skysight-inc/HackerNews huggingface dataset:
what baffles me is that every time i see a mention of malicious images, the comments are always along the lines of "nobody would ever use these random images" and "isn't this why companies usually have private mirrors?".

then i go to work and i spend the majority of my week asking questions like "where is the dockerfile for this jimbob/diffusers image you're basing your work on?" or exhaust political capital on convincing leadership that it's worth our time to vendor all our dockerfiles from `scratch` up, and regularly rebuild them in ci vs just pulling them from dockerhub.

all the "if you use common sense you're fine" posts don't match my experiences in helping numerous companies un-fuck their container infrastructure
Or “do not compare yourself with others, for there will always be greater and lesser persons than yourself.”
Not OP's first rodeo. I was exploring his website and found on archive.org his first web directory, from 1998! https://web.archive.org/web/19980628182433/http://www.gyford...
Anyone found a better scrobbling service? Preferably that one can self host?
Very cool!

FYI this sequence of moves leads to the AI timing out:

1. e4 c5 2. c3 d6 3. d4 cxd4 4. cxd4 Nf6 5. Nc3 g6 6. Bd3 Bg7 7. Nf3 O-O 8. O-O Nc6 9. d5 Ne5 10. Nxe5 dxe5 11. b4 a6 12. a4 Qb6 13. Rb1 Ng4 14. h3 Nf6 15. a5 Qc7 16. Bb2 Bd7 17. Na4 Bxa4 18. Qxa4
I'm curious how easy it would be to make a pure scrobbling service competitor to last.fm.
Discussions of friction and login/signup always drive me crazy. Like I get the need to get people to sign up. But security is always an afterthought - it always loses to lower friction.

And don't get me started when the PM starts lowering friction to the point where they are basically trying to trick the user.
Those things already exist. It was very enlightening- my uncle was a radiologist and I spent a few hours watching him do his job. The software they use is extremely sophisticated with lots of custom bells and whistles (and the monitors have insane contrast ratios). Most people don't see it but non-ML medical imaging is extremely mature and is developed in close contact with the users.
Yes that's a crucial part of the issue, because many websites send their emails very slowly. So the lack of email can mean both:

"No account for this email"

"Yes, there is an account for this email but it'll become apparent much later"

And your website might send emails fast, but that won't solve the issue because as a user I don't know if your website is fast or slow, so if I'm not registered with the email I entered, I'll see no email in my inbox and I'll have to assume it's one of the slow websites and wait 10 minutes refreshing to be sure.

That's why as a user I use the sign-up form to check if I already have an account instantly, and I'd be dissatisfied by an email-based system.

I guess it's for the website admins to weigh ease of use against security, but I feel often using email worsens the U.X in a way that's not justified by the security benefits.
My favorite take on pricing ever is "Index to your Customers' Revenue Growth" (fourth card on this page) https://www.screenshotessays.com/browse. Basically saying that if your cost grows with your customers' revenue or some first derivative of that then you will be set for life.
The high price of everything at the airport
This analysis has the hidden assumption, which is that a customer that is feeling pain and doing layoffs is still getting the same (or higher) ROI from your software.

If your software improves the productivity in your customer in a per-employee basis, of course you should still do per-seat pricing. That your customer has 10 employees using it instead of 100 before means your customer is actually getting 10x as less value from your software, and your pricing power is 10x less.

If you try to hack around this by changing to per interaction, or per thousand pageviews, this is equivalent to essentially raising your price. In other words, either you were underpricing to begin with in the previous economic boom, or your total profits will suffer if you move from per-seat pricing because then your costs are higher than optimal.

Now of course, if you provide value that is not on a per-employee basis, they by all means move off of per-seat pricing. But in that case why were you doing per-seat to begin with?
Indeed. On that and a lot of sites I get false positives. Old usernames that I used (and pretty sure no one else did) on sites I've never visited.
Globally distributed storage system for configuration data
If I compile a C or Rust program to run in GraalVM, will the LLVM bitcode be converted to some sort of universal bytecode, or does Graal attempt to run the bitcode directly via a plugin? (e.g. do I distribute GraalVM bytecode or LLVM bitcode to the user?).

