skysight-inc/HackerNews huggingface dataset:
Consider that in the ASLR analogy dealing in function pointers is dealing in plaintext.

I think the semantics are being confused due to an issue of recursively larger boundaries.

Consider the system as designed versus the full system as used in a particular instance, including all participants. The latter can also be "the system as designed" if you zoom out by a level and examine the usage of the original system somewhere in the wild.

In the latter case, poor secrets management being codified in the design could in some cases be security through obscurity. For example, transmitting in plaintext somewhere the attacker can observe. At that point it's part of the blueprint and the definition I referred to holds. But that blueprint is for the larger system, not the smaller one, and has its own threat model. In the example, it's important that the attacker is expected to be capable of observing the transmission channel.

In the former case, secrets management (ie managing user input) is beyond the scope of the system design.

If you're building the small system and you intend to keep the encryption algorithm secret, we can safely say that in all possible cases you will be engaging in security through obscurity. The threat model is that the attacker has gained access to the ciphertext; obscuring the algorithm only inflicts additional cost on them the first time they attack a message secured by this particular system.

It's not obvious to me that the same can be said of the IPv6 address example. Flippantly, we can say that the physical security of the network is beyond the scope of our address randomization scheme. Less flippantly, we can observe that there are many realistic threat models where the attacker is not expected to be able to snoop any of the network hops. Then as long as addresses aren't permanent it's not a one time up front cost to learn a fixed procedure.
Even cached input is only half price with openAI (and they don't even offer it for o1-pro).

Further we also aren't counting input here which can get long since it includes the previous output, which for the last request will be 33,750 + reasoning + any prompts, which will increase your cost quite a bit there.

But yes that is more reasonable than I'd expect I must admit, but I still think it needs to be at least an order of magnitude cheaper to compete against the other models out there.

I'm not sure I know a lot of employees who would allocate that sort of constant funding to a consumables tool for an employee, given that's your usual monthly cost for a typical saas product.
Is anything like this available locally yet?
what exactly do you mean with "error tolerance and recovery"?
I really want hinting, subpixel and anti-aliasing available on all systems, and i want to pick the appropriate set of techniques based on the dpi and font size to minimize error, fuzzy excesses, and balance computation cost. Obviously we still don't all have high DPI all the time and likely won't for a long while. Apple dropping support was a disaster, and I currently run Apple devices plugged into to regular DPI screens with a slightly downsized resolution to trick it into rendering in a sane way, but it's a bonkers process that's also expensive and unnecessary for non-font paint work.

That said, one of the horrors of using the old font stacks, and in many ways the very thing that drove me away from fighting Linux desktop configurations for now about 10y of freedom from pain, was dealing with other related disasters. First it's a fight to even get to things being consistent, and as seen in your screenshot there's inconsistency between the content renders, the title, and the address bar. Worse though the kerning in `Yes` in your screenshot is just too bad for constant use for me.

I hope as we usher in a new generation of font tech, that we can finally reach consistency. I really want to see these engines used on Windows and macOS as well, where they're currently only used as fall-back, because I want them to present extremely high quality results on all platforms, and then I can use them in desktop app work and stop having constant fights with these subsystems. I'm fed up with it after many decades, I just want to be able to recommend a solution that works and have those slowly become the consistently correct output for everyone everywhere.
> being able to search well - a problem the whole Fediverse has...

I still don't understand the Fediverse's surprisingly common hostility to indexing: a publishing platform that won't let indexers record its publications - what is that supposed to be ?
> the guys I get are pretty good and actually learn. The model doesn't.

Core issue. LLMs never ever leave their base level unless you actively modify the prompt. I suppose you _could_ use finetuning to whip it into a useful shape, but that's a lot of work. (https://arxiv.org/pdf/2308.09895 is a good read)

But the flip side of that core issue is that if the base level is high, they're good. Which means for Python & JS, they're pretty darn good. Making pandas garbage work? Just the task for an LLM.

But yeah, R & nginx is not a major part of their original training data, and so they're stuck at "no clue, whatever stackoverflow on similar keywords said".
Is Betteridge’s Law really a law? Some say it might be!

I’ll give this a pass because this is a question that is capital-H hard to answer with certainty, so a shift in probability is newsworthy.
The Soviet Luna program was the first to fly by the moon, impact land on the moon, soft land on the moon, and get photos of the far side of the moon: https://en.wikipedia.org/wiki/Luna_programme

It’s not that Korolev was irreplaceable necessarily, but the soviet union being what it was his death logistically derailed the space program.
I recently saw a video where the guy tested slamming Cybertruck doors, and they often broke in such a way that the inner moulding came apart and half-jammed things up, ripping apart if you tried to open it again. I imagine things are even worse in an actual crash.
Wishing the person who downvoted this an ironic encounter with their ignorance.
Popular past discussions:

2022 (207 points, 131 comments) https://news.ycombinator.com/item?id=30815693

2020 (250 points, 109 comments) https://news.ycombinator.com/item?id=24643200
>What is a late slip?

