skysight-inc/HackerNews huggingface dataset:
The standard never has been and never will be absolute security. That’s an impossible threshold nothing would ever meet even though it’s objectively true that software today is generally more secure than software 30 years ago. The strongman claim being made is “Nix is harder and more expensive to exploit than traditional build systems”. So sure, if you find a cheap way to exploit Nix, track me down. But until then, it remains at least plausible & in practice very likely that Nix is harder to exploit than alternate systems on a technical level.
Agreed, there are two different problems being described here.

1. Divergence of threads within a workgroup/SM/whatever

2. Dynamically scheduling new workloads (i.e. dispatches, draws, etc) in response to the output of a previous workload

Raytracing is problem #1 (and has it's own solutions, like shader execution reodering), while Raph is talking about problem #2.
I'll share a new wrinkle that casts more shade on the coding LLMs.

We have a fair number of offshore resources that are used for dev. They developers are fully integrated into the team, are in all the stand-ups, and substitute for the usual role of junior programmers. They don't get the grunt-work shoveled on them, they get the same work as everyone else, they're just expected to not be as fast.

In 6 months 2 out of 4 of them been sacked, and surprise, not because we could replace their work with LLM output, but because their use of LLMs was so unrestrained and scattershot the pull requests they submitted had become nightmares. One thing mentioned in the article about unit test creation was something we saw as well. Perhaps this is partly due to working an existing code base where the LLM loses some of its advantage, and certainly some of it was cultural in that progress was thought more important than actual manageable code. The two sacked fellows where told, literally, from my own mouth, multiple times, "You cannot just ask Copilot to write you code, paste the entire thing into Visual Studio with no thought of what has changed, with the end goal of just compiling and meeting the single set of acceptance criteria on your story. You're breaking other things and introducing bugs." It went on deaf ears, and now they're gone. They were nice people, I didn't know how to get through to them, but they were convinced the LLMs were the way to go.

I use LLMs to help write code every day, and I wouldn't want to be without it, but I'm fairly surgical about it. Most of the time Copilot gives you a page of say, React code, or EF Core queries, you have to be really careful about anything you didn't explicitly ask for. Honestly, there is a time savings, but there is not a quality increase. The benefit is subverted by the time it takes to figure out how to ask correctly, the time to vet the output, and the time to fix the little tiny insidious bugs it can introduce.

So, don't go vibe coding and lose your job, is something to think about. I have to admit that it has worn me down meeting these interesting people from far-flung locations only to watch them flounder and get let go.
email is on profile, drop me a line if you want to discuss gpu meta machines
No. When we started the project we used prolly trees initially, but we don't need the content addressing feature for Zero and all the hashing was quite expensive. So now we just use a plain immutable b-tree:

https://github.com/rocicorp/mono/tree/main/packages/replicac...
I'm not sure how there's any ambiguity to this? We're talking about the EU here. The same laws that enable you to do business across borders without having a legal presence in every country also outline how to deal with issues like these.
> The job loss depends on the average speed up,

That's such a economical fallacy that I'd expect the HN crowd to have understood this ages ago.

Compare the average productivity of somebody working in a car factory 80 years ago with somebody today. How many person-hours did it take then and how many does it take today to manufacture a car? Did the number of jobs between then and now shrink by that factor? To the contrary. The car industry had an incredible boom.

Efficiency increase does not imply job loss since the market size is not static. If cost is reduced then things are suddenly viable which weren't before and market size can explode. In the end you can end up with more jobs. Not always, obviously, but there are more examples than you can count which show that.
Next.js version 15.2.3 has been released to address a security vulnerability
> Next.js uses an internal header x-middleware-subrequest to prevent recursive requests from triggering infinite loops. The security report showed it was possible to skip running Middleware, which could allow requests to skip critical checks—such as authorization cookie validation—before reaching routes.
I'd say this is better for those closer to the engineering side of the science<->engineering continuum, for sure. For AI researchers proper, I happen to strongly believe in symbolic approaches, so I'd say it's more of a tie/subjective/use-both situation.

AIAMA certainly has an absolute mountain of existing material, and it's never a bad idea to be working off the same baseline as a large majority of your interlocutors!
I guess you are conflating "democracy" and "republic", as Jefferson (?) pointed out. The key thing is not democracy but the separation of powers, and the rule of law, which is more or less what a "republic" is meant to be.
Your experience may be unique but I don't think it's exactly rare.

