skysight-inc/HackerNews huggingface dataset:
It's happened multiple times over a large number of formats. Even gifs have been exploited (https://www.zdnet.com/article/whatsapp-vulnerability-exploit...), but just as you said it's the complexity of video that makes it more difficult to keep secure.
Some 25 years ago I was tasked with writing a certain driver for Windows.

Being totally migrated to Linux by then I refused to use Windows for writing as well as building it, so I worked hard to build it with MSYS.

Long story short, I made it, and the driver worked great.

I think I had to write a patcher for the resulting PE (.sys) to get it to actually load.

Fun times.
For a great many years, this trillion dollar payment stream went unaudited. Who knows how much fraud there is? This article says Treasury officials see $50 billion in "obvious and unequivocal" fraud.
It is trivial to audit the usage of "unsafe". Grep does this. Of course auditing the unsafe functions is another thing. But you can have large codebases without unsafe and consequently a lot of less work with auditing your code.
I don't have personal experience with Rust, but quite a bit with Go. It is almost ridiculous, how much more safe Go is in comparison with C. So yes, it is worth every bit.
> At least macOS has one place to install applications, one place for the user's documents, and most apps somehow respect them.

I actually like that simplicity more than how many things FHS describes for the various Linux distros: https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard

Like, when a developer just wants to ship a product and doesn't have that much free time, it's understandable that tidy things will be overlooked.

Maybe something like https://www.gobolinux.org/at_a_glance.html would help with that.
I came up with similar rules over decades (I still write sometimes mathematical symbols), and I have to only take care of my "u" vs "n" and "r" vs "v", and write these pairs especially slowly because in my handwriting (especially u and n) look the same.

But for all the others I’ve developed similar disambiguations.
If I should ever find myself in a line like that I will be sure to remember to ask any observers if they are or if they know tolerance. Perhaps then we can have this conversation covering any subjects that you find interesting and in the process conjure enough of a distraction for the guards that we might make our escape to the freedom that we both no doubt deserve.

Happy Trails.
In 2019 Epochs was proposed for C++. That's "too late" for C++ 20, but only by convention. Epochs proposed to give C++ a way to evolve while retaining better backward compatibility, much like Rust's Editions (the 2024 Edition stabilized last year and will ship in Rust 1.85 in a week or two)

Instead C++ has added all sorts of slightly incompatible features every three years since 2011, and is expected to do so again, periodically one of these incompatible changes is especially troublesome for important people and, like a naughty toddler, the committee promises not to do that again.

Yet, despite these incompatible changes which might have accidentally larger consequences than expected, for fear of the consequences other changes which were known to be incompatible but seem "worth it" are rejected. The worst of both worlds.
1. You've said that the UI system is tightly coupled with the text editor. What are the benefits to this? How difficult was it to use the UI system with sublime merge?

2. How are you able to maintain stability of the application? Do you have an extensive test suite? What QA do you have in place?

2a. How do you ensure that there is no regression in editor performance?

3. Sublime text is almost 2 decades old. How has the code based evolved since then? Does it have a lot of technical debt, or has the core of the editor aged well and remains relatively unchanged?
Since you left this "optimize me" comment here:

https://github.com/RandyGaul/cute_headers/blob/755849fc2819d...

See an optimized quaternion multiplication implementation in SSE by me here:

https://stackoverflow.com/questions/18542894/how-to-multiply...
Who are these vast majority of companies? The second company I worked for between 2000-2008 that I spoke about here:

https://news.ycombinator.com/item?id=42985966

With 20-30 people on staff if I were responsible for that architecture today. I would need:

A MySQL instance with read replicas (we had that back then onsite)

SQL Server for a some legacy projects - we had those too.

File Transfer family for FTP transfers and some automations around that.

Web servers and load balancers.

SQS and probably Lambda. Back then we used MSMQ and later MQSeries and a home grown application servers that took care of asynchronous message processing.

Web servers - a couple of EC2 instances and a load balancer and these days because of how the internet is probably WAF.

We would have needed something to orchestrate our ETL jobs. Back then we ran on 15 physical computers we would probably use something like AWS Batch today.

And of course S3.

You see how quickly your needs escalate once you are doing any real workloads?

The next smallest company I worked for had 50-60 people this was between 2018-2020. We sold access to aggregated publicly available health care provider data as well as some other health care related data. Our micro services were used by large health care companies as the backend to their websites and mobile devices and one new customer could increase the load on services they subscribed to by 20%.

Here we also needed multiple MySqL databases, CloudFront, WAF, Cognito, ElasticSearch, Redshift for large analytical loads, EC2 for some legacy software, S3, ECS for the microservices, Lambda/SQS and step functions for some ETL jobs that scaled from 0 to hundreds of thousands of transactions, Cognito for authentication, etc

You might not remember. But around March 2020, health care providers websites were being hit hard because of a little virus that was going around, the scalability that we put in place came in handy then.

