skysight-inc/HackerNews huggingface dataset:
It’s not clear to me, are these issues on the local or remote vs code instance? If remote, I understand elisp tramp is a lighter touch as far as dependencies go, but is the attack surface all that different? (That is, does the remote node binary have any permissions a user running arbitrary ssh clans wouldn’t?)

The OPs goal was to give an llm keys the kingdom on an ephemeral/throwaway virtual machine, are they saying the sockets opened up by the agent allow it to fiddle with the developer machine it’s meant to be isolated from?
> Unless we're optimizing for something other than developer experience and efficiency?

It's almost like there are more important goals wrt software development.
This is going to sound silly, and I'm not a medical pro, but maybe try fermenting some vegetables and fruit and eat a bit every day?

It's very easy. You cut up vegetables, put them in salt water and let them ferment for a few days to a week. Fermented carrots are really good. I also absolutely love greens fermented in rice water with a little sugar. There are many recipes online, also for lightly fermenting fruit.

Anyway there is pretty strong research on the connection between gut microflora and depression.

Probiotic fermented foods (especially high fiber fermented foods) are a wonder.
There are many things (I frankly don't think there's a more specific word for this) like diets and psychedelics where many of us (rigorously minded) are constantly seeking proofs within systems containing sufficient complexity to render conclusions nearly impossible.
That's version 4. Here's version 2, which looks like the first patch submission:

https://lore.kernel.org/linux-security-module/20230204050954...
> The thing that correlates highest with SAT score is household income.

Something like 25% of students at Harvard had a learning disability, one of the highest rates in any school in the nation. Do you think that's real disabilities, or their parents know doctors to give the diagnosis, admissions coaches to tell them to get one, etc. With the learning disability the student gets unlimited time on the SAT and can plug and chug all the math answers instead of having to use heuristics of eliminating etc. On the reading comprehension they can read the passage five times over. On writing they can turn in their 8th draft.

https://www.wsj.com/articles/colleges-bend-the-rules-for-mor...

https://www.hollywoodreporter.com/lifestyle/lifestyle-news/h...
Honestly, I'd love a terminal based editor/IDE that is essentially a shameless clone of VSCode.

nvim showed me that it's possible, with mouse events, right-click context menus, and a rich editing experience. I did genuinely try to transition to nvim but I use my mouse a lot; resizing panels, using the file tree, copy/cut/pasting files in the file browser, tabs, etc.

That's not to say nvim is bad, but after hours of configuration, I personally found myself less productive with it when compared to VSCode - however VSCode is bloated, slow, uses a lot of RAM, and SSH functionality is unreliable.

I actually started writing this as a side project - using Rust, ratatui and a plugin system based on wasm (and dynamic C libs), but you know how side projects go
Central European here (Poland). The bizarre and amazing thing is the change that's been happening in the region over the last 20 years or so: the large cities have become very clean.

So, what you wrote stands true for smaller places, but large cities are now very clean. Not quite Japan-level, but close, and certainly much cleaner than anything in western Europe.
This administration's actions are indeed unprecedented and hostile to science, but the author is pulling a trick - he is not speaking about science itself, but about the scientific community.

Because if he were speaking about science, he would have to concede it has been under attack for a while - when scientists were forced to make an ideological oath to diversity to get hired [1,2], were hired primarily based on adherence to that ideology [3,4,5], were told by major scientific publications to avoid or simply not publish studies that might question that ideology [6,7], disavowed studies based solely on them being used to criticize favored causes [8], were prosecuted by the state (albeit in Sweden) for true findings that harmed that ideology [9]. Papers were rejected if their results went against the liberal worldview, but methodologically-identical papers with pro-liberal results were accepted [10], and scientists were barred from accessing taxpayer-funded data if there was a risk their research might harm the dominant ideology [11].

Yes, science has been under attack for a while, but the author didn't notice because it was his ally scientists attacking it.

