skysight-inc/HackerNews huggingface dataset:
There are already security professionals that are pushing for 5 minute or less certificates, with mandatory OCSP stapling at even shorter intervals.
Just like you're assuming the OPs feelings are wrong. They are not.

I remember my dad lamenting the bourgeoisie to a family friend who recently immigrated to the US. His answer was, "To us, you are the bourgeoisie"

There's always someone richer than you, you can hate it, but what's the point? You just make yourself miserable and don't enjoy whatever you can carve out of life for yourself
> espousing pro-Palestinian views

The Convention on the Rights of the Child has been signed by everyone and ratified by everyone except the United States who played an active role in the drafting of the convention.

https://en.wikipedia.org/wiki/Convention_on_the_Rights_of_th...

Israel ratified the convention in 1991
Agree, but the wisdom here is in recognising that once you made $65m in seconds at someone else's expense they will try to recoup that amount by any means necessary.
To expand the vocabulary, you'd still need to break down 'gravity' and 'acceleration' into simpler words. Though still easier without an arbitrary length limit. You could say, "change in the speed a thing moves" but that needs five or six letters.
I'm not the person you asked, but it does jam me up that Claude Desktop currently makes you edit a .json file and restart the app to add new MCP servers[1], so that's at least one static thing. I'm sure someone will show up with a github link of awesome-org/mcp-mcp-server

1: https://modelcontextprotocol.info/docs/quickstart/user/#3-re...
> Border Patrol Checking US Visitors' Phones, Social Media

Many countries have been doing this for years though. And several of those countries even have key disclosure laws unlike the US, where you are literally forced to unlock your devices and give out your password no matter what.
I agree this sounds high, I wonder if "using Generative AI coding tools" in this survey is satisfied by having an IDE with Gen AI capabilities, not necessarily using those features within the IDE.
Just today I read about this in the book "Who is Government" by Michael Lewis where he presents the case on how it can help find cure for rare diseases. You can read his article at https://www.washingtonpost.com/opinions/interactive/2025/mic....

Also highly recommend the book.
Honestly this, if these people are so smart, I truly believe they can help shift the ratio of spying/nefarious/addictive tech to productive/helpful/truly world changing tech in a positive direction. We need to distribute talented people across more industries to improve the world and technology for everyone.
This is fun! I think this sort of tooling is going to be very fertile ground for hackers over the next few years.

Large swathes of the stack is commoditized OSS plumbing, and hosted inference is already cheap and easy.

There are obvious security issues with plugging an agent into your email and calendar, but I think many will find it preferable to control the whole stack rather than ceding control to Apple or Google.
Or, if you want to learn the core ideas and math involved, but in terms of computer programming, see:

Functional Differential Geometry by Gerald Sussman, same author behind Structure and Interpretation of Computer Programs

https://archive.org/details/FunctionalDifferentialGeometry/
If you speak publicly at all as part of your job, it's actually a good thing to keep track of your verbal/physical tics and try to eliminate/minimize them. Whether it's "umm," "you know," a hand gesture you keep doing, subconsciously swaying back and forth slightly, or whatever. They're all distracting even before you get to the level where people start counting them.
If I may ask, how many searches per day over what volume of data?
Ah the old "make a bot post, then write about the bot post, then get called out as a bot, then make another post talking about getting 'falsely' accused of being a bot" play.

It's all so obvious!

/s
You may think I’m being reductive but I think you’re massively overstating things too.

For example:

> People lost the ability to operate as businesses, to manage their tax affairs fairly, to invest in their own skills, and to retain profit.

I don’t know a single IT contractor that lost that ability. Maybe in other business sectors, but we are talking about IT here.

> What they got in return was, at best, a modest day-rate bump—hardly compensation for losing all autonomy, business deductions (like training, equipment, downtime), and legal protections.

This is also an exaggeration.

And you’re overlooking the point that IR35 only affects contractors working on BAU or who have worked with the same company for more than 2 years.

Firstly 2 years is a long time in contractor terms. And secondly, most occasions for hiring contractors was to work on new developments. So most of the IT contractors were still outside of IR35.

That’s not to mention that many companies would describe the work in ways that are favourable to working inside IR35 (not to the extent of tax fraud, but to the extent where any BAU responsibilities that were required weren’t the primary responsibility in the job specification.

Ironically places hardest hit by IR35 were government departments rather than businesses. Some of who ended up just adding ~40% to the contracted salary so the government still ended up covering the tax rather than the contractors.

And the very few contractors who were inside IR35 and didn’t get a bump in the contract fee would tell me they were still better off contracting rather than being employed (even taking loss of perks into account).

Now I’m not going to say that IR35 made things easier for contractors. Clearly it didn’t. But it wouldn’t have been catastrophic for the contract market had the employment bubble not also pop shortly afterwards.

