skysight-inc/HackerNews huggingface dataset:
I've had most of my personal self-hosting held up by a problem with ssh port forwarding for over a month now and am willing to re-think the whole setup at this point.

Basically I have a vps running traefik and a bunch of self-hosted services with letsencrypt in a docker-compose stack, but I want it to also be able to take an ssh-forwarded https port and use ssl termination to get it a letsencrypt cert and point it to the domain I want. Apparently the way to do this is to use the traefik file provider option, but at this point I've been trying to get that to work for a month and I have no idea why traefik doesn't recognize the port.

Do you have any recommendations for someone looking for this setup? As I said I'm willing to scrap my current setup, but would still like to be able to have it all run in docker-compose and not renew the certs by hand.
I get this hunch that no-code is attractive because it hides the true costs. You can apparently hire cheaper labor, but you don't see the maintenance costs. You can also apparently delegate coding tasks to non-coders, which might help you squeeze the budget bubble around the business. But there's costs to that as well in terms of making people less effective at their normal work.
Mark Zuckerberg’s Squirrel Paradox
You will be amazed to know that even the 3 kamikaze that swimmed in radioactive water and drank vodka to celebrate survived.
Well in this scenario I am suggesting that a placebo is a waste of time and we don't need two groups. I am not assuming the vaccine will be 100% effective, or even effective at all. But in order to get meaningful data you can't have all your participants taking the most extreme precautions. The vast majority of American citizens have not, and will not, get Covid.
That’s me approaching a blue mailbox with my letter to send in one hand, and my keys in the other.
>Why shouldn't they be allowed to share it with other people?

>What legal obligation do they have to keep the information you shared private?

Those exact same questions can very well be asked of the whole Cambridge Analytica scandal, and yet some people will give different answers to those two scenarios.

Cambridge Analytica app was explicitly asking users for permission to access their data and data their friends publicly shared with those users. The first one is obviously ok, but the latter was what people had issues with, and I don't see how it is different here.

As for what legal obligations your friends have to keep your information private, I don't think they do. However, Facebook does have the obligation to not share info of users who didn't explicitly consent to it with third party apps, according to this order from FTC issued in 2019[0]. And third party apps that share not only your FB info, but that of your friends (who do not use those third-party apps), definitely fall under this.

0. https://www.ftc.gov/system/files/documents/cases/c4365facebo...
I think Norvig is a smart person, I enjoy his books, papers and jupyter notebooks, but I always thought he was pretty clueless regarding AI, as history indeed demonstrated. That's not an ad hominem.

What is shameful was the extreme shunning of the mainstream scientific community to ANNs, in 90's-00's decades, to the point that it was considered career suicide to publish a ANN paper. I believe Yann LeCun has said similar things in the past[0], reminiscing the time when it took him several years(!) to get an ANN paper accepted for publication.

[0] http://yann.lecun.com/ex/pamphlets/publishing-models.html
I don’t think most people have issues with programming because of syntax. It’s the lack of visual feedback that’s making things so difficult. Click on one of those cells and it’s color coding which cells make up that formula. Sum(everything in this box) is really easy to get where a foreach loop doing the exact same thing is more abstract.

People just kind of default to {do some magic} on [various things] -> (Some result that looks about like I was expecting).

What’s really interesting is Spreadsheets tend to have bugs where the result is incorrect but reasonably close to reality. Aka 38 vs 35 not Null Pointer Exception, this makes them in many ways seductively dangerous in a this looks close therefore it must be easy to fix way.
NewPipe doesn't use youtube-dl, they have their own implementation of the stream extraction code[1]. Unless that codebase also has test cases which specifically try to download RIAA content, they would need to find a different justification for a DMCA takedown.

[1]: https://github.com/TeamNewPipe/NewPipeExtractor
> A tarball of an _ancient_ youtube-dl version is absolutely useless because the youtube HTML will have changed a million times in the meanwhile.

