skysight-inc/HackerNews huggingface dataset:
The fact that this is possible at all is mindboggling.

Amazon is being a bad netizen here and has been from the start with S3 - yes, the original fault lies with careless app / appliance developers, obviously, but AWS has had sooo many security issues caused by their default settings, complex configuration, bucket takeover possibility and by having one large global namespace for all tenants instead of always adding the account ID as a suffix in the domain (like they do now with, say, ECR). Hell if you know a juicy target bucket, you can just poll its name and wait for some poor sod to make a fat finger mistake or not paying their bills and then immediately take over the bucket.

AWS should at the very least only allow re-registering a bucket from the original account - and if it or its super organization get deleted, the bucket name is gone forever until someone can prove by, say, providing corporate register documents showing a legitimate claim.
[Talking from the perspective of Eclipse, because it's the only IDE I invested my time in]

In this case, it's not. Eclipse put Integrated into IDE, but doesn't subtract transparency in the process. You can see what it does, tweak every step meticulously if you want, and return to defaults with one click, if you prefer.

What this transparency brings is mental flexibility and understanding. Do I want or need to switch? I'm doing the same thing in Vim or KATE of BBEdit in 15 minutes. Maybe I stumble with a couple of shortcuts, but that's not a problem.

The funny thing is I see the compiler command every time I press build, so it's burned in my memory after a day. While I can read valgrind outputs and understand what it says, Eclipse highlights the lines automatically, so I'm faster. While I can gnuplot performance graphs, Eclipse auto-builds them so they are on my desktop after a 10 hour torture run.

In my case, Eclipse enables me to carry a whole toolbox and more in a single folder, yet all the tools it uses and what it does is so transparent that I can switch away on an instant if I don't get my installation with me, or I'm connecting to a server in a datacenter far, far away.

I don't like to be blindsided by my tools. I like blinkenligths in a way, and Eclipse gives me these blinkenlights while being highly automatic.

So while I understand your case, it doesn't apply to Eclipse, at least, because it's not a strangler, but a great enabler and HUD in my experience.

For the time investing part, I don't grind. I get a tool, and start using it, and when it becomes limiting, I start poking it and learn what feature solves that problem at hand. By that way, I learn the tool as I go, and if the tool can't expand to my needs at some point, it fades away from use gracefully. I don't do "stop, drop, roll" thing while changing tools, so I can't paint a timeline about when I picked a tool and dropped another.
Docker-like containers will likely exists as long as there linux servers, maybe the trendiness will leave them behind, but they are a plainly good technology to deploy and distribute application with many fantastic usecases.

I too do see a future where Wasm is way more widespread but as of now we are deploying a small app with a MySQL in single docker container. I suspect that we won't be running MySQL compiled to a Wasm container anytime soon*

* I suspect that we could with the right transpilations/interpreters but for sure we won't
Likely trolling and pushing boundaries to see what he can get away with. Similar to Trump. They're grifters and like being the center of attention. I don't think they have real ideologies. Whatever works for them. Well, maybe Musk buys into techno feudalism.
I spend way too much time finding a printable scan of this some years ago. The Internet Archive has a very good version:

https://ia801707.us.archive.org/15/items/unix-magic-poster-g...
To me it still all seems confusing. I don't have a good mental model for it.

How does it handle things like `git rebase -x 'make fmt'` which might edit each rebased commit automatically, or `git rebase -x 'make lint'` which might fail but not leave a conflict marker. I didn't see any docs for exec in jj rebase so I guess this feature doesn't work

There's also no examples for how you work out which commit has a conflict marker. It's probably obvious in jj status but it would be nice to document, as I'm not yet interested in spending the time to test it.

And I imagine it all breaks in colocated repos too (I need submodule support, and I want to use gh cli etc)
I think a good analogy is being able to drive a car vs understanding the engine of a car.

Both are useful, but you wouldn’t hire a mechanic drive you around
Looks awesome, love that it is a local native app
Well, FSD it is officially in beta. Supposedly it would actually be safe once it reaches release; Which decade that might be, your guess is as good as mine.
My biggest objection to modern smart turn signal stalks is that you can’t turn the turn signal off easily. Sometimes the signal is on, I want it off, and there simply is no way to do it reliably. The old latching stalks could be moved to the center position, and the signal would turn off every time.
I've been keeping an eye on PVM since it was announced via the Kernel mailing list just over a year ago. It looked like a lot of work, and very early - to be honest, it is. But I took a couple of weeks out to build it, test it and report back - this is my write up, and a longer video walk-through so you can see it in action. Context is everything, so I also mention why microVMs are useful to me / my business, and briefly mention those use-cases. Hope you enjoy the read.

And if you've used PVM or know anything more about what's happening with it, I'd like to hear from you.
> HOWEVER left wing edgelords absolutely exist. Look up (at your peril) the phenomenon of "tankies". They're not your average communist, but rather apologists for Stalin's genocides.

