skysight-inc/HackerNews huggingface dataset:
I don't think you fully grasped what I was implying. Let me give you an example, since I have real-world experience with this. I once made a little 2D game that would allow for live modifications to the game world and code while active, from your character avatar to the tiles (assuming you 'owned' the area) to adding code live to make things (one person made a live arcade!) - it was basically a 2D Second Life.

And it was a complete security nightmare. It had to shut down after about two weeks, due to rampant abuse. One person managed to escape the game world, then the VM which contained it, then wreak havoc on the host machine running several other instances of the game (for linked worlds.)

If you aren't focusing on security at every level, you're asking to get wrecked. You think things are secure, man can make it, man can and will break it, eventually.
My ten year old found Fibonacci numbers in the reciprocal of 89.
If people are an end to themselves, everyone would have as many kids as possible. Clearly some people believe people to be an end to themselves, but I doubt that opinion is held by the majority. My question about outcomes was specifically about those that exist.
Don't let China have all the fun.
THIS is why I read HN everyday
> I’d say Netflix is many years ahead of its competitors in terms of technology.

They absolutely are, hands down, no question about it.

There’s just the pesky problem of diminishing returns.
Seems to me like a lot of these are solved by a dedicated search engine?

I see it in this business all the time how people try to reinvent the wheel and end up writing their own search engine, thinking it's just another small in-house project, but they quickly run into the difficult problems like, well, these.
It includes ads tho
I really feel this. For me, there is nothing more exhilarating than seeing a project going from just an idea to adding features and then having a somewhat working product. Some of the most fun weeks of my life have been focused on spending almost all my waking time putting some project together and learning the skills necessary to bring an idea to life.

Once the project kinda works, I often lose interest - but who cares? There is always the next idea that comes along to create.
>Offering companies grants and favors to encourage building real, sustainable, on-shore businesses has a much higher likelihood of success.

So I'm arguing we should over-produce infrastructure and you're arguing we should over-produce capacity? OK but you have to continue offering the favors else the on-shore companies are just going to fold up when times get tough.

In a catastrophic event though I argue the over-provisioned group is better off than the group that can ramp up their production to post-catastrophe needs, the over-provisioned group has backup supplies and can produce at their normal rate, the over-capable group still needs time to spin up their production.
Which is exactly my point. For your reality the reasons you gave make sense for why 100A may have been standard even in 2008. It does not generalize well to an entire continent or two though.

I live way too far out to have natural gas service and because I have such a small house it has baseboard heating. Most larger houses here have electric furnaces instead. But having 200A service meant I was easily able to add a mini split heat pump taking care of heating most of the time but we have no space to put a furnace instead. We do have propane to heat when power is out (or just if I want the nicety of a roaring fire heating up the room on -40 evenings). The oven is electric too. I was looking at getting a tankless water heater but would need to upgrade the electric service for that apparently because my 200A are not enough in case "everything else is on at the same time" (I personally wouldn't mind the heaters shutting off for 3 minutes while I take a shower but I guess that's against code).

Also electricity prices do not generalize well. Way too much variance across an entire continent or two. What you say is expensive for you actually isn't that expensive here. Now ask someone in Europe this winter what they think about your electricity prices in comparison.
If it's about cleaning what you use and you don't use those facilities, then I would have to agree that you shouldn't be made to do it. Myself, I do on occasion use the dishes at the office, and in such a situation I would have found a way to eat without using them, rather than cleaning after some slob who can't be civil without being forced to do so.

That said, if I was your employer and everyone had taken your stance, even the ones who do use the kitchen, I would have simply taken the dishes and utensils away. At that point it's just people being unreasonable.
We're on Windows 11 now.
Interesting. I don't want to imagine the mountains of garbage this produces though. I guess the ceremony is worth it for some.
FWIW, the patent for Phillips Head screwdrivers states that the pattern is intentionally designed to cam out/ strip instead of allowing over-tightening.

It’s an obnoxious feature, but it’s intentional. Not some kind of “this is old and therefore bad” thing.
And of course, I've bookmarked that site to check on later to see if it handles time zones... sigh.
I don’t think I have time for a full review, but making $ext a map seems short sighted. In the example, a poll is included, great. What if you want two polls? It’s another level of indirection, but making $ext a list (unless the encoding protocol handles multiple values with the same key). This also allows for a specified ordering of extensions, provided that makes sense.
Surprisingly no notes on the recent rise of plant based sugar substitutes like Monk Fruit / Erythritol, or allulose
Dipper changes? Like chewing tobacco? Shame on you, kids shouldn’t use tobacco products! Haha

Like and subscribe
It’s definitely fair use. One question I have though is Mickey Mouse protected by copyright or trademark or ? I assume someone other than Disney can’t sell mickeys likeness or is that wrong in art? And if the AI makes a movie?
What the hell, I didn't know there were so many "miscellaneous" kind of creatures in the ocean: https://en.wikipedia.org/wiki/Gelatinous_zooplankton
This seems really cool. I have looked at ActivityPub quite a bit and written a little basic client/server but the identity portability thing is pretty much a nonstarter for it to be taken seriously in normal circles. I’ve found the content quality of the fediverse to be abysmally low thus far, I think AT could work especially because of the big name behind it.

