skysight-inc/HackerNews huggingface dataset:
The algo works. We have two algorithmic experts onboard, of which one is a professor and one is already working with algos each day (e.g. worked on patients/beds capacity challenge when covid began).

The startup focusses on assigning goods to transport. (As in its not part of the commercial sales process.. only execution of the required capacity planning that comes after it) .Something that has been tried 20 times and failed. It currently is done manually.

So yeah, its going to be a challenge.
-N 1 will invoke the command with only one arg at a time
I used Duo to set up a similar push notification 2fa system for bitwarden as lastpass had.
Good question. Can local admin dump apple keychain passwords? If so, hashed or plaintext?
Yeah who are we kidding.

Any craft that can visit the Earth from outside the solar system is also capable of destroying civilization on Earth.

Literally that same craft. At relativistic speeds, any sizable piece of matter can become an extinction level event.
> Consumers prefer "hub free" products that just "work", They are willing to give up privacy, security and possible performance issues for that convenience.

This is tptally wrong - I need to control Ikea Lights, Xiaomi smart vacuum and use Aquara to control blinds and a third company for radiator valves - well guess what, you are going to need 4 separate hubs and the only way they can talk to each other is through the internet.

It doesn't matter how much money you spend, Iot shit is not inter-compatiable and no one company makes everything.
> but that cache is not diligently kept up to date

Is the ability to take a payment the only thing LastPass got right?
> Considering nearly zero Americans are of healthy weight right now (obesity rate over 42%)

Apparently, “nearly zero” are mathematically literate, too.
AI Labels: A New Voluntary Content Framework
The AI Labels specification seeks to provide a voluntary labeling scheme for creators who would like to clarify the role of AI in the creation of their work products.
That's only if you use immutable strings. In C# or js (and probably in others as well) you can use some form of byte arrays / buffers, and overwrite their content after use.
To avoid the risk outlined here, knowing all the references to a variable is not sufficient; without an understanding of their lifetimes in every possible permutation of the program's use (and misuse), you cannot act on that information to minimize the exposure posited here.

I won't get into the question of whether a programmer should also know all that, as there is another consideration which renders it moot: Even with a non-GC'd language, a programmer could leave variables with sensitive information in memory for the remaining duration of the program (e.g. local variables left deep in the stack when a function returns or throws an exception - do you know when they will be overwritten?) What matters here is that the programmer understands the risks, knows what constitutes the most sensitive data, and acts accordingly - but, armed with that knowledge, the programmer can just as well ameliorate the risk in a GC'd language as one that is not.
Depends on the project I would say. If you're working alone sure, but in a highly collaborative environment I would assume it would also interact a bit with the social side since I'm constantly thinking of how best to name and communicate my design for the next reader.

Also rubber ducking is a pretty social exercise, even if no one is there.
> if done improperly, this could be a logical fallacy

Maybe I'm wrong but doesn't this put it in a totally different category than other fallacies? Circular arguments, for example. All circular arguments are wrong. If you identify a circular argument you don't even have to fully understand what is being said, you can immediately conclude "this is a bad argument".

But appeal to authority isn't like that. "I'm not going to drive through the mountains today because the roads are iced over, and I know that because the highway department said so." That's an appeal to authority, and it isn't proof, but it's a good argument and there's no need to drive out yourself and confirm that the roads are dangerous. Identifying an appeal to authority is not enough to discard an argument, you need to evaluate the authority. When you see a circular argument you don't have to measure the diameter of the circle or something.

