MurphyA/hacker-news huggingface dataset:
by xelxebar | 2025-04-25 15:13:05+00:00
> Can't really do that as easily in APL.

This doesn't match my experience at all. I present you part of a formal language over an AST, no cover functions in sight:

p⍪←i ⋄ t k n pos end(⊣⍪I)←⊂i ⍝ node insertion i←i[⍋p[i←⍸(t[p]=Z)∧p≠⍳≢p]] ⍝ select sibling groups msk←~t[p]∊F G T ⋄ rz←p I@{msk[⍵]}⍣≡⍳≢p ⍝ associate lexical boundaries (n∊-sym⍳,¨'⎕⍞')∧(≠p)<{⍵∨⍵[p]}⍣≡(t∊E B) ⍝ find expressions tainted by user input

These are all cribbed from the Co-dfns[0] compiler and related musings. The key insight here is that what would be API functions or DSL words are just APL expressions on carefully designed data. To pull this off, all the design work that would go into creating an API goes into designing said data to make such expressions possible.

In fact, when you see the above in real code, they are all variations on the theme, tailored to the specific needs of the immediate sub-problem. As library functions, such needs tend to accrete functions and function parameters into our library methods over time, making them harder to understand and visually noisier in the code.

To my eyes, the crux is that our formal language is _discovered_ not handed down from God. As I'm sure you're excruciatingly aware, that discovery process means we benefit from the flexibility to quickly iterate on the _entire architecture_ of our code, otherwise we end up with baked-in obsolete assumptions and the corresponding piles of workarounds.

In my experience, the Iversonian languages provide architectural expressability and iterability _par excellence_.

[0]:https://github.com/Co-dfns/Co-dfns/tree/master
GPT Code Viewer – Collaborate with ChatGPT on local code (no API keys)
by Bumiranks | 2025-04-25 15:13:12+00:00
Hey HN! I've built a small tool to securely expose your local project to ChatGPT using a browser interface and `cloudflared`. It makes debugging or explaining code to ChatGPT much easier – without the need for plugins or API keys.

GitHub: https://github.com/bumiranks/gpt-code-viewer

Would love to hear what you think!
by alephnerd | 2025-04-25 15:13:14+00:00
It has a base range of 150 miles [0], which won't resolve range anxiety worries as the average American travels 42 miles a day [1] and only has 2 seats. I think it will do well for hobbyists and EV enthusiasts, but it would be hard to compete with a slightly pricier Tacoma. When people buy a pickup truck, they often use it as a daily commuter as well.

> Got a road trip planned? These trips are all doable on a single charge of our standard battery. If you want to go even farther, our extended range battery increases the range to a projected 240 miles from a projected 150 miles. [0]

[0] - https://www.slate.auto/en/charging

[1] - https://www.axios.com/2024/03/24/average-commute-distance-us...

Edit: The average pickup truck purchaser's has a household income of around $110,000 and 75% live outside cities [0]. When they are purchasing a pickup, it is meant to be both a daily driver and an errand vehicle.

Spending $20,000 on a 2 seater bench pickup with 150mi range is ludicrous when you can buy a used 5 seater Honda Fit or Toyota Tacoma for $0-7k more.

This is most likely targeted at fleet usecases like a factory or local deliveries, but this won't make a dent in the primary demographic that purchases pickups, and being overly defensive is doing no favors in thinking about HOW to build a true killer app EV for the American market.
by SonOfLilit | 2025-04-25 15:13:35+00:00
First time something on-prem, maybe F5. Second time AWS.

Oh, I just remembered I had another encounter with the AWS WAF.

I had a Jenkins instance in our cloud account that I was trying to integrate with VSTS (imagine github except developed by Microsoft, and still maintained, nevermind that they own github and it's undoubtedly a better product). Whenever I tried to trigger a build, it worked, but when VSTS did, it failed. Using a REST monitor service I was able to record the exact requests VSTS was making and prove that they work with curl from my machine... after a few nights of experimenting and diffing I noticed a difference between the request VSTS made to the REST monitor and my reproduction with curl: VSTS didn't send a "User-Agent" header, so curl supplied one by default unless I added I think -H "User-Agent:", and therefore did not trigger the first default rule in the AWS WAF, "if your request doesn't list a user agent you're a hacker".

