MurphyA/hacker-news huggingface dataset:
by chimeracoder | 2025-04-10 21:01:44+00:00
> I wonder what, if any, HIPAA fines will apply to Blue Shield if they're found to have inadvertently exposed PHI.

Well, they have inadvertently exposed PHI - this press release literally admits that they did.

In terms of what fines will apply, well, the annual cap for violations is about $2 million per calendar year, but I doubt they'll have to pay even that.
by robertkluin | 2025-04-10 21:02:06+00:00
You should write your operator. You are correct: it is quite straightforward and you'll have solid understanding of what is happening and how it works.

That is how this project started. We wrote custom operators for the various platform components; that worked outstandingly well. Shockingly well to be honest.

This system evolved from that approach because we needed a way to rapidly customize our application models. If you don't need to support varied use cases _and_ have standardization writing your own is the way to go.
by fransje26 | 2025-04-10 21:02:38+00:00
This is a good point, and part of the unwritten rationale of the argument I was trying to make.

At first glance, knowing how to spell a word and understanding a word should be perfectly orthogonal. How could it not be? Saying that it is not so would imply that civilizations without writing would have no thought or could not communicate through words, which is preposterous.

And yet, once we start delegating our thinking, our spelling and our writing to external black boxes, our grasp on those words and our grasp of those words becomes weaker. To the point that knowing how to spell a word might become a much bigger part, relatively, of our encounter with those words, as we are doing less conceptual thinking about those words and their meaning.

And therefore, I argue that, in a not too far-fetched extremum, understanding a word and knowing how to spell a word might not be fully orthogonal.
by grey-area | 2025-04-10 21:02:38+00:00
> It's a simple formula based on balance of trade.

It certainly is simple.

> Does that trading partner also act like a two bit mobster?

The US is comparable to the dictatorship of Xi now? I suppose the new leadership style is similar.

> From my reading of foreign news…

The very high level of these tariffs and their global scope and speed of imposition was a huge surprise to (former) US allies, and even to many in the US.

PS I’m not American
by caseyohara | 2025-04-10 21:03:34+00:00
> The B&H example is ridiculous and I definitely would churn if I ran into that

B&H is so good that I don't care when their online store is closed, I just come back later. That they are still in business (and flourishing, from what I can see) is proof that their service is so good that people are loyal.

Chick-fil-A is famously closed every Sunday, yet is one of the most successful restaurants.
by aucisson_masque | 2025-04-10 21:03:37+00:00
> At first, I fought back manually, feeding them fake data. But that got old fast. So I deployed my secret weapon: a zip bomb.

> When their bot accessed my site, I served it a tiny compressed file. Their server eagerly downloaded and decompressed it, only to unleash several gigabytes of chaos. Boom. Game over.

How did you know their bot would decompress it? I thought a bot would copy the HTML content of your article, maybe the images, and paste them on their own website. At no point does it involve editing or decompressing files?

Impressive animation, by the way—the number of bots is staggering.
by chimeracoder | 2025-04-10 21:03:55+00:00
> As someone who has worked in this field, I'm not. Marketing is generally exempt from massive legal review as they hand wave away "We don't deal with HIPPA data" and developers just wanting marketing to go away, dropped the Javascript block into files that were used for a ton of products including HIPAA containing ones.

I don't know why you're being downvoted, because this is unfortunately quite accurate. You'd be shocked how often this happens, even for tools they think are totally secure and "HIPAA-compliant".

> EDIT: Most of these places are just feature factories with offshore developers who are very unlikely to raise concerns.

I don't think there's any meaningful difference based on where the developers are located. The developers aren't the ones making the decisions. Usually the issue is that the higher-ups want it, which is why practices can continue even after concerns are raised.
by ratorx | 2025-04-10 21:04:29+00:00
I’m not convinced that a language level feature is worth it for this. You could achieve the same thing with a function returning an f-string no? And if you want injection safety, just use a tag type and a sanitisation function that takes a string and returns the type. Then the function returning the f-string could take the Sanitised string as an argument to prevent calling it with unsanitised input.

I guess it’s more concise, but differentiating between eager and delayed execution with a single character makes the language less readable for people who are not as familiar with Python (especially latest update syntax etc).