So I don't think appealing the Grammarly was a fallacy, but in this case I think they're wrong.
Relying on your browser/OS password manager is, for the vast majority of people, a better alternative. These days you get pretty decent integration even if you use Chrome on macOS and want your passwords to show up on your iPhone.
I re-transcode them via my server for better quality and speed. Most of the TV channels themselves have reached out to me and asked me to re-stream their channel because it costs a lot. I have always complied with all takedown DCMA requests rapidly, not many, when they do come through.
> because it's not the way of the wild

Not to defend crate training, but potty training, walking your dog on a schedule, feeding it processed dog food and generally keeping a pet indoors is also not the way of the wild.
Not just price- Espressif has done a really good job making their SDK and hardware documentation available to overseas hobbyists. Even hiring an English speaking dev to work SDK features that people were asking for in English, and doing a good job communicating with/engaging with the community.

They're not great if you're coming from solely-software land, but their SDK and dev experience (you can just use the Arduino IDE for a gentler learning curve, step up to FreeRTOS, esp-idf, or go more bare-metal) is still leaps and bounds ahead of competitors, like the STM32CUBE cluster fuck...using their Hal was the only time in my life where deleting whitespace in C code could break a build. If the developer experience is awful, it doesn't matter that the STM32 chips perform better per second and per watt than an ESP32.
Show HN: GCP Compliance at Scale with Modron
The idea is to have the IT folks managing the configuration of both Postgres and PostgRest, the analysis folks will obviously be working in SQL only.
The plaques are a side effect of something we don't understand yet. Treating the plaque or slowing it is not a solution, we need to find and fix the cause.
Reminds me a bit of Substack, I know it's a different space, but kinda gave me that moment of, huh, one spot to see all cool stuff, and have it updated regularly.
Thanks buddy, glad you like it. Some real MVP suggestions here, I like the trajectory idea the most. Might be a weekend project... Yes I did notice that the last fish is very easy to protect, then again, it becomes that much more of an important mission to save the last fish in existence. I guess in a sense, it's a feature not a bug.
I do know the answer to this - Firefox is not an acceptable alternative to a strong password manager. Local admin can dump any passwords from Firefox, and I think a user can even dump their own passwords from Firefox on windows and Linux.
The pessimist in me expects more demand for food delivery services than for walkable shops.
I had hot corn soup, red bean soup, and asari clam miso soup from vending machines in Japan during my trip there this month, and they were all fantastic.
These are pen-tests and black-box security audits. While they're definitely better than nothing, and they would show that their security is better than LastPass', the code was never audited.
Tools are not the main problem. What need to be “re-invented?” first is our personal approach to information overload.

One of the bigger issues with bookmarks is they always seem valuable the moment you add them, then that value somehow evaporates most of the time.

Between Bookmark-Hoarding and Zero-Bookmarks, thoughtful curation will always be an art form.
Wish there was some context to this, and/or any info as to where the code is from. Is it an implementation from scratch of a specific (and interesting) subset? What's the angle? Low resource? Low code complexity? One specific feature subset?

Not blaming the repository authors! Github is also a dumping place. More interested by what zdw thought of it when posting the link and whether anyone has any more info here?
A bias view:

Some of you know that I am going through a process where after getting my ADHD under control with nootropics in that I am now basically re-applying computer programming and re-learning it.

It would seem since I am taking lion's mane which does rebuild connections between short term and long term memory via BNDFs that might be a short term and long term memory connection beyond just the areas that are active when coding.

In my own case my understanding of other's coding and my own has drastically improved. I am getting close to seeing actual code structures by just reading the code which I could not do before.
When the tool is opened sourced honest and rogue security experts are going to go through it.

Now how much value is the first adding versus the second removing is the case. And based on incentives for each, an honest security research maybe getting a small bug bounty, and a rogue one potentially gaining access to 10's of thousands of accounts I think it might be a net negative overall.
The trend I'm seeing companies settle into is one where Monday and Friday are work from home days, with Friday being more like a half day or optional day. Tuesday, Wednesday, and Thursday are default in-office days. I'm curious how this will impact commercial real estate prices, because while there's less overall utilization, the peak load remains more or less the same.
Yep, that makes a ton of sense too, especially annotations + JSON.
This line of reasoning is absurd. We do a lot of things we aren’t “meant” to do evolutionarily. Babies can and do sleep alone just fine. Sorry it didn’t work out in your case, but don’t try to appeal to Evolution to rationalize it to yourself.
In the UK here. I haven't seen a grocery bagger in over 30 years, and usually don't use a grocery cashier either. The work is done by the customer but I never found it burdensome. I shop for groceries almost every day currently but in the past did large shops every 1 to 2 weeks, with quite varied loads.

