skysight-inc/HackerNews huggingface dataset:
Question for Americans here: is the idea of the U.S. annexing Canada within a 4-year Trump presidency even remotely realistic?

Assuming Democrats return to power in 2028 and reverse course, could such a drastic move even be attempted in that time frame?

Additionally, wouldn’t Republicans need full Congressional support to initiate something like this? If not, what is the actual strategic thinking of the current Republican party in terms of foreign policy ambitions?

I'm trying to understand whether there's any political/strategic framework where something like this is even being considered, or if it's just a negotiation tactic for tariffs..
A lot of things that are rare in the US, e.g. trichinosis, are still endemic in Europe. Something like > 50% of pigs in Eastern Europe are infected while there are < 20 human cases per year in the US because of better agricultural standards. Part of the reason you can eat a medium rare pork chop in the US and not die. I love bacon.
Zoho founder Sridhar Vembu drops truth bomb on coding
And what good does that do?
I don't think there are realistically any good "individual" productivity measures that work across a broad spectrum of employees, even when all of those employees are in the same role. Every team I've ever been a part of, even before being a developer has been made up of people that all contributed to the overall project in different ways. Imagine trying to measure all workers on a car assembly line by the number of screws they insert per day, or the number of welds they make per day. Anyone who's primary job on the line isn't inserting screws or making spot welds is instantly a low performer by this metric, and yet you can't assemble a complete car with only screws and welds. And it's worse I think in something like software development, where the specific way a team member contributes might be more nebulous. Very rarely do you hire someone just for their code review skills or the design capabilities. The team member that somehow always manages to recall the tiniest of details about the system that no-one else recalls from the feature work done 5 years ago is not exactly a skill you can find on a resume or even one you could build a good metric for even if you had hand tailored metrics for all employees.

And it's a hard problem to solve. I don't envy the job of anyone in management trying to figure out how to determine who (if any) of your employees is a drag on the team. Sometimes it's obvious and there are concrete problems, but other times it's just someone "everyone knows" is a drag, but without hard metrics, you're left with awful things like having employees stack rank each other.
"billions found in fraudulent SSI payments" did not happen.
Source for this supposition? This is the first I've heard of it
I get that the "o" in "--ro" is supposed to stand for "only", but this feels clunky to me (especially if there's also a "--rox", which is self-contradictory). I like my long options to be, well, long (complete English words), and backed up by short options. In this case, I'd propose having "-r, --read, -w, --write, -x, --exec", and allowing the short options to be combined as flags (i.e. -rwx).
I don't usually think of Data when grouping values together in Ruby. Seems like I should. Lucian puts forth a good explainer of when and why they are helpful.

To summarize, Data became available a few years ago in Ruby 3.2. You can create value objects by subclassing the Data class with Data.define. Data objects are immutable, comparable and easily greppable. They are constrained in ways Struct, Hash and Class are not. The shorthand removes boilerplate and the constraints create the utility.

Measure = Data.define(:amount, :unit)
weight = Measure.new(amount: 50, unit: 'kg')
100% this. Want to sacrifice team output? Have team members be concerned about individual goals. Team alignment and synchronization will be off affecting the efficiency and effectiveness of that team's performance.
I think this was posted here a year or so ago.

I love this story.
No offense, but it sounds like you have jumped to a conclusion (which you can't even prove) and are trying to change the process so that you could nail the poor guy.

What is your purpose? Making the team perform great, I hope. Will you achieve that by picking on someone? Hell no. Others will protect him, because they know they will be next in line. Do you think the "underperformer" (if he really is that, even) is doing that because he is lazy? It is more difficult to ask for help all the time than just to do something.

How about you try to find a way to help him achieve the level that others are at? THAT is what should be your goal. Instead of spying on them, award team members who help others, so that they won't feel the need to hide. And make weak members feel safe. Currently it sounds like the environment is pretty toxic with regards to admitting to any problems.

If, after all the genuine effort, you still fail and need to let go of the guy, because he is really bringing productivity of the team down and you can't motivate him to change, then you should know that this is still primarily your own failure. Which is ok, everyone is allowed to fail from time to time. But it is a signal that you should try harder.

(speaking as someone who had to let someone go because I wasn't good enough to make them better... on two separate occasions... so I'm not judging)
He must be getting jealous of all the crooks on the outside.
Its Ruby, there is no way of creating classes that is anything other than dynamic creation at runtime. The class keyword creates classes no less dynamically than any other method, and assigns the created class to the constant name provided after the keyword. Using a class factory method like Data.define and assigning the result to a constant does the same thing as using the class keyword.