But it's not a tarball of an ancient version of youtube-dl. It's a tarball of a version of youtube-dl from like two days ago. So then it gets posted to some other host or some distributed thing and development continues over there, only with twice as much support because of all the media coverage.
Technically yes, but most of the time it wholly inefficient, not very secure, many times not even accurate or has very little in way of data validation (like Excel)

You also end up with a TON of XY problem "solutions"

It is a nightmare 90% of the time

>>There's a reason excel is so ludicrously wildly popular as a business tool.

Because it allows lower wage workers to implement half baked solutions, and manipulate data in away that executives want regardless if it accurate, true, or reliable?

I will agree that Excel is a poster child for "no code", it has EVERY problem of no code in spades, I wish i could get back even 1/10th of the time I have wasted in my career trying to decipher some of the moronic things I have seen people do in excel.

and do not get me started on people that treat Excel as a Database, Literally pulling in an entire table with a Select * SQL Query then using some excel function to do sorting and filtering.....
According to https://en.wikipedia.org/wiki/Wikipedia:Wikipedia_records#Ar... :

- Longest article title: Cneoridium dumosum (Nuttall) Hooker F. Collected March 26, 1960, at an Elevation of about 1450 Meters on Cerro Quemazón, 15 Miles South of Bahía de Los Angeles, Baja California, México, Apparently for a Southeastward Range Extension of Some 140 Miles (253 characters)

- Longest article title without spaces: Lopadotemachoselachogaleokranioleipsanodrimhypotrimmatosilphiokarabomelitokatakechymenokichlepikossyphophattoperisteralektryonoptekephalliokigklopeleiolagoiosiraiobaphetraganopterygon (183 characters)

- Longest full typed number with an article: 9,223,372,036,854,775,807

EDIT: Er, it makes more sense for me to have interpreted that as article length rather than title length. :P There's actually an entire autogenerated page for tracking that: https://en.wikipedia.org/wiki/Special:LongPages
In general GPT3 is not SotA on (any?) classification task, did you just not have enough data to fine tune a discriminative transformer model? Inference should be cheaper with a smaller transformer/also less lock-in.
https://www.rcfp.org/scraping-not-violation-cfaa/

> A federal appeals court last week issued a “hugely important” decision with potentially major implications for data journalists when it held that using computer programs to collect publicly available information from the internet — or “scraping” — likely does not violate the Computer Fraud and Abuse Act, the main federal computer crime statute.

Links are in the quoted text.
I doubt the cameras on the Tesla have anywhere near the performance of the human eye. I own a Tesla and often I get some warning when the sun is at a low angle blinding the cameras. I've no problem seeing stuff at the same direction.

So both sides of that sentence seem wrong.

EDIT: it's also worth noting that Tesla is accounting for a whole bunch of future revenue from FSD. If Tesla admits at some point that they can't make it with the current sensors that would have huge financial implications.
> The problem is that the project may not survive this.

I thought all they need to do is to issue a counter-notice. Popcorn did this and got their code reinstated on github: https://news.ycombinator.com/item?id=24885079

In the worst case, they need to adjust their tests. This is what the issuer of the complaint brought up. Their tests of the code downloaded a couple of seconds of what the RIAA thought is copyrighted material. If I'm not mistaken, this is what they are basing their case on.

If youtube-dl removes those explicit urls from their test cases, I don't think they have a case. You could argue fair use, but remember it's only a test case in that program. The authors could just as easily reprogram the test cases to accept any url a user wants to test.

