skysight-inc/HackerNews huggingface dataset:
It has already lead to vandalism. Shooting at dealerships, lighting superchargers on fire. There's people spray painting Nazi and keying swastikas on Teslas. It's only a matter of time before it's done on a Jewish person's car.

Mind-blowingly dumb.
The point is that when ignoring unknown fields leads to users defeating your business model, even though the protocol requires it, the business logic of your software almost certainly should not. Protobuf working as intended, youtube client not so much. Agree that cert pinning is not the solution.
> I instead urge UI designers to consider the powerful concepts of consistency and familiarity just a bit more often than they presently seem to do.

I've been developing UIs in some form or another for almost 20 years and this really hit home for me. I often use the analogy that UI/UX designers are like interior designers and architects rolled into one while developers are the general contractors and tradespeople (you need to pretend "software architecture" isn't a thing for the analogy to work). In my experience, I could ask a general contractor to come up with a design/layout for a kitchen and I would probably be satisfied with the result. That contractor has built hundreds or thousands of kitchens. A good GC will know how to lay out the space efficiently given the dimensions of the room. You won't end up with weird issues like needing to open the oven door in order to access a cabinet drawer (something I'm dealing with in my current apartment). It probably won't be flashy or unique or have a "wow" factor. In fact, it would probably be so unremarkable as to be forgettable, but it would feel immediately familiar to anyone who comes to visit and function perfectly as a kitchen.

I try to push for this type of approach in my current job. I don't want to try implementing novel design ideas. Novel design ideas don't have reference implementations or accessibility guidelines. I think familiarity is the best UX. Are the familiar approaches always the best ones? Maybe not, but I don't want to be the trailblazer. Whenever I encounter a novel design, I ask the person who came up with it to find me 3 other apps that implemented something similar. If they can't, I suggest a more idiomatic solution. Sometimes people push back, but once I start asking very specific questions about how this thing is supposed to behave, they usually end up deciding to drop it and go the idiomatic route.

I can't say for sure, but I'm guessing a lot of the articles and blog posts out there complaining about the state of user interfaces aren't written by the folks that have to implement them. There are so many variables involved in accommodating for user interactions with basic controls, let alone complex ones (if you've ever built a custom <select> component that meets all a11y requirements, you know what I mean).

So to end my rant: just use the dang controls we have available, don't try to reinvent the wheel, and focus on making your product really good at what people are paying for it to do. I wouldn't spend extra money on an application just because they came up with a novel alternative to a slider control, and I'm guessing most other people wouldn't either.
What a ridiculous bad faith deflection. No other auto maker is explicitly and aggressively aligning itself with the current administration and their policies. Tesla’s CEO wants to associate his company with a political vision and is vocal about using his money to further that vision.
I wonder if they're using the same die for one or more microprocessor products that are RISC-V-only or ARM-only? They could be binning dies that fail testing on one or the other cores that way. Such a product might be getting sold under an entirely different brand name too.
It’s not about an unfamiliar syntax. S-exprs are objectively hard to read. The same shape for function calls, macros, blocks, and data means I can’t distinguish them by sight to detect the code structure. I have to do conscious paren matching.

Structure recognition should be pushed as far down in the subconscious as possible. Rainbow parens help, but it’s not nearly enough to stop other expression fragments from jumping into attention. Likewise clojure’s different bracket types for data structures, likewise the editor highlighting the paren matching the one at the cursor. Better than nothing, but incomparably worse than just having visually distinct syntax in the first place.

C-style is fine. Python-style, ML-style, SQL-style, BASIC, shell: all fine for structure recognition. But lisp is just a soup. Or a fog.

Same problem with elasticsearch queries, too.
New Brain Discovery Could Revolutionize Hearing Loss Treatment
Genuinely, what innovations did the Cybertruck bring?
My favorite is the stream gatherers, an addition to the stream processing API that will let streams do things like sliding windows.

https://docs.oracle.com/en/java/javase/22/core/stream-gather...