You are literally imagining a distinction that does not exist in Ruby.
It's not just a moral failure of the billionaires. Many of us live in democracies, so we are choosing (through our elected officials) that creating a few billionaires is more important than building a better tomorrow. The sorry state of things could be undone in a single election if people didn't explicitly want and vote for the sorry state of things.
I work a product that involves a security crawler (phish, malware detection, etc). It’s just a new arms race. Crawlers will adapt.

Cloudflare is already heavily abused by threat actors to host, and gate their malicious content. This means our crawler has to handle anti-bot and CAPTCHAs. It’s a pain. Cloudflare is no help.

They have a “verified bot” program but it’s a joke for security. You must register a unique, identifiable user agent, and come from a set of self declared IPs. Cloudflare users can check a box to filter these bots out. And now you're easily fingerprintable so the bad guys can just filter you even without Cloudflare’s help.

So now we have a choice. Operate above board and miss security threats. Or operate outside the rules (as opaquely defined by Cloudflare), and do right by our customers.

All of this on CFs side is to solve a real problem. Unfortunately by not working with the industry in a productive manner, Cloudflare is just creating new problems for everyone else.
It's nothing new. See, for instance, "Go To Statement Considered Harmful", published by Dijkstra in 1968.
Could you list the titles/author of these books? I'd actually really like to get more into DIY home improvement, and having a starting reference like this would be really valuable
https://rachit.pl/post/you-have-built-a-compiler/
> Or I’m in a different industry and it’s ridiculous to require years of schooling for a skill that’s not my primary interest?

It took me 6 months when I was 10 years old to become technical and create a website. If a 10 years old can do it in 6 months, an adult can do it in 1 month if they work hard.
Hmmmm I thought that sharing a common type did work in the way you would expect it to? I haven't tried embedding with it though I don't think.

TBH I rarely do it much anyway, mostly the flag struct ends up being one anonymous struct which is operated on in the main package only. I do like writing custom types for parsing though - I've seen engineers do a bunch of post-hoc parsing logic which generally just ends up being messy.
This is a really interesting answer, I'd like to ask some follow up questions.

1) I've heard this from a few people now. It's a bit demotivating (just because of paying off school loans from a job that makes less money is harder) but do you think software will always pay this highly? Or do you believe as one drops the other might also. I mention EE or CS because while I love the idea of EE, at the end of the day I want a degree for more opportunities.

2) I never thought to look into this, I'll definitely add it to my list to research.

3) You're right, I guess I just think of graduating near 40 and starting over in a new field and it's hard to think about.

4) This made me think a bit, because tearing up my life could mean a couple things. I don't have kids and I'm not married so I don't have many things tying me down. To me, this would mean going to college in my home country or somewhere near for cheaper. This is a huge move and would definitely tear up my life but I go back and forth about whether it is the best move for the future or not.

5) That's a really good way to put it. Even after mentioning my age and that I've been working and I'm currently working, they go through the questions you would ask someone outside of high school which is strange. They don't like to get too in depth and just want me to apply right away. I need to be more direct in my communication and ask the questions I want to ask.

Thank you again for the advice.
It's still a human doing it and not an AI or robot. All of these jobs are not uniform enough for a robot or AI to be able to handle everyone's uniquely built house.
This technique works with any instruction that clobbers a register, not just with CPUID. In the worst case you could just single step the other CPUs until you hit an instruction that overwrites a register too. These are common.

In my case (for a custom hypervisor for a sadly cancelled project) it wasn't a problem because the hypervisor quit itself in early guest boot, which is single CPU only.
That was a great interview, I saw it on X and it was really interesting.

Particularly of interest was when he got excited about things he still got really jittery. I don’t think he was ever on drugs, he just gets jittery when he’s excited
Facebooks AI policing of content is a failure.
when I report totally unhinged blatant Nazi content, the response a few days later is always "we didn't find a violation, we realize this is disappointing."
Why do you assume people who choose Next don’t understand those things or what they are? Is it so hard to imagine someone understands “servers and things of that nature” and still chooses next?
> And AI is fixing precisely that.

I don't think AI is really fixing business problems, though. I think it's only fixing developer problems. And unfortunately nobody really cares about that except for developers.

I just find it sad that instead of focusing on improving how we build things and reducing the need for so much mindless, tedious, repetious, mechanical work, we're content to just build bad things faster with AI and call it a win.
And those same people who want their “forever home” and aren’t willing to move to where the jobs are unemployed and underemployed.

