skysight-inc/HackerNews huggingface dataset:
You're on to a different argument now.

My point was about surviving scandals as a candidate. Trump survived the Hollywood Access tape, where it would have buried most candidates. Your example was "whatabout Barry" -- but they're not comparable (and Barry did not survive his scandal, but went to jail).
Looked at it, but as a security person, I have to recommend against it as it requires permissions to act on behalf of repository maintainers. That is asking for trouble, and represents a backdoor into every project that signs up for it.
> For many travelers, it’s not about politics or safety.

Tourism Pullback and Boycotts Set to Cost U.S. a Staggering $90 Billion - https://www.thedailybeast.com/tourism-pullback-and-boycotts-... - April 15th, 2025

World Travelers Are Rethinking Vacation Plans to the US - https://www.bloomberg.com/news/articles/2025-04-08/is-it-har... | https://archive.today/h56ar - April 8th, 2025

Europeans:

European tourists shun US following Trump election - https://www.yahoo.com/news/european-tourists-shun-us-followi... - April 12th, 2025

European travellers cancel US visits as Trump’s policies threaten tourism - https://www.ft.com/content/6dc16a54-8de1-4f3b-8409-ecb566118... | https://archive.today/yLUvW - April 11th, 2025

‘It’s like our friend started a fist fight with us’: These Europeans are skipping US travel - https://www.cnn.com/2025/04/09/travel/european-travelers-ski... - April 9th, 2025

Canadians:

Canadian Car Travel To U.S. Plunges 32% In March As Boycott Escalates - https://www.forbes.com/sites/suzannerowankelleher/2025/04/14... | https://archive.today/RdlUN - April 14th, 2025

Airlines Cut Seats to the U.S. as Canadians Stay Away - https://www.nytimes.com/2025/03/28/world/canada/air-canada-f... | https://archive.today/SkgBu - March 28th, 2025
First I think people who recognize there are problems is what is needed now. You leaving makes things worse.

Then again, it is understandable not everybody has the luxury to be in circumstances that allow adequate forms of resistance.

If you ask about which country, I'd say it depends. It depends on who youaare, what your skills are, which climate zones and cultures you prefer, whether you're willing to learn a new language and so on.
When I was there, someone getting fired was extremely rare, which doesn’t seem to fit well with “you can always replace people” line that you’re talking about?

But Google is a big place and it was long ago, so perhaps it’s a “blind men and the elephant” thing.
Trump Threatens Harvard's Tax-Exempt Status After School's Rebuke
This is biased in favor of authors with long names (which they mention at the beginning of their Future Work section)
I was in college in the 90s. People were protesting and taking over admin buildings. Speaking was not a crime. There has been no evidence that Mahdawi has done anything other than speak or contribute to organizing a protest. Neither of these activities are criminal activities.
Which might be a side-effect of the reasoning.

In my experience whenever these models solve a math or logic puzzle with reasoning, they generate extremely long and convoluted chains of thought which show up in the solution.

In contrast a human would come up with a solution with 2-3 steps. Perhaps something similar is going on here with the generated code.
Interesting Python features that I've come across in my career
>Also wrong in saying you need systemd with podman to orchestrate multiple containers without root

I explicitly said thay it wasnt needed and that there werent other ways just that it was the recommended way.

