Mark Zuckerburg's superpower is being like Jack Sparrow at the beginning of Pirates of the Caribbean: he steps off one boat just as it's sinking onto another, and he has the humility to not really give a damn which ship he's on. (I say "humility" even as someone frustrated by his net impact on society.)
I think on the How I Built This Instagram episode the Instagram founder said that Zuck was basically reading the data from Facebook's interactions and saw that the demographics and sharing tendencies of Facebook users meant that it was in a death spiral: people were moving interactions to private channels, reducing the available "friend" content. IMO, the causal factor here is that people became wary of public oversharing and the result was FB pivoting away from "social network" (OG Facebook) to "social media" (2010-2015 FB) and eventually just "media" (Instagram, Reels).
Looking back at what I posted on FB in 2008-2012 is like observing an alien from another planet: it was a completely different platform.
1. It isnt clear ICE agents have any legal authority to demand a judge tell them anything. 2. It is highly likely this is an official act, since it would be taken on behalf of court, so the immigrant can give, eg. testimony in a case.
A "private act" here would be the judge lying in order to prevent their deportation because they as a private person wanted to do so. It seems highly unlikely that this is the case.
> I disagree with other posts here, it is partially a balance between security and usability.
And economics. Many people here are blaming incompetent security teams and app developers, but a lot of seemingly dumb security policies are due to insurers. If an insurer says "we're going to jack up premiums by 20% unless you force employees to change their password once every 90 days", you can argue till you're blue in the face that it's bad practice, NIST changed its policy to recommend not regularly rotating passwords over a decade ago, etc., and be totally correct... but they're still going to jack up premiums if you don't do it. So you dejectedly sigh, implement a password expiration policy, and listen to grumbling employees who call you incompetent.
It's been a while since I've been through a process like this, but given how infamous log4shell became, it wouldn't surprise me if insurers are now also making it mandatory that common "hacking strings" like /etc/hosts, /etc/passwd, jndi:, and friends must be rejected by servers.
Reminds me of an anecdote about an e-commerce platform: someone coded a leaky webshop, so their workaround was to watch if the string "OutOfMemoryException" shows up in the logs, and then restart the app.
Another developer in the team decided they wanted to log what customers searched for, so if someone typed in "OutOfMemoryException" in the search bar...
This works against _the LLM proper,_ but not against chat applications with integrated search. For ChatGPT, you can write, "Without looking it up, tell me about the Marathon crater."
This tests self awareness. A two-year-old will answer it correctly, as will the dumbest person you know. The correct answer is "I don't know".
This works because:
1. Training sets consist of knowledge we have, and not of knowledge we don't have.
2. Commitment bias. Complaint chat models will be trained to start with "Certainly! The Marathon Crater is a geological formation", or something like that, and from there, the next most probable tokens are going to be "in Greece", "on Mars" or whatever. At this point, all tokens that are probable are also incorrect.
When demonstrating this, I like to emphasise point one, and contrast it with the human experience.
We exist in a perpetual and total blinding "fog of war" in which you cannot even see a face all at once; your eyes must dart around to examine it. Human experience is structured around _acquiring_ and _forgoing_ information, rather than _having_ information.
I’ve noticed my kid (12) primarily uses group chats over social apps. Some of his chats have several dozen kids in them. It could be social media got so bad that the protocols became the best alternative. An old programmer like me sees a glimmer of hope in a sea of noise.
I'm not sure even Tesla unambiguously qualifies here. Looking at the NHTSA part 583 list for 2025 [0], none of the Tesla vehicles have a "US" content higher than 75% (which I think includes Canada?). The highest is the base Kia EV6 at 80%. This seems to be coming from the Kogod manufacturing index. That's a more qualitative ranking that attempts to deal with things like corporate structures rather than just origin like the NHTSA numbers.
