skysight-inc/HackerNews huggingface dataset:
“ The creator economy, once hailed as the solution to economic inequality and the savior of the middle class, is facing challenges that threaten its very existence.”

Not to nitpick, but did anyone really believe that becoming a tik tok influencer was a reasonable career path for more than a couple hundred people? I don’t see how most middle class people would’ve been helped by the creator economy
AFAIK those scripts are more to prove that the client has a functioning javascript environment rather than proving that they can compute 5s of computation or whatever.
I really don't like the touchscreens, they are very hard to operate in motion.
Vim is from an era when software was written to do exactly what you commanded it, not what you intended. It was your responsibility as a user to learn how to turn your intentions into commands.
There are a lot of tools available which allow to generate/automate mouse and keyboard events within Wayland. Here's an example (I use another ydotool and another one, on another machine; don't even remember what it is called) [1]. It describes how they require a udev rule and use /dev/uinput

Examples I use: 3 finger swipe to left/right switches desktop in Sway, rebinding caps to esc.

[1] https://crates.io/crates/tfc
Beware Offers of “Help” with Your Projects
In 2006 this was, via Wikipedia[1], "[t]he first commercial use of a warrant canary," although it was proposed in 2002 on usenet.[2]

1: https://en.wikipedia.org/wiki/Warrant_canary#Usage

2: https://web.archive.org/web/20131103121048/http:/groups.yaho...
https://vandam.tech

Put this together very recently. Generated with Zola and hosted on GitHub Pages. Quite happy with the little music feed!
I've never wished ill on HN, but I'm glad they failed at this approach. People can get hurt, physically, financially, beyond repair by groups that take the software mentality into physical products.

Skilled laborers cost money not for what they're doing for you, but for the years and sweat they put into knowing safety practices, codes, and proper workmanship.
I disagree with both.

Code and business value are worthless. Boss approval is literally everything.

It really doesn’t matter if your ideas make a ton of business sense if they are in conflict with your direct manager or any part in the chain of hierarchy. As long as they don’t like what you’re saying - you’re literally worse than worthless. Often this is because your idea isn’t their idea - therefore damage to ego. Damage to ego means get that guy out of here and make sure I don’t hear more from them.

People need to understand that you’re hired for a job. You’re a glorified and well compensated code monkey. Even at $1m/yr - still a god damn code monkey. You jump when they say jump.

I’ve yet to meet any hierarchy chains that are truly open minded to a low level IC saying anything that counters them. I’ve worked at quite a few places too and talked to a lot of folks about this.

You’ll thank me in ten years because you’ll become a bootlicker and actually make progress in your career rather than being stuck in senior/staff until you burnout from the industry.
Where does it say that internship is unpaid?
I would argue that stopping to publish these statements is equivalent to announcing that some warrant has been served. So if the latter is a criminal offense, why should the former be legal?
Why not use an ESP32-CAM board?
While not a pro, the fat old climber is far from the typical body type.
https://explorersweb.com/fat-old-climber-gordon-robb/

Strong people that start climbing tend to use their upper body strength to get up the wall, fat people don't have that option and naturally fall into using technique and their leg strength to get up the wall.
What is the recommended way of deriving a private key from a password and/or passphrase?

Any pointers to relevant literature will also help.
> "JUST USE RAILS FOR NOW."

That could also be reduced down to "JUST USE RAILS".

Why not get the best of both worlds where you finish projects AND be happy about it? The "for now" makes you think it's a bad decision and you hacked something together to get it done.

But you can finish, stick with Rails and be insanely successful based on what's important to you (start, finish, maintain, profit, IPO, etc.).
> Microsoft <heart> Open Source
Can the algorithms be changed to prevent Pareto outcomes from occurring?

Most content is arbitrary anyway so no real cultural value discovery is occurring with these algorithms IMO, just chance and feedback loops.
Could be they are targeting average computer user, not average Linux user.

May be it's right strategy for their goals.
Go Grizzlies!
The Craft Behind Crafting Interpreters
I'm skeptical. Cranelift was designed to do something similar - avoid LLVM and be fast enough for JIT.