Do you propose that we should have hosted all of that on some VMs?
Their capacity is indeed that. Would love it if they were keeping up with the density of slower drives.
Yep, I'm aware, hence the given digits part. The whole board is still drawn from 9 digits, it's just that precisely which 9 digits is unknown.
Optimising for older hardware might not be a good commercial strategy, but I still get a kick out of making my software nimble and fast.

I like to joke giving engineers fast machines is a mistake, that having them on 8GB dual-core Celerons would help optimise their software.

OTOH, it’s also a valuable strategy to give them now the machines that’ll be mainstream when the product is finished. That one I learned from Alan Kay and the Alto.
https://whtwnd.com/bnewbold.net/3kwzl7tye6u2y are instructions on how to run a full network at protocol relay, which may provide some infra insight
> But over the past two decades, Newsom (D) and his wife have accepted more than $700,000 from the Pacific Gas & Electric

$700,000 over 20 years is $35,000 per year (not to mention Newsom wasn’t governor for most of that time)

PG&E revenues are $25,000,000,000 per year.

Regardless of what you think about the arrangement, it’s not why rates are high.

> In neighboring Nevada, the utility serving its major metros NV Energy has rates of 11¢/kwh for residential users & 7-9¢/kwh for small businesses

Comparing electricity costs across difference states rarely indicates much. Geographies, energy sources, and regulations are very different from state to state.
nothing really happened here either tbf, mark was kinda talkin to himself // bouncing ideas off a wall
Maybe. But before I start worrying about that I'll have to see them count correctly or not be fooled by variations of simple riddles
No, how about lord or duke.
Bird flu variant found in Nevada cows shows signs of adaptation to mammals
A long time ago I encountered someone that I didn't fancy who was looking for this. I wish I had known that it existed. Many thanks.
All Quiksilver, Billabong and Volcom stores to close in U.S.
> They aren’t going to do basic research.

Fixed that for you. Pharma companies do lots research. But the goal of that research is very narrow - to bring new therapies to the market. The Academy has very different goals - train next generation of researchers and make discoveries. IMO, expecting a pharma company to do the work of an academic institution is a recipe for failure. But that is just an opinion.
If Star Citizen can get nearly a billion dollars, I think we can all (right here on HN) evangelize a kickstarter for this. We just need the people that know this in and out to lead.

We should be doing more really in our current world. I confess I too spend too much time trying to build little apps just for money.

This just for money thing has got me reflecting a lot lately.
This is true, but I would replace 'intelligent expert' with 'intelligent human expert'.

Graphing data to analyze it - and then seeing shapes and creatures in said graph - is a distinctly human practice, and not an inherently necessary part of most data analysis (the obvious exception being when said data draws a picture).

I think it's because the interface uses human language that people expect AI to make the same assumptions and follow the same processes as humans. In some ways it does, in other ways it doesn't. Expecting it to be the same as a human leads to frustration and a flawed understanding of its capabilities and limits.
This should be the URL in the post, Twitter requires a login, Bluesky doesn't.
I'm not sure why you're responding to me. Nothing that you're saying is anything that I've mentioned or brought up. I know what the downsides are. I'm just saying that the goals that Apple has optimized for have resulted in a loss of things that many would consider valuable.
That is true, indeed.

It could be that the author is just massively unskilled at writing Z3 code.
Could you link to the post that was flagged? Users with "showdead=yes" can still open it.
Arbitrary policies often set by the federal and state governments. Yes sure, there is some policy at the institutional level but the intent is usually good—-to prevent fraud and abuse and get a good price. Certainly not to slow down research.
I never suggested that they should, in either case. I'm just saying that there are things that are lost by completely ignoring backwards compatibility. There are plenty of Mac-only applications that aren't games that are now obsolete and unusable because of architecture changes.
Ours doesn't answer questions of any sort and hasn't for months. "Sorry, I can't answer that, try asking something else". The only advantage the Home has had over Alexa was question answering, and that's gone now.

Yes, most of the features you describe are still there, but I can also implement those myself with the right hardware and plan to as a replacement. Google killed what unique value there was to their product.
I went on GitHub to see if anyone was using this cachedir tag signature. Found many results so that’s cool :)

But ironically, if I’m reading correctly the command line ncurses based disk usage tool ncdu seems like it will intentionally ignore any directory that has this cachedir tag.

https://github.com/rofl0r/ncdu/blob/a216bc2d35b6edf4dadf5535...

https://github.com/rofl0r/ncdu/blob/a216bc2d35b6edf4dadf5535...

