skysight-inc/HackerNews huggingface dataset:
You're essentially suggesting a Drake equation [1] equivalent for the number of security vulnerabilities based on NLoC. What other factors would be part of this equation?

[1] https://en.wikipedia.org/wiki/Drake_equation
Do you sometimes feel like the end justify the means?
It can, but that's another type of "shallow", or more exactly "not-deep" cloning, called blobless cloning [1]. There is also treeless cloning, with other tradeoffs, but much to the same effect.

I found this[2] very enlightening.

[1] https://github.blog/open-source/git/get-up-to-speed-with-par...

[2] https://www.howtogeek.com/devops/how-to-use-git-shallow-clon...
For us non-compiler nerds, can you comment on which compilers support musttail? I suppose latest clang has it. gcc: since you mentioned support was only added in July 2024, I suppose it's not in gcc 14 yet? How about Apple clang from Xcode 16? And MSVC?
Is there any technology that can do separate voices for each individual person speaking in an audiobook?
You can run non-module scripts, yes, though not modules.

Though it's easy enough to run a caddy local server. It was easier in the past, in earlier caddy versions one could just place the caddy binary in PATH and launch `caddy` from any directory to auto serve a local server, now it requires more arguments or a config file.
Major YouTube channels are typically managed by multiple people through the channel management features and brand accounts. I don't think it's possible to even log in to the brand account (which has a generated email address like channel-000000000000000000000@pages.plusgoogle.com) instead it can only be accessed through an authorized user's account (which are distinct from the channel, i.e: it's not the email address that would be surfaced by this attack). Granted, things have changed over the years, so there may be old channels lingering with Google account linked email addresses, but from what I can tell, all channels were converted a while back.

https://support.google.com/youtube/answer/7001996?hl=en-GB

edit: My hunch is that the channels the OP's attack was able to target are not actual channels but rather YouTube users (who have a "channel" because that's how YouTube represents users): so "YouTube User" is the correct description of this attack, which is distinct from what you're thinking of as a channel.
> The problem is that that workflow is still ultimately harmful nonsense[0] that is based on a misunderstanding of version control.

The problem with that article is that it's utter nonsense and completely misses the whole point of rebase.

No one cares if under the hood a rebase is technically a merge that forgets where it came from. I mean, isn't that the whole point of a rebase?

The whole point of a rebase is to move your local branch onto the tip of another branch while preserving the local history. The goal is to simplify the repository history by eliminating irrelevant noise. That's not a problem, it's a solution. Is this too hard to understand? How can they possibly miss the extra forks and joins in their commit graph? Do they not see that? Do they spend any time looking at commit graphs?

It's ok if Fossil's devs want to force their opinionated take on VCS onto Fossil's users, but this does not mean they are right or have a point. In this case they are not only missing the whole point but also taking a completely wrong approach to mitigate it. The fact that they felt compelled to put up a page trying to present their case (and failing) is already telling.

If there is criticism to throw at Git, rebases clearly ain't it.
I've been using Jetbrains IDEs for quite some time. I currently use IntelliJ and Cursor together. Cursor is everything I hoped Jetbains AI would be. The TypeScript support in VSCode and derivatives (like Cursor) is great, unlike Jetbrains. As I already have a license, I switch to IntelliJ for the fantastic Git and DB plugins, as well as the great refactoring and find/replace features. Local History and diffing in Jetbrains is also far superior, so sometimes I use history labels as snapshots in between significant changes from Cursor.

If you're transitioning from ChatGPT pastes to an IDE integration, I would recommend a trial of Cursor. They have acquired SuperMaven, and the autocomplete feature is mostly appropriate and useful. I think the chat-diff-review-apply workflow really tightens and accelerates the feedback loop, as well as the ability to submit an error from the terminal to the chat session with a single click. People say good things about the Compose and Agent features, but I haven't so far been drawn to them to explore.
It's wasted money if they don't change their level of bureaucracy
I think you misunderstood. Did you see the list of features? My example is not the only thing jj does.
They really aren't shy about massive breaking changes.