It's easy to claim to be fast when you're extremely early on, we'll see how that holds up.
If a government agency issues a secret warrant, doesn’t that imply rsync.net has to provide a valid canary at the right time as well?
I don’t get how this is useful.
J.D. Irving | Security Analyst (All Levels) | Full-time | Atlantic Canada Hybrid

J.D. Irving, Limited (JDI) is a diverse family owned company with operations in Canada and the United States. Since 1882 our focus has been on providing quality products and superior service to customers around the world. Our head offices are in Saint John and Moncton, New Brunswick, Canada. J.D. Irving, Limited is made up of a diverse group of companies in various business segments:

Forestry & Forest Products
Transportation
Shipbuilding & Industrial Marine
Retail & Distribution
Industrial Equipment, Construction Services & Building Materials
Specialty Printing
Consumer Packaged Goods
Food Processing

We have many openings in IT (https://careers.jdirving.com/jd-irving-careers-current-openi...) but I specifically wanted to highlight the job postings in the Security Operations team (different experience levels, including entry level):

https://careers.jdirving.com/jd-irving-careers-current-openi...

https://careers.jdirving.com/jobs/security-analyst-hybrid-wo...

https://careers.jdirving.com/jobs/senior-security-analyst-hy...
Its very easy to add a feature with Karabiner Elements as it can download scripts from a repo. Hammerspoon too, has a lot of snippets and scripts available (I haven't used BetterTouchTool as I avoided touchbar Macs). That's one of the strong points with AHK. I look up a syntax or example code and boom (and I am a lousy programmer so if it works for me, that says something).

But I got AHK running in Wine on Linux, and on another Linux machine with Wayland I got simple rebinds and simple scripts working with keyboard and mouse (which I could extend with say Python scripts from AutoKey?). Its more difficult on Linux, but its possible.
The connecting thread through veganism, climate change, and enterprise software is that you can accrue significant personal benefits by causing suffering elsewhere, and you will never have to face consequences for that suffering. In fact, anyone who even shows you that suffering is a hippie bastard
Interesting thing about the position coordinates, is that the position really needs an "epoch" metadata attribute, like "2000" or "2050", because they are relative to the equinox which moves over the years. So maybe the fact that this kind of thing can rear its head unexpectedly might be an argument for favoring separate elements to group fields? If that new attribute were thrown in with the other attributes of "star" it looks like it qualifies the star, but it only really qualifies the coordinates.
The driver only needs to pay attention to the road when the software can't safely handle the situation. Software can already keep the car in the lane and at a distance to the car in front. Over time the situations it can handle will become more and more.
May I have a suggestion?

I noticed that people encontering the language for the first time are surpised that they don't see examples of doing ESP32 specific things up front.

I know all of that is covered in the docs but maybe you could additionally a create single page meant to illustrate ESP32 specific functionalities provided by the standard library (similar to that: http://docs.micropython.org/en/latest/esp32/quickref.html ) and make it easily accessible from the front page?

Plus maybe how to read anything from terminal that print outputs to.
Daniel Barenboim Leaves Berlin Staatsoper Job After 30 Years
Build and design for multi tenancy all the way down to your schema.

Keep identity and login mechanism decoupled - plan to support multiple login mechanisms per user (email/password, SAML, OpenID Connect, Google) for a single identity and multiple authentication factors (TOTP, Duo, etc). Be very careful to about what you consider a verified user and how you verify email addresses.

Use TLS even for your database connections. Use encryption at rest. Automate backups and plan to restore or export data for specific customers rather than the whole application.

Use a time series database or event logging system and create an audit trail of everything any privileged user does in your system, any account or permissions changes, destructive operations, etc.
Is it me or does this article seem “off”. The verbatim repetition of the thesis multiple times makes me think this wasn’t written by a person.
I then got banned from their Telegram group for mentioning that I managed to make multi-map support work on my fork... [EDIT: Actually not, that was a misunderstanding on my part.]