Is there a reason it's particularly difficult to bag your own groceries in the USA?
> Ironically, I liked to go to the office when my team actually wasn't there! I like to socialise with people from different teams but seeing my teammates is sometimes stressful.

Have you considered a coworking space? Some of the criticisms I see of remote work basically boil down to being completely isolated at home, or a home not being a conducive working environment (as opposed to feeling like they are more productive in office, enjoy being around their coworkers, etc.) I think in these cases the solution isn't necessarily to go into the office, but to simply get out of the house to work. For many this might be a happy medium, allowing you to get out of your home for a good chunk of the day, into an environment with amenities for working, and possibilities for socializing with others, while allowing flexibility to live far away from the office, shortening commutes or housing costs, and not having your daily social life tied to coworkers, which has downsides.
Oooh, I like this a lot. Source available?
I use 1Password but the slowly worsening/slowening UI and move to a subscription model, along with the fact I can’t even upgrade to the latest version because I still sync my own vault are making me look around for an escape hatch.

I guess it’s the Keepass family of apps, or perhaps Bitwarden, but it’s disappointing to even have to think about switching.
> Approximately 5-6yrs ago the transit quality in the outer-boroughs (not Manhattan) became so bad that you could spend 2hrs hours switching multiple trains if you were going into Brooklyn. Trains would mysteriously not arrive, would run express, would claim they have arrived on official apps but the station was closed, etc. Then you think -- in 2hrs I could have commuted into the suburb and lived in a beautiful home for half the price and have a huge garden. And lots of people did exactly that.

You're talking about the "summer of hell" on the subways, which was over 5 years ago at this point[1]. I grew up in Manhattan and currently live in Brooklyn (in an "average" neighborhood for transit; neither accessible nor inaccessible), and transit has been fine for at least the past 3 years.

You can see the improvement in the MTA's own statistics[2]. This year so far has been slightly lower than 2021, but the overall trend is positive.

> Schooling was increasing byzantine. You could own a home but not be guaranteed a seat at your local public school. You had to use "connections" just to make it on the list, or your child would end up half way across the Borough at a different public school. You could have two kids zoned to the same public school, but end up in two different public schools, making school drops impossible. Test-driven systems were changed, making things even harder. "Leadership" based public school application systems were proposed, which is a euphemism for "rich people" get accepted.

I won't claim that this has gotten better or worse, but my perspective from going to public schools is that there's always been a degree of this.

The historical testing scheme is a way to ensure that rich people get access to the better NYC public schools: the standardized tests are laughably easy to prep for, and every UWS and UES'er of means for the past three generations has thrown money at tutors and test prep for their mediocre children.

[1]: https://www.newyorker.com/magazine/2017/07/24/public-transit...

[2]: http://dashboard.mta.info/
Can you share any pointers to resources like step-by-step guides for self-hosting SD?

Also curious, what sort of hardware are you using for SD?

Thanks in advance!
You don't have to intellectualize movies to enjoy them.
Funnily, external countries are my main audience and provide the best source of income due to Ads being more valuable. However, I just feel let down by my own country for allowing a cheap DNS block trick like this.
I buy the explanations that they mostly want to be able to explicitly overwrite sensitive memory at a time of their choosing.

My question: does the nondeterministic execution pauses that garbage collection injects into a program's runtime aid or prevent timing attacks?

