skysight-inc/HackerNews huggingface dataset:
> The moment you run LLM generated code, any hallucinated methods will be instantly obvious: you’ll get an error. You can fix that yourself or you can feed the error back into the LLM and watch it correct itself.

But that's for methods. For libraries, the scenario is different, and possibly a lot more dangerous. For example, the LLM generates code that imports a library that does not exist. An attacker notices this too while running tests against the LLM. The attacker decides to create these libraries on the public package registry and injects malware. A developer may think: "oh, this newly generated code relies on an external library, I will just install it," and gets owned, possibly without even knowing for a long time (as is the case with many supply chain attacks).

And no, I'm not looking for a way to dismiss the technology, I use LLMs all the time myself. But what I do think is that we might need something like a layer in between the code generation and the user that will catch things like this (or something like Copilot might integrate safety measures against this sort of thing).
Hhhhh what could possibly go wrong?!
Framework 2nd Gen Event Q&A: Framework 16, Framework Printer and others
This is a great summary of the Framework 2nd Gen Event Q&A featuring the Framework 16 laptop, the Framework printer and other things not directly covered in the video of the event.
> I've seen some developers never really grow or progress because there was always someone holding their hand, telling them what to do

Are you sure that cause and effect don't run in the opposite direction here.

> and not letting them experience the viscera of failure or fear.

Um, what? Being terrified of messing up is not necessary for learning.
I'm doing the same kind of thing for my college classes no matter the subject. But mine is a little different. Instead I do:

1. Feed lecture slides, labs, homework into ChatGPT and have it generate flashcards.

2. Write these flashcards into Anki and study them using Anki.

3. Run through some practice problems

I had originally intended for this system to be used long-term, but I get irresponsible and study the day of the exam. It really depends on the material, but for the most part, it takes around 5–7 hours of studying and preparation to feel completely confident about the exam. Often times, I wake up super early on the exam day to give me some time. This is not ideal of course and is just a product of my bad habits.

It's definitely doable to ace exams with only 2–3 of studying, but usually I need to pad it with another 2–3 hours of preparation like creating high quality flash cards and stuff. I believe most people can adopt this system and perform very well, but at the same time it's a very radical departure from traditional study practices and even then I'm not even using this system in the way it's actually intended (not the day of cramming-style method).

This system is not something I made up, but rather backed from a collective community effort that has produced amazing techniques, guides, research, etc.:

https://isaak.net/mandarinmethods/ - in depth guide detailing best practices with Anki regarding language learning (THE BEST)

https://cademcniven.com/posts/20211119/ - recommended number of cards per day to study based on some grassroots research

https://github.com/open-spaced-repetition/fsrs4anki - the most modern spaced repetition algorithm which uses machine learning to optimize for each individual's learning capabilities (THE BEST)

https://www.reddit.com/r/Anki/comments/18jvyun/some_posts_an... - meta resource on fsrs

https://www.justinmath.com/individualized-spaced-repetition-... - a reading which i've incorporated into the way i create flash cards pertaining to more problem-solving type of learning as opposed to pure memorization like facts about history

https://thehardway.guide/ - a damn good book teaching about actionable and pragmatic advice about language learning that i've applied to all of my college courses
Exactly. VCS is part of an industrial process. It's not supposed to be implemented with a thin wrapper to a database whose node structure you need to rummage through.

The software analogue would be that in order to use the platform default List and Dictionary data structures you would need to manually manage the links between the data nodes.

