skysight-inc/HackerNews huggingface dataset:
Yes, you're right, I think I've picked up a little confirmation bias based on my choice of distro lineage (in hindsight all have been some derivation of Ubuntu, with some variant of a Gnome 2 / 3 desktop environment). I guess where I was coming from was that I would have expected some mechanism at the lower level of the OS to marshal this kind of behaviour, rather than it being trusted to the window manager. Maybe this stems from security being mainly thought of as a terminal / ssh-level concern, rather than the GUI.

I will give KDE a go!
This helps me personally a little bit, but it's sad to see that going forward the world will need to find a new way to organize & make available their visual media, especially after death.

Today marks a new era, where linkrot- of many of our most treasured things- will be a much more personal & unfortunate seeming inevitability.
Ooh, neat! ~5 years back I got really excited about SDR to receive AIS [1] transmissions. But after a couple of weeks of frustrating attempts, I threw everything in the garbage and just bought a commercial AIS receiver. Are things better now? Do HNers have recommended hardware/software starting points?

[1] https://en.wikipedia.org/wiki/Automatic_identification_syste...
Fearing the worst outcome ought to inspire you to make the tech better, not avoid it altogether.
Installing R on a MacBook, even the older 2019 ones, was nothing short of a fucking nightmare.

Ended up installing on a vagrant machine instead.
Tailscale seems to be a great option if you only need to access your services from your own devices. Public or shared access looks to be trickier/expensive.
The junction of US 101 and CA 85 is the location of a well publicized Tesla fatality (tldr Apple employee in driver's seat, Autopilot engaged, vehicle accelerated into gore point, battery pack caught fire on scene and again later)
I like Jottacloud. Quasi-unlimited storage (realistically up to 5 TB without issue) and a small but long-running company. Bonus points for BSD and Linux clients. https://www.jottacloud.com/en/pricing.html
This worked quite well for (usa) cable for many decades. We can see it start from Google (and the *AAS sector) and end with cable TV!
I know that in Texas, some smaller counties don't use voting machines at all and only do paper ballots. However some of the larger ones like Dallas use a DRE machine combined with a tabulator instead. As long as the Secretary of State approves the method, counties are free to handle it as they see fit.
That Crypto AG had sold vulnerable machines was not a secret when he bought it. He either didn't want to know, or was so stupendously bad at due diligence that he didn't find out what anyone with 15 years history on cryptography could have told him. Either way, I'm not crying for him.

But the revocation of unrelated export licences this year by Switzerland out of embarrassment was deemed illegal, and that really is too bad. Bern killed a company, and cost Zug 80 jobs. Not cool.
How to Manage Application Secrets (7 Levels of Credential Management)
+1 for Heffron's book, which was posted here 2 weeks ago [0]. He also published all the solutions to the exercises! [1]

[0] https://news.ycombinator.com/item?id=24892907

[1] http://joshua.smcvt.edu/linearalgebra/jhanswer.pdf
Good to know. So what is the reason that yCombinator maintains and curates HN? It must cost them money even if it does not make them money. So why do they do it? Is it just good publicity?

Contrast this to Reddit. It is a big company with rather similar product, which is its only product and which makes them a lot of money I believe. How can YCombinator offer a similar product for free?
There's an ancient-but-maintained image cataloger / asset manager called NeoFinder, available on Windows and Mac. Would love to find an OSS equivalent.

https://cdfinder.de/
free but not opensource:

Cakewalk, MPC Beats, Tracktion Waveform,...

Usually Live Lite the free edition (8 tracks) is bundled with $50 MIDI keyboards, and is sufficient to get started with music production, recording and adding a few virtual instruments at least.
At this point I don't propose any design. But I'm confident it can be done.

You seem to know the challenges ahead. Mind sharing?
Because it meant not contributing to the crowds. Not burdening the grocery workers. Not worrying about where to get masks, or gloves, or hand sanitizer. Having the right masks, and not having to wonder if a cut-up t-shirt would work. (Remember early on, that wasn't clear.)

