skysight-inc/HackerNews huggingface dataset:
The TOCTOU is relevant (without suid) if someone can quickly make the right prediction of the tmpname2 value that's generated by the PRNG used by mkstemp, and create a symlink with that value before gunzip is executed. After calling mkstemp, the code should use the returned file descriptor, and thereby eliminate all TOCTOU risk. However, on (perhaps?) most devices that would realistically use atop, the PRNG works well enough that that prediction would fail.
According to his other comments, he's straight up in denial about everything that's been happening lately and thinks literally nothing is going wrong. If most Americans also hold that view, we really have no chance of getting out of this situation.
Of course it is an assumption, but it seems to be a reasonable assumption unless there is specific evidence to the contrary. Much of our understanding of the universe is based on the assumption that we don't occupy a particularly special place in it.

I've heard theories about either the presence of Jupiter, or something about the nature of our moon as providing a safe long term environment for life to form on earth, but even that doesn't feel that special, when there are 10^21 stars with planets in the universe.
Yes.

"OOP" is a philosophy more than specific implementation details. I've programmed "object orientedly" in any number of languages, many of those with no object orientation helping syntax, like C, assembly, Forth (although that one's more malleable). It's always been about the mental model of your programming, anything else is syntax sugar.

All discussion about "your not doing true OOP because $REASON" arguments are useless, repetitive, and discouraging to exploration, discovery and learning.
Biodegradable plastics suffer from either being hard to degraded or hard to use without degrading. It's a difficult conundrum
I was reading this and thought to myself that I would have stopped at hanging out on the stoop and getting to know my neighbors that walk by. I don't want to yuck their yum, but as an observation, it does seem highly performative and overly organized. Almost like they are trying to proof this out to sell to other communities and eventually make money off of: "buy our community building platform for $20 a month".
A new way to create k6 tests, introducing open source app Grafana k6 Studio
Jim Gray: "You're not writing enough."
Well, one of the biggest drivers of consumer Linux adoption in recent years has been the Steam Deck, and compatibility with Steam games. The article explicitly calls out how this improves performance for this use case. I think your opinion is an unpopular one.
When the team tested the process on real-world materials like plastic bottles, shirts and mixed plastic waste, it proved just as effective. It even broke down colored plastics into pure, colorless TPA.

-- the article

so that's good I guess
It makes me wonder how the token counting was implemented and if it missed the (not sent in API) reasoning.
Yes I think colors would be great, while still keeping the UI minimal. Another comment brought it up along with audio feedback for strokes which feels like it would be a nice experience.
Liberals are too aggressive and disrespectful pushing for vaccines, it is their fault. Conservatives are too independent minded to accept vaccines in that situation.

I literally read that last week about unvaccinated Texans.
Agreed. The writing is quite prolix, affected, and pretentious, too. This is apparent even in the first sentence, where the author inexplicably puts quotation marks around "social network feeds" (while incorrectly failing to hyphenate the compound adjective).

This would, of course, be obvious to anyone who has studied languages or writing. For those for whom language is a mere instrument or vehicle of thought, while receiving no thought or appreciation itself, I can see why this may come as a surprise.
From what I understand Hyperlight's boot process is more similar to a microcontroller than a PC (although it use your CPU architecture) - the VM directly boot into your code. Unlike Firecracker, Hyperlight VM doesn't have any hardware while Firecracker do have VirtIO devices, serial console and keyboard so that traditional operating systems can be adapted to Firecracker. Host-Guest communication is done with shared memory.
OO is pretty simple. Use objects. There are many many patterns that you can use that rely on this concept. You don't need to use every pattern to be using OO. Even at the most basic level of "a scoped namespace", OO can be useful in organization. The fact it can be used in many ways means there are many perspectives on how it can or should be used.

