skysight-inc/HackerNews huggingface dataset:
Great idea & execution, I've definitely thought about building something similar and have tried Gource once before. However, I must add a +1 to the parent commenter re: rectangles. Circle packing is pretty, but a proper rectangular tree map interface gives you everything the circle map does with better labels, less wasted space, and less chance of a funky circle layout from the force/relaxing algorithm.

This would be great for a presentation where I'm trying to make our codebase look flashy and cool. But for actually getting work done, I'll take a tree map any day. Check out the mac app GrandPerspective if you haven't seen it - great use of tree maps for cleaning up hard drive space.
And less people. In general.
I remember when Microsoft were the archetypal "not invented here"-ers.
Race to the bottom, ignoring the winner-take-all scenario where you do everything for everyone, when the next group comes in at 2% + copy pastes your entire website copy and you’ve already inoculated to the end market that this solution works, which they piggy back on to get traction....can you survive more than a few qualified competitors and actually make it to cash flow break even? And why won’t this be a “many make no profit” type of market that settles with many undifferentiated sellers with close to substinance level terminal margins?

Obviously marketplaces are great, your product market fit seems strong, and you have both demographics and GMV trends behind you; but you’re in a space with passionate people who might do things for free (like people host or participate in gaming forums or discords).

Even at a few engineers you’re burning cash for quite a while, but you’re touching minors (sorry, no pun) in highly regulated markets like Europe, so you probably need a few compliance dedicated FTEs. How do you resolve disputes where it’s not QUITE the $50k skin and they sue? Or do you require arbitration at signup?

How does this work in the first 3 years until you hopefully win? VC funded burn?
All I really used with basic org-mode was the labelling stuff. I could press a key and cycle between todo/done/whatever.

Really worked well with my list of lists mentality :) that was mostly thanks to org-agenda.

To tell a lie: I also used org-mode to write my emacs config, through literate programming. I don't have it any more, but it's a common thing to try. org-babel will compile your literate codes in sequence, throughout a document.

Thing that turned me off was that I work in WSL2 on Windows and my emacs setup there is for programming, and I didn't want to get into that context for this other stuff. Which means, making a second emacs config. Maybe I'll do it sometime, but right now I'm just figuring out what I'm asking for.
I had longcovid for 14 months. I think the vaccine would hurt my robust immunity and I’ll never take it. If I lose my job that’s ok. If they make it mandatory I’ll flee to Russia. (assuming I see it coming before they restrict travel)
I honestly don't understand the point of this.

Is it just a visualization of the directory structure?

I expect code visualization to more or less ignore the file structure and focus on semantic analysis. For example, show the major components of the system and how they interact. Perhaps the major components are represented by some kind of a module, or a collection of modules. I don't have any concrete ideas. But I was expecting something in this vicinity.
You're free to remain locked down and homeschool your children.
> It's a shame that systems have to be designed to prevent abuse by bad people but at Apple's scale it seems like they should have better answers for the concerns being raised.

Well the obvious response is that these systems don't have to be designed. Child abuse is a convenient red herring to expand surveillance capabilities. Anyone opposing the capability is branded a child molester. This is the oldest trick in the book.

I mean the capability to spy on your kid can easily be used to abuse them. Apple could very well end up making children's lives worse.
This is not how the free market works.

Prices are not set based on costs. Nobody buying stuff at retail has signed a contract to pay cost plus X%. Nobody with a store has to make the same margin on every product whether essential, luxury, or junk, either.

>If such stores don't exist, that's because people are voting with their wallets

There is no voting against what doesn't exist.

>denying the poor the opportunity to get more for their money

Spending more on people with lower wages doesn't cause general price increases in the long run, precisely because a great deal of the inputs aren't coming from those people. This is HN, think of all the high paid software and other engineers who indirectly enable a modern store.

It's impossible to improve things only in the case where everyone is already equal.
As someone that doesn't have last generation hardware, the performance still matters - I really hope they did it this time.