Because preparation meant being able to actually stay at home during the stay-at-home orders, not "stay at home except for the grocery store and the pharmacy and the gas station and the warehouse club and the pizza joint", which largely moots the point.

You survived, which is great, but whatever you were doing to stock your pantry was riskier than sitting at home eating from an already-stocked pantry. It's a game of numbers and odds, and some of those same folks you were shopping alongside were sick, and did get others sick, and did contribute to the first surge in cases that swamped the hospitals.

Being prepared meant being able to completely sit out every one of those dice-throws. The more people who are prepared, the better the odds for everyone, not just the prepared.
If you factor in the cost of upgrading the grid wind turbines are still a bargain.

Especially if you consider the economic possibilities of periods of nearly free electricity - e.g. fleets of electric cars/storage heaters/aluminium shelters demand shifting to take advantage.
That's really useful, thank you! Great to know that others share the same security concerns around this process. I will be sure to try this out.
Same problem. The other issue is having a 2 cameras and 2 phones in the family and grouping together events. Its easier just to save them all and not try.
I'm actually excited by this aspect, even if incomplete. This means it can come to future iPads as well.
Yeah I also notice there are a ton of MBA preferred jobs for aapl now too
> By the way, got any tips on how to learn mind-reading? You seem really good at it.

This is a particularly funny response given that your entire argument hinges on inferring someone’s motive for interpreting the rules in a particular way.
Why not just pay $30/yr to get access to all the features which Google Photos (and other Google services) offer? I know $30 is not the same everywhere but if you are in US (and assuming you are in tech given you are on HN), you'd spend that much in a dinner without thinking much. There is something about paying about online services which brings a lot of resistance in us (me included but I think I am getting over it)
You can "only"update nightly every 6 weeks as well, or every 6 months. Nothing says you have to stay up to date.

In practice I update when there is something I want in a more recent release. This happens more often with nightly because there are more bugs to be fixed and feature changes, but it isn't that often.
This is really cool. Thank you for being open source.
This looks exactly like the application I've been wanting to build for quite some time! Thank god I didn't have to. :)

Question: The Collection/Item data structure seems simple but also quite powerful at the same time. However, for lots of applications I imagine it would be nice to have some common abstractions available in the API instead of having to roll my own. I'm thinking of, e.g., data structures like queues, stacks, dictionaries, trees, and also conflict resolution strategies. Are there any plans to add those to the API?
Is the 'sente' in your GitHub handle the opposite of 'gote', or something else entirely?
Try this on: Isn't this is the OPTIMAL time to get divorced - while you are on good terms with no disagreement or anticipated battle over money.
If you wait, the divorce could be messier in the future if the relationship degrades over time.
DF: Daring Fireball, a blog written by John Gruber

DF sponsorship: https://daringfireball.net/feeds/sponsors/
Hey thanks! I was actually experimenting with web GL to build a similar instrument as Ableton's wave table! But I'm not full time, so it's taking forever...
Takeout sounds like an interesting workaround. I just do a takeout download once a month and figure that if google photos vaporizes or I lose my account I can write a python script to bake back in the JSON metadata that comes with it.
probably none, since afaik the Jordan normal form is numerically very unstable. It's however quite useful in proofs (e.g. you can theoretically construct the matrix exponential out of it).
I increased conversion rate by over 2% in a day
Someone with a hard-to-guess URL could share the link with anyone else or just put it online, thereby eliminating any sense of security.

Of course, that "someone" could also just take a screenshot or copy the image.
Natural disasters are not so bad. Historically-speaking, artificial disasters are much more worrisome.

The main thing that protects your farm is simply distance. Nobody in a city knows how to travel by foot or navigate.
Minor point: they could be talking to the controller itself over some other internal bus.

But as TB is PCIe this comment isn't intended to contradict your core point.
Wired and ArsTechnica are both Conde Nast brands. Wired is definitely 98% breathless reporting, and ArsTechnica is aiming for that too, while still trying to catch a couple people that remember what it was like before they sold out.
"Lavish attention on me and entertain me."

