skysight-inc/HackerNews huggingface dataset:
I honestly can't tell if this is sarcasm or not.

In case it isn't, I'm not a cryptography engineer but those who are generally recommend against using secp256k1 in greenfield deployments, and it doesn't seem (to me at least) to be commonly used in existing software either (with one glaring exception of course).
> There is a number, in the upper-20-percent range, that can be relied on to support a certain political viewpoint regardless of the question asked.

See Lizardman's constant https://slatestarcodex.com/2013/04/12/noisy-poll-results-and...

"Four percent of Americans believe lizardmen are running the Earth".

4% or a bit more will give obviously insane answers - if they actually believe that or not is moot.

a double digit percent will support "my party right or wrong"

You'd have to subtract both the mad and the dogmatic to get a real answer.

Anyway, check the submission history of the account that posted this: https://news.ycombinator.com/submitted?id=sfusato
It's moot if it falls in the "dogmatic" or "insane" category, but it's certainly one of them.
Gestures at the Internet
> AI generated content will be immune to that because it’s amazing at matching the pattern of high value content. Life for curators is about to get a lot worse.

I think you'll see that pattern change more quickly.

Nothing makes perception of something go from "high quality" to "low quality" like mass production and cheap ubiquity.
January temperature records smashed across Europe [video]
I have 14 windows open, currently. That's not hugely unreasonable to display in a window switcher … not to mention that every other OS manages it? I've had more, but I mean, how many more are we even talking?

(And if you have a huge number more open, well, how does exposé function?)

And the window switcher on other OSes usually orders the choices by Z-order, which is essentially in recently-used order. The window you want is often only one or two hits away.

(And, if not, the one in MATE in Linux is also navigable by arrow keys or by mouse, so nothing's too far away.)
Not the person you responded to originally. When you bring up Trump and Biden and globalization I see a pretty big difference. On one hand Trump basically never stopped running his mouth about it. He would take action then tell everyone he is taking action to bring x jobs back home. Meanwhile Biden does not do that. To me it seems if you are supported by the right, beating the "end globalization" drum is beneficial. Yet if you are supported by the left, I do not see the same benefit. In fact I would argue the left as a whole supports globalization so it may actually hurt Biden to talk about steps he is taking to end it.

Also you are saying its proven it is not politically correct because its talked about and Biden has taken action for onshore more industries yet that does not even jive with the definition of politically incorrect. I think you are just responded to the original poster saying its not being discussed because its politically incorrect but that statement in itself does not make sense either. Something is politically incorrect when someone does not avoid language or actions that may offend another group. Something can be politically incorrect and still be discussed to death.

Where I got the definition: https://www.merriam-webster.com/dictionary/politically%20inc...

As for the last part about the anti-globalization crowd has yet to make a case convincingly, the same can be said on the flip said. For example the pro globalization crowd has not made a convincingly case for why we need to use slave/child labor overseas to make Nikes and electronics. If we produced these in the US, slave/child labor is generally illegal and this would not be a problem. Another example would be the fact the pro globalization crowd has not shown a convincing case for why would should be supporting other countries that commit massive humans rights abuses. Why should we send money overseas to a country that has reeducation camps they force citizens into?
or Flux by David Baxter, maybe :)
The workforce that should be technically literate that would have been hired in the 90's, suffered that whole decade and couldn't get hired because the bubble popped and the companies kept on current workers and didn't hire. So now they have a lot of really old tech illiterate workers and younger ones that have to do the technical work (basic computer work for the old workers) and suffer long hours due to inefficiencies. They need to off load any older worker who can't keep up and that is also keeping the younger generations locked down to working 12 hours a day and modernize.
> In my experience, you don't send data anywhere you don't have a BAA. Period, full stop.

This really depends on what you consider health data, which itself varies based on how big the marketing team is and the company's desire to obtain "growth & engagement". The below is from an EU perspective, but I'm sure the same would apply in the US.

I have been involved in a EU-based HealthTech that had the Facebook SDK (and maybe others too) in the app that fingerprinted the device and pinged Facebook on each run, without user consent nor adequate disclosure (buried in the privacy policy doesn't apply, nor was the privacy policy granular enough about the fingerprinting because Facebook itself doesn't publish any details on it).

Were they sending health data? No. But I'd argue that the simple fact that you use a health app and when you use it (and from where, derived from IP address) itself is a major breach. Of course, regardless of the healthcare context, this was also an obvious GDPR breach, but good luck getting any kind of enforcement against that given that the vast majority of apps are equally contaminated by these spyware SDKs.

