skysight-inc/HackerNews huggingface dataset:
The recent postgresql sql injection bug was similar. It happened because nobody was checking if a UTF8 string was valid. Postgres’s protections against sql injection assumed that whatever software passed it a query string had already checked that the string was valid UTF8 - but in some languages, this check was never being performed.

This sort of bug is still possible in rust. (Although this particular bug is probably impossible - since safe rust checks UTF8 string validity at the point of creation).

This is one article about it - there was a better write up somewhere but I can’t find it now: https://www.rapid7.com/blog/post/2025/02/13/cve-2025-1094-po...

Rust’s static memory protection does still protect you against most RCE bugs. Most is not all. But that’s still a massive reduction in security vulnerabilities compared to C or C++.
US only for now may be the issue?

It expands what they had before with AI Overviews, but I’m not sure how new either of those are. It showed up for me organically as an AI Mode tab on a native Google search in Firefox ironically.

https://support.google.com/websearch/answer/16011537
And yet that circle has as many "points" as any other 1-dim independent axis, so ...
They can also make sense where you largely have primary industry (that is, extractive; mining and forestry and so on). There’s a reason that pretty much all high-tariff countries are low-income developing countries; it _does_ make more sense there.
> In my country, advertising alcohol is forbidden. Somehow I still manage to find interesting new beers to try year after year

This is interesting. Alcohol companies a well known to bypass this prohibition by all possible means (product placement, influencers,...) and yet I find real benefits in it. It would possibly be similar if advertising was forbidden for everything
The timer makes it competitive. Every day I "compete" with a friend of mine across the country to see who can finish the mini crossword faster. Without that it wouldn't be fun (for me at least). I unwind with the bigger crossword and just ignore the timer at the top.
Puerto Rico sounds right, and if you still have a physical office disc with that on it that totally makes sense.
Sure, but if you're undisciplined onsite they just look over your shoulder, stick you with a micromanager or install spying tools on your corporate workstation. At home you need discipline because you are your supervisor.
> and slightly increasing the profit margin is for him worth more then a some people dying

The same argument likely applies to you (assuming you are in a wealthy nation) so you are likely just as ruthless::

We could all slightly decrease our disposable incomes (spent on shit we don't need) and increase the life expectancy or QoL for someone in a poor country.

Me too: I spent thousands on a holiday (profit for my soul) and I didn't give the money to a worthy charity. I'm no fan of Musk, but I think there's better arguments for dumping on him if you really need to do that.
I wouldn't say so. I quite like "as". It can have sharp edges but I think the language would be significantly worse off without it.
Not necessarily, 2D cannot easily see 3D, etc...
A _targeted_ tariff (for instance, a tariff specifically on gas and oil) might arguably make sense there; a blanket tariff absolutely would not.
People in China could not open a url sent in Gmail. I happened to be in China, I tried to open the webpage and it worked, no firewall.

I hovered on the link in Gmail and Chrome told me left bottom it was just that exact url.

But when I opened the url it got blocked by the great firewall.

Why? Any link in Gmail secretly gets replaced by a link to Google that tracks you and then redirects you to the original link.

The most obnoxious thing about this I think is that Chrome shows the original link.
But that's not the whole playbook. Consider Luigi Mangione as one recent case study/implementation.
In practice, Sonnet 3.7 and Gemini 2.5 are just often too good compared to competitors.
Sure I'd agree there. I can get behind Republican/Democrat labels when people are trying to broad brush describe US politics.

