skysight-inc/HackerNews huggingface dataset:
Yes, having coded quite a few years in C++ (on the Firefox codebase) before migrating to Rust, I believe that many C and C++ developers mistakenly assume that

1/ memory safety is the unachievable holy grail of safety ;

2/ there is a magic bullet somewhere that can bring about the benefits of memory safety, without any of the costs (real or expected).

In practice, the first assumption is wrong because memory-safety is just where safety _starts_. Once you have memory-safety and type-safety, you can start building stuff. If you have already expended all your cognitive budget on reaching this point, you have lost.

As for the magic bullets, all those I've seen suggested are of the better-than-nothing variety rather than the it-just-works variety they're often touted as. Doesn't mean that there won't ever be a solution, but I'm not holding my breath.

And of course, I've seen people claim more than once that AI will solve code safety & security. So far, that's not quite what's written on the wall.
The only way to win when facts don't matter is to lie to the electorate and appeal to their emotions. And why not? What recourse will they have once you're elected?
Politically, this is not obvious. France is a semi-presidential system and Eastern Europe might not be willing to rely on an assumption that all future French presidents will abide by the maximalist doctrine.

It makes more sense to develop a "Polish bomb" with several other countries cooperating, and share it with the most threatened countries from Finland down to Romania.

It is "just" way more expensive.
For those that have the need, we'll make it possible for sure! Otherwise, the models are ready for inference directly through Augento - say you’ve been working with the OpenAI Chat completion API, you'll just have to change the model string, e.g. to "augento:v2"
Simple reminder for those who don't know this: the easiest way to insert em-dash in Vim-supported editor (Evil-mode in Emacs) is to use digraphs feature. In insert mode you'd press Control+k, then type a digraph sequence. For em-dash is `C-k -M` — you literally type: "Control+K minus capital M".

For vanilla Emacs (without evil-mode), you can always do — "C-x 8 RET EM DASH" or "C-x 8 RET 2014". That's what "M-x describe-char" would tell you.
'Coyote vs. Acme' Movie Saved by Ketchup Entertainment
You can't complain about an "argument by definitions" when your entire argument rests on applying a label like "book banning" that has significant cultural weight. Book banning sounds bad, it sounds authoritarian, and that is basically your entire argument. So yes in that scenario it is pretty fatal to your argument if you are completely misapplying it to a situation that cannot actually be described as involving book banning at all (because no books have, in fact, been banned).
If the database is local, your web app database access is local. It can be modified and changed by the user, unlike code hosted on the web server, and any sanitization can thus be bypassed.

Meaning the user has effectively direct access to the underlying local database. Which, if blindly and totally synced, gives the user effectively direct access to the central database.

I'd have thought that in this day and age every developer would know by now the importance of not trusting frontend validation in a web application? your doubt has given me some pause.
TIL. The new version of this is the "armlock putter" where you anchor to your arm instead of to your belly.
LLM Workflows then Agents: Getting Started with Apache Airflow
Scheme: https://docs.scheme.org/schintro/schintro_141.html
What are some of the differences from Electric SQL?
I feel like if the apps have their own tracking then yes one click makes sense. If they include third party then multi consent also makes sense. They’re not contradictory points.
Melt together some velveeta and a salsa for a pretty good cheese dip
They have a university for this now, its called Western Governors University.

They did the steps, got all the regional accreditations etc. but its all self driven and structured to cater to speed running a college degree.

You can learn alot at WGU, don't get me wrong, but they are clearly just fine if you are there simply to speed run getting that diploma.
JavaFX is not yet supported, but we plan to get it to work soon.

The issue here is that there is very little Java in JavaFX, it's mostly native C++ code. This makes it actually quite similar to the LWJGL library used by Minecraft.

Our plan is to use for JavaFX the same technology we have developed for LWJGL.
Oh, I meant it is trivial to catch bugs caused by overflow by using a sanitizer and difficult to find bugs caused by wraparound.