Or to use text editor you would occasionally tweak the rope datastructure or equivalent. Etc.
These aren't the facts sorry. The program is still going to Verizon, but there's a transition from TDM to IP called RTRI. That's where Starlink comes in. It's run by L3Harris, not SpaceX.

https://www.faa.gov/about/office_org/headquarters_offices/an...
The Goonification of Culture [video]
Our national forests are for conservation, recreation and exploitation. Without a baseline for sustainable harvesting it’s difficult to weigh whether this is a general complaint about logging or a specific one about a threshold being breached.
I think it’s more apt to say that free will is an illusion.
Tor Browser is Firefox (modified for Tor) but updated with each Firefox update.
There are enough shop teachers out there with missing digits to prove this statement is not true.
Reading this in Safari.
I realized too late that my top CS program wasn’t challenging enough. If I did it again, I would have taken some grad classes and lean heavily in to upper division math classes, or maybe go for a physics minor, but I was so interested in coasting during my early 20s. Many classmates did that and got much more out of their undergrad (one classmate double majored in math and became a professor at UIUC after grad school).
That’s a misnomer. We know what probably causes the mass energy, it’s the cosmological constant. It only regards 68% of the energy density currently.

Same for dark matter. There are a few hypothesis, but all in all they are pretty simplistic cases.

We know the particles, the forces, there is not really “new physics” to be discovered here.

All the interactions anybody can encounter in their lives is fully understood.
"Dead dove, do not eat" - https://www.youtube.com/watch?v=YUKmq7UMJys
A New, More Forgiving Unit of Measure

Very user-friendly, commendable!
Agree with others that helping a junior != mentoring. Mentoring is a bit of a strong word in this context.
Do you happen to have watched this video?

https://www.faa.gov/about/office_org/headquarters_offices/an...
Just go with plain Terraform.

You can check the docs for the GCP provider to see if the resources you want to manage are "importable" into the Terraform state file; they usually are and you'll see a section at the bottom of each resources documentation page showing you how to do this. e.g. https://registry.terraform.io/providers/hashicorp/google/lat...

Your process will be -

1. Write TF configuration approximating what you think is deployed

2. Import all your resources into the state file

3. Run a `terraform plan ...` to show what Terraform wants to change about your resources (including creating any you missed or changing/recreating any your config doesn't match)

4. Correct your TF configuration to reflect the differences from 3.

5. Goto 3, repeat until you get a "No changes" plan or the you actually want TF to correct some things (add tags, for example)

6. run `terraform apply`

and optionally...

7. set up your CI/automation to run `terraform plan` regularly and report the "drift" via some means - stuff that has been changed about your resources outside of Terraform management.

I put a lot of stock in this last step, because small, incremental change is the cornerstone of platform management. If you want to make a change and come to find there's a huge amount of other stuff you have to correct as well, your change isn't small any more.
One thing that annoys me is the inconsistency between mutable "data" resources and everything else.

Something that would be nice would be the rough equivalent of the deployment slots used in Azure App Service, but for everything else too. So you could provision a "whole new resource" and then atomically switch traffic over to it.
Might be a clip on tie.
Where I'm from, "in house" means employees. I see "contractors" and "negative earnings" in the same article.

They do say that reviewers have to have some kind of aviation experience. I'd be more curious reading an article about how they source the talent here.
Same here! As I recall it, I saw the photo and thought, that banana looks suspiciously fresh. Then they followed up with the utterly brilliant "banana for scale", which became an instant legend. Because, of course, no one would lie on the Internet! :)

It was a golden (banana) age of Reddit, and a more innocent time. The karma gaming, and other gaming and tall-tales, that started very early on Reddit, turned into something less-lighthearted later, on Reddit and other social media. But for a time, it was innocent fun to read.
You should also add more context on how it's different from Nginx and Caddy as well to that answer, your one above works well [0].

[0] https://news.ycombinator.com/item?id=43228231#43228376
> As someone who was shoved and occasionally bullied while operating machines like belt saws... I'm not sure it was worth it.

This. It's all fun and games until one of your classmates shoots you in the face with an air compressor while you're using a bandsaw. I still have all my fingers but did end up in trouble because everybody only saw the immediate aftermath of me making it abundantly clear how much I didn't appreciate his antics (only verbally, of course).
So no. Same menu/web-pages; but served differently as per individual needs.
I've been using Safari+Firefox for a good decade now. Just out of spite.