Cool benchmarks: https://arewefastyet.com
The privacy creep usually happens by building narratives around CSAM. Yes, agreed it was objectionable, but there was no "scientific analysis" that such measures would prevent dissemination in the first place.
Surveillance is morally discreditable, and Apple seems to have tested the waters well - by building a privacy narrative and then screwing the users in the process. Most users believe it is "good for them". Though, it remains the most restrictive system.
You can't mandate vaccination with a highly experimental and yet unapproved vaccine. And the main point revolves COVID-19 and the Olympics, not vaccinations in general.

> For the same reason, rules announced last month in France and Greece requiring that people going to cinemas, bars, or traveling on a train show proof of vaccination are not a violation of anyone’s freedom.

I can't believe a professor in bioethics wrote that. We never asked people to show proof of other vaccinations, or proof that they're not violent and won't attack others if drunk, or of past convictions.

There's the implicit agreement that, if you're sick, you won't show up, and most people do that. The comparison with seatbelts is absurd.
Do the people authorized to query the database have access to view its contents?

How many people in the world can certify that it only contains CSAM? I wonder if there are images of US troops committing warcrimes, or politicians doing cocaine, or honeypot intel op blackmail images in there too. Lots of powerful people would love to have an early warning system for leaks of embarrassing non-CSAM images.
This seems similar to differential datalog (DDlog)

https://hexgolems.com/2020/10/getting-started-with-ddlog/

https://github.com/vmware/differential-datalog
Yeah, sure. I’m happy to be downvoted to hell, but I know people who would have benefit greatly from this (perhaps have entirely different lives) if it were implemented 10 years ago.

Convince me that a strong step to ending CSA at the expense of a little privacy is a bad thing.
I hadn't seen either of these. Thanks!

Looks like they're both new apps, so they've done well to get everything up and running so quickly! I already had a lot of the groundwork laid for NightCafe Creator, so it was much easier for me to get this done. There's a lot involved, especially if you're going to charge for use (which is a must if you expect to have any sort of volume in the long run).
There was a funny, tiny thing that happened a few years back that made me think Tim Cook is a liar.

It was back when Apple had just introduced the (now-abandoned) Force Touch feature (i.e., pressure sensitive touch, since abandoned, since it turns out pushing hard on an unyielding surface is not very pleasant or useful).

To showcase the capability, Apple had updated many of its apps with new force-touch features. One of which was mail: if you pushed just right on the subject line of a message, you'd get a tiny, unscrollable popout preview of its contents.

It was totally useless: it took just as much time to force touch to see the preview as just normally tapping to view the message, and the results were less useful. It was also fairly fiddly: if you didn't press hard enough, you didn't get the preview; if you pressed too hard, it would open into the full email anyway.

So Tim Cook, demoing the feature, said a funny thing. He said, "It's great, I use it all the time."

Which maybe, just maybe, is true, but personally I don't believe, not for a second.

So since then, I've had Tim down in my book as basically a big liar.
Had an IPX at that time too, stacked high with peripheral boxes. It acted as my auto-dial gateway to the internet. Of course that was connected to an HP 700 series workstation, a SGI Indigo^2, an IBM PS/2, and a Linux box. The good old days of finding surplus workstations at computer flea markets.
This is awesome, but the aspect ratio/scaling is kind of weird on my Chromebook, which admittedly does have a smaller than usual screen. To have the left side toolbar fully showing so that I don't need to constantly scroll up and down when making art, I need to zoom allll the way out to only the 33% zoom level.
In Princess Diana's crash, she was in the back seat unbelted and died from her heart exploding on impact.

Her bodyguard, belted in the front seat, survived.

Of course, this is anecdotal. Anecdotal is also the large bruises I received from the seatbelt in a crash where the seatbelt saved my life. I didn't mind the bruises.
Gebru has been a terrible representative for AI ethics all around, but this was inevitable.

