skysight-inc/HackerNews huggingface dataset:
Yeah, I like your examples. In such scenarios, it makes sense when we're just trying to protect against our own bugs rather than a user deliberately sending a path that leads to the password.txt file.
So hackernews new kids will be happy with the corporate overtaking of America?
Regulation? What the heck is this. The future is only bright and colourful.
Is there an AI specialist here to explain to me why LLM's cannot code in Cobol?
What AI is this?
Because unfortunately PyPy is largely ignored by the community , despite their heroic efforts.
Probably the date(1) command? That's how I took it.
> It's probably part of the arrogant 50%+1 strategy that failed so badly it got us our second Trump term.

I find this perspective fascinating, considering how much of Trumps playbook is doing exactly this.

Just look back at all the culture war topics of the last years. All of Trumps enemies were smeared as radical far-left Marxist communist CRT DEI traitors to the country, but this doesn't seem to hurt his chances, only increase them.

Why does the right apparently eat this stuff up so much more readily than the left?
>multithreaded performance is worthless and has been worthless forever.

I have a very opposite opinion; single threaded performance only matters to a point where any given task it's doing isn't unusable. Multithreaded performance is crucial from keeping the system from grinding to a halt because users always have multiple applications open at the same time. Five browser windows with 4-12 tabs on each, on three different browsers, 2-4 Word instances, some electron(equivalent) comms app, is much less unusual than I'd like it to be. I have used laptops with only two cores and it gave a new meaning to slow when you tried doing absolutely anything other than waiting for your one application to do something. Only having one application open at a time was somewhat useable.
> China's economy remains on track to surpass that of the United States within just five years, and yet they did sign that agreement.

Are you actually saying this in the year 2025?
> Chrome "learn my preferences"?

Google already gets more than enough data about your preferences without having to respect any of them.
> Media Engagement Index

Solid evidence that Google knows just what I want from a browser: a taste of vomit.
There are tools that exist to clean up old flags, but of course you need to know they should be retired (if always off)or integrated into the baseline code (if always on)
Big-endian

https://en.m.wikipedia.org/wiki/Endianness
In order to do you and your career some justice you have two silos of knowledge to fill: technology and people.

Both are products of intelligence, but the soft skills are really more important than the technology skills and will ultimately dictate your career elevation. Things to learn: active listening, writing, persuasion, diplomacy, forcing an unwelcome decision, administration, and more. These take practice to master and people in software tend to really neglect developing these skills.

On the technology side learn to think like an engineer: execute with evidence, identify bias versus measures, organization and data structures, and solution exploration. In the end it’s all about finding the better solution but many software developers can’t get over themselves enough to think like that.
Data or a Vulcan in Star Trek could say this without anyone batting an eye.
Trump's firing of the U.S. government archivist is far worse than it might seem
I think talking about sandboxes is missing a point a bit.

It's an important constituent, but only complete OS-emulation with deterministic scheduling could (at a huge overhead) actually result in bit-by-bit reproducible artifacts with arbitrary build steps.

There are an endless source of impurities/randomness and most compilers haven't historically cared much about this.
ublock on Vivaldi here, never saw an ad on YouTube since years.
Sure, but why is my Samsung tumble dryer "enhanced with AI" now? You know what it does? You turn it on, it shows "optimising with AI" on the screen....to show you the most used programme. That's not AI, that's a counter in a text file somewhere. But of course everything has to have AI now so my tumble dryer now has AI. The market has spoken.
This seems like a definition issue, with respect to the set from which we are randomly sampling... what constitutes the problem? If you randomly select numbers and try to factor them--which to me seems like a fair way to define the problem: factoring, not two-primes factoring--the vast majority of numbers are, in fact, very easy to factor ;P. Instead, we say we only want to randomly select a number which is only two primes multiplied together in order to find the juicy hard versions of the problem. (And, even then, finding those numbers isn't precise! We rely on probabilistic primarily tests to weed out numbers that are probably not prime.)

Similarly, who is to say that there isn't some way to define what the hard instances of NP-complete problems are, and we just should be sampling from that difficult region of the problem space instead of all possible problems, the same way we sample only from the difficult-to-factor coprimes instead of from all possible numbers? There is definitely something interesting going on with the harder instances of these problems, and researchers have managed to discover a kind of "phase transition" among instances of some of the problems between ones with so many solutions they are easy and ones with so few solutions they are also once again easy (and my knowledge on this is about 20 years rusty and outdated... maybe this is better understood and characterized now).
> attempts to learn

Oh god, that reminds me of another piece of bullshit Chrome magic. They made a system when the browser shares signatures of forms/fields with a central server, which sends back "crowdsourced" autocompletion rules, and they've made it almost impossible for developers to stop it from doing that [0] even when it's flat-out wrong and users are complaining about inappropriate autocomplete suggestions being shown/recorded.