The documentation is a bit unclear about this, but there's this weird blurb at the end:

> Note: LLVM bitcode is platform-dependent. The program must be compiled to bitcode for an appropriate platform.

...why would this detail even matter if LLVM bitcode is converted to 'GraalVM bytecode'? In any case, it doesn't sound much like "write once run everywhere" ;)

See: https://www.graalvm.org/22.2/reference-manual/llvm/
Author here. I agree with you and wasn't really sure whether to include it. I guess it all depends on whether you are thinking about pointless in a specific sense of your job, or thinking something is pointless in terms of its impact on the world being neutral or net negative.
Likewise. Same reasons, same process, and I've found it just as helpful in middle management as I did when I was an individual contributor.

There's an additional benefit. This is the reason I started doing it in the first place: many years ago, as a junior engineer, I was obliged to spend long hours in daily meetings. I found that the only way I could avoid actually falling asleep was to take detailed, copious notes. It was only afterwards that I discovered I was retaining information better and forming a big-picture view of the work. Also, what took me another decade to discover, is that nice stationery -- which for me means a fountain pen and a good notebook -- can make this a positive pleasure.
I suggest a far simpler technique in the modern society: just use a long list of crapware vulnerabilities.

Instead of expensive missiles just use cracked from the factory EVs, smart ovens, boiler, p.v. inverters, ... to simply create peaks loads (both demand and demand drop) and you have crushed the enemy "smart" grid without much effort, physical damage and still having it functional if you want to invade.

Oh, did you see the crappiness level of EVs crapware? The push toward more and more IoT?
It really depends on how long the power is out. Crossbows were a fearsome weapon of war during the time in history when guns still weren't that accurate or easy to come by. If there's a gap between "people using manufactured ammunition they stockpiled" and "people figure out how to manufacture ammunition and gunpowder reliably like they were in the 1800s before power was ubiquitous", then a crossbow would do quite well.
Extremely important, search indexes are cache optimized. Live update indexes even more so.
I would guess her handwriting words per minute is not fast enough to keep up with conversations. I would find it difficult to pay attention and understand stuff if I'm constantly trying to drain the buffer of words coming in and I would have to start throwing some 409s and would miss some stuff. At least with typing, I can keep up with conversations when I need to take notes for a given discussion.
This is mostly just a societal choice, not familiar with Canada but know that both the US and Australia have lagged on this. Many brands simply won't ship EVs to Australia as without incentives they can sell them much more relieably in Europe, so those well run countries get the cleaner healthier air and reduction in imported fossil fuels.
"Most lookups return in 5 ms or less, and 99% of reads will return under 15 ms." – wow this is a gamechanger
Tough love is sometimes the best thing you can be given, like a five foot tall player told he might want to stop trying to play basketball professionally.
Spotify is still scrobbling!
When was it honored, and what was honorable about it?

Was this about the time when they were selling encyclopedias?
Disclosure: this article is written by a company that specializes in per-metric pricing, and so the entire article is likely content marketing.
A developer's guide to coding beautiful diagrams
Didn’t look too much into Benthos but what’s the difference to Nifi?
Raising an exception is not returning a value; it is essentially a GOTO.

A pure function has no side effects. Maybe it takes an input, and maybe it returns a result. But whatever it does internally has no affect on the outside world. Raising an exception is definitely a side effect.