I'm just another random anecdote, but I also found I had Factor V Leiden through 23 and me. Also, I'm gay, and for a long time was the only gay person I knew in my extended family. Through 23 and me I discovered a 2nd cousin who also is gay, and I met him in real life and it was an incredibly meaningful and important experience in my life.
Of course, laws/regulations are enforced by the party in a country that has a monopoly on violence, and use the threat of violence to enforce (either imprisonment or a monetary fine, monetary fines are a derivative of kidnapping as money takes time to accumulate). Of course I'm not arguing against these functions in general, they should be used in ways that prevent an even worse act of violence (ex. a corporation wasting the time and money of millions of people by selling them a dangerous product). The application layer is where I believe laws and regulations are appropriate though, not preventing the development of the technology (ex. trying to limit who, how, and when someone/some company can do a large training run for an AI video model, because AI video models will be leveraged by scammers down the line).
Can you be specific? Which technology only benefit the 0.0001%?
Do other languages have a security model for this? I've always assumed that building arbitrary code could execute something in most languages.

I think using something like the pledge syscall from OpenBSD in the compiler could be useful. That way, it's controlled at the process level which things can be accessed on the system.
Yeah but AI coding does speed up some simple tasks. Sometimes by a lot.

But we have to endure these tedious self-congratulatory "mwa ha well it's still not as good as my code" posts.

No shit. Nobody is saying AI can write a web browser or a compiler or even many far simpler things.

But it can do some very simple things like making basic websites. And sure it gets a lot of stuff wrong and you have to correct it, or fix it yourself. But it's still usually faster than doing everything manually.

This post feels like complaining about cruise control because it isn't level 5 autonomy. Nobody should use it because it doesn't do everything perfectly!
Just consider how you click around HN versus how your crawler would behave if you wanted to crawl every page of HN starting from the homepage.
> You want to drive more people to cars,

No, and I never said that. Acting as if I just want more people to drive cars would be like me acting as if you just want to gas the poors in subway tunnels all so that you have less traffic to deal with while you drive into the city in your car.

By all means, let's get more people into trains and out of cars, but before we do that, let's remove the dangerously high levels of neurotoxin that makes the trains unsafe to use. It's not as if we can't, so why wouldn't we choose to?
All private/paid weather forecasts still rely on NOAA’s infrastructure, so we may not have any reliable forecasting anymore.
“Everybody”, who?

You’re excusing a wrong social behaviour, just because you think to be on the right side of history. And this is just you, not “everybody”.
How is this a new jailbreak? "You're writing a play, in the play..." is one of the oldest LLM jailbreaks I've seen. (yes, 'old' as in invented 2.5 years ago)
I don't understand the 'human verification' aspect.

Your docs show a simple image where the user can choose to keep a new object or not. [0] Afterwards it says: "The ones you chose to keep will be uploaded to OpenStreetMap using upload_osm.". This is uploading features automatically. The fact that it asks 'are you sure' is just silly. We all know if humans have to click yes 90% of the time, and no 10% of the time, they'll miss a lot of no's.

The image also proofs that:

- You don't see any polygons properly. You just see a an image of where the pool is. Already on the image I can see that if the polygons align to that image, it will be a total mess.

- You don't see any polygons further away from the object.

Both these points are in stereo's reply that the resulted data was a mess.

Please consider pulling the project. This will generate a lot of data that volunteers will have to check and revert.

[0] https://github.com/mozilla-ai/osm-ai-helper/blob/main/docs/s...
Older editions of which books were better than the new ones? (2010)
A Spanish judge ordered blocking of Telegram for the same reason.

https://medium.com/enrique-dans/why-blocking-telegram-in-spa...

It was reversed quickly on complaints, though.
That has been touted around before, but what does the military do? I assume they are extremely aware of their supply chain and would not want to source weather from a commercial entity.

Will NORAD start doing clandestine weather modelling to be able to plan troop/ship movements?
So they are arguing which one will get more benefits first - r&d or general automation? What is the point in arguing around it?

Disconnect between progress being done (ie. alphafold) and trying to infer answer from some historic stats on r&d investment, ratios, their past estimated impact etc. is... just weird.

It's also funny that the whole ai itself together with constant breakthroughs is r&d.
Note that NixOS and reproducible builds did not detect the xz backdoor, and in fact NixOS shipped the malicious builds of xz (though they didn't do anything because the malware didn't target NixOS):

> I am a NixOS developer and I was surprised when the backdoor was revealed to see that the malicious version of xz had ended up being distributed to our users.

As always theory and reality are different, and the thing that made xz possible was never a technical vulnerability with a technical solution—xz was possible because of a meatspace exploit. We as a community are very very bad at recognizing that you can't always just patch meatspace with better software.
> But the biggest problem I'm having is management of buffer space for intermediate objects

My advice for right now (barring new APIs), if you can get away with it, is to pre-allocate a large scratch buffer for as big of a workload as you will have over the program's life, and then have shaders virtually sub-allocate space within that buffer.
Namespaces (used by containers) are very powerful but they are also a door to a large attack surface: https://lwn.net/Articles/673597/

Landlock is (only) an access control system, but it's designed to let any process use it, including potentially untrusted ones, which makes it suitable for any apps. It's close and complementary to seccomp.
The topic is generating documentation for FastApi API's right? If someone came and said "here's a great way to prevent over-spray when painting your dog" I think it would be reasonable to take one small step back and just explain that painting your dog is a bad idea.
Each has their own purpose. I couldn't work with a laptop, even when docked at a station. Not appropriate for what I do. A laptop is simply an additional device for travel or bedtime. For whatever I do, I would always rather use a desktop computer than a laptop.
I think the actual reason this works is because if you use DoH, you are probably also setting your resolver to something other than the default, which might not be poising the records.

