skysight-inc/HackerNews huggingface dataset:
I agree completely.

While not Shoegaze, the first time I realized my inner dialogue had stopped completely for a few seconds was after the first time I listened to Washing Machine (the song, not the album, though I was listening to the album in full) by Sonic Youth. Up until then I had never though that'd be possible: I always assumed we all had an inner dialogue going on all the time (I later learned some people don't have this at all, which I find intriguing, probably as intriguing as they find that some people always have one!).
The only way it will be over is that tiktok/instagram will attract more eyeballs and hurt their bottom line. Ultimately this is for amateurs to create really short form content for the foreseeable future.
Whats better:

1. Standard library: Deno has so much better standard library, support for web standards, promises instead of callback, and need to reach out to third party modules lot less

2. Performance: Deno is focusing a lot on performance and it faster than node

3. Package management: No more gigabytes of node_modules, They just have URLs which are simpler to use

4. Versioned std library:node's standard library is packaged but for deno you can use different std library than deno version.

Whats worse:

1. Ecosystem: There are lot less packages for deno but Deno team is working on npm packages support. So all/most npm packages will work in deno

2. Deployment target: Deno has deno deploy but that pretty much it.
Yup. And in most cases it simply doesn't make sense to spend the capital on the preparations.

Ex: Atlanta gets roughly 2 inches of snow a year (usually one or two minor snowfalls) and it's far cheaper to simply shut down for a day when it happens than it is to have the infrastructure in place to handle staying open.

Every 10 years or so we'll get a big snow, and be down for a week (ex: 2014) and people will freak out - but on the whole, still much cheaper to have that downtime than to be exorbitantly over-prepared for situations that are rare and not disastrous.

I suspect this will be the case for the mobile outage here - on the whole, the circumstances causing the outage (lack of power) is likely not recurring, and the costs of weathering this outage with existing infra is much more favorable than being over-prepared for blackout conditions which are rare.
I'm not sure why? The majority of the economy has been private, and its collapse is due to stupid responses after the oil crisis. If your country is led by a moronic dictator it doesn't matter what the economic model is.
he's actually very competent at audio, just he really clings to this hardly intelligible voice filter for some reason.
Issue tokens that have a reasonably short TTL - say, half an hour - and let clients use their refresh token to obtain a new token after that. On refresh requests, ask the database whether the refresh token has been invalidated, if it is, return 403 (bonus points for checking the expiration date first and delete expired and invalidated tokens from the invalid-list).

This reduces the necessary database roundtrips, while still supporting a logout flow.
It’s not Android being abandoned. The issue is your device being abandoned.
Caveat emptor. Just a body shop by another name and if the buyer doesn't care, they get a random bunch of bodies.
It's unfortunately not that simple. I'm South African. We have load shedding "stages", where each stage sheds 1GW from the grid.

We were just at stage 6 recently, and this means there are days with 1x2.5hr outages and 2x4.5hr outages, with maybe 2-3hrs between these stages to recharge batteries. In my experience the cellphone towers do not always have sufficient time to recharge their batteries.

I live on an estate with a cellphone tower owned by the largest network operator, and this is still an issue. SMS-based MFA becomes a problem when this happens.

Interestingly, I have never once had a fibre outage through years of load shedding. (I have battery backup for my fibre CPE.) I can easily get 200mbps to a local DC while people relying on 4G or 5G are completely cut off.
No. They are talking about limited disruptions to limited areas due to planned load shedding. If your power and phone are out for 4-6 hours - is that going to suppress your ability to protest?

I know I'm not supposed to do this, but is this "concern trolling"? I can't see how you could get from A->B unless you're trying to rabble rouse?
Is boxing ethical? People make choices because they believe it will make their life better. If the homeless people think the money is worth the fight that means the website is literally making their life better and therefore ethical.
> Installing CC immediately cripples your machine and it can’t ever be uninstalled.