Popular OO languages are also very pragmatic. That means that even if they are OO languages, they allow for non-OO patterns as well. OO is flexible in this way. A counter example is FP, where it is not very flexible. FP has many rules you must follow to make the concept work, such as how mutability is handled.
> It more speaks to Russia's intelligence assessments.

Yes, it speaks to their assessment that Trump is the candidate that supports Putin's interests.

Russia is a dictatorship that is often working in opposition to US interests. The UK is a close ally with an elected government. I know which one I'd rather be endorsed and supported by, should I be a political candidate. If Russia was supporting me I would want to understand why, because I don't feel my interests and positions would align with Russia's. I'd want to understand why they think my election would be good for them. Maybe I like those reasons, maybe I don't, but it's an opportunity for reflection and evaluation.

Don Jr could have said "No, that seems like it would be potentially seen as inappropriate" when that Russian contact reached out. Instead, he replied, "if it's what you say I love it".
just added. this my first app. thanks for the feedback!
> A discredited anti-vaccine advocate who has no medical background and who has been disciplined for practicing medicine without a license will reportedly lead a questionable federal study on vaccines and autism

> Late Tuesday, The Washington Post reported that David Geier has been hired as a "data analyst" by the Department of Health and Human Services

So are they leading the federal study or are they a data analyst?
For any finite, computable task, as long as the language has access to the hardware that can perform the task in practical time, assuming the language doesn't present any compilation or memory issues to take advantage of said hardware in practical time for the task to be worth computing.
> everyone knew the ways in which that was a bad idea

The state machine pattern is used currently in verbs. That was the state of the art for many decades before higher level interfaces appeared.

Why was it a bad idea? Can you elaborate?
Both "Jewish" and "rabbi" are anachronisms in discussions of Jesus
Personally I think the phones, social media, dopamine addiction, etc. are all symptoms, not the systemic rot at the root of things here.

Young people today simply realize, either consciously, or subconsciously, that they live in a broken world and are being forced against their will to play a rigged game they cannot win. Distraction and apathy are the only logical reactions to world that exclusively measures a person's value in monetary terms and does not give a single fuck about them beyond whatever "Value" they can create for soulless corporations their self-serving, narcissistic billionaire owners.

Sure they could buckle down, study hard, get into a good college and work 60-80 hours a week for the rest of their lives, but even if they did all that they're still not guaranteed a decent life. They're not guaranteed to own a home, drive a nice car, take an annual vacation, or put away money for retirement. They're not even guaranteed a roof over their heads and meal on the table.

The social contract that underwrites the entire western world has been fundamentally altered, as where once studying hard and doing all the things you're "Supposed to do" as a young person could at least guarantee you a pretty decent life, young people today have no guarantee of a better future whatsoever regardless of how hard they work or how talented they might be.

This is an odd metaphor, but it just popped it my head so I'm going to try it out.

It's like for generations there's been a boat and a dock. The young people while away their days on the dock, swimming and fishing for minnows and the adults take the boat out each day (generation) and return with a fish. Each day (generation) the fish the adults have come back with has gotten bigger and bigger, and so the youngsters would get excited that when it was their turn to go out fishing they might catch an even bigger fish. The last couple days (generations) the adults have come how with fish that were the same size as the day (generation) before or maybe even a little smaller, but the kids didn't think to much of it and were still excited to get out fishing and catch their own fish. This most recent generation the adults came back with the smallest fish yet, and oh, by, the way, the boat has a leak and is sinking and its also on fire.

We're basically wondering why the kids aren't excited to go fishing when we're giving them a sinking boat that's also on fire.

Of course they'd rather splash around in the shallows and fish for minnows when the best alternative we're giving them is a sinking ship.
Windows is a good OS and Visual Studio (not Code) is the best IDE.

Also, I really don't like marine mammals at all. Possible exception for otters
There is an issue with a lively discussion happening currently

"Key management improvements on the client and SSH agent support":
https://github.com/openpubkey/opkssh/issues/6#issuecomment-2...
"By "scavenge-friendly electronic parts", I mean parts that can be assembled with low-tech tools. I mostly mean parts with a "through hole" mounting type (in opposition with "surface mount").