Ahead Of Time (AOT) linking is nice as well, should cut down cold start time.
Hubble Just Revealed a Breathtaking New View of a Nearby Galaxy
What is The Great Progression: 2025 to 2050?
Seeing LLM as a motor was a legitimate view until recently. But what we're start seeing with actual agentification is models taking the driver seat, making the call about search, tool use, API. Like DeepSearch, these models are likely to be gated, not even API accessible. It will be even more striking once we'll move to industry specific training — one of the best emerging example is models for network engineering.

The key thing really about my post: it's about the strategy model providers are going to apply in the next 1-2 years. Even the title is coming from an OpenAI slide. Any wrappers will have to operate under this environment.
Export DDL of one or more relevant tables, run query to get a random sample of 5 records for each table. Really quick to gather all this and enough context to handle most query writing tasks with some guidance.
Not only is the linked paper correct in that the ownership of of these kinds of animals is a proxy for deviant behaviours but the ownership itself is a deviant behaviour with the owners all too often using their dogs to terrorize their neighbours and assert dominance in their community.

It's really shocking to me that many societies allow people to possess and weaponize intrinsically dangerous animals within city limits.

Like I get why a place like America where little regard is placed on the consequences of the mentally ill or violent owning firearms is overlooked but it's disconcerting that places like Canada and the UK allow people to own such creatures with little recourse for the people who are chronically victimized by them.

The solution seems straightforward to me:
A) Prohibit the ownership of these kinds of animals in urban environments.
B) Enact laws that hold the owner criminally accountable for any harm their high-risk animal causes, equivalent to the charges a person would face if they committed the act themselves.

If you own a particularly aggressive dog that exhibits a pattern of threatening behaviour and it eventually kills someone, you should be charged with manslaughter. There’s no excuse for allowing preventable violence to occur when the warning signs are so clear.

www.reddit.com/r/banpitbulls
> And it is obviously only popular in the dark matter of Enterprise Software Development.

Well, and apparently for game development given both Godot and Unity use C# and various builds of .NET
Show HN: App for beer nerds scans beer menus and returns info/ratings
Good point. There may be deals like x percent of your stock will be buyed by us. If I'm the stock owner, i would gladly agree and reduce the price, if x is bigger for one buyer than y+z+w percentages of three buyers. I would have a guarantee to sell more of my chickens for sure at once and would reduce the uncertainty of even finding three different buyers.. but this reduces the stake holders (different sellers) in the market and the big one can dictate the prices and produce amounts at will.

Bigger is always winning.
How is it bad faith? Most automakers have a history of doing terrible things. It's just which causes you choose to ignore.
Well, Ford and the Dulles brothers first supported Hitler against the communist threat. Up until Pearl Harbor WW2 was just a little continental war where it wasn't clear which side should be annihilated.

In the end they gave Poland, which was the initial casus belli and supposed to be protected by Britain, to Stalin (another lesson what being a proxy for maritime powers looks like).

Were any Ford cars vandalized during the time?
Something I've played with off and on is using blender for all the key bits engine editors provide. You can encode metadata (components, pipeline steps) on 3d objects with the extra properties fields. Every GLTF importer I've tried will expose them to you. It's just json after all.

You can write a client in C# that renders the 3d bits in about 45 different ways. In the browser you could use Three.js. For some projects, I think an engine is optional.
ZFS was never going to have good support for adding and removing drives of arbitrary size. It's a filesystem for people who buy their drives by the dozen.
The concern is overblown. The lighting doesn't seem out of place when you're playing, just in A/B testing. It's way better and more accurate overall.
What to do about expensive missing Amazon deliveries?
I've been using Amazon for many years and never had issues. Until this week, when I ordered a Sony camera worth £1400.

The item was marked as "delivered" yet I never received it. No signature, no photo proof, nothing, just a green tick on their system saying it was "handed to resident"

I did the usual, ask the neighbors, check the general area, nothing.