>It's not "red hat's recommended way to orchestrate podman containers

It is.
I'm sure it'd be content specific, but in a thread about technical discussions (_especially_ in fields with information that can be just as valuable a decade later) it seems totally fine. Those forums seem to be okay with it, though...
It’s better to think of it as compromise rather than a deal. Of course, it needs to be a reasonable compromise.
It will be like YouTube. Distribution will be hard and most of it will be slop but every now and then you’ll discover something so good and so creative and it couldn’t have possibly existed before that it makes the whole experience worth it. The best creative works are led by one person and I’m excited to see what people can come up with.
I don't understand why there are so many anti-monopoly suits against Google, Facebook, apple etc., when Amazon has been running with explicitly monopolistic policies for years without a word.
Accessibility typically doesn't cost much. With many modern OS UI frameworks, you get it for free as long as you don't go out of your way to customize shit that you probably shouldn't be customizing in the first place. If you stick to standard controls and not try to use crazy ways to override user preferences, your application should be accessible to things like screen readers mostly out of the box.
Well, if physicalism is true then consciousness is a phenomenon of quantum fields, which span the universe. So yes, stretching the definition of creature, this could be interpreted as literally true.
Do tou really think the goal of the Trump administration is to prioritize public universities?
You see the establishment of separate, unwritten classes of things here, right? It will be a case-by-case basis which of these rules is invoked, that way no matter what happens they're "just following the rules we all agreed to" but they get to hand-select which thoughts are compulsory and which are forbidden.
Trade secrets like source code are a core aspect of IP protection.

What and how you can keep a secret is very much under the term IP, if you want to describe something more specific
don’t use terms meant to describe something else. If you’re full on “information wants to be free” then the line doesn’t stop at a companies firewall.
>Hungary passes constitutional amendment to ban LGBTQ+ gatherings

Just the first one that comes to mind.
Harvard today is a long way away from a religious college.
Very impressive release compared to what was possible even a single year ago. It feels like we are in a great state right now with respect to ML where all the big companies are competing and pushing each other to make the tech better. This is rare nowadays in America (or in general).
> allowing them the freedom to do whatever they want and then telling them afterward that none of the consequences are actually their fault and they can at any time walk away from anything that makes them feel sad or scared or overwhelmed is not the way either.

Those things are *not* the same as validating their emotions. That's *not* what that means.

If my toddler is crying because he doesn't want to go to bed, the conversation isn't: "Oh, I understand you want to stay up. Okay, let's stay up later!". Instead the conversation is: "Oh, I understand you want to stay up later. You're having a lot of fun now. But, hey, you'll get to play more tomorrow. We need to go to bed now, so we can be rested for tomorrow.", and then we go to bed.

> telling them afterward that none of the consequences are actually their fault

That also isn't part of validating someone's emotions. When my toddler is standing on something wobbly, and then falls the conversation isn't: "ow! That looks like it hurts! I'm sorry buddy. But don't worry, it's not your fault." the conversation is: "That looks like it hurts! I'm sorry buddy. Hey, did you notice how wobbly that thing you were standing on is? Next time, we need to be more careful about what we're standing on so we don't fall. That way we won't get hurt again".

Validating emotions is precisely about getting them to a headspace where they are able to hear your reasons why they have to do a thing they don't want to do, or hear you explain the consequences of their actions. It's exactly the opposite of letting them do whatever they want, and it's exactly the opposite of telling them the consequences of their actions aren't their fault.
From the article:

Replacing innerHTML wasn’t working out particularly well—especially for the highly interative Ads product—which made an engineer (who was not me, by the way) wonder whether it’s possible to run an XHP-style “tags render other tags” paradigm directly on the client computer without losing state between the re-renders.

HTML is still a document format, and while there's a lot of features added to browsers over the year, we still have this as the core of any web page. It's always a given that state don't survive renders. In desktop software, the process is alive while the UI is shown, so that's great for having state, but web pages started as documents, and the API reflects that. So saying that it's an issue, it's the same as saying a fork is not great for cutting.

React is an abstraction over the DOM for having a better API when you're trying not to re-render. And you can then simplify the format for transferring data between server and client. Net win on both side.

But the technique described in the article is like having an hammer and seeing nails everywhere. I don't see the advantages of having JSX representation of JSON objects on the server side.
I can steal a company's codebase without depriving them of their code.

I can steal an invention without wiping the inventor's memory.

These are other kinds of stealing, which deprives the creator not of the art itself, but the other benefits of having created it.
I don't know what tax plan that is an analysis of, but Trump has stated he wants to eliminate income tax for those under $150k.

