skysight-inc/HackerNews huggingface dataset:
CSS is overly complicated for how little it does. You have to learn it. For comparison, when I did Android development, I never had to "learn" how their xml DSL works, it's mostly "just work"tm.

Android has constrain layout, css is now at level 4 and still doesn't have it, it has at least 5 overlapping layout mechanisms. I guess more choices are always fun, if you are a code poet instead of an engineer.

CSS was designed without engineers' consideration, while these days it's mainly the (front-end) engineers that write them. No module system, and integration to the rest of the web stack by APIs that feel accidental, class=? <link>?, var(--?), centering things...

Don't even get me started on css frameworks, why do I have to do so much work to style on the web, while it's barely any cognitive load to style on any other platform?
Can you make him moonwalk when you scroll up?
I was trying to emphasize the performance of the Delta shower head despite very weak water pressure.

With your water pressure, the Delta could very well hit two rooms away! (I'm not sure how the Delta scales with water pressure...)
Great work guys! Haven't had a chance to look into atproto and bluesky, but now because of tangled I will.
For this reason im somewhat hyped for Ladybird in Summer 2026, especially seeing the amount of sponsors they have
(2023) or (2024)

As an example of a rare counterpoint, Zotero, a citation manager, continues to be based on the Firefox platform [1]. Thunderbird is another non-browser application built upon the Firefox codebase.

[1]: https://www.zotero.org/support/dev/zotero_7_for_developers
Some of the big-dollar contracts $employer has involve financial penalties if performance metrics aren't up to standard.
Interesting. What do you think will replace email in 20 years as a means of identification? I could imagine forced log ins via corporate authorization servers but that would defeat the purpose of having custom domain and email.
Yep, freedoms of speech, of association, and to bear arms are seriously jeapordized by nearly every ruling European regime. It’s a shame America doesn’t stand up for our values and punish Europe until she quits oppressing her citizens.
> If you're on forum.evil.com and click the "reply" button (or anything at all), that could instead POST a transfer request to your.bank.com, and if you happen to be logged in, it'll happen with your currently authenticated session.

It should be clarified that by "currently authenticated session" it actually means cookies, which browsers are designed to automatically include in requests when they send a request to the same origin domain.

That's why CSRF attacks work: the attacker tricks the users' browser to send a request to a domain where the user was already authenticated, and that automatically inserts the user's session info in the request thus authorizing the request.

CSRF tokens work by adding a kind of API key that the browser somehow loads in a way that it is not stored as cookies. Servers then check for the CSRF token in each request to determine if the request is authorized. CSRF attacks alone don't work because they just forward cookies, and they do not include the CSRF token thus are rejected.
It's baffling to me. It's one thing if you don't want to do a write up and share it but to offer that in exchange to collect email adresses seems so strange.
> It can never make sense for the company to pay Jim more than $8,000 / month, because that is the amount he wants. As long as he's willing to work for $8,000 / month, the value of his work to the company can't exceed $8,000 / month.

The company doesn't know the minimum amount he's willing to work for. They have to guess. If they guess too low, he quits. If they guess too high, they pay more than $8000/mo.

The company also doesn't know exactly how much Jim values being able to work from home, so they have to guess that too. They can reasonably guess that it's in the thousands of dollars per month, but they don't know if it's $1000/mo or $4000/mo.

What they do know is that their cost for having him work from home -- arguably a savings to the company, but perhaps worth $500-$1000 in some cases -- appears to be less than this.

If they guess $1250/mo (i.e. $15,000/year) then they've guessed right in the middle between the start of the range and the actual limit, so each party gets half of the surplus. If the company's costs from allowing WFH are zero then they get to save $15,000/year, and Jim gets to save the $30,000 in commuting expenses in exchange for getting paid $15,000 less, which puts him $15,000 ahead too.

Even if the company's costs are non-zero they're still coming out ahead as long as they're not more than $1250/mo, so if they're $500/mo or $1000/mo and their guess of what he'll take is a reduction of $1250/mo then they'll still want to pay him that much less and let him work from home.

