skysight-inc/HackerNews huggingface dataset:
Not sure if I'd call the relentless assault on my attention to convince me to purchase things "happy", but to each their own.
You write as if this was a problem.
If you have to constantly tell customers to RTFM, you have a poor product. Or at least poor documentation. But no amount of documentation can paper over fundamentally poor product design, because docs are also technical debt.

Even if devs aren't taking calls directly, there should be a product manager communicating this feedback to developers.
That stood out for me as well. But only because the humans seemed to be inept.
Maybe. I think I filled out such a form with the passport number etc. It is just that I don't think I showed anyone my passport.
Show HN: Nuanced – Help AI understand code structure, not just text
Hi HN! We built Nuanced (https://github.com/nuanced-dev/nuanced), an open-source Python library that makes AI coding tools smarter about code structure.

The problem: current AI coding assistants see code as just text. They don't understand which functions call which, or how code components depend on each other. This is why they often suggest changes that break dependencies they should have known about.

Nuanced solves this by generating call graphs that map these relationships. When you ask "What would break if I change this function?", instead of guessing, the AI can see the actual dependencies.

How it works:

1. Run `nuanced init .` to analyze a Python module in your codebase

2. Use `nuanced enrich app/file.py function_name` to get relationship data

3. Include this data in your AI prompts or integrate it into tools

We're already working with teams building AI coding assistants and security review tools to integrate this capability. Our initial release supports Python with plans for JavaScript/TypeScript next.

I'd love your feedback, especially if you're building dev tools that could benefit from better code structure understanding!
The FPGA idea raises security questions of its own - how do you get the bitstream over securely, then the data and results, without leaking the data you're trying to protect or being vulnerable to evil clones of the bitstream? Or the FPGA debug JTAG interface?

Meanwhile Windows is requiring that every laptop have a small crypto processor for its own compliance processes (i.e. bitlocker).
Depends how you track it I suppose:

https://news.ycombinator.com/item?id=1 (Oct 9, 2006)

https://news.ycombinator.com/announcingnews.html (Feb 20, 2007)

https://news.ycombinator.com/hackernews.html (Aug 14, 2007)
I took the bit about re-reading out of my post as it was unnecessarily snarky. Still, we're clearly not seeing eye to eye here at all. Every "benefit" of the fees posited in this thread a country can have for free, other than the EU dropping tariffs.

If a non-EU government wants to give foreign aid to Poland, it can.

If it wants to invest in Romania (normal definition of invest), it can.

If it wants to enable mass immigration of min-wage workers, it can. (and the UK government is doing so right now).

If it wants to align its laws with those of the EU, it can.

Not a single benefit in this thread is actually a benefit. EU membership fees are mandatory foreign aid European countries are expected to pay as a price of not being tariffed, and that's an artificial "benefit" that nobody else in the world charges for and that the EU also doesn't charge non-European countries for.

I'm not going to get into an argument about who benefits from cheap labour, it's a different debate and well worn. On your other points:

• The EU isn't a place of growth. Last year it managed GDP growth of 1%, the year before it was 0.4%. The US managed near 3% each time. It's scary that people living inside it aren't aware of this. EU growth should be higher than the US given that it contains countries still catching up from the communist era.

• Blue Card is mandatory under EU law. It's "not used" by a few countries because it was forced on them with the loophole of there being no minimum issuance quotas, not because it's a voluntary scheme they didn't choose to sign up for.

But once again, we seem to be talking at opposites here. What claim are you responding to with this Blue Card stuff? Is it the "not if it's inside" bit? Because to repeat, Blue Card doesn't let you attract as many migrants as you want if you're inside the EU - it has a legal requirement for higher-than-average salaries - and obviously it's not a benefit of paying membership fees, which is where this thread started.
Energy consumption. I am pretty sure that the hydrogen utilization in most ammonia production is very high.