"AI Ethics" is a pop science topic based on fantasies derived from the Terminator movie series.[1] When the foundation of the entire field is shaky it attracts careerist opportunists who have found an easy way to score scientific reputation points using shoddy or non-existent science. Google doubled down on this to build up a facade of an ethical company (guys, lets pretend project Dragonfly doesn't exist) and appointed the loudest person they could find in this pseudo science group.

The inevitable happened - inevitable if you are familiar with Gebru's forced confrontations with LeCun. She publishes a bogus paper about the carbon footprint of training AI models, comparing it with jet exhaust. A paper more focused on rhetoric than substance. Completely ignoring that Google is carbon neutral and AI chips can run on solar power - just like a Tesla car. No reference is made to how these language models enable cross-language communication, eliminate driving around in circles in a foreign country because you don't speak the language and end up saving CO2. Google, by any measure, saves CO2 emissions for the user.

Instead we have a dummy paper pretending that Google uses jet fuel for a one time training of an AI model. How low can "scientific research" fall.

[1] Certainly, there needs to be work done to remove bias from public datasets; but there is not much to be done beyond this. NLP programs having great models for English and poor ones for Swahili is, frankly speaking, not a problem for ML algorithm researchers to solve. There are one-shot learning approaches but these are not motivated by the desire to eliminate bias.
US can "print" world reserve currency at will and borrow from itself without restriction.
It isn't surprising that vaccines are so readily available in the US, at the cost of few 10s of billion, that US can just will into existence at any time, they save their entire economy 100s of billions in lost sales.
This is why vaccines are free but healthcare is not - healthcare in the US generates 100s of billions per year and keeps people in workforce on both sides - as employees of insurance companies and as employees of other companies that otherwise couldn't afford insurance.
Other countries have to actually earn their money to pay for things.
OIDC for everything.

Kerberos is limited to internal network and some very specific use cases (desktop auth). It's not competing.

If the company has fully integrated Active Directory/Kerberos. On any desktop computer, it's possible to get an OIDC/JWT token for the current user with a single API call. It's transparent, the user doesn't need to enter their password because they are already authenticated on the machine. That is to say, no application ever needs to support Kerberos in the current age.
As I told you before. It’s much better you WFH because I can monitor you completely without your knowledge.

Where is the FBI asshead? I’m still waiting …
"Results: BNT162b2 continued to be safe and well tolerated. Few participants had adverse events leading to study withdrawal. VE against COVID-19 was 91% (95% CI 89.0‒93.2) through up to 6 months of follow-up, among evaluable participants and irrespective of previous SARS-CoV-2 infection. VE of 86%‒100% was seen across countries and in populations with diverse characteristics of age, sex, race/ethnicity, and COVID-19 risk factors in participants without evidence of previous SARS-CoV-2 infection. VE against severe disease was 97% (95% CI 80.3‒ 99.9). In South Africa, where the SARS-CoV-2 variant of concern, B.1.351 (beta), was predominant, 100% (95% CI 53.5, 100.0) VE was observed."

...

"Among 42,094 evaluable ≥12-year-olds without evidence of prior SARS-CoV-2 infection, 77 COVID-19 cases with onset ≥7 days post-dose 2 were observed through the data cut-off (March 13, 2021) among vaccine recipients and 850 among placebo recipients, corresponding to 91.3% VE (95% CI [89.0-93.2]; Table 2). Among 44,486 evaluable participants, irrespective of prior SARS-CoV-2 infection, 81 COVID-19 cases were observed among vaccine and 873 among placebo recipients, corresponding to 91.1% VE (95% CI [88.8-93.0]).

