skysight-inc/HackerNews huggingface dataset:
> This thread is about how to render composable HTML components

I quite literally joined the fray in response to a question that asked: "how do you add JavaScript to your web bundle?" To me, it would be appropriate to say: "the class of JavaScript we can easily support in this app must be exclusively browser-testable, and we ignore DX-style features JS devs expect as our app just rebuilds and reloads quickly"

> why are we using JavaScript to interpret HTML?

Who is doing that? We're using JavaScript to have dynamic HTML updates client-side, but calling that "interpreting" is hilarious.

> My original criticism was also about the dependency hell/culture around the Node ecosystem, moreso than Node’s capabilities as an interpreter.

Which makes it even more strange that you basically took a fat shit on Node.js with no expansion [0]

[0]:
> How do you plan to add JS to your Go web app?

This is what I mean by Node.js being a hammer and everything looks like a nail.

You don’t need Node.js to write JavaScript.
“Perfection is achieved, not when there is nothing more to add, but when there is nothing left to take away."

Destroy it: https://BUGFIX-66.com

Single CPU Linode cloud instance ($5 per month), single Go executable generating/caching/serving the simplest/cleanest HTML... could it be simpler or cheaper and still work?
A typical cell tower uses 4kW to 5kW, sometimes less (at least in the states). That's reasonably close to a standard home's central air conditioner, or a home's electric stove/oven/range.

I'd be highly surprised if, of all possible things, this is where they want to cut to lower electricity usage.
The little pickup baggie is a great idea schools should implement, especially children with long bus rides. Most kids are starving once they get home.
That what we're seeing is really reality is the simpler explanation. Because the alternative is that what we see is a simulation ... inside another reality that has full complexity. Which increases the overall complexity. Thus, Occam's Razor says what we see is likely real and not a simulation.
Yeah, they suck and we have moved on.

Nowadays we still use libraries to abstract over SQL dialects and generate SQL in a typesafe and convenient way, but it's not an ORM in the sense that it maps from the object oriented domain into the relational one and back.
I agree, it feels like this technology is progressing by leaps and bounds almost by the day.
If they're not modifying or accessing some state, then the occasions that one would need to mock them is drastically cut down.
I simply explained the efficiency difference of the two setups.

You're storing and checking a smaller subset when doing stateless + invalidation cache.

Whether or not you need that memory optimization is up to you and your machines.

Personally it's about the same effort to implement and I prefer stateless + simple redis cache for invalidations.
Gen Z's favorite brands, revealed
I didn't read the article because it's too long, but here's how I do my dirt-simple page.

A css. A markdown to html converter. An index file (1 in each directory). A dozen lines of code in that index file. The rest is markdown and images for content. Use the directory tree to organize your stuff. Voila! Works great.

http://fleen.org
Jeez, dude. I had no Internet access for four days and rolling blackouts with only 2 hours a day of electricity for two weeks, and no hot water or water at all for the first day, during the Dallas ice storm two years ago. Roads were unusable and we received no deliveries for a week. It was annoying, but we were fine with no special preparation or extra supplies.

A few days with no Internet is not enough to bring down civilization.
They work really hard to hide this, but they do have a LGPL license that applies to most of the framework, and only some parts (charts, etc.) are GPL/commercial only. For those old enough to remember, this license issue was at the heart of the Gnome/KDE schism.

From their site <https://www.qt.io/download-open-source>:
LGPL – Any modification to a Qt component covered by the GNU Lesser General Public License must be contributed back to the community. This is the primary open source Qt license, which covers the majority of Qt modules.

If you're not familiar, in practice, the difference between GPL and LGPL is that LGPL does allow dynamically linking a library with a closed source program, without requiring that the program also becomes GPL/LGPL. This is compatible with most development as long as you either don't modify Qt, or are ok with those modifications becoming open source.
Why would anyone use a jwt in a cookie? A sensitive cookie should be encrypted. It does not require any signature.
It’s been like a month since people were saying this tech would be too hard to apply to video.
i wonder how much vram these models cost ?
The US largely has laws against reverse engineering hardware for the purpose of circumventing copyright protection. But that's not happening here. What other laws were you thinking of?
Kids should be able to eat for free.