In theory the energy required to produce ammonia is negative (Hf < 0) but at standard pressure its formation is thermodynamically unfavorable (Gf = Hf + TdeltaS > 0). But the bigger issue is the very high activation energy barrier for ammonia synthesis, which results in a lot of energy being used to make ammonia at very high pressure and temperature.

Right now there are two competing approaches to reducing the cost of ammonia production. Tsubame is using a new ruthenium-based catalyst that lowers the reaction temperature (and therefore, also the pressure). The other method is by electrocatalysis. I don't know for sure that this is what NitroVolt is doing but their name certainly suggests it.
At the opposite end we have excess CG, like that iPad ad last year which everyone hated because it depicted real art tools being crushed into a digital substrate.
IMO that's a gross oversimplification which ignores the actual problem.

In my (limited) experience of the Philippines, the greatest problem is the total lack of domestic opportunity, fuelled by the view of labour as an export. It's compounded by the high cost of education which parents are expected to cover. Graduates enter a world of retail and BPO jobs because they are overqualified. There is no social mobility. There is no middle class. Folks sell their homes and what little land their families hold to afford healthcare, which a few privileged doctors build private rental empires on.

Against this backdrop Duterte's popularity appears consistent with other populist figures -- a machismo strongman claiming to execute the people's will whilst stealing from them for his own gain. Add in extrajudicial killings and increasing militarisation of the police and it's hard to see him as anything other than a tyrant.
Governments are not necessarily all about politics - the electricity system isn't and the road network isn't.

Private organisations that have great power over important bits of the internet are also not necessarily politically neutral and there is no level to control them.
Something that this petition does not mention at all are possible alternatives to Google search as the default search engine. If Google isn’t the default, who should be the default?
Mercury is basically a big ball of iron.
> static languages end up being faster somewhere around a week into the development process

And when you factor in LLMs being ridiculously good at scaffolding basic apps, the time to reach that turning point will continue to decrease. It takes me time to write out test harness boiler plate, or making a nice dev/staging environment configuration. It is why many languages come with a `mylang create proj` command line tool to automate a basic project. But the custom scaffolding that a LLM can provide will eventually beat any command line project creation tool we can imagine.

This is one of the driving realizations of my point. I've coded in a lot of dynamic languages and a lot of static languages and the distance between their developer experiences are shrinking drastically. I would expect a decent dynamic language expert to become productive in Go very quickly. Rust may be more difficult but again should be totally possible for any competent programmer. Then you add on top of that the fact they will be ramping up using an LLM that can explain the code they are looking at to them, that can provide suggestions on how to approach problems, that can actually write example code, etc.

And then there are all of the benefits of deploying statically compile binaries. Of managing memory layouts precisely. Of taking direct advantage of things like simd when appropriate.
It seems to me like working from home has transformed the residential neighborhoods. I recently visited Inner Sunset as was astonished at how many people were out and about.
It generally is. People like being heard. But usually they sort themselves out during the first therapy. If that fails usually more therapy doesn’t solve anything either.

As somebody who studies psychology.. If a psychological study says A, it’s more likely to be actually B. The quality of research is much, much worse than people think.
I'm guessing it'll only be a matter of time before we see more stories about AI. For example, a spaceship that crashes into strange planets killing the humans on board because AI hallucinated, resulting in a civilization of aliens built around the combined wisdom of every youtube comment and facebook post that the surviving AI was trained on creating the largest and most destructive religion/dumpster fire in the universe.

It's pretty normal for it to take a few years to write a good book so I wouldn't look to science fiction to keep up to date on the latest tech hype train. This is probably a good thing because when the hype dies down or the bubble bursts, those books would often end up looking very dated and laughably naive.

There's a lot of books about AGI already which is probably more fun to write about than what passes for AI right now. Still, I'm sure that eventually we'll see characters getting their email badly summarized in fiction too.
Only problem is that Google has been terrible at follow-through in recent years.
I agree that the blog post seems to hint at the fact that this functionality is fully baked in in certain places - we've adjusted the blog post to be more explicit on the fact that this is an extension.

