MurphyA/hacker-news huggingface dataset:
by lrvick | 2025-04-08 03:15:20+00:00
Indeed you do not have to believe me.

> git clone https://codeberg.org/stagex/stagex

> cd stagex

> make

Several hours later your "out" directory will contain locally built OCI images for every package in the tree, and the index.json for each should contain the exact same digests we commit in the "digests" folder, and the same ones multiple maintainers sign in the OCI standard "signatures" folder.

We build with only a light make wrapper around docker today, though it assumes you have it configured to use the containerd image store backend, which allows for getting deterministic local digests without uploading to a registry.

No reason you cannot build with podman or kaniko etc with some tweaks (which we hope to support officially)

> Do you all document how you got around system level sources of non-determinism? Filesystems, metadata, timestamps, tempfiles, etc? This would be a great thing to document for people aiming for the same thing.

We try to keep our package definitions to "FROM scratch" in "linux from scratch" style with no magic to be self documenting to be easy to audit or reference. By all means crib any of our tactics. We use no global env, so each package has only the determinism tweaks needed (if any). We heavily referenced Alpine, Arch, Mirage, Guix, Nix, and Debian to arrive at our current patterns.

> What are you all using to verify commits? Are you guys verifying signatures against a public PKI?

We all sign commits, reviews, and releases with well published PGP keys maintained in smartcards, with expected public keys in the MAINTAINERS file. Most of us have keyoxide profiles as well making it easy to prove all our online presences agree with the expected fingerprints for us.

> Super interested as I manage the reproducibility program for a large software company.

By all means drop in our matrix room, #stagex:matrix.org . Not many people working on these problems. The more we can all collaborate to unblock each other the better!
by andrewfromx | 2025-04-08 03:15:30+00:00
curl 'https://api.coingecko.com/api/v3/simple/price?ids=bitcoin&vs...' nice!

curl -H 'x-access-token: goldapi-do7ibsm96twxqo-io' 'https://www.goldapi.io/api/XAU/USD'
by ziofill | 2025-04-08 03:16:29+00:00
Ha. My first digital camera was a Pentax kx from 2010. I didn’t know about RAW standards and I started using DNG by pure luck. BTW I loved that camera: it had the image stabilizer built into the sensor, which meant I could use amazing k-mount lenses from the 80s and still use image stabilization (unlike my roommate who had a Canon).
by darubramha | 2025-04-08 03:19:26+00:00
Fair. I appreciate the honesty — even if it's a bit brutal :)

Security is a top priority for this project, and I'm actively working to tighten things up. This initial version was launched to validate the concept, and admittedly, there were oversights (including an unauthenticated DELETE endpoint that was highlighted).

If you're open to it, I'd love to learn more about what you'd want to see from a security standpoint in a tool like this. I'm building in public and happy to be corrected where needed.

Thanks again for keeping things real.
by transpute | 2025-04-08 03:20:00+00:00
From Linux Security Summit 2019, a retrospective on mandatory access control and bounding "damage that can be caused by flawed or malicious applications" in Android, iOS, macOS, Linux, FreeBSD and Zephyr, https://static.sched.com/hosted_files/lssna19/e5/LSS2019-Ret...

For the past 26 years, the speaker has been engaged in the design, implementation, technology transfer, and application of flexible Mandatory Access Control (MAC). In this talk, he describes the history and lessons learned from this body of work. The background and motivation for MAC is first presented, followed by a discussion of how a flexible MAC architecture was created and matured through a series of research systems. The work to bring this architecture to mainstream systems is then described, along with how the architecture and implementation evolved. The experience with applying this architecture to mobile platforms is examined. The role of MAC in a larger system architecture is reviewed in the context of a secure virtualization system. The state of MAC in mainstream systems is compared before and after our work. Work to bring MAC to emerging operating systems is discussed.

video: https://www.youtube.com/watch?v=AKWFbxbsU3o
by shakna | 2025-04-08 03:20:21+00:00
Coming from the other direction, luarocks binding to just one version of Lua, is an absolute pain in the ass.

I've got some libraries that support five or six different versions of Lua. Building packages for all of them basically means throwing luarocks out the window, because linking to multiple Lua runtimes ti=o luarocks does all kinds of truly heinous things.

