skysight-inc/HackerNews huggingface dataset:
In the UK you have worst of both worlds now - insecurity of contracting and employee level wages, thanks to amended IR35 lobbied by big consultancies.
As someone who has worked for a string of US companies, 38 hours for me is a busy week.
You'd have tk be more specific in what you mean by detail. E.g. if I had an image which in normal sRGB color space would be encoded as a detailed silhouette of #FEFEFE on a background of #FFFFFF then one could argue the most detailed is to do a hard threshold between the two shades to preserve the shape information. Another person may argue it's not detailed if it throws away 100% of the original brightness information so it should eschew the spatial information to let the user know the original image was actually near macimally bright. Another person may argue it should be something between as that's most visually pleasing to them.

Which of these is "more detailed" and how does that hold for every possible source image and its display intent? I think what you'll find is you can define things like "most contrast" or "most spatial detail" or "most accurate brightness" but generic things like "most most detail while preserving brightness" will come out as a judgement call rather than a mathematical criteria everyone will agree is ideal all the time. That doesn't mean such a metric (if well defined) can't be useful, must don't expect it to always be ideal.
Feels like reading someone explaining (in way too many words) why they still smoke.

TL;DR: "I can't quit".
Same. Even assuming there was human error (the driver), it is TOTALLY UNACCEPTABLE that from a technical standpoint the recording of private conversations is possible. I can never trust Lyft again as long as they materially allow the recording of conversations.
> I can guarantee you such a system already exists.

There is a limited one the US has built just to deport pro-Palestinian students from the US on visas: https://www.reuters.com/technology/artificial-intelligence/u...

The history of such "technology innovations" is that they generally do not stop at the initial scope, and likely will greatly expand its applicability to other groups, other opinions and for other purposes.
Inevitability and naturalness are not valid arguments for anything, unless you think naturalness has intrinsic value. You probably don't, because then you'd be against most things humans do these days. Diseases are inevitable and natural, yet you don't see anyone rational using those facts as arguments against cures.

You also seem to assume that inequality has benefits (rain is good), but we haven't really had a truly equal society since we started farming. The attempts at communism were just as if not more unequal as anything we have today. We don't know what it would be like, we just assume and we just believe the ones benefiting from inequality when they tell us how everything would fall apart if we tried to pursue such a thing.

Any amount of inequality can be used as leverage to gain more power and increase inequality, so there's no way to have any natural equilibrium of inequality. People who have the most power will always seek more and be in the best position to get it. We need true equality to have an equilibrium.
Yeah, probably a poorly executed assault, but I felt it was an intent instead to kick Google with that comment.
I'd be much happier if the rule was: necessary for functionality only, no action required. Anything else must be an active choice. I'd eliminate the "legitimate interest" category as it's so heavily abused.

In practice I have third party cookies disabled in my browser and most things still work fine - random exceptions though (the SAS airline website being a particularly annoying one).

If you care about these things consider joining noyb.eu
Sure, but you've missed my point: in that case, some engineers just don't want to have that debate because there's very little point in expending that energy.
Maybe because it's used elsewhere in the standard library?

SinglyLinkedList is used in the standard library in std.Thread.Pool, and std.heap.ArenaAllocator. DoublyLinkedList is used in the http client's connection pool, as well as the ObjectCache for the package manager's git client.
No, that's not stated.

> The new version isn't generic. Rather, you embed the linked list node with your data. This is known as an intrusive linked list and tends to perform better and require fewer allocations. Except in trivial examples, the data that we store in a linked list is typically stored on the heap. Because an intrusive linked list has the linked list node embedded in the data, it doesn't need its own allocation.

Is simply a misunderstanding. The storage layout will be the same for the generic and the intrusive one.

The benefit of intrusive linked lists is that each node can be a member of several linked lists with a single allocation per node. This is used heavily e.g. in the Linux kernel.

The cost is that you need to keep track of the offset from object address to which linked list pointer you're currently dealing with. That's often a compile time constant, but makes the API more awkward. In this case it seems to be the string "node", which seems nice enough. C libraries often use the preprocessor to do something similar.
But there is driver you don't know that hears everything already, no?
I could've sworn I'd seen a picture of teeth in a petri dish well before the pandemic.

Sonething about needing to take a suitable stem cell biopsy during a wisdom tooth removal, and the challenge back then being no control over which tooth would form.

Am I just remembering a dream or an April fool's joke?

(Both have happened. IIRC it was someone on this forum who disabused me of the Medieval Mandelbrot).
- Diversity doesn't really make your tech team better or worse. Prioritizing for diversity when you're hiring makes your team worse.

- Cache invalidation is relatively easy; it's choosing the right strategy that is hard.

- You hate SPAs because you conflate them with running javascript, and you hate running javascript because you conflate it with predatory advertising strategies. You should hate predatory advertising strategies.