I contacted Amazon the same day the item didn't arrive, they required me to wait two working days before they would even talk to me, this spanned a weekend, so 4 days later I call back.

Now they acknowledge the item must have been stolen.

They say they will not issue a refund without a crime number, so I contact the local police (UK) with all the details.

They tell me they will not issue a crime number, since it is Amazon's responsibility to investigate.

I call back Amazon to explain, they won't budge without a crime number.

Now I'm stuck in a loop. No crime number, no refund.

£1400 out of pocket, no item. What else can I do? Issue a chargeback? Then my account will likely get banned.

Has anyone else been in this situation? What are my options?
What should they have done instead to dispose of the whale? On its face, dynamite doesn’t sound totally implausible. Should they have just used even more?
They didn't want to buy Github.. too expensive. But Wiz price tag makes sense to them?
They look like the same steps to me, with steps 1 and 2 both being Setup. The dramatic arc is fairly universal, and Miyazaki is hardly an exotic unfamiliar with western culture.
Earlier: https://news.ycombinator.com/item?id=43398518
Indeed. It's not just an incredible dataset, it's a self-updating one too.
I’m starting to think that string-based languages like SQL which mix structure and content are a mistake.

Maybe future database systems will only accept queries serialized from protobuf, or JSON (output by a proper serializer)
Yeah, Dupe.

The original Reuters HN post was better than the corporate press release.

For example, Reuters mentions the antitrust angle, which was a barrier that made Wiz reject a deal last year, but now they can take advantage of the current regime's environment.

> 1. Google announces agreement to acquire Wiz (blog.google) | 74 points by thecybernerd 1 hour ago | 47 comments https://news.ycombinator.com/item?id=43398780

> 53. Google to buy Wiz for $32B (reuters.com) | 71 points by uncertainrhymes 2 hours ago | 64 comments https://news.ycombinator.com/item?id=43398518
Yes, they are spending tax-payer money. Previously, seized crypto would have been sold and could be used to reduce taxes.
i love the confidence of the demolitions person. Reminds me of so many Mythbusters episodes.
Id take it a step further. The immorality of cryptocurrency isn't complicated and defines why it never has become more.

Fiat money exists within a social contract - governments that issue currency must also maintain the infrastructure that makes society work. They're accountable for everything from roads to retirement plans.

When cryptocurrency advocates push to separate money from government, they're not just pursuing financial innovation. They're deliberately undermining the mechanism that funds our shared existence. They want the benefits of living in society without contributing to its maintenance.

This isn't freedom - it's freeloading. Cryptocurrency, at its philosophical core, enables wealth hoarding while disconnecting the hoarders from any responsibility to the communities that made their wealth possible in the first place.
there is/was a meme going around "boston tesla party" and i think if people are serious they should dismantle the teslas they bought, and (freely) recycle all the parts. Just take the L; otherwise this is, in fact, performative.

In fact, i'll propose this to HN. You have your tesla that you can "no longer, in good faith, continue to own" delivered to a lot i specify, and i'll livestream a team of people taking it apart, sorting it, and sending the pieces off to recycling. I will not pay you for your tesla, and you must include the pink slip.

any takers? I am completely serious. I think it would be fun (for me to set up and watch), it would probably be a well-viewed stream and VoD for each car, you could share the links with friends and family to show the strength of your convictions. It's win-win-win; Tesla already got their money, recycling is good for the earth, and you get to make a statement. I also win because i will pay the team that dismantles the car with the proceeds from recycling, which makes me a job creator.
Our game reached an interesting stage where, I think, we were forced to guess. Cue a big pause until, eventually, someone was brave enough to take the plunge and, fortunately, we won :)
I do long(ish) distance running as a hobby - it's not feasible to take a laptop out on a two hour run.

If I want to go meet a friend for a drink or food, I have to lug around a backpack, keep an eye on it to make sure it's not stolen. If I wanted to have a beer or wine, I can't because I may need to work at any point.