Over the last ~8 years developers have submitted hundreds of examples [1] of why it's a stupid feature that at least needs a way to opt-out, but Chromium devs have kept it mandatory, and I suspect it's because Google/Alphabet is somehow exploiting all that leaked metadata about what forms people visit.

[0] https://issues.chromium.org/issues/40093420

[1] https://issues.chromium.org/issues/41239842
> The only performance that actually matters is single thread performance. I think users realized this and with manufacturing technology getting more expensive, companies are no longer keen on selling 16 core machines (of which the end user will likely never use more than 2-3 cores) just so they can win benchmark bragging rights.

How can you state something like this in all seriousness? One of the most used software application has to be the browser, and right now firefox runs 107 threads on my machine with 3 tabs open. gnome-shell runs 22 threads, and all I'm doing is reading HN. It's 2025 and multicore matters.
Almost all pictures on that page are cropped weirdly when viewing on mobile. Words are cut off in many.
Well I'm almost 50 and ripped my first (shit quality) 64kbps mp3 somewhere around 1998 or earlier. But I switched to a library view and stopped individually managing folders when iTunes first appeared (24 years ago?). I just concentrated on proper tagging, including mood and instrument. I spent that more time ripping CDs and using tag editors than worrying which folder they were in (but that took care of itself with good tags). With a library you can still play an album, or a whole artist catalog, but also a whole genre, a mood, all you top rated music, or an automatic playlist that plays your least recently played, or least played but highly rated music from a mood, instrument, genre etc etc.

These days I use musicbee which has extremely customizable views, so you can browse your music however you want. My wife tends to pick a specific album, whereas I tend to be in a specific music mood so I hunt around for tracks and make a two hour playlist for it. She'd be happy with folders probably but it would kill me not to be able to search for instruments and moods. How else are you going to get a trumpet and piano playlist? Remember every song name?
Why do you think he aligns with "the majority of US citizens", when Trump didn't get 50% of the votes?
You can't fix problems caused by network latency by adjustments in real time apps like video/audio calls or gaming.

Maybe you are thinking of working around bufferbloat?
There's a gateway for proxying OAuth2 for the things which can't talk OAuth2: https://github.com/simonrob/email-oauth2-proxy

You install it and authenticate it with OAuth, then point your backup software to the proxy.
I think it's reason #4. I bought a PC 12 years ago, the only upgrade I did was buying an SSD, and now it's being used by my father, who's perfectly happy with it, because it's fast enough to check mail and run MS Office. My current gaming PC was bought 4 years ago, and it's still going strong, I can play most games on high settings in 4k (thank you DLSS). I've noticed the same pattern with smartphones - my first smartphone turned into obsolete garbage within a year, my current smartphone is el cheapo bought 4 years ago, and it shows no signs of needing to be replaced.

ok I lied, my phone is only two years old, but what happened is that two years ago my phone experienced a sudden drop test on concrete followed by pressure test of a car tyre, and it was easier to buy a new one with nearly identical specs than to repair the old one.
Bidirectional charging next big thing in Australia as ARENA lays out V2G roadmap
I have 2 young kids, some of the best advice I've been given is that it's a good thing if your kids are occasionally bored.

Why? Because it forces them to problem solve and on most occasions they get pretty creative. I'll often get home from work and there will be a massive blanket fort through the living room, or some kind of obstacle course in the front yard.

Being bored is not a bad thing!

I know kids who have lived on iPads/TV/other devices from a young age, and they don't understand the concept of being bored and watching them try to grasp the concept of 'make believe' is downright painful.

And don't get me started on not being allowed to feel proud! Who hurt you?
The providers have alreadyy fixed this (coming soon near you): My fixed network operator, instead of finally forcing the fiber supplier to honor their contract and fix the final 5m of cabel, is pushing me to use a 5g box for fixed internet.

So you want me to trade my horrible 100mbit line with ok latency for anything between 10 and 120mbit depending on the time of day with a latency if over 50ms guaranteed. And you also get a CGNAT IP and thus no incoming connections because who needs ipv6!
My hunch is that more people in countries like India use cpubenchmark / buy computers and try out cpubenchmark; and that in countries like those lower performing laptops outsell more powerful laptops by an enough large number that it shows.

It doesn’t have to be literally India, it’s an example for illustration.
They post it on arxiv before they submit the paper for peer review usually. Industry scientists might just post it up on arxiv without peer review because they might not care about putting it on their resume.

Lay people trust the peer review process way too much anyway. For a typical conference, it's usually just a grad student who goes through the paper in an hour or two and makes some comments. I've done peer review on a few papers for a prestigious conference that I am not even a subject matter expert on, just adjacent expertise enough to kind of make sense of the paper in an hour or two.
The "fast enough" illusion comes from having consumers adjust for years to flaky wireless connections after we had a good period of steady broadband performance improvements. If the latter had continued at the same rate, we could now rely on home users having at least 10-100 Gbit/s bandwidth and could build entirely different kidns of applications.

