you're comfortable with.

Even if it turns out to become tech debt in the future, you won't have to pay for it until you're successful anyway.
I don't disagree with you, but a lot of people don't understand any of those steps. 3 is the step most people will understand, I think you can understand that LetsEncrypt can be confusing the first time, and well... DNS... that's notorious for people being confused on.

What people consider "advanced user" varies quite a bit and there's a lot of subdomains in computing. (Though maybe the term is also degrading...)
> I don't see the big advantage of using an LLM there. It can't set up the environment for you.

I can give it tons of random documentation without having to read through it to understand what parts are useful without having to filter through the irrelevant/mistyped/outdated/badly written stuff, even give it undocumented (shitty old) code and ask specific questions about how it works or what the likely intention was.

I promise you it is useful to me. I use it every day. It can't set up the environment for me all by itself, but it sure can help me do it WAY faster and understand it way faster. Especially the boring stuff nobody wants to do.

PS: who has time to deeply understand all aspects of what they are working on? This makes no sense to me in the context of a job. If I would take time to deeply understand every tool, script or even source code I touch, I would NEVER get to doing ANY work.
Seven things I know after 25 years of development
That's still more or less 120 days ago. Well over the 90 day typical window.
Wow, as a Winston Salem native this is interesting news. Thanks for sharing.
That's one of the great things about uv: it uses clever symlink tricks to avoid installing copies of things, so it's wildly fast.
I very carefully added 2FA to my wife’s Bitwarden account a while ago. I got her a Yubikey and added mine as well as my backup keys in case one ever got lost.

I discovered much later that they call email “2FA” so her account isn’t actually protected by the hardware keys at all. Like others here, this doesn’t make sense to me since it’s circular.

(and separately, the Yubikey seems to often not work on Android anyway)
I'd recommend trying out Cursor, I personally find it does more or less what you want out of the box.
America's $3B Habit: Meat Sticks
That's like trying to assemble an Ikea bookshelf with a bulldozer. All that extra power is doing nothing for the task you're asking of it, and there are plenty of lightweight alternatives.
The work to minimize or delete sonic boom - that's an important one. And it's a NASA project.
https://archive.ph/xqrRu
I think that statement is saying it will meet those noise levels for takeoff and landing, not during cruise which will be over the ocean.
The orbital inclination relative to our sun doesn't really have anything to do with it. In fact, stars that are aligned with Earth's orbit are harder to observe, because they go behind the sun once a year.

Detecting an extrasolar planetary transit requires us to be aligned with the planet's orbit around its star. And since those stars are so far away, you would have to travel an immense distance away from our solar system to appreciably change the relative angle.

HD 20794 is about 20 light-years away from us, so changing our observation angle relative to it by 1 degree would require traveling about 0.35 lightyears. Our fastest-ever interstellar probe, Voyager 1, would take 5000 years to travel that distance.
That's a misundersanding of uv - the inline script dependencies feature is strictly optional. You're encouraged to use pyproject.toml as a default instead of that for most projects. https://docs.astral.sh/uv/guides/projects/
Luna Modeler – Database modeling tool for relational databases
Pinta 3.0 Beta Released with New GTK4/Libadwaita UI
you can buy hardware for this over radio. just google your model, year, and remote start kit. some of these have 400ft range. i bet most of your remote starts are within that range anyway

https://www.12volt.solutions/products/2018-subaru-crosstrek-...
Sure, but then I need to spin up a server, lock everything down, pay money, deal with all that other stuff, and well... this isn't going to work for: my partner, my parents, my friends, my family, and so on.
You're just proving my point. "AGI is defined by the loss function" may be a definition used by some technologists (or maybe just you, I don't know), but to purport that that equals capability equivalence with humans in all tasks (again, which is how it is often presented to the wider public audience) shows the uselessness or deliberate obfuscation embedded in that term.
Instagram deals reveal Meta is offering TikTok creators as much as $300k to post
https://archive.is/yhQHI
Forcing every website to adapt to a browser update is completely infeasible.