Anyways, consult lawyers, perhaps change the test code and issue a counter notice and move on.
The issues were mostly for lots of the niche video sites supported by the tool. The YouTube code base was updated as often as it needed to be.
Good news for the UK hopefully more countries will follow the lead.
I've been using this platform for a couple of months and I love it! The circles are much more dynamic than Spotify playlists. I can react to and discuss songs with friends and have multiple circles for different themes and friends groups. I also love the cross-platform functionality. Now I can post and listen to acoustic covers only available on youtube seamlessly with my Spotify tracks, and even see the video natively in MusFuse!
People are tired, oh so tired, of GOP bullshit.
Maybe also worth mentioning that Uberspace is not your average hoster. It's a highly developer focused and developer friendly hoster with the fitting technical expertise, combined with a lot of character (plus interesting business model). If only one german company would not accept a baseless claim as this it would be Uberspace.
Security is also something to be mindful of. A lot of my work as a professional vulnerability researcher is just using my low-level knowledge to circumvent higher level abstractions people usually ignore. The abstractions aren't seeming to slow down and I fear soon only a few will be able to peak into most or all of level needed to provide reasonable security. Whenever I see a system built with "Automated" technologies, I usually start there to find flaws. In order to truly utilize high level abstractions it is useful to actually understand what provides them.
I don't see the point of this project. It essentially turns the IBM PC into an embedded system where the only program you can run is the one you burn into the ROM. There is little, if any, advantage to avoiding the use of interrupts. While using unused MDA memory as general purpose memory is cute, it doesn't offer any advantage since you can't reasonably disable DRAM refreshes on the PC (and still get any usable work done), so you might as well use RAM you know will be present on all PCs.

The entire point of the BIOS is so that programs could use BIOS calls and work on any PC or clone without needing to worry about the underlying hardware. Such programs still work today (if you can find a way to boot/run them) which is fairly astonishing 40 years later. The project states "The purpose of this project is to explore controlling the IBM PC hardware in non-standard ways." Okay, well, that's cute, but unless there's an advantage, why bother.

If you're going to do that, you might as well make a demoscene demo...
Investing in Agility
Note that tracing profilers don't need to be high overhead - Python is slow enough that efficient tracing can be mostly hidden. For example, https://functiontrace.com tends to have <10% overhead when tracing.
I agree it isn't acceptable, and I agree there should be cases where reports should be mandatory. But I'd place that line far into the criminal realm.
They based their code in part on Pleroma per something else I read, which is written in Elixir.
How are y'all testing your svelte apps/components? Jest+Testing Lib seems to have issues calculating code coverage and there are few quirks like having to do work arounds to test slots that prevent me from totally switching over.
Yeah, the presence of piece drops means the average piece power has to be lower in Shogi. If you play Crazyhouse you see how quick the game is if you have drops in a game with as powerful pieces as Chess.

I think both games have their interesting parts and it's fun to play both.
The TCP handshake IRL
With youtube the complaint is always that people discover offensive views, with facebook the complaint is that it keeps people in a bubble. Can't have it both ways.
This would help a bit: Don't accept the "--do-it" as first parameter, make it obligatory to be the last.
Your information, or SOME information?
children, guns, jobs.. take a back seat to cujo over here :) literally lol
> Ninja looks like it tracks dependencies roughly automatically, whereas dependencies are manual in Make

Ninja has built-in support for the ".d" files generated by gcc's "-M" family of flags, but you still have to make your gcc command-line actually pass the right flags, and you have to tell Ninja the name of the ".d" file. See https://lwn.net/Articles/706404/

Another neat feature of Ninja is that it's much better at "pruning" downstream targets if you rebuilt something (because of an out-of-date timestamp) but then it turned out to be bit-for-bit identical as it was before. In this case, downstream targets that depend on this intermediate target don't need to be rebuilt.
> I’m curious: would Ninja rebuild on a new version of Inkscape? I’d be pleasantly surprised and view it much more favourably if it does.

I haven't used ninja, but nix and (unless memory fails me) bazel derived build systems will. Nix basically has a completely hermetic world, and everything is referred to by hash that includes the recursive dependency tree.
Another possibility: Perhaps one of y'all ended up bringing up the topic of cereals (and those cereals in specific) because of a new ad campaign one of y'all saw.