You can end up with the library and headers linked from different runtimes, simply because it isn't following what the local system says is available.
by p1necone | 2025-04-08 03:22:33+00:00
As a New Zealander who's been to Australia + a small handful of other countries I can vouch for Australia having a uniquely good convenience store dairy based drink industry. OAK is another old faithful brand I miss in NZ. Also Hungry Jacks (Burger King) there uses cream instead of milk in the soft serve and it's noticeably better.
by leecarraher | 2025-04-08 03:23:33+00:00
By defined format I of course don't mean random, or that it doesn't have structure, you have to be able to read it back otherwise what would be the point. I mean when you write out jpeg it has to adhere to a standard otherwise it isnt jpeg. Granted the jpeg format has evolved and has been augmented over the years. But it still is standard across iterations and devices.
by Izkata | 2025-04-08 03:23:49+00:00
> But I like to understand how tools work, and I personally found Mercurial harder to understand, slower to use, and much less flexible.

It's a relief to hear someone else say something like this, it's so rare to find anything but praise for mercurial in threads like these.

It was similar for me: In the early/mid 2010s I tried both git and mercurial after having only subversion experience, and found something with how mercurial handled branches extremely confusing (don't remember what, it's been so long). On the other hand, I found git very intuitive and have never had issues with it.
by cmurf | 2025-04-08 03:24:35+00:00
Sure but Trump also doesn't support free trade, doesn't believe in it, and doesn't at all care about the fallout from ending it.

The Congress legally can revoke delegation of its tariff/tax power. But the political cost is too high. The tariffs will stick no matter what until the 2026 election. There is no chance 2/3rds of the House overrides a presidential veto.
by magicalhippo | 2025-04-08 03:25:39+00:00
They're detecting patterns predominantly bots use. The fact that some humans also use them doesn't change that.

Back when I was playing Call of Duty 4, I got routinely accused of cheating because some people didn't think it was possible to click the mouse button as fast as I did.

To them it looked like I had some auto-trigger bot or Xbox controller.

I did in fact just have a good mouse and a quick finger.
by bob1029 | 2025-04-08 03:26:42+00:00
I don't see why not. Recursive CTEs allow you to express pretty much anything you desire.

You could also expose additional functions corresponding to the external tools that you would like the agent to have access to and pass these as arguments to additional UDFs.

You could also lean into data-driven and express much of the configuration in tables and then use the enhanced SQL dialect to tie everything together at runtime. In SQLite, during UDF execution, arbitrary queries can be ran. You could pull tool descriptions, parameter lists, enums, etc. from ordinary SQL tables without having to pass explicit args to the functions.
by cma | 2025-04-08 03:28:11+00:00
If the memory savings he got were fully read or fragmented with other stuff on cache lines that are read in every frame (not likely for static world actors), it could be ~10% of CPU memory bandwidth on mobile every frame at 120hz on an lpddr4 phone.

A big problem with them is they are so heavyweight you can only spawn a few per frame before causing hitches and have to have pools or instancing to manage things like bullets.

I think in their Robo Recall talk they found they could only spawn 10-20 projectile style bullets per frame before running into hitches, and switched to pools and recycling them.
by cma | 2025-04-08 03:29:17+00:00
The actors in unreal are such bloated single inheritance god classes that with a few actor components they take up more like a 4K memory page not part of a cache line, especially in editor builds.

But they do have a more optimized entity component system now too.

To be fair, a single transform now that things are 64 bit coordinates I think is bigger than a cache line too.
by mjcarden | 2025-04-08 03:32:27+00:00
I think that was the first time I ever saw Tridge deliver a conference presentation and it was to a packed lecture theatre at the ANU. He described how he 'hacked' BitKeeper by connecting to the server via telnet and using the sophisticated hacker tools at his disposal to convince Bitkeeper to divulge its secrets, he typed:

help

The room erupted with applause and laughter.
by chiho13 | 2025-04-08 03:32:42+00:00
I made an iOS app for live translating conversations and long talks. It has many use cases, from talking with clients on business trips to talking with relatives who can't speak much english, and medical appointments.

Expats and immigrants can use the app as an interpreter in the doctor's office, eliminating the need to wait for a long time to schedule an appointment with a human interpreter.

You might be wondering, why not just use Google Translate?