I believe the arguments against it are more or less:
1) I don't want to pay more taxes
2) Won't this make their parents less desperate and thus more able to choose their working conditions?
3) Will this encourage poor people to have too many kids?
4) I just don't like the idea of anyone getting anything without working for it.
They used "JWTs" as a convience, Smart Health Cards have none of the issues here. Their issuance doesnt require a database either, thats just your healthcare provider.
Not familiar with the other authors, but François Chollet (author of Deep Learning with Python) is truly gifted in the art of pedagogy.
Absolutely right, but it's not intended to be a solution, it's intended to make the dodgy the tax scheme more expensive, and hopefully no longer economically viable.

(Ideally in these situations all rights should also revert to the original creator).
Duck Hunt for NES on World's Smallest CRT [video]
when it comes to research, never put all your eggs in one basket. This is something that should be learned at the early stages of graduate school, not at the postdoc level.
I have been declining to update my tv since this tool came out until I get time to try and exploit my tv. Kudos to the author! Also, LG not being android based is nice!
Or if like in USA commonly are fueled by natural gas infrastructure, or propane in a tank (as well as the Diesel, althou that is less common)
How come no adapter exists for SSD drives that emits sound whenever a signal is sent in-out of the ssd?
Stable Diffusion but for video is going to eat these guys lunch.
Free websites that are so useful they feel illegal to know
The thing I have been bitten by is when requirements change, and a static method used in 100 places no longer should be static.
> FHE gives you NO guarantee about the code that is running on the encrypted data.

I'm open to correction, but it's my understanding that the strongest form of FHE allow users to submit an encrypted executable with embedded data as input, which is then processed by an untrusted server. I'd definitely call it an ultimate form of privacy. The computational cost is prohibitively expensive, and conditional branch is impossible in the standard implementation, so it's largely an academic exercise. But last time someone on HN told me currently the achievable performance on a modern computer is roughly equivalent to a 1970s mainframe, so I guess some niche applications are still possible.

Weaker forms of FHE don't have this level of privacy, and they do not claim so. Nevertheless, relevant development still represents progress on cryptography and privacy researches as a whole.
Yubico Security Key NFC at $10

Yubico Security Key C NFC at $11.60
The neural net itself needs something to run in (some universe). If the argument is that it needs a smaller or simpler universe than ours: first of all it is simulating our universe so all complexity of ours is included anyway, but also, maybe a neural net in a big chaotic universe is more likely than a tiny universe designed to perfectly fit one neural net
The token refers to an API token or an OAuth token. These tokens are what backend systems require to allow a user to access data.

The problem is that these tokens should not be used by your JS code (they should never make it to the browser for security reasons). So how exactly does a user access their data if the front-end code running on their browser does not know the token? That's where sessions come in. The webapp hosting the front-end JS code (for example Node.js or Java-Spring) creates a session whenever a request is made. When the user logs in, their token (which the server retrieves though whatever authentication method is being used) is stored in the webapp as session data. That is to say, for each session, the webapp can store information about that session.... e.g. the token. The token is then used by the webapp to access the user's data via the API calls to the backend. The backend, will then use the token to verify the user has access to the requested data (or the requested resources).
i could care less about this comment
The real point: so you don't have control of your tv and things on it can be directed in the financial interest of the people who "sold" it to you.