Worse yet, in TFA example it wasn't even necessary to use an exception in place of a returned state. I would argue that the exception example was, irrespective of functional vs imperative principles, a bad use of exceptions.
I'm not a "stick to a single stack for everything" kind of person, but here we're comparing Go or Rust, to Go + Rust + WASM. The first option is strictly and substantially less risky in this dimension.
Agreed. This is typical anti-intellectualism disguised in academic language. They make frequent appeals to the past, talk about the "West" as a unified concept (a favorite of the modern Right that sounds catchy but has no real substance) - and they insinuate that refusal to work is a moral failure of individuals, rather than symptoms of a declining economic system. They cherry pick information to support their points and get more and more preachy as the article goes on.
If the signup or reset process enables user enumeration, we tend to ding you on that in audits the same way we ding you for enumeration via the login form.

Captchas, timeouts and rate limits are all well and good, but given the attack tools (eg: SentryMBA, OpenBullet) used by the lowest common denominator solve for those (by using captcha API's and residential proxy networks)... Breaking user enumeration vectors becomes super useful.
Enlightenment and lighting controls
#define static static thread_local :)

(though this also makes it impossible to have shared static data...)
There is a big difference between note-taking and critical analysis by hand.

I use pen and paper for organising thought and critically engaging with text I'm reading.

Unequivocally, it is a far superior method for me than typing, in the early phase of digesting new / difficult information.

Once the initial cognitive hurdle has passed, typing in long form is also helpful for recall.
Last.fm is still fantastic! Spotify natively supports it, and I've never stopped scrobbling.
“Value capture” means rent-seeking.

And charging for a metric optimizes against using that metric.
You’re completely right, of course- in my thread of reasoning I argue that the buffered disk controller you’ve identified is a leaky abstraction layer. Battery backup and RAID are forms of hardening that abstraction.

In practice, we’ve allowed that particular layer to leak persistently because it’s ultimately cheaper to handle the leaks than to harden the abstraction.
Doesn’t Android also have a built in password manager that gets synced to Google servers?
I used to be obsessed with Last fm when I was a teenager and was similarly obsessed with music in general. I think I moved away from it probably before my interest in music waned, if I remember right it was because something about the whole “quantify self” movement became off-putting to me. There was something weird about looking at the charts and who your top artists were the same kind of way having a top 8 friends on MySpace was a bit weird - I didn’t need or want to have these things explicitly ranked. I didn’t want to log on to Last Fm and view bands I’d been listening to like they were a sports league table.

It just wasn’t for me in the end but I can see how it’s appealing for other people. For me it will always be a nice little reminder of the mid 00s along with stuff like indie music and the mighty boosh.
So Musk waited to announce this until after the survivors had self-selected to stay ? That's a kick in the teeth.
> "HCI" as in "human-computer interface"? Or something else.

Human Computer Interaction: https://en.wikipedia.org/wiki/Human%E2%80%93computer_interac...

i.e., the sort of research that gets presented at CHI: https://chi2022.acm.org/
I’m just amazed at how specific of not-nail he seems to trying to drive with it!

Those are high temperatures for anything electric.
It seems like academic criticism can be binned into a few categories:

1. legit criticism, e.g. you missed something or did something incorrectly

2. reveals an opportunity to communicate better on your part

3. self-promotion by the criticizer

1 and 2 are directly valuable. Distinguishing between 1, 2, and 3 is a skill, especially since 3 is so common.
I suspect you and the OP may have differing definitions of what constitutes "most games" which are flavoring your respective experiences.

My guess is you are thinking more of multiplayer gaming, where as they are thinking more about the singleplayer games.

Elden Ring, Spider-man, Horizon Zero Dawn, Tiny Tina’s Wonderlands, Stray, etc all work great on Linux.

Single-player games don't typically need any sort of anti-cheat features, so usually work as expected easily.

Multiplayer games are a whole other issue though, and most of those (imo) do NOT work well on Linux at the moment.
Top Prosecutors in CA, NY and DC Are Speaking Up for End-to-End Encryption
>I think two important factors might be how obvious the danger is and how useful the object is.