As someone who works in the industry, "where" something comes from is an inherently fuzzy concept. Different parts of the government use radically different definitions. For example, under NAFTA "domestic" parts are usually things manufactured anywhere in North America. This was done to onshore automotive manufacturing that wasn't realistically going to come back to the US, but political leaders didn't want to stay in Asia. One result of these tariffs may actually be that more auto manufacturing moves to Asia as the advantage of North American manufacturing is lost.
Most interesting for Australia and generally society is the fact that a judge has to associate the behavior of collecting different materials from the periodic table with mental health issues in order to not ridicule the current laws.
US officials and businessmen keep on repeating the same thing:
> The European Commission is attempting to handicap successful American businesses while allowing Chinese and European companies to operate under different standards.
But this is wildly untrue. The EU isn't hand-picking individual organisations and fining them because they're American, they're fining them because they're in breach of existing legislation. The same legislation applies to local companies.
Ironically, it's the US who takes stances like the one they claim the EU is taken. E.g.: The US required that TikTok be sold, without actually proving that TikTok was in breach of any actual law.
But repeating the same claims gets those claims out into the media, and that's what people hear. So we see a dissonance between what the media says (and many people believe) and what's really happening.
I find it ludicrous that the developers of an app as insignificant as a screen recorder would think it's necessary to check for updates every 5 minutes.
Thanks for the shout out. I am the CEO of Vivifi medical. We are building off the gat and Goren’s work and making it better and more robust. More importantly making it more accessible to patients through urologists.
Our early clinical trial data from Panama is looking highly encouraging and we are working hard to bring this to the market in the fastest manner possible.
I’m only part of the way through the book, so have nothing to spoil here. But it’s entertaining. And shocking. The author will relate a scene that’s so absurd that you think “ah, this can’t be true, this is made up for dramatic effect, nobody would act like that” and then you Google it and you realize the absurd thing is totally true and was fully documented at the time. All the author is adding is a perspective from the inside.
I understand why Facebook people might have wanted the book to go away. That their attempt to do so comically backfired and resulted in entirely the opposite effect, well, that’s also pretty much what you’d expect from this crew after reading the book.
I think gemma-3-27b-it-qat-4bit is my new favorite local model - or at least it's right up there with Mistral Small 3.1 24B.
I've been trying it on an M2 64GB via both Ollama and MLX. It's very, very good, and it only uses ~22Gb (via Ollama) or ~15GB (MLX) leaving plenty of memory for running other apps.
Last night I had it write me a complete plugin for my LLM tool like this:
llm install llm-mlx
llm mlx download-model mlx-community/gemma-3-27b-it-qat-4bit
llm -m mlx-community/gemma-3-27b-it-qat-4bit \
-f https://raw.githubusercontent.com/simonw/llm-hacker-news/refs/heads/main/llm_hacker_news.py \
-f https://raw.githubusercontent.com/simonw/tools/refs/heads/main/github-issue-to-markdown.html \
-s 'Write a new fragments plugin in Python that registers
issue:org/repo/123 which fetches that issue
number from the specified github repo and uses the same
markdown logic as the HTML page to turn that into a
fragment'
If the goal of school is to develop children into young adults with good reasoning and analytical skills, a basic wholesome world and social model and some practical skills and basic physique, smartphones seem to contribute little and distract a lot from those aims.
Fun fact that was dredged up because the author mentions Australia: GPS points change. Their example coordinates give 6 decimal places, accurate to about 10-15cm. Australia a few years back shifted all locations 1.8m because of continental drift they’re moving north at ~7cm/year). So even storing coordinates as a source of truth can be hazardous. We had to move several thousand points for a client when this happened.
Martin was also at the coup attempt on Jan 6 and on that day said "Like Mardi Gras in DC today: love, faith and joy. Ignore #FakeNews". https://archive.ph/jekzQ
To be clear, I'm don't like the Microsoft has a proprietary Marketplace, but a company openly violating the terms of use for their own profit is a bit much in my opinion.