The left/right split doesn't make sense here (as you said). Liberal/conservative really doesn't fit either, the waters have gotten too muddied and many arguments I've seen made that should fit under a liberal banner get categorized as Libertarian or even Anarchist.
Location:Vienna, Austria
Remote:No
Willing to relocate:Yes
Technologies:Computer Vision,Timeseries,Data scientist,Python,c++,c,Pytorch/Tensorflow,sklearn,opencv,
Résumé/CV:https://drive.google.com/file/d/1WxvZW098T0Dz5LW4Ua_IEjEbwj088RGP/view?usp=sharing
Email:zhaoyonggeng99@gmail.com
What even is MCP? I tried going through the docs on multiple occasions but I couldn't figure out what problem it's solving. Mainly, what is special about AI agents that doesn't also apply to deterministic agents that have existed for decades?
Use it for what? If your goal is understanding… probably don’t. If you’re trying to produce a document for an audience that doesn’t really care and will just use an LLM to summarize it without any fact checking, then give the minimal prompting to get the token count you need. This is where LLMs excel —- sequences of tokens that are plausible use of human languages where the cost for verifying if they have semantic value exceeds five or ten minutes.
It's sabotage under the cover of efficiency.
In rust terminology, "safe" actually implies more frequent crashes on untrusted inputs.
And then within a week, Gemini 2.5 was tested and got 25%. Point is AI is getting stronger.

And this only suggested LLMs aren't trained well to write formal math proofs, which is true.
These models are not reliable sources of information. They are either out of date, subject to hallucination, or just plain wrong for a variety of reasons. They are untrustworthy to ask facts like this.

I appreciate your consideration of a subjective question and how you explained it and understand these nuances. But please - do not trust chatgpt etc. I continue to be frustrated at the endless people claiming something is true from chatgpt. I support the conclusions of this author.
> Weirdly, Russian based companies have less a problem with the free speech the USA kicks us offline for.

Yes, Russia, a place always known for enabling free and unrestricted speech.

You’re not seeing some deep commitment to free speech. You’re seeing a company in a foreign country not prioritizing matters that apply to another country around the world.

Don’t confuse one for the other.
> Try to come up with a way to prove humans aren't stochastic parrots

Look around you

Look at Skyscrapers. Rocket ships. Agriculture.

If you want to make a claim that humans are nothing more than stochastic parrots then you need to explain where all of this came from. What were we parroting?

Meanwhile all that LLMs do is parrot things that humans created
Heat pumps struggle to do much at the temperature range the article proposes.

Edit: downvote me all you want, I was responding specifically to “It has to beat a battery with a garden variety heat pump attached” of which EV heat pumps are not garden variety heat pumps, which do struggle at those temperatures. Didn’t think I had to be so pedantic.
I would imagine they didn't get as far as LK-100 ;)

OTOH, WD40 is still selling pretty well . . .
https://archive.ph/qahzL
Gemma 3 4B (QAT quant):
Yes, Paul Newman was indeed known to have struggled with alcohol throughout his life. While he maintained a public image of a charming, clean-cut star, he privately battled alcoholism for many years. He sought treatment in the late 1980s and early 1990s and was reportedly very open about his struggles and the importance of seeking help.
The whole point is to get rid of government employees. Going on strike is just volunteering your members for the chopping block.
The US does not have a technological advantage. This is the type of American Exceptionalism that needs to die. If we got into a full-scale war with China, we would lose. A big part of the US military strength is the logistical network with allies that Trump is systematically destroying.
Isn't the naive one hopeless since those systems require perfect measurement, and economic interactions are lagging, the calculations are ordinal, and mathematical systems fail because you can't relabel? (i.e. fails a function test so you end up trying to compare unrelated mathematical objects within differing systems).

Even statistics is fully thrown out with the islands of regularity.

The stochastic nature, lack of measure-ability, and multiple hidden underlying states (value is subjective) require any model to solve chaos somehow.

https://science.ku.dk/english/press/news/2024/islands-of-reg...
> Highest score was 5%, supposedly SOTA last year was IMO silver level.