But that is my point - tankie is someone who is a communist, hardcore pro-Stalin. There is no assumption that tankie is someone apolitical who is just joking around. There is no "he is just a tankie, doing things for fun, stop accusing him of being a communist".

Meanwhile, edgelord is someone who is supposedly just joking. A fine guy who just happen to draw swastika to get a reaction. Someone who you should let say and do movement things, because "deep down they do not mean it".

> there's room to discuss if it was genuinely a white nationalism thing or if he was just being an edgelord

This is what I reacted to. You cant replace "edgelord" by "takie" and white nationalism by stalinism in that sentence. It wont work. The "there's room to discuss if it was genuinely a stalinist thing or if he was just being a tankie" does not work, because tankie is literally a stalinist .

> Musk and his ilk are just people who "joked around" on 4chan and essentially radicalised themselves doing it.

Or rather, the were attracted to 4chan because they had the same opinions and values as those people. They did not just joked around, it was what they believed and who they were. And while both center and left pretended they are just playing, they meant it and managed to radicalize other people too.
Adobe Firefly App: Commercially Safe AI Video Model
Flubber
I've always thought it was because we say:

February Twelfth Two Thousand and Twenty Five

Feb 12 2025

02/12/2025

I know it's cool for Europeans ... and everyone else to hate on us for it but it does seem to make sense given the way we typically say the date.
> You only listed peer government grant agencies — which people believe have similar problems to NIH.

No. I also gave two other options.

Get the overhead rate of corporations from government contracts.

Or get the overhead rate that corporations pay to universities, just like the government.

> And the same people generally believe that’s also full of fraud and waste. So what’s your argument?

So then compare overhead rates in commercial contracts between corporations.

> So why don’t you do that, to prove them wrong? It sounds really easy.

Oh yes. I will send NIH, Musk, and Trump a letter, they will realize the error of their ways and change course. Come on. Now you aren't discussing things in good faith.

Although for the record major universities, including mine, have already written such letters to the administration. Much good that did.

All of these numbers are publicly available. Feel free to look them up. It's bread and butter economics.

But no. This isn't about proving anyone wrong. These people don't care about right or wrong. We are so past that. This is about their attempt to break the system. The fallout of which will be disastrous.

The impact of the wholesale dismantlement of our research capacity won't be seen by the average person for a while. Maybe a good 10 to 20 years. Then slowly you'll notice that all of the new companies, medicines, etc. have a different language on them, their names sound a bit foreign, that foreign stock markets are getting attractive, and that someone else is getting rich instead of us.

Restarting research will be nearly impossible. Europe has been trying to restart its research enterprise for more than half a century and the US still dominates despite massive EU investment. The biggest winner will be China who is paying a lot to attract researchers.
Emerging GenAI Use Cases and Spotlight on Secure Content Generation
Google pays a piece rate. They pay the rate the market will bear, unless you impress them, like these people did, and then they pay a bit more. They do not compensate you for your working hours.

Google is not going to pay you $200 if they leak your email address.

Google pays as much attention to security as Apple does.

If you want a world in which these kinds of security bugs create multimillion-dollar liabilities, you can advocate for the new statutes that will create that world; just be aware that only companies like Google will be able to afford to operate in that world.
in an old company of mine they started an intranet but if you opened it as http instead of https you'd see raw codes inclusive sql passwords and everything ; i reported to them, to which they replied "yeah just open it with https like everyone else"
Yeah, they exist. The big difference is that we don't accept their behavior, especially when in positions of power.
> argue for an uncontrolled anarchistic border and presence of foreign nationals in the same breath.

Can you cite any of these arguments? Because I struggle to take seriously your assertion when compared against data like these [1][2].

These data show laws were being followed and enforced. Maybe you want to argue about the level of enforcement, but you can't look at these data and conclude the border was "uncontrolled and anarchistic". Looks like Biden deported more people at the border in 2024 than Trump ever did in a single year. That's not anarchy.

The real issue with interior deportations is the drastic rise in pending asylum cases after 2020 - roughly 3x more cases in 2024 than in 2020, and the number is just going up. Dealing with this would be easy if you just deny everyone political asylum, but that would be lawless.

[1] https://econofact.org/immigrant-deportations-trends-and-impa...
[2] https://www.ice.gov/spotlight/statistics
"I saw it on the internet, so it must be true!"
Any plans on making this a native app without the overhead of having a server service running?
Only Very Online people were really aware of that, though. Once he progressed from insane ranting on Twitter to, well, that salute, it really became obvious to just about everyone.
Pixel Recorder is an "old forgotten product"? I have used it at least once a week for years. I used it a bunch yesterday. Very good app. I hope Google doesn't kill it.
> They key difference here is that I don't consider it as a "puzzle", whatever that means. I consider it to be a math problem. Problems of this kind are often encountered in both Game Theory and Probability Theory. It's perfectly fine to reason about your opponents strategies and either try to beat them all or find an equilibrium: this is still math and not psychology.