> I can't imagine there are many sites passing significant amounts of data through this

This is actually a quite common mechanism for popup-based authentication (which is much more secure than iframe-based one, as users can verify where they're potentially entering their credentials).
Would it help to use separate processes and share the data on demand only, via IPC with a robust speculation barrier?
Great for more transparency.

Would have been better to see this with the previous administration to see what Biden really did during his time in office, or if he even did do anything significantly beneficial to the US other than funding more wars.
It delayed viable attacks by a few years, maybe?

It doesn't hurt that setbacks for web app development coincidentally send developers into the open arms of Google and Apple's stores that collect a 30% cut of all revenue, so there was a good incentive to do it even if it didn't protect anyone.
Earlier: https://thebulletin.org/doomsday-clock/
(https://news.ycombinator.com/item?id=42854278)
A worrying trend: 'A collapse in the well-being of young people'
Maybe this is answered, but I didn't see it. How does aider deal with secrets in a git repo? Like if I have passwords in a `.env`?

Edit: I think I see. It only adds files you specify.
I think it might be useful to look at this as multiple forces to play.

One force is a multiplier of a software engineer’s productivity.

Another force is the pressure of the expectation for constant, unlimited increase in profits. This pressure force the CEOs and managers to look for cheaper alternatives to expensive software engineers, ultimately to eliminate the position and expense. The lie that this is a possibility draws huge investments.

And another force is the infinite number of applications of software, especially well designed, truly useful, software.
I'm in WS myself now, going on 12 years.
Won't do things like A380?
Because it barely changes the appearance at all? The actual effect of that setting is to change the behavior of the button to be autofill. The only visual change is that the small "Fill" button is removed.
Or alternatively, we make Alcubierre spacecraft work, or we move our whole planet system.

All entirely plausible approaches :D
Pre-orders are just wind until they're actually delivering product. It doesn't cost the carriers much to make the pre-orders. The calculation is that if it somehow pans out then they won't miss the boat, if the company fails then they aren't really out anything.

To be honest I thought Boom was an investor scam. I didn't think they would get this far. I still don't think they are going to build full scale production models and actually sell them, but I'll give them points for keeping it going. Moller kept his Aircar prototypes going for decades too though.
This reminds me of how in Windows 95, installers would complete quicker if you constantly moved the mouse, but would take longer if it was still.
I'm building a trial balloon in Crystal right now, though not Amber or Lucky. They had their 1.0 release (1.15, even), but it does not feel ready for production. The documentation is not great, the gotchas are unintuitive, and the discussion feels like they're not sure what direction to take the language. The runtime (event loop, fiber scheduler, and garbage collector) dependency means there's plenty of "magic" involved, making it feel significantly more like a framework than a language. Maybe that makes sense if they're targeting the web. If you're on the fence about choosing an established framework like Rails, though, Crystal is not the direction to go yet.
I think the one you linked only simulates a single client, if I read it right?

This one will simulate thousands of clients with different MAC addresses, allowing for DHCP infrastructure stress testing.
My favorite fact about raindrop paths/watersheds is that they determine most of the political boundary between Argentina and Chile. If the rain at a point ultimately flows to the Pacific Ocean, that point is in Chile; if it flows to the Atlantic Ocean, it is in Argentina. This is article 1 of the original boundary treaty [0] from the 19th century.

The treaty was made before the Andes were fully explored, and so it doesn't handle some interesting edges cases like the Southern Patagonian Ice Field. The field has the property that when rain falls there, it freezes and goes nowhere!

