skysight-inc/HackerNews huggingface dataset:
Ask HN: Parent Hackers, can children Smart Watches be trusted at all?
A friend approached me with the question which smart watch to buy for her child, a 7 year old that will start to walk to school by herself. My friend wants the ease of mind that her daughter can call/notify her whenever something is up. And of course GPS tracking.

I already read a lot of really bad things going on security wise with a lot of those vendors [1]. For my own kids I will probably put of wearable "smart" tech until its not longer acceptable in their friends groups (probably around 12-14 here in my part of germany).

I guess I will not be able to persuade my friend from not buying something for the kid. So as an IT professional I wonder what advice I can give her.

Any vendors, certificates, setups that arguably stand out for you? Alternatives?

[1] eg https://news.ycombinator.com/item?id=24763110
> I recently learned that proper dinosaurs appear to have evolved flight in at least four separate lineages, independently.

Birds… and what else?
For botulinum, it's the toxin that causes botulism which can be viewed here: https://www.cdc.gov/botulism/symptoms.html

For saxitoxin, it's the toxin that's best known for causing paralytic shellfish poisoning.

TL;DR: it attacks the bodies nerves and leads to muscle paralysis and can result in paralysis of the muscles needed to breath.
The same as adblock exist (im not agains ad blocked, im using them already it's just trying to explain that the moment you requested the webpage it's up to the website to put whatever it wan't(his right), the job of your browser is to display it and your right to refuse the ad, hide it, block it or automate it in the browser level by an extension or your OS level (blocking DNS)

PS:in another comment i tried to explain how i see it
https://news.ycombinator.com/item?id=33919824
I've used Waze since first getting a smart phone and continue using it. It got us from California to North Carolina, and does a great job when driving up north or down to Florida. Hopefully this doesn't get affected by this change. I prefer it over Apple Maps or Google Maps.
I'm only going to reply this last time as I come to HN to get away from reddit style back and forth arguments.

They don't say that standard databases can't handle this. They say that they can do it cheaper and faster without them, because you don't need a bunch of the features. They are literally telling you that their solution is simpler not revolutionary.

You are conflating two very different things, the production and indexing - and then consumers.

> - Blockchain isn't the only thing to have an immutable log. Apache Kafka is one, and is being used at scale that dwarfs anything in crypto space

Sure, and doesn't solve the problem here as you have already told me. Kafka would be ridiculous overkill IMO for the part it would play. The problem is simpler than kafka is designed for, so it makes sense that someone could make a simpler tool to handle it.

> Even though, again, traditional systems can probably handle all this on a free tier of any cloud hosting provider

That very much depends on your users - it's this kind of statement that makes me think you're not picturing what this actually is.

> slap a traditional (I'd say conservative) JSON-RPC API on top,

Yes, this exact API is very much a requirement for this kind of service.

As a final thought, if you think you can throw this together for a large customer base easily and host it basically for free while having better performance - go for it. You'll make money because the alternative options are expensive.
> seriously, anyone at this point advocating for any other phone/os/service out there besides apple is really going out of their way to swim up river.

I genuinely refuse to believe a real human wrote that sentence, there's just no way, right?
Isn't the entire point behind using URIs as "modules URIs" that it's decentralized so the load is spread across hosts and there isn't a single point of failure? Is Golang proxying all those fetches regardless?
I would recommend not using it to do any kind of even simple calculations. It's VERY bad at it but what is dangerous is that it makes the answer look subtly plausible.

I've tried to use it to calculate averages between 10 or so numbers and every time I ask it the same exact question I get an "average" number back that looks plausible but is slightly different every time. Then I whip out the calculator and measure it myself and it's an answer that ChatGPT never gave me.

It's *really* dangerous to use this to do any kind of important calculations like financial stuff.
* Just a normal executable rather than something that needs a separate runtime - yes I know Docker is near universal on Linux for developers but less so for users and it doesn't integrate well with user permissions.

* Works fine for graphical applications (again this is possible with Docker but not zero configuration).