― Maggie Simpson via the baby translator

https://simpsonswiki.com/wiki/Baby_translator

That being said, every parent knows the "he/she has never cried like this" moment where your blood freezes and you rush to the child's bed. Seems hard to add this to the model in a reliable manner.
A responsible person considers the consequences of their actions and what trade offs are being made. Supporting the protests but also considering the consequences are not mutually exclusive and is in fact an obvious step to take for a mature and rational person.
Esbuild Plugins
> Are there actual CS programs somewhere where people can graduate without actually writing any code? Maybe theory, HCI, or hardware tracks? Those could still be great employees.

There are absolutely. I however, disagree with the idea they could lead to great hires.

I've also seen "masters" in CS that were really a lighter version of the undergrad coursework [0]. Of course, these were separate from the PhD track masters.

> And don't many candidates have code on github where you can just look at the commit log and ask them about the code they wrote?

Yeah. But the type of student that has an active github, even if it's full of assignments, isn't the type that will interview often. So you better make him/her an offer fast. There's a complete subset of great hires completely invisible to anyone because FAANG hired them first.

> Moreover, tech companies seem to be infatuated with awful technical interviews that not only make you write code but often require you to solve some difficult algorithm puzzle at the same time.

There's a reason they are doing it, to filter against these folks. Asking for algorithms also weeds out bootcamps where, more often than not, students are taught only one "trick" and stack and generally lack the fundamentals to be able to switch to an other stack or problem area.

[0] https://news.ycombinator.com/item?id=5786720
That's kind of the whole point of specialization - a good framework to look at this is the Technology Readiness Level principles; and different institutions are specialized to work with different maturity levels of a tech and that's ok.

The requirements to work on core principles that might have an application (and fund&organize that work) are fundamentally different from finding product/market fit for something that's known to be possible and are fundamentally different from optimizing a process for making that thing 1% cheaper than last year, so those are generally done by different institutions and different people.

So yes, from the point of someone doing fundamental research, once a proof of concept exists, their part of the work is done - there's a lot of further steps to get that to a commercially viable product, but those steps should be done by someone else who's better at it and whose organization is structured completely differently to facilitate this completely different process. And meanwhile they'll working on some other tech that's ready for that engineering stage yet. Theoretical physics isn't applied physics isn't prototype engineering isn't process optimization engineering.

You need people and organizations working on every TRL step, and they aren't interchangeable, you need the preceding step well-funded to make your work possible and you need to move the results to the following steps since those will harvest the actual end-user value in the end.
Thanks for this! This sounds very interesting and your stated values align exactly with mine. I will check it out.
How does that prevent you from making use of the product described in the article ?
For all we know, YouTube may be haemorrhaging money and they just haven’t figured out a way of charging for storage - yet.
Apple's own Accelerate Framework offers both BLAS/LAPACK and a set of sparse solvers that include Cholesky and QR.

https://developer.apple.com/documentation/accelerate/sparse_...

Accelerate is highly performant on Apple hardware (the current Intel arch). I expect Apple to ensure same for their M-series CPUs, potentially even taking advantage of the tensor and GPGPU capabilities available in the SoC.
Everything listed under "Features", "System guarantees" and "Lambda requirements"?

Dropbox using Python, the real question is what Celery didn't solve for them. My guess would be scalability.
What term should be used instead?
I'm a bit confused why you'd hold it against a brand historically prized for producing "driver's cars" to not offer full self-driving features.

Not every EV needs to aspire for autonomous operation to have a share of the market, some of us actually enjoy driving.

The linked model rather ugly however, that grill.. oof.
Top Computer Engineer Resume Samples
Thank you so much for this reply!