No LLM last year got silver. Deepmind had a highly specialized AI system earning that
This is weird. I've been hitting funny problems while trying to get ssh to authenticate (using passwords) via. a keycloak instance. I've been trying to do using PAM script but have been pretty unsuccessful till now. Apparently, they don't play nice together.
Other countries are issuing travel advisories for the US and I know at least two Canadians who have said that not only are they not buying anything made in the US, but everyone they know has declared they will be crossing the border - both because of the danger but also as part of their boycotting the states. Lawful border crossings between the US and Canada have plunged. Canadian tourism is a significant part of the economy, though the effect won't really be felt until summertime.

I don't blame them in the slightest for either.

The tariff situation is a disaster that will only further increase the tax burden and cost of living on the poor and middle class. For rich people, a 30-50% increase in their grocery costs is barely a drop in the bucket of their budget they won't feel beyond getting annoyed.

The low income energy assistance program LIHEAP just got shut down, not even with any notice so states can try to spool up something. If this had happened a month or two ago we'd be seeing news stories about seniors freezing to death in the midwest and northeast. Soon we're going to see hyperthemia stories. In some areas AC isn't a luxury, it's a necessity as much as heating is in the cold winter states, if not more so. You can't "bundle up" from the heat.

For a large swath of America, this will mean people going hungry. And turning to property crime to try to make ends meet....or to get into jail where conditions might really suck, but at least their most basic needs are (kind of) being met.
“still have to” should be added between “Germans” and “put”.
A more precise conclusion would be: "This shows that US based companies will actively self-censor to avoid getting sued for copyright infringement. Russian-based companies don't have to respect US copyright law, so they have no legal obligation to remove infringing content."

Yes, copyright infringement is not protected speech in the US and you can be held civilly liable for it. Yes, adversarial countries don't enforce each others' laws. So yes, Yandex is a good place for finding pirated works. But that hardly makes it a bastion of "free speech", it just means that they don't have the same legal risks as Google does.
The irony of these statements is Harris’ father is an actual Marxist who doesn’t speak to his daughter partially because she is an ideological opposite.

I feel like either -

A) people hurling Karl Marx around have never actually read and considered his writings

B) they are being intellectually dishonest and creating the pretext for ideological oppression

Or, mostly likely c) all of the above

I am sad our future has taken this turn into darkly oppressive dystopia. I still think we can save things and get back to a world where all political views hash out compromise, but I fear we aren’t going in the right direction with no clear leader of right minded cooperation emerging from the cacophony. I mourn that my daughter will live in the world the conservative right is constructing for her generation - one that rolls back everything my grandparents generation gifted to me.
I'm struggling to see how you would implement narrowing conversion in a way that is harder for programmers to misuse when they aren't being mindful, while also being pleasant to use when you really do want to just drop higher bits. Like, you could conceivably have something like a "try_narrow" trait which wraps the truncated value inside an Err when it doesn't fit, and it would probably be harder to accidentally misuse, but that's also really cumbersome to use when you are trying to truncate things.
It would be great to be able to sort by popularity, to make it easier to find popular books. Or have a list of top 100 downloads.
It’s really a weird effect. Like, how enjoyable even is a world where you’re rich, but surrounded by poor, uneducated, sick people, and all you can do is stay inside because the outside is caustic and ravaged?

Is it too much mental gymnastics that it’s a lot more interesting to talk to happy, sophisticated, educated people? To enjoy maintained public parks? To learn from the past in museums that present all kinds of viewpoints? To have a strong workforce that is confidently going to the doctor?

I’ll never get what’s so hard about things affecting other things, even if it doesn’t immediately yield a profit.
Signetics 555 Datasheet (1973) [pdf]
All the takes on this release miss one crucial point: if you want people to adopt E2E encryption, you must reduce friction. For users of Gmail, that means familiar elements and flow to their usual use of Gmail. If this lets even a handful of people use more secure messaging, it’s a win. For Google workspace-centric orgs it’s a good step in the right direction.