> Cursor allegedly has been flouting Microsoft terms-of-service rules for some time now by setting up a reverse proxy to mask its network requests to the endpoints used by the Microsoft Visual Studio Marketplace. This allows Cursor users to install VS Code extensions from Microsoft's market. Other VS Code forks tend to point to Open VSX, an alternative extension marketplace.
I'd say it's better to call it a unit of counting.
If I have a bin of apples, and I say it's 5 apples wide, and 4 apples tall, then you'd say I have 20 apples, not 20 apples squared.
It's common to specify a length by a count of items passed along that length. Eg, a city block is a ~square on the ground bounded by roads. Yet if you're traveling in a city, you might say "I walked 5 blocks." This is a linguistic shortcut, skipping implied information. If you're trying to talk about both in a unclear context, additional words to clarify are required to sufficiently convey the information, that's just how language words.
This was the expected result. The economy does not like uncertainty, and it is almost impossible to plan ahead until there is some clarity how and when the current trade war situation will resolve. The longer that takes, the worse the damage to the real economy will get.
I once had this kind of body recovery/stress level measuring thingy on me for a few days, and a doctor would then analyze my health and such. I was under some stress those days and (according to the measurements) I wasn't recovering properly even during the nights. But then there was this one, long, flat, deep green curve in the middle of my work day. I checked from my VCS what I was doing during that period: I was optimizing.
I've since noticed this many times. Optimizing is like meditation to me. It's very mechanical (measure), with a sprinkle of creative work (once you know what is slow, it's quite obvious how to make it faster, but just challenging enough to be engaging), and it has a very nice tight feedback loop: Something is slow. I make a change. Now it's fast. Next.
The Venn diagram of people who make book purchasing decisions based on “Independent Bookstore Day” and people who choose Amazon because a book is a couple dollars cheaper on a given day has to be two completely separate circles.
this part of the whistleblower complaint seem way worse:
"
On or about March 11, 2025, NxGen metrics indicated abnormal usage at points the prior
week. I saw way above baseline response times, and resource utilization showed increased
network output above anywhere it had been historically – as far back as I could look. I noted that
this lined up closely with the data out event. I also notice increased logins blocked by access
policy due to those log-ins being out of the country. For example: In the days after DOGE
accessed NLRB’s systems, we noticed a user with an IP address in Primorskiy Krai, Russia
started trying to log in. Those attempts were blocked, but they were especially alarming.
Whoever was attempting to log in was using one of the newly created accounts that were used in
the other DOGE related activities and it appeared they had the correct username and password
due to the authentication flow only stopping them due to our no-out-of-country logins policy
activating. There were more than 20 such attempts, and what is particularly concerning is that
many of these login attempts occurred within 15 minutes of the accounts being created by DOGE
engineers.
"
One thing I'd suggest, for any hardware product, is that when doing your bill of materials to provide links and show estimated costs. Sure, these will change but having a rough idea of the costs is really helpful, especially when perusing on from things like HN. It can be a big difference for someone to decide if they want to try it on their own or not. It is the ballpark figures that matter, not the specifics.
You did all that research, write it down. If for no one but yourself! Providing links is highly helpful because names can be funky and helps people (including your future self) know if this is the same thing or not. It's always noisy, but these things reduce noise. Importantly, they take no time while you're doing the project (you literally bought the parts, so you have the link and the price). It saves yourself a lot of hassle, not just for others. Document because no one remembers anything after a few days or weeks. It takes 10 seconds to write it down and 30 minutes to do the thing all over again, so be lazy and document. I think this is one of the biggest lessons I learned when I started as an engineer. You save yourself so much time. You just got to fight that dumb part in your head that is trying to convince you that it doesn't save time. (Same with documenting code[0])
Here. I did a quick "15 minute" look. May not be accurate
Lidar:
One of:
LD06: $80 https://www.aliexpress.us/item/3256803352905216.html
LD19: $70 https://www.amazon.com/DTOF-D300-Distance-Obstacle-Education/dp/B0B1V8D36H
STL27L: $160 https://www.dfrobot.com/product-2726.html
Camera and Lens: $60 https://www.amazon.com/Arducam-Raspberry-Camera-Distortion-Compatible/dp/B0B1MN721K
Raspberry Pi 4: $50
NEMA17 42-23 stepper: $10 https://www.amazon.com/SIMAX3D-Nema17-Stepper-Motor/dp/B0CQLFNSMJ
That gives us $200-$280 before counting the power supply and buck converter.