It seems like it would prevent them, since it makes it that much harder to predict execution duration, but I have this vague impression that high-security operations are more likely to demand real-time computing. Maybe that's just incidental, and applications that must highly perform also tend to need to be secured from attack?
LastPass has always been atrocious. Crazy that anyone has been on their platform post ~2016.
I was referring to the United States, but you can adapt the principle to other places, but with updated descriptions.
I don't know much about chip fabrication but reading wikipedia I see this:

> The term "3 nanometer" has no relation to any actual physical feature (such as gate length, metal pitch or gate pitch) of the transistors. ... a 3 nm node is expected to have a contacted gate pitch of 48 nanometers and a tightest metal pitch of 24 nanometers... "3 nm" is used primarily as a marketing term by individual microchip manufacturers ... there is no industry-wide agreement among different manufacturers about what numbers would define a 3 nm node

So can someone who is more familiar with it help me understand what progress we're making in terms of the physical aspect of the chips? Is transistor density still increasing? Are we using different materials? At a physical level what's different about this generation of chips?
Are they still hiding the Delete Account button?
And [Home] without jumping to select column A, and the arrow keys should work consistently instead of sometimes moving the cursor and sometimes inserting a cell selection.
+1 from here for CLion, and also WebStorm from JetBrains.
IMO the best software development IDEs currently, VSCode is good but ultimately it feels a bit hacky compared to what JetBrains offers.
Absolutely, if the locations are a good personal fit. Looking into that right now as a recent empty-nester.

Weekly hopping is too frequent for me, however, and a month feels barely long enough. I’ve been looking at 90-day minimum stays, with a preference for 6 months to a year.

Feel free to reach out if you’d like to chat with someone seriously interested in this.
We should consider the following properties when evaluating ID formats and generation algorithms:

1. Private: you shouldn’t be able to gain information about the system using the IDs from an ID alone. E.g. document enumeration attacks like what happened with Parler (https://www.wired.com/story/parler-hack-data-public-posts-im...)

2. B-tree/cache friendly: newly created IDs should all exist in a narrow range of values. This is helpful for databases.

3. Stateless: ideally you shouldn’t need to know the current state of the system to create a new ID.

4. Human-friendly: IDs should be easily dictated, copied, pasted, etc. This means they should be encodable as text that is short and does not include ambiguous characters. Bonus points for error detection like with credit cards.

Some of the these properties are in conflict. Statelessness is achieved by randomly generating long IDs, but people don’t like reading or typing long IDs.

Different use cases will need these properties in varying amounts. If you don’t intend to expose the IDs to users, (4) doesn’t matter. Just use long, randomly generated byte strings prepended with the date. Most databases have a UUID type that fits the bill.

If users are going to be working with IDs, that’s more complicated. If not every document has a user-facing ID, just go with the non-user-facing ID like before, and generate a shorter, random, stateful ID as needed.

I don’t think NanoID prepends the date, which means it won’t be efficient when inserting large numbers of IDs into a large index. They also default to using ambiguous characters like 1 and I and l. Also no error code. But they are shorter than UUIDs. So it doesn’t meet property (2), and it only kind of meets property (4). NanoIDs are random, so you’re probably safe from enumeration attacks (1). NanoIDs mostly leave statelessness as a decision for the user. They have a nice tool that helps estimate how long the IDs should be (https://zelark.github.io/nano-id-cc/) for a given collision resistance.

I think we can do better overall. Bitcoin uses a good encoding scheme called base58check (https://en.bitcoin.it/wiki/Base58Check_encoding). It generates fairly short strings and uses a checksum at the end. I think it could be refined for non-bitcoin purposes, but it’s already pretty good.

A 128-bit value like the ASCII string “hackernewstestid” is encoded as “Dtajqjz5pptWcmGrNcwBx7”. It’s about 2/3 the size of the equivalent UUID, even with the (unnecessarily long for this use case) checksum. It also has no punctuation.