They might also make a better guess and get closer to the actual number of $2500/mo, but then they're running the risk that they overplay their hand and he walks away, and then they don't get the savings of thousands of dollars a year. So who actually gets more of the surplus from letting him work from home is down to salary negotiations, but it's in both of their interests to make it happen.
I'd be wary of doing that, because that would mean you'd be unprepared if the peace time ends quickly.

But if we move some of those "services of the society" to the EU level, we could more efficiently run them (against, through economies of scale) and make them better at the same expanse.
Ancient medicine solves that problem

https://news.ycombinator.com/item?id=43196488
I use the "other" technique when it's necessary for the user to be able to mix in their own:

enum WidgetFlavor
{
Vanilla,
Chocolate,
Strawberry,
Other=10000,
};

Now users can add their own (and are also responsible for making sure it works in all APIs):

enum CustomWidgetFlavor
{
RockyRoad=Other,
GroovyGrape,
Cola,
};

And now you can amend the enum without breaking the client:

enum WidgetFlavor
{
Vanilla,
Chocolate,
Strawberry,
Mint,
Other=10000,
};
FENS isn't going anywhere
The article in context is not just about Chrome, but the various avatars it has manifested into.
it is amazing lot and tell by your self
If anything this article understates how ubiquitous Chrome is. Tons of Android apps use Webview, which is Chrome in disguise.

That said, it also overstates the importance of Google's particular flavor of Chrome. Chromium is open-source and other Chromium-based browsers do not need to comply with Google's DRM etc.
Not since today- russia is no longer to be threated as hostile and all cyber attacks planned on it have to yield.
I think I've seen some amazing Blender hacker put Cycles to the test on a machine with both NVIDIA and Intel GPUs. Love it that their API seems that portable and able to parrallelize on heterogeneous hardware. Amazing software work.
What should I build as an app or webapp?
Recommend me some suggestions with your problems to be solved.
I beg to differ,

> Good dependency management, a rich package ecosystem, defaults to static binaries which are easy to distribute and a tendency to be fast (even if it’s just the lack of startup overhead) make it a popular choice.

> .....

> Plus Rust can generate a static executable, which is reasonably small, and doesn't require a third party runtime.

Somewhere this thread....

And guess what, you can also ignore my comments.
Play politics? By refusing to do work unless fully paid?
This is a solvable problem thanks to llms
>"programs should treat any unrecognized values as if they were “Other”"

Having such an "Other" value does not prevent from considering that the enum is open-ended, and it simplifies a lot all the code that has to deal with potentially invalid or unknown values (no need for a validity flag or null).

That's probably why in DIS (Distributed Interactive Simulation) standard, which defines many enums, all start with OTHER, which has the value zero.

In STANAGs (NATO standards), the value zero is used for NO_STATEMENT, which can also be used when the actual value is in the enum but you can't or don't need to indicate it.

I remember an "architecture astronaut" who claimed that NO_STATEMENT was not a domain value, and removed it from all the enums in its application. That did not last long.

That also reminds me of Philippe Khan (Bordland) having in some presentation the ellipse extend the circle, to add a radius. A scientist said he would do the other way around, and Khan replied: "This is exactly the difference between research and industry".
The guy is probably on some sort of spectrum and not well-composed at the best of times.

It would be monumentally stupid enough, beyond other stupid musk decisions, that I am convinced people who rage about it and boycott teslas or whatever are looking for a reason to hate rather than hating because of that.

Especially when there’s such a list of other legitimate complaints about the man, his politics, his companies, his words…
Virtually every use case of zlib (can be used to implement gzip) should be replaced with zlib-ng, in fact. The stock zlib is too slow for modern computers. If you have a right workload---no streaming, fit in memory etc.---, then libdeflate is even faster. The compression can't be a bottleneck when you've got a correct library.
Nothing is happening to Verizon
It is not very fair singling out Kaspersky and assuming that other AV companies are not a threat to foreign countries. Foreign software and hardware is always a threat. And US was caught spying even on their allies.
Except they're not practical uses. Every well meaning civilian attempt to propose these topics is rebutted by educators who report back that these concepts are totally alien and abstract to teenagers until they actually own and are responsible for their own money.