I have seen a similar issue on a UK-based patient portal (the system here is so that third-parties are used to allow patients to access their government-maintained health record and schedule appointments) - full of trackers which had complete access to the page and Javascript context.
They aren't saying they unfortunately _have_ fuck-you money, they're saying they unfortunately relate to wanting to have a small social circle and not have to "deal with it" anymore
When Adderall is used as prescribed long term - appetite suppression is greatly reduced. Where I work I have an N=2 sample that are != skinny by any stretch.
It sounds like selecting Tailwind helped to make clear the specific skills you were looking to hire for and at what level you'd be working together. Good to know. Thanks for sharing.
I'll happily work in that factory programming and repairing robots that assemble iPhones, which is what we should be working towards.
WordPress's problems have nothing at all to do with PHP. WP is currently lagging PHP best practices by about a decade. You could in theory swap all the PHP out for, I dunno, Ruby, and if the WP architecture didn't change then it would still have all the same problems.
I agree that it appears they should, but again recall this happened in Arizona. I personally have spoken with their board. They personally have expressed to me that it isn't even against the regulatory bounds of the license of medical professionals to act without consent. They refuse to even _investigate_ acts that happen under detainment without consent by a patient who was fully alert and oriented without any emergent condition. That is, there is zero effect to the license of anyone doing it as the board refuses to act on it in the state this article is in. The claims simply die in triage -- and this isn't some theoretical but my concrete experience.

>The state medical board is the wrong forum for that complaint.

The complaints I made to medical board was about medical staff at a private hospital acting without consent. I was even sent the bill this wasn't a prison or other state hospital. Why would the board be an inappropriate forum? I understand the board doesn't control actual police officers but they were not the direct subject of the complaint.

>he legal issue isn’t medical

And this is the problem I keep confronting to try and solve this situation. If you argue it was medically improper, suddenly it was a "criminal search and you need to hold accountable the process for the criminal search." If you argue it was an improper search, suddenly it was "medical care and you need to determine if the medical care was improper." This allows both the LEO and medical personnel to weasel out of it by flipping things to the other side, which is part of the reason why it is probably done this way as a slippery "be medical when you argue against the criminal aspect and be criminal search when you argue against the medical aspect." I know the game being played with that card because it gets played a lot.
> when you sign up for a proprietary "intelligence management" platform like Palantir Gotham, do they give you access to a bunch of OSINT datasets they scrape and manage themselves, to combine with your proprietary intelligence dataset for enhanced understanding?

I don’t know about OSINT, but in the consumer data landscape (Acxiom, Datalogix, etc) this is the standard MO
Where's this listed? I see the $299 number quoted in several places on their website.

[0]: https://www.apple.com/support/products/mac/

[1]: https://support.apple.com/mac/repair (selected other damage - macbook pro - 14in 2021)
Perl is best! :)
Betteridge says no.

https://en.wikipedia.org/wiki/Betteridge%27s_law_of_headline...
I do like the "just-in-time" label as well.

It seems like the article is lamenting the fact that many of these become "not in time" learning in practice.
It's possible to learn to use the function row without looking just like you can learn to use the number row without looking. It just takes getting used to your particular keyboard.

(Not having to "home" on F and J helps.)
Exactly what I came in to say: why reach for a function key when you have ~26 good letters and a bunch of modifiers right under your fingers?
How much would consumers pay to use ChatGPT? If anything
Location: Virginia, US

Remote: Yes

Willing to relocate: Yes, to anywhere in the US

Technologies: I have professional experience in Java and Ruby (on Rails), I'd love to work with Rust or Elixir.

Résumé/CV: Please connect with me on LinkedIn at https://www.linkedin.com/in/shrikup/ or shoot me an email!

Email: {My hn username}@vt.edu

Hey! I'm a CS Master's Student at Virginia Tech, before which I worked as a mostly-Backend Developer for three years in India. I'm looking for internships for Summer 2023, and I'll be available from the third week of May. I'd love to work in a high velocity team: in my first role, I shipped working code to production in my first week at work, and there's nothing I like more than delivering quality code asap. If that sounds like someone you'd like to hire, please reach out!
It's interesting how we justify everything shitty in the US as being part of capitalism without ever examining why we think that's a reasonable justification. I feel like it's a result of tons of red-scare propaganda that still exists in droves to this day.
Agreed, it told me precisely nothing.
Oh, I agree. For what it's worth, nobody got "cut" -- those devs are now buried in a different pile of work.

Really so much problematic SaaS (or PaaS) stuff all boils down to crude hacks to work around labor shortages.
I've banned this account because of the Hitlerian (really?!*) URL in the profile. You can't propagate that stuff on HN. We'd ban an account for doing that in comments, and a profile is no different.

It's a pity, because you've also posted good comments and I think the proportion of good comments has been getting better over time, which is great, but that doesn't make things like the above ok.
Also, you have a history of using this site for ideological battle and we don't want that here—it's not what this site is for, and destroys what it is for.

If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future. They're here: https://news.ycombinator.com/newsguidelines.html.