We have collaborated with MotherDuck on streamlining the experience of launching the UI through auto-installation, but the DuckDB Foundation still remains in full control of DuckDB and the extension ecosystem. This has no impact on that.

For further clarification:

* The auto-installation mechanism is identical to that of other trusted extensions - the auto-installation is triggered when a specific function is called that does not exist in the catalog - in this case the `start_ui` function. See [1]. The query I mentioned just calls that function. The only special feature here is the addition of the CLI flag (and what that flag executes is user-configurable).

* The HTTP server is necessary for the extension to function as the extension needs to communicate with the browser. The server is open-source as part of the extension code [2]. The server (1) fetches web resources (javascript/css) from ui.duckdb.org, and (2) communicates with localhost to co-ordinate the UI with DuckDB. Outside of these the server doesn't interface with other external web services.

[1] https://github.com/duckdb/duckdb/blob/main/src/include/duckd...

[2] https://github.com/duckdb/duckdb-ui
The E6-B is what I took my exams with too! But, that was ‘several’ years ago.
In this case hardly anyone is demanding that you talk about personal life. You are welcome to share anything that will let others know you better, but in all but some pathological cases you are not expected to tell anything you are not comfortable sharing. This format is obviously not great and may not work, but it’s also not awful.
My reading on this is that the Reader must have read access to the API Connection in order to drive the exploit [against a secure resource they lack appropriate access to]. But a user can have Reader rights on the Subscription which does cascade down to all objects, including API Connections.
Like many others, I would pay 20+€/year no questions asked, if and only if that money went to projects of my choosing (Firefox, MDN, Thunderbird) and they immediately and permanently halted work on user hostile projects such as ad tech.
Over a period of 60,000 years.

The authors extrapolate anthropogenic climate change to accomplish that same temperature change in a mere 2,700 years.
Yeah but is the Librem 11 any good?

I already made that mistake with Linux phones. They were unusable crap.

Immediately I can tell you that $1000 for a tablet with an Intel N5100 (Celeron) is not a good buy at all. The processor you get in the iPad Pro is 7x faster at multi-core operations and 4x faster in single thread (PassMark).

You can play recent AAA games like Resident Evil 2 (Remake) on an iPad Pro. It looks very similar to a home console in terms of level of detail in graphics.

The 3DMark Wild Life Unlimited benchmark is a difference in performance score of 12x

You're also getting a tandem OLED display that's essentially the best display on the market.

These are not even in the same class of device. I have to seriously question what the Librem 11 is actually good at? What is the target audience going to do with it? Being able to become root and fuck around in the terminal on a potato device isn't a use case. I can just go do that on a laptop or desktop which will be a much better device for doing those kinds of tasks.

If things that tablets are good at and intended for like drawing, viewing content, and any tablet workflows (e.g. digital audio produciton or film editing) or games involving high performance are all literally 10x better/more performant on an iPad, what is the Librem tablet supposed to be good at that isn't going to be a better experience in something like a Framework or even just a Dell/Lenovo laptop with Linux installed?

People don't buy devices to read the source code.
They are no longer viewed as a growth company/stock. Their growth has slowed to around 2%, and they are trading at a PE of 37. New product releases are underwhelming. Berkshire sold most of their Apple holding last year, a good indicator that the growth isn't there at these valuations.

Good current summation:

https://youtu.be/6uUlklRvUsg?si=9vqRYLaMblKx9i5S&t=2175
Vernor Vinge has argued that far-future SF makes no sense because of the "wall across the future" that The Coming Technological Singularity will create. [0]

If you're open to Theory Fiction, you can read Nick Land. Even his early 1990s texts still feel futuristic. I think his views on the autonomization of AI, capital, and robots - and their convergence - are very interesting. [1]

[0] https://edoras.sdsu.edu/~vinge/misc/singularity.html

[1] https://retrochronic.com/
Why do you think time or your management experience would put you in path on director instead of others ? This question is very hard to answer without a lot of context. The TLDR is that you haven't been performing at director level or there's no need for another director in the org you are in
Thanks so much for trying it out, and for your feedback. You're right, that is a bit wonky - we should change the UX for inputs when the maximum of the range is massive, will get on that asap.