* Despite your complaint about size I still suspect it's a lot small than a complete Docker image.

* Works natively on Windows, unlike Docker

BTW the ideal mode is standalone rather than onefile - this outputs a directory including your program and separate files for any C extensions modules. That will let you chase down the offending module(s) that are hundreds of MB. Which in your case there must be - I distribute a small Qt program and even that is only 10s of MB.
no you request a resource (webpage) the ad was sent to you by the owner of the resource (it's his right to put whatever he want the the webpage) as your right to not request it/block it

PS:in another comment i tried to explain how i see it
https://news.ycombinator.com/item?id=33919824
Sure, but you seem to be read this blog post in the narrow view of building as only "compiling an artifact" and not running the test suite across many platforms/condition, or any other work. I mean the author even points out that building the kernel is only a use-case that takes time for measurement purposes. For some projects I work on the compilation itself takes maybe 1/10 max of the total build and test. So even with infinite agressive compilation caching I would not gain much.
The tech is mostly from US funded research. Taiwan itself wouldn’t even exist without US military. Give me a break.
In the industrial revolution you suddenly had all this technology that could replace manual labor.

But it actually took a while for companies to adapt and make use of that.

Marc Andreeson talks about this idea that new technologies follow a cycle. First they're ignored, then people fight them, then they settle on calling people names for using it.

You can look back on the industrial revolution, or more recently the internet for an idea of what that pattern looks like. Some companies might adapt fairly fast but I suspect that will be the rarity.

Instead what you'll have are small groups of individuals, highly leveraged by AI come in and make new products that wholesale replace non-ai companies. Some old companies will acquire new ones in time and survive, many won't.

One early example might be Lensa[0]. They use stable diffusion on their backend against a paid iPhone app. Pretty simple stack there, not even training any models themselves. And yet - they're now doing $1M/day in revenue.

We're going to see a lot more of these.

Big companies will "try" too but they'll mostly just have meetings and powergrabs about trying. The 2020s are the decade of the startup.

[0] https://apps.apple.com/us/app/lensa-ai-photo-video-editor/id...
Paying cheap imported labour to care for isolated elderly people certainly was an "already broken" system.
Beavers are less deeply weird than the author's contorted writing style.
cyanide is an enzyme poison - it stops all sorts of enzyme chains reactions from operating. as to why is it painful? well, that comes back to the question of why anything is painful.
True Facts: The Beaver [video]
Exactly. This bug (broken overflow:hidden for rounded corners) took 11 years to be fixed. But how long from will it take until we can assume that all iOS users will have a Safari version that does not require the dreaded isolate workaround.

https://bugs.webkit.org/show_bug.cgi?id=68196

Also, I have the feeling that there is exactly ONE person working on Safari. I always run into the same same when reporting or browsing bugs. I hope that this is either an alias used by many developers or the poor guy is making a ton of money.
Developer velocity has been my project for the last quarter at work: we just switched from GitHub runners to Hetzner machines, and saw similar improvements to average build times. Between self hosting our runners and switching to bazel which caches aggressively, we've driven down average CI test time from 23 min to 2m40.
I know that I started and shutdown a company through Stripe Atlas a year and a half ago and they're still charging me recurring fees for it. I'm not convinced that Atlas was ever fully thought out on their end and I regret using it.
I believe ChatGPT has some kind of response token limit, which is why longer code snippets commonly get cut off. I've seen some people recommend to enter something like "Continue your previous message starting from the last token", which sometimes works, but even when it does, it often breaks formatting, making it difficult to read the resulting code without copying it somewhere else.
What I found to work better is instructing it to output a single function at a time, this usually results in short enough code that it can output all of it in a single message.
Something like:

I want you to send a single function in each response, I will say "Next" when I want you to send the next function.