I'm still upset about Google Reader.

https://killedbygoogle.com/
I remember at an old job where the feedback loop was quite slow, so you always ended up with multiple branches or PRs in play at a time. I ended up using git worktree to basically have each branch as its own separate workspace (rip my hard drive) because the process of stashing and switching, pulling, and untangling wip commits got old fast.

I still juggle a few plates now (for better or worse) and especially with VisualJJ that experience is much nicer. I can just switch between bookmarks and do what I need to, and `absorb` makes that super nice in terms of addressing PR feedback.
Yes, that's what the arms manufacturers want.
Let's not do (much of) that.
and whoosh, it's gone
"That's my kink" is all I can think of right now...
Decent article, but one nitpick: press coverage of human deaths from H5N1 started in 1997, not 2022.
“Applied 1 downgrade from the base amount due to complexity of attack chain required” <— is this common?

I’ve only participated in a few vulnerability programs, and most of them reward less if the security flaw is stupidly simple (but serious) such as revealing user emails in the page source.
we don't "allow" people being born because peoples have a right to be born, it is rather that people have a right to have children.
>VSCode's/OSS LSPs are often more performant/feature rich than whatever running inside IDea that takes tens of minutes to index a project in my computer.

Typically if this happens I notice IDEA is indexing the entire dependency tree for something like node or python. It'll have an understanding of everything but is much slower to index and typically not needed. If you exclude node_modules you'll have very fast time once again
Sadly, AI will be needed for defense.
The peace that you refer to, involved a strong restriction placed by more powerful states which restricts nuclear weapons to a few states. This didn't involve any principle, but was an assertion of power. A figleaf of eventual disarmament did not materialize.

I do claim that it is obvious that widespread acquisition of nuclear weapons by smaller states would be a severe degradation of security. Among other things, widespread ownership, would also mean that militant groups would acquire it and dictators would use it as a protection leading to an eventual use of the weapons.

Yes, the danger of AI weapons is nowhere at that level of nuclear weapons yet.

But, that is the trend.

https://www.nytimes.com/2023/07/25/opinion/karp-palantir-art...

https://news.ycombinator.com/item?id=42938125
And their default model is pretty bad in JS/TS world. (but great in C#)
Copilot works great for every language but the plugin integration into JetBrains IDEs is not as deep.
That’s the date format used in the UK
US, Australia, and UK Sanction Infrastructure That Enables Ransomware Attacks
lol no SaaS without hallucinations
No it's really not. I've had enough problems with badly-maintained/broken packages that I've switched to Archlinux (btw). Just go with Debian Sid or Arch.
Saving this for another round of 'UFO sightings' panic.

There was recently an article about the 'UFOs' actually being 'just' Chinese balloons designed to record everything about the radars poking them to learn about capabilities of US defense systems (including F-35 in action). Guess we'll see more of them soon.
You might not need staging. Seriously
Yeah, I don't see it happening.

This other tidbit from the article was funny as well: €109 billion investment plan for AI projects in France in the coming years.

How can a journalist write this verbatim when the likelihood of this happening is next to nil. France had a massive budget deficit last year, it had to pass a law to increases taxes (yet again) and is basically broke.

So where is this magic money going to come from? That is the question and theses announcements are never followed by any real investigation from the journalists that are parroting them.

It's vaporware at it's finest.
Uniqueness is not the end goal, first and foremost it should be competitive. Just highlight where exactly you do things differently (and better) than others.

If that's not possible to formulate even internally, the company is in trouble.
Does using SSH this way solves the Ctrl-Y problem in AWS Session Manager, which kills the session?
I love the localfirst idea but I don't love web browsers. They're the platform everyone has to have but shoehorning 40 years of UI development and products into them seems like a mistake.

I can see why local UI development fell out of favor, but it is still better (faster, established tooling, computers already have it so you don't have to download it). I can't help but feel like a lighter weight VM (versus electron) is what we actually want. Or at least what _I_ want, something like UXN but just a little more fully featured.