Which is the very sort of thing the original post was complaining about that happens with invisible .cache directories too :^)
Yes, but it is rare to see \times used for scalar multiplication, isn't it?
Pardon my pedantry but MP4 is just the container and does not spare you from finding a compatible set of codecs to put in that container that will play on your target browser-plus-OS combo. See the video and audio codec table here for example: https://developer.mozilla.org/en-US/docs/Web/Media/Guides/Fo...
The implementations of whatever queues or buffers were used for communication must have been different.

There is absolutely no difference between memory pages that are shared by multiple processes and memory pages that are private to a process.

If you use the same implementation of a buffer/message queue or whatever other data structure you want to use for communication, it does not matter whether it is located in private memory or in shared memory.

Similarly, there is no difference between threads that belong to the same process and threads that belong to different processes, except that the threads that belong to the same process share all their memory, not only a part of it.

Nevertheless, on modern CPUs measuring the IPC performance may sometimes be misleading, because the benchmark results can be altered randomly by the thread scheduler of the OS, because the IPC performance may differ depending on the pair of CPU cores where the threads happened to be located during the benchmark.

For reproducible benchmark results, regardless whether threads from the same process or from different processes are tested, the threads must be pinned to some cores, which must be the same when you measure communication inside a process or between processes.

Otherwise the results can be quite different depending on what kind of cache memories are shared between the measured cores or on their position on the chip on the communication network or ring that connects the cores.
A Series of Unfortunate Effects (2019) [video]
You could state the same thing as your first sentence for e.g. Rust or many other languages, I personally only see Dart being useful if you already have a Flutter app and you don't want to learn another language, and to have shared types easily, similar to fullstack web devs using TypeScript for their React and Node apps.

I personally use Rust backends and Flutter frontends for my apps. I'd use pure Rust for the entire thing but Rust frontends are nowhere near the capabilities and maturity as Flutter, but I use FFI like flutter_rust_bridge and rinf at least, as you mention.
> Decades of research were unable to answer this.

From the article:

> The field of AI research has a reputation for disregarding the value of other fields [...] It’s likely that, being unaware of much of the research in psychology on cognitive biases or how a psychic’s con works, they stumbled into a mechanism and made chatbots that fooled many of the chatbot makers themselves.

Just because cognitive scientists don't know everything about how intelligence works (or on what it is) doesn't mean that they know nothing. There has been a lot of progress in cognitive science, in the last decade in particular on reasoning.

> based on ill-defined terms like "intelligence".

The whole discussion is about "artificial intelligence". Arguably AI researchers ought to have a fairly well defined stance of what "intelligence" means and can't use a trick like "nobody knows what intelligence is" to escape criticism.
Thank you for linking this
> electrification and maintenance of low density regions although power monopolies like PG&E are required to provide service.

> PG&E doesn't want their most profitable customer base[cities] to have public utilities because if enough do, their company becomes unprofitable and implodes.

If the state forces PG&E to electrify expensive areas at the expense of higher costs in cities, their objections are reasonable.

If California forced a private company to electrify rural areas as part of the deal and then tried to change the rules to have the government take over the cheap areas, there would be easy lawsuits on the table.
I’m not a bible thumper but I also don’t promulgate cringe noble savage mythology either
> to do the devil's advocate and examine their motivations

These are two different things.

Examining their possible motivations is fine. Consider them, weigh them, criticize them.

But that's not what a so-called "Devil's advocate" does. The Devil's advocate takes just one side, one possible motivation, and argues for that, come what may, possibly insincerely. The Devil's advocate is dogmatic, single-minded, intransigent. When does the Devil's advocate ever admit that they're wrong?

Go back and look at how definitively the Devil's advocacy was made. There's not even a whiff of doubt or questioning. https://news.ycombinator.com/item?id=42974179
DOGE of Venice
Asking people to install something with no information about how it works or who built it is... certainly a move.
Dotted 0 (number) and a regular round O (letter) should also be possible, instead of a round blank 0 (number) and an O (letter) with a top curl.
I agree! We need a Constitutional Amendment in the USA supporting a universal right to repair everything we own!
Chinese national accused of stealing AI secrets from Google facing new charges
Yes, I am saying they might include features for TTS in addition to their current STT feature set. Seems like many of these sorts of apps are looking to add both to be more full fledged.
Just to be clear, are we talking about the Gemini based Assistant replacement? The last time I checked that version couldn't even set reminders or timers, so if that's improved since then I may actually try switching.

And yes, agreed that this space is very fragile right now for all the companies.
The code here looks to be essentially C with different syntax - every function marked unsafe, all resources manually managed. Sorry to be blunt, but what's the point of this?
Right, but that’s my point: You can’t assume these costs disappear if the government takes over.

They just get blended into the tax bill.
Thanks for the tip, this looks interesting. The iOS app seems not well designed, not sure I‘d use this over the My Links app (which I could use if I made a Linkwarden compatible API).
I hated this soooo much… I had completely forgotten.