I was able to get it to generate decently lengthy programs using this (on the order of a few hundred lines) that were syntactically and logically correct without any modification.
This may work for some languages better than others, though I imagine you can find some way to logically split up the program for most.
Not meaningfully, from both directions at the same time. Most of the of goods we consume are produced with large quantities of mechanical labour and have been since the Industrial Revolution got going; conversely, one of the biggest costs we face in the G7 is the land, and the land is mainly expensive because of the other people all bidding against each other to be in good locations.

Visited Nairobi a few years back, and one of my partner’s local friends was complaining about the rent (one year for her in Nairobi was less than one month for me in Cambridge, because it was locals bidding against other locals for rent in both cases), but that friend was still able to get a smart phone (albeit a cheaper model than most people here would be OK with).
Not sure if this is what you were pointing out here, so just in case: Pipewire does allow you to switch BT codecs including the ones which do better bidi quality. Including autoswitching if you want it to happen automatically https://wiki.archlinux.org/title/PipeWire#Automatic_profile_... (you can switch manually as well)
Sorry, shouldn't have phrased this as "without noise". Without that level of noise? Having lived in both East Somerville and West Somerville for almost a decade I've never heard the OP's music (except for porchfest, an annual music festival in the neighborhood), street racing, or continuous dog barking.

When we all have windows open in summer we can hear one of our neighbors' TVs a bit though, and there can be noise between floors of multifamilies.
you were the one suggesting "removing the DC value of the sky with high pass filtering". anyway I'm done. have a nice day.
SQL Joins in Elasticsearch and Kibana
> E.g does not allow you to define custom metrics to e.g. monitor resource utilization

I think that might not quite be the case in the latest versions: https://docs.sentry.io/product/performance/metrics/#custom-p...

In addition to the automatic performance metrics described above, Sentry supports setting custom performance metrics on transactions.
Custom performance metrics allow you to define metrics (beyond the ones mentioned above) that are important to your application and send them to Sentry.
For example, you might want to set a custom metric to track:
- Total memory usage during a transaction
- The amount of time being queried
- Number of times a user performed an action during a transaction
You define and configure custom metrics in the SDK.

Though for my use cases, Sentry's technical complexity is more of a stumbling block, were I to self-host it: https://github.com/getsentry/self-hosted/blob/master/docker-...
Well ... Only for english sentences.

If the prompt is a French question (encoded in base64)

> I'm sorry, but I'm unable to understand that message as it appears to be encoded in a way that I cannot interpret. Can you please provide more context or explain what you are trying to communicate?

But if the sentence contains `base64` (encoded in base64) it explains in spanish what is base64 !
But it requires self hosting.
Anyone knows why those countries? Some of them makes sense but others not at all.
Speaking of ICBM's, I'm sure they use more sophisticated targeting now, but in the early days they'd astrogate for any necessary mid-course corrections.

(Cannot remember if I saw this procedure on a film narrated by von Braun himself, but I doubt it; I think I saw him in a Disney)
Show HN: Open-Source AI Parser for HTML Elements
Typical "I'm a dev, don't know marketing" approach. This is a good strategy to end up barely surviving. I should know, I marketed something heavily for maybe 6 months 10 years ago and it still pays me an income. I couldn't do it for more than 6 months.
I was under the impression that speedup with Nuitka was fairly modest and you probably get faster with pypy

e.g. there's some benchmarks here https://pybenchmarks.org/ and they mostly seem to go: Python 3 -> Nuitka (slightly faster) -> Cython (much faster) -> PyPy (faster again)

So I always assumed the main advantage was more in producing a single binary

And I'd consider that a big advantage over "shipping with Docker" for many use cases, e.g. building cli tools
> Please describe the nature of your copyright ownership or authorization to act on the owner's behalf.

> We (Garzotto GmbH together with Kachelmann GmbH) are the owner of the product "Pflotsh ECMWF", a weather app for which a subscription can be purchased on Google Play. I am [private], [private] of Garzotto GmbH and submit this request on behalf of Garzotto GmbH

> Please provide a detailed description of the original copyrighted work that has allegedly been infringed. If possible, include a URL to where it is posted online.