EDIT: to flesh out with an example:

class Sanitised(str): # init function that sanitises or just use as a tag type that has an external sanitisation function.

def sqltemplate(name: Sanitised) -> str: return f”select * from {name}”

# Usage sqltemplate(name=sanitise(“some injection”))

# Attempt to pass unsanitised sqltemplate(name=“some injection”) # type check error
by mbs159 | 2025-04-10 21:04:32+00:00
> ... I then completely lost confidence in my ability to credibly run those calculations because I don't understand nearly enough about how CO2eq is calculated in different industries.

There is a lot of heated debate on the "correct" methodology for calculating CO2e in different industries. I calculate it in my job and I have to update the formulas and variables very often. Don't beat yourself over it. :)
by dylan604 | 2025-04-10 21:05:30+00:00
From all of this, it doesn't really seem like they would be much of a threat to NATO. Except for the nukes. As far as traditional forces, there seems to be a disconnect between the fear of vs the credible threat. Or I'm just grossly misjudging things and it's a good example of why I'm not involved in any threat assessment type of position. Underestimate your opponent at your own peril type of thing
by throwawayffffas | 2025-04-10 21:05:42+00:00
So we are well on our way to turning python to PHP.

Edit: Sorry I was snarky, its late here.

I already didn't like f-strings and t-strings just add complexity to the language to fix a problem introduced by f-strings.

We really don't need more syntax for string interpolation, in my opinion string.format is the optimal. I could even live with % just because the syntax has been around for so long.

I'd rather the language team focus on more substantive stuff.
TCP vs. Audio EnginersSolveSameProblems
by andrewfromx | 2025-04-10 21:06:39+00:00
Network Engineers

We're seeing major packet loss. Throughput's down 60% and latency spikes are all over the place.

Let's check the window scaling parameters. Hmm, TCP window size is set too small for this bandwidth-delay product.

Good catch. And look at these retransmission timeouts - they're way too aggressive for this connection.

Let's adjust the congestion control algorithm too. We're using Reno but BBR would handle these variable conditions better.

I'll reconfigure the buffer sizes while you're at it. These micro-bursts are overwhelming our current settings.

Done. Let's monitor... throughput's climbing. Packet loss is down to acceptable levels.

Latency's stabilized too. Flow is balanced across all paths now.

Perfect! The TCP stack is finally singing in harmony.

------------

Audio Engineers

This mix sounds terrible. The vocals are getting buried, then suddenly jumping out way too loud.

Let's check the gain staging. Hmm, your preamp's running too hot and then the compressor is overreacting.

Good catch. And look at these attack and release times - they're way too aggressive for this vocal performance.

Let's change the compression algorithm too. We're using a peak limiter but a multi-band compressor would handle these dynamics better.

I'll reconfigure the EQ while you're at it. These sudden high frequencies are causing harsh spots.

Done. Let's listen... the vocal's sitting better now. Dynamics are natural but controlled.

The tone's balanced too. Everything's finding its place in the mix.

Perfect! The audio chain is finally singing in harmony.
by elarssen | 2025-04-10 21:06:47+00:00
Where Koreo excels is when your developer knowledge ends with a Dockerfile and your platform team is able to abstract service deployment away from them. Many organizations use a "god chart" to do such a thing but those will become cumbersome over time. Koreo's value prop also is greatly enhanced when paired with ACK or Config Connector as you have an organization specific DSL that will integrate your container runtime with your cloud resources. E.g. mount your rds address on your pod in one workflow.
by somerandomqaguy | 2025-04-10 21:06:59+00:00
I wouldn't say it was just that. The Ukrainians realized they were in trouble in 2014 when Russia lopped off Crimea, and ordered a painful introspective to highlight all the weaknesses of their military.

They spent 8 years overhauling their military and learning from invited western forces to prepare for an invasion that they hoping beyond all would never come. And it paid off in spades.
by greenavocado | 2025-04-10 21:07:19+00:00
Find a parcel near a river or with an aquifer underneath it

https://dashboard.waterdata.usgs.gov/app/nwd/en/

Right sidebar, Hydrology -> Aquifers -> ON

Then check local ordinances to see if there are prohibitions against living in an RV on your property. Typically you want to stay away from properties which specify "Covenants and restrictions apply" because they typically prohibit RV living.