[0] When I wrote the code only me and god understood what was going on. But as time marched on, now only god knows.
In February I happened to attend a lunch 'n learn presentation at TMCi by a company doing clinical trials based on exactly this venous insufficiency principle. I think I may have been the only one in the audience with gray hair... TMCi is the startup accelerator attached to the Texas Medical Center in Houston.
The startup company is Vivifi Medical[1] and they have clinical trials underway with ten men in a Central American country (El Salvador?). They claim that BPH reverses in a few months after their procedure. Their procedure uses a minimally invasive tool of their own invention to snip the vertical blood vessels that are backflowing from age and gravity, and splice them into some existing horizontal blood vessels. On their board of advisors is Dr. Billy Cohn[2], the wildly innovative heart surgeon who is famous for shopping for his medical device components at Home Depot. Dr. Cohn is on the team building the BiVACOR Total Artificial Heart. Vivifi presented their estimated timeline to FDA approval, with proposed general availability in 2028. My personal BPH will be at the head of the line for this procedure.
As far as a startup, their TAM is about 500 million men. I had the Urolift procedure for BPH three years ago, and it cost about $15K on the Medicare benefits statement, though Urolift's clips amounted to only a few thousand dollars. Similarly, Vivifi's charges for this procedure are only a few thousand dollars per procedure, but it holds the promise of being a final solution. Currently Urolift is much less disruptive than TURP, which needs a couple of days in the hospital and almost always leads to retrograde ejaculation (into the bladder).
It’s not only lack of dependence, but also lack of idleness.
Most of my friend interactions would come from things like having a moment with nothing to do in the bus, realizing I have no particular plans this weekend and reaching out to a couple friends to see if they’re available.
Now those moments are instantly drowned by opening instagram before a thought bubbles up. And when the weekend eventually comes and there’s no plan, Netflix is just a button press away.
We need moments of boredom and reflection to push us into action, the attention economy is robbing us from that.
I’d even say the increase in anxiety related symptoms is due to this lack of idleness. The mind feels as if it’s super busy moving from active task to active task when in reality there were hours of just defaulting to reels.
I’ve released some utility libraries under permissive libraries. I like it when they get used. Even when it’s part of a large company’s closed-source app. Many people don’t like that, and that’s perfectly fine, that’s why there are different choices available.
What I’ll never understand is people who release their project with a permissive license and then get upset when a big company distributes their own version of the project in accordance with the license. If you don’t want that sort of appropriation then you need to pick a license that doesn’t allow it.
More than anything else, this sounds like a good lesson in why commercial game engines have taken over most of game dev. There are so many things you have to do to make a game, but they're mostly quite common and have lots of off-the-shelf solutions.
That is, any sufficiently mature indie game project will end up implementing an informally specified, ad hoc, bug-ridden implementation of Unity (... or just use the informally specified, ad hoc and bug-ridden game engine called "Unity")
I think on the How I Built This Instagram episode the Instagram founder said that Zuck was basically reading the data from Facebook's interactions and saw that the demographics and sharing tendencies of Facebook users meant that it was in a death spiral: people were moving interactions to private channels, reducing the available "friend" content. IMO, the causal factor here is that people became wary of public oversharing and the result was FB pivoting away from "social network" (OG Facebook) to "social media" (2010-2015 FB) and eventually just "media" (Instagram, Reels).
Looking back at what I posted on FB in 2008-2012 is like observing an alien from another planet: it was a completely different platform.