The other point: There's not really an easy PC solution. The closest you can get to one is Kodi, and in my opinion it is bad. Not that they haven't put an enormous amount of work into it, but the UI is very unpleasant. Their idea of what people want out of a television interface is violently different than mine, and the configuration is absurdly opaque.
They do. Many of them expect Chrome. While Safari and Firefox are now much better supported than years past due to most sites complying with web standards, I still see some annoying incompatibilities here and there with older finance websites. I didn’t like it, so I switched to a larger bank. Your argument would have more teeth if meta had a monopoly. It doesn’t
I thought a lot of it was developed at JetBrains' (now shuttered) St. Petersburg R&D site? Could be wrong, though.
it was in the original joke.
Apple M1 Linux GPU DRM Driver Now Running Gnome
why is a blog post that directly praises its own product for short reasons on the homepage?
Was a publicly run Turing test ever defeated? I could not find any record of such.
Hey cw12574, I wanted to take a peek but I noticed it’s offline. Could you share when it’s online again?
> In this case it was a simple, boring task and 100/100 anyone dropped into that circle would stay for 100 days to get $500k.

Not sure that anyone could do it. He made the job easier by forking with the guy and providing human contact. Should have left the guy alone. 100 days of solitary confinement can literally drive you nuts.
> Not a conspiracy: Biden himself stated - quite publically - that they would do it. It has been done.

I have no strong opinions yet in the argument over whether or not the USA conspired to sabotage the NS pipelines. I'm just here to point out that secrecy is not a required part of a conspiracy. The literal translation of "conspire" from Latin would be something like "to breathe together", insinuating a synchronization of movements, a plotting together.

But, in our world today, all conspiracies (both confirmed and theoretical conspiracies) seem to get bucketed together. And so in common parlance, as soon as a thing is publicly confirmed as actually happening, in most people's minds it moves out of the "Conspiracy" bucket into the "History" bucket. But that's just a loss of language on our part. As always, my go-to resource in recovering the meanings of English words is Webster's 1828.

https://webstersdictionary1828.com/Dictionary/conspiracy
Also Adaptable.io and Render.
> what damage can that employee do in 5-10 minutes?

This is not an authentication issue (JWTs) this is a classic authorization issue (Permissions/Roles).

It's not the authentication layer's fault if you allow everyone root access.

JWTs are just fine. Bearer tokens are just fine. You can write shitty session code just as easily as shitty OAuth2 code.
This reminds me of an incredible moment in my career. Circa 2010 or 2011 I was working at a small agency in LA where we could more or less all fit in one big office. My boss (the owner) and a UX contractor were whiteboarding some flows for a new project under tight deadline. It was the classic scene, scribbles all over the place, post-it note's everywhere, coffee-stained printouts stuck to the whiteboard with little magnets, etc.

Eventually the commotion of their whiteboarding session became very quiet and they returned to their computers to hunker down. Our UX contractor was twiddling some magnets in his hands, clicking them together and unclicking them, while starting at his screen and chewing through the design problem.

A few moments later, a pretty loud scratching noise started. Peter, the UX guy, started to start up at the white drop-panel ceiling with a concerned look, "I think there might be a rodent in the ceiling"

I knew this sound almost right away, and could also tell it was coming from directly in front of him, not the ceiling. PETER! GET THE MAGNETS OFF YOUR LAPTOP!

He had inadvertently stuck them to the palm rest, directly above the spinning rust drive that was still standard for this time period. The machine quickly became unstable and then stopped booting. Poor guy was in the Apple store for the rest of the day.

Hilarious in hindsight, but a lot of work was lost that day. I still remember seeing poor Pete staring up quizzically at the ceiling while the entire contents of his HDD got vaporized.
We already have films that use "similar" technology (for example, adding Leia in the new SW movies), and this is just another step, another improvement into the direction of autogenerated videos. Are we far from generating complete movies? Sure! Are we progressing? Yes too!
> As someone who would want to be a vegan but struggles not to eat meat

going off topic, i think that being vegan/vegetarian for 5-6 days a week and one when you eat meat would still help .
Dash - https://kapeli.com/dash

> instant offline access to 200+ API documentation sets

I came across this last week from an HN thread - thank you HN!
In the context of cryptographic protocols we sometimes use "privacy" to refer to the notion of "confidentiality". The latter is, I think, a cleaner word that avoids the collision with human notions of privacy.