How dangerous-to-kids something is entirely irrelevant in every situations where there are no kids. You could ban parents from possessing high power magnets, but that will just go directly into willcipriano's point below:

https://news.ycombinator.com/item?id=33723342
Authoritarians are never advocates for free speech. They are for controlled speech in every avenue.

They silence voices. They don't free voices.

When they silence voices they always given a greater good justification like you are doing here.

It's remarkable how many people are so confused that they think it's authoritarian to NOT silence speech. It's exactly the opposite. Marginalized voices are who need free speech the most.
I definitely agree motivations for starting a company are mixed, and vary a lot from person to person. For the most successful companies I have seen, the motivations have largely collapsed to the ones I listed - with different mix of motivation by founder.

Finding the right word was definitely a struggle, but I think you need to lack alternatives in order to start a company. So "desperation" seemed to fit.

Open to other ideas/suggestions on a better word?
Twitter or discord, why do these require me to confirm an email or phone number when reddit doesn't? Why do shop websites like Etsy require me to confirm my email address before I even decide to purchase or sell anything? If you're worried about credit card fraud, confirm my identity when I give you my payment info, not when I'm merely registering an account.
My point is that general elections are intrinsically mediocre at decision making. You can make them cheaper, more efficient, make sure everyone can vote, add a delegation system, and so on, but you'd just be polishing a turd.

It's pointless to improve voting technology if people don't understand the ramifications of what they vote for, and they will never know that unless they invest hundreds of hours of careful study into it. If everyone does this, there is no way it won't be insanely expensive.

IMHO there is a very simple solution to all of these issues that could have been implemented a century ago: pick representatives at random. Send them all to the capital, lodge them and pay them to think about the issues full time, talk to experts directly, interview candidates for Prime Minister and other executive positions directly, coordinate with each other, and so on. Give people the time and the information they require in order to cast the very best votes they are capable of.
Depends a huge amount on where you work. You're not getting enterprise deals through cheesy pressure sales tactics, and you're not renewing enterprise deals by saying yes to everything.

You're also unlikely to be earning less doing that than telling people they get a discount if they sign the contract before checking out any other window companies and sign up to the great value financing plan...
This should be more publicized!

I was shopping for a new car couple months ago and skipped Tesla because I don’t like Elon as a person. I certainly would not buy a car that does that!
If a user has the habit of frequently quitting the program with unsaved changes, with their brain clicking through the "discard changes?" dialog in auto-pilot mode, it is next to impossible to distinguish that case from a situation in which it was done without intent, causing unwanted loss of data.

This problem was solved in MacOS X Lion 11 years ago. The solution is to get rid of this dialog entirely and to simply auto-save documents by default when quitting and to re-open all documents when the application is started again (persistent state). This feature applies even to new documents which have never been explicitly saved by the user nor even given a name. Only when you attempt to close (or explicitly save) an unnamed document does it ask you to choose a name or delete the document (with an explicit delete button marked in red text).

This also has the added benefit that when you use the save command (command-s) you're actually saving a snapshot of your document which you can recover later with a time-machine like history viewer interface. Otherwise, all other changes to your document since the last snapshot are auto-saved.
I’d have to say that academic research into programming languages has provided immense benefits for actual programmers over the years, it just has such a long lead time that people forget that the research came out of academia in the first place. People also don’t really understand the process of how these ideas come from academia into mainstream programming languages.

It only seems like academic research has diverged because the benefits of current research haven’t materialized as real, usable features in programming languages that people use to get work done. But if you look at features that we use in day-to-day programming right now, you can trace the heritage of these features back to research programming languages (like Self or Haskell) and then farther back to more abstract research into esoteric subjects like category theory and substructural logic.