My multiple computers from which I uninstalled CC would beg to differ.
Cerebral Treated a 17-Year-Old Without His Parents’ Consent. He Died
There were a few TV models a couple of years ago that would stop working after enough time without a network connection. When they reconnect, they're clearly going to download a new cache of ads and transmit their existing tracking data.

It's easy to assume that they'll eventually require an unabridged connection to their own servers for updates, and they will simply send all ad data through the same routes such that you can't block one without blocking the other.

This is too lucrative for manufacturers to pass up. The added complexity also ads more points of failure and drives faster industry-wide consumer upgrade cycles. This is not something that will be fixed in the market alone.
To the last point - imagine that you're using some library code, and you do an update, and now it starts trying to talk to some back-end server. That might be a good thing to stop.

Also, I'm looking forward to the idea of running a host like Deno, with applications inside that other people wrote. Kind of like sandstorm.io. I may be naive, but I'm hoping this happens really, really soon.
Honey, I Sold My First Bootstrapped SaaS Company
Because it’s name is “Cassie”, I would think the designers wouldn’t call it a robot ostrich, but a robot cassowary (https://en.wikipedia.org/wiki/Cassowary)
Wait until you figure out what the alternatives require...
How is that? TeslaFi.com has been there for ages. Many others exist. And Tesla actually improved API access over the years (can now use tokens vs. having to share your account password with the app).
ok, but wouldn't the tags still be resolved by browsers, even if they're not wrapped inside <html>? or is the point that it's not meant to be viewed through a browser? the overhead of the tags in terms of bytes seems fairly negligible, no?
I think it has more to do with the extreme trade deficit. But sure, political quasi-stability is not a positive.
> What's better with Deno?

Scripting, tooling/IDE support (webstorm support is pretty good), documentation and standardization, infrastructure as code

> What's still worse?

Node/NPM compatibility is still hit or miss depending on the library you're trying to use, that's something Bun is trying to improve over Deno.

Also, typescript types feel very hacky and I feel that's something very important as one of Deno's biggest selling points is typescript first-class support, definitely typed is doing most of the heavy lifting but things aren't perfect.
Seriously! That licensing is a feature for the public, not a bug. Make your project open source.
Code execution of code written by your own engineers!
Delaware Freezes Out Russia-Linked Startups, Extending Sanctions’ Reach
"I want my warp engines, Mr. Laforge." https://abstrusegoose.com/323
And Safari on macOS (same system). Worth noting those can’t block the most recent YouTube ads without introducing a bespoke solution.
>If I grant a friend permission to view my photos, I am not also granting some random 3rd party that permission.

Assuming the "third-party" client is just that (a client app), there really shouldn't be an issue. If I use FluffyChat[0] instead of Element[1], do the FluffyChat folks have access to all my (and those with whom I communicate) Matrix communications? If I use Element, do they have such access?

If you use Firefox to access Facebook, are you granting Mozilla full access to your (and your FB friends') profiles?

There has been a lot of noise about "third-parties" and how they only exist to steal your data.

But we use "third-party" clients all the time. Web browsers, IRC clients, and a host of other "third-party" apps. Why aren't you up in arms about them stealing your data and that of your contacts?

[0] https://fluffychat.im/

[1] https://element.io/
And there's Military Ocean Terminal Concord, the primary ammunition port for the Pacific area of operation.
I think it is probably more difficult to show that these particular oral traditions directly led to complex story literature other than those attributed to Homer. Certainly stories are told and passed on, but beyond someone writing those particular stories down, the effect on other literature without an oral tradition is not as clear.
I agree with you that there wont (or shouldnt) be a one size fits all AI solution for millions of different pieces of music. The same reason why mastering audio is considered an art form as much as a science applies here-- it involves deep understanding of intent which goes far beyond simply analyzing waveforms