Twitter did the Ruby community a huge solid back in the day, and I’ve always been grateful ever since, but now the new web is coming together and I’m optimistic that this protocol could lead the way.

Time will tell how seriously they move forward with this.
I think when people ask "why are you doing this" what they are really asking is:

Why are you showing this to me?

Especially for things that are really common or totally undocumented. E.g. i'm glad you are having fun making a commandline calculator in python, but im not sure why you posted it to show hn. Or alternatively - im glad you are having fun making whatever you are, but if you cant even write 1 paragraph describing what your program is intended to do, i dont know why you are showing it off.

Alternatively, occassionally people are asking "why do you find this fun?". Everyone gets joy out of different things, but if you show something off and then give no context, its a bit weird. Most people expect an explanation on why whatever you are doing is interesting or meaningful to you.
Gosh, where could we search to find sanctimony from helmet authoritarians? I would say, in this very thread!

Helmet use varies a great deal among all the different situations in which humans ride bikes. As in every other facet of human life, humans are well-equipped to judge the risks they face on a regular basis. The one invariant, everywhere, is that helmet laws reduce cycling rates. Which is actually the point, as these laws are pushed by automobile lobbyists.

The people who have been most concerned about whether I've worn a helmet have been auto drivers immediately after, or more frequently while, driving very poorly.
Most of that collected and sequenced virus will be dead. For samples like blood it would be very difficult to infect labworkers, it would need to be something like an accident with aerosolized fecal samples which were inhaled. But assuming there was any live virus in those samples the human exposure will be dwarfed by the workers in mines and those who collect bat guano for fertilizer without any PPE at all. There's many times more bat-human contact around rural China which doesn't involve labworkers and where there's no precautions (as we know from the Mojiang miners who died).

And there's still a vast gulf from collection sampling to engineered chimeric viruses and gain of function experiments.
Nice. Your Cha project has the beginnings of a search engine with cosine similarity, even though I don't think you intend to take it there. Tagged items are like a precomputed inverted index, and the matching is a search on that index.
I have never understood why companies consistently hire people right out of college (often with random degrees unrelated to anything relevant) to tell a team of engineers with 10-20 years of experience what (and often how) to build.

Back when I was new, engineers worked directly with subject matter experts and the occasional business analyst. Now we’ve mostly replaced SMEs with product, and I don’t think it’s working out.
Your eye is an imperfect sensor, film is an imperfect sensor, the color sensor in your camera is an imperfect sensor, and astronomers do things in particular ways because we're doing science with the data.

The paper always says how the image was made. If you want to know, look there, not at a press release.
Code is Law – Larry Lessig (2000)
fwiw i tried to login to get a time extension and i've been gone so long that Heroku doesnt even recognize me on their login system. "Unable to locate an identity provider. Please check your email address."

lol they required login and then broke login.
Oppo, Vivo, Xiaomi make plenty of money.
Article is not NSFW, and the titular character looks like Fredo from The Godfather.
Yes and you can also easily share files from an iPhone over Wifi on a Mac. That isn’t possible on a Windows PC either.
I can absolutely agree with that. Wouldn't mind at all. Bring your own cup.

Which actually I learned not to ever do because not only do people slob with communal areas, they also don't respect personal cups.
> We end up with device=xxx and device_1=yyy but if you mean ...

No, I meant the first example. I'm trying to think of realistic non-obtuse cases like an entirely different spec calls for name_1, name_2, etc. but for some reason a numbered key is repeated. It's mostly an academic concern though, no worries!

Thanks for the awesome work you do for the FreeBSD community, as always.
I like the USB-C connector but wondering if there is a better way to handle the ever expanding number of different cable types that are used with this connector (SuperSpeed, Thunderbolt, etc).

Switching to USB-C reduced the number of different cables I have at home but almost equally increased the number of different types of USB-C I have. Some work with my monitor, some don’t, some charge, some don’t charge, it’s a mess.
You’re not at all, and it’s one of the main reasons that I feel confident hopping into a codebase that I’m not as familiar with in something like Rust than say Ruby or JavaScript. The lack of strict types makes understanding how a program works very difficult, and being told this by the compiler or interpreter all but impossible.
While this is a true horror story, this is how I feel about microservices. Simple things take forever because the unnecessary complexity is through the roof. I do not experience the "developer ergonomics" that I used to.