* Edit: on closer look, I can't tell if it might have been a bad joke instead.
Next.js routing limits have been for me the number one reason not to use it unfortunately.
On one engagement, for example, the firm and project I was working with/on was doing high stakes IP work for a FAANG. Every attorney I've worked with graduated from a top 15 law school (majority being top 10). If that's not top-tier then I'll concede I don't know what is.

We started talking about the quality and pricing of a ChatGPT bot and ended up here... Point is, given the pricing of Detangle ($10/page) you could hire an attorney down the street with any amount of experience in contract law to review an agreement with better results at equivalent (or cheaper) pricing. At the current state of ChatGPT a paralegal or some random cousin in law school would be better.
It also helps that Filippo is very diligent and observant. He is one of the most frequent people to send in corrections or extra background information to my Go newsletter :-)
There's literally a button for this in Photoshop, and I'm sure every other tool for photos / scanning.
I removed that from that comment several minutes before your reply to just focus in on the terminology issue. I had already made the point about Ed448 being stronger than Ed25519 in the previous comment and the implications that has, so it seemed redundant to repeat here.

Regardless, whether it is "far less likely" or not, it appears to be a very real possibility that is being ignored in favor of what, exactly? An extremely marginal performance gain?

> I suspect that many cryptographers believe it's far less likely than an API handling multiple curves creates opportunities for vulnerabilities that otherwise wouldn't exist. Particularly when one of those code paths is used extremely infrequently.

Honestly, that's just as much an argument in favor of entirely deprecating support for Ed25519, in my view, but that would be an unpopular opinion. In reality, the ECDSA curves support multiple security levels. Has that additional curve support ever been the direct cause of a vulnerability?
Taking data without consent is a real issue. There is still lots of data out there that is free of copyright. I'd be curious to see a model that is trained solely on public domain data (perhaps with an option to include creative commons-compliant data). I think there is plenty of knowledge that is in the free and clear to make a very useful LL and/or stable diffusion model. We may miss out on Wegovy and air fryer reviews, articles on the how to beat the stock market with Numpy, and manga art styles yet there is plenty of a few decades ago that would make for a useful "AI." Even Steamboat Willie may soon be in play.
Is there evidence saying programmers generally prefer brutalist and utilitarian designs as consumers of design?
A heatpump probably won't scavenge energy from the exhausted air, but a HRV could
> We need more examples highlighted of entrepreneurs leading the slow-burn (in a good way) types of ventures.

There will be a lot more example of this in the coming years because the costs of keeping a pre-PMF webapp online have basically fallen to zero. Whereas when Zuckerberg started Facebook, if it didn't take off right away then you had no choice but to shut it down.

When you hear VCs and other folks cast doubt on the ability of anything that doesn't immediately capture lightning in a bottle to succeed in the long term, they are incorrectly pattern matching to a trend from the past that just happened to be an artifact of the economics of that time period.
I'm curious about how you juggled entrepreneurship and active deployment. Were there any interesting challenges, or did you ever meet someone doing similar things? Did you feel the need to hide what you were doing from your CO?
It was the same thing with WW1. WW2 wasn't some sort of special case or aberration.
Google alleges Competition Commission of India 'copied' EU order
>No two countries with McDonald’s went to war, and then Ukraine was invaded.

I'm pretty sure the McDonald's theory of war went out the window with the NATO bombing of Yugoslavia.
It keeps a permanent list of your votes, comments, and submissions. It maintains your social credit score ("karma"). HN is absolutely tracking the hell out of you.
Time Machine and an external SSD (they're really cheap now!). With the soldered storage you definitely don't want to have your only copy of important data on the device itself.
What we need is 1-5% of these 10/20/30%+ layoffs go on to start new businesses.

We've had a solid decade+ of FAANG dominance now and arguably all of these companies are comfortably milking existing cash cows with minimal innovation and increasingly degraded product experiences.

I'm trying to think of one large tech company that has a better core product today than 10 years ago. Maybe Shopify / MS? Someone help me out.
I use Roku but opt for an external box that can be replaced or upgraded, as opposed to a built in TV. I had one TV with built-in Roku and it was fine for a few months until it slowed to an absolute crawl. Nothing could fix it. Ended up plugging a Roku box in and having the TV default to its input, bypassing the built-in shitshow.
The invention in case was predatory surveillance capitalism.

I'm quite happy our elected officials are putting an end to the abuse.
> "just give me the damn data and let me format it"

That perfectly sums up the feeling
It's the new "The Great Illusion", this idea has been repeatedly recycled and debunked for more than a century.

https://en.wikipedia.org/wiki/The_Great_Illusion
In the US as a whole, sure. But the housing affordability issues aren't across the whole US: it's in specific metros. Houses in Nebraska don't solve the affordability crisis in San Francisco.