Theres also a lesson to be learned about using sorts of style transfer to add dimensionality to past artwork which is that maybe the artist would have deliberately omitted these new dimensions even if they were made available at the time, so the new dimensiona effectively change the original intent, and shouls may be considered an entirely new artwork with somewhat different authorship and different message altogether
In Boston, which has a hub-and-spoke transit system that is oriented towards getting people downtown to an almost absurd degree, the numbers bear out that the T takes about as many people in and out of downtown as the freeways do by car. The report below states about 500,000 cars enter Boston via its main highways, and about 500,000 people take the T, daily.

https://www.mass.gov/doc/massachusetts-transportation-facts/...
Decrypted on the local computer, not the untrusted remote computer as it were.
In the future version of this, the end user asks for a movie and gets a custom movie generated just for them.

You want a thought-provoking Bourne-style action thriller with hints of Jane Austen and a bollywood dance sequence? How about a Matrix sequel that lives up to the first one, but ends just the way you like it? Just ask.
Apart from the issue of not being able to log out there is the following list in the article:

"We've ignored things like increased attack surface due to complexity of JSON parsing/validation, misconfiguring JWT libraries to allow no signature, leaking data to users because you thought JWTs were encrypted (they're usually not by default), and poor implementation of API clients that don't properly re-run requests that failed due to expired JWTs. The list goes on, and on, and on ..."

All of these sound like usability issues. Not to downplay them but are there more serious issues with JWTs?
The front end almost always needs to know what a user is authorized to do, because it is reflected in the UI. Which edit/delete buttons are visible and active? Is there a link to the admin page? Is there a link to a supervisor dashboard? Most apps send that information to the front end in a way that maps 1-to-1 to how they model authorization on the back end, often using exactly the same language, in which case you don't gain much by encrypting it in the JWT. But if you are taking measures not to leak your authorization model in the front end, then it makes sense not to expose it in an unencrypted JWT.
Former eBay exec who ran scheme to harass Natick couple sentenced to 57 months
Reminds me of my days playing with Eliza on my family Atari computer.
So can cats!
Hey there! I'm another dev from the Jiter team.

Awesome feedback and thanks for taking the time to challenge us! Sorry in advance for the wall of text, but you asked some great questions.

It sounds like you’re probably a bit outside our target market because you sound comfortable building a scalable solution of your own. However, our target user is either unwilling to build their own or they don’t have the skillset to efficiently build and maintain a separate cron app/server.

As for other execution environments, those definitely have options for scheduling things and setting up recurring events, but you have limited flexibility and things like Type Safety can be quite the burden because they're disparate from your core app. (And while I totally agree GitHub Actions is an option, that doesn't sound fun at all haha). However, what they don't have is flexibility around the "when"...

For example, let's say you want to check to see if a user has performed XYZ action within their first 72 hours after signup. You could setup a cron job to fire once daily to simply poll ALL new users, lock those rows, and join with other tables to see if they're relevant for a follow-up email OR you could setup a Jiter event to target that specific user at exactly 72 hours after their signup. The result is distributed, small queries delivered just in time. The payload contains exactly the information you need to handle that one action and you spread your DB queries out over time to minimize larger impact to a decent chunk of your table.

I agree about the complexity of maintaining the webhook, but hopefully that logic is super focused and ideally you'd use different routes/handlers for different events so each is small and maintainable.

Great feedback all around and I'm curious to see if you have a follow up on any of that!

TL;DR - We're not for everyone, but we think we offer a convenient solution for those looking for flexibility and for those without the skillset to roll their own.
Well I'm sure there's a meta joke in my phone auto incorrecting loquacious to a word that doesn't seem to exist.
>13. WeTransfer

>The easiest way to send your files around the world.

>You can share large files and photos. Transfer up to 2GB free.