I don't know what news source you trust, but if you google it, he stated it back in March.
Yet because of that the issue they were concerned about was shown to the thread readers without having to read 75 pages of text.

Quite often people read the form thread first before wasting their life on some large corpus of text that might be crap. High quality discussions can point out poor quality (or at least fundamentally incorrect) posts and the reasons behind them enlightening the rest of the readers.
Ah, thank you for the clarification! I must've mixed up a couple facts...
They have quotas to hit to meet the Republican party's fake numbers of 'the people who are to blame'
Is this DOGE or a different actor?

Edit, unknown hackers: https://web.archive.org/web/20250410170535/https://www.bloom...
> People already paid their taxes on all of the principal before they donated it to fund education

That's not true, the donations are tax exempt (deductible).
METS, the Middle English Texts Series
Are the US becoming expensive or are Europeans becoming poor compared to Americans?

All data from income to GDP show that Europe is falling behind so perhaps this is when numbers become real...
The framework checklist[1] makes me think of Fulcro: https://fulcro.fulcrologic.com/. To a first approximation you could think of it like defining a GraphQL query alongside each of your UI components. When you load data for one component (e.g. a top-level page component), it combines its own query with the queries from its children UI components.

[1] https://overreacted.io/jsx-over-the-wire/#dans-async-ui-fram...
They did kill nuns though.
"You can't reason someone out of a position they didn't reason themself into."
One person? What do you mean? It literally says in the wiki more than one.

This isn't solo dev game project.
And one of those 10,000 will have a multimillion marketing budget and people are talking about it online and remixing it into memes and it will make a lot more money than the second-most popular movie, even though there's no discernable quality difference.
Yes, probably out of date. Memory management was always the JVMs Achilles heel (either long pause times or too much memory usage). If that’s fixed in recent JDKs, awesome.
Yes: SSH certificates. (They're unrelated to X509 certificates and the WebPKI).
Maybe I'm in the minority, but I wish there were an similarly popular vector drawing format that did much much less than SVG. Any time you want to support vector drawings in a project, the obvious approach is to support SVG...which basically means you have to bring in the equivalent of a browser. What is the minimal alternative?
> seem convinced democracy is teetering and to me that seems to be mostly just propaganda.

Dude, the last time Trump lost he tried to overthrow the government. Are we just supposed to... pretend that didn't happen and he's just some bastion of American democracy?

The stage for this has been set for a while now, and if you haven't noticed, Trump isn't backing down on ANY of his beliefs. He's doubling down. What other conclusion could you draw then?
They very very obviously at this point aren’t going to voluntarily leave office.
Decentralized Online Social Networks Technical and Societal Challenges
What are your thoughts on peoples identity and trade marks?
To someone building a long term dataset, I’m not sure what assurances would help. Certainly a personal assurance doesn’t (though you’re kind to offer), and even a corporate statement doesn’t (new owners or C-suite could walk that back anytime). It might take a formal third-party “model escrow” arrangement to be really convincing.
Life Threatening Ski Accident and What I Learned
Not only that, but if you do have success "selling" songs you increasingly run the risk of litigating from the interest who already "own" the corpus of existing work.
> putting offers in the package to give people money back if they rate the item 5 stars,

I had something similar but more convoluted happen with the car mount I got for my phone. The box included a card stating to email them to sign up for their warranty. Emailing them signed me up for their loyalty emails, which are infrequent enough that I actually didn't mind them. The loyalty emails frequently included offers of "free gifts." One day, I actually replied to one asking for it, and they explained I'd be buying it from them on Amazon and then they'd pay me back for it-- in exchange for a review, of course.

