skysight-inc/HackerNews huggingface dataset:
Yes, jumping in and out is a freedom of your choice. I do it all the time. Do it ruthlessly when channels stagnate. We have a convention of prefixing channels with wg_ to denote working group channels which are short lived projects of limited duration. They get archived once the objectives are met. By all means leave fruitless channels, wait until someone pings you with an @ or they add you back to a channel. You can also mute channels that are too noisy but require your membership.
Their approach was really new to me. I’m pressed this is a passive device.

Note, I have no relation to this company but do like boats.
I have a pretty mundane / kindergarten problem with it:

If I had a conversation with several people where information shared turned out to be valuable, I have to remember exactly who was there to be able to recall that chat thread. Miss or forget one person and it might not ever appear again in your recollection or history, if you can't specify exactly what you're trying to remember.
Yeah, agreed, using Slack's do-not-disturb to pause any notifications works really well. To be honest, not sure why the article doesn't mention this key (fairly obvious) feature to decrease distractions... Just looked, it was written in 2018, maybe Slack didn't have do not disturb back then??
> Do I really want to be the guy purging all his Slack channels?

Yeah I think you do, if it's an endemic issue then there are probably loads of people in the same boat, who would like to see a first mover to do something about it.
Disclaimer: I am friends with the author of log-store and have been occasionally helping test the software.

I've been using log-store at work for some time. It has an awesome 'admin' UX. The sysadmin/ops overhead associated with getting something useful out of log aggregation and analysis is so much lower than tools like splunk and elasticsearch.

If you're interested in getting some kind of log analysis/aggregation spun up quickly and don't need all the complexity associated with things like ES and splunk, definitely give it a test drive.
We did end up pursuing higher rents than what was "market", unsuccessfully. By setting a lower rent, it meant that a lender or potential buyer would underwrite that income, resulting in significantly lower valuations, making the magnitude of the economics worse. But holding out for higher rents pushes out the business plan and increases the risk of the deal (ie your loan matures and you had no leases in place)

If you can hit the same 10% return on 20% lower revenue... you can attract more capital and execute with a better measure of risk. My point was that the I of ROI increased substantially and we needed to try to hit the rate R of ROI.
I wonder how GPT would do with a high but clearly achievable goal — “as much context as is stored in a Dwarf Fortress Character.”
Closest thing I know of is this

https://elitacwearables.com/projects/mission-navigation-belt...
Discussed at the time:

Slack is the opposite of organizational memory - https://news.ycombinator.com/item?id=16355454 - Feb 2018 (250 comments)
>All slack conversations should be considered ephemeral from a documentation and records keeping perspective.

Unfortunately, from a SOX, HIPAA, or sunshine/FOIA perspective it's not. As you say, you're always on the record, even if you don't know what the record is.
> There was a dark age of plentiful zero-days

Antivirus is not an effective way to protect against Zero-day exploits. Antivirus is effective against known threats, but zero-days are new threats that antivirus programs are not designed to detect.
This piece is a puff piece written from the Anglosphere to drive panic and ensure that their broad narratives like the general anti-china narrative succeed in driving wedges on broad issues relating to French and paneuropean national security
A "flowchart" is an ANSI/ISO standard which looks really different than this. [0] Why call it a flowchart when it's not a flowchart? It's really confusing and not helping your marketing.

[0] https://en.wikipedia.org/wiki/Flowchart
Except now nobody will learn it cuz they’ll use ai servers and settle for their output. Hopefully they at least edit the stuff.
Never had linux antivirus do anything other than flag Windows viruses
Why? Can you give examples?

Honest question, not arguing. I live in California, and don't have much contact with the zeitgeist of the Balkans/Europe in general.
Electronics are actually cheaper in Switzerland than in most countries, thanks to low VAT.
Yeah, ORMs are ten thousand edge cases, it really lays to use a battle hardened one that has been lovingly maintained and improved constantly for over a decade.

Hats off to Mike, most projects that are this age are decrepit and you have kept it fresh.
Huh? You mean you install windows defender on linux, or you perform scans with defender from windows on the linux partitions?

Was this irony, or has the world become even weirder?
Google takes another step towards launching its Find My Device network
I just don't think it's effective. In fact, it can increase your attack surface [0,1].

[0] https://www.bleepingcomputer.com/news/security/antivirus-and...

[1] https://rack911labs.ca/research/exploiting-almost-every-anti...
Has it caught anything?
I have a gmail that gets hundreds of spam messages daily. It filters out a lot but just as many get through. It is impossible to deal with them all so if I ever need a message I have to rely on it being recent enough
The Value of Colon Cancer Screening
Is every "advanced" language doomed to fail?