$99 Down + $149 closing fee and $75 monthly for 35 months: https://www.landwatch.com/ozark-county-missouri-recreational...
by neilv | 2025-04-10 21:07:25+00:00
Agreed, although this doesn't work as well for HTML or SQL that doesn't fit on one line. Since having everything in a string literal is a little messy, and doesn't have the benefit of autoindent, syntax coloring, etc.

This is one place where s-expressions of Lisp make embedding these DSLs syntactically easier.

To borrow the PEP's HTML examples:

#lang racket/base (require html-template) (define evil "<script>alert('evil')</script>") (html-template (p (% evil))) ; <p>&lt;script&gt;alert('evil')&lt;/script&gt;</p> (define attributes '((src "shrubbery.jpg") (alt "looks nice"))) (html-template (img (@ (%sxml attributes)))) ; <img src="shrubbery.jpg" alt="looks nice">

You can see how the parentheses syntax will practically scale better, to a larger and more complex mix of HTML and host language expressions. (A multi-line example using the normal text editor autoindent is on "https://docs.racket-lang.org/html-template/".)
by iteratethis | 2025-04-10 21:07:28+00:00
Yes, you're welcome.

I'm from the Netherlands, middle-aged and have never met a person in my circles with a genuine hate of America or Americans.

There's plenty of critique on the state of US society, but that doesn't translate to general hate for any random American, unless you're intentionally provocative.

Likewise, we do not hate US products. It's just that in the case of food and cars, we have plenty ourselves of an equal or better quality.

Should you be conservative and drop a few of those views in casual conversation, I can assure you that this doesn't shock the average European. In fact, counter intuitively you may find out that progressive Americans are far more progressive than progressive Europeans. Culturally that is, not economically.

Do avoid obnoxious patriotism or bragging about the US.
by dijksterhuis | 2025-04-10 21:07:53+00:00
Link to the python library (link in the article is broken atm): https://byzfl.epfl.ch

> ByzFL is a Python library for Byzantine-resilient Federated Learning. It is designed to be fully compatible with both PyTorch tensors and NumPy arrays, making it versatile for a wide range of machine learning workflows.
by bsder | 2025-04-10 21:08:06+00:00
That's okay for the base OS that doesn't change all that often.

However, that falls apart when you start trying to have lots of "toolbox"/"containers"/"docker" things that people want to use for development.

The DNFs you need inside the container pile up very quickly when trying to do development. Those want to be deduplicated between containers. There is a reason why Nix gets grief about how large its store becomes.

In addition, lots of people also want to containerize their working/home directory. That requires really good overlay support, and nobody has this right now.

There are LOTS of issues filed against "toolbox" for this, for example: https://github.com/containers/toolbox/issues/183 https://github.com/containers/toolbox/issues/348 https://github.com/containers/toolbox/issues/1470

This is something that should be straightforward to implement. However, because the filesystem support sucks, it is not.
by dylan604 | 2025-04-10 21:08:12+00:00
I always wanted to see this book turned into a movie. I had hopes for it since it wasn't part of the Jack Ryan series. I can't imagine Larry Bond not wanting to earn some extra cash from that kind of deal. Of the Jack Ryan series, I had always hoped for a Cardinal In The Kremlin movie too. I wanted the laser scene to come alive even if they made it along the lines of Spies Like Us. Lasers are cool! pew! pew! was the main part of wanting it as a movie to be honest
by jvanveen | 2025-04-10 21:09:13+00:00
I can't believe people still buy the Purism scam after all these years...I ordered a Librem 5 and a Pinephone back in the days of the other supply chain story(Covid). The Pinephone flew in from China in less than 2 months; the Librem 5 took more than 4 years to arrive. All Purism offered during that time were "opportunities" to invest and exhausting delay stories about failing supply chains, while keeping their customers completely in the dark about their order state. Instead of preying on the goodwill of FOSS enthousiasts, they now try to tap into a new market (nationalism) to sell the same useless overpriced brick to.
by tastyface | 2025-04-10 21:11:49+00:00
This is a purely political move to suck up to the current administration. I'm pretty sure that at some point in the near-future, Llama will start telling us that, for example, the 2020 election may have been stolen — an assertion that has absolutely no basis in evidence, but that Trump and his cronies have manifested by screaming it over and over again. (See also: https://news.ycombinator.com/item?id=43638616) When people hear this from Llama, they will believe it because they trust AI and don't check their sources.