I was there when IE6 was the only browser that mattered, I'm doing all I can to prevent that from happening again.

I do use Chrome for webdev, the tooling is massively better than in Safari and FF. But I very rarely use it to open anything past localhost or the internal test servers.
All cyber security companies should be considered state actors. Even if they currently aren't it's too easy for a state to coopt them.

If you build an antivirus software today, and tomorrow you get a secret court order to ignore certain malware for "national security" what are you going to do? What if it's a request to include a small binary payload in return for a lucrative government contract, with implied threats of what happens if you leak the request? You can decide not to do it and just shut down, but then the only ones left on the market are the ones that complied.

If you do cyber security for more than just compliance, evaluating the software providers against your threat model was always an important step. Whether that means avoiding American, Chinese or Russian software. In the threat model of a Western government agency, Russian software should have have been off limits since the 50s (even if Kaspersky tries to tell you they are not Russian at all).

That still doesn't mean their work is any less interesting or praiseworthy. Just like how you know NASA landed on the moon because Roscomos didn't dispute it, Kaspersky can do work and offer perspectives that might be more difficult for similarly sized western cyber security companies.
But doesn't the codeless "infrastructure as code" kind of smell like cargo cult practices, i mean there might be places where having your infrastructure defined as data is a really good thing, but at least in my work i keep hitting roadblocks where i really wish i was writing actual logic in a modern scripting language rather then trying to make data look like code and code look like data, which is what a lot of devops tutorials seem to be teaching.
Storyboard: FAA ATC Migration to FENS (L3Harris to Verizon)
thx!! :D
If the app is anything actually important, I'd think there should be standards around testing. Which given the scenario, would have to either be inadequate or not have been communicated properly to the newbie (or they were communicated effectively and aren't being followed, which would be a different kind of issue).
CSS is not the performance bottleneck.

CSS is also not difficult. Tailwind is absolute nonsense imo.

Either write some good simple plain css, use a framework with scoped css which already completely eliminates the need for tailwind, or use JavaScript css properties (with a slight performance penalty).

The performance issues are because of use of heavy frameworks, unoptimised images and 1000 ads and trackers which nobody asked for (except management of course).
In my experience, after now something like 5 years of using Tailwind in projects large and small, it scales reasonably well. You just do what the authors suggest: encapsulate styling in components instead of CSS classes.

Now, that isn't quite the panacea it can sound like. The standard components like buttons and dropdowns are solved quickly and then you have the unusual components that always show up here and there, which are more likely to stand out. But, that was my experience with BEM/Bootstrap/whatever before that as well.
This is a silly extreme case, but it's kind of an absurd example of what happens when you live a life devoid of the principle of charity[1].

I think tons of interpersonal engineering issues boil down to a failure to apply this principle.

[1]: https://en.wikipedia.org/wiki/Principle_of_charity
The conflict might be against people who want a cyberpunk world.
>> What's more, whatever you like to call the transoforming of information into thinked information by definition can not be a (mathematical) function, because it would require all people to process the same information in the same way and this is plainly false

No this isn't the checkmate you think it is. It could still be a mathematical function. But every person transforming information into "thinked information" could have a different implementation of this function. Which would be expected as no person is made of the same code (DNA).
read this in firefox/waterfox
.net: https://devblogs.microsoft.com/dotnet/extending-web-assembly...
His argument is that incompleteness means that humans will always be able to do things that non-quantum machines can't. I don't agree with this view.

> In my view its inevitable that we'll build an AI that is more capable than a human.

Seems pretty likely, with a big uncertainty on timeframe.

> And that the AI will be able to build better computers, and write better software. That the singularity.