Furthermore, people aren't exactly keen on letting homeless people live in their property for free. Hotels in my city experimented with this: they got small checks for housing homeless people during COVID, when lockdown massacred the hospitality market. It was a complete disaster: the rooms were trashed and they lost more money than they received from the government.
The idea is to show banned users what they want to see, in the form of LM-generated responses to their posts, relegating them to a "pocket dimension" of sorts where all other users are fake bots. I can see a softer form of this being implemented, where a user's posts are still visible to all, but in a form rewritten by the LM. And, likewise, the user sees their original posts as well as LM-rewritten posts of other real users. This softer form wouldn't just be applied to banned users -- everybody is in their own bubble. It won't be used to improve the quality of the content on the platform; it will be used to drive addiction (ahem, engagement). So, naturally, I see this being implemented by Facebook.
> Classic tale of VC-backed “startups” going the Uber/Airbnb route and deciding the established rules aren’t worth following.

As long as penalties are lower than the profits (and no execs go to jail), the rules aren't actually worth following.

Maybe the real innovation of the tech sector in the last decade is figuring out that established laws aren't actually enforced anywhere well enough so you may as well break them.
It would actually be interesting to see the numbers: how many registered HN users have showdead=yes?

FWIW I not only browse with that on, but also vouch for comments that I feel were killed unfairly. I've seen dead comments revived (and then upvoted) more than once.
The pay will be worse and the iPhone a lot more expensive.
> If the option existed and were exactly as easy to use, then why wouldn't people pick it for projects were the curve is open for selection?

It’s a good question with a nuanced answer. First, performance. The amount of data encrypted has no effect on key exchanges like X25519 and X448. They happen once per connection/exchange/encryption/decryption and have a fixed cost. In synchronous settings like TLS that time shows up directly as first byte latency. Second, a hard to quantify ecosystem risk: what are the chances you get broken by one of the few attacks that get X25519 but not X448, versus the chances you get broken by an implementation bug in the lesser used X448 implementation?

Cryptography engineering doesn’t happen in a vacuum. When selecting primitives you have to weigh the risks you are mitigating against the cost in engineering and hardware resources, and compare them against other risks you could be mitigating with those resources. It’s very unlikely the risk gap between X25519 and X448 is where anyone should invest next.
OK, now that I have access to the paper, it does very briefly acknowledge RE2:

> while caching is used to accelerate backtracking in Perl and a rare path in RE2.

Although I wouldn't call it rare. It's probably used every time one wants capturing groups and the regex isn't one pass (pretty common) and the input isn't too big (like, say, a line in a log file).

The actual part of the paper that contains the key contribution (memoization but with less space) is fairly dense and I don't have the time right now to look more closely. But it looks like it might be applicable to RE2, Go's regexp package and Rust's regex crate. All three already use already use bounded backtracking (i.e., "full caching"), but if the space usage could be cut back, then it would increase the opportunity of using the bounded backtracker. Namely, all three put a bound on `size(regex) * size(haystack)`. If the search needs something bigger than that bound, then the backtracker isn't used. But if memory usage were instead much less than `size(regex) * size(haystack)`, then the backtracker could be used more often. (Which is a good thing since it's generally faster than a full Thompson NFA simulation.)
They released a zero day for a security hole in the human brain. That's what ChatGPT is. The security hole is well known and described perhaps the most understandable format is the book Thinking Fast And Slow which describes, ah, if I try to explain I will surely botch but perhaps put it this way: how things that appear more credible will be deemed credible because of the "fast" processes in our brains.

In this particular case, ChatGPT will write something nonsensical which people will accept more easily because of the way it is written. This is inevitable and extremely dangerous.
> globalization's demise is a blessing not a curse

You'll pay more for less and you'll be happy, right? You'll be poorer just as everyone around you, but at least you'll show those capitalists!
fun follow up fact: if it is the card, I can guarantee he has an alternate ending so it will never ruin it - it will only change it. Tamariz is a master of the "outs" (as magicians call them).
I don’t know if it’s a sudden distrust of globalization causing it, but I’ve noticed a huge upswing in the percent of customer support people with American accents over the last few years.
My sense of scale is a bit thrown. I think at the time with all the uncertainty and the inability to trust corporate leadership, I trusted the largest number I heard as internal scuttlebutt, which was 10%. The actual number was somewhere around 1,000 to 1,500 people, which was like 5% or something of the company.

...but was still 1,000 to 1,500 people.
Edward Norton discovers real-life Pocahontas is his 12th great-grandmother
Logan Paul lawsuit against Coffeezilla
And yet, in the production Python codebases I've worked with, list comprehensions are rarely seen. Usually it's typical loop iterations. I wonder why that is?...
To be fair, I think the signal to noise ratio of your local branch library is a lot higher than what you’d find digitally these days