skysight-inc/HackerNews huggingface dataset:
Only the UDP version of DNS is open to amplification attacks. The TCP version of DNS (which has been supported for 30+ years) should work fine, but some shitty firewalls block it, so people have not relied upon it, and as a result it's not very reliable to use TCP DNS everywhere. Rather than deal with the problem and make UDP-based DNS obsolete ("but UDP is faster!" + "but middleboxes!" is the reason nobody wants to deal with it), people are instead pushing DoH, which just shoves DNS over an HTTPS connection.

It's like, if in response to cars on a certain stretch of road hitting bicycles, you know building a protected bike lane is the best solution. But it's expensive, and it may limit parking, or the amount of lanes for cars, or their max speed. So instead you require everyone to put their bicycle in a car, or just bike on the street and risk being hit.

Nobody wants to deal with the real problem, so we instead institute hacks and try to ignore the problem as long as we can. Anything to avoid expense, cooperation, re-building.
> Even AUD$1,500 seems a ridiculous amount to spend on a graphics card.

For my life circumstances, I'd tend to agree.

But if I were fabulously wealthy, or if the 4090's were for some reason the ideal cards for my machine learning work, it might be reasonable.
I wonder though if this could be solved with edit lists, supported e.g. by ISO BMFF. Not all players support them completely, though, for example I believe mpv only supports one edit, so I guess that's not useful for general purpose use..
My perspective on why this is so contentious is because two things are true:
1) This is one more step on a long road to viable fusion power plants. Every step is important and we've been taking steps like this for a long time and will continue for a long time.
2) This step is being cheer-leaded as the step in order to score political points.
Since #2 is happening, it is preventing reasonable celebration about #1.

just my persepective.
There is a lot of text here but nothing to back up what you are claiming. Sharing that research you mentioned would help.
The cynic in me says that it really does matter who you defraud. Where Madoff went wrong was ripping off other rich people. So, if SBF defrauded more upper- than middle- or working-class folks, then he's screwed.
> Couple hundred years ago people were still thinking that Earth is in the center of the universe :)

They were? Were they educated people or just some random people?
Why? There are important things to talk about.
No security system is absolute, and treating all threats as equally possible leads to terrible security decisions like not using printed recovery codes for fear of them getting stolen. You must pick a threat model before you can evaluate the security of a system.

Treating printed paper codes as "widely known" and effectively useless simply because they could theoretically be stolen is silly. In a reasonable threat model for almost all people, the intersection of the set of threats that might get access to printed paper codes and the set of threats that might hack/phish your password is very small. The vast majority of threats are still protected against, while the very real possibility of being locked out of your account is drastically reduced. It's a good trade for almost everyone.
TLDR: "I don't understand De Morgan's laws and so it's the languages's fault" :P
Not these exact ones. And one of the important things required is scale: can you think of anything that requires tens of megawatts of average pulsed laser energy which ISN’T military? (And the military has very different requirements for wavelength, etc.) And those other efforts can also seek their own funding (there’s not a lot of money in fusion research).

If you’re in a budget constrained environment and you’re not already 100% certain this approach is the right one for future power plants, you focus on achieving the energy gain needed for such a power plant first, and the first step of that is ignition (ie where the heat of the reaction sustains some more of the reaction, not just external heat) and scientific breakeven. Once you’ve shown scientific breakeven and ignition, that’s when it makes sense to start investing a bit in the other balance of plant items.

But the bulk of the effort should still be in increasing the energy gain by leveraging ignition, IMHO.
Ask HN: Is Anyone in Industry Using Logic Programming?
Do you use prolog or Clojure core.logic or Mercury or anything like that at your job? If so, what do you use and why?
Note that flash drives typically use the absolute cheapest NAND cells available and I'm not sure what their shelf life would be...
... what this all forgets is how scary the initial wave looked in NYC. I remember the subway being downright spacious in the 1990s and early 2000s, sometimes sitting across from a model or seeing an illegal vendor going from train to train selling hooch or illegal DVDs. By 2019 it was getting crazy crowded most of the time and they were not kidding when they told you take off you backpack and you could get pretty compressed sometimes.

With global connections to every airport on Earth, NYC picked it up fast and it just exploded, maybe one person in a subway car could infect hundreds of people directly. They had no idea how to treat it and they were pulling up refrigerator cars to nursing homes. It is no wonder people freaked out.

If you are living further out it looked quite different (what is a safer activity than going for long hikes in the woods or riding horses?) but for the "elite" in big cities things looked pretty dire at the beginning.
Targetting/locking bank accounts of people protesting against one of the most authoritarian COVID restrictions in the world?
I love Linux, but IT can't control it so I can't use it.

I wish a BYOD policy for workplaces was more acceptable.
And markets are doing great in failed / non-existent states, are they?