(where "advanced" means: a paradigm that results in greater economy of code per unit of work done, easier debugging, easier testing, complete elimination of entire classes of bug (such as in an immutable language), easier maintenance etc...)
It's been a few years since I ran Windows, but I remember some annoying behavior.

- Every time you open a network drive in Windows Explorer, it will (sometimes?) partially download the contents to scan for viruses. It was noticeable on wifi.

- If you run grep in a large repo (in the multi-GB range), it will scan each file before letting grep access it. Ripgrep is multithreaded, but that didn't matter since Defender seemed to be single-threaded. I could see it pegging just one core as it made sure none of those text files had a virus.

I ran Process Hacker, which had a tray icon you could quickly hover to see what's using CPU. I noticed Defender slowing things down often enough that it had to go.
The point of some complaints from Amazon is that the stuff isn't legit, so you telling me I can get the same not-legit stuff on Walmart.com is not surprising nor encouraging me to try it. Unless your "most" is doing some heavy lifting and implying the elimination of the bad products? Are you honestly suggesting that the Walmart.com marketplace is better than Amazon's? I'm honestly asking, as I never shop at walmart (physical or online), so I just have no experience. I only assume the worst regarding walmart
You'll be able to do this on very low volt amps UPS'es with no problem as long as the included interfaces and software work on Apple MacOS Ventura. I'd bet you'd get 5 minutes or more on like an APC 350VA UPS. A lot of those would let you put the monitor on the surge protector side and not even draw from the battery so it would just be the Apple Mac Mini M2 and the (2) external disks (not sure if these are powered from USB-C or DC to AC adapter).
Feathers have in fact "survived" fossilization, notably those attached to several whole-body archaeopteryx fossils (scare quotes around "survive" because the original material is gone, it is only the shape which survives)
i want to buy the jacket to see what i get
Adding c:/ in the whitelist is your best bet. I strongly advise against it unless you’re doing malware research though.
fyi now

ruby 3.2.0 +YJIT
Oof, there were a lot of secondaries done at some pretty ridiculous valuations, multiples of the valuation before it was just cut
fyi now

Python 3.11.1
I'm relatively sure that's not possible.
Gmail and Google Calendar -> FastMail

Google Voice -> Twilio forwarding to FastMail (doesn’t support receiving SMS from short codes, but I see that as a feature)

No final straw, just made the time because it was important to me to get off Google.
WinAero Tweaker can disable it.
Is it? Or is is mainly US? My impression is that Canada is a much more like Europe in this respect, and Mexico doesn't seem aligned with this either?
> Randomizing the link order per release does not solve anything, for this to really work as an mitigation layer, you need to have few different randomly linked versions and randomly give these to the end users. Just randomizing the build does not solve anything as there still is exactly one layout that everyone uses.

First, it does. At scale, the probability of everyone running the exact version of every piece of software is 0. If you want, go take a look and see how many users are running a given version of Android.

Also, did you miss when I wrote

> Taking this a step further, create link N randomly sorted copies per version and randomly distribute those

I agree, doing it per version is only just a small amount of coverage. We're in agreement that generating N randomized copies and distributing those evenly is a stronger position because it makes the cost MN where you have M releases that are still running and N variants per release.
The hardware is the hardest part (hard to hear as a SWE, i know). But there are contract shops that can design your hardware for you and have it made. Prepare to pay 5-6 figures (regardless of whether you want 1 or 10,000 made)

You can attempt to do it all yourself, but you'll never pass FCC or any other cert (so you cannot sell), you're unlikely to make anything small enough for daily wear (past showing off), and forget waterproofing

(these are all examples, some makers really are good enough to do all of this, but then again those are not asking for "how do i do it?" on HN)
This is neat - I'd never heard of it.

I've been using psycopg2 directly with a thin layer for managing connections and transactions using thread-locals for a long time - RealDictRow and some adapters for jsonb and a few other types make it really easy to work with.
SOC-2 requires that you run an antivirus too.
Ah yes the whole "we are going to reinvent this", when "this" has taken decades and 100s of millions of dollars to build. I appreciate the efforts, but good luck.
Consider a PineTime, it might cover 80% of the functionality you need. Develop the essentials on that, and then consider getting a bespoke design.

Just my two cents though, I don't know what your needs are.
Apologies, I was under the impression it was a significant cost. Do you have any good analysis of where Rust compiler time goes you could link to?
B2C regulations will make enforcement impossible if not illegal. People can change their minds. If you're just asking then it's not a binding contract, it's a survey.
I think what we really need on Linux is:

* A better application firewall (like Little Snitch for macOS, OpenSnitch looks promising)

* Sandboxing by default (falling a bit behind macOS, bubblewrap is a good solution)

* Better package management (Nix is SOTA, but we need better tools to monitor upstream against malicious commits)

* Better monitoring tools (that take advantage of eBPF and report suspicious activity)
Video purchases, Audible library, Kindle library.