You hadn't seen it yet, but lo and behold, you did later.
Everyone always says to detox detox detox. What they mean is so detox your body by juice cleansing, fasting, etc. Not many people say to detox your MIND. which is just as, if not more, important. How to detox your mind? meditate, do something creative like paint, dance around in your living room, go to therapy!
Apple’s A14 Packs 134M Transistors/mm²
It changed, not as much as it should have, but it changed in the right way.
My point was that you can get down to the bottom of where the data was collected, and you can repeat the experiments for yourself and hopefully get the same results. These days, people are putting a lot of faith into the polls, but the polls are not conducted by district but are conducted by "statewide random polling" which is about as useful in a country with an electoral system such as the US as the popular vote count. That is, not at all.
1. Look at the latency of historical successful commits and your success_percentage. Take the latency at the success_percentage-th percentile and call it max_success_latency. This should be bounded closely from below by longest round trip time between nodes. If it's not, it's worth fixing.

2. Look at your external SLO and get target_latency and target_success_percentage from your thresholds.

3. Retry on failure. Retry on timeout as late as target_latency-max_success_latency and optimistically as early as max_success_latency. The wiggle room gives you a helpful idea of how close you are to breaking SLO. The earlier you retry, the more likely you are to overload the backend if it slows down due to load. The later you retry, the more likely you are to break SLO under load. Use a rate-limiting back-off strategy in clients to avoid overloading the backend completely. Probabilistic rate-limiting to the observed success rate (plus a little) on each client works pretty well.

4. Provision your Raft/Paxos for (1 + (1 - success_ratio))^max_retries times the maximum expected traffic to account for the load from retries.

Note that if (max_success_latency * 2) > target_latency AND success_percentage < target_success_percentage then you will need optimistic retries which can put quite a lot of load on the backend and even that may not keep you within SLO; it mostly depends on whether failures/timeouts are independent or data-dependent.
https://www.producthunt.com
Do you think it is hard to give the choice to the user?
I'm no expert but it seemed to me the whole Pascal, Modula, Oberon story is in big part about Wirth chasing/exploring some optimal/balanced¹ programming language.
So, it makes a lot of sense to have many variants and an evolution retracing both his learnings and opinions (that can change with time, and do, hopefully) and exploring different variations on a common theme.
And developping an OS in any of these languages is pretty much a real-life test of their adequacy (meaning they are not just some vacuous formal exercise).

Iirc, Wirth achieved some relatively lean but powerful languages at some point.

Also, I don't understand your opposition to writing a kernel in some form of Oberon, but accepting pretty much any other language/paradigm ?

¹ Not that there is only _one_ optimal language.
It isn't about testing if the president can do surgery. It is about forcing the president to look somebody in the eye before they kill them.
Sure. So what exactly is the binding rule which Facebook should apply here?

Rsearchers can get access to anyone's Facebook data if people enable it? What about the ones in chinese universities? Or just respected universities? Which universities is that? How do we decide?

You're missing the point. There needs to be a black and white line, and whatever Facebook allows they're always being demonised, nobody gives them the benefit of the doubt.
My crazy theory: Tesla vehicles are already fully autonomous. In simulation.

My wild ass guess is the extra compute power is running the robot driver code. Then the human and robot actions are compared. Do some AI magic to close the gap. Any big unexplained significant deltas are forwarded to the mothership, for further analysis.

This notion is why I've gone from bear to bullish on Tesla's autonomous driving. Tesla has more data than anyone else. And per Norvig, IIRC, more data is better than more compute.

What little I know about Tesla comes from HN peanut gallery and Munro Live and others on YouTube. This parallel simulation idea is just what I'd do. And may explain what all that spare compute power in each car is being used for. I don't know if my wild ass guess is original or not.
This is a smaller variant.
I'm on a rolling distro and I still maintained my own copy of youtube-dl (with a cronjob to run `youtube-dl -U`) instead of using my distro's package. If I used my distro's package, every time it broke I would have to wait a few days for my distro to update its package with the fix, even though upstream would've cut a release with the fix within a few hours.
Yes, and I'm not saying that's a good thing, but I do think it's important to stay factual in complaints.