In the all-available population with evidence of prior SARS-CoV-2 infection based on positive baseline N-binding antibody test, 2 COVID-19 cases were observed post-dose 1 among vaccine and 7 among placebo recipients. In participants with evidence of SARS-CoV-2 infection by positive nucleic acid amplification test at baseline, no difference in COVID-19 cases was observed between vaccine (n=10) and placebo (n=9) recipients (Table S5). COVID-19 was less frequent among placebo recipients with positive N-binding antibodies at study entry (7/542; ~1.3% attack rate) than among those without evidence of infection at study entry (1015/21,521; ~4.7% attack rate), indicating ~72.6% protection by previous infection."

...

Efficacy peaked at 96.2% during the interval from 7 days to <2 months post-dose 2, and declined gradually to 83.7% from 4 months post-dose 2 to the data cut-off, an average decline of ~6% every 2 months. Ongoing follow-up is needed to understand persistence of the vaccine effect over time, the need for booster dosing, and timing of such a dose. Most participants who initially received placebo have now been immunized with BNT162b2, ending the placebo-controlled part of the study. Nevertheless, ongoing observation of participants through up to 2 years in this study, together with real-world effectiveness data,14-17 will determine whether a booster is likely to be beneficial after a longer interval. Booster trials to evaluate safety and immunogenicity of BNT162b2 are underway to prepare for this possibility.

https://www.medrxiv.org/content/10.1101/2021.07.28.21261159v...
> it would’ve already manifested

How do we know it hasn't? Maybe the people who have seen these situations have received to national security letters that claim to prevent them from even talking to a lawyer about the non-CSAM classified images they've seen in the course of the investigation?
I had a Blade 2000 with dual 24” monitors and the PC card. It was a beast.
Oh wow. I'd never looked close up. That's fascinating, and a term of art I expect to use in the future.

Btw I think your SQL example is called "EAV Schema" and does have a legitimate purpose once in a while.
Will my photos still be scanned if I do not use iCloud Photos?
Depending on how much memory the rules take up you could use SSE in the server SDK. I believe that’s how LaunchDarkly works.

https://developer.mozilla.org/en-US/docs/Web/API/Server-sent...
Indeed - your UI/UX and credit system look very nice.
“Hidden” cost of the pandemic: drug overdose deaths
> Because it requires Apple and law enforcement, two separate organizations, to collude against you.

Does it really? As I understand it, the thing is pretty one-sided. Who manages and governs the collection of 'hashes'? If it's law enforcement there's no collusion needed. Also, someone can just text you such a photo, or some 0-day exploiting malware (of which governments have a bunch) would plant one on your phone.

> The false positive would have to be affirmed to a court and entered into evidence. If the false positive we’re found to not match the true image by the court, any warrant etc. would be found invalid and the fruit of any search etc would be invalid as well.

All of this would happen after you're arrested, labeled a pedo and have your life turned upside down. All of which can be used to coerce a suspect into becoming an informant, plead guilty to some unrelated charge or whatever. This type of thing opens the door to a whole new world of abuse.
Here is a start, follow the sources from here:

https://www.livescience.com/19311-famine-male-births-sex-rat...
Thanks, this is incredibly helpful!

I was looking into org-mode a few years ago but ditched it because the only iOS app I could find at that time couldn't really sync with other devices without a lot of effort, and automatic, reliable synchronization is a deal breaker for me. beorg OTOH seems to be designed with syncing in mind.
React surpasses jQuery – StackoverFlow Survery 2021
You're the problem. You're championing tyranny. In a century from now COVID will be but a distant memory, will the tyranny?
is there any relation with LÖVE? https://love2d.org/

I don't see anything called out about this on the website. LÖVE is a great 2d game framework written in Lua
There is a subset of people who would endorse the statement: "The tiniest risk to me is not worth reducing deadly risk to a hundred thousand strangers."

These are least delusional anti-vaxxers. They know that vaccination helps society at large, but they still won't get vaccinated, since they consider themselves young and healthy and at minimal risk from COVID.

(They are still delusional, since the risk of COVID infection even in the young and healthy is still greater than vaccination risk. However, at least they don't believe in microchip conspiracies.)