I'm writing some personal stuff for DOS now with the idea that every platform has an established DOS emulator and the development environment is decent. Don't get me wrong this is probably totally crazy and a dead end but it's fun for now. But a universally available emulator of a bare bones simple machine could solve many computing problems at once so the idea is tempting. To use DOS as that emulator is maybe crazy but it's widely available and self-hosting. But to make networked applications advancing the state of emulators like DOSBox would be critical.

Actually local first, maybe the way forward is first to take a step back. What were we trying to accomplish again? What are computers for?
I agree, I think they are trying to cargo-cult Silicon Valley ecosystem without realizing that it will never have a chance in European's clueless bureaucracy, massive social safety nets etc. It doesn't mean nothing can be built, but it won't ever be as effective and bleeding edge for various good and bad reasons and mere fraction of whatever goals aimed for.

And defense spending is a must, how in 2025 they could NOT invest easily 5% of GDP into security is beyond me, thats not a bad requirement from trump actually (if some time is given to reshuffle budgets). There are threats from all sides - one genocidal dictator on our borders repeatedly keeps stating how he will wipe out few hundreds of millions with atomic bombs aimed at our cities. Inner threats with Hungary and Slovakia now.

Then there are global threats, be it China or maybe even US if trade wars will go on 100%, and who knows what Turkey actually wants. Yet Leyden's blind focus on green deal when whole world literally abandoned it, killing our industries while making 0 difference long term is... I don't have a nice word for it. If there is actually some sound logic behind those moves she failed remarkably with communicating them to literally everybody.
I Resigned from xAI Tonight
Yep, same here. I just uninstall because it's unusable compared to vscode/vim/emacs/zed for the same jobs. And I have a new-ish macbook pro. I always hear people say they have a different experience, but, like with so many things in life, that always seems not true when I sit next to them; then it is just them being used to sluggish misery as the normal.
Yeah, you might wanna get an update on that meeting and the correctness of the original correctiv article: https://archive.is/L0Pxo
There are still things like opening a menu somewhere that has a random worst case latency of ~2 seconds for me. It feels random and is frustrating, but not quite enough where I'd consider learning to use something else
Beautiful in that painfully human way, I agree.
EU can always get a discount on that once they ratchet up regulations. I don’t understand Europe, why don’t they just focus on hyper growth with limited oversight like America?
vegetative electron microscopy
MM/DD/YY is an exclusively American standard

https://en.wikipedia.org/wiki/List_of_date_formats_by_countr...

I have no idea why America settled on MM/DD/YY, which seems like absolutely the least intuitive permutation of D, M, and Y. Except perhaps MYD.
Nazis were interested in that, and fascism is a bigger category. AfD supports fascist regimes like Russia. A small good thing doesn't cancel out huge negative thing.
> I think we may eventually get camera authentication as a result of this, probably legally enforced in the same way and for similar reasons as Japan enforced that digital camera shutters have to make a noise.

Maybe, but I'm not bullish on cryptology having a solution to this problem. Every consumer device that's interesting enough to be worth hacking gets hacked within a few years. Even if nobody ever steals the key there will inevitably be side-channel attacks to feed external pictures into the camera that it thinks are coming from its own sensors.

And then there's the problem of the US government, which is known to strongarm CAs into signing fraudulent certificates.

> 200 years ago there were about 1 billion people on earth; now there are about 8 billion. Anarchoprimitivists and degrowth people make a similar handwave about the advances of the last 200 years, but they're important to holding up the systems which keep a lot of people alive.

I think that's a good argument against the kazinksy-ites, but I was primarily speaking towards concerns such as 'misinformation' and machines pushing humans out of jobs. We're still going to have food, medicine, and shelter. AI can't take that away; the only concern is adapting our society so that we can either feed significant populations of unproductive people, or move those people into whatever jobs machines can't do yet.