- IP clauses in job contracts contribute to the formation of monopolies and monocultures; they should be collectively fought harder than they are.

- Teaching juniors should be < 10% of a developer's job. If you want an instructor, hire an instructor.
I feel like people who espouse this sort of view often wildly over estimate their chance of not ending up with a pointy stick through an important organ.

We don't do that because we don't like seeing women and children get their brains beaten out with a large rock over a rabbit haunch that the bigger ape wanted.
Can you elaborate further on what software project/products/companies you are referring to?
This isn’t true. They support old platforms for a long time.

At some point you need to move on. Can’t support ancient platforms forever.
Its well covered in scholarly literature that inequality reduce growth, health and social mobility, and increase violent crime. The naturalness of is meaningless, pneumonia is natural too.
Yes. Massive inequality is bad.
This sort of thing has been talked about since Echelon and Cointelpro. The missing bit is the final one, which is now arriving: enforcement. Which is why the Abrego Garcia case is so important.

(as always, I think people have underestimated the extent to which some people want the awesome power of an authoritarian state to be wielded against other people.)
You should consult a lawyer about this. You might be SOL but if this happened to several people, you might be able to show the company didn't act in good faith because there's a pattern of people about to receive their bonus being laid off. Layoffs aren't meant to work that way.

Generally layoffs involve someone who doesn't know who you are picking names almost at random from a spreadsheet. Management may fight for certain people to stay. Then legal and HR get involved and look through the layoff list to see if the chosen employees are problematic. For example, if the layoffs include too many people from protected classes, which opens them up to being sued. For example, if your company is 20% women but the layoffs are 50% women, that's going to be an issue.

Avoiding paying substantial retention bonuses can work the same way, if a pattern can be shown.

A simple letter from a lawyer probably won't do anything. Large companies are prepared for that.

For anyone who does come across this, here's my best advice: if you are acquired and your new employment contract includes a retention bonus, you want that contract to say that the retention bonus is payable unless:

1. You leave voluntarily within that period; or

2. You are terminated with cause within that period.

Otherwise, you should get it.
These are also the two answers you'd get asking white people in the jim crow south or apartheid south africa fwiw. Not saying japan is some racist hellhole just pointing out that the dominant social group doesn't have the clearest picture of these dynamics and even if they do they have extremely strong motivations to dismiss or downplay it.
I can't seem to get the Linux VMs running (I'm just getting a CORS error when it tries to fetch the little text file at `https://vfsync.org/u/os/buildroot-riscv64/head` for example), but the Windows 2000 one does work. Quite smoothly even.
MacWorld 2007: Steve Jobs Unveils First iPhone – Chad's Reaction and Crowd Awe [video]
Intrusive lists are often used to enqueued pre-existing structures onto lists. And often the same object can be in different lists at different times.

That's not realistically dealt with by the compiler re-organizing the struct layout.
You're arguing against your own straw man. "Imagine, for example if booking.com built an MCP server allowing you to book a hotel room (…) no hiding or limiting data." They're not doing that and they're not interested in that. Yes, they would need a public API for that and people could use it directly. But that's not happening.

MCP makes sense where the API already exists and makes the biggest difference if the API call is just a part of the process, not the only and final action.

Even in the booking example, you could push much more of your context into the process and integrate other tools. Rank the results by parking availability or distance to the nearest public/street parking, taking your car's height into account, looking through reviews for phrases you care about (soft bed, child care, ...) and many others things. So now we've got already 4+ different tools that need to work together, improving the results.
You could do worse than The Art of Computer Programming.
> Now, electricity is not the boogeyman: you can open a power supply safely, you just have to be aware of the dangers inside. First, never open a running power supply: if you accidentally touch something at high voltage, you could die.

Fortunately it wasn’t fatal, but I stupidly did that as a kid. It was my first PC build (an Athlon Thunderbird system) and it was crashing. I fixed the problem by adjusting the PSU voltage rails with a screwdriver while the system was running so I could see the changes in the BIOS.

Not my smartest decision.
Hmph, is there any rationale against a generic wrapper over it? Exposing the internal details can be irky in higher level application development. It would not hurt to have some inline functions.
https://archive.md/XSZcH
Show HN: An On-Device Agent That Auto Applies to All LinkedIn Jobs (GitHub)
The link between inequality and crime is a maybe: https://www.sciencedirect.com/science/article/pii/S0305750X2...

“To address this puzzle, I conducted a meta-analysis based on 1,341 estimates drawn from 43 studies in economics journals. The findings indicate a statistically significant but economically insignificant true effect of inequality on crime, ranging between 0.007 and 0.123 using UWLS FAT-PET and advanced methods. In essence, if there is an impact of inequality on crime, it is, at best, minimal.”
Now I feel old. I know void from K&R C and iota from APL
https://archive.md/PsHKb
I'm patiently waiting for the translation of Misner Thorne and Wheeler to Toki Pona.
https://archive.md/tndgS
The content quality is not human level yet, but it's still a work in progress. What you are seeing is like a couple of nights spent playing with LLM prompts.
An outside individual purchasing shares is not the same as employees accessing liquidity.

