SamuelAdams

Alright sorry if this is dumb but how does the OP know about all this?

This feels like how Microsoft fired all their QA and expected developers to fill that role.

On one hand I think automating content moderation is a great idea. People who review content are exposed to very unhealthy things, and tend to experience trauma after a long enough time (2-5 years). Anything AI can do to reduce trauma of employees or contractors I think would be a net win.

Maybe, but the author is an experienced vulnerability analyst. Obviously if you get a lot of people who have no experience with this you may get a lot of sloppy, false reports.

But this poster actually understands the AI output and is able to find real issues (in this case, use-after-free). From the article:

> Before I get into the technical details, the main takeaway from this post is this: with o3 LLMs have made a leap forward in their ability to reason about code, and if you work in vulnerability research you should start paying close attention. If you’re an expert-level vulnerability researcher or exploit developer the machines aren’t about to replace you. In fact, it is quite the opposite: they are now at a stage where they can make you significantly more efficient and effective.

I'm actually excited about this - it's one less thing I need to disable in `about:config`. I've always been confused as to why pocket is integrated directly into the browser as opposed to being a browser extension.

This idea is already implemented in Dotnet, with Trimming and now ahead of time compilation (AOT). Maybe other languages can learn from dotnet?

https://learn.microsoft.com/en-us/dotnet/core/deploying/trim...

https://learn.microsoft.com/en-us/dotnet/core/deploying/nati...

Awesome, now do one for the Die Hard series, particularly Live Free or Die Hard.

I know the first Die Hard is 4k, but the others are not.

Looks like the biggest thing isn’t even mentioned: no telematics control unit to track your behavior.

https://www.consumerreports.org/electronics/personal-informa...

Another example here, Google forked a GCS fuse driver and the author found out later and posted on HN about it: https://news.ycombinator.com/item?id=35790223

Edit: apparently Google did not use the author's codebase, instead using an Apache 2.0 licensed codebase [1] explained here [2].

[1]: https://github.com/kubernetes-sigs/gcp-filestore-csi-driver

[2]: https://news.ycombinator.com/item?id=35863944

GitHub does the same thing with commits, displaying them on your profile. Is that remarkably different than what Snapchat is doing?

> But when the Kentucky AG’s office was preparing to post their brief against TikTok, whoever was in charge of doing the redaction simply covered the relevant text with black rectangles. Even though you can’t see the text while reading the PDF, you can just use your cursor to select each black section, copy it, and then paste it into another file to read the hidden text. It is great fun to do this — try it yourself! Or just read our version of the brief in which we have done this for you.

I feel like there needs to be more education about redaction and obfuscation tools, namely this black box tool and blurring. It is usually possible to reverse blurring. Not redacting information properly is just embarrassing.

How is this different from setting your DNS to a malware-blocking domain provider? For example Cloudflare’s malware dns is 1.1.1.2, Quad9 blocks malware by default with 9.9.9.9.

Actual source: https://content.govdelivery.com/accounts/USDHSCBP/bulletins/...

The narrative around fed jobs has changed recently too. A fed job used to be a lower salary, but much stronger job security. Now with the new administration government job security is gone, so federal jobs overall are simply not as attractive anymore.

Actually that superhuman AI is already here.

> Copilot agent mode can create apps from scratch, perform refactorings across multiple files, write and run tests, and migrate legacy code to modern frameworks.

https://code.visualstudio.com/blogs/2025/02/24/introducing-c...

I also recommend watching this talk if you have not seen it already.

Mike Monteiro: Fuck you, pay me.

https://www.youtube.com/watch?v=jVkLVRt6c1U

Kind of like how most spyware is now called “employee monitoring tools”. This stuff used to be frowned upon but now I guess the narrative has changed.

Not just YouTube. MIT has an open course system that is available to anyone, for free, from actually employed MIT professors, lecturing real courses [1]. I went to a state university that basically copied Pearson slides and books into a course with minimal adjustments.