That said, the dustcloud OS that Valetudo is built upon is pretty amazing and for a Dreame W10 - the robot that I have - you only need a 3.3V USB to UART adapter to gain root, install dustcloud OS and thereby get an ssh server running on the robot.

The necessary pins were accessible without any disassembly at all.

Once you have dustcloud OS, it'll redirect any China cloud DNS to localhost. You can then ssh into the robot to install Valetudo or an alternative.

Here's my log of the rooting experience: https://news.ycombinator.com/item?id=34137078
A full virtual server is pretty far down on the list of options I'd consider if I wanted to host-and-forget a little static website for more than a decade. Just to name a few concerns with this approach:

A small VM needs to be periodically updated, both due to changing web standards (e.g. an old TLS version becoming deprecated) and to prevent it from becoming compromised; at some point, an OS upgrade will become necessary; the service provider might deprecate an old VM format and require a migration to something else entirely.

If the author already does all of that, sure, there won't be any or only very little incremental effort. But weren't we talking about the specific risk of the author losing interest (not financial, but in maintenance) in a small pet project?

Now just contrast all of that with uploading one or a handful of HTTP files to a new server and a bit of configuration at the hoster or your domain/DNS provider.

Static web hosters are also plenty and much more economical (in terms of money and server resources) than running your own web server, and for the reasons above, I wouldn't really consider them "less autonomous".
Most content is arbitrary?
Why would you ask it to write if you don't want it to write?
I've personally found that AthleanX has, IMO, good and informative videos but a few ones that sounded to me of looking for the controversy for the sake of views, being the one I remember the most about the "muscle-up being a showing off party trick" which is, based on my years of experience in free running, body building, gymnastics, martial arts and climbing, utterly ridiculous.
Why not raise the price to whatever the scalpers charge or sell them on an auction instead of selling them so far below market value? If you for some reason don't want to make more money, you can donate the difference to charity. You could also do things like giveaways to previous customers or make them prizes in competitions, etc.
What do you mean with running App Engine locally? There used to be a local development server, but that did not survive the 2to3 transition. GCP does ship a Datastore and a PubSub emulator, but no Cloud Storage for example (someone wrote this one [1], which sort-of works but it does not behave 1:1 like GCS, so ironically my tests have to work around bugs in the emulator...).

[1] https://github.com/oittaa/gcp-storage-emulator
Isn't that an argument to let computers handle the driving rather than humans?

Computers are extremely good at calculating physics. And they never get distracted.
You need to resize your napkins.
Company hackathons are rarely 24hr affairs and more "don't do your normal work during working hours"
Perhaps we should start making tutorials that follow that idea from PHP: start with HTML, add an extension (e.g. .eex, .erb) and make it dynamic. This would lower the barrier for beginners.

By the way, the best HTML tutorial I found so far is Scrimba. The idea of having interactive videos where you can pause and edit the code is amazing.
I would also try benchmarking the new io_uring_spawn interface, which is said to be significantly faster than the traditional fork+exec way of spawning processes.

https://lwn.net/Articles/908268/
Show HN: I made a local transcription app for your Mac
Hello all,
I made a small transcription app for your Mac based on OpenAI’s Whisper. Would love some feedback. My plan is to make it easy to load weights from any fine-tuned whisper model to enable specialized dictation for any subfield. It’s still early in development. Thanks!
I could do almost anything with the buttons in my car without looking away from the road. That's never going to be possible with a touchscreen.
Let’s look at social engineering and how social engineering attacks are used to manipulate individuals.
So the law, presumably, says 'you can't tell people you've received a warrant' (or a national security letters?)?

Surely this convoluted scheme is still telling people you've received a warrant??

Has there been caselaw on this?
Not in managed kubernetes / container service cloud thing.

And on docker desktop on mac/win it’s at least some hassle to get into that hidden VM (but let me know if I’m wrong)

On linux-no-vm-bs it’s fine, sure!
Cases of asthma in US kids caused by gas stove pollution worse than car traffic
I half agree with this article. There does seem to be a typical power law in terms of who is able to make a bunch of $ and make this a viable career.