[0] https://en.wikipedia.org/wiki/Boundary_Treaty_of_1881_betwee...
[1] https://en.wikipedia.org/wiki/Southern_Patagonian_Ice_Field
I believe we call that the Gulf of Authority now.
Why should anyone think that if the NSA was brute forcing DES in 2003 they wouldn't be doing the same thing to AES256 in 2025?
"Meta has been contacting creators and their teams with deals offering thousands of dollars in exchange for exclusive video content posted to Instagram reels. The payouts described to Business Insider ranged from $2,500 to $50,000 a month and required the content to be exclusive to Instagram for three months."
Accelerating consistently at 1G (and then -1G for the second half), should take 6 years of proper time (from the perspective of the traveller) to get there.
you'll have to pry it from my cold dead hands dipshit. one of the last remaining protocols that you can a) self-host, and b) reach anybody with, and this person wants to ban it.
I can’t imagine taking a cpu design class in this more cynical era. So much of the speed these days seems to come down to distilling smoke and mirrors into physical form.
> New York to Sydney for $100 in 4 hours? My bullshit alarm is blaring

LA to Sydney is $10k on a good day for lie flat. You could probably charge $15 even 20k a seat and (a) turn a profit (b) filling the plane.
Responding to Trump tariff threat, Taiwan says chip business is 'win-win'
"Vegan Sith"?

For just one thing, when you have a broken education system and omnipresent media franchises, you have a significant percentage of the population who know more about the Star Wars backstory structure and theories of diet than about history, civics or conventional morality.
You could argue the same for car driving or financials or any craft...
Painter builds a graph database of dependencies across the crates.io ecosystem
Great, and how many fake accounts are there which don't declare themselves as AI?
o1 still hallucinates badly though.
> The reason isn't "acceptable" is because the world is fraught with examples where the sentiment of superiority of culture or race led to horrific outcomes.

You know, I didn't say anything about race.

Please don't misrepresent my point in order to argue against it because ... well, there's a reason that there's a common name for that sort of thing.

> I see from your profile you're from South Africa, so I'd assume you are more capable than many others of recognising that.

Not just "from", I grew up in Apartheid South Africa.

I saw the rubicon speech live on TV, not read it in a wikipedia article. I had to watch where I go because of the "whites only" signs in certain parts of the country.

And yet, I still get lectured on race by people who have never lived under legislated racism, which is a good deal harsher than "systemic racism".

> Perhaps things swung a bit too far one way (I genuinely am undecided), but we should realise the intentions in this started out well. And we'll swing too far back the other way if we're not careful.

Some cultural norms are superior, and have superior results, producing better and more productive members of society on average.

And some cultural norms are primitive and regressive, and produce less productive or net-negative productive members of society.

Race has nothing to do with it.
I may be misremembering, but I think he has.
You shouldn't disable Spectre mitigations, but Retbleed and Downfall (Intel) are much more of a "lab" exploit, and the fall-out for Retbleed is much more severe on cloud boxes than your personal PC. Easy 20-40% performance uplift on AMD Zen1-Zen2 and Intel 6th-11th gen.
The angle of attack at both takeoff and touch down is pretty wild!
is there a good historical example of this strategy working? I know platforms have tried paying for apps to be ported or etc and it never seems to drum up organic interest sufficiently.
Turntablist Transcription Method
"Please don't sneer, including at the rest of the community." It's reliably a marker of bad comments and worse threads.

https://news.ycombinator.com/newsguidelines.html

It's great to post relevant and informative links, but please do it without putting down others. If you're participating here, you're as much the community as anyone else is.

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...
Definitely, but also Bitwarden's choice to not support configurations that will leave the vast majority of unsophisticated users vulnerable.
> It doesn't hurt that setbacks for web app development coincidentally send developers into the open arms of Google and Apple's stores that collect a 30% cut of all revenue, so there was a good incentive to do it even if it didn't protect anyone.

That seems like a bit of a reach. Its an obscure feature that is rarely useful, and when it is all you have to do is send the right http header (if using chrome) and you get it back.
> Will the youth of today see sending an email as ridiculously old-fashioned as a paper telegram or a landline?