I imagine (I don't live in the Chicagoland area, so guessing here, perhaps someone from the 'burbs there can chime in) it's a note from the CTA saying the train was delayed so you can limit your negative exposure when you boss wants to know why you're two hours late.

Which is actually much more than NYC does. Although that has its advantages as well. The linked fortune[0] (actually an excerpt from a NYT 'Metropolitan Diary'[1] piece ca. 1980) details this:

I for one cannot protest the recent M.T.A. fare hike and the accompanying
promises that this would in no way improve service. For the transit system,
as it now operates, has hidden advantages that can't be measured in monetary
terms.

Personally, I feel that it is well worth 75 cents or even $1 to have that
unimpeachable excuse whenever I am late to anything: "I came by subway."
Those four words have such magic in them that if Godot should someday show up
and mumble them, any audience would instantly understand his long delay.

[0] https://motd.ambians.com/quotes.php/name/freebsd_fortunes/to...

[1] https://www.nytimes.com/column/metropolitan-diary
My personal theory is that a lot of nuclear advocates are pro-nuclear first (possibly to be contrarian, or because they think the tech is cool), then look for favorable facts/data second.

Meaning the advocacy is not driven by best-effort current estimates of efficiency/cost/benefits-- its the other way around, leading to such a high number of overoptimistic takes on it.
my impetus for exploring it was that vim modal editing and keyboard navigation is just really clunky in the notebook integration.

whether or not it's better for you depends on your use case for notebooks — i use them mostly for prototyping and exploratory data analysis so separating the code from the output might be more convenient for me than for you
First we didn't know what software we needed. People wrote all kinds with all kinds of licenses. It served us well but we will eventually need to see what the applications are doing. There shall be no privacy or security on any level until we know what is done.

It's like having masked strangers in your house unsupervised. Whatever the excuse was for inviting them in they will eventually have to leave.
"The wheel of capitalism must turn. Do your duty as consumer and consume."
From the Kernel to the Moon: A Journey into Lunatik Bindings
With GSoC approaching, I wrote an article on how to extend Lua with kernel APIs and embed the Lua interpreter into Linux subsystems using Lunatik—an in-kernel Lua runtime that enables dynamic scripting inside the Linux kernel without requiring recompilation.

The post covers key aspects of Lunatik bindings, including runtime management, integration into the framework, and practical examples like Xtables and kfifo.

Whether you're considering a GSoC project or just interested in kernel scripting with Lua, this article might be a useful reference!
They removed required fields from the spec for similar reasons.
At this point you’d come out ahead just buying a pelican. Even before the tax benefits.
It has a smaller API surface into the consuming applications and platforms.

Skia tendrils run deep and leak all over the place.

There's also a different set of work to invest in, next-generation Skia is likely to look quite different, moving much of the work on to the GPU, and this work is being researched and developed: https://github.com/linebender/vello. Some presentations about this work too: https://youtu.be/mmW_RbTyj8c https://youtu.be/OvfNipIcRiQ
Ah I see, yeah makes sense. I wasn’t aware that this is a feature in Passwords, (and even if I did I probably still would rather go manually to the website).

Since it pops up a web view which I presume is webkit/safari, I wonder if the Safari setting “Not Secure Connection Warning” (which you should set to on), is correctly applied to the view. Obviously it’s a bug they used http in first place, but this would have helped.
It's not that the price increase itself leads to better conditions, it's that better conditions necessitate price increases.

There are ways to assess whether a product meets one's standards. They may not be your standards, but it would meet the median for consumers.

I can purchase poultry from a local farm that has an on-site health inspector, where chickens are free-range. In ovo sexing is coming later for eggs. On the poultry side, life in battery cages by far leads to the most suffering. Absent that, given the right conditions, I find the poultry inoffensive and most consumers would too.

I agree there should be legislation, and that has been happening at the state-level.
The really interesting part:

https://newscenter.lbl.gov/2025/03/19/new-desi-results-stren...
> ROSCOs exist because trains are so expensive that neither government nor TOCs can afford them.

Is this sarcasm that I am missing? There is absolutely no reason that Government (or a Government-owned business) couldn't "afford" rolling stock. That's a really poor excuse (and completely made up) if they claim that.
Who would have guessed the market for Down Syndrome porn was this big?

Another accomplishment of Twerk Tic (the "tic" comes from the fake Tourette's influenzas)

Every day I just become more grateful that I didn't grow up in the internet brain damage era...
I think a question in the headline is fine when the answer is not known. And of course this one even includes to answer the headline with the question. In this case, the question is useful for framing the topic discussed.
One problem with keeping the changes separate is the LLM usually wants to test the code with the incremental new changes. So you need a working tree that has all the new changes. But then... why not use the real one?
How long is it's thinking time when compared to o1?