In this case the real danger is that the availability of "privacy-preserving technologies" like FHE, MPC and Differential Privacy will actually do more to undermine human privacy than all the non-confidential tech that come before. This will mostly occur by allowing corporations to build sophisticated statistical/ML models using data that would previously never have been allowed out of its confidential silo.
> you just have to hide root from the app

No longer going to be possible due to hardware remote attestation.
For the US, Google Trends reveals that Clojure's heyday came in 2013, and it has been on a decline since[0]. It never really reached the interest level of Scala, and of course recently Rust is consuming all the air in the room.

Except, just for kicks I add Golang, and it turns out that all of the above are marginal compared to Go[1].

HN posts are very different from general interest, but yeah, I'd go with "Clojure has sadly missed on its shot to become a popular general-purpose language" rather than "Clojure is dead," but your instincts seem right.

0. https://trends.google.com/trends/explore?date=all&geo=US&q=%...

1. https://trends.google.com/trends/explore?date=all&geo=US&q=%...
The ‘outside’ reality only needs to be the size of a data center, not the entire universe. And maybe the outside reality only needs to be a trained 100gb model. A much simpler outside reality than we have now. You don’t even need to sim 8 billion people, just 1, you.
The most surprising thing about this is how low the price is for a teenage engineering product. I don't know anything about LP manufacturing but 150 for an LP reader / writer seems pretty cool.
From the homepage and the examples after signing up, I don't get if you are able to create one event which would be recurring and trigger a webhook every week/month/year etc. or is that not possible yet?
Mostly because corpos and web dev tantrums: planned obsolescence and corpo/web dev locking via non-pertinent technical complexity and size of the web engines. This is a scam or toxic dellusions.

Those "open source" web engines have grotesque and absurd complexity and size, are written with a computer language (c++) which has a syntax complexity morbidely accute that it requires compilers (even naive ones) not better than the web engines themselves.

Hard truth: bazillions of services provided over the net can be provided as noscript/basic (x)html, aka basic html forms.

Hard truth: asking nicely usually does not fix that (I tried).

Hard truth: the real work in not the web "code", it is protecting it against hackers, like DDOS attacks.

Hard truth: Don't fool youself, hackers will be "paid" to push hard those sites on big tech network infrastructure (or are idiots). "Ppl coding computer viruses are probably those who sell anti-virus software".
"Small Web" is certainly something of an extremely viable idea, I just think that e.g. Twitter captured the essence of it.
I can't tell if your comment is in good faith or is sarcastic.

It's heartbreaking that children anywhere go hungry. Children didn't make the decisions that led them to their hunger. They didn't choose to be born in situations, regimes, or societies that failed them. They didn't choose and have no power over local culture, religions, politics, policies, wars, and other drivers of stupidity. They are victims, completely, of others who have power to make things better.

So yes, it is heartbreaking that this continues to happen in first-world (US/NATO aligned) countries, second-world (formerly Soviet aligned countries), and third-world (unaligned) countries.

People who complain about taxes going to feed children are social darwinists. We should pay teachers and lunch staff much better as well.
I watched it, I don't find it even remotely terrifying? It's a composition of a bunch of input from real photos?
JWT is a token that is hard to forge with a payload.

Meaning, if someone gives you a valid JWT that says "I'm user 123" you can trust that this is user 123.

That's all it is. When reading in intent on how it should be used or what you should do with it, that's something beyond what the thing actually is.

So any pattern you can imagine with a session ID, you could implement with a JWT. Just throw the session ID in as part of the payload. Just because you are using JWTs doesn't mean that you don't have to work with any sort of external resource while you are processing it.

What purpose does it serve then? You can still avoid lookups when a JWT makes a claim. You know the JWT is valid so you know that all claims made within it are true. If it claims "I'm user 123" then they are user 123. If it claims "My account number is 435" then that's the account number. You don't have to make a lookup to see those facts are true. If it says "My session is 433" then you can validate that session 433 is still active and act accordingly.