That being said, 'winning' doesn't necessarily mean having this be your entire job or revenue source. I think we're progressively going to see more 'portfolio careers' or people holding multiple small jobs. I've seen many folks have small ish followings (say few thousand subs on YouTube), but that's enough for them to generate good leadflow for a consulting business that sustains their family. Put another way, being a creator can just be the marketing or top of funnel for other activities.

If we view it solely as a full-time job, then it probably will be a privileged few <1% that 'win'. But if it's part of a larger portfolio of work, then the creator economy opens up a lot of new possibilities for people.
Find a cofounder or two who enjoy the sales and outreach aspects of things.

Since you identify as a full stack developer first, that probably means you’re not looking for hours and hours of time spent in Excel or QuickBooks or SAP, doing sales forecasting, etc. But those are important for big sales efforts. Instead, find people who like that, and are talented at it with a consistent track record.

I recommend this partially because I followed that approach, and we’ve had our company going for over a decade.
Awareness in my view is useless because touchscreens in auto infotainment are far more visually impressive so they will always be preferred from a buyer's perspective.

What we need is to build a body of scientific evidence to support regulating Auto infotainment within some form of safety-critical guard rails.

It is obvious that touch without mechanical/haptic feedback is dangerous both in terms of decreasing eyes-on-the-road and increasing cognitive load. Mazda had it right first time around the industry needs to catch up.
My advice would be to get waaaaaaaay more specific about what you want to do, then find a business partner who knows the "ins and outs" of the industry and has a few contacts you folks can use to get your foot in the door.

Forget about going after enterprise level customers. Prove yourself to the small and medium sized businesses first.

Before you do any technical work, be able to answer the question: why on Earth should businesses use what you're offering? There's no right answer here, but your answer should be super convincing. I think the most common is that you are able to beat the competition on price (cuz you're going to have such low overhead, I presume), but you'll need more than that.

Hope that helps. As others have said, I believe I'd be more helpful if you were more specific on what you were trying to accomplish.

Best of luck!
Do you have any issues with many virtualenvs/packages taking up a lot of disk space?

For instance, numerical packages (scipy, torch, etc) can add up if they’re duplicated across many projects, and, as I understand it, virtualenv doesn’t do any caching/symlinking.
I think a middle ground has been reached, XSLT 3.0 allows you to transform your XML into JSON and back. The XSLT 3.0 (2017) processor is available to non-Java languages from Saxonica, for Python "pip install saxonpy" (Linux only)

If you want to see how to do these XML-to-JSON and JSON-to-XML transforms I have written a little learning repo with a CLI: https://github.com/aleph2c/leaning_xslt

Here is Michael Kay's white paper on Transforming JSON using XSLT 3.0: https://www.saxonica.com/papers/xmlprague-2016mhk.pdf

Once your data is in a JSON format, you could implement your compact-binary-format idea around it.
Not a lawyer, but IIRC the theory was that generally speaking the bar for compelling you to lie is higher than that for compelling you to stay silent, even when those are equivalent information-theoretically. It’s not clear if the legal exploit of a warrant canary has ever been tested in court.
Yeah, I like the analogy of a march, as a contrast to the sprints typically employed in commercial development. Like my search engine project is 2 years in now, and still not anywhere near "done". Yet it keeps getting better and more capable at a slow but steady pace.
Laws never said anything about what you stop saying, in this context.
Haven't bothered to read it. GPT detector says it is 99% fake. https://openai-openai-detector.hf.space/
Valetudo is an awesome project. But indeed the main developer's refusal to add multi-map support is its biggest disadvantage. (But of course it's a maintainers fair right)

Do you mind sharing your multi-map fork?
> with critics like Marcus on the "symbolic" camp ("we need more understanding!") and engineers and scientists who build AI systems, like Sutton, on the "connectionist" camp ("we need more computation!").

> There are also AI researchers seeking to bridge the two approaches.