I'd had similar things offered to me as a YouTuber with companies wanting "reviews" but making me do the purchase myself (I've done one or two of them). The fact that it's just being offered to mainstream consumers now is ridiculous. It means you can't trust any of the reviews (or at least the positive ones; I normally look for negative ones with photos these days).
This is Trump's trademark move, writ large. We've all read the reports of him refusing to pay contractors after work is done, ignoring the contracts and saying "sue me". This is who he is, and he's just bringing this playbook (back) to the federal government, cheered on by people until they're personally and directly affected by this behaviour.
I think we have different use cases: I'm trying to help people get compliant && do the right thing. From my perspective "anything that can trigger an uncomfortable conversation with an auditor" is not experimental. And I can tell you from the analytics that a significant portion of the web browsers out there are using it.
Caller ID History: How Our Views on Phone Privacy Changed (2019)
It's funny how the "I never use a smartphone" argument moves from one technology to another. AI hype is ridiculous but it's also a technology that will probably be used by other people for things that you've decided not to use it for. It'll either be for their benefit or to their detriment, but they'll have it on their smartphones. Thinking about how it will be used will probably yield more insight than why you don't want use it.
I've made some critical mistakes in my argument here. I am definitely not referring to using SSH TOFU in a fleet. I'm talking about using SSH TOFU with long-lived machines, like your own personal computers, or individual long-running servers.

Undoubtedly it is not best practice to lean on TOFU for good reason, but there are simply some lower stakes situations where engaging the CA system is a bit overkill. These are systems with few nodes (maybe just one) that have few users (maybe just one.) I have some services that I deploy that really only warrant a single node as HA is not a concern and they can easily run off a single box (modern cheap VPSes really don't sweat handling ~10-100 RPS of traffic.) For those, I pre-generate SSH server keys before deployment. I can easily verify the fingerprint in the excessively rare occasion it isn't already trusted. I am not a security expert, but I think this is sufficient at small scales.

To be clear, there are a lot of obvious security problems with this:

- It relies on me actually checking the fingerprint.

- SSH keys are valid and trusted indefinitely, so it has to be rotated manually.

- The bootstrap process inevitably involves the key being transmitted over the wire, which isn't as good as never having the key go over the wire, like you could do with CSRs.

This is clearly not good enough for a service that needs high assurance against attackers, but I honestly think it's largely fine for a small to medium web server that serves some small community. Spinning up a CA setup for that feels like overkill.

As for what I personally would do instead for a fleet of servers, personally I think I wouldn't use SSH at all. In professional environments it's been a long time since I've administered something that wasn't "cloud" and in most of those cloud environments SSH was simply not enabled or used, or if it was we were using an external authorization system that handled ephemeral keys itself.

That said, here I'm just suggesting that I think there is a gap between insecure HTTP and secure HTTPS that is currently filled by self-signed certificates. I'm not suggesting we should replace HTTPS usage today with TOFU, but I am suggesting I see the value in a middle road between HTTP and HTTPS where you get encryption without a strong proof of what you're connecting to. In practice this is sometimes the best you can really get anyway: consider the somewhat common use case of a home router configuration page. I personally see the value in still encrypting this connection even if there is no way to actually ensure it is secure. Same for some other small scale local networking and intranet use cases.
Maybe add a TLDR section?
Not to users. The user who types Wal-Mart into their address bar expects to communicate with Wal-Mart. They aren't going to check if the certificate matches. Only that the icon is green.

This is where the disconnect comes in. Me and you know that the green icon doesn't prove identity. It proves certificate validity. But that's not what this is "sold as" by the browser or the security community as a whole. I can buy the domain Wаl-Mart right now and put a certificate on it that says Wаl-Mаrt and create the conditions for that little green icon to appear. Notice that I used U+0430 instead of the letter "a" that you're used to.

And guess what... The identity would match and pass every single test you throw at it. I would get a little green icon in the browser and my certificate would be good. This attack fools even the brightest security professionals.

So you see, Identity isn't the value that people expect from a certificate. It's the encryption.

Users will allow a fake cert with a green checkmark all day. But a valid certificate with a yellow warning is going to make people stop and think.
He's also been hacking on a (closed source) LLM inference server since the GPT-2 days: https://bellard.org/ts_server/
https://www.hollywoodreporter.com/business/business-news/pir...

