skysight-inc/HackerNews huggingface dataset:
(one of the authors)

Yes! We carefully distinguish vector search vs vector databases throughout the article. The end sections on architectures touch on that, such as questioning compute-tier solution vs not.

Reality vs marketing seem to diverge here. On the compute side, Faiss and some others have scaling extensions (GPU, bigger-than-memory, ...) that both out-perform and out-scale some of the vector database solutions. Likewise, similar to redis, teams will use it in a rather persistent way in practice. Conversely, some vector db teams market traditional db notions like CRUD operations, but it is unclear how much that is their ideas talking, the need to meet VC funding stories, niche use cases, or what managed vector search users want. Likewise, if we did a comprehensive benchmark of vector databases vs say graph databases, I'm not sure which would win in many key cases, including on those vector databases advertise on.

It's an interesting time!
I use it a lot but never for anything to do with security (obviously). We use it for calculating simple content hashes that are used for caching or database ids. It's fine for that and md5 remains extremely popular for that and is used for such purposes by quite many big name companies. It's not a problem and not a security issue. If you look at cache headers in your browser, a lot of the content hashes you'll see will be md5 hashes for example. Likewise, if you use any of the popular object stores in AWS, GCP, Azure, etc. they'll be using md5 content hashes.

This is not a mistake. Md5 is a nice compromise between being fast and having a low probability of having collisions while keeping the hashes nice and short. Simpler/faster hashing algorithms are available of course and they have even more potential for collisions and it's not an issue there either. But md5 is kind of easily accessible and there on most platforms. So, it's a good default to use if you need some kind of content hash.

I've never seen accidental collisions and intentionally trying to create collisions in a cache or a database id doesn't really serve any purpose to anyone. So yes, you could try to do that but why would you? The probability of unintentional collisions is low enough that it is not a concern. It's a complete non issue. You are never going to see one in your career.

Using it is not a security issue unless you use it for things that need to be secure in which case you should use something like sha3 or alternatives to that. But hash algorithms have applications beyond security sensitive ones. AWS using sha3 for s3 object content hashes would be overkill and a waste of CPU,
Speaking of Google and ads; I witnessed a new low today.

My 3 going on 4 kid was watching a cartoon on Youtube: Curious George.

An ad popped up promoting some show, featuring foul language and sexual intercourse.

Yagoddabekidding.
Antd

https://ant.design/
I wouldn't tell you where I live just to prove there's no convenient Apple Store.
That does depend on honesty of unobservable USPS activity. So it's not obviously better. Even with USPS honest, people opening the envelopes need policing.
The article doesn't do a great job at explaining that this isn't always just filtering, sometimes it's aggregation too.

A mobile client may need data points to display a single page that require calling 20 different APIs. Even if every single backend offered options for filtering as efficiently as possible, you may still need an aggregation service to bundle those 20 calls up into a single (or small set) of service calls to save on round-trip time.
They could, but given that it'd just make the project later they probably won't.

People will always act like you HAVE TO show up and work overtime or weekends, but in reality it's a choice.

There may be some consequences, but most likely it'll just be that a manager pulls you into a room and has a talk.

I say stand your ground, have a backbone and live your life on your own terms.
> I've worked for too many managers where either everything, or too many things were urgent too frequently .. without any urgency gradient to differentiate.

Where I work, we affectionately refer to this as “the dumpster fire” of priorities. I’m lucky that we also work together to both recognize and rectify the dumpster fire blazing out of control.
I don't feel like modern games are that much better. thanks to current engines anyone can make games with photorealistic graphics, but animations are still far from great. looking forward to seeing ai improve this area
Strictly speaking, the Supreme Court did steal that by forbidding Florida to count any more ballots.
Daily 'Breath Training' can work as well as Meds to reduce high blood pressure
That's one of the odder things about the HN user base. How much we care about things seems to have little to do with how much they affect our lives. Most of us exist with a magic shield carefully affixed to our every point of contact with the electronic world that fully insulates us from anything we don't want to see, but it is maniacally important to us that Google doesn't know it was John Smith who searched for "sexy ostriches" eight years ago.
Doesn’t it matter what they are “selling” after work hours?

I was a salesman 20+ years ago and still engage in up selling my friends. But it’s usually to get them to engage in healthy activities like working out, going for a walk, or eating healthy; or to get them to try a new experience like tasting a new food or being more honest/kind to their loved ones.