My app accurately transcribe and translate detect drugs names, conditions and other medical terminology, whereas Google Translate make more mistakes.

The language exchange is also hands free, so you don't need to keep taking turns to press the mic button.
by EasyMark | 2025-04-08 03:33:37+00:00
So the idea is to destroy 75% of the economy that is the service/tech economy? I'm sure that will work out well for all of us. He could have had more pro business, less regulations, trade agreements, but he didn't he just set the house on fire and wants to see what he can make out of the ashes. I guess we can all get jobs in construction to build the newest 3rd world nation on the world playing field?
by iJohnDoe | 2025-04-08 03:34:22+00:00
> It is now believed to be 53 to 67 meters, roughly the height of a 15-story building.

> This is significant because it is bigger than the 50-meter threshold for activating planetary defense plans.

> If the asteroid still had a more than 1% chance of hitting Earth, "the development of one or more deflection missions would already be starting now", Moissl said.

Well, I hope they are right, because it appears we’re going to miss the opportunity to do anything about it if they are wrong.
by Izkata | 2025-04-08 03:36:06+00:00
> I just wish they'd extend git to have better binary file diffs

It's not built-in to git itself, but I remember seeing demos where git could be configured to use an external tool to do a visual diff any time git tried to show a diff of image files.

> and moved file tracking.

Check out -C and -M in the help for git log and blame. Git's move tracking is a bit weirder than others (it reconstructs moves/copies from history rather than recording them at commit), but I've found it more powerful than others because you don't need to remember a special "move" or "copy" command, plus it can track combining two files in a way others can't.
by kaibee | 2025-04-08 03:36:56+00:00
Not OP but hobby gamedev here:

Yes, but that's why ~~good~~ fun enemy AI for games is both an art and a science.

My approach is that the path from the pathfinding algorithm is just a known good solution. The path the agent gets back from the algorithm doesn't have to be just a list of Vector3's for the window centers. It could get back a list of each window quad instead, and then aim for a random point in the next quad shifted by the distance between the two quads. You can also do some raycasts from each agent occasionally to do local-avoidance-type behavior (which you'll likely have to do anyway so that enemies spread out a bit and avoid non-static geometry).
by out-of-ideas | 2025-04-08 03:38:26+00:00
is it me or does the side loop endlessly loading thousands of requests? to at least:

- https://public-api.wordpress.com/wp-admin/rest-proxy/#https:...

- https://s0.wp.com/wp-content/js/rlt-proxy.js?m=20240709

blocking these via regex made the page load up really nice and fast

edit: formatting
by digianarchist | 2025-04-08 03:39:56+00:00
One cool undocumented GitHub Actions trick I spotted at work was the ability to use wildcards to match repository_dispatch event names:

on: repository_dispatch: - security_scan - security_scan::*

Why would you want to do this?

We centralize our release pipelines as it's the only way to force repositories through a defined reusable workflow (we don't want our product teams to have to maintain them).

This allows us to dispatch an event like so:

{ "event_type": "security_scan::$product_name::$version", "client_payload": { "field": "value" } }

Then it is far easier to identify which product and version a workflow is running when looking in the Actions tab of our central release repository.
by int_19h | 2025-04-08 03:40:02+00:00
> Another one was the farmer/fox/chicken/cabbage/river problem, but you modify the problem in unexpected ways, by stating, for example, that the cabbage will eat the fox, or that the farmer can bring three items per trip. LLMs used to ignore your modifications and answer the original problem.

This is still the case. Very few non-reasoning models can solve such variations correctly, even SOTA models. Worse yet, not only they confidently give wrong responses, but they often do so even when specifically told to use CoT, and they continue giving wrong answers in a loop even if you specifically point out where they are wrong.

Reasoning models do much better, though. E.g. QwQ-32b can solve it pretty reliably, although it takes a lot of tokens for it to explore the possibilities. But at least it can fairly consistently tell when it's doing something wrong and then backtrack.