They aren't.

Only literal piracy. https://en.wikipedia.org/wiki/Piracy_off_the_coast_of_Somali...
Against the Normative Realist's Wager
Supabase Engineer here

There were a lot of primitives we built to ship image resizing - Storage events exposed via webhooks, rate limiting, a queue on top of Postgres, a smart CDN cache, object metadata endpoints, etc. These are already available if you are self hosting Supabase Storage, so that you can integrate your own CDN, listen to storage events, etc. Over the next few months, we will be working on exposing these on the Supabase platform too.
Well that’s the problem to solve innit? Make hosting, administering, managing and securing easy as pie.
It's easy to say "I don't see race", but when everyone else does you're just sticking your head in the sand. People have never been discriminated by hair color in this country.
That's fair, but also ancaps are universally fascists. Anarchocapitalism gets rid of the state, safety nets, and police in favor of private security forces employed by whomever is wealthiest. If you want Elon Musk operating the police, then by all means.

But that sure sounds like a recipe for CEOs to become autocrats.
I think it does make a difference. It's effectively taunting the prosecutors, who will find ways to retaliate. So prison time either way, but likely more than if he had shut up.
To be fair, this law should be enforced on the platforms as well where if selected location = NYC, salary range field must be filled out. Seems like they just added the salary range as text in the description. I would put some more burden on these hiring platforms as well.
At that point, your best bet is to build prototypes/demos of what you're capable of and show data on improvements you achieved for others. The way I'd think about it—regardless of position—is to do the thing that others are not doing (or aren't willing to do).

If everybody is sending a resume through the same channel but you're showing up with a working demo and reaching out directly to people in the company, you stand out. I've gotten gigs by just sending a thank you to people who taught me something indirectly through a blog post or interview.

You have to be human. It's not a process to automate or "game." Just be real with people and you'll be surprised how much easier things get. Very few people do that (especially in a genuine way) and the people who pull the levers know the difference between someone who's authentic and someone who's full of shit.
cris@dosycorp.com

Alright, now in the style of an X-files monologue:

Assistant

As the camera pans over the Bay Area at dawn, the sound of eerie music fills the air. My voice, ominous and suspenseful, rises over the montage of early morning activity:

"The truth is out there, hidden among the tech giants and start-ups of the Silicon Valley. Strange phenomena and unexplained events have long been rumored to occur within these hallowed halls of innovation.

But the powers that be would prefer to keep these secrets hidden, locked away in the dark corners of the Valley. It falls to us, the agents of the X-Files, to seek out the truth and uncover the mysteries that lurk within.

We will venture into the unknown, brave the unimaginable, and confront the impossible. Join us, as we explore the X-Files of the Silicon Valley."
Just adults. Why not?
I did say "net present value" - cash or bars of gold which represent the NPV of a pull request/patch.
Are you going to be working in the open? Blog or some such where I could follow along?
Yes, Dijkstra's algorithm and BFS pages look the same.
Or I should say same smoothness? I think experience is a better word.
Fraud is a 2b1.1 crime, so the sentence scales with the "losses" to the victims; you can get +30 levels off that alone, which catapults the sentence into double digits.
No it's not, stop spreading misinformation. It's illegal as it always has been, and stop listening to police about why they do what they do. They are not honest about it and their incentives and motives are easy to decipher once you choose to.

Homeless people aren't camping! That's where they live. If you want to make homelessness a crime you could prosecute landlords who evict people with nowhere to go. Why isn't that the crime?

Just think for a minute please about the propaganda you've internalized and are now spreading with these positions. These are complex issues and the view of the police, and police-based solutions, are not the only or best approaches.
> But GDScript is good.

Agreed, GDScript is pretty nice for working with the engine.

> The problem isn't just Ruby speed, it's that GDScript exists and Ruby doesn't really offer any benefit over it. If there were no scripting language, sure, hook up Ruby.

However, I'm inclined to say that familiarity with a language might be reason enough to choose to use it, if there are no other significant dealbreakers! If you like C++, use C++. If you like Rust, use Rust. If you like Python, Lua, or Ruby use those... as long as someone has done the work to make that possible (or you want and can do that yourself).

GDScript is nice and easy to pick up, but someone who has used .NET for close to a decade might benefit from using some C#, or maybe they like the refactoring or other functionality that an IDE like JetBrains Rider might provide, especially with the occasional nice plugin for the engine itself popping up: https://plugins.jetbrains.com/plugin/13882-godot-support (to be honest, I really liked the Rider plugin for Unity as well, which made writing code a more pleasant experience).