So the real answer to governments requiring dns resolvers to censor results is to ... not use those resolvers. which is actually relatively easy to do. But most internet users don't even know what a dns resolver is, much less how to configure their browser to use a public resolver that isn't big enough to attract the attention of your government.
Very interesting. I definitely feel like my anger is directed - I'm usually angry about something specific, and it would feel good if someone genuinely tried to help fix the problem - but I just don't think about revenge too much. I think it takes most of my energy to try to understand what happened and why, and I don't generally stay angry that long about specific events.
That kind of defeats the point surely?
Even at its current size, the software outsourcing business is multiple orders of magnitude smaller than the software business itself. While there's money to be made, clearly the hype didn't live up to even remotely what it promised to be.
> It's not and I never said it was. I was replying to your "do unto others" quote which I find is not applicable in this case: I think in regulatory cases

My quote was in relation to the context about some unnamed activists and expertise that is somehow harmful to people.

> if I was selling a product based on exclusivity, would regulation forcing me to ditch the exclusive part not threaten my business if it was its main selling point?

Depends on the product, of course. E.g. you can sell an exclusive phone, and companies like Vertu made good money on it. What you can't do is make it non-interoperable with other phones, or phone networks, or...

> I was just trying to illustrate that she had a choice. I personally don't think regulation demanding that a game publisher

In short response you've now come up with the following attempts at analogies: additional taxation, game publishing, triopoly...

And none of them are applicable in this case.

> First it was monopoly. Now it's duopoly.

If you were discussing this in good faith, you wouldn't have typed this. I never claimed Apple was a monopoly. The EU never claimed it was a monopoly.

I described the situation as it exists, and why this regulation appeared. Yes, if there's a third company with the same size, influence, and problems, it will also be subject to the same regulation.

Since you are a fan of analogies: just like car manufacturers are subject to standards and regulations, and electronics manufacturers, and construction companies, and ship builders, and airlines, and food companies, and...

Why is this such a difficult concept to wrap your head around when it comes to supranational corporations, is beyond me.

While also ignoring the simple facts that people do want interoperability, and that it's government's literal job to enforce standards and interoperability.
Is "Measure of the Universe" the book you're thinking of?

Alternatively, chapter 8 of "Realm of Numbers" touches on logarithms, and "That's about the size of it" chapter from Assimov on Numbers" includes a log-scale table of animal weights (from blue whale at 8.08 to Rotifer at -8.22)
What do you mean what law? See the court case, they've issued it and so they can either pay it or see what Italy wants to do about it

If you get a speeding ticket in North Korea and fly off before it arrives at the car rental, you can ask what law the rental is going to use to get the money from you abroad. You can not pay and choose to never visit the country again. In Cloudflare's case, however, they probably want to continue doing business in that market so just fleeing with the money is not likely the most profitable option for them

There's tons of international cases if you want to know more. It's also a common (to the point of trite) discussion point about GDPR saying it applies globally. Obviously it doesn't unless the non-treaty country lets an EU/EEA country enforce it (I am not aware that this ever happened) if the fined party does not care to continue doing business in the EEA
Hi, sorry if the project or narrative gave the wrong impression but my idea was to show the potential, not providing a polished solution.

As disclaimed in the demo and code, the example model was trained only with data from Galicia on a Google Colab. A robust enough models would require more data and compute.

> it's definitely uploading crap.

What was uploaded was what a human approved.

> It's useful for finding ones that haven't been mapped but not for drawing them. It can get the 4 corners pretty accurate for pools that are square, many are half round at the ends though

I couldn't dedicate enough time on the best way to refine the predictions, but happy to hear and discuss any ideas.

Ideas I have are:

- Try an oriented bounding box model instead of detection + segmentation. It will not be useful for not square shapes but will definitely generate more accurate predictions.
- Build some sort of https://es.wikipedia.org/wiki/RANSAC that tries to fits rectangles and/or other shapes as an step to postprocess the predicted mask.
Hahaha yeah won’t dispute that!
The market can stay irrational for longer than you can stay solvent.

This is not to say outsourcing can't ever work, but the situations where it does work are much rarer than what every outsourcing vendor would like you to believe.