This might be a game changer.
You are hilariously wrong if you think it will not improve. Combination of prompt engineering, better and bigger datasets, better architectures, bigger models, artifact-fixing tools and sheer human creativity will seriously challenge traditional movie-making within two years.
I actually have been trying it out this week, and in fact it's currently trying to process the video generation, like their example shows. While I was able to follow their steps for training using their dataset, and generate the lighting/depth maps for the milkcarton example, the video generation is taking a long time (over 24 hours so far, using a 3070Ti with 8GB VRAM).

From what I understand with NeROIC, it's not particularly meant to be able to generate an 3D model that can be imported into Blender (or other software). It requires more work to take the meshes it generates to do something with it. See https://github.com/snap-research/NeROIC/issues/10

I too was looking into it to generate 3D models for some software I've been working on.
needs a mic
Looking at this from another angle: even though our self-interest is strong, we live the majority of our lives under social rules that promote virtue (or rather, virtue is defined by the social rules). The number of humans who can actually pursue their self-interest in any real way is limited. Most of us have to work for many years, and surrender most of our lives to the broader world.

In fact, true psychopaths never seem to occupy more than 1% of the population. They are the self-interest pros because they do not feel fear or stress the same way we do and can make the most of it. But at the same time they find themselves limited by society even if a few of them succeed enormously.

All this to say, I'm not sure virtue is that limited. These are competing forces that have reached an equilibrium but most of the fabric of our lives IS virtuous.
Films today require institutional capital. There are less than a thousand directors a year that get greenlit. There isn't enough conceptual or directorial diversity, and it sucks.

In the future, kids will be making their own Star Wars movies from home. All kinds of people from all kinds of backgrounds will make novel films that would ordinarily never be made, such as "Steampunk Vampires of Venus", starring John Wayne, a young Betty White, and Samuel L. Jackson. This is absolutely the future.

I'm working on building this. I'm sure lots of others are too.
Your theory is that fallout will kill more people than the explosions themselves. Let’s test it on Hiroshima and Nagasaki explosions, each of which causes immediate casualties on the order of 100 000 people. Did the fallout from each of them kill millions of people? No. Did it rendered any part of Japan uninhabitable wasteland? No, in fact both cities were continuously inhabited from immediately after the bombing to the present day.

Fallout is not some magic poison that kills everyone on contact. It mostly causes extra cancers. People will die from cancers, of course, but I guarantee that in case of nuclear war, more people will die to starvation due to the collapse of production and supply chains resulting from large scale infrastructure and human capital destruction.
I thought it was a pun on spinning.
> LinkedIn is becoming more popular with Gen Z adults as they enter the workforce,

I feel like day by day LinkedIn just becomes more and more useless not that it was useful to begin with. It's basically a spam source for me at this point.
If you compose SQL with subqueries you tend to do less composition in general (because you are restricted in what you can compose), and you are more at the mercy of the query planner, which is its own black box.

I'd rather simply understand how my ORM generates queries, and then use the ORM to get the full power of my language of choice in creating the right SQL queries.
This calls for an universal text to teaching material with tests converter.
You should check out how much power the Starlink base station requires. It's one of its main issues.
Sure, Ukraine had - and still has - problems.

But one thing is to have your own problems, and entirely another thing is to be forced to have Russian problems and to have every hope for change destroyed by Russia because it's threatening their position that they built on sponsoring the corrupt people.

Consider that it was revealed that FSB has/had a massive corruption campaign in Ukraine funded with billions of US dollars per year. Let's wait with judging Ukraine until we can judge fairly.
Tell HN: Twitter has a new subthreads UX
I just noticed Twitter has a new, arguably improved UX for subthreads. That's all.
What I do for pretty much any book that I intend to learn from is treat it like a lecture; as though I'm going to be quizzed on it afterwards. I have always had issues committing things to long-term memory, but the same methods we use to remember things from lectures work for books too.
I typically write out a summary (in a dedicated document on my laptop) of each chapter I read, after i finish reading it, in the most concise manner possible. A few sentences about the narrative, and bullet points about what I want to remember from the chapter. This way, I can return to my notes when I want to remember a book and what it's about and get a solid gist about what's important. Not only does this help refresh my memory, but writing those summaries makes it twice as likely for me to remember the parts in question.
Christ knows how hard this was when I read the Old Testament.
GrapheneOS – Common usability misconceptions debunked [video]
You're right, they aren't, particularly. Just moreso than alternatives - especially if