Every microservice will get its own share or lack thereof of love, have possibly different wiring, be written in a different language, and may or may not have good enough tests. Most likely the system integration tests are non-existent either so good luck with that regression.

That's after you figure out how to set up your environment locally just for this one task, making sure that all services are up to date, starting properly, have the right local settings, and communicate with each other without issues.

What should take minutes now takes days.
I'm just as stunned as many others here after seeing this blog. What an incredibly talented engineer, writer, and artist all in one! He should be famous. Can't believe I hadn't heard of him.
Many mainland Chinese think the best approach for China-Taiwan issue is to just wait. It's not of the best interest of Chinese people (of both China and Taiwan) to change the status quo.

On the other side, the US obviously wants to see a war between the two side of the strait. And the US is actually prepareing for it.
You can also desire both. I would ideally like to have an impact on the world while having fun. That said, the reason I want to have an impact on the world is because I like helping people, and helping people is fun for me; constant problem solving and seeing other people helped as a result is extremely rewarding, and simultaneously fun.
> [...] And once in a while it complains for some reason, and the typical move is to erase the file that stores those fingerprints, right? Well this is not the right way to do it (vulnerable to MITM), but that's how I see most people use it.

Yes, that's vulnerable to MITM, but with a caveat: that MITM could impersonate github to your machine, but it could not impersonate your machine to github. That is, it could present modified data to your git client, but it would have no access to your github account. With HTTPS without client certificates, once someone successfully impersonates github to your git client, they have the same access to github that your git client has. (HTTPS with client certificates would be as secure as using SSH keys, since the MITM could not impersonate the client to the github server.)
The Cyclone 10 GX line is the most advanced thing you can get for free, but it doesn't seem to have had much popular uptake anywhere (nearly no dev boards, etc.)

Intel recently announced their new "Sundance Mesa" series of FPGAs, which are Agilex, and designed as low-end replacements for Cyclone, etc. And they said that they'll be offering Quartus Pro free for Sundance Mesa devices. This really surprised me; generally speaking, in terms of software availability, Xilinx is much more approachable and there are plenty of high-end choices while using Vivado for free.

But beyond that: I just run Quartus in eval mode and rm -rf ~/.altera* once every 30 days and reset it. One of these days I'll get a license for my giant Stratix 10 board when my designs are more finished...
What a terrible name. I get why the modern meaning of the word "meta" is appropriate, but the connotations to metaphysics is really unfortunate in context.
>>>Why is this obviously incorrect statement that can be easily disproved by just checking the map is being repeated again and again on HN?

Can you list the other warm-water ports used by the Russian Navy? Here's a paper on the subject from the Air Force Journal on European, Middle Eastern, and African Affairs: https://www.airuniversity.af.edu/Portals/10/JEMEAA/Journals/...

>>>It is only second in popularity to "Russia invaded Ukraine to prevent NATO on its borders" which can also be trivially disproved by finding Estonia or Latvia on the map...

While technically true, there is a big difference between the Estonian/Latvian border, and the Ukrainian one. I discussed this 7 months ago: https://news.ycombinator.com/item?id=30513745
> Meanwhile they leave alone with a dog,
> - need a ton of additional psychotherapy to stay sane.
> - Need to setup appointments to see their own parents

OTOH it's very far from being common.
I agree completely. I have so many half-started projects that never get finished, but I learned a lot along the way, and that's what matters. Some do get 'finished' at least to a state where I can use them, but my ADHD lends itself well to the former. :)
A DAM like Razuna

https://razuna.com
> The reason I disagree with this position is because the visual cortex exists. [...] There's no reason to eschew [graphics] when it comes to program representation.

Not everyone can take advantage of the visual cortex. Please don't take away one area where we're on a fairly level playing field.
A few people have mentioned /r/tipofmytongue, but you'll do better at /r/tipofmyjoystick; specifically for games.
You are old
I’m an Anglican priest, and I can attest to this! We used to buy the Eucharistic hosts produced by the Institute for the Deaf at Sint-Michielsgestel in Holland (via our local church supplier). They were lovely. The priest’s hosts had a variety of designs (e.g., the Crucifix, the IHS monogram, even the Pelican). Their texture was nice: not too thick, not too gummy (less likely to stick to the roof of your mouth!). Plus, the proceeds from the sales of the hosts went to supporting the work of the Institute.

Alas, sometime in the past year-and-a-half, the Institute stopped producing hosts, so we now have to use Cavanagh. They’re fine, as far as it goes, but a little too chewy for my taste, and the only design available is a cross.

But it was always nice knowing that the bread we were using at the Eucharist was helping to support a worthy cause. It seemed to reinforce what the Eucharist is about in the first place.
Bureaucrats are stupid! First, they rushed to vaccinate the young (up to infants now!), which were not dying, and even after the indications that something's going wrong! Secondly, they removed all measures and let them get reinfected every 2-3 months. What a double whammy! I still wear an N95 mask and have no plans to get covid every 4+ times per year!
> Why use the same language as drunken sailors and criminals?

