skysight-inc/HackerNews huggingface dataset:
> People need to stop reinventing things

Why?
i'm not sure if you can compare run of the mill micro services with "uncommented academic modeling code from Matlab".
ALL code eventually degrades into lasagna.
That requires you quote the param in the sintr to ensure that params are groups as expected. E.g.

# cat pvars.sh
#!/bin/bash
echo "\$1=$1"
echo "\$2=$2"
echo "\$3=$3"
# sh -c './pvars.sh "$1" $2 $3' -- 'a b' 'c d'
$1=a b
$2=c
$3=d

The whole point of passing in an array and using something like exec (or system(), if provided as it handled the fork and wait for you) is that you avoid the overhead of the shell starting up at all and parsing the command line, and it lets you define each param exactly as needed since each param is its own array item. You don't need to worry about splitting on space or the shell splitting params on space, or quoting to group items. If you want the param to be:

foo "bar baz" quux

as one singular parameter, you just make that the contents of that array item, since no parsing need be done at all.

If you have an array of params and you're jumping through hoops to make sure they're interpreted correctly by the shell you call execute a process, you're likely (depending on language and capabilities) wasting both cycles and over complicating the code when you can just call the program you actually want to execute directly and supply the params. Alternatively, if you have all the params as one long string and you want it to be pased as a shell would, then execute the shell and pass that as a param. e.g.

# perl -E 'system("./pvars.sh","a b","c d");'
$1=a b
$2=c d
$3=
# perl -E 'system("./pvars.sh","a b","c","d");'
$1=a b
$2=c
$3=d
Next.js is based on a fundamentally flawed premise that one can write code that runs in the browser as well as the backend.

The security posture for the code running in the browser is very different from the code running on a trusted backend.

A separation of concerns allows one to have two codebases, one frontend (untrustworthy but limited access) and one backend (trustworthy but a lot of access).
This is by design do you can't exfiltrate data. Nix is so advanced I feel like a caveman with my openrc Gentoo.
There's a dead body lying there but you won't believe they're actually dead until someone creates a video reenactment of the killer stabbing them and shoves that video in your face?

Speaking of videos, https://youtu.be/opi1s_5Dm-c is probably below your level and it's kinda long.
The infected version was only the tarball, which was part of the obfuscation (i.e. people may look at git commits, but who individually checks autogenerated code in tarballs of every release)

Building from the git commit the release claimed to be from would result in a different binary than building from the tarball if the environment check passed.
I came across the author's Reddit post [0] and thought the HN community would appreciate this. I've been trying to move away from Instagram for awhile, and this looks like it might be a big help.

- [0] https://www.reddit.com/r/selfhosted/comments/1jhesed/
right, and we all got to work 20 hour weeks bc of the industrial revolution.
You said it was easy to refute yet you merely stated a mis-framed, contrarian perspective.

If you're going to try to be pedantic, do it right?

>Next.js would be a terrible choice for any app that has any non-trivial compute

Most web apps only need trivial compute. If you're including back-office, source systems in the word "web app" well that's your sticking point, not mine.
It's a question of timelines. While I agree with Amazon, we know pretty well the periods in which Rome and London have been inhabited, but the question is more about understanding pre ice-age human settlements, of which we know nothing about because these are more likely submerged now.
neat project! I love the example of how you can improve the API with the types provided by Rust. The part I didn't understand ws how this is a "port" is it literally a reimplementation of diligent Graphics Engine or is it bindings? Or is Diligent Graphics Engine a set of c++ bindings into something else and you're peeing the bindings?
Of course, nothing wrong with Request comes in → server processes it → HTML
The availability of fertile land.
For instance, with Pledge, the "dns" promise is implemented with hardcoded path in the kernel. Linux is complex because it is versatile and flexible. Controlling access to such features requires some complexity and the kernel might not be enough.

About interfaces, another example is that Unveil is configured with path names but Landlock uses file descriptors instead (more flexible).

Also, these OpenBSD primitives only apply to the current executed binary, there is no nested sandboxes because the goal is not to create this kind of secure environment but mainly to secure a trusted binary.
I remember seeing his posts on ASR. Some really fun stuff like how the air coming out of the screw holes for the feet would produce a supersonic boom; in a ported enclosure. Wildly entertaining.
Remember 2016/17 when we all thought we would have self-driving cars by now? People were modelling intersections without traffic lights, and talking about not needing parking space because the cars would just drive around when you weren’t in them.

So much technology these days seems to be “get it to 80% so we can demo and cash out” but 80% isn’t just an arbitrary number - it seems to be the point and which the remainder of the work to finish is either very hard or (I suspect) impossible.
what a timeline to witness, absolute glorious
This recent post by their CEO is funny in hindsight: https://xcancel.com/rauchg/status/1901786957149032869

Hypes up AI coding, hypes up AI for security in particular, then immediately faceplants onto a critical auth bypass.
Not that this isn't a serious attack vector (a possible one), but most implementations are not simply using middleware as a standalone check for authorization then blindly serving paths/content up.