The naming would suggest that o1-pro is just o1 with more time to reason. The API pricing makes that less obvious. Are they charging for the thinking tokens? If so, why is it so much more expensive if there are just more thinking tokens anyways?
If you're doing something that is a) very well understood and b) affects the safety of the public, then this is where engineering tends to be heavily regulated. It's not the definition of 'real' engineering though. And if you're trying to do something that is difficult in that it needs to be heavily optimised around thin margins, then it's very easy to spend way more time and money if you try to make it right the first time around, and you'll probably still fail compared to just building it and learning from the process, even if building it is a slow, expensive, and dangerous process.
Vogtle actual costs are already competitive with actual renewables costs, and build times are vastly better than the 25 year timeline you're calling a "best case scenario" here.
I've been thinking about this for a long time and am going to try to explain it as best I can.

> "Housing can either be an investment or affordable."

This an important point although I'd describe it slightly differently

> Housing can either be a speculation backed by NIMBY or affordable.

In general parlance, an investment is something you buy that makes you money. I think this terminology is overly broad. In economics, capital is something that helps you produce something else, e.g. tools and locations to produce. The proper price of capital is tied to the returns on investment over time. Usually when economists talk of investment, they are talking of capital purchases.

Housing (e.g. a house, apartment, condo etc) is an asset, but it doesn't really do the thing that most capital does because -- much like food -- past the basics to live it is a lifestyle consumption good. Housing is consumed as you live in a place, the wear and tear that occurs. We produce more as we repair housing or build new ones. But the housing doesn't really provide a return, unless you sell it to others through renting.

When people are told to "invest" in a house, they are being encouraged to purchase _and speculate_ on their own consumption good. This speculation is based on the assumption the price will go up, not that you will earn a stream of payments because it improves your ability to produce. The only way for this asset to grow in value is for the supply to be artificially constricted.

So the fact that people have been sold an investment lie and tie up so much of their wealth in it leads to exactly the political results you have pointed out.
Here's the repo: https://github.com/szymanowiczs/splatter-image

Apparently you can clone and run the demo locally. But wasn't clear at a glance how much is local and what hardware required.
People respond to incentives. I would rather live in a SFH for the same price, but I live in San Francisco, where that's absurdly expensive. When people talk about the proposed Sunset Tower, claiming "who would ever want to live there" my response is always, "me." If my needs are met by the units, and units are at a discount to the surrounding SFH's, I'd live there in a tower in a heartbeat.
I don't agree with your cost estimate, but even accepting it there's no way your spending £1800/4-6 weeks on something as small as 500 lines of code and as simple as PCM audio player code. Your description sounds more like the thing an undergraduate might make in a Hackathon.
If the code compiles with a C++ compiler, for better or worse it is C++ as well, might be C style C++ code, which is nonetheless part of the grammar, semantics and libraries defined by ISO C++ standard.

And that is the deal, lack of security culture.
It will never happen, especially with the racialized nature of that socioeconomic ladder. The country that generates downvotes on a post recognizing the similarities between BLM/Floyd Protests and the Euromaidan (https://news.ycombinator.com/item?id=43389979) could never.
Most people are on their phones most of the time. At this point, I wouldn't be surprised if you had to explain why you weren't on your phone.
Careless People Review
Odd comparison / statement in the context of MS rewriting GDI in Rust
If this were true there would be a lot less hiring of suggests engineers in the world and a lot more people getting laid off.
Maybe he's hoping to cure the brain worm pandemic. Oh wait the chickens aren't cheating on their spouses, so they should be immune...
The reality is that competition at Amazon is intense.

Amazon corporate is roughly broken down like this:

L4: 45%, L5: 45%, L6: 7%, L7: 2.5%, L8+: 0.5%

Only the first promotion has guardrails (L4 to L5). Typically you’re expected to be able to write at all. From there many people end their careers at L5.

Going from L5 to L6 requires being the best person on your team for multiple years running. Compared with some really smart, focused, and motivated people. You’re also expected to be able to write well, read, and kinda poorly coach other people’s writing.

Going from L6 to L7 is very difficult. One of the biggest differentiators really is scale. If you still need help writing docs - that’ll slow you down and you won’t scale. If you’re slow to read and provide valuable feedback again that will hold back scale (many people compensate by adding more time to their work days).

However, the funny thing is the doc writing culture at Amazon is built by and for L8+ leaders. Everything else was just training and weeding people out.

Going from L7 to L8 is where “in-meeting reads” really start showcasing the differences between leaders. I’ve known smarter people that made better decisions but had their careers stagnate while watching other “80th percentile” decision makers grow because of speed to grok information and deliver valueable feedback 9 of 10 times is more important than the incremental benefit of being right 10 of 10 times.