UXWizz looks great! Unfortunately we don't yet list self-hosted tools simply because our audience generally does not have the technical expertise to set these up. If that changes in the future (and I could see that happening) we'll definitely look into evaluating your platform for inclusion.
I’m confused by the quoted text because timing attacks rely on at-most behavior and abstraction layers on at-least behavior.

Abstractions cannot send messages before they receive them. So any delay you add at the top must be magnified as you go down. The exception to this is if the contents of the message require different behaviors for different payloads, in which case they are correct. But encrypted payloads are opaque to the layers they are sent through. You can observe who the message was sent to, and know the maximum amount of data the conversation might have contained. But not a very clear idea of how long it took to build the message, unless you’ve already compromised the machine.
SEEKING FREELANCER, remote, typescript, python, serverless.

Hello, I'm looking for a typescript, python, and serverless (AWS) developer to help us build out our Lambda's and Step Functions. We are a fintech startup that specializes in the hospitality industry. Looking for someone to come on for a long term contract > 6 mo.

Please respond with your LinkedIn, resume, hourly rate range, availability, and anything else you want to show me.

austin()goroam.io
Until Google realizes you're using the capability to hide advertising and disables the feature to create a "trusted client" (trusted by Google to render their ads faithfully). They've pitched the idea before as a way to force users into Chrome from the server-side.

I'll go back to shouting at clouds now... Sorry.
The really good hacks happen with CAMEL MAP injection. Controls all sorts of goodness like SMS, USSD, and the crown jewel: location services.

Many a "bulk SMS" provider in places like the richer carribean islands, and Indonesia that do a lot more than send spam.
The "plumb-bob" tilt for [1] is dependent on a conical weight hanging on a rod, surrounded by a brass ring. Raising the weight higher or lower makes the tilt more or less sensitive by changing the distance between the cone and ring. Many operators adjust this and fail to fasten it tightly enough and the cone falls into the cabinet.

The "slam tilt" switch for [2] is a leaf switch with a small intertial counterweight on one of the leafs and rarely falls apart.

Funny enough, modern slot machines still call a tamper or intrusion event a "tilt".
Interesting, I guess there's plenty of ideas to grab from their work too!
https://observablehq.com/documentation/cells/data-table
This was before website's and OS's were consistently nagging people to switch to their own browser. And when the everyday browsing experience varied more among different browsers.
Yeah it really makes you think about what life would be like if intelligence could infuse anything- be it a ship or a datapad- even if his vision wasn't quite how I imagine it would turn out.

I've also seen it suggested that Harry Potter might be a more realistic look at what proliferated AI might be like.
What if they're all correct?
I think this is correct, to an extent. But consider handling an egg while your arm is numb. It would be difficult.

But perhaps a great benefit of tactile input is its simplicity. Instead of processing thousands of pixels, which are passive to interference from changing light conditions, one only has to process perhaps a few dozen tactile inputs.
Move over graphene Scientists forge bismuthene and host of atoms-thick metals
Yes, totally agree. Don't hire people to work on "corporate culture" until you have money to burn.
Sure beats lava lamps as a source of entropy...
You needent be charatible to me.

I was referring to this Australian report https://www.aspi.org.au/report/aspis-two-decade-critical-tec...

57 out of 64 major tech areas are being led by the Chinese (and Chinese tech companies, as another HN user somehow can't seem to separate).

I don't care what economic or governmental system they use. But given what's being shown on XiaoHongShu, they're doing awesome. Or worse yet financial ideation and exploitation are eating through every fiber of the US.