Order history, wish lists.
I think I have the knack. I don’t think it’s anything special.

Read the code. Believe the code. Not what you think it’s doing, not what the comments imply, not even what variable/function/class names imply. What is the code actually doing?

Great, now you can fix it.

And remember: when you’ve eliminated the impossible, whatever is left, no matter how weird, is what the code is doing. Don’t be afraid to console log.

I see all the time engineers wasting minutes and hours trying to reason about code when a good print statement could answer their question in seconds.
It’s not thin ice because you can’t prove that a snare was added into a mix behind another snare and then pitched up a little and compressed a little. And artists hardly care much about it more than they care that someone has access to a certain vintage microphone. It’s just some sonic characteristic at that point.

I’m not talking about even noticeable sampling of a drum hit but the drum hit being used just to add to the existing drum track in the mix.

This is where transformative allowances come in as well, if not logically because no crime can be committed without any evidence.

I mean, IMO, copyrights on music samples are egregious. Hip hop is significantly transformative and was stymied by lawyers for decades. I’m sure that the best hip hop songs were never allowed to be made. I bet someone put together some absolute best of all time bangers with The Beatles, Micheal Jackson and Prince but they couldn’t get the rights. That trade isn’t worth it my opinion. Luckily the visual arts are more open minded. Richard Prince can be an artist by taking someone’s photo, doodling over it, and selling it for millions while owing nothing to the original
photographer.
Yeah; a simpler language would also be easier to learn. Rust is experimenting with an awful lot of new ideas. I imagine rust's successor (whenever that happens) will take the best ideas from rust - including the best design for a borrow checker - and build a much simpler language around that.

Rust is the first language in its category. It won't be the best language we ever make in that category.
Your comments in this thread include fulmination/name-calling ("Absolutely sickening") and flamebait ("Frankly, you can all spare me the bullshit") in the sense that the HN guidelines use those terms.

Also snark/sneering ("Ah, I didn't realize this was a safe space for perverts who hate women. Cool. Cool cool cool. Very cool.")

We ban accounts that post like that, regardless of how right they are or feel they are, so please don't keep posting like that.
+4 with my wife and I. I have sleep apnea from a deviated septum, she has various breathing issues from EDS. We both sleep better now.
Afaik, modern malware will also do things like keylog for passwords, silent malware is neither reserved for high value targets or reserved for av evasion tier malware (which is relatively easy to do)
It's easier than you might think! These days it's pretty easy to get low volume circuit boards made. Then, with a cheap 3D printer, you could make plastic cases (or plastic molds for silicone bands, etc.).

Check out https://tindie.com/ if you want to be inspired by other makers.
Good to know, but wow, that's wretched.
Holy smokes this looks like it’s straight out of House of the Dragon.
Everything on marine stuff tends to be flat-head or similar design
-- engaging a flat driver into a slot in a bumpy/roll-y ocean is
*hell*.

Off topic: the hell of a bumpy/roll-y ocean manually controlled lift crane arm operation is improved by a single rotating supporting pillar with an expandable webb-y forklift mechanism that goes in the water and retrieves the dive vessel with a one button push and Ai selfguiding.
How? Teams search is ok and posts and replies are threaded. Haven't used slack professionally but it just seems to be a massive chat.
Nice tool. A couple years ago I wrote a similar tool that translates Datadog's agent's metrics/checks into AWS Cloudwatch equivalents.
AI is coming for white-collar jobs, [Bill] Gates warns
There seems to be a large contingent of people who learn almost exclusively by rote (this is not just in software engineering). A major problem they have is generalizing that knowledge to other systems or other parts of the same system. See the many people who struggle to learn a new programming language. I have worked with people who were baffled by *nix systems (especially the terminal interfaces) because their comprehension of "folders" or "directories" was a strictly graphical one (usually based on Windows' model, but they could usually adapt to another file browser at least). They even struggled to interact with filesystems programmatically as a consequence.

I've had some success helping people break out of this, but it usually boils down to individual motivation. These are the people I struggle to work with (in a mentoring/teaching capacity) the most because they get extremely frustrated by variations and novelty. Give them a well-written procedure, though, and they're usually good. Just hope there aren't any knowledge assumptions you made in writing it that don't hold.
it's not really so black-and-white. It is not unusual, for example, for signature-based antivirus to detect the payload of a zero-day-based delivery mechanism. When they are packed in one file, this can incidentally protect you from the original exploit. This scenario is actually a lot more common than you might think, as simple economy means that a lot of malware authors will use different delivery mechanisms over time for the same payload. You see this a lot with botnets, for example, where there's a relatively small number of popular botnet agents that are delivered by multiple groups using multiple means.