Favourite band is performing? I suppose you could take a backpack and the laptop to the venue, but again there's a chance it's pinched, and they'll make you check it at the cloakroom for the performance.
Fedora Linux 42 Beta
Step-by-Step Valuation: A Practical DCF and IRR Example
Java releases are timeboxed, so they don't need standout features.
Some of the new scenes are just too damn bright, but the few that preserved the atmosphere looked really good in the trailer.
Does blockchain have any use case in implementing version control systems?
Do you have to be looking at it? My keyboard has blank keys. I used to use vim, which had a modal input scheme. My music keyboard has modes where different keys play different instruments.

I agree that having the legends are good for affordances when learning. But they oddly hurt training. Specifically, they make it harder to remove the visual from the feedback loop. When training typing a long time ago, you wouldn't even look at the screen til you typed it all.
Right - the Wiz bank account is about to be the Google bank account, so it wouldn't make any sense for them to receive the funds.
How dare the founders be born in a country!
I can't speak to the UK, but here in the US the police love telling you it's not their problem to avoid doing their job. Here, I would push the police to actually take down a report.

Something was stolen from you. A crime was committed.
One person revealing and the other placing flags is a really nice twist — I'd love to see how that works in practice.
> Rippling has some incentive not to lie outright, but none whatsoever not to exaggerate the living heck out of everything.

What could have been exaggerated in the honeypot story? That seems pretty damning and they would be able to provide evidence to back it up (e.g. Slack access logs and the email).
It's a lot less fun than it sounds. https://www.kare11.com/article/news/crime/woman-shot-by-stra...
They are huge in the cybersecurity space, led by veteran founders, solve real problems, fastest growth to $100M ARR in the history...
Go is the poster child for not having structured concurrency, the article that started this movement was an explicit take down of go’s concurrency primitive “go func” being dangerous.

https://vorpus.org/blog/notes-on-structured-concurrency-or-g...

I think Kotlin still leads here, and even the Java changes don’t have the same nice ergonomics you get with Kotlin’s DSL. Would love to see more tenseness from Kotlin leak into Java.
Enemy players should be able to lay mines in untouched regions.
We want to ack within five minutes, and be at a laptop within 30. So long as I'm within mobile signal when the page goes off, it doesn't really matter what I'm doing — an ack is a button press on a push notification. And I can stay within 30 minutes of my laptop and an Internet connection by carrying said laptop and my phone (with "unlimited" data).

If the primary (paid) on-call doesn't catch the notification, the secondary (unpaid) will be paged. And so on, down a couple more steps, to a senior manager. There's no expectation that anyone other than the primary would actually be available to ack the alert.
Cert pinning is not a solution and defeats legitimate traffic inspection cases. It also just moves the goalposts as the author discusses it can be defeated by a modified app binary. The industry has moved on. Sign your data if modification in-flight is a threat. I’m surprised google isn't doing that.
> an on-screen keyboard makes different inputs easier

Sure, it can certainly make different inputs easier. But you'll be hard-pressed to convince me that those different inputs are better specifically because a touchscreen doesn't have the kind of physical feedback that comes from feeling the boundaries of different selections (eg, letters/characters) for that input.

With a keyboard, I can center my fingers without looking at them. I know exactly what input selections are nearby and in what directions; and I know exactly when my finger has crossed the boundary of one and is in a null-zone or is on another input. For many keyboards, I can even feel the embossing of the individual input selection (character).
https://github.com/google/robotstxt
or lets calm down, this much espionage doesnt actually happen that much, and when it does, separating out people on need-to-know basis and introducing honeypots have been routine parts of the process for decades and costs nothing, no startup to be built here

"security startups that "monitor for corporate espionage"" imply introducing yet another third party that literally has access to all the things (or logs thereof) thereby introducing a nice fat pwn factor for everyone
> Organizations that wish to do so can take advantage of Microsoft Group Policy
> restrictions to prevent Windows from executing the “run” command when users hit
> the Windows key and the “R” key simultaneously.