[1] Required ‘diversity and inclusion’ statements amount to a political litmus test for hiring - https://www.wsj.com/articles/the-universitys-new-loyalty-oat...

[2] Diversity Statements Required for One-Fifth of Academic Jobs - https://www.schoolinfosystem.org/2021/11/11/study-diversity-...

[3] Berkeley Weeded Out Job Applicants Who Didn't Propose Specific Plans To Advance Diversity - https://reason.com/2020/02/03/university-of-california-diver...

[4] A recent report from the Goldwater Institute found that 80% of job postings for Arizona’s public universities required applicants to submit a statement detailing their commitment to diversity, equity, and inclusion. - https://www.goldwaterinstitute.org/policy-report/the-new-loy...

[5] Mathematicians divided over faculty hiring practices that require proof of efforts to promote diversity - https://www.sciencemag.org/news/2020/01/mathematicians-divid...

[6] Science Must Not Be Used to Foster White Supremacy - https://www.scientificamerican.com/article/science-must-not-...

[7] Science must respect the dignity and rights of all humans - https://www.nature.com/articles/s41562-022-01443-2

[8] I Cited Their Study, So They Disavowed It - https://www.wsj.com/articles/i-cited-their-study-so-they-dis...

[9] A Swedish professor proved that most rapes are committed by immigrants. The prosecutor's office took care of it - https://portal.research.lu.se/en/activities/a-swedish-profes...

[10] Human subjects review, personal values, and the regulation of social science research. - https://psycnet.apa.org/record/1986-12806-001

[11] The National Institutes of Health now blocks access to an important database if it thinks a scientist’s research may enter “forbidden” territory. - https://www.city-journal.org/nih-blocks-access-to-genetics-d...
Projects don't just live or die purely on technical merits. There are so many examples across history of this.
I wonder how UK politicians would feel about being no longer able to use their iPhones.
Why do you think that research universities should go bankrupt? What do you think should replace their function in society?
I don't do plunges but do cold showers. They are not the same but cold showers do have one anecdotal benefit for me, I don't feel cold post the cold shower.

My immunity had been pretty good but am not sure if I can attribute that to cold showers. I moved to the bay area in August after nearly a 14 year stint in India. This winter the flu virus got me. I was able to fight it off without a lot of meds, I got sick after nearly 4 years.

So am not sure if my body has good immunity anymore. Overall, I have come to liking cold showers simply because of the post shower feeling.

A hot shower is great while in the shower, not so great afterwards.
A cold shower is miserable the first 30 seconds, a pretty good feeling afterwards.
Reminds me of Jenkins (the CI system) remote agent.

One would expect a remote agent with well-defined capabilities: read/write/delete files and directories; run the process with stdout/stderr capture; stop the running process started in previous item.

Instead, there is a generic bytecode executor, and Jenkins controller ships out Java bytecode to be executed remotely. Crazy stuff.
Real Profits, Shared
> The person in charge of the Pentagon is Pete Hegseth (not Musk) and he said in a speech today that they have a goal of finally passing the audit.

And the person in charge of Pete Hegseth is Donald Trump, who just ordered Musk, not Hegseth, to lead the audit.

Not that a Fox news commentator who starts his mornings with a three martini breakfast would be an improvement, mind you.
Every time we talk about VC money in the last 20 years, we’re really talking about a wealth transfer from workers and the middle class to the rich via the Cantillon Effect. Cheap money enters the system through banks, funds, and corporations, not through wages. The people who get access to it first (asset holders, investors, VCs) deploy it into equities, real estate, and startups before inflation devalues the currency for everyone else.

Post-2008, ZIRP and QE pumped trillions into financial markets, making capital nearly free for those who could borrow at scale. That money didn’t go into raising wages; it went into inflating asset prices. If you owned stocks or real estate, you got richer. If you earned a paycheck, you watched housing and living costs go up while your wages stagnated.