That'd be pretty bad architecture in any stack.
Hack: 6M Records for Sale Exfiltrated from Oracle Cloud Affecting 140k+ Tenants
You're joking but this is the current way some folks in power discuss government services
In my opinion, yes, it's a short book. A lot about how to actually change culture and habits of a team.
This definitely feels true for tech companies where the prospect of more more productive engineers improves their bottom line. The same sort of companies that have a near infinite appetite for talented engineers.

But there's a lot of coders in industries whose core business isn't technology. Knapheide for example, a truck outfitting company where my brother codes. I'd imagine in those companies, being able to do the same work with fewer engineers and less cost would lead to fewer hires. Technology isn't their core product and they aren't being held back by software.
> no worse than things we’ve seen in Java space

My memory fails me - I can’t recall a vulnerability in the JVM ecosystem that allows an attacker to circumvent auth entirely with such trivial ease. Can you name an example?
Thanks for the mention. Currently working with MCP at the company I work at and making me more security-aware about it is handy :)
I think the number of people oblivious to the fact that stuff like helmets and car seats have the hazard of being compromised from a crash is low enough to not distort the market much. That's part of why these items have such a discount used. Meanwhile you can sell stuff like durable name brand tools commonly for near new price.

Unfortunately when a new child arrives finances tend to be at a minimum and this deep discount works out as a almost always better than nothing and for super cheap.
>AI as an excuse lay people off.

Why do you think the managers/business owners need an excuse to lay people off? If it's legal and economically beneficial to them, they'll fire people. Having AI won't help them as an excuse. In fact, I would say it sounds like a much worse excuse than "the economy is on a rough spot" or something like that
> the object on the horizon is... lens flare even brighter than the sun, or something?

This is a photo of sunset. The nature of sunset ought to be pretty easy to understand, from the point of view of the camera on a large object, the Sun seems to go behind the object and then it can't see the Sun any more, and we call this "setting". So no, the object on the horizon is the Sun, it's incredibly bright.

I expect the problem is like with that "3.6 Roentgen, not great, not terrible" meme, you're assuming that a device (the camera) is giving you correct information but it was maxed out instead. The Earth looks bright from the Moon, as the Moon does to us. So lets call that 100% bright. Now the Sun is several hundred thousand times brighter. That's um... oh, it's 100% bright again, because we've maxed out the device.
I suspect disallowing all upper body contact would lead to more goals. Posting a defender on the goal line would be less effective.

> There would probably be quite a bit more acrobatics involved to handle the ball being in the air.

I think that could end up being disallowed, too because of the risk of feet hitting heads, especially inside the penalty area. Think of the body movements of https://en.wikipedia.org/wiki/Sepak_takraw but without the net separating teams.
Using what command, though?
"Most modern languages have tuples. And tuples are usually anonymous." Sure! And I LOVE ending up with var names that are always Item1 and Item2... Very descriptive!
Environmentalists have been pushing wind, solar, etc. for the last half century. There are a few shortsighted people who oppose wind farms but they represent a large, complex multinational movement in the same way that any one of us represents the tech industry, which is to say not at all.

In many cases, if you look at the complainants it’s also reasonable to question whether they’re fully honest about their motivations. For example, the big Martha’s Vineyard project was backed by the biggest environmental group in the area but by the opposition were people like commercial fishermen and various rich cranks like RFK Jr. and the Kochs who thought the change in view would affect their property values but do not otherwise live lives full of obvious strong environmentalist views.
What to Look for in a Software Startup (2019)
I agree with your points, especially about economic class. I've been thinking since the original occupy wall street protests that there's been a shift towards pitting people against each other on the basis of other identity rather than class. Maybe it's been an intentional push to create infighting and divert people away from eating the rich or whatever.

I usually don't pay too much mind to trying to guess what the OP might want, rather the topic has been raised here so it's a good conversation to have.
Another accurate representation, from the article:

https://militaryrealism.blog/wp-content/uploads/2025/03/figu...
> Firejail and bwrap are setuid sandbox frontends.

bwrap does not require SUID, it only needs it if user namespaces are disabled for unpriviledged users.
Yes, of course the shock wave is conical; I just highlighted above and below because they're the only directions likely to influence how quickly the bullet falls.

I don't think the effect would generate lift per se, assuming a horizontally fired bullet (since, again, it's symmetrical). What it does seem to me though is that it would effectively increase the density of air local to the bullet (in all directions except for behind), and so it would essentially be falling through denser air than it would be if just dropped from stationary. That would result in a small but non-zero increase in the time taken to fall the same distance.