This could happen, but I don't agree it's an inevitable consequence of the first.
The New Yorker Film "I'm Not a Robot" Wins a 2025 Academy Award
https://archive.ph/2025.03.03-031356/https://www.newyorker.c...
What Vivian Maier saw in color (2018)
https://archive.is/MHzBO
> Personally, I prefer to think about it in terms of basic computability theory:

Gödel's incompleteness theorem applies to computing. I'm sure you're familiar with the Halting Problem. Gödel's applies to any axiomatic system. The trouble is, it's very hard to make a system without axioms. They are sneaky and it's different than any logic you're probably familiar with.

And don't forget Church-Turing, Gödel Numbers, and all the other stuff. Programming is math and Gödel did essential work on the theory of computation. It would be weird NOT to include his work in this conversation.

> are we at most just Turing machines or something else?

But this is a great question. Many believe no. Personally I'm unsure, but lean no. Penrose is a clear no but he has some wacky ideas. Problem is, it's hard to tell a bad wacky idea from a good wacky idea. Rephrasing Clarke's Second Law: Genius is nearly indistinguishable from insanity. The only way to tell is with time.

But look into things like NARS and Super Turing machines (Hypercomputation). There's a whole world of important things that are not often discussed when it comes to the discussion of AGI. But for those that don't want to dig deep into the math, pick up some Sci-Fi and suspend your disbelief. Star Trek, The Orville and the like have holographic simulations and I doubt anyone would think they're conscious, despite being very realistic. But The Doctor in Voyager or Isaac in The Orville are good examples of the contrary. The Doctor is an entity you see become conscious. It's fiction, but that doesn't mean there aren't deep philosophical questions. Even if they're marked by easy to digest entertainment. Good stories are like good horror, they get under your skin, infect you, and creep in

Edit:

I'll leave you with another question. Regardless of our Turing or Super-Turing status; is a Turing machine sufficient for consciousness to arise?
Why the anger?

If you are consuming data from some other system you have no power over what to require from users. You will have data points with unknown properties.

Say you are tracking sign ups in some other system, and they collect the users’ browser in the process, and you want to see conversion rate per browser. If the browser could not be identified, you prefer it to say ”other” instead of ”unknown”?

I think I prefer the protobuf best practices way: you have a 0 ”unknown”/”unset” value, and you enumerate the rest with a unique name (and number). The enum can be expanded in the future so your code must be prepared for unknown enumerated values tagged with the new (future for your code) number. They are all unique, you just don’t yet know the name of some of the enum values.

You can choose to not consume them until your code is updated with a more recent schema. Or you can reconcile later, annotating with the name of you need it.

Now personally, I would not pick an enum for any set och things that is not closed when you are designing. But I’m starting to think that such sets hardly exist in the real world. Humans redefine everything over time.
There is no you to have the illusion.
ok, that makes sense. A better Helm would be nice. timoni.sh is getting better and better, but Cue is a big hurdle.

Unfortunately, I'm not a big fan of the yaml-hell that crossplane is either.

But as a Terraform replacement systeminit.com is still the strongest looking contender.
The posts last week about the factory worker monitoring startup? There were at least 3 posts (and I think dang let the dupes through, since some mentioned YC, and HN moderates less in such cases):

https://news.ycombinator.com/item?id=43175023

https://news.ycombinator.com/item?id=43170850

https://news.ycombinator.com/item?id=43180133
VibeQuest – Feel the Buzz · Streamlit
I mean, Chrome is also reskinned to serve a particular niche by a number of providers. I don't think that really cuts it in either case.
I read your comment with El Bananero's voice and now I can't stop laughing xD
Haven't seen Opera on the list. I regularly use 6 browsers daily, each with different security/privacy settings - one with everything blocked but for my financial and health related sites.

And I use Opera as a weak alternative to when I don't need Tor. Opera comes with a built-in free VPN, which I primarily use to get around reddit's aggressive efforts to block anonymous/multiple accounts.