Secondly, there's also the question of an ecosystem, which may or may not work depending on how well any runtime integrates with the engine and what the situation for packaging various libraries/dependencies is (since sometimes you need to deal with native code in Ruby and others). But when it works, you can get a library for basically anything you might want to do: a novel game with AI processing? There are libraries for that. Want to hook up your own netcode solution? There's probably a solution for that. Want to do compression, or work with a variety of file formats, or add dynamic scripting, or interact with a web service of some description? Those are solved problems in some languages, with the solution being just a library away.

Of course, most games probably don't need anything that fancy and the engine has bits of nifty functionality in it, like making web requests, for example, but overall being able to benefit from a rich ecosystem is also good, especially when you decide to do something a bit more novel.

At the end of the day, use whatever works for you: for someone that might be GDScript with its nice integration with the engine and easy syntax, for someone else that might be C# with its static type system and rich IDE support, whereas someone else might be a bit more brave and go off the beaten path further!
Same here, I'm planning to finally upgrade my workstation GPU this gen (I've been coasting along forever with my 970). ML/DL is just a fun side benefit, not enough for me to pay the Nvidia tax and the Linux headaches that come along with it.
The Powerball Lottery Is Now Positive Expected Value for Charitable Americans
Google was on a heavily customized bugzilla for years and then just wrote a replacement from scratch
> Maybe they pierce the veil and say the two companies acted as one, but hedge funds fail all the time.

“Piercing the veil” is a term of art for holding shareholders accountable for corporate liabilities notwithstanding the civil liability shield usually provided by the corporate form.

Holding coconspirators accountable for their role in a criminal conspiracy doesn’t have a special name because it is routine rather than exceptional.
SBF's mother and father are both Standford law professors - so he knows all this.

He has another angle. Maybe he was trying to taint the jury pool. He was up to something, but what?
>Extend out the trendline, and you have everyone writing to each other with ChatGPT enhancement.

How is that dystopian? Now everyone has a speechwriter/ghostwriter, not just presidents and CEOs
This isn’t the only way to accomplish the goal and frankly I suggested nothing of the sort. A little annoyed you just assumed that’s what I’m calling for but I’ll just assume it was in good faith anyway.

For starters, anyone can just make infinite YouTube channels/accounts/etc. right now. There are no roadblocks, there is no vetting, nothing. All of their solutions are reactive and often too late.

I’m not even saying that a desirable or good solution is to vet creators. But for them to throw up their hands and say “we have no way of controlling the faucet“ is completely dishonest. We need to stop just letting that be something we all implicitly accept. They are making such insane piles of money off a system they fully control that is creating social issues, but we just let them abandon responsibility for it.
Yeah... The compression does defeat the chunking (your mileage may vary. We do a small amount of dedupe in some experiments but never quite investigated it in detail.). That said, we have experimental preprocessors / chunkers that are file-type specific that we could potentially do something about tar.gz. Not something we have explored much yet.
This is true but isn't relevant to my advice. If you can't see the difference between keeping a nondescript piece of paper at the bottom of a drawer at your parents' house and posting it on Facebook then you should not be making any decisions relevant to security. And using the word "secret" causes people to treat the codes as more precious than they really are, and make bad decisions like not printing them at all.
Also if a cop lies hard to say who is right. But if you never talked to a cop unless your lawyer was present with recording equipment, etc. well, that’s a much more solid defense.
I've a semi-related question. What's your workflow for matching torrented videos with subtitles that have been provided in the same torrent? Often the directory structure is

Some.video.mkv
Subtitles/Some.video/English.0.srt

and my players of choice (mpv and MPC) are unable to automatically make the match.
I have no idea what you are talking about. Software engineering is far less rigorous as I have experienced it.

The amount of review and testing that goes into a single design industrial design is massive by comparison, since you cannot fix a 400 million dollar assembly as easily as code.

In the physical sciences, 'bug's often mean you will injure or kill an employee. The standards are extremely high.

In my time as an electrical engineer, there were many cases where I would book a flight to visit another company/site or consult with an academic/consultants. Also I would fly people in regularly to look at our plant. I never needed approval to bring in external reviewers and pay out billable hours. That sort of practice is unthinkable in software engineering.
I literally don't know anyone or any team in ML using git as a data versioning tool. It doesn't even make sense to me, and most mlops people I have talked to would agree. Is that really the point of this tool? To be a general purpose data store for mlops? I thought it is for very specialized ML use cases. Because even 1TB isn't much for ML data versioning

Mlops people are very aware of tools that are more suited for the job... even too aware in fact. The entire field is full of tools, databases, etc to the point where it's hard make sense of it. So your comment is a bit weird to me
This is a scientific and technological advancement, not a practical commercial engineering one. It is the necessary precursor to any future commercial one. To call that cynical is just ignorance.
I think this is a bit far fetched. He was the scion of famous law professors. He grew up around the law. To think he didn’t understand what the general public does about the law takes a special kind of … assumption that directly contradicts the obvious facts. He very likely knows more about the law than anyone on here. How could he not?
Imagine reading a document like this with "United States of America v Your Name" at the top. It would be terrifying. These charges are serious and SBF is going to go down for a long time if convicted.