This was quite obviously a puzzle, of the "math problem" kind. It admits a pretty straightforward -- but counterintuitive -- solution, which made some admittedly smart people upset.

Everything else is smoke and mirrors.

> this is still math and not psychology.

If you read the responses to vos Savant's column, they are quite emotional. There was quite obviously an emotional response to it, of the "stubborn" and/or "must attack vos Savant's credentials" kind, too.
NowSecure Uncovers Multiple Security and Privacy Flaws in DeepSeek iOS App
The Art of Breaking Rules: What Separates Good Engineers from Great Ones
> What you really want to do is

No. I only need to run hit commit. The rest is just silly attempts to nitpick your way to faking complexity where there is none. You don't need to pass --all because you should know and tell what changes go into the commit. You don't need or care to skip precommit hooks, because either you don't have any or you have them and you want to run them. That's it.

Also, even your attempt to make a mountain out of a molehill ends up with a easier, smaller command line entry.
Why should we trust DOGE to get it right? They're not elected, and Elon has serious conflicts of interest with his business ventures.
Okay but we were talking about the unemployment statistic in this thread. Does it add any information? It likely does not.
what people wear seems way more superficial than what people say and do
Yeah, but you call them "hard-left" and do not pretend they are not communists or Stalinists. Meanwhile, edgelord is consistently supposed to be someone did the nazi salute, but the gesture was supposed to be innocent and totally not a far right thing.

You have put joking into quotes. Even in this comment, you are not trying to convince me that they are actually fine, that they are something less then Stalinists.
Thankyou! I checked with IPQS and my residential IP had been flagged for being "a proxy". I routinely SSH VPN (sshuttle) into my home network to do things so maybe that's why.
If you sell information about a vulnerability to someone that you know specifically is going to use it to break the law, you are an accessory to that lawbreaking. Ask Stephen Watt how this plays out.
I know what works and doesn't work where I need it to, unfortunately the edge cases matter in this instance and I can't work around them.

Thus, I'm stuck for now.
You can select a simple metric, practicality, that will be objective.

The items in VS Code are sorted the chance you have to use it depending of the context. In rider, commonly used items are in submenu (rename hiding in refactoring), less commonly used items are not in the submenus.

For the keyboard shorcuts, again you can argue practicality as an objective metric. The number of keys for a combo and distance between the keys have a big practicality factor, and Jetbrains IDEs loves F-keys (that you can't reach if you hold a keyboard like ergonomists recommends)
These guys keep threating to burn down everything. Honestly I wonder what kind of disaster will wake Congress up from hibernation. These guys are claiming to find fraud but they have no auditors. The hubris is insane. Though as someone who identifies as Gen Z, I can say that the arrogance is expected. They will not doubt be sued by contractors who will demand compensation for contracts signed. Let's get ready for a showdown.
In One of the Marines' Most Iconic Jobs, a Pattern of Suicide
Interesting, will give it a try!
Yes good point. The module/unit acts as the singleton instance, in a sense, though that might be the incorrect way to put it.

In any case, I think variables that are “global” but encapsulated in this way lose the potential for harm we associate with a global variable the whole program may be directly reading and writing.
The ability to add watermarks to text is really interesting. Obviously it could be worked around , but could be a good way to subtly watermark e.g. LLM outputs
> There certainly were

That’s rather indirect. But you do have a point.

However we do know quite a bit about those events? So any English speaker who cares can learn about them.

> How much effort do they typically devote

Well unlike illiterate societies they don’t need to because of books.

> massively less historical knowledge despite that effort.

Well obviously, we can’t really compare them with more literate societies. Then again we’re just very lucky that there was no complete societal collapse in the Greco-Roman world since the 500-600s BC. or so. Some highly literate civilizations like Carthaginians or the Etruscans were effectively entirely erased because nobody bothered to copy their texts).

The problem with oral traditions is that they can preserve knowledge of events that might have happened > 500 years ago (e.g. Homer describes cities, weapons and other aspects of pre Bronze age collapse Mycenaean civilization but it’s all intermixed with contemporary(Greek dark age) stuff and it’s very hard to separate fact from fiction (even ignoring the supernatural bits).
All patch versions must add digits so each one asymptotically approaches pi. Yes, this is not unprecedented.
I think you might be off by a factor of 10. Alphanumeric would be at least 36 characters, which would imply 2.8 trillion combininations (36 ^ 8).
> The git command line is an awful thing that should have been fixed a long time ago.

Again, please point out your best example that you believe proves your point.

All I see so far is shit-talking Git with abstract unsubstantiated complains to then hand-wave an alternative as the savior.