But checking for signed overflow is also simply with C23: https://godbolt.org/z/ebKejW9ao
Christine lagarde was found guilty of negligence, in favor of someone else. Marine Le Pen was found guilty of deliberately embezzling money for her own party. The cases are in no way comparable.
And they also force their front page into the browser history, hijacking the back button. I'll be adding this site to my blacklist.
Start with suing the minecraft wiki then I guess

Also you should probably advice mojang to put some authentication on their download URLs, which have been publicly documented for more than a decade by now.

There is no login prompt. This project is over a year old. You are just misinterpreting the situation. This is like threatening to sue Mozilla because you can use Firefox to click on a download button, or Microsoft because double clicking on an exe on Windows runs the application.
I was taught to use a little cornstarch sprinkled over freshly grated cheese, and to me it is undetectable (served hot or cold) and works amazingly well. The shreds never clump together and are easy to scatter evenly.
EU: Comprehensive AI Act includes obligations for employers
It's not as bad as that. AIUI, the essence is, if you've ever seen the concept of a Feynman diagram and summing over all possible interactions, that works well for electromagnetism and some other interactions because the alternative terms fall off very quickly. For the strong interaction, they fall off so slowly that it takes massive amounts of computing power to walk through all the alternatives, essentially infeasible amounts of it. So we have to use some heuristics. If it turns out one of our heuristics was wrong, well, that's actually happened a number of times before.

So it's not quite as bad as "you just hit the model until it says what you want it to say". It's more "your shortcut broke so take less of a shortcut and you may discover that the standard model worked better all along than your shortcut". Which, again, has already happened multiple times.

In fact it is quite frustrating to physicists that the standard model always wins these fights. They'd love for it to break in some concrete manner, which is why they're always going on about this break or that break. As it stands now, in some sense, every time the standard model is vindicated it's a worst-case scenario for particle physics. It's not like there's a cartel trying to defend it... everyone would love to be the one who definitively broke it! It's virtually a guaranteed Nobel prize.
> Local is better than State. State is better than Federal.

I agree. When issues require collective action, it should be decided at the smallest capable level.

In this case, the smallest capable level is the individual. To extend your comparison: individual is better than local.

This _isn't_ an issue that requires collective action; people can treat their own teeth with fluoride or take fluoride supplements.
PDF: https://news.ycombinator.com/item?id=43529378
Sam Altman: we added one million users in the last hour
They don't compete in any immediate way, but over the long term, end-to-end DNS secure transport would cut sharply into the rationale for deploying DNSSEC. We're not there yet (though: I don't think DNSSEC is a justifiable deployment lift regardless).

It's worth keeping in mind that the largest cause of DNS authoritative data corruption isn't the DNS protocol at all, but rather registrar phishing.

Honestly, and I think this has been true for a long time, but in 2025 the primary (perhaps sole) use case for DNSSEC is as a trust anchor for X.509 certificate issuance. If that's all you need, you can get that without a forklift upgrade of the DNS. I don't think global DNSSEC is going to happen.
Signed overflow being UB does not make it easier to find in any way. Any detection for signed overflow you can write give that it's UB could be found if it were defined. There are plenty of sanitizers for behaviors that are not UB, at least for other languages, so it's not even an ecosystem advantage.
I am fine with unsigned wraparound, I just think one should avoid using these types for indices and sizes, and use them only for the applications where modulo arithmetic makes sense mathematically.
> I've been down that road though and concluded that I do prefer streaming, particularly when it comes to keeping up with today's artists who like to do digital releases almost to the exclusion of anything else.

Yes, even with stores like supraphonline.cz I often depend on yt-dl for new songs

I wish there was a more direct way to support the work artists I like without being forced to use streaming (which I don't like)

> Hah, not really an issue for me. My friends are always complaining that I go on holiday for 2 weeks and come back with 2 photos

That's GOOD: it means we live in the moment and we enjoy the experience instead of wasting time and storage to take pictures we'll never look at ever again!

> Just really wanted to emphasize whatever it cost Boox to add a camera was completely wasted.