Corporate AI is a vector for propaganda. Not even once.
by iAMkenough | 2025-04-10 21:12:33+00:00
Border Patrol is a step above most law enforcement when it comes to authority. The Fourth Amendment doesn't apply in the 100 mile border zone, or at least SCOTUS ruled Congress hasn't defined what happens if it is violated by border patrol (Egbert v Boule).

https://informationsecurity.princeton.edu/sites/g/files/toru...

https://www.aclu.org/news/privacy-technology/can-border-agen...
by timcobb | 2025-04-10 21:13:05+00:00
> until I decided that I couldn't go on like this, and only then did I write some classes to represent the business logic objects

this is just another form of TDD in my opinion. it's a bummer if your work literally makes you write tests first just to satisfy some theoretical checkmark.

> Maybe I should just be a hermit-programmer.

<3
by matheusd | 2025-04-10 21:13:09+00:00
Attempting to summarize your argument (please let me know if I succeeded):

Because we can't compare human and LLM architectural substrates, LLMs will never surpass human-level performance on _all_ tasks that require applying intelligence?

If my summary is correct, then is there any hypothetical replacement for LLM (for example, LLM+robotics, LLMs with CoT, multi-modal LLMs, multi-modal generative AI systems, etc) which would cause you to then consider this argument invalid (i.e. for the replacement, it could, sometime replace humans for all tasks)?
Show HN: Domika – A Native Mobile App for Home Assistant
by bealex | 2025-04-10 21:13:24+00:00
My friend and I wanted a simpler mobile Home Assistant client—mainly for our non-tech-savvy family members—so we built one for iOS and Android. It includes a completely free 7-day trial and a demo mode. Feel free to check it out! Feature requests and bug reports are very welcome.
by pmags | 2025-04-10 21:14:02+00:00
This seems to amount to an attempt to change someone's legal status by manipulating the SSA database:

The effort hinges on a surprising new tactic: repurposing Social Security’s “death master file,” which for years has been used to track dead people who should no longer receive benefits, to include the names of living people who the government believes should be treated as if they are dead. As a result of being added to the death database, they would be blacklisted from a coveted form of identity that allows them to make and spend money.
by jodacola | 2025-04-10 21:14:45+00:00
Had the same issue, iPhone 15 in Chrome. Scrolling quickly didn't help. What did help: rotating into landscape and scrolling in the margins. Scrolling on the very right side of the screen also worked in portrait.

Once I scrolled down a bit, I was able to scroll normally afterwards.

On the content: I enjoyed your article! B&H being closed for Sabbath saved me from almost blowing $10k on camera gear a few years ago... everything in my cart, but couldn't check out. I wouldn't say I churned, but I also didn't come back to purchase because I had pre-buyers remorse.

As others in the comments have noted, though - I still come back and shop at B&H for other things, even though I've run into their closures. I actually like the humanity of it. For all the always-on-ness of the internet and websites... there's something innately "human" about something being closed, like B&H's site, that isn't upsetting to me.
by spaceman_2020 | 2025-04-10 21:15:18+00:00
ser, do I need to pull up a map of Europe or India at any time in history? "One country" is a recent historical phenomenon.

by the standard of most large landmasses, China was, in fact, far more cohesive and united - compared to the hundreds of local lords and kings with their tiny little fiefs in, say, India
by alabastervlog | 2025-04-10 21:15:53+00:00
It's surreal to see the usual rewrite-in-Rust articles and such still dominating the main page during an ongoing and fairly open effort to end liberal democracy in the US and upend the entire world trade & security order.