> it's not required if you're going to access the DB anyways on authenticated requests.

then what's the point? You're just re-inventing bearer tokens.
You are right to be blunt. I didn't want to define the separation of input and output privacy in a comment. In retrospect maybe I should have but I can't edit anymore. It is however common HN practice to pick out the words that suit someone and construct an very specific argument based on these words, often missing the spirit of the comment.

Yes, when I wrote the comment I had in mind "output" privacy while FHE is dealing with "input" privacy. It is related to privacy, but not in the way most people think about it.

If you go to a random person and ask them about privacy they will not think about the threat model of a cloud provider leaking their data, but they will think of the thread model of a pharma company knowing exactly what drug they bought and when. That notion of privacy is not covered by FHE(alone). And even the first notion of privacy is covered only if the FHE program has a way to attest itself so you know that what you expect to run is indeed what is running.
>The data server via API isn't yours, that's FB's data. You can download YOUR data via a page on the FB site.

Just to clarify, that means your answer to the question:

I could be using nc[0] piped through openssl, rather than a web
browser (do you believe Meta can mandate which browser you use
and/or what add-ons/extensions it runs?). Is that "hijacking" the
API?

Would be "yes." Is that correct?

If so, please consider what that means for your property rights.
So how long before we can “Hey music-stable-diffusion-service,” play me “relaxing baroque violin and flute music in the style of game of thrones” ?
Elon Musk Cropped the Credit Out of Our Cartoon and Tweeted It Out
A good interviewer would then ask follow up questions to either get a straight answer or highlight the absence thereof. Unfortunately, much of the mainstream tech "journalism" is just repackaged press releases written by people hoping to get hired by the very same companies that they "report" on. Thence the softball questions and toothless interviews all in an effort to not upset any potential future employers.
Fwiw we have at least some reason to hope in this general context that between clever systems work and tightening theoretical bounds via additional assumptions and clever reasoning we might get to practical implementations for some applications.

As (maybe weak) evidence the progress on practical implementations of PCPs/SNARGs

https://dl.acm.org/doi/pdf/10.1145/2641562
> This made it difficult to work with separate hosts (www.my.app vs. api.my.app).

This is still possible with session cookies if you use wildcard origin cookies i.e. *.my.app
The first Jurassic Park holds up unusually well. They used CGI for things they couldn't convincingly do any other way, and used practical effects for almost everything else. And for the most part they hid the CGI well, they took a lot of care to mix it up with close ups of practical effects, the way they framed the shots to direct audience attention, etc.

I think in a lot of modern stuff they go too far. They now use CGI for things that could easily be practical effects, but they go with CGI because it's simply cheaper or because they want to A/B test different colors of wall paneling behind a character in post production, or who knows what. The end result is apparently good enough to make a billion dollars, but I can't stand it. Movies don't feel authentic anymore. It's hard to describe rationally, but the word 'soulless' sums up how movies made the new way make me feel. Even the scenes which are wholly practical/real get degraded; the excessive CGI and compositing used in the rest of the movie cast a miasma of unrealness across the entire movie.

https://64.media.tumblr.com/248d25e2185a58bf827d329490480fb9...
Ask HN: Has Mark's Google account been reinstated yet?
Just over a month ago, the New York Times reported that a man named Mark had his Google account terminated because its AI accused him of possession of child porn. Even after police confirmed that the accusation was completely false, Google still didn't give him back his account. <https://news.ycombinator.com/item?id=32538805> Now, over a month later, has he made any headway yet?