One other example that befuddles even the reasoning models is frying-cubes-in-a-pan and equivalents, e.g. this version from Simple Bench:

> Beth places four whole ice cubes in a frying pan at the start of the first minute, then five at the start of the second minute and some more at the start of the third minute, but none in the fourth minute. If the average number of ice cubes per minute placed in the pan while it was frying a crispy egg was five, how many whole ice cubes can be found in the pan at the end of the third minute? Pick the most realistic answer option. A) 5 B) 11 C) 0 D) 20
by toomuchtodo | 2025-04-08 03:42:01+00:00
Global solar installations could reach 1 terawatt next year - https://pv-magazine-usa.com/2025/03/19/global-solar-installa... - March 19th, 2025 (“BloombergNEF reports that the world installed nearly 600 gigawatts of solar power in 2024, closely aligning with projections that annual global solar installations will surpass 1 terawatt within the next few years. Although projections for 2025 currently fall short of that pace, early forecasts often underestimate actual deployment.”)

Sun Machines: Solar Power Is Going to be Huge - https://www.economist.com/interactive/essay/2024/06/20/solar... | https://archive.today/aXhc8 - June 20th, 2024

The exponential growth of solar power will change the world - https://www.economist.com/leaders/2024/06/20/the-exponential... | https://archive.today/T6LnS - June 20th, 2024
by skylanh | 2025-04-08 03:42:03+00:00
I find HN rife with its own form of "I'm too smart" bro-science.

Your cardiologist spoke directly with you; they're a trained, accredited, licensed, and in good standing professional. Go with your interpretation of what they told you.

Additionally, lets learn how to over-come HN's own form of bro-science because I'm pissed off right now.

Step 1: go to pubmed and throw the most basic of terms in: "marathon training cardiology damage"

Step 2: Quickly review the studies listed; we want to see studies after the advent of advanced hormone and mRNA quantification--that's around 2005 to 2010 or so--or anything within the last 5-10 years.

Step 3: Read through one study especially if it appears to be well setup or specific to what we are trying to understand--we can look at the abstract if we have some knowledge in the area, or are just getting a feel for the topic.

Step 3b: take note of terms; this study is an easy one and has everything we want to see in the abstract: https://pubmed.ncbi.nlm.nih.gov/36767963/ "Effects of Long-Term Endurance Exercise on Cardiac Morphology, Function, and Injury Indicators among Amateur Marathon Runners" in the Int J Environ Res Public Health . 2023 Jan 31;20(3):2600. doi: 10.3390/ijerph20032600.

Step 3c terms:

- cardiac morphology, function, injury indicators;

- left ventricular end-diastolic volume and left ventricular end-systolic volume indicator;

- myocardial injury indicators, serum levels of cardiac troponin I, creatine kinase (CK), creatine kinase-MB (CK-MB), lactate dehydrogenase (LDH), aspartate aminotransferase (AST), and N-terminal pro-b-type natriuretic peptide (NT-proBNP)

- Long-term high-intensity endurance exercise (not indicated; but "High intensity Steady State" (HISS) and similar will creep into our vocabulary)

Step 4: refine search to something like "cardiac morphology myocardial injury marathon amateur"; throw on "biological indicators", "creatine kinase"

Step 5: rinse, repeat, and read deeper into some of the studies.

Anyways, "Long-term high-intensity endurance exercise caused some damage to the hearts of amateur runners." and your cardiologist said the same. Or you can believe some rando giving medical advice on this forum. And honestly, I'm beyond irritated at the consistently bad takes on medicine, biomedicine, and exercise on YC HN.
by alex-robbins | 2025-04-08 03:42:05+00:00
> a sort of homoiconicity of code and data (hence JSON as a data format)

I get that "sort of" was an attempt to hedge, but really, this isn't even close. Homoiconicity here would be if all javascript source files were valid JSON documents. A weaker version would be if it were common to use JSON to represent an arbitrary javascript program, but I've never heard of that, either. (For a good explanation of this weaker sense of homoiconicity, this stackoverflow page [1] is pretty good.)

[1]: https://stackoverflow.com/questions/31733766/in-what-sense-a...

To use Clojure as an example of a language that is homoiconic, you can take any Clojure source file, send it to an EDN parser (EDN being Clojure's equivalent of JSON), and not only will parsing succeed, but the result will be a complete representation of the program (you could execute it if you wanted to). In contrast, if you try to send JS to a JSON parser, you'll get an error as soon as it hits a function definition, or a for loop, or an operator, or whatever.
by darubramha | 2025-04-08 03:43:31+00:00
You didn’t miss anything in the docs. Right now uncurl.dev only supports http/https (and technically ftp, though it’s untested). Protocols like dict://, smtp://, etc. aren’t parsed or handled correctly yet, which is why you’re seeing that “invalid URL” error.