JWT isn't a panacea but it also isn't anything more than a bag of claims. It doesn't claim to be anything else either.
Have cloudflare IPO'd yet? I really like the cut of their jib.
Where did you add the domains? You mention router but you also mention OpenDNS so I assume you added that to a custom filter in your OpenDNS account? If so, your local DNS may be caching the previously requested names and/or your phone may also be using DNS from the wireless providers data network.

I think it would help if you provided more details about your setup.
> I didn't post any links and I seriously lost the thread of the conversation here

Indeed, my mistake; I assumed such a response to a comment challenging "the idea that Go is the correct language to write web apps with JS in" with a response like "[i]f the project is live and is serving its purpose, and if that doesn't convince you that $INSERT_LANGUAGE is the correct language" could only come from the person upstream.

That user themselves acknowledged that there isn't meaningful JS in their Go web app, which means it's NOT "serving the purpose" that we were discussing in this subtree of the thread.

> Why would you need to run a JS interpreter to be able to include JS in a website?

You usually need a language interpreter to develop features in that language, no? Developing your bundle in the browser is not known to be a high-quality workflow from the perspective of DX.

Anyways, this is all silly, people building HTML reports from non-JS languages are arguing you don't need JS to make client interactivity, naive stuff.
For those curious, the Black Panther Party was one of the major drivers to getting the free breakfast programs going in schools across the US. The FBI of course hated that, but what we have today is largely thanks to their organizing efforts. [1]

And as others have commented, there seems to be little reason not to provide at least two meals a day to kids in schools. Besides "it's socialism" from those that seem to hate other humans in need.

[1] https://en.wikipedia.org/wiki/Free_Breakfast_for_Children
> A lot of people saying it's over for traditional movie-making - lmao.

The groups supporting such absurd claims largely boil down to:

- Money-driven researchers in the applied AI field. Those are the people that spam popular ML conferences with barely novel contributions other than some minor tweaks on code from their previous papers.

- People unable to critically think and evaluate the significant limitations of SOTA methods occasionally marketed as AGI breakthroughs.

Last is virtually the entire HN userbase and the one that needs to be taken the least serious.

The first category is much more troubling however, since they can significantly influence research directions due to the broken citation system in academia (more citations --> higher quality contributions).
One can send a chess move in 14-bit data using just two set of three-key squeeze system sent once per move.

Reductive Hammond coding scheme, or something.
And you have one piece of vague, circumstantial "evidence" supporting this. Maybe don't throw around accusations like this without something more solid?
I was significantly creeped out that my state was issuing COVID passports.
That is actually new to me, but maybe because I'm into sci-fi from around 1950-1970, where direct conversations between characters are just "quoted sentences" inside narrator sentences.

I'm a bit of Philip K. Dick fan and have "A Scanner Darkly" in two languages.
Polish version is 150 pages more, an inch wider and an inch taller in size. Not that PKD elaborate language would justify more flourish translation, he was very "straight to the point". It's such a waste.
The Fate mobile game does a lot of stories where time travelers have messed up history. So in one timeline I think he's just the plain old King of Urik.

In another timeline after demons killed most humans Urik was refortified and given the name "Absolute Demonic Front: Babylonia". And in that timeline they seem to sometimes call Gilgamesh King of Babylonia after they renamed the country.
It's not like we're allowed to choose leaders from the population at large. We are generally stuck voting for the people that run for office. Quite often, there are few choices and none of them are very good.
I've been in South Africa for the last month, which has had an energy crisis since around 2007 and somehow they manage to keep mobile networks up during load shedding. There are 2:30 hour (sometimes 4:30 hour) blackouts daily and yet everything seems to keep chugging along.

Mobile towers are probably have some of the highest electricity:benefit ratios out there, it would be silly to not prioritize them.