HAHAHA I'VE BEEN WAFFED AGAIN.
by hiatus | 2025-04-25 15:14:19+00:00
> Nowadays you must have a flashy website. You must host everything on a single managed VCS provider, or a programming package ecosystem hoster. You must depend on corporations to give you free things, in exchange for you giving them everything about you (otherwise you must pay out of pocket for everything). You must do what everyone else does.

You keep saying _must_. Why _must_ you do what everyone else does? To what end? To get contributors to your project? To get funding? No one is stopping anyone from starting a project on sourceforge.
by kcplate | 2025-04-25 15:14:45+00:00
I am on my third MacBook (recently acquired #3 this month), since 2008. None have needed repair or “upgrades”. I find that an average longevity of 8.5 years on a laptop is pretty amazing.

For what it’s worth, my wife is now using the one I just retired…so it ain’t dead or unusable yet.
by __MatrixMan__ | 2025-04-25 15:14:59+00:00
One thing that cheap solar panels can't do is produce feedstock for a 3d printer. The effective wattage of something that prevents the need to ship something from the other side of the planet could be quite high even if it's actual wattage is low.

That's not to say that we're there yet. Specialists in other countries still make a much better widget than the robot in my closet and they will for a while. But it's a step.
by PaulHoule | 2025-04-25 15:15:22+00:00
I like it. My wife runs a riding academy and we use a Honda Fit the way some people would use a pickup truck: we can fit 10 bales of wood shavings in the back. [1] We’re dreading when it fails because they don’t make the fit anymore and compact hatchbacks seem to be on the way out. Recent experiences have made me a bit of a Buick enthusiast and I can see driving a 2005-ish sedan except that I won’t get those sawdust bales into the trunk. We are also thinking of fitting in EV into the fleet, so far the used Nissan Leaf has been the main contender but this is a pickup truck I could get into.

[1] We were profitable from day one because we didn’t buy a $80,000 pickup on day one the way everybody else does.
by openplatypus | 2025-04-25 15:15:47+00:00
> Object storage for Kafka? Wouldn't this 10x the latency and cost?

It will become slower. It will become costlier (to maintain). And we will end up with local replicas for performance.

If only people looked outside AWS bubble and realised they are SEVERELY overcharged for storage, this would be mute point.

I would welcome getting partition dropped in favour of multi-tenancy ... but for my use cases this is often equivalent.

Storage is not the problem though.
by charles_f | 2025-04-25 15:16:01+00:00
Their product is somewhat different though, Amazon sells stuff and cloud. Microsoft sells business tools and cloud. Google sells Gmail, a declining search engine and cloud. Apple sells iphones and macs. Facebook sells people's data, advertising and opinion.

Not that others wouldn't and don't manipulate the market and lobby policy, and exploit humans in bad ways, but the basic precept makes it that Facebook needs to protect something fundamentally more immoral than others, hardened behavior and corruption is somewhat to be expected.
by Jensson | 2025-04-25 15:16:21+00:00
> If it was a rejection of anything, it was of any assumption of good faith on the part of either government or scientific institutions. Why that happened, as quickly and thoroughly and as polarized along clear partisan lines as it was, is a mystery.

It isn't a mystery, it was the bullshit and lies that happened the first month of covid in USA, many people then stopped listening even when the bullshit and lies stopped. I remember the cases in New York exploding and the local democrat told people to continue as normal since its nothing to worry about, and that masks doesn't prevent spread so don't go buy masks, that was how it all started.

They say they had to tell those lies to save resources for those who needs it, but that made people stop trusting them and that counts for so much more. I hope they learned their lesson, but likely they didn't as they never said "Sorry we lied to you, we shouldn't have done that".
by classichasclass | 2025-04-25 15:17:31+00:00
I loved the Saturn plastic doors. The salesdroids were conditioned to call them "polymer panels" and I got corrected when I bought my SL2 back in the day, but I was sold when in their own showroom he kicked the door in, it visibly dented, and then popped itself right back out with no damage to either the paint or the pla, uh, polymer.