As one example, SpaceX is privately held but routinely does funding rounds with large investors so employees can sell shares and access liquidity[1][2]. A $10,000 minimum purchase amount is trivial for those investors.

[1] https://www.reuters.com/markets/us/elon-musks-spacex-raises-...

[2] https://www.reuters.com/business/aerospace-defense/spacex-fu...
https://archive.md/I88FV
I was in an uber (in Canada) yesterday, and the app had a tiny message in the top right corner that “this ride is being recorded” (or something to that effect), which was only displayed after the driver picked me up. When tapped, it showed a screen that the ride was being recorded for passenger and driver safety, and that recordings were only available to uber support of the driver chose to send them.

So clearly it’s not out of the question for something like this to happen.
One of the biggest issues I see, briefly discussed here, is how one MCP server tool's output can affect other tools later in the same message thread. To prevent this, there really needs to be sandboxing between tools. Invariant labs did this with tool descriptions [1], but I also achieved the same via MCP resource attachments[2]. It's a pretty major flaw exacerbated by the type of privilege and systems people are giving MCP servers access to.

This isn't necessarily the fault of the spec itself, but how most clients have implemented it allows for some pretty major prompt injections.

[1] https://invariantlabs.ai/blog/mcp-security-notification-tool...
[2] https://www.bernardiq.com/blog/resource-poisoning/
How does one measure complexity 'in the universe'?
Let's see some concrete examples rather than bringing up communism as a general idea and claiming that it reduces inequality and that it is a bad thing. There's no substance provided for the argument you've made.
“Whatever you do in life will be insignificant but it is very important that you do it.”

― Ghandi
https://archive.md/CyPPg
EU issues US-bound staff with burner phones over spying fears
Didn't they get neurons in a petri dish to fly a flight simulator?
> Do you also contribute your fixes back to the upstream projects like the upstream Linux kernel, AOSP or Google?

We've made significant contributions to the Linux kernel, AOSP and Pixels in the past. We continue doing it to the extent that it helps GrapheneOS users. We no longer spend our time doing work for them if it doesn't have a clear benefit to our users.

Android's security team previously got us security partner access and was in the process of getting us OEM partner access. Android's partner management team blocked us from getting OEM partner access and revoked our security partner access. Due to this, we've reduced our reports of vulnerabilities upstream and have fixed numerous vulnerabilities in GrapheneOS without reporting them. We still report all firmware and hardware vulnerabilities but we make a decision about reporting software vulnerabilities solely based on what's best for GrapheneOS users.

> Many of the security features you are using are already included in AOSP

That's not really the case. The vast majority of our privacy and security features were developed for GrapheneOS. Features being built on top of standard functionality doesn't mean that they're present in AOSP.

For example, GrapheneOS has our own integration of hardware memory tagging into our hardened_malloc project and we turned the overall feature into something which can be used in production without making the OS unusable. We had to fix issues with the standard hardware memory tagging integration in the OS and Vanadium (Chromium) along with fixing numerous bugs uncovered by it. We had to integrate it into our user-facing crash reporting system and had to create a system for opting into using it for user installed apps where users can enable it for either specific user installed apps or for all user installed apps with a per-app opt-out. Android has the foundation for hardware memory tagging support but it's not used as a production feature for hardening and we're not simply enabling it. We have a much better userspace implementation in hardened_malloc and while we currently use the standard kernel allocator integration, we want to improve that to be closer to what we do with it in hardened_malloc. We currently use the standard Linux kernel MTE integration for the kernel allocators and the standard Chromium PartitionAlloc MTE integration but both need to be improved to provide better security properties as hardened_malloc does. They're also missing the other forms of hardening used by hardened_malloc which go nicely with memory tagging. The stock OS developer option for memory tagging is not the same thing and only makes it available for usage without actually using it. It has to then be enabled via ADB but there's no way to use it everywhere we do or in the same way we do. AOSP having that doesn't mean it provides what we do with it at all.

> Do they have a different balancing of performance, stability and compatibility on the one side and security on the other?

Yes, but you're wrong about where our privacy and security features come from.
UK here: cabs and buses now come with little notifications of video recording (not sure whether audio is included, but presumably) for the usual reason, crime prevention. But there's slightly more protection offered by GDPR.
Aren't we already emulating it? It's sort of a distributed and overlaid reward function, which we just undistributed
Somewhere Travis Kalanick is kicking himself for not secretly paying Lyft drivers to do this when he was still in charge of Uber.
Doge API Download Tool
Tool to download the data from Department of Government Efficiency using the official API.
Or have sane privacy laws that are actually enforced? You can't solve issues like this with technology on a local scale.