We might be teetering on the edge of a dystopian techno-feudalism where a significant portion of the population languishes in slums because industry has no use for them, but that's why I said we need to adapt. There has always been something that has the potential to destroy civilization in the near future, but if you're reading this post then your ancestors weren't the ones that failed to adapt.
I feel like the answers to this will be heavily skewed by the jurisdiction you live under.

Here in the UK, I had an airline hold a substantial amount of my money hostage and they refused to engage in a discussion to allow me to get my money back. I spent ~30mins filling out a small claims court application, paid the obligatory £115 fee, and a few weeks later the airlines lawyers contacted me offering me my money back along with a decent amount of compensation.

Equally, I've witnessed people pursue employment tribunal claims against their employer here in the UK, only for the process to take years, the preparatory effort being enormous, and the outcome being a positive judgement in their favour along with an insultingly meagre financial award. For some, that's still worth it purely for the vindication and validation.
I also have an A770. Don't use it for AI, but it runs fine for general 3D use (which mostly means either Minecraft, other similarly casual games, or demoscene shaders). I'm pretty sure I'm not utilizing it fully most of the time.

My main complaint is that the fan control just doesn't work. They stay at low speed or off no matter how hot the card gets, until it shuts down due to overheating. Apparently there's a firmware update to fix this, but you need Windows to flash it. You can zip-tie a spare fan somewhere pointing at the card...

Secondary complaint is that it's somehow not compatible with Linux's early boot console, so there's no graphical output until the driver is loaded. You'd better have ssh enabled while setting it up.

It's also incompatible with MBR/BIOS boot since it doesn't include an option ROM or whatever is needed to make that work - so I switched to UEFI (which I thought I was already using).

When I ran a shader "competition" some people's code with undefined behaviour ran differently on my GPU than theirs. That's unavoidable regardless of brand and not an Intel thing at all.
> That params is nothing more than just base64 encoded protobuf, which is a common encoding format used throughout Google.

Pour one out for the google dev in charge of b64 encoding their fancy binary message format so it can be jammed inside a JSON blob. If you want a vision of the future, imagine a boot with "worse is better" imprinted on the sole stomping on an engineer's face, forever.
Small correction: that's the date format used by most every country except the United States.

https://en.wikipedia.org/wiki/List_of_date_formats_by_countr...
Hmm... is the mutability of data really enough to create a need for transactions?

For example here on HN (which afaik also stores the data in files) you can change a comment you wrote. But that type of mutability does not call for transactions, right?
82% of Waymo's autonomous miles in California were human supervised in 2024
You get extremely diminishing returns with probes. There's only so much you can do from orbit. Rovers are substantially more useful, but are extremely expensive. Curiosity and Perseverance each cost more than $3 billion. As the technology advances and we get the basic infrastructure setup, humans will rapidly become much cheaper than rovers.

A big cost with rovers is the R&D and one-off manufacturing of the rover itself. With humans you have the added cost of life support, but 0 cost in manufacturing and development. The early human missions will obviously be extremely expensive as we pack in all the supplies to start basic industry (large scale Sabatier Reactions [1] will be crucial), energy, long-term habitation, and so on.

But eventually all you're going to need to be paying for is food/life support/medicine/entertainment/etc, which will be relatively negligible.

[1] - https://en.wikipedia.org/wiki/Sabatier_reaction
Day-Month-Year is the standard everywhere in the world apart from the US.

Big and little endian dates are the only way that makes sense I think. Doing it the US way where day is inexplicably between year and month just feels corrupted to my mind.
why not? we’ll be throwing rainbow flags at Russians when they decide to invade?
now I'd like to see Cambrian knot-fish!

is there a slogan for how Spekkens' metaphysics (epistemology?) differs from "working up to isomorphism"?

(we prefer theories which result from applying condensation to situations in order to form DAGs? minimise strongly connected components?)
> It's not hard

It still is because in the end you're dealing with dozens of amps on the "high" voltage side and hundreds of amps on the "low" (GPU chip) voltage side. The slightest fuck-up can and will have disastrous consequences.