"But I do tons of hobbyist electronics with surface mount!", some could say. Yeah, sure, but how do you wire it? You order a PCB from OSH Park? That's not very scavenge-friendly.
" - https://new.collapseos.org/why.html

Not that I totally disagree with this but see clay PCBs, another post-supply-chain-collapse electronics project
https://media.ccc.de/v/38c3-clay-pcb#t=1689
As long as you can get right back to sleep after you're woken by pee or whatever, it's not unhealthy.
I think the Meshtastic site mentions a few boards, but it probably depends too on what features you want. I picked up a couple Heltec boards with tiny displays to tinker with, though haven't spent enough time there yet.
An honest look at how weather balloon launch cuts should impact forecasting
> but not as much as he is

How could you possibly know this?
The Feds have prosecuted people[1] not for committing original crimes, but for abetting those who do, which is in and of itself a crime, if done knowingly.

[1] https://www.justice.gov/sites/default/files/criminal-ccips/l...
And a mature adult should be able to communicate this without treating it, or seeming to treat it, as a marker of superiority.
I think he's saying most people his age need to pee several times a night. Reminds me of being a new-ish parent. Not something I want to revisit in a hurry!
The boundary between machine and hand is fundamentally nebulous. Saying that we add human process feels like a backwards framing here. People do QA on things done by hand. People feed yarn into their own needles. The current process for knitwear manufacturing is basically the same as it was 200 years ago, but we have removed humans to the greatest extent possible. However with socks or yardage people are constantly operating on the machines. Someone needs to feed the yarn and patch it when it snaps. The boundary between hand and machine is just nebulous but every single step of the way has human hands.
Those houses are more densely packed than in what I'd call a suburb. And much more importantly, nothing in that area is more than a few blocks from some sort of commerce. Suburbia (at least in the US) isn't so much about the houses themselves, but what's around them. I'm in one of those "streetcar suburbs" and the nearest store is a mile away and the bus comes every 20 minutes. I could get by without a car but it would be very annoying. You might find a fairly similar set of houses in the nearby city, but they'll be near a lot of stuff and living without a car would be far more practical.
>I feel like an editor now, more than an engineer. I know the kinds of things I'm looking for, and I use AI to walk a solution in.

I agree. I think it's fine to do so. I usually prefer to write my code without AI (except for bootstrapping it).

In my work as a DE, I mostly use AI to write scripts for me. For example, how to do this in PySpark? I kinda refused to memorize any of these because I'm simply not very interested, and I can always spend a week to memorize the fundamentals if I need.

In my side projects, I use AI extensively. Same as you, I use AI for problem space mapping, or sort of. For example, I have some source code, how do I structure them better? I have read the MIDI standard and thought this piece of binary code means blah, can you please confirm for me? Well AI is OK for these kinds of work.
Official Git docs say commit messages should be in present tense and imperative mood:

> Describe your changes in imperative mood, e.g. "make xyzzy do frotz" instead of "[This patch] makes xyzzy do frotz" or "[I] changed xyzzy to do frotz", as if you are giving orders to the codebase to change its behavior.

• GOOD: “Fix app sending unnecessary requests"

• BAD: “Fixes app sending unnecessary requests”

> Another best practice to help you write good Git commit messages is to use imperative verb form. Using imperative verb form ensures that potential verbs used in your commit messages, like “fixed” or “updated” are written in the correct tense to “fix” and “updated”.

I insist on present tense, imperative mood in every codebase I work on. The Git log makes a whole lot more sense when it can be read this way.
I think you underestimate how chaotic things would get without some basic concepts like patterns laid out. Like so many things in this industry, disproportionate attention is drawn to perceived problems rather than things that quietly work well with the same tech.
This is really cool! Love that it's open-source and that it can be community maintained. Just submitted a PR to add a few more AI-native companies.
> Tags vs commit IDs is a tradeoff between convenience and security.