IOW: Apps could definitely use high bandwidth & low latency networking (think AI acceleration, remote storage, volumetric telepresence etc) if we had it reliably, but our due to wireless transition apps are adopted to stagnating speeds.
Yesterday was Wednesday. Different day. It was raining last night. Nothing can be inferred from which direction the sun will rise.
Use uBlock to remove that element. Dont know if it will save data.
Tcl, Vbscript, bash/sh.

Tcl had it’s web moment during the first dot com era within AOLserver.
What was the major new development in visualization in the past 10 years?

I don’t think there has really been one in decades. We’ve gotten better tools for making viz interactive but that’s about it.
A good example of unnecessary over-engineering
Husband, who is a stay-at-home dad and who goes to therapy, probably feels more disempowerment as a result of his wife's physique change. This "I miss your fat" is just what's on the surface... He would do better to improve his own body instead of using psychobabble and I-just-feel-that's to drag his own wife down. I argue that this is a form of emotional infidelity. Very weak
NAT rules are still firewall (netfilter, iptables - note the plural) territory, ufw is a frontend for iptables to simplify creating rules.

Does Docker violate the principle of least surprise? Yes. Was I bitten by this behavior? Definitely. Does it bypass the firewall? No.
Called it three years ago: https://news.ycombinator.com/item?id=30142353
Show HN: We made cloud security cost less than your team's pizza run ($30/scan)
Hey HN,

My co-founder (Riyaz) and I built a hosted cloud security scanner for solo devs and small teams who can't justify expensive cloud security products. We've noticed teams are often hesitant to use cloud providers security tools due to fear of unexpected billing surprises.

After years of securing cloud infrastructure and applications, we noticed a gap: teams either struggle with complex provider tools or rely on open-source scanners running from laptops. While we used to recommend open source solutions, we realized the main challenge wasn't the tools themselves but maintaining consistent security scanning workflows.

We built Kloudle to make finding and fixing security issues simple, going beyond basic compliance checklists. Our pay-per-scan model ($30/scan if you have >5 issues, first scan free) eliminates the burden of unused subscriptions.

Some technical details:
- Built on Google Cloud using serverless and containers for scanning
- Custom ELT pipelines for misconfig evaluation
- Comprehensive support for AWS, GCP, K8s, and DigitalOcean (383 security issues as of the last count)
- Exploring adding support for emerging providers (like Zadara)

Interesting insights from our journey:
- We discovered DigitalOcean was popular among small teams, so we built comprehensive security checks. Their security team was super friendly and we donated our entire list of checks for to them to kickoff building a foundational CIS Benchmark for DigitalOcean
- Our users found creative workarounds for missing features (like using catchall emails for team access)
- We handle support between founders across different time zones, covering ~18 hours daily

As a small team (<10 people), we've kept our infrastructure lean, passing the cost savings to users. While we're still adding features (team plans are coming!), we're focused on keeping things simple - including passwordless sign-in.

I handle the marketing efforts and act as the product manager. Riyaz has his hands full with making sure we keep adding new configuration security checks and evaluate how we can simplify onboarding of existing cloud providers for our users.

Our challenges include not enough paying customers giving us feedback or are willing to rate us on review websites. But the situation is slowly improving. While many product folks tell us that if the users love the product they will definitely tell others, it is possible that not everyone is open about the fact that their cloud account had many security issues.

Happy to answer questions or hear your feedback! If interested in looking at the product or even running a scan just browse to kloudle(dot)com.
Based on some other comments in this thread I think it was originally intended to be satirical but is evolving away from that. Which makes it a bit tricky.

"As per my prediction, this outcome does not come as a surprise." Sounds dickish to this American as well. I think there’s no polite way to say “I told you so.” Maybe something along the lines of “yeah, well, that’s about what we expected, but it was a nice try” could work? It still isn’t great but at least it puts you together on the losing team.
What even if not? So Trump just stays, it doesn't harm the ability of blue states to defy Washington.
Firefox blocks auto playing videos with sound by default. And you can also configure it to block all autoplay or or allow it globally, or per-website. https://support.mozilla.org/en-US/kb/block-autoplay
Can't have US parochialism restrained by international considerations. Can't put friction on printing money and avoiding accountability no matter the cost to others.