I could see a usecase for QR codes or for translation, but if it can't even do that I'd rather have the slick and flush back like on my Mooan
Oracle under fire for its handling of separate security incidents
I've had most Dutch cheeses, and my personal favorite is smeerkaas, in the little gold cups.
> Afterwards, "programming" was solidly a domain of professionals, not regular users. I don't know about MacOS, but Windows didn't even ship with anything resembling a programming environment until 2010s.

I'm not sure I agree completely...back in the day on the Mac we had Hypercard, RezEdit, and I do recall various code builder tools that someone could kinda wire up small tools - think things we called "4GLs". On Windows, Visual Basic was a full programming language and tooling, but I distinctly recall lots of non-programmers creating small office scripts and tools. In the late 90s we had things like FrontPage where non-programmers could wire up a simple web page and make it do things they wanted...

Today? Open up Xcode and stare into the abyss of confusion. Apple has made these "Playground" tools - man, that's a big jump for someone who isn't serious about programming to get from there to a full-fledged Swift app ready to deploy. Can generative AI tools bridge this gap for non-programmers? Possibly, but I think we're aligned that these tools aren't likely to replace us anytime soon, because of something you allude to - what's possible today is so much more complex than what we were building in the 80s and 90s, and AI isn't close to being able to replicate all of layers of stuff a professional programer wades through every day.
Notes on the Pentium's microcode circuitry
500 kph is too much, but 250+ kph high speed trains surely proliferated nicely since then, at least in the Old World.

Even Uzbekistan and Morocco now operate high speed trains, and a high speed connection of the Baltics into the rest of Europe is being built.

(It is a bit weird that the New World as a whole is so bearish on HSR. For example, a Trans-Canadian high speed rail would connect all the major metropolises in a single line, as most of the Canadian population lives close to the US border. At the very least, a Toronto - Ottawa - Montréal - Québec line would make a lot of sense. Further west the terrain might just be too unforgiving.)
> The students cheat. I’ve written about cheating in “Why AI is Destroying Academic Integrity,” so I won’t repeat it here, but the cheating tsunami has definitely changed what assignments I give. I can’t assign papers any more because I’ll just get AI back, and there’s nothing I can do to make it stop. Sadly, not writing exacerbates their illiteracy; writing is a muscle and dedicated writing is a workout for the mind as well as the pen.

In the future we'll feed Underground Man through an AI, have it change all the proper nouns to some other set of names, defined per student and thereby watermarking the text to that specific student. Can only read it on a school issued e-paper device so the user can't easily extract the text without a camera and OCR. Then each exam question is rendered per student based on their versions, so an AI model won't know which text this pertains to.
No good deed goes unpunished. Don't protect users' privacy, and you get flak from regulators for "not doing enough". Protect users' privacy, and you get flak from regulators because it's "too complex and hurts small companies that rely on advertising revenue". You see similar levels of cynicism directed at Google. When firefox banned third party cookies, it was almost universally welcomed, but when Chrome does it the cynics come out and say how it's actually some sort dastardly ploy to cement their position in the ad market because third party adtech firms are disproportionately harmed.
> Take Syria for example. It took huge human loss to free itself from Assad, Iran and Russian influence.

And then it fell in the hands of radical islamists. Is this the outcome that everyone was hoping for?
All the more reason to Make America Grate Again..

I'm here all night folks.
For the USA, there are two complications. First, it’s expensive due to imminent domain considerations. Second, there’s a lot of nimbyism in local town halls. So, even when the cost can be overcome, people will scream about it and get it stopped.
Most parents either are not interested or don’t have the time and resources to provide the at home educational support kids need. Teachers cannot do everything, and they are already stretched thin and underpaid (~1600 school districts across 24 states in the US are on 4 day weeks to attempt to retain teachers). Admins want to maintain the status quo as long as possible; they appeal to parents at the cost of teachers and are in no position to obtain more funding. Therefore, we continue to stumble towards educational system failure.