Cloudflare Workers as a way of bypassing whitelisted Cloudflare IPs makes a lot of sense, and of course is an attack vector that needs to be mitigated. Now I'm really dreaming – but it would be really neat to have a mechanism similar to LetsEncrypt where you could prove ownership of a domain and allow arbitrary requests to that domain. Given the potential throughput of Cloudflare Workers, it could be valuable as a safeguard even in the current setup (I'm guessing it's possible to amplify one request quite a lot which could annoy a victim server even with if the requests have the wrong `Host`-header?).

You're partially right about the CNAME. The reason I ended up needing workers is to preserve the cookie check that I currently have (implemented in NGINX/Lua) which redirects to app.peergrade.io if a session cookie is set (the cookie is scoped to the top-level domain). Not the neatest, but it used be quite common -- Heroku still does something similar.

I didn't think about Node not being as set-in-stone-standard as The Web Platform and not being sandboxed. An example of where the current setup is awkward would be using `atob` and `btoa` with actual binary data, I had this case when unpacking base64-data in the cookie.
RTFA ?
10Gb is available in Chattanooga.
Real Time Communications Resources
I think offering something for free and unlimited for 10 years and suddenly charging for it seems like bait and switch.

If you have an existing free unlimited plan they should grandfather that in.

In a year they will start charging for gmail.

In two or three they will start charging for search.
"We're not direct booting an alternate operating system, it's purely virtualization. Hypervisors can be very efficient, so the need to direct boot shouldn't really be a concern."

For me that quote means that they're not allowing booting any alternate operating system and they expect developers to use virtualization if other operating system is needed. I would be happy to be wrong about that.
Have you practiced it? It doesn't count until you have.
Unlike a number box, they show the range of potential values and contextualize the current value - similar to a slider but more often those are linear when knobs are non-linear. Just my 2¢
Awesome. Gonna give this a go. Recently acquired a 3rd Rasp4 to have a quorum of fast-ish ones.

Concerned about the ARM aspect though. On docker at least the ecosystem felt a lot smaller on ARM.
How I figured out algorithms – against all odds
Perhaps instead of hard coding the fallback, offer a Webpack plugin that fetches the latest config at build. That way long as you've got internet at your build step, you'll always have a recent version.
Realistically... if you wanted to pay $30/year for a set and forget photo album, is Google the best place to do that?

Given how they often they deprecate things and how hard I've heard it is to restore a disabled account, I feel like some kind of smaller company dedicated to photo storage would be much better anyway
Apple is obviously a contrast with the usual state of affairs where one of the first signs of a new CPU is in the GNU toolchain.
I think the publish/perish culture has pushed academics closer to industrial research horizons than they were in the past. This leaves a few fields in an awkward state where academics are just credentialed junior engineers/practitioners struggling to differentiate their skills and activities from every one else.
This is correct. One distinction is that AFAICT they are not stacked, a decision that improves the thermals immensely.
Hiya,

Disclosure: I work for FusionAuth.

> how do I easily have local development environments My team and I can use

A lot of our users use our docker container + kickstart to set up FusionAuth in a known state: https://fusionauth.io/docs/v1/tech/installation-guide/docker...

> displaying other users names and email addresses is a really common thing to need in applications I build

You can encode some information into the JWT. You don't want to put any super sensitive information, but email and username may be ok depending on your security posture. Then, when a service consumes a JWT (which it will be doing anyway, to ensure the user is authorized) it can extract the email, name and other info.

> how does one re-skin the sign up process or user management

As a sibling comment said, any IdP (identity provider) worth its salt will have the ability to skin login pages. Here's FusionAuth's docs on this: https://fusionauth.io/docs/v1/tech/themes/ but any other IdP should have similar docs

Hope this helps!
Fabulous that Notion now have Gantt charts. Only things that are missing for planning heaven now is being able to declare dependencies and timelines moving automatically on schedule change.
Experiments with a post-link optimization pass (for rearranging symbols in the binary for optimal access patterns, e.g. BOLT) have suggested another 5% speedup is possible. If LLD ever gets enabled by default that could be another 25-50% off when compared to the system linker (e.g. https://github.com/rust-lang/rust/issues/39915#issuecomment-... ). And so far Cranelift ( https://github.com/rust-lang/rust/pull/77975 ) shows about 20-30% improvement on debug builds, keeping in mind that what it's gaining from doing less optimizations is being partially offset by giving the linker more to chew on; using Cranelift in conjunction with LLD can give much better results ( https://github.com/bjorn3/rustc_codegen_cranelift/issues/878... ).
$1k MRR means you get $1000/month revenue, but if your costs are $900/month you're not going to be living anywhere with that money!