You also seem to suggest that IR35 prevented contractors from claiming expenses back in tax, and that simply isn’t true either.

Edit: I will concede that it’s been 3 years since I was last given a budget and told “go hire, you decide who” so if there’s been any legal changes to IR35 since then I might have missed it.
Implementing an operating system is incredibly niche and obscure.

The practices that apply to kernel development do not generally apply to very much else.
I mean, I definitely expected this from someone calling himself "ex-Googler". Just big egos and nothing else.
You can use Gemini free API calls (limited quantity, but they are plenty)
> There is only one building in North America, probably in the world, where one can browse bestsellers and children’s books by crossing an international border and then sit for an amateur theatre troupe in a regal opera house with each half of your body in two different countries.

Maybe not quite specifically that, but I expected there to be similar things, given that there's borders all over the place in Europe. Sure enough, in the very first city I checked, I found a library + culture center + music academy right on the border between the Netherlands and Belgium.[1]

That is at least according to the rough border on maps. Generally countries make sure to organize things such that buildings are either in one country, or another, while sharing streets. I expect no building is treated as being in multiple.

[1] https://maps.app.goo.gl/8DFosfEJyrx7kPap9
They need something big to overcome VR and AI failures.
That was quite amusing and really fascinating to read; kudos my friend!
Stalkers don't usually suffer from lack of public information about their targets.

But catching stalkers would be a lot easier. We'd have a public audit log of everybody who looks up public information.

Same as we do now for doctors who look up info on people, say celebs or exes, who aren't their current patients.
I don't quite understand you, maybe you could tell me more about what I feel.
> If there is a deny list, and you have multiple services, you either do need to sync it or have a service fully responsible for this, and this does come with the burden of dealing with consistency guarantees (...)

No. Revocation is typically implemented as a shortcut to token expiration. Token expiration involves a grace period. The goal is to arbitrarily reject a long-lived token before it's expiration.

> (...) like if a service is dealing with very sensitive data.

No. That's why single-user tokens are used.
I recommend against global -Werror, instead use -Werror= with each individual option to make it much easier to deal with compiler upgrades that change warnings.

For well-maintained code, -Werror=all is expected, but switching to it is not trivial in a nasty codebase. It's still worth doing, but it's a whole project.

-Werror=extra is also a good idea once your codebase is clean for all of the above, but you will need to learn to write suppressions, and some of those are compiler-specific.

-Werror=format=2 (requires adding attributes) and -Werror=unused (weird version-dependent interactions with other warnings, so better enable it explicitly) are next, then there's a long tail of obscure warning options that should be considered; many are useful but others should be explicitly disregarded (one particular question of interest that stick out: how hard is it to suppress/restore this within a macro).

Past the trivial, Clang's warnings tend to suck (and they often refuse patches even for parity); GCC's are more useful due to the strength of history. It's still worth using Clang just for the fact that it uses different logic for triggering warnings (and also different warnings available; -Weverything is great for discoverability); just be aware that `__has_warning` isn't very useful (what we really need is `__has_warning_that_actually_works_correctly`, which requires hard-coding known-bug-free compiler versions).
What does one have to do with the other? Fraud is "intentional deception to gain an unfair or illegal advantage, often resulting in financial or legal harm" what does that have to do with code? What could code even do about fraud?
Beyond Showerheads: Trump's Attempts to Kill Appliance Regulations Cause Chaos
> He did not steal anything. He beat the fund (Indexed Finance) at their own game.

As popular as this idea is online, it doesn’t work that way in the courts.

Intent matters in issues of the law. The “finders keepers” rules don’t apply in legal matters in the real world.

If someone logs into their bank and notices that changing the account number in the URL lets them withdraw from other people’s accounts, no court is going to shrug it off and say that it’s the bank’s fault for not being more secure. Likewise, finding a vulnerability in a smart contract doesn’t automatically give someone the right to any funds they collect from exploiting it.

We all know the “code is law” arguments about smart contracts are just marketing bluster. The lawyers do, too.
> Rkt is better than Docker, later won.

Your experience with rkt is way different from mine. I would gladly accept "podman is..." or even "nerdctl is..." but I hate rkt so much and was thrilled when it disappeared from my life
> Who are "they"?

"doctors/media/government (collectively)"

> Do you have quotes to back this up?

I was there, I don't have time to dig up quotes for you. But if quotes will satisfy you, they shouldn't be too hard to fine yourself.

> Because if we're considering the cause of vaccine hesitancy during COVID-19, every component was dwarfed by the full force of conservatives media, politicians and social media influencers lying about the vaccines.

My point is by that time the public health apparatus had already dropped the ball on vaccines.