The retention rate for these classes are abysmal, which is why you have people propose they should be taught, despite they themselves actually sitting through these classes, simply because any memory of these classes have been erased from their memory.
To attract new users, does Tangled plan to offer detailed documentation or migration tools from other Git platforms?
Is your data already JSON at rest? Because encoding/decoding CBOR should easily beat encoding/decoding JSON.
We Need Universal Basic Land, Not Universal Basic Income
Well, you can make even solar panels at home.

https://www.instructables.com/How-to-Build-Use-A-Dye-Sensiti...

Same with batteries, but just not in a way to compete with the large scale industrial processes. A wind turbine is far easier here.

Still, with improvement of tools, I can see a future, where even small communities have the capacity to practically make their own solar panels and their own batteries. But also buying it from the next industrial center makes sense to me (not at odds with the solarpunk idea to me).

I also do see small nuclear reactors a possibilitiy for those small communities, but I really don't see humanity advanced enough, to handle so much distributed radioactive material, without having dirty bombs or improvised nuclear bombs going off regulary.
Unless there is a comment "this code is actually safe, it's done this way for optimizations", or a variable called "thisCodeIsSafeItLooksWeirdForPerformance" and the LLM just ignores the backdoors.
Consumer limits. When something is good enough to generate stable profit, there is no real incentive to innovate beyond the bare minimum; just enough to keep consumers engaged, shareholders satisfied, and regulators at bay.

This is how modern capitalism operates. We keep receiving new version numbers without any meaningful change — consumers keep updating their subscriptions out of habit — xyzAI PR managers, HR managers, corporate lawyers, and countless other bureaucrats keep collecting their paychecks, secretly dreaming of retirement. Meanwhile, xyzAI's top management burns money on endless acquisitions just to fight boredom, gradually morphing into xyz(ai)MEGAcorp, a monolith dabbling in everything from crude oil processing and styrofoam cups to web services and AI models.

No modern megacorporation is capable of creating anything fundamentally new beyond what worked for them once. Universal welfare and prosperity could have been achieved 60 years ago, but that would have disrupted the cycle. Instead, we got planned obsolescence, endless subscription models, and a world where everything “new” is just a slightly repackaged version of last year’s product.
Returning static "hello world" response for slowest python framework is easily not bigger than 1ms (for fast frameworks it's 0.1ms or lower). Good luck to make the rest of your app to make something comparably fast if db or network is involved.
I wonder if the replicators were made in real life if they' hallucinate generations like Stable Diffusion
It's both funny and tragic that people like the owner of that place go through life constantly meeting people who are unprofessional, ungrateful, mean zombies who miss the best deal of their life due to their bad behaviour. Stepping on the same rake again and again. Tragic is that there will always be new victims who start out by giving the owner the benefit of the doubt, and they will be losing time and money to him.
Getting blender to run on my NVIDIA GPU and AMD CPU simultaneously is as easy as checking two boxes in the settings. It's not usually worth it since the GPU absolutely smokes the CPU. it's a testament to how well blender is made that it works at all, let alone that trivially.
You can run it at 400% by building more generators and heat pumps. They aren't the expensive bit.

The expensive bit is drilling and that gives you roughly X heat per month. You can use that at a constant rate or all in one week.
"But it has a different emphasis."

Seems like it. The only picture there has "Atomic war!" as the caption.
But Firefox doesn’t need a license to give me a program that I can use to do stuff on my device. They only need a license if they get access to the data.
Firefox-based browsers exist, notable ones for me being: Tor, Mullvad, LibreWolf, Zen.
Believe it or not, twelve figures can probably influence an election regardless of the first digit. Zeroing out tesla and taking him down to a paltry hundred-billion-and-change would still leave him handily able to cut another quarter-billion-dollar check come ‘28.