I want a million dollars a year income. No one owes me that. Move to where the jobs are. I moved from my hometown in south GA the week I graduated from college because there were no jobs.
What surprises me here is that the client side of the request / response is not considered a cunning, bitter enemy, as it should be. Why is x-middleware-subrequest even accepted in production? Why is x-middleware-rewrite even returned? They are instrumental to the attack, and the client has no business accessing them, ever, in my book.

If these headers are only expected to be available within a trusted zone, and some fronting HTTP server should strip them from incoming requests and outgoing responses, why are they named like regular HTTP headers, and not in some scary, easy-to-filter-way, like x-INTERNAL-ONLY-middleware-something?

To my mind, the server should accept the bare minimum of headers needed to serve the request, and issue the minimum amount of headers to provide a well-formed response, while being completely opaque to the client. Any nifty diagnostics like x-middleware-rewrire belong to the logs; correlate by request ID. Any nifty internal processing tweaks in plain text, like x-middleware-subrequest, are, to my mind, bad architecture. If you need to pass such info between HTTP endpoints internally, use something like a JWT.
> argp parses `foo --bar -1` as `foo --bar=-1` the way you expect when `--bar` takes an value, but Kong treats `-1` as a flag.

This seems a bug in Kong. Has someone reported it?
When you are an independent founder, work 15x7 or work 8x5 per week?
I started working as an independent founder at the end of last year. I also formed a team before, but my efficiency has been very low. The results were not very good later, and the promotion was very slow. So I started to do it myself. After seeing the work of many people around me, I often work until 1:00 pm and get up at 8:00 pm. I have been a little tired recently. I suddenly feel that this kind of work rhythm is wrong? Creative product concepts still come from life. Life is filled with work, and every day, the work is meaningless and creative is gone... How do you arrange your time when you are independent founders? I have also read many stories about independent developers or founders. They are basically crazy work and crazy ships, and finally get a little results. No one seems to have mentioned the leisurely work?
Sure, but you can also describe monkey brain as being mindful of the wrong thing. There are surely more apt words out there. Midnfullness... of what?

Or we could just say "breathwork" and probably get 95% of the utility without sounding like you're pitching a team yoga class at work.
https://en.wikipedia.org/wiki/L4_microkernel_family seems to describe it having been used all over the place, though mostly in embedded contexts.

> OKL4 shipments exceeded 1.5 billion in early 2012,[4] mostly on Qualcomm wireless modem chips. Other deployments include automotive infotainment systems.[13]

> Apple A series processors beginning with the A7 contain a Secure Enclave coprocessor running an L4 operating system[14] called sepOS (Secure Enclave Processor OS) based on the L4-embedded kernel developed at NICTA in 2006.[15] As a result, L4 ships on all modern Apple devices including Macs with Apple silicon.
Can you expand on this please?
Why would you plan to economically nuke an area, rather than trying to lift it up?
Great stuff! You're missing a few bass drum notes in "When the levee breaks"
Well, an L4 variant is used in iPhones:
"The Secure Enclave Processor runs an Apple-customized version of the L4 microkernel."
https://support.apple.com/de-at/guide/security/sec59b0b31ff/...
So what do you do instead?
What makes it a good alternative? The fact it’s in beta would be a non starter for my org but it’s possible once it’s out of beta it would be worth looking at.
Show HN: Fast MCP – A Ruby gem to create MCP servers
Hi HN !
This is my very first Open source gem. Hope you'll like it :)

Any constructive feedback is welcome !
Kaniuse – Kubernetes features stage changes in a visual way
The UNC system and NCSU is also very affordable if you're in-state and very good. Also around $10k/year for tuition and fees. The Raleigh area (NCSU) and the broader RDU area could also be a good area for you to seek employment for 1-2 years before starting school to establish residency.
A non-profit dating platform probably means you don’t charge much- which initially seems good, but it probably also means you’ll attract a bunch of users who aren’t serious because they have nothing at risk. So the people who are seriously looking for a relationship will be lost in all the casual users. Sure, you could make people deposit a bunch of money to prove they’re serious but you’ll lose all your users.

If you can figure out how to select people seriously looking for a relationship without becoming a pay to play app then it would be popular. But so far nobody knows how to do that. Or maybe someone does know but they won’t do it because there’s no profit in it.
There are mechanisms for this, liked signed headers or extra auth tokens, but using those here should immediately illustrate the absurdity of a framework using headers internally to pass information to other parts of the framework.

Relevant parallel to this is the x-forwarded-for header and (mis)trusting it for authz.

This seems like a consequence of Vercel pushing that weird "middleware runs on edge functions" thing on NextJS, and b/c they are sandboxed they have no access to in-memory request state so the only way they can communicate w/ the rest of the framework is via in-band mechanisms like headers.