Aside from hate speech, I honestly don't care what kind of language my kid uses. But I'd be pretty disappointed if they reduced groups of people into negative stereotypes like this.
Taiwan imports 60-70% of it's food and they can't increase domestic production because they import fertilizer and they can't make their own fertilizer because they import natural gas, and they don't have any domestic gas fields.

China doesn't need to storm the beaches, they can passively blockade Taiwan until they give in.
Netflix Expands into Cloud Gaming
/r/tipofmyjoystick
The sugar industry has not been honest about the product they produce:

https://www.npr.org/sections/thetwo-way/2016/09/13/493739074...
A few years later, the same media will praise El Salvador for using bitcoin
Mark Zuckerberg on the creators of The Social Network:

"They [the film's creators] just can't wrap their head around the idea that someone might build something because they like building things". [1]

This led to an interesting exchange where, iirc, Aaron Sorkin replied that this is in fact exactly what Hollywood people do: make things up just for the sake of it.

[1] https://www.theguardian.com/film/2010/oct/20/mark-zuckerberg...
This is short sided the first five years are tough the next are great and the following are even better
Just gave a talk at MIT and we discussed with the students how the hacking culture is essentially gone there due to the safety-at-all-costs mindset seeping into America.

In my opinion, it’s partly due to being an aging society. (1960 median age ~ 29, today it is around 39). Young people are generally more willing to be risky and try new things, and since the adults have all the power and are more litigious, of course we will end up ruled by rules and regulations that only get more complicated and time consuming.

Our society has never been safer, but we have used that comfort to be incredibly unhealthy/obese as well. Interesting times (possibly more boring times to come).
As a millenial with no degree+vague/little prospects of being able to one day purchase my own home, I've already saved his entire website and put it in my "very important things" folder.

As someone who really likes math, programming, and visual design as well as having spent hours upon hours practicing often short, yet incredibly complex lead guitar riffs by himself for many hours as a kid, I never quite grasped music theory back then and I realize now that essentially the only reason that is the case is because it was never presented to me in such a fun, digestible, and incredibly beautiful way; a way that I've been very much seeking to discover myself my whole life.

There are people who pay others to build schools, and then there are those that build things far more capable of transmitting the most optimally distilled form of knowledge and intellectual achievement that mankind has to offer to us today.

I don't really have much words right now, other than I want to kiss this man's feet and then maybe hope to stop crying eventually.
I agree this would be very cool. I can’t count the number of times I wish I had runtime interactive debugging in a repl along the lines of pry in Ruby in just about every language that doesn’t have it.

That said, gdb etc are pretty awesome too if it’s an option
Wow.. that soundtrack is distinctive!

Off to listen to Oxygène.
A Vision of Metascience
Thanks for this analysis! To me the risk of bearer tokens seems bigger than just "at-rest storage"... My experience is that the security perimeter effectively ends up including every script or other piece of client software that wants to run Git or has access to the channel where the bearer token is entered. (How would you enforce that your credentials manager will only give the bearer token to some particular trusted HTTPS client software that is talking only to GitHub...?) You have to worry about the token getting logged in a debugging log, etc. And, when I give somebody an account that's authenticated with a bearer token, I'm always nervous maybe their hygiene is not so great and they'll end up accidentally pushing the token somewhere publicly visible. AFAIK you don't really have this attack surface when the credential is a private key stored in a hardware token or, at worst, a software agent that only keeps the decrypted version in private memory and only agrees to sign individual challenges.

On the question of HTTPS MITM vs. SSH MITM, I agree that the HTTPS PKI makes a MITM less likely than the (prevalent) use of TOFU for SSH authentication, but I don't think the risks (or what "MITM" means) are the same. If there's an HTTPS MITM when client authentication is via bearer token, the intermediary can steal the client's token and masquerade as them forever. If there's an SSH MITM when client authentication is via public key, then the intermediary can give bogus data to the client and can get data from the client, but to the best of my knowledge I don't think a true application-layer "MITM" is possible (barring downgrade attacks) -- the intermediary can't spin around and authenticate to GitHub, pretending to be the client. The session ID is part of the authentication scheme.
If you want to, you can buy all 40 Gbps 240 W Thunderbolt 4 Pro USB-C cables for all use-cases, but they're literally like $100 a metre, so that'd be insane and why instead there's a variety of cheaper cables for different use-cases.
If a team can't work within an existing standards body or a community (like the ActivityPub contributors) then they simply can't create an actually decentralized and open protocol/network. They can, however, create something that they can define and control for their own gain.

Rolling out this protocol on a site without a community forum or other discussion channel but simply a "give us your email address and we'll let you know when it's done" is a red flag.