That SL2 went from California to Maine, down to Georgia and back to California. It never had any dings and had only a few scratches in the paint. My Civics seem to get dinged if you look at them wrong.

I wish I could have said the same about the Saturn's stickshift, though. That actually fractured when I was in Gilroy. I mean, the shaft literally snapped.
by julienchastang | 2025-04-25 15:17:33+00:00
> We can finally just take a photo of a textbook problem...

You nailed it. LLMs are an autodidact's dream. I've been working through a physics book with a good-old pencil and notebook and got stuck on some problems. It turned out the book did a poor job of explaining the concept at hand and I worked with ChatGPT+ to arrive at a more comprehensible derivation. Also the problems were badly worded and the AI explained that to me too. It even produced that Latex document study guide! Moreover, I can belabor a topic which I would not do with a human for fear of bothering them. So for me anyway, AI is not enabling brain rot, but brain enhancement. I find these technologies to be completely miraculous.
by xhkkffbf | 2025-04-25 15:17:42+00:00
Was he a "citizen scientist"? Could we say he had "tenure" at the Abbey? And weren't many of the universities still effectively branches of the church in the 1800s? Was the Abbey co-equal to any of the other educational institutions? The first lay president at Yale wasn't hired until 1899?

And while we're discussing this, are there also undocumented scientists? What if you just have a green card?

I get that they're trying to be welcoming by coining the phrase "citizen scientist", but it seems to open up other debates.
by CobaltFire | 2025-04-25 15:17:45+00:00
Would a used Metris cargo work? We have the passenger version and it’s excellent. True 1000kg load rating, and the cargo version can be had extremely cheaply.

We also have our eye on this truck, but with less urgency since our van does everything we could want.

The Telo MT1 also has us eyeing it…
by jonstewart | 2025-04-25 15:17:55+00:00
I had an old Nissan XE truck for a few years. I loved it, the thing was simplicity itself.

I assume there's still a lot of vaporware here, but if they can make it reliable and avoid the teething issues of new cars, I'd probably impulse-purchase one. I would also love to see options for AWD and a full-length bed.
by augusto-moura | 2025-04-25 15:18:05+00:00
How would that be hard? Getting the absolute path of a string is in almost all languages stdlibs[1]. You can just grep for any string containing slashes and try resolve them and voilá

Resolving wildcards is trickier but definitely possible if you have a list of forbidden files

[1]: https://nodejs.org/api/path.html#pathresolvepaths

Edit: changed link because C's realpath has a slightly different behavior
by bryanlarsen | 2025-04-25 15:18:09+00:00
> And one less set of electronics to fail.

In my experience, cranks are relatively complicated mechanical linkages, failed quite regularly and were sometimes not easy to repair.

OTOH, I've never seen an electronic opener fail since the 80's. Yes, sometimes they don't have the torque to open a window when it's iced closed, but that's an advantage, not a disadvantage -- the ability to put a lot of torque on a manual opener was the cause of many failures.

A couple of articles on the Slate have also pointed out that electric openers are cheaper than manual ones.
by lucianbr | 2025-04-25 15:18:15+00:00
There should be some limits and some consequences to the insurer as well. I don't think the insurer is god and should be able to request anything no matter if it makes sense or not and have people and companies comply.

If anything, I think this attitude is part of the problem. Management, IT security, insurers, governing bodies, they all just impose rules with (sometimes, too often) zero regard for consequences to anyone else. If no pushback mechanism exists against insurer requirements, something is broken.
by MisterBastahrd | 2025-04-25 15:18:29+00:00
The entire AI debacle is just a gold rush, but instead of poor people rushing to California to put their lives at risk, this one is gated by the amount of money and influence one needs to have before even attempting to compete in the space. Nobody is going to "win," ultimately, except the heads of these companies who will sock enough cash away to add to their generational wealth before they inevitably fall flat on their faces and scale back their plans.

Remember 3 years ago when everything is gonna become an NFT and the people who didn't accept that Web 3 was an inevitability were dinosaurs? Same shit, different bucket.