The domestic educational pipeline to college, broadly speaking, is in poor shape.

https://www.hhs.gov/sites/default/files/parents-under-pressu... ("When stress is severe or prolonged, it can have a deleterious effect; 41% of parents say that most
days they are so stressed they cannot function and
48% say that most days their stress is completely
overwhelming compared to other adults (20% and
26%, respectively)."

https://medium.com/@madougherty90/the-hollowing-of-america-h...

https://pudding.cool/2024/03/teenagers/ | https://news.ycombinator.com/item?id=40053774

https://www.honest-broker.com/p/whats-happening-to-students
Voters have no reason to believe their embrace of firearms ownership was sincere. The Democrats have been consistently attempting to introduce more restrictive gun regulations for decades. Maybe if the Democrats added an official party plank pledging not to introduce any more firearms legislation and worked with Republicans to repeal some of the more stupid ones introduced by Democrats, it might be believable.
> I worked on compilers at FAANG for quite a while and know quite well how these teams justify their existence. Telling executives "we cost the company $1M a quarter, but good news, we made the semantics of the language easier for programming language nerds to understand" instead of "we saved the company $10M last quarter" is an excellent strategy for getting the team axed next time downsizing comes around.

And yet, Google is willing to take a performance hit of not 0.1% but 0.3% for improved safety: https://security.googleblog.com/2024/11/retrofitting-spatial...

And obviously there are better justifications for this than "we made the semantics of the language easier for programming language nerds to understand".
A year ago, I bought a ‘top-rated’ DSLR camera based on Google’s first-page results. It turned out to be a refurbished model sold as new. That frustration led to Lumigo (https://lumigo.ai), an AI search engine that:

Bans all ads/sponsored results
Explains every recommendation (sources: blogs, Reddit, expert reviews)
Flags price gouging with historical data

We’re launching on Product Hunt tomorrow, but HN gets the first look because:

The ranking algorithm is open for critique (hybrid AI)
We need brutal feedback on the ‘why we recommend’ UI

I’ll share failed approaches in the comments (like our disastrous first crawl of Amazon reviews)

Question for HN: What’s your ‘never again’ product search horror story?

BONUS: If you like the product, join the product waiting list to upvote tomorrow
Admission score is a bad metric for passing university. Raising it will proportionally push out both the good and the bad. The problems outlined in the article are amplified in higher education, where students have to self-regulate their work, as opposed to lower levels, where you're more "forced."

Taking in the students and letting them fail is more fair. But it's also unfair to decent students if the level of education is dropped to make more students pass.
In my example the abuse was on the OOP part, not in the relational database part.

Database joins were fine, they just weren’t being made in the database itself, due to absurd amounts of abstraction.

I don’t disagree that rethinking the problem with NoSql would solve it (or maybe even would have prevented it), but on the other hand I bet having 5 layers of OOP could also mess up a perfect NoSql design.
I think most professors are plenty happy with something that shows a bit of thought and analysis. They're not giving PhD quals, we're talking undergrad coursework here.
The Quantified Scientist YouTube channel by Rob ter Horst does a good job imo at comparing trackers against an industry standard baseline. For sleep he uses the Z-Max EEG device.
A long time ago I wanted to be a engineer and went to RPI. In those days, it was a real pressure-cooker program. A heavy workload, difficult tests--it was designed to crush the weak, and they actually bragged about the failure rate. Later after failing differential equations too many times, I went to the state school and got a degree in English. One of my favorite comments on a paper from a teacher was "You seem to have at least understood the text, which is more than I can say for some of your classmates." It's just gotten worse since then. I've heard similar stories from people I know who teach at the college level these days.
Ah excellent. Encryption is not compulsory, but doing a bureaucratic risk assessment of whether you need encryption is. That is so much less work.