Sometimes I wonder if I’m exhausting to them or they appreciate the good intention.
Seems like treating the symptoms rather than the disease.

Get rid of dailies and status checks from stakeholders and you dont need this tool in the first place.

But if you can't then it's a nice little project to make ones life a bit less miserable.
To be fair, it is mozilla saying to youtube that "dislike barely works"
BFF can live on a different stack from the heavier backend, and bear a different development cycle.

I've worked in a few orgs where backend devs work on both the standard backend and the BFF, often adjusting both when adding new features. It's just convenient to have a separate layer closer to the frontend, dedicated to it.
The periodic table of endangered eleme
I think the problem with DI is less about how they are passed in and more about how usually there is are only two implementations: the real one and a test one. The test one is a mock/stub based on assumed behaviours of the real thing. Obviously, such an approach is essential in some situations but in general it is mostly bad.
Scoreboard:

2 vaccine specialists against

1 medical ethicist for (its just like the flu shots eh?)
Didn’t a lot of businesses get into a lot of problems (and as such costs) precisely because of these supply chain problems?
This ^ we usually rebaseline the schedule and deliver later.

I usually try to get the execs (sponsor, exec committee etc) to understand the difference between a hard and soft deadline. Hard being “it must be actioned” by a date such as a regulatory change, a construction project etc, and a soft deadline being “we want to do x by y” where the impact of delays is less.. perhaps worst case some revenue isn’t realised.

Perhaps trying to help solve the current project management approach issues would help you improve the workplace without having to leave (and would help all of your colleagues too it seems)
Is there any discussion on how this work will differ from Common Crawl?
That's all fine. Just remember: the lack of perverse incentives doesn't prevent sloppy wishful thinking.
People got upset that they were still counting at night or the count changed the next day. How would this help?
Are types always correct?
Woolly mammoths were still around when the Great Pyramid of Giza was built
CSS variables are often set in JavaScript, the consumer of the variable is not necessarily the same person as the one who defined it (who perhaps did not anticipate its use in a calc() expression).

Given that unitless zero is automatically coerced to a length when used as a constant (e.g. padding: 0), it is certainly a bug that this automatic coercion does not also happen when it is used in an expression.
Why doesn't Chrome on Android support addons?
GraphQL is practically designed to support this pattern. Facebook was one of the early proponents of this architecture and GraphQL was a product of that. The federation features allow individual teams to maintain their slice of the pie and communicate with the real backends over RPC.
I’ve recently started using yandex lately and have say I also find it refreshing. My favourite is the image search I just find it superior to other search engines.
Any ORM will handle getting data with joins just fine when it constructs the SQL. Or you can write your own SQL with joins to pass along to the query.

If you mean GraphQL doesn't have joins, I'm not sure in what use case that would matter when you're declaratively asking the server for some data, not hand constructing SQL. What would you need joins in? You mean like this example [0]?

[0] https://stackoverflow.com/questions/51805890/how-to-do-a-sim...
Well, actually not everything possible via CFFI is possible via GIR. I've run into some issues before. I cannot recall what exactly, but it was a showstopper for me :-(.
Thanks for recommending aerc. I gave it a try for my Postgres contributions workflow, and it was very easy to use it. Having tried mutt, it was surprisingly easy to configure aerc to work with GMail.

I am able to induce a crash pretty reliably (by pressing J or K at a fast rate), and probably there are other minor bugs hidden. But aerc is good enough to be my daily driver for my workflow.
I used one of these in the mid-90s during a newspaper career. I'd go to the police station and transcribe stuff, then go back and re-type it line-by-line onto a Mac Quadra.

I'm sure there was a way to plug it in and not re-type, but I never got around to that.
IIRC in the Gatsby framework it has a built-in GraphQL parser for server-side developers to query data from Gatsby plugins, which can be things like data stores, other APIs, or even a mixture and blended together.
Why does the do not call registry work, but the do not email wouldn't?
It was fun and engaging and I enjoyed it!

That having been said, and I apologize for raining on the parade, but I do not think it is a new type of puzzle. It's basically a visual representation of a state machine. I believe the classic "Get the farmer across the river with his wolf, goat, and cabbage" puzzle is the same sort of puzzle and could be represented in a similar way.

If there is some aspect of it that I have failed to take into account that makes it unique, I'd very much like to know!

And again, thank you for sharing this; it was fun ^_^
> Look - can we just admit that most C++ apps don't have thousands of use-after-free errors?