(And that's obviously ignoring other costs, which might not be monthly. e.g. supplies, hardware, domain-name registration, etc.)

Of course the hope is that costs fall, and don't scale linearly with revenue. Allowing actual profit in the future.
"so that you have something pretty to show your non-technically inclined significant other as the output of your hard work"

Gosh, that resonates... :)

Also very excited to read part 2!
Write Angry
>Same question, why not “laser focus” your efforts on convincing one technically proficient investor with deep pockets, rather than having to convince 100s-1000s via crowd-funding?

Traditionally the franchise model allows for small entrepreneurs to tackle local problems while benefiting from economies of scale. In this case, small entrepreneurs can tackle connecting at the neighborhood level while wifi dabba can negotiate bulk equipment rates and tackle things like support. It's hard to scale out something like laying wire in a neighborhood because ultimately you have to hire people that don't really care about the business. They're less effecient and effective than a franchise owner who has a profit motive.
That's a small problem, but not _the_ problem. _The_ problem is that, in our entire history of making networked computers, we have never successfully produced one capable of guaranteeing end-to-end security once someone starts poking at it.

The person you're replying to is wishfully handwaving away electronic attacks like we haven't been facing an endless cascading catastrophe of device security breaches since practically forever.

They further keep equating property theft scenarios, where you would easily notice that your money went to someone else, or personal harrassment scenarios, where your first consequence is a human individual audit not a national election outcome, with scenarios where you'd have no idea that your vote was changed unless you start implementing policies that would allow people to sell their votes, which is something that we don't allow for a reason. Paper ballots kept in small batches distributed among thousands of precincts that are counted by hand with opposition observers are hard to systematically rig. Bits in a cloud machine somewhere that lose all connection to your action are not.

They further handwave away the significance of stealing an election because catastrophic harm would only happen _sometimes_.
This is BRILLIANT! Thanks for the suggestion.
A Smart Playbook can help you save a recovered Covid-19 patient's life
As per the latest research a few recovered COVID-19 patients die within 60 days of recovery due to lack of knowledge. 30% of them encounter brain damage and 80% of hospitalized patients experience neurological symptoms. Smart Playbooks provides a playbook (automated actionable app) to monitor recovered patients' sypmptoms and seek medical help before its too late.
Language detection in the Bash command line using gzip (2011)
Ironic as it sounds - privacy?
> So you want to weight your classifier's predictions heavily against false negatives (at the price of false positives).

Which makes me think that a simple trigger based on ambient sound level probably does the job... I suspect that many baby monitors work that way.

This also actually makes sense because I likely want to be alerted in case of noise in general rather than just cries, just in case.
Unfortunately some of the data for that isn't cheap to collect. Postgres' EXPLAIN (ANALYZE, SETTINGS) <query>, which shows a good bit of what you want, can slow queries down substantially (in some workloads). Primarily because of timestamp overhead.

Just always collecting that information just in case it may get accessed thus isn't really feasible. It'd be good to make it possible to query cheaper information on-demand though (e.g. asking for the EXPLAIN of a query running in another session, without analyze, should be doable with some effort).

You can already set up things in a way that allows to correlate connections / queries with distributed tracing. But it's a more work than it should be. Postgres' pg_stat_activity shows queries, and it can include information that allows to correlate in the connection's 'application_name'.
And if they did discharge, then that would unavoidably cause a fire by releasing (i.e. dumping to waste heat) a huge amount of stored energy quickly.