Also, your precis reads as a convenient partisan narrative, with others taking all the blame. Nothing is really that simple. IMHO, it's far more helpful to think about how your side messed up, rather than dwelling on the other side.
One theme that pops out to me here is the reliance on other people being a positive experience for the author. In the software field, we tend to live pretty high up the economic value chain, which can abstract us a bit from participation in the more grassroots co-operative aspect of society. This can be alienating and warp worldview.

When I'm hitchhiking to support packrafting trips or get back to where I launched my paraglider, I have no say in who I'm going to be chatting with and feeling gratitude towards. Initially that feeling of being reliant on whoever comes my way was difficult to adjust to after the false sense of individualism that a high paying job in a bubble of similar people brings.

The benefit though is enormous. Now I stop to help anyone who's broken down on the side of the road despite the flash judgements their car or bumper stickers might bring. I'm much more aware of the value and interconnectedness of our society, and feel inspired to actively seek to contribute instead of remaining aloof. Most importantly, I realize that there's a whole lot of people out there looking to help people out at any turn, and that gives me a lot of faith.
Thank you for that very logical and level-headed response.

Whenever I try to do this I usually get called out for being some kind of evil sympathizer. "Are you seriously defending <terrible thing>?!"

I guess even if one's response is as neutral as possible, people will still find a way to criticize you.
I'll start off admitting to not digging into the article yet, but is this something that can be broken up and done in parallel? I'm an Elixir fanboy so I try to parallelize anything I can, either to speed it up or because I'm an Elixir fanboy.
None, but that'a not what computers are. C assumes that in a few places, e.g. variadic functions, and those are the worst parts of the language.
Has that been your experience interacting with the law?
>ChatGPT is now the 7th highest ranking website on the planet - does anyone outside the HN crowd know about Google AI Studio?

This isn't about consumer facing chatbots anymore. Industry adoption is what matters. And GCP is a far far easier sell than Anthropic or OpenAI. If they both can't respond in a significant way (capability or price) very shortly, 2.5 is going to start eating their lunch.
Some kind of additional leverage and/or connections were certainly used.

The open dirty secret of infosec is that outside of authentication systems, the products and services sold do not actually work. Usability and real world functionality are not box-tick items in feature matrix comparison. It is enough that a security[tm] product does something technically correct to get a green tick in the relevant feature list row.

As a result the products are not commonly sold to their end users. They are sold to C-suite, and inflicted upon their victims. And how do C-suite choose what vendor to throw their money at? DDQ/RFx templates. I wish I was joking.

The other dirty secret of infosec is that everyone does their vendor/client/etc. vetting with bingo sheets full of meaningless, context-free questions that try to enumerate SYMPTOMS of different kinds of breach scenarios - they do not attempt to look at root causes, and they certainly do not consider threat models. These bingo sheet templates are used by everyone: vendor teams, insurers, auditors, you name it.

And now we finally get to how Wiz pulling connections intersects with the above. A fair number of the bingo sheet templates come with pre-populated dropdown choices. The choices usually include no more than 8 options, including "Other". The implication is very clear: "if you use one of these known & approved vendor products, then we are fine with it".

Wiz got their offering included in the bingo sheet templates in approximately 18 months from launching publicly. That has provided them with constant advertising from the countless infosec questionnaires thrown around the various industries and the implied checkmark of being pre-approved as a vendor of choice. Given the landscape and the general quality of competing vendors, your product needs to be merely not-shit to stand out and get traction through the various back channels.

Now, from personal exposure I can say that Wiz's product (or at least those I have been faced with) are still better[ß] than their competition. A recent security scan report from a client using Wiz had only ~85% of false positives. The average FP rate for other vendors tends to be 95% or even higher.

ß: security products must be the only segment where vast majority of results being false positives is considered both acceptable and normal. In any other field a product that routinely gets >90% of its answers wrong would be consigned to rubbish heap.
https://archive.md/WSRF9

Well it's an interesting narrative Bayer are putting out. They have of a few years ago already trying to market the next generation of herbicide resistant seeds and matching herbicide. The patent has fallen off the early corn varieties that were roundup ready. It's been a while since I had a good look but at the time the big three herbicide companies were asking 3 to 5 times as much than the roundup on offer and IIRC, application had to be most particular to ensure near 100% coverage otherwise it might fail. I could be recalling a different herbicide so don't quote me on that.

The problem with it's removal from the market, many of the other herbicides have worse (if not far worse) health implications and some have woeful secondary and tertiary breakdown products which could impact organisms such as worms.