Again though, that's just what intuition tells me; I certainly haven't tried to model it or anything.
Ohhhh... my HOA is west of Austin. We've been in stage 3 draught restrictions since 2016. That means one-day-a-week watering, and total water expenditure limits. I have the 3rd largest lot in the neighborhood. When the temperature goes above 105°F, the lawn requires 1" of water per day, which would be 75k gallons per month. With penalties, this would be a 50k$/month water bill. Needless to say, the lawn is ... dirt.

The HOA sent letters, telling us to water, so we told them to foot the water bill through the water district first (which was a HOA change made a few years ago, thankfully). They STFU pretty quickly after that.
This reminds me of DOS-based Windows which would need to get out of the V86 mode that EMM386 used before going into protected mode itself; a task which was done using the undocumented (at the time) GEMMIS interface.
> You write this in the same week that German lawmakers actually passed almost $1 Trillion in new debt allowances for infrastructure and defense.

Well, yes. I'm honestly surprised it passed. I guess a shadow of a new war can make even the German bureaucracy move.

> And you conveniently ignore the dozens of other that have been published since and came to the same conclusion: a transition to renewable energy is possible and the cheaper option.

Your own links provide $1T as the _lowest_ option. More realistic options are more expensive. And ALL of them require the development of new technologies, which is inherently risky.

Nuclear is literally cheaper, even if we assume no savings from large-scale production. But it's not being considered, because Greenpeace wants Germany to use coal and gas.

> Yes, to a constantly decreasing amount. That is the point of a "transition".

And that's the point. The transition could have been already over, if Germany had chosen nuclear in 2000-s.
Because it denies people a chance to live in peace. If the ego constantly needs to justify itself, then we can't live in peace. If you need to learn, please do so on your own and bring what you can from your private learnings. It's not obvious to the rest of us why their framework needs such a security apparatus. The reason it's not obvious is because most of us don't see it as obvious (by definition, its not an obvious thing they are doing). Security, of all things, should be obvious to us all. As in, most of us should go "well this could have happened to any of us", but I don't think we are all thinking that. We are kind of thinking, "why would you confuse security to this degree across these layers?".
Bad self talk where one tears oneself down is a common one.

There is also regressive punishment, in the case where someone else has been wronged, not writing the wrong and letting it linger is also a form of self harm.

I now have the philosophy that if I were to see someone else treating someone the way one treats themselves, and they take note of it, then the internal behavior is not appropriate.
This is all broadly true, historically. Automating jobs mostly results in creating more jobs elsewhere.

But let's assume you have true, fully general AI. Further assume that it can do human-level cognition for $2/hour, and it's roughly as smart as a Stanford grad.

So once the AI takes your job, it goes on to take your new job, and the job after that, and the job after that. It is smarter and cheaper than the average human, after all.

This scenario goes one of three ways, depending on who controls the AI:

1. We all become fabulously wealthy and no longer need to work at all. (I have trouble visualizing exactly how we get this outcome.)

2. A handful of billionaires and politicians control the AI. They don't need the rest of us.

3. The AI controls itself, in which case most economic benefits and power go to the AI.

The last historical analog of this was the Neanderthals, who were unable (for whatever reason) to compete with humans.

So the most important question is, how close actually are we to this scenario? Is impossible? A century away? Or something that will happen in the next decade?
Yeah in fact it never even happened. I set up some MTProto proxies for some of the communities I engage in but it was never actually needed.

It was exactly 1 year ago, I know because I ordered some domains for the proxies and I just got the final reminder.
The Bitcoin Is Dying. Whatever. (2011)
I mean I could also just not use computers, or the internet and that would be perfectly secure as well.

Breaking or making actively annoying expected and useful functionality isn't security (and has a long track record of leading to workarounds which compromise security).
As an American I’m biased, but Fahrenheit matching the 1-100 scale used in so many other things just feels nice. Maps cleanly to 0-1.0 in a float/decimal type in programming which is neat too. Feels less arbitrary even if it actually isn’t.

I prefer metric otherwise but for temperature Fahrenheit just “clicks” in ways that Celsius doesn’t.
The Red Bull car isn’t dominant. Max’s skill covers up how bad the car really is. Especially without Newey. Very similar to Marquez in MotoGP.
> The model activates 52 billion parameters through dynamic expert routing, with each specialist module handling specific reasoning domains like mathematical logic or contextual analysis. This architecture enables:

https://www.analyticsvidhya.com/blog/2025/03/hunyuan-t1/
I don't think this is true in principle. It should be pretty easy to statically verify that the separation is safe using something similar to trusted types and the Typescript type checker. It's not possible in Next.js, but that doesn't mean the premise is wrong.
Have you ever lived near wind turbines?

They take quite a toll on both wild life and people living in the area.