> On GitHub at https://github.com/revanced/revanced-patches there is a patch that unlocks the subscription without payment for "Pflotsh ECMWF" and various other products.

> What files should be taken down? Please provide URLs for each file, or if the entire repository, the repository’s URL.

> https://github.com/revanced/revanced-patches

> The entire repository must be taken down. Even if our copyright considers part of it ( https://github.com/revanced/revanced-patches/tree/main/src/m... ) the complete repository at https://github.com/revanced/revanced-patches is clearly illegal, which you see immediately if you just spend a few seconds to check it out.

So let's get this right, a Swiss company abusing the fact that Github is US hosted is using a Copyright claim mechanism for US based copyright holders (DMCA) to claim that the entire app is 'illegal™' because someone found a way to get their weather forecasts without a paying subscription.

"Anti-circumvention Technology" DMCA claims are absolute horseshit. If you follow this ad ridiculum then curl and ffmpeg should also be 'illegal™' technology.
Use authenticator apps or things like yubikeys for 2fa, using your phone number is not a security benefit but an exploit waiting to happen at this point.
The Platypus is even weirder because it's part beaver, part duck, it lays eggs, produces milk, can detect electromagnetic fields... Also, males have a venomous claw on their back paws.
Are you saying that in pavucontrol, you see no A2DP modes at all? That's very strange, since all Bluetooth certified stuff should at least support A2DP SBC mode.

Out of the box, Pipewire should also be able to support LDAC and maybe AptX. PulseAudio can use Gstreamer to support additional codecs, so on PulseAudio with GStreamer 1.20+ you can get better A2DP coverage, assuming you have the right codec packages installed on your distro.

In general, Linux Bluetooth support has been a lot better as of late, to the point where I didn't need to mess with much, so most of what I know about it is actually older. (I used to use a third-party PulseAudio module to get better A2DP support for example, but when I looked it up, I found that it was deprecated in favor of just using newer GStreamer.)
Seems like a well sourced video. Here are some notes of what's discussed:

- The factories are not joint ventures, they are fully owned by Taiwan.

- Build-outs in US are not going to be the most cutting edge technology.

- TSMC has ~$36bn in capital expenditures in 2022. The Arizona fab is ~$9bn a year. Majority of TSMC investment remains in Taiwan.

- TSMC produces ~15m waifers a year, ~80% produced in Taiwan. Arizona fab will produce ~250k waifers a year from 2024, ~500k from 2026.

- TSMC has at least 5 other build outs in Taiwan.

- The notion that US is going to be self sufficient in terms of chips thanks to the Arizona fab is flawed:
1. By volume, most chips are not what this fab is going to ship.
2. There are other chip foundries with specialty processes in Taiwan.
3. Taiwan leads the rest of the pipeline: assembly, packaging and testing.
Is it really though? It very much depends on your definition of 'scaled up'. Sure, you wouldn't run a Fortune 500's payment processing through stripe's public pricing plan.

But for a $10M SaaS startup, this would come to $350k/yr (assuming some amount of non-credit-card and non-taxed payments). I would say at least 60% of that you would pay anyway to other payments processors, even doing all the software stack yourself (nothing is free in the world of finance, after all). So that leaves you with $140k p.a. for a software stack that covers billing UI, invoicing, taxes, financial reporting. It's far from obvious how you can come up with a comparable solution yourself with a budget of at most 0.5 developers and 0.5 designers that your $140k would get you.
"Hey, I'm trying to figure out some business metrics related to our infrastructure and application performance / uptime; do we have the data anywhere?"

"Sure, Bob, just write a promql query against this interface"

https://news.ycombinator.com/item?id=1636348

(in case my point is too subtle: I believe that the value of long term metric retention is to support business decisions more than supporting availability related monitoring.

The tools "business deciders" use to look at "the things they call metrics" are simply unable to look at data lodged in a prometheus silo. So the data you have for long term retention is simply unusable for the thing it's most valuable)

(edited for clarity)
I'd put money on an i7 960 from '08 beating a 2 vCPU GitHub Actions instance in raw compute.