VC was one of the biggest beneficiaries. With bonds yielding nothing, institutional investors had to chase returns, flooding venture funds with capital. That’s how we got an era of insane startup valuations, SoftBank-style mega-funds, and entire sectors built on free money. Growth-at-all-costs became the norm because the cost of capital was effectively zero.

Then COVID hit, and the Fed doubled down—more QE, more stimulus, even lower rates. Another massive wealth transfer. Money printer go brrr, asset prices moon, and suddenly we have SPACs, meme stocks, and a startup funding frenzy. Meanwhile, workers got a couple of stimulus checks, and by the time the dust settled, everything from rent to food to cars was way more expensive.

Now AI companies are running the same playbook that cloud megascalers ran before them—monetizing open-source work while locking out the people who actually built it. Cloud providers took open-source databases, infrastructure, and developer tools, turned them into managed services, and extracted billions in profit without meaningfully compensating the people who did the work. AI companies are now doing the same thing—scraping open-source repositories, academic papers, and public datasets, building models upon it then slapping on proprietary fine-tuning and charging for API access all the while blatantly raising capital by promising to make the same workers they stole from obsolte. All of it built on the backs of researchers, engineers, and artists who never see a dime, but also on the backs of everyone else via the cantillon effect.

Now rates go up, the bubble deflates, and who gets left holding the bag? Not the VCs who cashed out early. Not the bankers who took their fees. It’s the workers, the middle class, the open-source devs, and the late-stage startup employees who thought they had something real. The cycle repeats.
The way most people learned this is because somewhere in the middle of last year, VSCode's node install stopped working with the old glibc.

https://github.com/microsoft/vscode/issues/201129

Most people who hit this hard pinned their vscode to 1.85 & it took a while till this turned into a simple nag bar on top of their editor.
Is the news here that someone bolted an LLM onto that? Extensions always had this degree of access. npm or pip install can also do some pretty nasty stuff with a malicious package.
Yes that's the one ! I found it when I was trying to solve the tetraminos in The Talos Principle without looking for a game guide... I agree with OskarS it is a rewarding algorithm to implement.
This part of the reply exemplifies one of the big problems in the kernel community:

> You think you know better. But the current process works.

Regardless of how badly broken the kernel development process is, Linus and others observe that Linux continues to dominate and conclude that therefore the development process "works". Success in the market blinds the successful vendor to their defects. Sound familiar?

If Linux carries on down this path then eventually something else that has been subject to more evolutionary pressure will displace Linux, and we'll all be telling stories about how Linux got complacent and how it was obvious to everyone they were heading for a fall.

And honestly, with maintainers like Hellwig maybe that's what needs to happen.
The rules for off campus rates are pretty strict, and not just “I’m not in my office.” They get used for Extension, stuff like that.

Ironically, prohibiting “breaks” to Gates, Chan-Zuckerberg, etc. and saying the rate they get is the same as your NIH rate would probably go over well. Most people I know in research admin are perpetually annoyed that private foundations act like being subsidized is their right.
I lived and worked there for several years and I agree with them. Pretty sure my wife, who I met there, would also agree.

You can’t just lob a “you don’t know what you’re talking about” without some actual context like that - this forum is supposed to encourage more useful discussion.
> Looks pretty similar to what I'd expect to a regular European town.

Europe is not one country, and even within the same country, there may be big differences between regions, and within the city itself. Naples and Geneva for example are like polar opposites.

Japan is very uniform by comparison, and about as clean and well maintained as the best European cities, I'd say the US is about average by European standards, but with less variation. The general, very rough idea with Europe is that the further north you go, the cleaner it is.
Sometimes so, tax records are public in some European countries.
Everyone knows you could start the crude way today and refactor the duplication later after it proves itself, if you actually wanted to proceed rather than throw fits.
Apparently this is how the "automated" solvers work. Would love to find a source describing how all of this works. One website I frequent uses Datadome and their captcha has a timer on it. I'm assuming this is a factor in "human-ness". Are we all going to be tied to our phones solving captchas as fast as possible?
Other's have said maintenance, which is right. But the context is also important in that if the trains are delayed by 5 minutes in Tokyo at peak hours, the congestion can be so bad that many people won't even fit in the next train. This can have a cascading effect, and since so many use the public transport, opting for car is not a workable solution in such density.