> warning countries not to sign AI deals with “authoritarian regimes”

Well, that now also rules out the US.
> is a good protection against authoritarianism,

The increasing authoritarianism disagrees with you, and states can only ignore federal law to the extent that the federal government allows it. There has been an increase in defiance recently, but nothing stops the feds from storming in and enforcing their laws beyond it not being seen as worth doing.
I mean ... zero? I've stripped enough screws as it is, I don't really want to increase that ratio
Nice. But please educate yourself on a difference between art and design.
They have similarities in language, but have completely opposite function.
Art is a personal expression with a given medium which translates directly the intent. Design has a focus on thinking about the function and perceptions of other people.
Visualizing data is a design problem.
It's usually not a speed of light problem. It's a problem of everyone optimizing for bandwidth, not latency, because that is the number that products are advertised with. Speed of light is 200'000-300'000 km/s in the media used, that should not be very noticeable when talking to someone in the same country.
So just casually glossing over the additional $2.5T in deficit spending?

I almost had a stroke when I saw this plan.

Are they kidding? All this noise to spend EVEN MORE?
In any case there are two sane ways to write dates, and the middle-endian format is not one of them.
uBlock is removed from Chrome store
Also, the US military used/uses DDMMMYYYY format, i.e., 15JAN2025, where MMM is the month abbreviation, which is similar to one of the formats used in Romania. This has the benefits of unambiguous parsing and no need for component separators but lacks lexicographical sort-ability like ISO 8601. A format like YYYYMMMDD might some of the advantages of ISO 8601 by keeping items of the same year and month together at a minimum. (ISO 8601 is the most proper date format though. ;)
Is it possible to implement a “glider gun” in 3D? (With reasonable rules) That was an open question a while ago
> That fact that you think this is "nuts" tells me you think women aren't equally competent.

No, it means that I want people in those places based on competency, not gender, and certainly not 50/50 representation because some bureaucrats think equality should be forced down on people's throats. If you make it about gender or anything else, the problem lies with you.

> And yet you elected Trump.

Well, besides the "beautiful" over use, he actually made sense when he was talking. The word salads Kamala kept making...
>As part of my PhD, and under the supervision of Théo Zimmermann and Stefano Zacchiroli, I have empirically studied bitwise build reproducibility in nixpkgs over a time period of 6 years.

Why spend only 6 years on the most interesting topic of all mankind? I spent 10 years analyzing this.
Diversity is not a strength but a weakness for a military where unity of purpose - whether that be in attack, defence or whatever other mission is required - leads to a stronger response. Those who keep on hollering about 'diversity' tend to use the term to indicate visual diversity with the implication that these are decisive characteristics of whomever they're looking at: you're 'white' so you're in that box, you're 'black' so you go in that box, etcetera. They are melatonin-obsessed bean counters, the modern-day version of racial craniometry.

It is in overcoming this visual diversity where strength lies, viz. I look to a day when people will not be judged by the colour of their skin, but by the content of their character. It does therefore not come as a surprise that the modern-day racial (and sex and whatnot) 'diversity' craniometrists reject King's sentiment and the desirability of a 'colour-blind society' since they see it as a threat to their hustle. They are correct in this judgement and it can only be hoped that this type of 'diversity' meets the same fate as racial craniometry did, i.e. as a dark moment in history where people were judged not by the content of their character but by the colour of their skin, the shape of their genitals, their sexual preferences or some other inalienable characteristic.
Right now - not many. But at some point in the future, if metaverse is everywhere, you can pull out a phone and a combined data for the room you are in might be 100GB. Would we want to have 6G then?
Ugh. Big if here: states have to adopt common protocol and technology requirements and the article notes queensland (where i live) loves to diverge.

If they fix this, or vehicles can select state specific V2G protocols then.. yes.

A car is about 5x or more KW/h than a typical home battery investment. This could be massive, in every sense of the word. My friends with solar discuss this, my friend with solar and an EV was discussing this with me a day ago. If you have the car and don't have range issues, this may be a massive upside benifit. But that's stacking more if.

The main benefit would be if the owners can form virtual batteries and bid into the market rather than just optimise individually to the price/sell as a domestic user. The price outcome would be much better for everyone involved, including non EV and non solar owners nearby.

Demand management is mighty useful. It's a valuable service.

My main concern is they said smart meters would be "in the consumers interest" and they just aren't. They were weaponised to make anti consumer price outcomes. Worst price models with the regulator asleep. This needs to be addressed and V2G needs to be regulated to be in the consumers interest.
This is not really a Nix-issue to begin with.

It's a bit like asking what percentage of Nix-packaged programs have Hungarian translation -- if Nix packages some more stuff the rate might decrease, but it's not Nix's task to add that to the programs that lack it.

Nix does everything in its power to provide a sandboxed environment in which builds can happen. Given the way hardware works, there are still sources of non-determinism that are impossible to prevent, most importantly timing.
Most programs depend on it, even compilers, and extra care should be taken by them to change that. The only way to prevent it would be to go full-on CPU and OS emulation, but that would be prohibitively expensive.