In reality, GDPR is a jobs program for eurocrat auditing and consulting firms combined with an effort by Facebook and Google to prevent European competition. Note that GDPR fines are big enough that they can crush a small company, but small enough that Google wouldn't care.
Spending money to remove grave markers is a choice. It's not about how much money you have, it's whether or not you care about the people in question.
I mean, my query was cheating because I already knew the answer and just wanted to see if it knew the answer

Also, your updated link is even more nonsensical because `docker build -t mcp/postgres -f src/postgres/Dockerfile .` without context is meaningless. I do see the multiple cited repos and websites and whatever in the footnotes but is your service expecting me to visit every single one of those links in order to learn which one contains a src/postgres/Dockerfile therein?
In a sense: You are not wrong! But when we got started we thought it is way easier than it actually was. Procuring powerful GPUs alone is difficult, collecting proper data too. But of course you can still do everything yourself. If you want to give this a try yourself, I would recommend taking a look at torchtune (https://github.com/pytorch/torchtune).
Here's the actual source the article is citing: https://aitools.xyz/statistics

New monthly visits here mean users who had not visited in the past 30 days going to the site. Deepseek had ~524 million in March, OpenAI had ~500 million.

In terms of total monthly visitors ChatGPT was still far ahead with 5.2 billion to DeepSeek's 792 million.
>They were spot-on about the birthrates though.

Not sure that one counts. They missed the important trend, which was that the rate of increase was slowing, and that it was slowing more quickly than thought possible. Off by "1.2 Bangladeshes" isn't really an A+ (or a B+). But then I remember still seeing yearly articles about how overpopulation was going to turn the future into a nightmarish hellscape at least through the mid-1990s, perhaps out of habit they'd been cultivating since the 1960s.
Ubuntu can have ZFS. FreeBSD just does, as long as you select "ZFS on root" for your disk layout when you install. It just works, and then you automatically get things like snapshots and easy rollback during upgrades.
This essay would be stronger if it backed up its anecdotes with data, e.g. trends of standardized test score over time.
The horrifying part, for me at least, might be only 1 non-predetermined per universe. The rest of "you" is "you" putting on the Truman show.

https://rickandmorty.fandom.com/wiki/Central_Finite_Curve
Compiling with -ftrapv will cause your program to trap on signed overflow/underflow, so when you run it in a debugger you can immediately see where and why the overflow/underflow occurred.
Doesn’t top use ncurses?

And other utils like k9s
I have 2 fronts actually:

1. Hardware
a. Trying to create my own mechanical keyboard: already modeled, how finding a suitable printer.
b. Waiting for a display to arrive so I can wire into my digital calendar.
c. Waiting my modem HAT to arrive to go to phase 2 of my self hosted server.

1. Software
a. Preparing my next blog post.
b. Working on my distro.

References:

- Blog: https://blog.terminal.pink
- Distro: https://terminal.pink/lin0/tree/index.html

NB: I know my certificate expired.
I agree, the truth will set you free.
What do you think of as "real cheese"?
what's "streak"? do you mean steak?
One thing that helps this is that most of that really buggy hardware has fallen into the wastebin of history and everything attached to a "modern" W98 machine should be plug and play compatible. PCI solved most of these issues. ISA cards gave Windows 98 and especially 95 a bad rap. Well, that and early USB controllers and devices. There was a whole lot of brand new driver code being tested in production back then.
Thank you so much for this comment. I think Russ Cox (along with many others) is way too quick to declare that removing one source of UB is worth a (purportedly) minuscule performance reduction. While I'm sure that's sometimes true, he hasn't measured it, and even a 1% slowdown of all C/C++ would have huge costs globally.
I wouldn't necessarily call it debugging, more like "remote helpdesk". Either way, this is a brilliant way to "compress" instructions.
This is some of the worst use of statistics I have ever seen on this site. Genuinely something the John Birch Society or McCarthy would have said.
AI prompt engineering, machine learning, etc.
Because I get to make those calls, not people two or three or four levels above me.
Right, but that second click isn't coming from Apple and they can't control it. The article specifically says that many apps feel like they need additional consent which means they have to request it through two channels.

If Apple doesn't feel like they need additional consent and/or doesn't use ATT-blocked systems then they don't need that.

This is stupid.