So it actually makes sense to focus on efficiency and reliability at peak hours, at the cost of running it 24hours. Tokyos rail line are one of the few trains in the world that actually make profit (although not all of it from trains) and reliability is kinda key to this profit margin, especially at prime time. (Most major stations have malls and commercial activities in Japan. And those are run by the train companies, and surprisingly the majority of the profit for Train companies are not the trains but those activities. Those are not open past 22:00 in most places, so that's another reason)

Edit: Not just bike mentioned it on this video (timestamp)
https://youtu.be/6dKiEY0UOtA?t=887
>> Rude behavior, like dancing

I think Americans are a little more footloose in that respect.
VSCode is an IDE designed to suffocate the open source alternatives, so that they retain full strategic control. Oh, and it also promotes their tech (Copilot, Github, C#, TypeScript). It's a long list of issues.

It works well though, particularly over SSH and devcontainers, although it has severe bugs that they refuse to fix, and it isn't open source so you can't fix it yourself.

I wish software was secure by design, like browsers are.
But it just isn't a business priority, because consumers have so little to lose.
And enterprise customers have strict environments, separate staging/production environments that reduce blast radius, and so on, so the insecurity is tolerable. Besides, employees can't be trusted anyway, so what's the point of having a very secure IDE if they immediately run curl|sudo bash.

Are there any good web-based alternatives? (like Runpod's openvscode-server)
Miracles!
I had a similar experience. I liked nvim for simple editing, but not for anything multi-file. And then I found Helix, and I never looked back. I only hop into vscode if I want a Jupyter notebook.
From there:

> At its core, the quoted saying is incompatible with fascism and frankly nonsensical. Under fascism, the state uses the market efficiency of capitalism to regulate and control the economy, namely by concentrating market shares to a relatively few large corporations into cartels, which in turn the fascist state has direct control over. Whereas, corporatism is state control by large interest groups, commonly pictured as large multi-national corporations with monopolistic powers. In other words, the controlling party under corporatism is the reverse of that under fascism."Fascism recognizes the real needs which gave rise to socialism and trade unionism, giving them due weight in the guild or corporative system in which divergent interests are coordinated and harmonized in the unity of the State."The Doctrine of Fascism (1932) by Benito Mussolini and Giovanni Gentile
I currently commute by train _and_ bike, but this only lets me filter by one or another, unfortunately.

This seems to be a common problem with navigation systems in general. It's easy to get walking+transit directions, but nigh impossible to get bike+transit, even though all the buses and trains near me let me bring a bike onboard.
I don't see any reasonable alternatives that can support what VScode does, like running extensions that aren't installed locally. Maybe those features aren't something you want, but they're part of the product feature set.
Can you say, "RCE"?
> Uber and Lyft are in fact more expensive than taxis.

I doubt that.

I double checked, just to be sure since I paid for taxis for years for a specific trip, each way. Uber is still cheaper TODAY than taxis were when I switched 10 years ago. One way 5 minute trip, Friday 6pm in orange county, ca still under 20$ today.

20$ was a good deal (or ripoff, depending on your attitude) for a taxi in 2015, for the same distance and a variable waiting time. Let's just say it's about equal for sake of discussion. There was no app, but there was a dispatcher you could call. There was no incentive to improve, until then.

Companies have had to adapt and prices have come down. It would no doubt be 30$+ today for taxis, if not for rideshare companies.
Does Linux have the ability to load drivers dynamically (like Windows)? Is there a reason why developers don't develop drivers outside of the kernel and have users simply install them post-install?
Other than not being the exact way the author would have done things, what's the issue? If you're afraid your editor will go wild — and this is a possibility for any editor — you should setup your development environment in some type of sandbox. Personally, I host mine in a multipass virtual machine.
You are right. But I thinking it's fair to say that industrial progress did have some consequences that could be easily prevented. Mostly at the beginning.