What about rather disabling copy-to-clipboard in the browsers with a GPO? Does this exist? Personally I use Windows+R dozens of times per day (and not to paste random commands from web sites...)
There are plenty examples where criminals acquire the data from companies, e.g. social media.

There was a time where you could upload a very old adobe hack (~100M email addresses), find out the person's name, DOB, who they know etc to various social media platforms. It's improved somewhat but there's still so many vectors.
Show HN: Embedded Shopping on 10 million Products
We built the Agora API to bring the frictionless experience of embedded finance to shopping.

You can integrate search, purchase, and real-time order tracking directly into your app, without redirecting users to external sites. Agora indexes 10 million products from 25,000+ Shopify and WooCommerce stores, delivering sub-400 ms search responses across text, image, URL, and location queries. It’s been built from the ground up to power everything from marketplaces to AI shopping assistants.

We started this project because we felt frustrated with how disjointed online shopping had become—once, a simple search for red shoes turned into a maze of irrelevant ads. Agora API solves that by embedding a complete shopping experience directly within your app. I’m excited to share this with the HN community and hear your thoughts.
The key part of magic numbers is that they appear early in the file. You shouldn't rely on something that will probably appear at some point because that requires reading the entire file to detect its type. A single 0x00 byte, ideally the first byte, should be enough to indicate the file is binary and thus make the question of encoding moot. However, 0x00 is technically valid UTF-8 corresponding to U+0000 and ASCII NUL. So, throwing something like 0xFF in there also helps to throw off UTF-8 detection as well as adding high-bit-stripping detection.

If you really wanted to go the extra mile, you could also include an impossible sequence of UTF-16 code units, but I think you'd need to dedicate 8 bytes to that: two invalid surrogate sequences, one in little-endian and the other in big-endian. You could possibly get by with just 6 bytes if you used a BOM in place of one of the surrogate pairs, or even just 4 with a BOM and an isolated surrogate if you can guarantee that nothing after it can be confused for the other half of a surrogate pair. However, throwing off UTF-16 detection doesn't seem that common or useful; many UTF-16 decoders don't even reject these invalid sequences.
Not the flex you think this is.
Most major subscription newspapers in Finland have a model where "important" news articles are free but for feature stories and such a subscription is needed. Having specific articles free would be something similar.

The free news articles are not out of the goodness of the shareholders. Most newspapers (Wired included) run ads, and still get ad revenue from the free stories and with them get to somewhat compete with fully ad funded alternatives.
I just played it a bit - IMO it's plenty dark.

I used Alt + X to get into settings and decrease the brightness from 50 to 40, but even without that it felt dark, dark enough that I couldn't see anything down an unilluminated hallway.

It looks and feels great though, I'm excited for the full release.
I'd expect a lot of the money was also to prevent a competitor with WhatsApp's ubiquity from existing. (Or selling to another competitor.)
It’s almost like parenting. Children from a bad environment are more likely to have problems later. Not very different from dogs. Both try to fit into their environment and take clues for “correct” behavior from there.

That’s as opposed to cats. They always plot to kill you.
Not OP, but a naive guess is it would mean that you'd have your schema defined in an ORM (for example, Prisma). The advantage here is that the LLM gets context on both the schema and how the schema is used throughout the application.
>That data could be fed to GCP sales team though customers might riot if that happens

Large enterprises don't sign the stock terms and conditions that would enable this, most do or should have legal teams redlining contracts around how cloud data is accessed and used by vendors. Maybe Wiz is so good they would agree to it, but it would get challenged and negotiated during the sales cycle.
Re-writing data from the host system is quite wasteful of a drive's write endurance. It probably shouldn't be done more often than once a year. Reading the data and letting the drive decide if it needs to be rewritten should be done more often.
Forgive me if I answer with a counter-question, but why would you use the Oracle distribution without paying for Oracle support too?