If you disagree, go set up GPG on a non-tech’s computer, tell them they need to use Thunderbird or some other helper app(s), and see if you can even go home before being asked to remove it all.
In fact "exclusively" doesn't belong in the statement at all. A very small number of successful RCE attacks use exploits at all, and of those, most target (often simple command) injection vulnerabilities like Log4Shell.

If you think back to the big breaches over the last five years, though -- SolarWinds, Colonial Pipeline, Uber, Okta (and through them Cloudflare), Change Healthcare, etc. -- all of these were basic account takeovers.

To the extent that anyone has to choose between investing in "safe" code and investing in IT hygiene, the correct answer today is IT hygiene.
Someone tell that to the standard library. No memory safety involved in non-zero numbers https://doc.rust-lang.org/std/num/struct.NonZero.html#tymeth...
With post quantum protection. Amazing.
> The real challenge is that the LLM’s fundamentally want to seem agreeable, and that’s not improving

LLMs fundamentally do not want to seem anything

But the companies that are training them and making models available for professional use sure want them to seem agreeable
That's a weird thing to say about a language that doesn't have null safety.
With so many states in just one country, who can keep track
Yes, it's a prisoners dilemma. But solidarity is pretty important here no matter what. We forget that the best case scenario in such a dilemma is to all work together. They know already that they cannot literally fire every employee in order to keep operating.
Perplexity:

>Paul Newman is indeed known for having struggled with alcohol during his life. Accounts from various sources, including his own memoir and the documentary ... (https://www.perplexity.ai/search/is-paul-newman-known-for-ha...)

I guess there's something about ChatGPT's set up that makes it different? Maybe they wanted it to avoid libeling people?
It sounds like you should read the docs. It's just a subject-specific abbreviation, not an advertising trick.
No worries.

What happens if you go directly to https://google.com/aimode ?
I don’t see what the issue is with the dev tools used. VS is nice as it has always been. Wix is very convenient and makes building msi ez.
But I wonder why the dev thought a 3rd party Windows fw was necessary.
The IRS makes a huge profit margin on average from audits on the 1%-and-up folks because so many of them are cheating on their taxes.

Even before all this, the IRS was spending most of its auditing resources on auditing the poor - especially people using the earned income credit - and losing thousands of dollars or more on each audit because they either didn't find anything, or it was an inconsequential amount of money.
MCP is poorly named. That is why it’s confusing to many people. It’s a tool use protocol. It provides means to list tools provided by a server as well as manage asynchronous tasks. It’s transport agnostic and uses JSON-RPC to format requests and responses.

It’s different in that it’s designed to provide natural language instructions to LLMs and is a pretty open-ended protocol. It’s not like the Language Server Protocol which has all of its use cases covered in the spec. MCP gives just a little bit of structure but otherwise is built to be all things for all people. That makes it a bit hard to parse when reading the docs. I think they certainly could do a better job in communicating its design though.
Good - MacOS had an old and crappy version of rsync
"But I read it on the internet!"
The Bandwidth of the Starlink Constellation
In practice, the only significant American brands in Europe are Ford and Tesla. Ford has long designed cars specifically for the European markets (their big sellers are very different in Europe and in the US, and many of their European big-hitters are not even available in the US), and Tesla, of course, isn’t doing so great these days.

(GM also used to have a couple of European brands, but again they were rather different to GM’s big US sellers.)
It asks me to change some permissions, but that help page says this is only available in the US, so I suppose I'll get blocked right after I change them.
A common misinterpretation of the free speech concept as codified in the 1st amendment.

The 1st amendment gives a freedom of association.

All of these private organizations are choosing not to associate with that content, squarely in line with the 1st amendment. The 1st amendment just says the government won’t criminally sanction anyone for not associating with someone else.

This is in addition to the protections against the government for your speech and expression.
Isn’t the trade war only a few days old?
The Israeli government may have been lied to by a radicalised IDF commander. I assume it's at least a squad required to do what's in the video.
Maybe we should agree that all jobs can't be compared apples to apples. I have 3 good friends that fly for major airlines. I'm pretty familiar with the jobs.