Well, it's also a trade-off between security and security. If you specify an immutable commit ID, then if the dependency releases a security update you won't get it until you notice and update the commit ID. If you specify a tag, you'll get it on next build.

I guess we need Dependabot updating commitID's in workflows too? But then they'd update you to the vulnerable new @2, how would they know otherwise if it hadn't been reported yet?
I work at one of those companies (not google) and Polypane is actively banned as “not safe, shouldn’t be used at all”.

Not to take away from the product, which does look cool, but the “customer list” is definitely sketchy.
Tools such as this should not be used. The generated commit messages are all noise, no signal. The LLM can not possibly describe why a change was made, and it can never describe why a corresponding more obvious change was not made.

Should you somehow find yourself in a situation where the above does not hold, and you really want the LLM description, it is still bad design to run the LLM on commit. LLMs will only get better over time. In that case you should not use commit messages but run the LLM on "git log" instead.

Just as it uses heuristics to show moved files it is also the more suitable place to summarize the diff, if that is all you place in the commit message field anyway. At that stage it has potential knowledge of the future as well, with that added context the summary might actually be useful ("this functionality is later replaced with ..").
Did you watch the video posted in the article? Looks pretty good. The swedish actors recorded themselves speaking English and really the tech is just changing the lip movement. I think it would be more weird if they weren't speaking with a swedish accent.
Highly profitable trading systems.
This is so Scottsdale.
Windows did the same thing, in Windows Vista they added some Linux style synchronization primitives, for example condition variables.
It will be re-inventing the whole application containers ecosystems we had back a few decades ago across JVM and CLR ecosystems.
Weave (YC W25) is hiring a founding product engineer
+1! This feels like it's actually in the interest of the community and helping folks find useful tools by category and not just a VC's favorites list.
What would you make with AI Runner?
I am the creator of AI Runner, an opensource PySide6 application which allows you to easily setup and run opensource, offline, local AI-models. It can be used as a desktop app, or installed as a python library.

As a developer, if you were to use this library, what might you use it for?

I've really enjoyed working on this project over the years, but I want to make it more useful for developers.

I find myself maintaining it more than using it, so I'd love to get feedback from other devs on how you might use it or how I could improve it to make it more useful for you.

---

*Here's more information about the app:*

AI Runner allows you to generate art with Stable Diffusion and custom tools, create customized Chatbots with moods and emtions using Ministral 8B, have real-time text-to-speech (OpenVoice, SpeechT5, espeak) / speech-to-text (whisper) conversations and use RAG to have conversations about documents.

The desktop app is a sandbox that you can use to play with various features and reference the code to see how you might implement AI Runner in your own python project, or it can be modified and worked into a whole different app.

It should also work without PySide6 - besides the main app, I've used it with a pygame RPG and wrapped it in a socketserver and created a Unity3D plugin.

---

Can you think of anything you might make with the library? Is the core desktop app appealing to you for anything?
Record keeping rules.
A pressing need for processing data post-collapse is weather forecasting. Knowing the upcoming weather can help avoid crop failures from planting at the wrong time. Of course the data aggregation would also be very challenging as you need data from remote sites for good forecasting.
Why 4 ethernet ports? You can just add switch later if that is the problem. I have this setup behind TV for Apple TV+TV
That won't sell startup ideas reinventing the application servers ecosystem.