The people who are focused on solving the small sorts of problems that AI is decent at solving will be the ones who actually make a sustainable business out of it. This general purpose AI crap is just a glorified search engine that makes bad decisions as it yaps at you.
by anenefan | 2025-04-25 15:19:04+00:00
I am excited to finally after some near 30 years that research is taking a serious look into the role creatine could play for better mindset. I have myself urged people I know that could be depressed to try small doses but ask their doctor first. Sadly none have ever told me it made a difference for them.

My experiment with taking it was very clear - long story short, after reading an article in New Scientist mid 90s, took small doses in the hope it'd help repair some weakened muscle due to injury. After some time, (don't recall) I noted a few improvement in other things, immune system but in particular an improvement in my mind set/ outlook - finding nearlly all my days my mood was very mellow and not wasting so much time chewing on BS catty remarks and other stuff. I wouldn't say I had been depressed per se but had been in a very dark place - my GP at the time barely raised an eyebrow when I informed them of the remarkable difference in my mindset. I thought it was fairly stark difference though dealing with when the day went snafu fubab, mellow is quite apart from being POed - for those of you who remember Daria - think a younger version of Anthony DeMartino - blood shot eye even as I ranted when some idiot or something else had really poked the day.
by Espressosaurus | 2025-04-25 15:19:25+00:00
The amount of cheating and ease of it has gone way up based on my monitoring of teaching communities. Like it's not even close in terms of before ChatGPT vs. after ChatGPT.

Worse yet many educators are not being supported by their administration since enrollments are falling and the admin wants to keep the dollars coming regardless of if the students are learning.

It's worse than just copying Wikipedia because plagarism detectors aren't as effective and may never be.

It's an arms race and right now AI cheating has structural advantages that will take time to remove.
by blenderob | 2025-04-25 15:19:42+00:00
> This case highlights an interesting tension in web security: the balance between protection and usability.

But it doesn't. This case highlights a bug, a stupid bug. This case highlights that people who should know better, don't!

The tension between security and usability is real but this is not it. Tension between security and usability is usually a tradeoff. When you implement good security that inconveniences the user. From simple things like 2FA to locking out the user after 3 failed attempts. Rate limiting to prevent DoS. It's a tradeoff. You increase security to degrade user experience. Or you decrease security to increase user experience.

This is neither. This is both bad security and bad user experience. What's the tension?
by stingraycharles | 2025-04-25 15:19:56+00:00
Yup. Were a database company that needs to be compliant with SOC2, and I’ve had extremely long and tiring arguments with our auditor why we couldn’t adhere to some of these standard WAF rulesets because it broke our site (we allow people to spin up a demo env and trigger queries).

We changed auditors after that.
Open Sourcing our Startup – AI-powered avatars (UE 5.2)
by henryobj | 2025-04-25 15:19:59+00:00
Hi HN

TL;DR: Had to shut down our startup SPAR - Open Sourcing the code https://github.com/spar-app/spar-services

In 2024, we developed an AI agent infrastructure to support realistic, personality-driven AI avatars in real-time. The business use case was to provide a new training (sparring) and onboarding tool for companies. In particular, for companies that need to train customer-facing employees (ex, high-end retail)

To achieve the above, we were orchestrating three servers: 1. The first to run a Metahuman on Unreal Engine (5.2); 2. The second to run a custom finetuned open-sourced LLM; 3. The third to handle all the rest, connecting to the above two servers and streaming (WebRTC) on the client's browser, while coordinating with external APIs (Text-to-Speech and Speech-to-Text, etc.).

Key features: * Real-time interactions with distinct avatar personalities. * Fine-tuning toolkit for customizing and refining LLM-generated dialogues. * Structured feedback system that links actionable guidance directly to conversation points.

The future will use AI and immersive experiences to practice soft skills. We will not be building this future, but if you are, feel free to use our work to accelerate yours
by andoando | 2025-04-25 15:20:46+00:00
Sapir whorf doesnt negate the possibility of forming the same ideas using more primitive constructs.

The ability of any language speaker being able to learn the same mathematics or computer program goes to show that.