I’d like to see a small ID standard that meets the above requirements and has a choice for either stateless and long or stateful and short. Maybe another choice for secure random or insecure. But all options would have binary form and a text form. The text form would use something similar to base58check, but probably with a smaller (or user-determined) length for the checksum.
If making the urls easy to copy saves them even a handful of support requests, it's worthwhile.
They blocked the whole domain
> My hot take is that remote work is unnatural and has only taken off because of how laborious commuting and unaffordable housing have become in this country.

Prior to the industrial revolution, most people worked in the same place that they lived. Farmers farmed the land adjacent to their house, shop owners lived above their shops, etc. Working in an office is not natural; working in or adjacent to one's home has been the norm throughout human history.
In general, yes? It's an interesting question to what degree neural networks and the brain are similar and to what degree they're dissimilar. A fair bit of other work by Nancy Kanwisher using similar techniques has focused on localizing all sorts of sensory and other systems.

But it's been an area with slow progress. Some of the debates about how e.g. face detection works are debates that were going on when I took brain science in the late 70s. That's one reason why so much of the AI community has basically punted to just machine learning.
Crate training is a good thing (imo) but should be done properly. Not just sticking them in a crate overnight in another room and ignoring them.

Our dog is crate trained, which makes travelling with him way easier for example. (He is 1 year old now, so at night he just walks into his crate whenever he feels tired. We don’t have to put him in his crate anymore).

You have to make sure they associate positive experiences with it.
> I'd bet that most people, in fact, would sit on the couch and do nothing if given the chance.

The data on UBI experiments [1] suggest that you may well lose the bet.

[1] https://en.wikipedia.org/wiki/Universal_basic_income_pilots
It's not precisely what you're asking for, but according to my wife this introduction to Biblical Hebrew is great: https://www.youtube.com/channel/UCkKmeTinUEU27syZPKrzWQQ
Pelé, Brazil World Cup winner and football legend, dies aged 82
Well, how experienced are you in Albanian law to come to the conclusion that it's a "clear case"?
Is writing a headline as if it were promotional marketing copy just a reflex? I don't think that The Verge is owned by Microsoft (I could be wrong), but otherwise I don't get the tone.

edit: maybe that tone is necessary to convince people that this is a story at all.
> SQL only.

I assume you mean readonly SQL then... (perhaps creating views too)
This is getting close to a feature I've enjoyed in KDB for some time. The open port in KDB is overloaded to handle different protocols, like HTTP.
As somebody who did all three, the difference to me is huge.
I can do programming half awake no problem but math and physics require way more sustained concentration.
Part of it is that with math, your compiler and debugger is your brain and it is faulty.
With programming you offload a huge part of the mental strain to the computer.

When I'm programming, I often start tackling a complicated function (I do ML and numerics) without knowing the logic 100%. I just let my instinct guide me and I stumble little by little onto the solution with the help of the compiler. You can do the same process with math, but the mental strain required is orders of magnitudes more because you need to actually do the math yourself.
Pretty sure that limit doesn't exist anymore.
> People who are renting, and not tied down by things like having kids in school

What? Why do you think that? Plenty of people with children in school live in rented apartments, condos, townhomes, and even houses.
In what way was it a tough implementation cycle? e.g. resistant to change, or outsourced (e.g. could not get close enough to the fire/ talk to the right people) or was it something else?

Would love to pick your brain because I can relate to what youre saying.
>Why not just accept SQL?

Sanitize your inputs. I'll let little bobby tables link to the XKCD
You are wrong. The Romans didn’t erase anything because nothing was written down.
I don't think React classifies as "cool" anymore, it's been in the game for many years and has become sort of de-facto for frontend development. Everyone does React because everyone else is already doing React; both from a developer who's trying to keep up to be more employable, and from a company who's deciding on a tech stack that's gonna facilitate hiring.
AI Enters the Newsroom
You are trying to casually deny GNU GPL. On HN. WTF?
Data Is a Public Good
I think it’s sufficient to do as they have done and use one motor to turn another motor, and for the third one, put the motor on bearings.