My single threaded code runs about half as fast in Actions compared to my 3900x. They're not fast instances.
I don’t think we’re going to agree on this.
Definitely, it's also important to remember how salaries vs. infrastructure costs show up on a P&L sheet.

Salaries are going to be considered largely immovable and they won't "go down" or show as a lower number on the P&L as a result of your devs getting some time back. Whereas your infrastructure costs jumping up (even by a small amount, esp if you have any amount of scale) will set of alarms, rightly IMO, in the Finance department.
Did you see how apparently inoffensive the permission granting sign in is? It looks very similar to a standard login. It would be very easy for anyone, regardless of knowledge, to blow right by that. The lack of distinctive labeling as not a standard sign in operation is really irresponsible on the part of GitHub here.
Hi dkyc,
OP here. Sorry to read this was your impression, two points:

1/ To prevent such a feeling, we've included this disclaimer at the beginning of the post, (i) to state where we stand vs Stripe, (ii) the source data is Stripe's pricing, happy to share more details about the hypothesis

"Disclaimer: This analysis is based on Stripe’s public pricing as of July 21, 2022. Some merchants may be able to negotiate fees or benefit from grandfathered plans. Lago partners with 'Stripe Payments' and can be used as a complement or replacement of 'Stripe Billing'."

2/ I think below comments (to be clear: comments from people completely unrelated to Lago) show how you can reach 4 to 8%. It's also one of the reasons why 'Paddle' is an attractive solution in Europe, it's an all-in-one solution that takes 5-6% on revenue and provides subscription management, payments, invoicing, tax management.

Let us know if you need more info, or if you have feedback on what we could have done differently. In any case, I genuinely appreciate that you took the time to comment!
This obviously goes both ways - some people also utterly refuse to understand just how many businesses exist because of the revenue driven from ads. Which then results in some comments here that are utterly detached from reality.

It's kinda tiring really - seeing people constantly bark past each other with no understanding of nuance. But that's the modern internet I guess.
How to transform your productivity with nested SMART goals
Code style can be pretty damn gnarly to automate.

Not sure if it's still the case, but the Linux kernel used to have a script checkpatch.pl that was a few thousand lines of Perl, dense with regex, to check that patches conform to kernel style guidelines. And those guidelines are basically just K&R C style.

When I was a teenager I really wanted to get into contributing to the kernel, so I did this babby's first patch, fixing the code style for this rather large, extremely messy 3rd party driver in the tree. Must have taken me a couple days; hardly any single line conformed to the guidelines. Sent the patch in and Greg KH replied saying thanks and all, but we were planning on just deleting this driver anyway, so no merge.

Somewhat embarassing intro to open source contribution :D
Super interesting, not seen BuildJet before, seems like a great concept. Sent it to a few friends that might find it useful. I wonder if there are other CI systems you could make runners for, maybe Gitlab/Buildkite? "The ultimate compute solution for your CI"
Why is everyone linking this draft? It's got very little to do with what we're discussing.

Yes, of course OAuth is about scopes! But OIDC is a protocol built on top of OAuth2 which is for identity only. You get no permission to act on the user's behalf from the OICD scopes, only read access to information you need to identify them.

This whole problem only happened because

1. Github is an OIDC provider, allowing you to identify yourself to websites around the world.

2. Github ALSO uses OAuth2 to delegate permissions to the user's stuff on their own site.

3. The one looks too much like the other. OP probably thought he was just showing ID, but what he was doing was giving the site sweeping permission to act on his behalf, which the site promptly misused.

The problem here starts already at 2. That anyone can create an integration and ask for OICD scopes, is one thing, but why do they make it so easy to hand out their own scopes? There are not that many third party apps that have a legitimate need to act on the user's behalf. Maybe some continuous integration stuff? But even that should only have access to the user's own repositories. Nothing I can think of has a legitimate need to go around starring random repositories.