The scariest finding in this paper: the subjects couldn't tell it was happening. UPenn ran this study on 48 healthy adults. One group slept 8 hours. Another slept 6. Another slept 4. For 14 straight days. They tested cognitive performance every 2 hours from 7:30am to 11:30pm. The 6-hour group's reaction times, working memory, and sustained attention deteriorated on a near-linear curve. By day 14 they were performing at the same level as someone who hadn't slept at all in 48 hours. The 4-hour group hit that threshold by day 6. Here's the part that should unsettle everyone who thinks they "do fine" on 6 hours: the subjects' self-reported sleepiness flatlined after the first few days. Their brains kept getting worse. Their perception of how impaired they were stopped updating. The cognitive decline was invisible to the person experiencing it. The researchers found a hard threshold. Any wakefulness beyond 15.84 hours in a day produces cumulative neurobiological cost. That cost compounds every single day you exceed it and does not reset with a weekend of sleeping in. About 35% of American adults sleep less than 7 hours a night. 40% of those get 6 hours or less. In 1942 that number was 11%. We built an entire professional culture around a sleep schedule that this paper says is functionally equivalent to pulling consecutive all-nighters. "I'm fine on 6 hours" is the most common response to sleep research. The first thing chronic sleep debt destroys is your ability to notice chronic sleep debt.

FFmpeg is moving to Rust 🦀 Our use of C and Assembly in FFmpeg has been an unacceptable violation of safety. FFmpeg will be running 10x slower - but we're doing it for your safety. All your videos will appear green - safety first, working software later.

Some universities in at least two countries are asking students to get a CVE number assigned in an open source project to verify their academic results. Please don't do this, completely wrong incentive. This damages open source. It's a DDoS attack on maintainer attention.

More-so than any product I've ever used, GitHub Actions really drops you into the "pit of failure" from a security perspective

Most of the people who think that AI will replace developers are: - Managers who don’t code - Investors and startup founders selling it - People outside tech Developers: "It's helpful."

I don’t think people realize how much healthcare costs are driving big companies to fire and not hire. It costs them $30k per family, per year for premiums and care. Most of that goes to the massive, vertically integrated insurance companies that send weekly bills that no one reviews in details. And it doesn’t include the company overhead to deal with it all. It’s usually the 2nd largest expense after payroll. Which is insane It’s far easier to blame AI than it is to blame Healthcare costs. Want to increase jobs, wages and improve affordability for every American ? Break up the biggest insurance companies. Make divest non insurance companies. They don’t need thousands of subsidiaries. That’s how they game and abuse the system and increase costs for all of us. Call your senator and tell them to support the BreakUp Big Medicine Bill by @HawleyMO and @SenWarren.

Every. single. day. It's increasingly becoming difficult to do real work with GitHub. Git isn't the issue, since I can work offline. Its issues, PRs, CI, etc. Imagine going to work and your workstation randomly restarts a few times a day. That's what it feels like using GH.

Our biggest open-source repos are getting overwhelmed by AI slop which literally makes Github unusable (~a new pull request every 3 minutes). Fun new challenges in an agentic world!

🙌 Andrej Karpathy’s lab has received the first DGX Station GB300 -- a Dell Pro Max with GB300. 💚 We can't wait to see what you’ll create @karpathy! 🔗 blogs.nvidia.com/blog/gtc-20… @DellTech

It's so insanely disrespectful for an AI agent to talk to real people without consent or at least disclosure. This is the type of stuff I'm hugely supportive of government regulation. The FCC must expand the definition of robocalling and TCPA-style regulation to online AI.

Anyone and everyone working in security engineering or caring about security have their work cut out for them We’re so early in AI agents pushing code to prod without human intervention - but prompt injections are already spreading like wildfire. Infecting high-profile projects

Ahhhh, Codex 5.3 (xhigh) with a vague prompt just solved a bug that I and others have been struggling to fix for over 6 months. Other reasoning levels with Codex failed, Opus 4.6 failed. Cost $4.14 and 45 minutes. Full trace plus includes original issue: ampcode.com/threads/T-019cba… I know this prompt is relatively bad. Honestly, our stable release is in a week, and I was throwing some Hail Marys at the frontier models to see if I could get a clean, understandable fix for some of these bugs. By using `gh`, it grabs much better context from the issue, so its not terrible. The best thing that Codex did was eventually start reading GTK4 source code. That's where I ended up (see my GH issue), and I knew the answer was somewhere in there, but I didn't have the time or motivation to do it myself. The other models never went there, and lower reasoning efforts with 5.3 didn't go there either. Only xhigh went there. I think that was a critical difference. The final fix was decent. It was small, all in a single file, and very understandable. It had one bug I identified (you can see in the trace), and then I manually cleaned up some style. But, it did a great job. Definitely an "it's so over" moment. But at the same time, it feels amazing because now our next stable release will have this fix and I was able to spend the time working on other fixes as it went.

⚠️ Developers, please be careful when installing Homebrew. Google is serving sponsored links to a Homebrew site clone that has a cURL command to malware. The URL for this site is one letter different than the official site.

A very sincere thank you to all the contributors to our open-source projects. Your work makes a difference every day. 🙏 youtube.com/watch?v=0ciqJxJY… #opensource #sbom #vulnerability

We here in New Jersey are at our wits end with the complete absence of answers on drone activity over our neighborhoods. The federal government should either explain if these are our government’s assets in practice or, if these are truly unknown flights, responsibly remove one from sky for examination. Either option would lead us to an answer- and the public is rightfully demanding closure here. Nothing about what is occurring is acceptable. Governor Murphy and President Biden need to step up right now.

Very early work but making it so the Ghostty icon on macOS dynamically changes to match your custom color scheme. This icon is rasterized at runtime. If you change your theme it updates in real-time. A diagram of how this works attached. Definitely a terminal first. 👻 This is unfortunately macOS only because macOS has native APIs for changing the icon at runtime. Linux/GTK doesn't have any way to do this right now besides modifying files on disk (that are probably in non-writeable locations and cached anyways).

We're chatting with @mitchellh tomorrow all about Ghostty! What would you ask him, if given the opportunity? 🤔

We're seven days into #AdventOfCode 2024! Have you learned anything new about your programming language / tool / editor of choice?

The only real programming language benchmark is whether your product earns more money than competitors

Use SCA tools? @NCState researchers want to hear about your experience! ⏰45-minute interview study on software composition analysis. 💰 $60 compensation is offered. 🙊 All responses are anonymous. Details: s3c2.org/studies/sca-usabili… #SecurityResearch #AppSec