“When did you meet [fellow defendant Gottfrid] for the first time IRL?” asked the prosecutor.

“We do not use the expression IRL,” said Peter, “we use AFK.”

“IRL?” questioned the judge.

“In Real Life,” the prosecutor explained to the judge.

“We do not use that expression,” Peter noted. “Everything is in real life. We use AFK—Away From Keyboard.”
Dreamcast web browser? :)
> One of the things that puts metaprogramming on wheels is being able to pull in grammars, schemas and such for external systems.

That's what I've been trying to do with: https://github.com/schemamap/schemamap

For a well-constrained Postgres schema, a deterministic SQL compiler can be built (with plenty of logic programming/constraint-solving/hypergraph-analysis) that can integrate arbitrary external systems data.

While this is NP-hard, with some clever use of embeddings and ontologies, and use of every single constraint AST within the DB to reduce the search space, this becomes a feasible problem.

For any Clojurists interested, I've packaged `pg_query`, so you can use it in your applications: https://github.com/schemamap/pg-query-clj

At the moment I'm saving up for the next development cycle, so not only PG->PG schema mappings can be solved for (JSON schema is next!). Hope this sounds interesting :)
refreshingly cool target market
> What ML does is not in any way akin to human learning in methodology. When we call it learning that's an analogy.

Of course it's different, but if we look closely, it is not copying. The model itself is smaller, sometimes 1000x smaller, than the training set. Being made of billions of examples, the impact of any one of them is very small (de minimis).

If you try to replicate something closely with AI it fails. If regurgitation was a huge problem we'd see lots of lawsuits on output, but we see most suits for input (training). That means authors can't identify cases of infringement in the outputs.
The difference is that in everyday Typescript you end up using `as`, so it's presence is not a blaring alarm.

Grepping a real world codebase that would not be `unsafe` in Rust:

event as CustomEvent<T>

const errorEvent = event as ErrorEvent;

const element = getByRole("textbox");
expect(element).toBeInstanceOf(HTMLInputElement);
const input = element as HTMLInputElement;

const element = parent.firstElementChild as HTMLElement;

type ItemMap = Map<Item["id"], Item>;
...
new Map() as ItemMap

const clusterSource = this.map.getSource(sourceName) as GeoJSONSource;

[K in keyof T as T[K] extends Fn ? K : never]: T[K];

target[type] as unknown as Fn<...

export const Foo = [1,2,3] as const;

and on it goes. Typescript normalizes unsafe behavior.
We already have a way one way to render things on the browser, everyone. Wrap it up, there's definitely no more to explore here.

And while we're at it, I'd like to know, why are people still building new and different game engines, programming languages, web browsers, operating systems, shells, etc, etc. Don't they know those things already exist?

/s

Joking aside, what's wrong with finding a new way of doing something? This is how we learn and discover things.
What status quo? They're sending innocents to a concentration camp against the wishes of the supreme court that they packed with their own allies.
I skimmed over this and imho it would be better to cut like 30% of the exposition and split it up into a series of articles tackling each style separately. Just my 2c.
Phoenix/Liveviews

Fresh/Partials

Astro/HTMX with Partials
This does not hold for any but a very-few expensive markets, and even there, not most of the time. Hell, I stayed in Manhattan a few months back with my kids, and for two beds in a room just a couple blocks from Times Square, in a hotel that I'd classify as one full step up from "just clean sheets and a door", we didn't pay $300/night, even with those being a Friday and Saturday night. And that was the most expensive hotel I've ever paid for in my life.

You went somewhere very unusual and probably managed to hit on a peak weekend for whatever reason.
Based on this about 5.5 million stars are created every 30 minutes and only about 1 start goes supernova in the same period? This seems like it really reinforces the we are still in the early stages of the universe theory if the ratios are that imbalanced.

Still though the imbalance in those events makes me suspicious that we are missing something.