Instead of WebSphere, WebLogic, IIS et al, you get Hyperlight WASM, with WASI components (aka CORBA/DCOM).
Microsoft did not push these changes. Valve (and places like Collabora) did, because it meaningfully improves performance for emulated Windows games. You should probably at least get the basics of your story straight if you're going to scare yourself silly over something you don't understand.
> when the mid-terms inevitably flip the senate and house towards the democrats

Very unlikely, just based on the math. Even less likely now that Trump is overhauling the federal election system.
And less color fidelity on receiving displays I would imagine!
Some of the Strangest Deep-Sea Creatures, from 'Sea Pigs' to 'Disco Worms'
Kaneo – An open source project management platform focused on simplicity
Hey HackerNews, last month, Kaneo, my pet project which is open source ended up here.

I saw a wide amount of reactions and these past weeks I took all your suggestions and tried to do as much as possible. It's a pet project where I try to give people valuable software which will always be free.

In the upcoming week, I plan to add a GitHub integration and of course, make this a better project as time goes on.

If you suggested something previously, I want to thank you and I'll try to get back to y'all as much as possible.
Since this got flagged, I'm also reposting the URL in the comments:

https://arstechnica.com/health/2025/03/rfk-jr-hires-anti-vac...
As a person who has a degree in math, I can claim that I easily understand it.

Yet I wasn't aware of it, and I've never used it (as a mental math trick). It was definitely surprising that it is true--and I wasn't aware of it.
It's the reflection operator. Reflection is supposed to be part of the yet-unreleased C++26, so it's not surprising you don't know it.
The craziest thing for me is that there's a lot of evidence for claiming that Sapiens interbred with other Homos, such as the Neanderthal.
Hacking by criminals and spies has reached 'unprecedented complexity', Microsoft
Why do you presume that the intelligence gap would converge to zero?
I am still on 5.15, I will need to remember to blacklist it. But that does not address the fact Microsoft is slowly taking control of Linux.
Wasn't there Jill Stein and Cornell West?
In theory yes but very few patterns can be made like this and the cost of such machines is not favorable. Often a linking machine or a cut and sew stage is needed and this is far more hand powered than anything else.
Performance is table stakes for data systems
WASM is widely used and very successful in the browser.
Deep Breathe: Wim Hopf based meditation
So they put someone who is vehemently anti-vaccine at the head of a study, and when this individual finally concludes with data in hand that they're safe, what is the ultimate message and who does it affect, and how?
You missed the part about "spied on by the future".
A Beginner's Guide to Pharo: Why Smalltalk Still Matters in 2025
I want to add that the relay server is never handling any customer secrets (so a low value target), and we have techniques in place to reduce the probability of DoS (increase the cost to the attacker).

So even if someone would be able to break into the server through the small attack surface, he would not be able to change any setting on any of our customer's devices. Or even read any status either. Of course, if someone can break into our server, the DoS is inevitable, but so far this never happened.
>Sorry

Apology accepted. If you wrote anything after the apology you'll have to have your AI talk to my AI because I didn
> that family's total wealth

It's a good example of the question: "where is your generational wealth stored up?"

For homeowner types it's in your real property and the house sitting on top of it. A home and land are assets that also come with significant costs for maintenance and upkeep. And homeowners are in ridiculous situations of living childfree in a 4BR/6BA filling up with litter boxes, or their kids all flee the nest and don't want Mom and Dad's old place at all? Owning land, however, is a good way to ensure that a family invests in their local community and cares about the direction it takes, because they're not liable to pull up their stakes and go elsewhere.

So a century ago, and probably for hundreds of years, if a family didn't own land, I can see furniture as the soundest investment for generational wealth. Because sturdy furniture can be used by anyone for a long time, and its maintenance costs can be minimal. So you sit in your great-grandfather's chair, and occasionally needing to move, hopefully find ways to take it all along with you. Sadly in an emergency, transportation costs and logistics can outstrip their value now. All the time I see people abandoning furniture because they didn't account for how unwieldy it becomes with time. But furniture and clothing are so replaceable, interchangeable, and nearly fungible, it's now a lousy way to store up wealth.

So where's your generational wealth built? What will your great-grandchildren enjoy when the world's a different place? Your 401(k)? A McMansion? Your Prius?