I am biased though, I'm all for Glyphosate as long as it's used appropriately, and not over used. The wetters (other components) in roundup have included definite carcinogens which really doesn't get much noise as the same family of chemicals was IIRC albeit in much lower concentrations, part of preparations typical in some women's beauty products. Roundup's formulation has changed quite a bit as well, the earlier stuff I had the misfortune of spraying it, landing a temporary job where the main task was spraying fence lines with a roundup mix from a tractor - and just a few drops of the diluted mix soaking though the long pants would give me a bad headache for the rest of the day and into the night. I am also for it that unlike many of the other common nasty herbicides, the worst that can be said is it might be carcinogenic. I have always been very wary of agricultural chemicals - esp too many scary stories regrading pesticides / insecticides. However as a young lad in the 70s, grew up beside a neighbour, an army vet who visiting the capital for cancer treatment was alarmed large proportion while he was there were cane farming people from our region also seeking treatment there - roundup hadn't really been greatly adopted at that point in time.
I was attending a conference last week with a mix of journalists and those adjacent to that space (editors, foundations, product, etc). Everyone is concerned about data security, but they are also concerned about the increase in device searches that has been reported (and often not reported).

Yes, this is nothing new. But the increase is new.

Anyone a visa is not in a strong position to decline. US citizens are expecting more scrutiny too.

The use of a loaner, burner, or second device means you can now decline with confidence (and just be delayed by several hours in a interview room and have your devices confiscated) OR you can allow the search and protect your privacy (the most likely best use-case for visitors).
Isn’t, in the US system, the definition of fraud built up through a combination of legislation and case law from previous ‘grey area’ cases? I think most laws tend to have some balance between what is easy to define/understand and what is desirable to allow/disallow.
You are using people from a marginalized group (the poor), of which I am assuming you are not a part, as a bad faith shield to justify your anti-worker viewpoint.
Older people who use smartphones 'have lower rates of cognitive decline'
This comment makes no sense.

1. You have linked lists in Rust. They're in the standard library.

2. Linked lists do not have "unmatched performance" - they are slower than almost anything, outside of highly specialized use cases. Even moreso for intrusive linked lists. Worst of all, they are horrible for cache locality.

There are valid uses of linked lists, that's why they exist, but most people don't have those use cases.
Content aside, does anyone else have poor scrolling performance on his blog? I saw similar issues on both mobile and desktop, what's with that?
> but that'a not what computers are

Which language more accurately represents hardware then?
It's not up to wheat. Humans invented Latin and get to define domestication.
A large part of that is just following style guides. It's crazy how few people actually read things like PEP8 despite writing tons of code in python. It's not even that much to learn and most is quite logical - all while making your code not just appear professional but also be more readable by others.
Code comments, README.md, TODO.md, or Obsidian notes.
Lately I have been experimenting with ways to work around the "context token sweet spot" of <20k tokens (or <50k with 2.5). Essentially doing manual "context compression", where the LLM works with a database to store things permanently according to a strict schema, summarizes it's current context when it starts to get out of the sweet spot (I'm mixed on whether it is best to do this continuously like a journal, or in retrospect like a closing summary), and then passes this to a new instance with fresh context.

This works really effectively with thinking models, because the thinking eats up tons of context, but also produces very good "summary documents". So you can kind of reap the rewards of thinking without having to sacrifice that juicy sub 50k context. The database also provides a form of fallback, or RAG I suppose, for situations where the summary leaves out important details, but the model must also recognize this and go pull context from the DB.

Right now I have been trying it to make essentially an inventory management/BOM optimization agent for a database of ~10k distinct parts/materials.
> to get protections from the law and guarantees, financial institutions need to get licensed and comply with all the rules, regulations and law.

That’s not how the law works.

If someone breaks the law or doesn’t comply with regulations, that’s a separate issue. It doesn’t entitle a third party to steal their funds.

If you were to rob a drug dealer, you couldn’t argue that they weren’t complying with the law and therefore you were free to take it. You would both have broken laws.
Someone who disagrees with you is a profoundly immature child?

Your analogy is confusing, you’re comparing a free plant on the roadside to 63 million dollars on a crypto exploit?
> loss objective

There is no prediction or desired output, certainly explicit. I was playing with those things in my work to try and understand how our brains cause the emergence of intelligence rather than solve some classification or related problem. What I managed to replicate was the learning of XOR by some nodes and further that multidimensional XORs up to the number of inputs could be learned.

Perhaps you can say that PCAish is the implicit objective/result but I still reject that there is any conceptual notion of what a node "should" output even if iteratively applying the learning rule leads us there.
just in case though, I usually hang the sign on signposts in the public right of way in case someone tries to steal my car.
Channels are useful when they are really (rarely) needed. IMO Channel API should've been as ugly as reflect API to be considered only in extra cases.
Agreed, going for a custom engine anyhow in my scenario so that's fine.

It seems that they're built to run serially to achieve reproducible simulations so my guess would be no, this is one thing my experiment does differently although formally it might just be a naming difference.

It's not a major issue though I think, the stuff I work on could shard work by area so single areas are single-threaded but world-wise it's parallel (Eve online has done this for ages).
Dead trees can exist as furniture, flooring and buildings too. Stored carbon with ancillary usage.