While I don't spend much time on Opera (I don't use reddit much), it's a pretty decent browser. I seem to recall hearing about some issues people had with Opera in the past, but I can't recall the details.
Nice! I had an idea that I never coded up. Basically a hamster with a parachute that would fall slowly to the bottom of the page. If you scroll down fast his parachute will deploy to catch up and land once again at the bottom of the viewport. He'll hold a "Top" sign when you hover over him and will shoot off with a jetpack when you click on him and as the screen hits the top you'll see him deploy a parachute again to gently land at the bottom of the screen.
>Marketing wins

TIL that I have just been manipulated and that my joy of using it is really just ignorance. Good to know.
I’m not imposing any constraints - the point is that inconsistent formulations are not interesting or relevant to the argument no matter what system of rules you look at. This has nothing to do with any particular formalism. I think the difficulty here is that words like completeness and inconsistency have very specific meanings in the context of formal logic - which do not match their use in everyday discussion.
There's people who want all SpaceX contracts terminated.

Guess what this does?https://www.usaspending.gov/award/CONT_AWD_HC101324F0143_970...
No, not until AWS decides to add it as a supported extension, which will most likely never happen (you can see the current list of supported extensions here: https://docs.aws.amazon.com/AmazonRDS/latest/PostgreSQLRelea...)
Without knowing more about the numbers, the only one I have an issue with is the number of students. These universities should be doing everything they can to increase enrollment and let in more students.

I went to a smaller school in my city, but at the time most everyone I know who applied got it. I would not get it today, and people end up wait listed, etc... IMO, that is the failing of the US higher education system. Next is cost to the student.
>All of this adds a considerable amount of mental overhead while developing

Not in my experience.
Just a question where you trying to optimize for speed or size?:

I never tried CBOR when looking for a sub 10ms solution for websocket comms, however my use case was not bound by datasize but entirely by speed (network not inet).

However it all came down to a suprising realisation: "compression on both ends is the primary performance culprit"

Optimizing the hell out of the protocol over websockets got me to a fairly ok response time, just using string json and 0 compression blew it out of the water.

So the result was that data load was faster and easier the debug going with strings of json vs any other optimization (messagesize where in the 10-50mb realm)

The amount of shotty ws sever implementations and gzip operations in the communications pipeline is mindblowing - would be interested in hearing how just pure json and zero compression/binary transforms performed :)
Show HN: Puffin Tools – Free WebAssembly tools in the browser
Hi! I wanted to share my little "adventure" that I had in the past ~2 weeks. Basically, I got tired of constant thinking and I decided to build something, anything.

By accident I learned about thing called WebAssembly (basically you can execute pretty complicated programs locally in the browser without sending anything anywhere) so I immediately assumed that it could be used for a set of small, private tools.

Usually I am building with Python, Django, PostgreSQL, hosting it on PythonAnywhere. So this time I decided that I will step out of my comfort zone even further! So I went with: - Rust (for tools that will be compiled to WebAssembly) - Zola (static site generator since I don't need anything "dynamic") - AWS S3 + AWS CloudFront (for hosting this static website) (I even used AWS to generate my SSL certificate)

Let me know what you think, and of course if I can already sell my website for million dollars :D

Cheers!
> Sure, how hard can it be to police the payment terms on every one of the likely billions of invoices out there and drag non-payers to court.

Set a mandate for companies over a certain revenue size to maintain records, and self-report. Do spot-checks and fine a percentage of revenue. You understand the government already performs audits, right?

> [bogus invoices will be a problem]

A worse problem than they already are for large accounts receivable departments? Why?
You can express this in Terraform, it's just a little more contrived. You release your changes as Terraform modules (a module in and of itself doesn't do anything, it's like a library/package), then your Terraform workspace instantiates both a "blue" module and a "green" module, at different versions, with DNS / load balancing resources depending on both modules and switching between either blue or green.
No, Nix is "infrastructure as code, but actually".

The downside is that now you have to code in Nix.
They should just toss a hand grenade down there. Easy.