These people wouldn't sacrifice the smallest thing for the rest of us. So tell me, why should we respect their notions of personal liberty? Why give them anything, when they'd give absolutely nothing to the rest of us?

If they want the freedom to not vaccinate themselves, for their own selfish interests, then we should deny them access to public venues, likewise for our own interests.

We're a society. When our government is doing its job, we don't let people pollute the commons, whether it's with toxic waste or with deadly pathogens. Vaccination should indeed be compulsory.
One could also argue that the problem is people wanting to live in forests and not properly maintain treeline from recommended distances (~100ft) leads to so much residential damage.

Stop living where there are forest fires and there won't be such an urgency to put them out.

Also, I think there's a kneejerk reaction to blaming forest services for not taking care of the forests. When in reality (a) they do: brush clearing and controlled burns happen all the time in california & oregon, (b) forests are far too huge for even 10x the puny forestry service of today, and (c) budget is constantly being cut.

Also x 2: the west coast US is experience drought unlike any since humans settled the west coast. Letting forest fires burn in California, Oregon and Washington now wound remove the forests entirely. EDIT: Regardless it is gonna happen, there are completely brown/orange forests in central oregon just waiting to burn.
I think this is missing a huge part of the point of the article: the complexity of the standard and the domain space it provides makes implementation errors more likely.

It’s akin to saying “making a web browser is easy, just follow the spec”; but the spec is a sprawling set of standards, with many layers of revisions and many important details left up to implementations.

In both cases, implementations may not be nearly as cautious about the finer points of the spec. That’s a huge weight for either to carry, and probably the only reason we haven’t seen a similar proliferation of browser implementations with horrific vulnerabilities is that the spec is so huge and the incentives to build a new one are so low.
I'm not a security person at all. Is there a quick explanation for how these attacks allow the attacker to mess with other clients' requests?

I'm also confused at their usage of the word "prefix". Did they mean "suffix"? Or does "prefix" have a specific meaning in this case?
Is this by the same people who made LÖVE? The naming and use of LuaJIT suggest it.

I love LÖVE. It's a great way to throw together rapid prototypes, and Lua is a joy to work with. Exciting to see a 3D framework along the same lines, hope it can work well for non-VR apps.
Donors? I did not know that donors forced the switch!
absolutely. Just don't expose your children to any people whose positive vaccination status isn't known to you. It isn't prohibited to ask about it.
I don't like Lua. I prefer three.js and js because that's what I'm best at. That being said I did have some fun learning experiences with love 2d back in the day. This looks like an interesting tool just like love 2d was. I'll be envious of those who can use it to achieve their creative visions. :)
See here in the uBlock Origin wiki: https://github.com/gorhill/uBlock/wiki/Dashboard:-Settings#u...

Which in turn, links to this for background information https://www.theregister.com/2021/02/24/dns_cname_tracking/
So explain my company. My team is split into two primary locations. The HQ, where I work is a typical multistory office building, while the remote site is more stripped down. The remote site has no managers for my team, our managers are all at the HQ.

So essentially, the workers at the remote site have been working (tada) remotely for over 13 years. And they do a great job. We communicate via email, by Teams/Webex, and there's no real difference.

And then COVID comes along and we all WFH for the last 18 months. Now when things appear to be getting better, mgmt is all in a rush to "RTO."

So not only have we proven that we can work well remotely in non-COVID times, but under the immense pressure of COVID, we had record profits.

So now we're going with the worst of all worlds for my team; hybrid. We're allowed to work 1-3 days a week remotely, but the other days we'll be in the office in desk hotels. Sounds like so much fun.

It really boils down to old school VPs/Managers who think butts in seats is how you get work done. And I say this as someone who's closer to retirement age than most.
Apple is not an autonomous hive mind. The hundreds of people that built this and coordinated the deployment across multiple teams including management, deployment, QA, beta testing, machine learning, and SWE aren't lying and the majority of them certainly have good intentions.