Have I thought about emigrating? Absolutely. The USA is slowing down, and already behind. And current policies are going to put us solidly as a 3rd world nation.

I may not be able to move there in a reasonable time schedule, but I will definitely use FLOSS contributions from there, and work with people there and everywhere to grow FLOSStech.
Because you meet tons of talented engineers whenever you go for lunch, and they just need to cross the street and walk in to ask for a job.

Because you're around a ton of people who are interested in the same thing as you are. Caveat: If you're not interested in the things SF engineers are interested in, that means you're surrounded by masses of incredibly boring - to you - folks :)

Because that introduction you need to make things pop is super-easy compared to other places.

Doesn't mean you _have_ to start in SF, but for certain classes of ventures, it's the place that makes it the easiest.
editorialized title, originally "Constant-Time Code: The Pessimist Case"

most of the points brought up in the article have been happening already for decade(s), it's not something that 'will soon' happen.
Show HN: Pixeliconlibrary.com
Location: Seattle, USA but looking for opportunities abroad in Canada or the EU including Ireland, Denmark, The Netherlands. Location flexible :)
Remote: 4 years (out of 8) of remote experience
Willing to relocate: Yes, seeking relocation!
Technologies: 7+ years of experience with React / JavaScript Frontend & recently made an effort to round out my skillset by working for last 3 years as a Backend Engineer writing Go. Other technologies include: Kubernetes, NixOS, Unreal Engine (C++), C#, Certified C Programmer, Python (Tornado, Twisted, Django), Rust, Bash, and many others[1].
Résumé/CV: https://philippeterson.com/resume.pdf
Github: https://github.com/philip-peterson
Email: peterson@sent.com
About Me: Experienced full-stack developer with a background from Silicon Valley and Bachelor in CS. I've worked at numerous startups as well as now a Fortune 500 company and other profitable enterprises; past startups include Amplitude and Commure joining early (Series A) to help build out the core frameworks of the product. I am passionate about building strong user experiences that matter to the business and instill a sense of trust and unshakable reliability to the customer. I have also proven my chops through contributions to the open source world including original Go libraries, fixes for bugs in Git LFS, and new features in Gitea/Forgejo (which are Github-like tools). I absolutely love building customer loyalty and solving real pain with like-minded individuals.

[1] https://www.youtube.com/watch?v=3XPn1iw1Pp8
I'm a co-author of the blog post. I agree that the wording was confusing – apologies for the confusion. I added a note at the end:

> The repository does not contain the source code for the frontend, which is currently not available as open-source. Releasing it as open-source is under consideration.
Useful Open Source Design Resource: Pixel Icon Library
The point is: On the ingredients label, it is called a "Humectant", not a sweetener, so a drink sweetened with only glycerol will be advertised as sugarfree, and "artificial sweetener free"
The difference between DOGE and FDR banning gold hoarding over $100 ($2K+ today) is that the latter targets the wealthy, while the former is focused on looting public goods to enrich the privately wealthy.

It could be seen as naked class warfare either way, but they are opposites. Increasing wealth inequality is fantastic path to social unrest and weakened institutions.

FDR was the leader of a republic, Musk is a classic robber baron.
It all depends on your use case. I'm using Librem 5 as a daily driver.
How Silicon Valley Boys Came to Rule Politics
I watched the video on the site and this looks like absolute hell, as someone who uses drag-n-drop between programs fairly often.

I'm also someone whose open browser tabs tend to grow indefinitely until I just have to bookmark and close all hundred of them or whatever, so... yeah, this entire paradigm looks extremely not for me.
The HTML benchmarks I did myself with Razor pages.

The link your provided is severely outdated using data from Round 21 and .NET 6.
The launch post for Gemma 3 says:

> use Gemma 3 with the Google GenAI SDK

https://blog.google/technology/developers/gemma-3/

Does this mean (serverless) API access? I haven't been able to do so or find docs that explain how to.