Point exactly where Git fails and what value is brought to the picture by any other alternative. Clearly Git's backend is not a issue by the way jj reuses it. So what exactly are these problems that are worth solving?
Ive been running deepseek R1 1.5 on a RPI4. Slow as hell but satisfying.
I'll let that marinate for a few years first before I decide to trust it entirely.

Though its not rural areas that are the only issue. There's saturation issues with other carriers in some of my travels. Only Verizon and AT&T doesn't fall apart comparatively.
> The part where you define what a good product is, this one matters

From the article "It was the story of the product. And it drove what we built."

The story is what kept the product development on track - and thus made the iPhone sell itself - the story isn't about convincing the public to buy, the story was an encapsulation of the products design - refined as time went on.

Product dev can easily go off the rails - take the recent story about Jeep having Ads popup on their infotainment systems - people wondering how anybody could think that's a good idea.

If you told a story about that product feature to your family and friends - you can be sure you'd get the 'puzzled look', and you'd remove it before the car ever shipped.
I see comments like this a lot actually and I'm curious, if the client is manipulating the intended style and layout of the site, do you really think it's the responsibility of the website owner ?

Otherwise I'm confused why you mention it.
I lost my father in the big Covid wave of May ‘21 and it took me a while to get over that intense trauma. That, along with the midlife crisis hit harder and I can feel that I’m not the same person anymore. I now find myself doing things that I’ve never thought of doing before. Things like regular 10K runs, climbing mountains, solo trips etc. maybe it’s the sense of urgency that we feel after a major event.

Interestingly during that crisis a comment I found on HN about a book (Hannibal and me) helped me a lot to overcome that phase.
hear no evil...
document.querySelectorAll('img').forEach(img => img.style.background = 'white');

As a quick hack for anyone else that has the problem (paste into your browser console).
> But no one is going to be comfortable with FSD occasionally plowing into a group of kids outside a school because statistically the total number of people who die in road traffic accidents is reduced on a per mile basis.

I really don't see why not. Since those deaths must be counted too, if it still is safer with than in mind then it can't be something that happens even rarely.
> The patch as it stands lives outside of any sub-systems within Christoph's purview

Wait what? Thought I saw somwehere that he's the DMA maintainer, and wasn't this a DMA patch?

> he is simply being obstructionist out of tribalism.

Or is it the Rust people who are being intrusionist out of their tribalism? Looks at least as much like that to me.
Not sure where I read this and am paraphrasing a lot, but: there's a point where `RAM bandwidth < processor speed` becomes `true`, and processor becomes architecturally data starved.

As in, a 32bit CPU that runs at 1 giga instruction/second, with a 16 Gbps memory bus, could get up to 0.5 instruction per clock, and that's not very useful. For this reason there can't be an absolute potato with gigantic RAM.

How gigantic is not useful, idk.
so.... in theory you should be able to create several visually identical links that give access to different resources?

I've always assumed links without any tracking information (unique hash, query params, etc) were safe to click(with regards to my privacy). but if this works for links I may need to revise my strategy regarding how to approach links sent to me.
I received an email this morning where someone created an issue in a public repo with a title containing a racial slur and mentioning a bunch of users, including me. This is just one example as far as I know.
after a red light acceleration was initially inhibited, driver pressed on the accelerator more and more up to almost 100% but the car was not speeding up much.

does anyone else see the problem in the design here? if acceleration is inhibited and then the inhibition is released, the accelerator should not activate in full force right away.

maybe acceleration should continue to be inhibited until the driver releases the accelerator before trying to use it again, or it should be locked so you can't press it down at all until the inhibition is lifted, but that too doesn't stop a driver from pressing down hard on it. though at least they would get feedback when acceleration starts.
> Amazon S3 buckets that had previously been used across commercial and open source software products, governments, and infrastructure deployment/update pipelines—and then abandoned.

Couldn't this happen with a domain too? e.g. you stop paying and someone else takes it over but your app is still pinging it.

I don't see how AWS is really special here to be honest. If you can't guarantee you'll always have <thing that provides updates> then you should probably add in a signing mechanism to your software to verify it's coming from the original devs.
Yeah I can’t believe what I’m reading on this site. The intellectual dishonesty is staggering.

This is truly the post truth world. I wouldn’t be surprised if many here who are making counter arguments either hate the US and what it stands for or are outright malicious actors
The blog writer's final design is basically what Ford uses in the F-series these days. But Ford's dials have a couple of functions that I didn't see mentioned. First, when you turn the temperature dial all the way hot and push hard into the stop, it turns on max defrost, and all the way cold and push is max A/C. Also, if the system is off, it turns on when you turn either dial. The dials are also large and rubbery for gripping with dirty hands or with gloves on, something a lot of manufacturers seem to ignore.
ULA's Vulcan rocket still doesn't have the Space Force's seal of approval