However another massive issue except the fees is data flow. I don't need US corporations to know about all my transactions that otherwise do not relate to them at all.

It should be in the interest of all countries to have a payment scheme that is not reliant on the US or another massive foreign power. Thankfully, many countries do have their own scheme, though it seems Kenya unfortunately doesn't.
reminds me of the semester sophomore year where I was concurrently taking discrete math in the math dept., computer organization (prereq for architecture, basically covers binary number representations and logical implementation of adders, muxers, etc.) in the cs dept., and symbolic logic in the philosophy dept. it was a great feeling when I realized a few weeks into the semester that I was essentially taking three versions of the same course but from very different perspectives.
I realize that since NewPipe's Java; but it's just an example.

I really doubt the "it's just the test cases" justification btw, since test cases would likely be fair use. The deencryption stuff is the problem, and NewPipe does it too.
I'll be happy to take the cameras off your hands :)
Low code is very useful in creating basic crud apps and workflows. Hacker news is full of experts who know everything, but our teams are not all posting here. If you adopt a good low code framework that you understand inside and out, then you can achieve a lot of output with an inexperienced team.

I use a LOT of co-ops to develop full applications using Oracle's low code solution, because we don't need anything more complex than that. Complex shit should be done by our ERP, I'm just turning a manager's spreadsheet and half baked business process into a well built system. Plus, I use the low code solution as a training ground for our more complex technologies, its great for weeding out the duds.

You should still have a programmer do the work though. I have seen far to many smart business analysts fail because they get hung up on the programming basics.
It's not a traditional DMCA copyright take down, but a take down that's enforced under a different section of the DMCA. I believe that in this case, there is no avenue for issuing a counter notice, but I'm not a lawyer and I'd be happy to be proven wrong.
Despite its name, half the value of `youtube-dl` is that it Just Works on every (free-as-in-beer, and non-DRMed) video site known to man. Every obscure Youtube alternative, every local news station's dogshit CMS, every porn site, Twitter, Twitch, HGTV, you name it.

The far bigger part of the job would be rewriting all 800 custom extractors, then perpetually maintaining them against constant, silent, often adversarial breaking changes in each one.

Using Rust instead of Python would cut the very fat long tail of contributions that makes most of this viable, and would doom this project more than most.
Yeah, their development guide lists Elixir (and Erlang), PostgreSQL and NodeJS as dependencies. https://docs.joinmobilizon.org/contribute/development/#witho...
Most of the merchants will just ask the customers to show the transaction detail in their phones.
>> Beauty is in the eye of the beholder.

No objection from me. Just, sometimes it pokes at the eye of the beholder.
The data is right in your graph. Right now it's almost 1.5K infections per day, it's about a 3 week doubling rate. So 6K new infections / day in 3-6 weeks - at almost any % of those needing hospitalizations, they will be overwhelmed.

Whatever Sweden did at the end of June, where you can see a precipitous drop - they will obviously have to do again.
How to Exploit BigBlueButton for File Disclosure and SSRF
BigBlueButton prior to 2.2.7 is vulnerable to file disclosure and Server-Side Request Forgery attack. An authenticated user who is participants of a web conference and has an appropriate permission or privilege to upload the presentation can access internal system files via file upload and also conduct SSRF attacker via crafted URL in xlink filed.
> And, you are expected to recognize a checkmate and resign

Is that different from chess?
AI Will Revolutionize Education
I do a "wallet keys phone" mantra when I leave a building.... has a bit of a melody to it that I always repeat
There was some oil pipe blown due to a software attack before Stuxnet.

If those changed anything, it was on some place I can't see.
After losing my wallet several times and not having a clue when the last time I had it on me was, I implemented a similar system. I now habitually triple tap my three designated pockets for phone, wallet, keys, every time I walk through a doorway.

That way, if any of them are missing, I know they must be in the room I just left.