Id contest that spoken/written language is even necessary for thinking. At the very least, there is a large corpus of thought which does not require it (at some point humans spoke no or very little words, and its their thought/intention to communicate that drove the formation of words/language), so its silly to me to think of learned language as some base model of thought.
by mrspuratic | 2025-04-25 15:20:58+00:00
AFAICT it's also (though I'm very rusty) in ModSecurity, if XML content processing is enabled then rules like these will trip:

SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@pmFromFile lfi-os-files.data" SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@pmFromFile unix-shell.data" ...

where the referenced files contain the usual list of *nix suspects including the offending filename (lfi-os-files.data, "local file inclusion" attacks)

The advantage (whack-a-mole notwithstanding) of a WAF is it orders of magnitude easier to tweak WAF rules than upgrade say, Weblogic, or other teetering piles of middleware.
by mjr00 | 2025-04-25 15:21:00+00:00
Yeah. SOC2 reminds me that I didn't mention sales as well, another security-as-economics feature. I've seen a lot of enterprise RFPs that mandate certain security protocols, some of which are perfectly sensible and others... not so much. Usually this is less problematic than insurance because the buyer is more flexible, but sometimes they (specifically, the buyer's company's security team, who has no interest besides covering their own ass) refuse to budge.

If your startup is on the verge of getting a 6 figure MRR deal with a company, but the company's security team mandates you put in a WAF to "protect their data"... guess you're putting in a WAF, like it or not.
by frizlab | 2025-04-25 15:21:03+00:00
When was your most recent attempt? I think the `vapor` tool has been updated a few weeks ago[1]. Basically it was an old tool that worked around some limitations around SPM and Xcode, but it is mostly unneeded nowadays. It is basically a simple template resolver now, and I think the templates in question have been updated too.

[1] <https://blog.vapor.codes/posts/toolbox-rewrite/>
by Invictus0 | 2025-04-25 15:21:31+00:00
If Slate succeeds, it would be the total inversion of Tesla's original masterplan strategy of starting with a supercar and then slowly working their way down the value chain. And what's really astonishing is that, not only is this the cheapest electric car in the country, it's one of the cheapest new cars in the country, period.

https://www.cars.com/articles/here-are-the-10-cheapest-new-c...
by nathan_compton | 2025-04-25 15:21:34+00:00
This seems like Chesterton to me. Good writer, but I take exception to his world view. We should simply doubt that which is warranted to doubt and be confident in that which warrants confidence. If modern people doubt truths more than people used to, perhaps its because those so-called truths aren't so obvious as some people would have you believe.

"But the new humility makes a man doubtful about his aims, which will make him stop working altogether."

This just fundamentally misunderstands what aims are. They can neither be doubted or correct. I can doubt empirically, or epistemologically, but I can't doubt that I want to eat a doughnut or that I want to be healthy or that I want a world with less cruelty in it. It's a waste of time and energy to doubt these things, although I can try to line up all my desires and figure out how they stack up with one another when I try to make plans, the efficacy of which is in the realm of the believable. I can look at other people's actions, try to determine their desires, and decide whether to assist them or interfere with them or fight them, but when I do this its not a cosmic battle about truths. Its just two people acting out on their desires in a shared world.
by niemandhier | 2025-04-25 15:21:36+00:00
I think in the best case scenario AI will greatly reduce quality in many areas but at the same time greatly reduce costs.

Furniture, cutlery and glassware my great-grandparents owned was of a much higher quality than anything I can get but to them having a large cupboard build was an investment en par to what buying a car is to me.

Automatised mass production lowered the prize at cost of quality , same could happen to the white-collar services AI can automatise.
by 1inuxoid | 2025-04-25 15:21:40+00:00
I am also using this setup powered by chezmoi. It has brilliant secrets support and powerful templating allowing cross-platform setups. I do get lost in its state sometimes when updating `run_once_*` scripts and trying to make sure they still run. Another friction point is external tools installed via .chezmoiexternal.toml from GitHub.
by bjornsing | 2025-04-25 15:22:06+00:00
I think the problem is that if you want quick access to all messages with a particular key then you have to maintain some kind of index over all persisted messages. So n would be total number of persisted messages as I read it, which can be quite large. But even storing them in the first place is O(n), so O(n log n) might not be so bad.