But I do not like this alarmist view either. It's usually useless and just make people feeling more endangered which is not a good prerequisite for racional debate. I would be worried more not about the technologies it self but by their human overlords.
In London, that's called Cockfosters.

Other than that, there's an intriguing Clive Barker short story on how lonely passengers on those late-night trains actually end up ...
Have you tried Zed?
I grew up in one of those small hometowns that sends a lot of people to the close by Ivy League school.

It was an open secret that getting a learning disabilities diagnosis is a great SAT booster. Also makes you eligible for more time on regular school exams and you can use it to later get more on the LSATs (not sure about other grad level exams, but I am sure it’s similar)
I work at NASA in tech development and I have found that we have a lot of poor quality support service contracts. The faceless contracting companies supply staff that technically fill roles like providing IT support services, or supporting purchasing. More often than not they are so utterly unhelpful and unknowledgeable that it's actually easier and faster to do things myself, totally defeating the purpose. The contracting mechanism seems to add significant extra communication overhead to everything making things much more sluggish, bureaucratic, disconnected, and just plain unpleasant. I actually care very much if my work gets done.

Getting a large contract in place can be a miserable slog and take a huge amount of time and effort to sort out, particularly with the cumbersome government contracting rules and laws. Good contract documents are also really challenging to write. Often times the results will be non-optimal, terms will be interpreted in ways you didn't intend, or you with you had put some more info in there. In many cases I believe the timeline to get a good contract in place can be comparable to the work that we want to perform. That's just silly.

Use of contracts for tech development creates large disconnects and significantly reduces our control and responsiveness to changing needs and ideas. If NASA employees are doing the work we can easily pivot when circumstances change and re-prioritize labor and much more quickly drop bad ideas as we learn new things. We can start investigating something without completely knowing what we're doing and figure it out as we go along. That sort of thing is harder to do with a contract. If the work is being done by a contractor, changing anything is vastly more difficult and complicated, and often not even worth the effort.

If we have a device or something developed by a contractor they often manage to contaminate it with some kind of proprietary info making it much more difficult to use and communicate the data. The tools and devices we develop internally don't have that problem and we're free to use, adapt, and communicate technical info about them as much as we want. Also, if we develop something ourselves, we inherently more deeply understand it and can more quickly make modifications or test out new ideas. That's less often the case when work is done on contract. IMO many of our most valuable developments are done internally due to the enhanced flexibility.

Not that all contracts are bad. There are plenty of cases where using contracts makes great sense and works out terrifically. However, you often just have to hope the right sort of company has decided to exist because doing it ourselves is often not an option. I have absolutely been told about a contractor: "I know they're not the best, but they're the only one interested in doing this work. If don't fund them for too long they may lose interest and then we'll have nothing".

There are plenty of other problems unrelated to contractors as well. But over-reliance on contracting is a big one.
Moreso for arrays
Asimov's Jokester
In "Jokester" Asimov tells the story of Noel Meyerhof, a "Grand Master" who knows what questions to ask Multivac... I used to think that the Grand Masters where the ones that know how to efficiently use Google Search, but today i think that the art of prompting LLMs is a much better parallel.
Awesome! This makes browsing funner. I am shocked how many PPP loans went out - it's almost every single business in some places. I had no idea.
[dupe] https://news.ycombinator.com/item?id=42972876
Emacs Tramp just uses whatever SSH access you already have to a remote host, to copy files back and forth. It may use scp or sftp if the remote host advertises the protocol, but it does not install anything or invent any of its own protocols.
Oh and it keeps old copies around after an upgrade. (Maybe this was fixed?) I've had it use up all the disk space on a small VM.
7000 is not a lot better.
Supersizing vehicles offers minimal safety benefits – but substantial dangers