I don't know if he does it with his work in practice, but throughout the interview Marcus says he wants to bridge the approaches. I think he references a really old talk or article from himself calling for that too.
> Use of control codes in HTML and XHTML is never appropriate, since these markup languages are for representing text, not data

Is XML meant to represent only text and not data?
The Supreme Court has ruled that compelled speech (forcing someone to say something) is almost always a clear cut violation of the first amendment.

There is no known case of US charging someone over a warrant canary.

There have been plenty of warrant canaries that have ceased to be updated - e.g. Reddit, and more recently, Storj.
Because compelling someone to actively do something is fundamentally different from restricting them from a future action, in the eyes of the law.
Would you mind sharing this script?
I suppose it's possible that you could have a power hungry psycopath whose hunger only relates to institutional power. Somebody for whom limiting their economic power is not effective. So taxing the rich doesn't protect us from them. But I think we're talking about a pretty small group here.

The two people I think of when I hear "fascist takeover" were both embroiled in tax evasion scandal on their way to the top.
To me, containers are simpler than virtual environments.

Just do "docker run --rm -it debian:11" and you are ready to go.
The ‘Stolen’ Election That Poisoned American Politics. It Happened in 1984
Yes? I'd imagine there are tens of thousands of people who are credible social media influencers and content creators.
What's the kings, wizards postscript about?
Can you give an example?

I don't experience any difference, whether I am inside a container or on the host os.
For what its worth, I evaluated pdm, poetry, and pyenv before settling on pip-tools for my workflow. pdm is the only one I would consider trying again (once it is more mature).
If you believe that, you need to take another look what people are actually asking for.

Taking any search for any decency and turning it into "they want to end the world!!" can be done to anything in any part of the political spectrum.
Frankly, you have no chance of making a secure product if you don't have a ton of experience in this area.

For single sign on, SAML for instance, you have to get a ton right with security certificates, xml parsing, manifest rules, signing algorithms, request expiration, etc. SAML (and other single sign-on protocols) are poorly designed and any single mistake is fatal. Some SAML libraries have support for null signing for instance, which allows anybody to sign on as anybody by simply sending a null-signed response. If you don't know about this attack vector you would never think of testing for it. There are many similar SAML pitfalls and you have to think hard about all of them.

For password reset you have to think what kind of tokens you use. How and when they expire. How to protect against length extension attacks (use HMAC).

Anyway, I'm not writing this to discourage you. If you want to go for it, go for it. But enterprise saas software is a serious responsibility and you'll have to work hard at security even though there is no business upside to it.
> Awareness in my view is useless because touchscreens in auto infotainment are far more visually impressive so they will always be preferred from a buyer's perspective.

Except that the HN audience also buys cars, and prefers something else. And we aren't that unique or exceptional.
My lynx is a bit newer (current macOS + MacPorts):

$ lynx --version
Lynx Version 2.8.9rel.1 (08 Jul 2018)
libwww-FM 2.14, SSL-MM 1.4.1, OpenSSL 3.0.7, ncurses 6.4.20221231
Spanish and Italian sound great to me, even though I don't speak them. They sound, well, human. Can't say the same about English or German
You can argue that, but other people argue the other side. To my knowledge it hasn't been firmly tested in a US court yet.

There are supreme court precedents finding that the first amendment prohibits the government from compelling speech, which is the legal theory for why warrant canaries are not equivalent to directly disclosing the NSL's existence: https://en.wikipedia.org/wiki/Warrant_canary
So the last bastion is the steering wheel it seems. Will it be replaced with a pair of arrow buttons on the screen? /s
I don’t think so. I think there’s a pretty significant legal difference between ordering someone not to say something, and ordering them to specifically publicly say something that’s false.

The former has been tested and is (for some reason) within the bounds of the first amendment. While forcing someone to publicly say something false almost certainly is outside the bounds of the first amendment.
Depends. If surgeons somehow ended up working for a company/franchise then that company will hold all the power. Surgeons would have to unionize to get some power back.

I hear that something like this is happening with vets.