The esoteric parsers that people invented in the past were, in a sense, necessary because people were ignorant of how to design languages in such a way that they could support a rich syntax without using a complicated parser. It took a lot of academic research for us to figure out that, say, you could probably use an LALR parser for lots of existing languages, and you could stick to LL(1) for new designs.
> there’s also the general feeling that the D creators’ vision of what a fixed C++ looks like is just vastly different from mine

I have emphasized for years that D is not C++. It can be used as a replacement for C++, in the sense that it does the same things, but it is not accurate to call it a "fixed C++". So many times I have seen C++ programmers disappointed that D is not C++. On the other hand, if you're a C programmer, you'll probably be comfortable writing D code. I think of D and C++ as incompatible forks of C.
I have adopted this approach (somewhat out of failure!), and what I have found is this: being significantly above average in a lot of unrelated domains is both far easier than being world-class in a single domain and often can make you even more effective than someone who is a savant in a single domain.
0.1% representing!

I got some code to fix.
I think this is wrong. The olympians aren’t clearly working harder than other people who are trying hard but not naturally talented or well endowed.

They are working hard, but many people are for far less impressive feats.
what I find annoying is that (other than HN) most places won't let you claim your username if the person has signed up, yet never posted over years (or even logged in) and places where an account was deleted.

when I signed up to HN, I had a different username. I reached out to admins and they looked at the other account that had been created but they let me have it because the person hadn't logged in since. Oh! I think GitHub did as well. (shit, I wonder if I have mixed up GitHub and HN... I'm pretty sure they're the two that did actually let me have my handle... :x)
I believe FunkWhale is attempting something along these lines: https://fediverse.party/en/funkwhale/
How is this different from Proton Experimental?
I can see you seem to be one of the very passionate for Elon types but you are fundamentally misunderstanding WHY advertisers are leaving in such high numbers.

I promise you it has nothing to do with “activist groups” and everything to do with erratic and unpredictable management that is scaring them away.
I get it, however unlike BMW's heated seats, increased performance can wear out parts of the car faster.

Say a clutch that would normally last 7 years and costs $7,000 for parts/hours lasts half as long if users do regular full throttle accelerations to 60 MPH (like say an on ramp)?
Pretty sure quote support has improved recently.

https://blog.google/products/search/how-were-improving-searc...
Considering a Bootcamp? Like Everything in Software, the Answer Is “It Depends”
The age old question, to bootcamp or bootstrap?

Note - clipped the original title a bit to fit HN guidelines.
> We've seen at least one person slightly tweak TigerBeetle to run on FreeBSD already through the darwin code paths.

I'm part of that sample set! Was quite surprised how easy it was to get it up and running on FreeBSD. Benchmarking on tmpfs on both, it even had a ~10% lead on Linux.

(Of course, that's not exactly the intended use case, so don't pay too much attention to that number!)
Kinda, yes.

It's certainly the scale of impact difference between some of the charities:

Charities can be useless or actively harmful: https://www.givewell.org/international/technical/criteria/im...

vs.

$4500/life saved: https://www.givewell.org/our-giving-funds#Top_Charities_Fund

They also say why it's that high: https://www.givewell.org/impact-estimates

Another example I've heard is hospitals asking people to stop skydiving to raise money for them, as the mean cost of medial care the average skydiver needs due to skydiving injuries exceeds the average money raised by skydiving.
Very cool but noctie seems to be timing out now - worked fine for me the first two times.

Does noctie treat the opening any differently when factoring in ratings. I had two very different estimes - higher one (2100) was from an opening line i knew and lower one (1500) I left the opening more quickly but I don't think I played a much worse middle game. I'm closer to 1500. [edit: from your other comment it does look like it takes the opening into account - I'm guessing as some sort of calibration - if you create an account does it use the results from previous games instead?]

Also curios if this could theoretically be applied to historical games as well or does it require noctie to be a participant. I'd love to see an analysis of how player strength has increased over time. [edit: from your other comment it looks like it does require play]
I agree that most startups fail. Only a small handful of companies at a given moment are the "breakouts" that are clearly working, and those are the most derisked to join (although not risk free for certain).

I think the entire industry forgot about startup risk during COVID, and unfortunately it is coming rushing back now with the changing environment....