So I get your concerns about in-meeting reads throughs but just keep in mind who and what it is defacto built for.
Lenin's works are essentially rebuttals to his critics and yes there's something to his arguing against figures who ended up on the garbage heap of history. But the ideas of his critics live on, with new advocates. For example, he wonderfully critiques anarchists and terrorism. We still live with right and left terrorists who think they will make a difference. They will not. And so on.
It's obviously not all supply and demand because school zones are a zero-sum part of house prices. Only the richest people can afford to pay the good school zone premium. If too many houses get built there, the schools shrink their zones so you can't increase housing supply to get out of that. You also can't increase the supply of good schools because that's mostly determined by the relative income of the parents, which can't be increased, by definition because it's relative.
Then why wasn't OpenAI doing that themselves ?
> conditions will still be a living hell

I've seen what better farms look like and I disagree. It most closely matches what consumers want and expect. Suffering is non-zero because it necessitate slaughter, but not as egregious as in commercial agriculture.

In other words, there is a threshold of suffering consumers are ok with.
The WWPG is the answer! World Wide Power Grid...
Chemists develop dye stack that mimics plant energy conversion
Agreed, love how clear their pricing page is.
You can name the sin and not the sinner and get the benefit of a rebuttal.
Scratch the surface of every VC-funded tech disruptor and you'll find a temporarily embarrassed market incumbent.
In my bizarro completely unscientific visualization it makes sense.

Say you have a waterbed made out of very stretchy material. It's bound by a hard frame, but the sides of the frame can slowly expand if enough pressure is applied. Without anyone on the bed, the system is in steady-state. The sides can just barely hold the waterbed bladder without expanding.

Now let's say a bunch of kids jump onto the waterbed. They make indentations in the surface which cause them to roll towards each other (gravity) but also the waterbed is trying to repel them (dark energy).

The extra force of the kids put on the waterbed's surface causes the sides of the waterbed to slowly expand. As the waterbed expands, the repellent force lessens and the expansion slows until it hits steady-state again (or the kids get bored and go outside to play).

Since the universe has no hard edge, it could be there is no steady-state, but the repellent force causing it to expand just gets weaker and weaker over time as matter gets more and more diluted.

I guess all this hinges on whether it's matter causing the repellent force, or if it just exists outside of matter.
Any compiler worth its salt be inlining those functions (provided lto is enabled) because inlining that type of tiny function is a win. Additionally, the linker can deduplicate identical functions (eg vec append for two identically sized types)
Don't name yourself seems like sage advice especially in this case.

Just sayin'
It’s hard or impossible online to detect sarcasm but in the worst case I’d qualify the legitimacy of my argument by pointing to its form, reductio ad absurdum.
> 2. It has a convenient and simple query language

IMHO, Loki query language is the most inconvenient language for logs I've seen:

- It doesn't support calculating multiple stats in a single query. For example, it cannot calculate the number of logs and the average request duration in a single query.

- Its' syntax for aggregate functions is very unintuitive and is hard to use, especially if you aren't familiar with PromQL.

- It requires putting an annoying "|=" separator between words and phrases you are searching in logs.

- You need to use a hack with JSON parsing when filtering or stats calculations on log fields is needed.
> What is it with the never ending stream of excuses when reality does not align with the nuclear cult?

Just show me the pathway to at least 60g/kWh CO2 footprint for Germany. I'm not asking for too much.

Otherwise, it's the same old story: "Oh, we already invested $500B in Energiewende, and it didn't deliver. But it's too late now to switch to nuclear, so we need to raise the energy prices more for more Energiewende goodness!"

> The graph goes to 2024. In Germany since 2011 coal is massively down, nuclear is down to zero fossil gas is stable.

https://www.reuters.com/business/energy/germanys-energy-use-... - natural gas has been rising, even though the overall energy use is dropping. It's directly replacing coal.

But wait! There's more! German electricity imports rose by stunning 23% compared to 2023 with net 32TWh imported, total yearly generation is 585TWh.

> Do they continue to invest in renewables chipping away

If the renewables are chipping away at the problem, then why is Germany _directly_ _subsidizing_ natural gas power plants to the tune of $20B?

https://www.reuters.com/business/energy/germany-agrees-subsi...

I can actually tell why. The day-ahead electricity spot price markets are getting murderous. The last year, the maximum price rose to almost $1000 per MWh: https://www.smard.de/page/home/topic-article/444/215556

And even the pinky-swear promises to be "hydrogen ready" are not enough: https://www.energyconnects.com/news/renewables/2025/january/...

The proof is in the pudding. The German "green energy" transition has reached its practical limits. We can see some variations in the CO2 intensity due to weather and business cycle effects, but it won't go down much more than the current level.