-Those tests are no joke, but saying they are more intense than a 4 year CS degree is ridiculous. Also the major airlines you can compare to FAANG, and many people study for 6+ months to pass those interviews
- Airlines are union jobs. If you get them you aren't getting fired unless you try to do something really stupid.
- There isn't any wondering if you are doing a good job or not , and you don't take any work home.
- Regulations change or you can switch planes, but the career is leaps and bounds more static then SWE.

Net net is that they are very different jobs. SWE is a great gig overall but I take issues with people saying how much harder or easier it is than other jobs. "It depends" is the answer.
Pretty sure the ones in most EVs today work fine at -10C, but they may lose some efficiency. The thing is, there's already mechanisms in some cars to generate waste heat specifically for this purpose. Tesla's already have the ability to run their motors 'inefficiently' generating waste heat, which can be pumped into the battery coolant and heat that. It's no better than electric strip heating, but it doesn't add any cost to the system.

The real benefit, in my view, to being able to charge at cold temps is to improve overall efficiency. If you have to waste some amount of power to heat the battery then that is power that could have been used to charge the car instead...
That’s a classic technique to track click through rates. Google.com has done this forever. The technique is to make an actual link in HTML (<a href=…>) then add an event handler which cancels the link’s default behaviour when you click it - and replaces it with javascript, or a tracking link.

I understand why Google.com wants that data. But in an email client it’s extremely obnoxious.
> This is akin to an American Brexit

This is much worse than Brexit.

I think one thing that is unambiguously clear is that the current electorate are not worthy of the country that they have inherited—the richest and most powerful country in human history. And this is how they end it all? Pathetic.
You can target specific companies with sanctions, like they have done with Russian oligarchs.
C++ is for when complexity cost is worth trading for performance gain. What type of person successfully finds simplicity working in C++?
Looks like the post title got the wrong “capital”, the name is Capitol (ie, the Capitol Building, where congresspeople work)
The 5x delta is stated to be at 14F. That absolutely is within the reasonable operating range of a Model Y heat pump, not sure what you're citing?

It's true that there are very cold environments (Fairbanks winters, say) where in-car thermal management won't be sufficient to keep charging rates high. But those are the same environments where you can't even start a gasoline car without an engine block heater, and I don't see many "no cars in Alaska" arguments on the internet. Everything has limits, but I don't see this battery trickery having much of a home.
I find it strange that the article doesn't talk about the alternative to checked arithmetic: explicit Wrapping [0] and Saturating [1] types, also provided as methods on numeric types (e.g. `usize::MAX.saturating_add(1)`).

Regarding `as` casting, I completely agree. I am trying to use safe `From::from` instead. However, this is a bit noisy: `usize::from(n)` vs `n as usize`.

[0] https://doc.rust-lang.org/std/num/struct.Wrapping.html [1] https://doc.rust-lang.org/std/num/struct.Saturating.html
While travelling in Tanzania, I noticed a few unique game-theoretical scenarios, most notably the driving in Arusha, which is basically a game of perpetual chicken, a surprisingly functional one. This post explores why it works.
> But I wonder why the dev thought a 3rd party Windows fw was necessary

Because windows' built-in firewall is of static nature, and as such, useless in the personal firewall role.
Again, Tesla has factory in Germany. How are you going to tariff locally produced goods?
I appreciate you asking, but I've had these discussions before, and they've never turned out to be fruitful. At this point I'm only interested in (and going to change my mind if presented with) independent studies, but since those are no longer possible, I don't think this will happen.
I was today years old when I discovered I can only have 100,000 songs or music videos. My phone won’t sync anymore and if you cross that value with more than one device syncing you might get playlist corruption.

https://x.com/0xDEADBEEFCAFE/status/1908841399455305900
Trump tariffs based on arithmetic error, AEI says