This is performative.
To be fair, CBOR proper is amazingly well designed given its constraints and design-by-committee nature. It is not even hard to remember the whole specification in your head due to the regular design. Unfortunately though I can't say that for any other CBOR ecosystem; many related specs do show varying level of signs of bloat. I recently heavily criticized the packed CBON draft because I couldn't make any sense out of it [1], and Bormann seemed to have clearly missed most of my points.

[1] https://mailarchive.ietf.org/arch/msg/cbor/qdMZwu-CxHT5XP0nj...
The first few years of my life were in Bolivia. Where our prime minister, for the sin of being elected by the people, was shot dead on the streets of the capital, a street I lived on, by the CIA. I still have friends, who serve Morales today. I am well aware of the sins of the US.

Until Trump, the USA was not a direct threat to the nation I now live in. However, nuance is lacking in your response.

You cannot divorce a company serving its government, from the politics it lives in. There's little evidence of Y-Combinator, for example, of endeavouring to upend their entire business to serve as spies for the USA. If Kaspersky was divorced from the KGB, politics would not be as considerable a context for understanding their actions.
So there are two capacities, that of the well and that of generation (oversized with respect to the well). On average this varying scheme utilizes the well at 100% of capacity (the expensive part to increase), and the turbine generation at less than 100% capacity (not expensive to oversize).
> I think we have a pretty good idea that we are not stochastic parrots

what if we are?

and our brain is the "billion parameter model", continuously "trining", that takes input and spits out output

I understand we as a species might be reluctant to admit that we are just matter and our thinking/consciousness is just electricity flowing

btw, I'm not selling anything :)
Waiting for the repo link. I will add a fork where the hamster's parachute doesn't redeploy if scrolling to fast and then the user "loses". Discourages scrolling. Might be helpful?
That happened long after they completely dominated search. They succeeded because of quality, and because of how low quality all the other engines were.

There was a time when Google was thought of as a respectable, high-quality, smart and nimble company. That has faded as the marketing grew.
Reading RSS Feeds in a Terminal
Well, comparing the pictures of solarpunk with my perceived reality I sadly have to disagree.
(solarpunk is about a bit more than having 30% of energy with solar and wind)
I hear you, chat gpt generate a tormented artist backstory to produce more striking images of irony.
Well, Mars is so much farther away and much more massive so you need a lot of fuel if you want to come back. This is much more difficult than the extra fuel needed for the moon landing due to lack of atmosphere. Speaking of which, Mars having an atmosphere means you need complex heat shields for the landing.
Furthermore it's so far that unlike the case of the moon you can't make real time adjustments from earth, there's a delay of several minutes. Then again you have dust storms...
Yes! I think this medium isn’t helpful for understanding here but it’s always pleasant to disagree while remaining civil. It doesn’t help that I’m trying to reply on my phone (I’m traveling at moment) - in an environment which isn’t conducive to subtle understanding. All the best to you!
This is very useful to anyone writing TOTP tools, big thanks to the author.

However, reading the article this section caught my eye:

"As we now know, SHA-1 has some fundamental weaknesses. ... But the TOTP authors disagree and allow a for some different algorithms to be used."

With significant compute resources SHA1 can be broken for some use cases, but I don't think this is one of them. Is HN aware of any practical attacks against TOTP-SHA1?
Right after you explain how in this imaginary world of 0 knowledge where you're not even capable of translating usage into time companies set a warranty to 3 years (>legal min) instead of 13; and why there are warranty limitations for heavy use.

(and no, you don't need "reliably ... specific and precise", those are just artifical constraints you've added)

And don't speak for everyone, not everyone is so clueless re. business decisions just because they've designed some hardware.
The fix is increased competition or legislation.

Just as it is with racial, age or sex discrimination. And before that child labour, slavery and indenture.

To learn they have to be beaten in the market place, or the floor of the legislature.
Because there is a high barrier to entry. In the US, at least, there was also an explicit policy and set of mechanisms to limit supply of doctors: https://www.advisory.com/daily-briefing/2022/02/16/physician...