For sure! It's those one-every-million-lines-of-code ones that are the problem, and that slip through code review and rear their head only in production at odd hours of the day.

> this sort of thing is not going to convince anyone to use rust that doesn't want to already

My post was in reply to someone asking the question what does Rust give you over modern C++, and this was an example showing that modern C++ still has its holes.

I'm not a Rust absolutist, nor do I think everything should be written (or rewritten) in Rust, but the biggest thing going in its favour is that offloads the cognitive load of checking lifetimes and ownership to the compiler, and that turns whole classes of runtime bugs in to compile time bugs.
Do you expect the average user to know how to "eliminate the possibility that a device on their network is compromised"? That is untenable.
AGI incorporating a Scott Aaronson brain emulation will solve quantum computing within 20 years.
Ann Reardon (not Reed, as I wrote originally), from "How to cook that" did a video on it.

Basically Youtube rewards interactions, and a dislike is an interaction. Her main evidence was a video by pewdiepie where he asks everyone who views it to dislike it. It is one of his most viewed videos, at least around that time, and by far the most disliked.

Sadly Ann Reardon names her videos after what she cooks or debunks, and not her critiques on the algorithm (she has quite a few really good one)

I'd appreciate if someone knows the link.
Forever young, beautiful and scandal-free: South Korea's virtual influencers
Why does MV3 matter?

Fuck Chrome, for a moment. It sounds, to a layman, like an arbitrarily established API for web engines to expose to extension developers.

In other words, it isn't HTML5 or HTTP4. Each browser chooses whether to use it.

If it is such shit, why is Firefox doing it?
> If Google actually wanted to cripple adblockers, why wouldn't just ban them outright and remove addons used for adblocking purposes from the Chrome extension store, or completely remove APIs that allow for content blocking? Why would they develop a new extension API that still allows you to block ads at all?

They already did all this on the most popular version of Chrome. It seems very reasonable to assume their desired state is to match that version across all platforms.
> EU-funded project cannot succeed in tech

Not sure about software, but all (well, Apple is getting there) phones now use the same connector to charge because of the EU.
Tweaked the volume.

Airports are some of the loudest places because of abuse of the PAs.

Gate agents extending phrases that are unneeded (the “bordering process” instead of just boarding), 27 different zones on the airplane, reminders not to leave luggage.
Using something like Material UI is always a great idea to get you moving quickly. But eventually you reach an annoyance point once you scale up the number of components you're creating. Especially if you need more customized things. The layers of hacks and work around start to get confusing. And new folks give you lots of WTF comments.

Same reason people build new libraries or languages. They feel limited by the "thing" they're using. :)
I guess it depends on your definition of “doing better”, but for example in the Soviet Union the average factory worker made much more than an academic researcher, and I’d bet that academics would score better on an IQ test. So it’s definitely possible to build an economic system where lower-IQ individuals do better.
Easy solution.

Go down to your local post office.

They physically hand you an identity token on a physical $2 2fa device if you give some evidence you live nearby. You can put down the deposit or hand over the device for an old id which is cleared and reused.

It's traceable to the post office but no further, nothing is recorded other than that the token is deployed and roughly when.

Local communities can be responsible for cleaning up local messes. No need for the scammers two cities over to effect your reputation. No need for a corrupt employee handing out tokens to effect the reputation of the token you got ten years ago.
I signed up for the early version of Nota back in 2020 and it was still beta / invite-only way back then. Then, your website said "macOS beta coming in 2021" in 2021, and now in 2022 it says "macOS beta coming in 2022".
Invisio Solution is a customer support company that provides online ticket support and customer service solutions in Dartford.
Myspace was the place to be until one day it wasn’t. YouTube is a behemoth but it too could fall one day. For now the amount of information it has is just too valuable but it is becoming less enjoyable to use the site all the time. On iOS I don’t have an Adblock and am forced to watch countless ads and then When I watch the ad the video fails to load. So I refresh and sometimes that works sometimes I need to do it several times before the video will play. It is a shame they have gone so downhill over the years for us old enough to remember the beginnings.
My second example (the one you replied to) doesn't require you to turn off compiler warnings.

It might seem contrived, and it is, but it's the essence of a bug that has happened in the real world, distilled to a 10 line example.