They already do.
Long tele lens - lots of air between it and the plane, I'd say.
It’s time to stop blaming Biden. Your guy is in office now. Whatever happens it’s on him, not Biden. Let’s stop with that.
Is there a place to get a wxmaxima installer for Windows other than SourceForge? I no longer trust stuff from there.
Looking forward to enlightening replies to your question, I don't get it either. Keycloak APIs are already hardened, how is security provably increased by creating a new, far less tested access layer for the browser to use?
A valid question, no?
Aider has a command to add files to the prompt. For files that are not added, it uses tree-sitter to extract a high-level summary. So for a `.env`, it will mention to the LLM the fact that the file exists, but not what is in it. If the model thinks it needs to see that file, it can request it, at which point you receive a prompt asking whether it's okay to make that file available.

It's a very slick workflow.
The simple fact is that alpha males are a fact of nature. In wolves and in lions and maybe especially in primates like baboons and gorillas.

It's hilarious that something so obvious is considered worth denying, but I guess it's an example of how intellectualization can be used to exploit psychological weakness.
My parents certainly never did that. Very few parents did, the tickets were way out of the price range of the typical passenger. It's like pining for the days when people traveled in the opulant lounges of ocean going steamer ships, forgetting that the bulk of the people were crammed into tiny cabins with few amenities for the long journey.
My read: the attack gets 600 cycles of CPU time to execute its code (JITted Javascript, in web context) on the speculated data, and to use some side channel to communicate results back out of the speculated parallel-world.

Some of the earlier speculation attacks didn't get to do arbitrary compute on the speculated data, they could only for example influence whether something was loaded into cache or not.

This makes an attack easier to write.
Boom (YC W16) – Supersonic Passenger Airplanes:

https://news.ycombinator.com/item?id=11329286

I remember seeing this post about Boom going through YC, 9 years ago. It's really cool to see the founder laying out what he wanted to accomplish in the comments and then seeing it happen today. Especially fun looking back at those comments saying it couldn't be done and all the haranguing over the name "Boom" :)

Congrats to the Boom team! Such a great accomplishment.
Amazfit and Xiaomi is now dominating this market with its superior riscv based architecture and 2x longer battery time and 2x less cost. I don’t really know how pebble can compete now given when it was acquired it was already going downhill in market share.

I’ve never earned a pebble only an Xiaomi band many years ago so I maybe missing something.
So Bitwarden should offer 2FA for users who want the additional security – they should never force users to enable it. It would be like refusing to save "password" as a password, because it is insecure.
FDA approves Ozempic for chronic kidney disease
well, that was a waste of 3 minutes
It's still reasonning based on pattern matching, which should go only so far. But "only so far" could be plenty for lots of applications.
On the contrary, the so-called "capitalism" that emerges when we respect individual rights is the one way we can escape this.

Too much emphasis is placed on government regulation and corporate environments to "make things right" when, in the end, they are all just rigid bureaucratic structures that trap people and force them into heirarchies.

For my entire life, I have mostly tried to conform to this -- albeit mostly focusing on startups because they are more likely to value individuals, and less likely to have rigid structure and tradition -- but I'm only just now realizing that my autistic and ADHD tendencies being pigeon-holed even this much is a recipe for the burnout I've experienced for most of my adult life. I need to try something different!

And if I lived in a more rigid society (all non-capitalist countries are far more rigid than capitalist ones -- pretty much by definition) my options for fleeing rigidity would be vanishingly small.
Trump's in office now... you can go back to sleep.
On the other hand, research into finding these vulnerabilities seems to be booming. Though presumably, so is the grey-hat market.
They slightly restructure their MoE [1], but I think the main difference is that other big models (e.g Llama 504B) are dense and have higher FLOP requirements. MoE should represent a ~5x improvement. FP8 should be about a ~2x improvement.

We don’t know how much of a speed improvement GRPO represents. They didn’t say how many GPU hours went into to RLing DeepSeek-r1 and we don’t have a o1 numbers to compare.

There’s definitely lots of misinformation spreading though. The $5.5m number refers to Deepseek-v3, not Deepseek-r1. I don't want to take away from HighFlyer's accomplishment, though. I think a lot of these innovations were forced to work around H800 networking limitations, and it's impressive what they've done.

[1] https://arxiv.org/abs/2401.06066