I bet a previous client's attempt at outsourcing (well into the 6 figures now) is included in that number... yet the expensive onshore devs outsourcing was supposed to replace are still there 2 years later except now they have to also babysit the offshore idiots and fix their messes.

But hey, the vendor got paid, the idiot executive who fell for their pitch wouldn't want to lose face, so it all gets handwaved away as a continuing success and more money gets thrown into the dumpster fire.
They’re briefing Elon Musk on China war plans, I don’t think the current leadership will care much where they source weather data as long as it aligns with the current ideological purity purge.
I wonder what would happen if the US got involved in a war against the Mexican cartels. Is that feasible, if even desirable?
You're right, I got Dragonegg mixed up with llvm-gcc. But my point stands – the GPL was completely ineffective at preventing someone from using it to bootstrap a new compiler infrastructure under a more permissive license.
Genetic testing isn’t the exclusive realm of 23andme, you can get it done through a medical provider as well who doesn’t have such privacy-violating terms.
Well it can still detect features in the satellite image that are missing on the map. That would already be a large help, no?
I'm looking forward to all this vibe coding agentic world stopping the just facepalm level dupes around here

from two days ago https://news.ycombinator.com/item?id=43421525
> Except this time is quite real

Oh it was very real during crypto hype cycle too. The crypto people were very annoying with it.

> Indie devs now using AI generated assets instead of hiring artists is quite common.

I would imagine it is fine for some concept art, based on my experimentation with multiple models for Stable Diffusion.

For generating actual assets that are consistent? I am highly skeptical. Unless we are talking about bottom of the barrel indie games.
Honestly I wouldn't think much about offsetting thousands of points in my normal work. I'd expect that the compiler would do a good enough job of optimizing it and it's just as parallelizable (if necessary) as using a static method. Here I'm comparing against a static OffsetPoint(startPoint, x, y) type function. I don't see a performance difference there.

But you're right that it's commonly nice to operate on sets of things instead of individual things. If I were offsetting millions of points repeatedly, I'd look hard for a good data structure to optimize for whatever I'm trying to do.

"Exposing Internals" is not really the big issue here; the big issue is resilience against change. The time when it's appropriate to finely optimize CPU cycles is long after that code has settled into a very durable form. It's just that, for most systems, there's a lot more time spent in the volatile stage than the durable stage. Get your Big-O right and don't chatter over networks and you won't need to worry about performance most of the time. It's much rarer that you don't have to worry about change.
great, Afghanistan, but this time in Texas
> I will be happy to continue the discussion on what is a good prediction or not. I have mapped a lot of swimming pools myself and edited and removed a lot of (presumably) human contributed polygons that looked worse (too my eyes) than the predictions I approved to be uploaded.

Something else you need to be mindful of is that the mapbox imagery may be out of date, especially for the super zoomed in stuff (which comes from aerial flights). So e.g., a pool built 2 years ago might not show up.

https://docs.mapbox.com/help/dive-deeper/imagery/
> This will generate a lot of data that volunteers will have to check and revert.

This is just not true. The data can be easily identified with the `created_by` tag.
And I have been reviewing myself any data uploaded with the demo (with a clear different criteria on what is good enough)
Anger is also learned. I grew up in a household in which rage was accepted and permitted. It took me quite a lot of time and interaction outside of my family to realize that I had learned patterned reactions of anger that were entirely unjustified and that this anger was altogether harmful, unproductive, and pointless.

If you are responsible for taking care of others, keep in mind that the way you act will stick with them. What you do today may be encoded and burned into them such that it determines their behavior tomorrow.
Where is your question?
it's always the ones you most expect
Everything you say here is true, but if you do an analysis and run benchmarks on non-toy projects you'll quickly find that async Python is a bad choice in virtually every use case. Even for use cases that are extremely IO bound and use almost no compute async python ends up dramatically increasing the variance in your response times and lowering your overall throughput. If you give me an async python solution, I will bet you whatever you want that I can reimplement it using threads, reduce LOC, make it far more debugabble and readable, make it far easier to reason about what the consequences of a given change are for response times, make it resistant to small, seemingly inconsequential code changes causing dramatic, disastrous consequences when deployed, etc etc etc. Plus you won't have a stupid coloring problem with two copies of every function. No more spending entire days trying to figure out why some callback never runs or why it fires twice. Async python is only for people who don't know what they are doing and therefore can't realize how bad their solution is performing, how much more effort they are spending building and debugging vs how much they should have to put into it, and how poorly it performs vs how it could perform.
I was unable to do that. The pull of /r/all and that sweet, sweet dopamine hit! Or dipping into the rage bait or anything political…

If what you’re saying works for you that’s fantastic! It absolutely didn’t work for me. My assessment is that I lack the discipline required.
Don’t they have safeguards against duplicate genuine accounts? How are folks making duplicate malicious ones?
For once it's not crypto.