GPUs these days are on the edge of physics when it comes to supplying them with power.
Teens across Asia migrate to Taiwan for promises of semiconductor jobs
If the SEC is a portal between private Finance and government, then AI is a portal between tech and government. It’s a way for money people of a certain tribe to legally funnel money between the government and private sector in full duplex (bi-directional. Government gives you money, you take money and make more money, use it to buy more politicians, who then “invest” more money into … you).

These governments are basically being co-opted.
I don't share your optimism.

Have a look at https://www.nasa.gov/humans-in-space/20-breakthroughs-from-2... and keep in mind that those are those are already the highlights. The best they could come up with.
The declarations are very vague as to what will actually be done other than declaring but I get the impression they want to make it more complicated just to put up a chatbot.

I mean stuff like

>We underline the need for a global reflection integrating inter alia questions of safety, sustainable development, innovation, respect of international laws including humanitarian law and human rights law and the protection of human rights, gender equality, linguistic diversity, protection of consumers and of intellectual property rights.

Is quite hard to even parse. Does that mean you'll get grief for you bot speaking English becuase it's not protecting linguistic diversity? I don't know

What does "Sustainable Artificial Intelligence" even mean? That you run it off solar rather than coal? Does it mean anything?
Zonos is a new open weights text-to-speech model that has quality at least as good as ElevenLabs: https://www.zyphra.com/post/beta-release-of-zonos-v0-1
FormML – A DSL for building forms (like Prisma but for forms)
Over the years, I’ve encountered many challenges while building complex forms from scratch - challenges that I believe are common, difficult, and yet often overlooked.

While there are many awesome tools in the ecosystem for building basic forms, like Formik and React Hook Form, there isn't yet a serious solution (to my knowledge) that specifically addresses these pain points of complex ones.

Finally, this led me to come up with my own solution FormML (Form Modeling Language) that specifically addresses "enterprise-level" form needs.

Looking forward to your thoughts and feedback!
Date format used everywhere apart from US.
Depends on the requirements, if you need concurrent access and things like durability in a crash you're going to be implementing something that looks a lot like a database.
Interesting. So a 32-chip GDDR6 clamshell design could pack 64GB VRAM with about 2TB/s on a 1024bit bus, consuming around 100W for the memory subsystem? With current chip prices [1], this would cost just about 200$ (!) for the memory chips, apparently. So theoretically, it should be possible to build fairly powerful AI accelerators in the 300W and < 1000$ range. If one wanted to, that is :)

1. https://dramexchange.com/
> I can either stash my changes, which requires keeping a mental model of the stash queue (what if the review comments took a while and I started working on something else?) or a "wip commit", which you need to know, and you need to know how to reset and force push if you accidentally push it.

You do:

git commit -m "wip"

Then, if you wish to undo the commit then:

git reset HEAD

If instead you want to update your commit with additional changes:

git commit --amend

Seriously, why are you guys advocating for replacing a tool when the problems you're actually experiencing are due to your inabilility to learn the basics of it? I mean, is jj edit any better than git commit --amend ? Does git commit --amend require more cognitive load to understand?
Show HN: Slop Factory – UK's Shortest Hackathon Winner
I had three hours to build a website, so I used Cursor Composer to create a website that builds websites. Claude Sonnet generated the ideas for each of the 200+ websites and then created a one-shot implementation as a standalone HTML file embedded in an iframe.

Some of my favourites are in this thread: https://x.com/Britannioj/status/1889387050702610851
I'd like to suggest more contrast on the landing page, really hard to read!
socialism's new excuse to grab other people's money
> They slow to a crawl when you have huge tables

Define "huge". Define "massive".

For modern RDBMS that starts at volumes that can't really fit on one machine (for some definition of "one machine"). I doubt Mongo would be very happy at that scale, too.

On top of that an analysis of the query plan usually shows trivially fixable bottlenecks.

On top of that it also depends on how you store your versioned data (wikipedia stores gzipped diffs, and runs on PHP and MariaDB).

Again, none of the claims you presented have any solid evidence in real world.