Is that a fair characterization?

(the fix was to add a random string as another header then checking to make sure it's still there afterwards, effectively an auth token: https://github.com/vercel/next.js/pull/77201/files )
I love a good pairing ladder. While there is no absolute good measure of productivity, a suite of thoughts observation can provide at least tripwires.

One major problem with tools that ask crafters to do data entry to show their value is that best people are most likely to refuse. You really need to focus on tooling to help capture what’s going on without toil.

For example, if your folks are remote and they use software to aid in pairing (eg Tuple), script the system to log the tuple sessions and perhaps even capture the pairing in the commits made together.

This can be used as an input to bring visible to be best leaders in your org.
> It is more like not reacting to the thoughts that arise.

Surely this is as close an approximation to not thinking as conscious humans are capable of. Anyway, words get useless pretty quickly describing internal phenomenon. I just think "mindfulness" is itself simply so vague and so widely applied it could apply to basically any kind of mental therapy.

What I want is less mindfulness, please, I want an empty head.
agree with all your points with the anecdata that the Roomba is awesome for dog hair. awesome.
Yes, see https://github.com/alecthomas/kong/issues/315.
It may be nontrivial to change.
I think the author might be misunderstanding the fingerprint test — having a unique fingerprint is bad, as it allows tracking of you by fingerprinting, without the need for cookies.
One of the more risible parts of this fiasco is that they publicly cloned Brave, then publicly committed all the changes they made. Here's a commit stripping the Brave logo from some poster and changing the color template.

https://github.com/ping-browser/ping-core/commit/6f1a6fb9ddf...
Most people forget to turn up the resolution under the streaming settings
I don't want to expose the actual placebo or condition but have been self-studying this for ~7 years now. It's not within societal knowledge as of today.

The placebo is mentally administered, has a 100% success rate at provably halting the condition for a indeterminate amount of time. It also works in reverse, and is quite dangerous when used this way.

It's one of my LLM tests to have the LLM come to the conclusion based on available data on the condition (as it was my only source). Today, no LLM has passed the test.

I hope this helps.
Exactly. The argument never was that AI will replace every single programmer. But it looks like it will replace a good chunk of them. How many exactly remains to be seen.
Sure, but its also how vulns not currently being exploited works.

Good security is about risk management. For a vuln not thought to be exploited, an extra week or two is a reasonable cost/benefit to ensure a proper job was done fixing it and making sure nobody has to pull an all nighter.

If they sat on it for a year, that would be a different story.
If each page has different criteria, sure, but if not, why? Let's say I simply care if the user is a paying member. I don't see why I wouldn't just have that in the middleware.
China Discloses Powerful Deep-Sea Cable Cutter
I like NextJS and actively choose it for many projects. However, there is a big caveat: self-hosting NextJS is not the "real" NextJS experience that most people have because most people are using Vercel's platform and that is the focus of Vercel. Self-hosting NextJS is a bad idea, the benefits of NextJS are inextricably linked to the Vercel platform. You will live to regret self-hosting. I would never, ever consider doing it again and still suffer the pain of it day in day out because of a bad decision I made a few years ago. Use NextJS as expected (on Vercel's platform) or don't use it. If you self-host on your own serverless infrastructure, that's not a terrible idea, but if you try to self-host NextJS on servers, it will fall over at the first hint of traffic.
That turns out to not be the case.

First, the fact that there absolutely is base load is completely independent of how you supply that load. Now you can try to supply it with intermittent renewables, but you will fail, and you will fail with huge costs.

"While the LFSCOE-95 are only slightly lower than the LFSCOE for dispatchable technologies, they are about 50% lower for intermittent sources, which challenges the economic sanity of 100% intermittent renewable targets."

https://www.sciencedirect.com/science/article/abs/pii/S03605...

Also, the cost of intermittent renewables isn't zero. The price becomes zero and even negative (and that makes it clear that it's the price, not the cost, because cost can't go negative like that), because the electricity becomes worthless or downright harmful.

Cost is going to continue to go up as you require ever more overcapacity that cannibalizes itself more and more. And it cannibalizes itself even more than it cannibalizes reliable suppliers.

Anyway: just look at what the vast majority of industrial nations are doing. They are combining nuclear for reliable and controllable base-load with intermittent renewables for variable load.

Or look at the DOE's "liftoff" documents: nuclear lowers the cost of decarbonization.

https://liftoff.energy.gov/wp-content/uploads/2024/10/LIFTOF...