Companies generally comply with legalisation. GDPR is far from perfect but EU companies adjusted since it is just the price of doing business.
Hi :) I'm tomemme a Disabled veteran and Info Sci grad, posting to share my newly Public portfolio and sub-domains badideas.tomemme.com and irc.tomemme.com .Take a look if you have time, would love some feedback. Good/bad I was a Fleet marine force corpsman I can take it :) general PW is gen123, super secure wink wink, DB wipes at 5pm everyday on Secure IRC
Menlo Park-Based Energy Startup Nabs $258M to Power Data Centers
Show HN: Pintalk – Public, location-based chat rooms on a map
Hi HN,

I've been thinking about Paul Graham's idea of Twitter as a communication protocol https://www.paulgraham.com/twitter.html and wanted to experiment with a different kind: location-based chat.

I built Pintalk: https://pintalk.onrender.com

It's a simple web app that lets anyone start or join public text conversations tied to specific latitude/longitude coordinates on a map.

How it works:

Visit the site – the map tries to center near you using browser geolocation or falls back to IP lookup.

Click anywhere on the map to open a chat panel for that location.

Type your first message and hit send – this creates a persistent pin and conversation room at that spot.

Click an existing pin to view the conversation and join in.

No login or registration required. You get assigned a temporary username like User_1234. Messages and pins currently stay indefinitely.

The goal was minimal time-to-value – just click and chat. It's an experiment in discovering real-time, hyperlocal public discussions. What happens when conversations are anchored to places?

Tech: Node.js/Express, WebSockets, MongoDB/Mongoose, and Leaflet.js on the frontend. Deployed on Render.

It's basic right now but functional. I'd love to get your feedback, bug reports, or thoughts on the concept.

Try it out: https://pintalk.onrender.com

Thanks!
https://archive.md/VcBLY
No complaints based on the amount of pay, maybe.

But for example, someone who is fired or laid off in a way that wouldn’t comply with local employment protections if the employment relationship were correctly classified might assert their misclassification claim so that they can also get compensation for their wrongful termination.

If that happens, then the company not only has to scramble to catch up on the overdue social contributions for the complaining employee and pay any applicable penalties, but also likely have to undergo an audit of their other workers in that country plus the same consequences for them.

There’s a reason why any US tech company that’s big enough to be a juicy financial target tends to do this correctly, and why companies like Deel, Remote.com, and their less tech-branded competitors (such as Velocity Global) are gaining popularity among people who want to do this correctly at smaller scales than those for which it makes sense to set up foreign subsidiaries.

When smaller companies take this particular shortcut, are risking severe financial consequences for the company if the authorities discover it, and in many cases this also comes with personal liability for some of the executives who are neglecting their legal duties.
Isn't that exactly what entropy is?
> Unlike that AI crap in google suite

It is such a mystery. It _should_ be great, it should be helpful, but it's not. Whenever you ask it something useful, it responds that it can't help you with that.
Yeah yeah sorry if I touched a nerve
I Fought the IRS for Over $12K and won
CA goes down and everything dies.
Shunting Yard Algorithm
Isn't the new one also horribly type-unsafe? Since you can put (parent) objects of any kind into the list without any mechanism to detect which is which?
Thanks to Java, I know pain.
Out of curiosity, why "bastard"? ...if you're being terminated, isn't the best possible outcome that you get your salary but don't have to go to work?
No, that's a Mustange Mach-e
> I, for one, liked clippy (in his wizard form), as did the rest of kids in the computer lab

I remember laughing my ass of with all of its silly animations. This thing was great for adolescents.
Why did DNSSEC/DANE not kill CAs? Are browsers being paid by CAs to bundle their root certificates?
Isn't this basically a lot of hand waving that ends up being isomorphic to SQL injection?

Thats what we're talking about? A bunch of systems cobbled together where one could SQL inject at any point and there's basically zero observability?
"Corten" (intentionally rust-patina) steel is becoming a cliche.

Edinburgh managed a compromise design that absolutely everybody, cyclists, pedestrians, drivers, and bus drivers is unhappy with. https://www.edinburghnews.scotsman.com/news/transport/edinbu...
> I really was just a fuckin cog in a mega corp.

You had to be fired to realize this?
> I guess it's not a 100% effective, but it's something.

That's the problem: in the context of security, not being 100% effective is a failure.

If the ways we prevented XSS or SQL injection attacks against our apps only worked 99% of the time, those apps would all be hacked to pieces.

The job of an adversarial attacker is to find the 1% of attacks that work.

The instruction hierarchy is a great example: it doesn't solve the prompt injection class of attacks against LLM applications because it can still be subverted.