For lawyers, there is an oversupply of the most lucrative segments, and an undersupply everywhere else: https://www.ajs.org/is-there-a-shortage-of-lawyers/

But in both cases, there just isn't some low bar that you can finagle your way over and get to the promised riches. Lawyers have a literal Bar, and it isn't low. Doctors have a ton of required training. Both have serious certification requirements that computer science professionals do not. Both professions support my point.

Furthermore, incompetent lawyers face real-world tests. If they lose their cases or otherwise screw things up, they are not going to be raking in the money. And people are trying their best to flood the doctor market, by inventing certifications that avoid the requirements to be a physician and setting themselves up as alternative medicine specialists or naturalists or generic "healers" or whatever. (I'm not saying they're all crap, but I am saying that unqualified people are flooding those positions.)
Natural gas, from the Slochteren gas field, was the cheapest way to heat a home for the past 60 years. It's probably not so anymore, considering the Slochteren field is mostly shut down.

The city heating network operator is a monopoly, that is why the price is capped.

Even though city heating networks utilize 'waste heat', the capital cost of the network is significant. The price cap and the capital costs (especially now with higher interest rates) led to many proposed projects being cancelled in recent years.
Git is extremely easy to reason about and requires the use of a very small number of commands. It would not have become the dominant VCS if that weren't true because nobody would have switched to it.
Where I live there is a lot of green urban spaces, and solar is rapidly expanding, so maybe my experience is different.
They also have a blogpost titled "Stay away from MALIBAL" (so that they are listed at the top of search engines) in which they defend themselves by saying that... Apple has more scandals...? https://www.malibal.com/features/stay-away-from-malibal/?srs...

What a disgusting company.
> 1960s technology

Still photography has gotten more convenient since then, but in the agreeable lighting and atmospheric conditions one would encounter while taking a vacation snap outside at noon Cynthian time, image quality now isn't better than then*

*Unless you're willing to spend $10,000+
Not OP, but I've been using SourceTree for over a decade. I've tried loads, but the only one that I have semi-moved to recently is Fork.
A guy falling that just keeps eating shiit.
> Pay researchers to analyse repos without any.

This is the problem, the best we can do is pay via exposure. But that actually ain't nothing. Not just individuals, but also orgs could then make money from private contracts based on their reputations? This should be the benchmark of trust. Could there be anything better?
I’ve been using Firefox for nearly 20 years. Lately I’ve noticed more and more websites that don’t work with it. Usually I can just ignore the bugs or avoid the site, but sometimes it’s something that I have to do (like pay a bill) and so I have no choice but to keep a Chromium install around as well.

I really hate having to double-fist browsers, but I’m too stubborn to switch to a Chromium-based browser full time. I’ll use Firefox or any other alternative for as long as the web remains usable on them.
I think the list of stars is probably not a good representation of popularity. Serde and JSON For Modern C++ have vastly more stars than any of those libraries and they both support CBOR and MessagePack.

I think CBOR is pretty decent though it is fairly inexplicable that a format designed in 2013 uses big endian.
There's a simpler way: you may burn oats and generate heat/power without relying on problematic solar panels. It's already quite common.
DeepSeek's Multi-Head Latent Attention
The top 10% owns 87% of the stocks
I live in an apartment, so this unfortunately wasn’t an option for me!
At the end of the day Penrose's arguments is just Dualism.

Humans have a special thingy that makes the consciousness
Computers do not have the special thingy
Therefore Computers cannot be consciousness.

But Dualism gets you laughed at these days so Dualists have to code their arguments and pretend they aren't into that there Dualism.

Penrose's arguments against AI has always felt to me like special pleading that humans (or to stretch a bit further, carbon based lifeforms) are unique.
Have you heard about xenon poisoning? Load following with a nuclear power plant is much more complex than it seems
Also, it's a great lesson in randomness - that day when that mountain erupted, the wind was blowing away from Naples, essentially sparing the disaster for its residents. Imagine if it was the other way around?