I get that it's supposedly a tech forum (and that actually it's an advertising & marketing platform) but still, gives a fella the creeps. Especially when major tech figures (Thiel, Musk, everyone in charge of a site exhibiting the usual "engagement algorithm quickly becomes indistinguishable from an intentional right-wing radicalization pipeline and conspiratorial-thinking primer" behavior) are largely responsible for where we're at and are so involved in it, and the rest of the industry's "disruptive" "genius" "mavericks" are cowering like frightened children.
by eikenberry | 2025-04-10 21:16:32+00:00
> Ownership is not about storing everything at home (or well, it's part of it), but having control over your data, which you can easily have while at the same time using the convenience that the cloud offers.

Ownership is not just about r/w control of your data but also over what software gets access to it and what that software does. Not just about privacy, but knowing the process and being able to alter it to your desires. There is no way to control that unless you run your own servers.
by nixpulvis | 2025-04-10 21:17:09+00:00
I TA'd for the fundamentals of computer science I in college. In addition to being a great class for freshman, teaching it every year really did help keep me sharp.

High schools are a long way off from that level of education. I took AP CS in highschool and it was a joke by comparison. Of course YMMV. The best highschool CS course might be better than the worst university level offerings. We would always have know it all students who learned Java in high school. They either appreciated the new perspective on the fundamentals and did well, or they blew off the class and failed when it got harder.
by antonkar | 2025-04-10 21:17:14+00:00
Interesting, can be relevant: there is an idea for the unicorn AI safety startup to get currently almost 100% unprotected (from AI botnet) consumer GPUs into a cloud to get Google-level security (each GPU can bring you $30-1500 in profits per month, you can share it with the user, the user can play GPU game from any device, use any free or paid AI model, everything really becomes better, you can include a 5g modem), here's the full proposal (the author is probably dyslexic) https://melonusk.substack.com/p/notes-on-euto-principles-and...
by aylmao | 2025-04-10 21:17:39+00:00
It's extortion. Sometimes the extorting party can act on its threats, sometimes they can't.

In regards to the auto industry, I'm not sure what you mean by "look where auto manufacturing investment in the US is". Most auto manufacturing jobs are still in the rust belt [1]. Most EV Production investment is in the rust belt [2].

[1]: https://engaging-data.com/auto-manufacturing-state/

[2]: https://www.assemblymag.com/articles/98988-ten-us-states-dom...
by BrandoElFollito | 2025-04-10 21:18:14+00:00
Dissapearing messages have a limited use.

They require both parties to seek the vanishing as a useful feature (say, when you chat on someone and want to minimize the chance of being caught. There are certainly better examples).

If one of the parties did not want the message to dissapear it is here over: tout can take a picture and all security in the world won't prevent this.
by antonkar | 2025-04-10 21:18:19+00:00
There is an idea for the unicorn AI safety startup to get currently almost 100% unprotected (from AI botnet) consumer GPUs into a cloud to get Google-level security (each GPU can bring you $30-1500 in profits per month, you can share it with the user, the user can play GPU game from any device, use any free or paid AI model, everything really becomes better, you can include a 5g modem), here's the full proposal (the author is probably dyslexic) https://melonusk.substack.com/p/notes-on-euto-principles-and...
by laidoffamazon | 2025-04-10 21:18:20+00:00
Perhaps I don't. I don't know why someone would expend 100x the effort and be labeled at minimum 10x the person by MIT admissions to end up at the same place that people with 1350 SATs from Auburn or 1450's from NC State or 1420 from Binghamton would go to after graduating MechE.
by JKCalhoun | 2025-04-10 21:18:50+00:00
Wondering what I could do with it ... I rewrote Glypha (an old Mac shareware game I wrote) using modern SDL2. Might be fun to try to "back port" (?) it to OS 9 on top of SDL2 (rather than the clunkier CopyBits() calls I used in the original shareware game).
by azinman2 | 2025-04-10 21:18:51+00:00
> Without GNU, GPL and Richard Stallman, FOSS would not exist in the first place. The GPL forced companies to make FOSS a thing, whether they liked it or not.

I was responding to this, which is more widespread than GCC (although it was one of the first wins of the GNU).

There were various companies who wanted to add on backends and other bits to GCC, but wouldn’t due to the license. That’s one of the reasons LLVM is so popular.