Now I hate it again.
https://www.phoronix.com/news/IBM-POWER10-Not-All-Open-FW

Sadly POWER10 is not entirely open and the reasonning behind having a power laptop/computer was to have an entirely open computer
What older architecture? Windows has been on x86 for decades. You should be able to run any 32-bit application built 20+ years ago on modern Windows, assuming the application didn't rely on undocumented/internal Windows APIs.
Happiness in poorer countries does not follow the typical U-shaped curve
One of the best business decisions I made was to not accept VC money.
For distinguishing between the lowercase "a" and "α" without switching to cursive you can also use a double storey a.
Yeah it might be easy for municipal electricity to win on price when the bar is set at $0.42/kWh. Out here our evil private company is charging $0.11/kWh. I have serious doubts any municipality anywhere could deliver power for half that.
Thanks for the great link! Unfortunately it doesn’t speak specifically to parked/charging, which is when I would expect EV’s to be at the greatest risk and ICE’s to be at their lowest risk.

But still, seems pretty clear that EV’a are likely no more risky and possibly considerably less so in the garage. Thanks!
if we look for agi, then not noticing the gorilla might be a good thing. i'm referring to the gorilla counting experiment.
I switched to plain white when I was ca 20 years old and never looked back. I need to use plain white since then and I am so used to it that I find lines or grids slightly offensive to me and it throws me off from layouting. You can get used to anything.
A typical income is the dollar/hr that is most obtainable - it is the pay for jobs that most people can apply to and get.

It used to be a rate of pay that young people could start a family on. In the 1990s I could answer an ad for a job that most people could do. That job alone would be nearly enough to support wife, me, 2 young kids. I'd make up the diff on the side.

That's gone and birth rates can't climb without it.
that's so weird, I would be honest; it wouldn't even occur to me not to be. maybe that's why I never get involved in any internal politics.
And I don't know how I missed this, but attempting to use the `UNICODE_STRING` returned in `string_to_ustring` is a guaranteed use after free. If you're interested in writing Windows kernel code, this is not the place to start.
https://news.ycombinator.com/item?id=42986488

It has been "unflagged" now / update: flagged again. Reason for posting this is that I think quite a few people in the US will have similar stories, which will be shared between the general population. And by denying this, Trump will gain more credibility.

I know this will now be flagged into oblivion.

I don't like politics-related posts here not only because of this. But if some aspect is mentioned, I still like to post some substance instead of just letting it be.
"moral panic" is a bit of a reach don't you think? Increasing dependencies is a real problem with real downsides. There are plenty of characters expressing unreasonable things, but that doesn't mean everyone expressing concern about dependencies is indulging in a moral panic. There is nuance!

If there weren't real costs to dependencies then I personally never would have published regex-lite.
I prefer the Nitter mirror

https://xcancel.com/TechEmails/status/1888313183024074910#m
Also possible that he pinged a random junior engineer for a fresh perspective. Social media trends tend to start with a younger audience. However the engineers’s comment on team assets implies seniority.
I always cross my zs in maths to distinguish them from 2s, but in some countries they cross the 2s to distinguish them from zs, so the ambiguities remain.
Who would use a kernel that is essentially the mainline kernel with more Rust? Would Debian or Red Hat use it? Maybe some very hard-core Rust hobbyists, but otherwise, why use the Rustier kernel?

But if they could demonstrate significant improvements in security and stability, then they would have something to say. Maybe the plan should be to rewrite a component that the mainline maintainers wouldn't agree to - something important with a significant affect on security and stability. Yes, it's a risk, but if their claims for Rust are true, then it shouldn't be a problem. If Rust doesn't offer a major improvement then it isn't worth the effort anyway. Put their money (or time) where their mouth is.
While DNG uses JPEG XL internally for great compression, its implementation sacrifices some of JPEG XL's inherent advantages. For instance, JPEG XL's progressive rendering and preview capabilities are lost within the DNG container. Additionally, JPEG XL's lack of frame boundaries (it has consistent filtering defined over all frame/tile boundaries -- being the only image codec that gets this right!!), is negated when used in DNG's tiled structure. This tiling introduces frame boundary artifacts at lower quality levels, similar to how other codecs behave in tiled contexts. Although these are minor issues, a pure JPEG XL implementation would offer superior progressive display, previewing, and artifact-free compression compared to the DNG-wrapped version.
There are plenty of cases where a complex thing has very simple behavior. For centuries, brewers could get away with a mental model for yeast as something that multiplies and converts sugar to alcohol until it can't anymore. It took quite a jump in technology to realize just how fantastically complex the inner workings of a yeast cell is.

I'm not proposing that gravity is underpinned by something complex, just that if its mechanism is out of our reach then so to are any conclusions about that mechanism's complexity.
Even better if you can get the kindle to control the smart plug and therefore the charge cycle. Keep the battery in a non-stressing range of 40-60% or something like that.
Cool, but needs color.