And are often abandoned as soon as they don't generate enough profits/are too expensive to maintain, with no one wanting to pay for cleaning up the area.
> This is by design

Hopefully one day people will finally accept that this is bad design and that humans require compromises on security
Article says that distributions should get source code directly from the VCS (for instance Github) rather than the traditional installation tarball.

I don’t see what this solves though. Couldn’t a malicious maintainer simply add binary blobs directly to the source code repository?

The author suggests Github is trusted, as though Github validates code in some way. Which of course it does not.
It's interesting that so many replies in this thread (and indeed, most Zig threads) are along the lines of "yes, it doesn't do X today, but Zig could just add X". I'd really like to see arguments in favor of Zig that rely on what it can do today, rather than what it might do someday. After all, you don't extend Rust the same courtesy, and Zig is not that young of a language. And in PL circles Zig has a bit of a reputation for promising things that it has yet to deliver (e.g. static detection of potential stack overflows, which I'm convinced just can't be done in a useful way in the presence of higher order functions).
> because the safe storage of fissile waste for 10k years isn't a problem we need to solve, apparently

We never solved it for the other material that we dug up and burned (coal). So coal ends up emitting a ton of radioactive waste because uh when you dig up the ground you also dig up radioactive uranium (there's no 100% pure carbon deposits).

It's also only a self-inflicted problem. You can technically re-use the waste until it only needs to be stored for ~300 years before it decays to "normal" levels. The US doesn't allow you to do that though while say France does.
VetsWhoCode Resume GPT
Red Bull isn’t dominant. Max is.
If you genuinely believe the real problem here is reporting, not that it's unclear (and had to be denied by the President himself) whether a private citizen with massive and well documented conflicts of interest and who doesn't hold a TS clearance was briefed on some of the nations most sensitive military planning I'd suggest I'm not the one with an information consumption and evaluation issue.
I used Windows 7 for way beyond its expiry date, until there was an exploit for some image format that meant I had to upgrade my browsers.

Corporate users of Windows 7 still get updates, and there's somebody in Ukraine who redistributes these updates, or at least the digital certificate signing the updates says they live there: https://blog.simplix.info/update7/

Come to think of it, I guess and hope the info in certificate is outdated, and they're living somewhere outside of fear of Putin's bombs.
Police forces protecting the interests of capital first, citizens second, e.g. private police forces (Pinkertons) and strikebreaking.

Militaries being used by Governments to protect the interests of capital at the expense of citizens, e.g. the Battle of Blair Mountain.

Government legislation enshrining the rights of capital and profit over the rights of citizens, e.g. copyright laws and DRM protections.

Centralization of systems and dependency of products on remote compute, e.g. public cloud service providers, social media networks, shifting from wired to wireless home ISPs and networks to reduce stability of private hosting.

They made it illegal to break DRM on their devices, send the police to protect their property, leverage the military to annihilate opposition, and now use modern technologies to prohibit end user control by requiring remote dependencies for operation.

That's how they stop you.
Krispy Kreme Cyber Attack a Wake-Up Call for the Food Industry
The storage device being 'wafer tapes' of 128k would suggest it was to be based on the Exatron Stringy Floppy. Although exatron only sold 75'/64k tapes, Rotronics/BSR sold a 128kB (presumably ~160') format version of it for the ZX Spectrum (Wafadrive) and Vic-20/C-64 (QDD).
Expect many more occurrences of anarcho-tyranny from the Trump regime. Create problems or let them fester with the excuse of "freedom" while enriching the patrons paying the right bribes, but then when people actually try to help themselves (as freedom would indicate) the jackbooted thugs appear. It's going to be a long two years.
>You can often only drag 'n drop from ~/Downloads/

Drag and drop could be made to always work since it's being done by a user. Request this feature from your operating system's developer.
Kim Dotcom... they even went to New Zealand...!
Because of the atmosphere diffuses all the blue from the sunlight all over the place. I've seen people demonstrate that if you know where to point a telescope, it is just about possible to make out some of the brighter objects — though I can't remember if that was a star or a planet…

But in this case, the exposure is set at a level that even Venus isn't quite fully saturating the sensor.
Literally any container runtime can do this for you. No one does it though because it's annoying as hell to upfront figure out what you want, and then be unable to increase that list later.

Like if I were to try and find a not annoying way to do this, it would be to snapshot and overlay mount my filesystem at process launch time, then give a heuristic warning at process termination about what was changed.

But then we're still into basically SELinux territory which because of course there's upfront things we don't want to allow read access to - i.e. SSH keys.

(don't know what the lesson here is other then "for the love of god could we get a standardized secrets filesystem and/or API or something". Looking at you Hashicorp Vault and ~/.vault-token).
Taxpayer. First for welfare, then the prison. Maybe that's the point, remove the father from the kids life, subtract enough money he can never fully stand back up, dad is now broke and out the picture and the kid without money or a fatherly role model. More fodder for gangs, the prison system, and exploited manual labor.