I hadn’t actually considered dict:// usage, I see the bug report as well, thanks, will see if I can include it.
by swalling | 2025-04-08 03:43:49+00:00
You linked to an editorial not a peer-reviewed paper. Moreover it’s from 2014-2018 and is therefore missing a more updated understanding of coronary plaque composition in runners. https://pmc.ncbi.nlm.nih.gov/articles/PMC11012899/

You should probably lace up your running shoes given that obesity and inactivity will for sure kill you.
by kstrauser | 2025-04-08 03:44:33+00:00
A few years ago my wife and I went to the Lard Butt 1K. It was a single lap around the Polo Fields track, with beer stands before and after and donut stands every few hundred feet around the course. Instead of time groups they had weight classes. I dressed as The Dude. We ambled next to a guy dressed as a cockroach pulling a wagon full of his similarly dressed children; he was Papa Roach.

We've got our problems here, to be sure, but there's nowhere I'd rather be.
by makeitdouble | 2025-04-08 03:45:21+00:00
Worth noting that the relations to elder is really getting rocky, and people are rethinking them in both directions.

We can't hide from the influence the elder generations had on the current situation. Japan is a developed nation with a crazy low crime rate and incredible infrastructure thanks to them. It's also a social mess and the poster child of stagnation thanks to them.

This whole trading card game surfaces both sides of the coin, with what these people are bringing to the community and also why small kids shouldn't look to much upon them as it's a recipe for trouble.
by imgabe | 2025-04-08 03:45:41+00:00
> Foreign governments have long accused the U.S. Agency for International Development of being a front for the CIA or other groups dedicated to their collapse. In the case of Cuba, they appear to have been right.

https://foreignpolicy.com/2014/04/03/cuban-twitter-and-other...

I don’t think Foreign Policy is considered some crackpot conspiracy theory rag.

USAID was run by the State department, which is known to provide cover for the CIA (every embassy has CIA officers working out of it). This is not a “conspiracy theory”. The CIA does exist and they do spy on other countries.

What do you think the CIA does? Do you think they go to other countries and open an office with a big sign saying “Hello, this is the CIA”?
by t0lo | 2025-04-08 03:46:22+00:00
That's america. The rest of the western world (Ireland, UK, Aus etc) tend to be much more pro Palestine than israel, I'm assuming due to less biased media (The NYT edited that hospital bombing headline 4 times once published to hide israels fault)

In Australia 60% of people view palestine favourably whereas only 39% view israel favourably (ADL 2024 Antisemitism survey)https://www.adl.org/adl-global-100-index-antisemitism
by milesrout | 2025-04-08 03:48:11+00:00
Be the change you want to see in the world. It is supposed to be a user agent. Instead of imposing this cost on everyone else, if you think it is important to be able to have fine grained control over cookies, make it happen.

Advantages:

1. A single UI in each browser instead of a different one on each website 2. The functionality would be built and maintained by someone with allied rather than adverse interests to the user.

Also you can disable cookies quite easily and whether your UI supports it or not is totally irrelevant anyway. If you use a web browser that sends cookies to websites then that you have authorised it to do so is your responsibility. Use a different browser or don't use one if you don't like it.
by Niksko | 2025-04-08 03:50:21+00:00
Not OP but I definitely sympathise with them. I don't know how practical it is to implement or how profitable it would be, but the problem I often have is this: * I have something I want to buy and have specific needs for it (height, color, shape, other properties) * I know that there's a good chance the website I'm on sells a product that meets those needs (or possibly several such that I'd want to choose from) * my criteria are more specific than the filters available on the site e.g. I want a specific length down to a few cm because I want the biggest thing that will fit in a fixed space * crucially for an AI use case: the information exists on the individual product pages. They all list dimensions and specifications. I just don't want to have to go through them all.

Example: find me all of the desks on IKEA that come in light coloured wood, are 55 inches wide, and rank them from deepest to shallowest. Oh, and make sure they're in stock at my nearest IKEA, or are delivering within the next week.