Rather than sitting through a 50 minute lecture, I found a similar lecture on the same topic (c debugging, I think it was), and pointed out that the MIT instructor covered the same topic, in more depth, in real-time, with a live demo, in overall less time than it took the State University professor to explain. It was concise, wasted no time, and gave me clear information on what I needed to know with minimal extra examples.

And my course instructor hated me pointing that out.

[1]: https://ocw.mit.edu/

> It will become a role with a large pool of low-skilled coders who move forward with AI and a few specialists that will unblock those coders when stuck as well as address performance bottlenecks for production-scale.

You see this already in medicine. Anesthesiologist can oversee up to 6 concurrent cases, with NP’s or CRNA’s doing the actual work.

This only works for straightforward, not medically complicated cases. The more complicated cases (pregnancy, cancer, obesity, etc) are still typically fully managed by an MD /DO.

The results are controversial. Healthcare systems can save cost, but patient care is hit or miss.

Because it’s more likely to be sunsetted.

https://killedbygoogle.com/

You joke but Google is working on this now. What if you could have a maid robot in every household, similar to the I, Robot film and book.

https://deepmind.google/discover/blog/gemini-robotics-brings...

A lot of GH actions teams were impacted by layoffs in November.

Example:

https://github.com/actions/runner/pull/2477#issuecomment-244...

I agree, it seems like popular packages really need an LTS release channel or something. Enterprises do not have budget or time to continuously invest in their front end tools.

Meanwhile, compared to something written in dotnet or go. I bet there’s a very strong chance those projects will continue to work in 3-5 years.

Speaking of front end frameworks, whatever happened to Angular(JS)? It seemed to be required on every other job posting, but now things seem to only ask for React or React Native.

I am confused, the article seems to be short on details. Was the attack an open S3 bucket? The company in question seems to be hiring for GCP, so I imagine they don’t use S3 at all.

Did the submitter intentionally change the post title to get more clicks?

https://eshyft.com/careers/gcp-devops-engineer/

I agree with your ethos, but you must admit that the internet of 2025 is very different from the internet of 1980.

So will Intel need to return some of the 7.9 billion in federal grants as a result of this delay? It looks like 1.5 billion of that was already awarded as recently as last November.

https://www.industryweek.com/semiconductors/article/55246295...

https://www.news5cleveland.com/news/politics/ohio-politics/o...

I tried switching to Jellyfin. But the feature parity between Plex and Jellyfin just isn’t there. This was roughly 6-9 months ago.

I have a 5.1 surround sound setup with Dolby atmos and 4k HDR 10 with Nvidia Shield Pro android TVs as clients. I have Blu-ray rips that play completely fine on Plex, but stutter, have no sound, or downscale to 2.0 sound on JellyFin.

There are some fixes that involve using a JellyFin server and a Kodi media client on Google TV’s. This does enable DTS and Ddd+ sound. While that technically works, it is very involved and feels like many more steps than just using Plex.

If you use a basic 1080p tv with two speakers and lazy encodes of media, Jellyfin probably works great for you. If you have anything a little more complex then you will inevitably see some problems.

This is similar to other open source projects like Ashai. The basic features are easy enough to build, but the more complicated use cases always require more time and effort, and people aren’t always willing to do that complicated extra effort for free.

So if they add “credit to raphaelrobert”, or a copy of your license to their code somewhere, Kagi will be compliant?

I’ve never had any of my open source software used, and I typically license it with MIT, so I’m curious how other groups and organizations actually comply with the license.

I know Rust might be a better technology for some drivers and use cases, but if they are constantly fighting an upstream battle with merging it, why not bite the bullet and write it in C?

At that point the hard work of reverse engineering and coming up with a spec and a reliable piece of software that implements that spec are done. Don’t let that work go to waste.

This might be crazy, but why does Ashai and its drivers need to be upstreamed to the Linux kernel at all?

Why not fork Linux and call it something new, with the hardware support that is exclusively for M1/2/3/4 Mac’s?