There's also a forfeiture section in the federal indictment that demands forfeiture of all any and all property that is traceable to the commission of the offences.
The Common Good Project
Normal sailing require many more adjustments to shape than just sheeting angle. On a typical boat the backstay, a component of the rigging would interfere. There are many sailboats without backstays, but not a likely scenario for nrmal sailing.
It was both. I’m not sure why you’re framing this as an either/or situation.
Not sure how someone gets burned by not seeing the salary range. That would come up in the first five minutes of talks with the potential employer.

HN does not enforce NYC laws. Nor does it enforce Colorado laws, or any laws regarding jobs including salary ranges. Whether YC/HN have an ethical responsibility or not comes down to one's ethical position. Laws do not necessarily equal ethics.

Personally I would ignore job postings that leave out crucial information, including salary ranges. If we all did that (i.e. behaved according to our professed ethics) companies would post salary ranges just to get applicants. Compelling companies to post salary ranges by law may have some underlying logic I agree with, I don't know for sure. Compelling HN or any other public forum to enforce those laws (which vary and change by jurisdiction, with numerous exceptions) seems a stretch to me -- I would rather see the job posts and decide which to ignore and which to respond to rather than have HN try to enforce the patchwork of local laws by hiding postings. Once you get into the moderation business you have to invest a lot of effort in that and still you will piss off a lot of people.
There's a perpetual future for BNB at poloniex, but it trades vs tether...
Is there really that significant of a difference between clear text and just accepting an arbitrary TLS cert without trusting a CA? I can understand criticizing the modern TLS/CA system if you're concerned about security, but how does clear text avoid the failings of "bad CAs" here? It's not like encrypting with a cert signed by a corrupt CA gives any entity the ability to do bad things, no more than would be possible over clear text, at least.
Korg themselves now struggle delivering those synthesizers. In many shops they are sold out for months. They are in exactly the same situation as those small businesses. It's quite disingenuous to blame Korg for a shortage of parts that had no shortage when they designed and first sold those synthesizers (more than two years ago).

Also, even big brand names in the synthesizer world are often comparatively small businesses themselves. Korg is probably a lot smaller than you imagine right now. Their name is much bigger than the actual company.
The post itself provides a very real example of a flaw with the SQL language beyond simple aesthetics. Namely, that typical SQL queries only represent data in rows and columns, yet data and queries are often multidimensional. Any query that must represent data aggregated at different granularities produces output that is difficult and dangerous to use.

I think an analogous technology to Malloy is Typescript. It provides very real benefits over Javascript, but I don't think anyone would argue that it's 10x better. There will always be a lot of Javascript (and SQL) in the world.
To be honest it was just for kicks. We liked getting in the water in the summer even though it was cold. Somewhere along the way we realized it didn't feel much different even when the air temp was low. Turned into 'a thing' for us at some point.

Anyone can do it, it's nothing special, and I'm a pretty average person in all aspects of my life.
That first link deserves its own submission. Very interesting read
Bingo. This has been my experience as well.

It's like once you reach a certain level of management mirrors don't exist and problems only exist elsewhere in the org.
In-group out-group dynamics have been common throughout human history. It's a default. What's supposed to happen is that adults should correct such behavior, parents, teachers, and other responsible adults.

That they don't is the reason for the prevalence of the behavior in American public schools. That the faculty are often restricted from doing so due to ideological, legal, and political reasons is another reason for the proliferation.
The error message or the column by John C. Dvorak?
Twitch streams can be sent or uploaded to Youtube so they can be viewed later.

Of course the couple that I bothered to do that with also have basically no views as well :)
Noone knew it at the time of purchase, it turns out CP was everywhere on Twitter and executives bizarrely didn't care at all about it, but Elon heroically stopped it. Turns out Twitter was the real Comet Ping Pong.
San Francisco has 0 safe usage sites.

I think the U.S. overall has low single digits. And even those exist in an extremely dubious legal space, requiring the cops to turn a blind eye to their existence.
We (metalenz.com) use Julia extensively in our optical design/simulation/modeling workflows:

1. Design team keeps live sessions during interactive work, otherwise launches on virtualized servers (and things take sufficiently long to compute TTFX is a rounding error)

2. Above mentioned team is exclusively Julia. Julia shows up in other things we do (low-level computer vision), but not dominant nor exclusive

3. High performance & expressive programming and flexible autodiff system for scientific computation