And yeah, "use things properly or they will blow up", but enough people don't do that (or mostly do but occasionally slip up) that it becomes a problem.
No, but I wouldn't expect the average user to write a blog post with unsubstantiated technical claims, either.

I do think Cloudflare could do better here to let the owner of an IP know why they're suffering from poor reputation.

However, it's not immediately clear to me how they could accomplish this without weakening their side of the car vs. mouse game.
I think this is more of an opinion than a matter of fact
So according to you, Feynman did it poorly? Seems to me then being a poor philosopher is a good thing.
Premium users are not the majority. Their algorithms are tuned for the non-Premium users.
It's random. I've been on 24.x.x.x, 66.x.x.x, and 98.x.x.x.

https://postmaster.comcast.net/dynamic-IP-ranges.html
There's a lot of will now. What about in ten years, how much carrying cost are companies going to be willing to sustain?
As much as it sucks, DDoS attacks seem to keep ramping up. Google recently blocked one doing 46M requests/sec [1]. It seems like the problem with credit card fraud or spam all over again. People hate being lumped in with malicious actors, but false positives are a thing and a few bad actors can and will demolish the entire system if its not secured.

[1] https://cloud.google.com/blog/products/identity-security/how...
Aren’t you saying the same thing the author is saying, except you flipped the words? Story points in your case are the arbitrary deadlines he’s talking about, and the deadline you mention is more of a preemption point used to negotiate scope.
Can this be used to generate soft X-rays, aka "extreme ultraviolet"? You can do that with a synchrotron or a big linear accelerator, but it hasn't been cost effective. A smaller accelerator could replace the vaporized-tin hack ASML uses as a light source.
Yeah? What are some good ones?
What kind of markdown app takes a decade to make?
> Seems like a random network reset 5xx which will happen rarely in any distributed system.

It's happening more than 1% of the time. That's not an satisfactory answer when AWS is measuring reliability in terms of 99.9%+.
been hearing lots of praise for Zerodha. Their engineering blog is quite interesting.
That would make sense considering their population is more than those combined, and a mind-boggling amount of manufacturing has been moved there.

I imagine you’ll find plenty of people who _also_ want pressure on China to improve, but the western world can’t simply absolve ourselves of the problem we created either.
Personalized vaccines for cancer immunotherapy (2018) [pdf]
So ... for a Mac, get the full version from libreoffice.org, or a full version from TDF, or pay for a (slightly) cut-down version via the app store. Isn't that the definition of a "lazy tax"?
The new iPhone 14 still has a lightening connector.
I don’t. And generalist is a flexible term. For my career it means frontend, or backend, team lead, or IC. There have been a few points where I thought “I don’t ever want to write browser code again” and “all I want to do is UI”.
I’ve built shopping carts, government tax websites, worked in automotive, and now I build tools to manage robots. I suspect if I had been narrow in my field I wouldn’t have had the opportunities that I’ve enjoyed.

I sometimes think a narrower, deep specialization might have yielded a bigger paycheck, but overall I think I’m happier being able to explore broader fields and concepts.

As a final note I’ll say that you’ve got plenty of time to generalize and then decide to specialize. Bring in your early twenties is far more time than it feels like right now.
Could this potentially be integrated as an extensible platform for moddable gamelogic, like Quake did with their .qvm bytecode Quake-Virtual-Machines?
One thing that, for me, sort of undermined the idea of adding strength "around" a weak hash was the multicollisions paper: https://www.iacr.org/archive/crypto2004/31520306/multicollis...

Intuitively you might think concatenating two hashes could make something way stronger than either, but the way these functions were constructed, that isn't necessarily true. It also shows a trick to efficiently make exponentially more collisions with linearly more work. It's not that those specific tricks work against every idea for fortification; the paper says it doesn't break some schemes you'd expect it to. But it does show that a weak Merkle-Damgård compression function has weird indirect effects, and that makes things built on one seem shakier.

It can make some difference to try to build a system not to rely on collision resistance if possible, or not to give the attacker full control over the input to the hash. For example, CAs started putting a random serial number not predictable by the requestor into the generated cert, so the attacker couldn't predict all of the content being signed. They still moved off SHA-1, of course.

There are lots of good things to say about newer functions. They do more work (more rounds, bigger state), may make better choices of where to spend their effort (newer functions seem to mix bits faster), and use today's CPU capabilities effectively (recent hashes support SIMD parallelism; SHA-512 uses your 64-bit ALU; SHA-256 even has x64 instructions).