In general, it's important to remember that malware involves multiple separate steps, typically today something like the initial exploit, a downloader, and persistence, which may retrieve additional payload binaries. Even if your antivirus is completely unaware of the original exploit, it may detect the downloader or persistent binary. This common problem (for malware authors) has lead to work on things like fileless persistence but those methods are more difficult and less reliable, so a lot of malware still needs to drop a persistent binary somewhere and use one of a fairly limited number of methods to get it to start again in the future. This is a huge opportunity for antivirus to detect a problem no matter the original exploit, and one of the things that antivirus is most effective at.

There is also heuristic-based protection, and in practice few host-based security solutions are purely signature-based. Heuristic protection has significant limitations but can be effective, especially for common malware patterns like loading drivers (no longer as common on modern Windows due to restrictions on driver loading). Heuristic-based systems tend to make enemies of their users though since it's difficult to tune them to be at all effective without a noticeable false positive rate. You see this a lot with packer detection: a lot of AV products use heuristic methods to recognize common packers (obfuscators), with the result that some self-extracting executables and commercial obfuscated binaries will also be detected. There's a lot of interest in machine-learning heuristic detection, but the false positive issue limits its use so far.
I know cases where it did happen...
My first guess:

- find the sensors you want on Digikey or similar

https://www.digikey.com/

- design a PCB for those; everyone has preferences, but here’s some common choices

https://www.raypcb.com/online-pcb-design/

- get that PCB manufactured, eg at OSH Park

https://oshpark.com/

- solder your parts onto that board

- model a housing; get 3D printed

Congrats — you have a prototype!

You can do all of these steps through free tools or moderate fees; people can and do design their own electronics this way.
As far as I can tell literally no vendor allows data to flow out? What am i missing?
ML is pretty promiscuous (as are some other ecosystems), so supply-chain is a realistic threat to a developer. restricting the user that runs such code is helpful. but suppose it gets owned:
- can it call home?
- can it escalate to root?

the latter might be via a local kernel compromise, but that's challenging if calling home is hard. otoh, sudo is often installed...
Extremely cool!
LiteX is such a nice tool compared to how things used to be
And soon nations might even build enormous surveillance apparatuses by forcing "private" companies to participate in mass data sharing programs. Can you imagine??
Except this is the result of a $20m NSF grant to one of the top CS schools in the country, not a fly-by-night startup looking to profit off a trend.

I’m actually kind of interested in this. I’ve taught myself a decent bit and done my own projects but going through a structured curriculum with a cohort of peers has its benefits.
I've worked for close to a decade with Django's ORM and recently with TypeORM, both have been simple to use and generally (minus some weird things I tried to do) a pleasure. I recently started working with a not so important project at my current job with sqlalchemy because I had to use Flask, I cannot describe the pain I've felt working with this, I dread having to write yet another query with sqlalchemy. The docs are terrible, some of the worst I've ever seen, an obscure and undocumented government library I'm also using at work has been easier to learn by reading its code than sqlalchemy. Someone above mentioned that the new 2.0 docs are better, I seriously hope they are, they will make my suffering more tolerable. However, even if the docs are good the API is still the worst and least intuitive I've ever seen, it honestly feels like I'm writing raw sql code shaped like python code. But it is weird, non standard and difficult to follow, unlike the official python sql interface. I recently had to write an upset and it felt like I was trying to summon a forgotten demon. It would have honestly been much easier to just write it in raw sql.

I'm sorry for the wall of text, I wanted to let you know that I'm very grateful for you suggesting that library. I hope I can migrate this (still) relatively small codebase away from sqlalchemy. I'm going to give pugsql and peewee a try, both have been mentioned in this thread as good alternatives.

I can summarize my basic complain here: the abstraction layer that sqlalchemy provides is more complex than SQL itself. It's almost not worth it, add to that the docs are a huge mess and you get something only diehards and people who have been using it for decades want to use.
> We're wandering through a desert looking for an oasis; they're swimming through a lake of garbage looking for an intact water bottle.

I think it's more like, we're both in a corner store and while many men can't afford something to eat, though it's right in front of them; women won't stop looking before they find Caviar and a bottle of Champaign.
First off, your website and app are aesthetically breathtaking. You have a real talent with design.

I have not used the breathing app, so ultimately there may be some context to which I am unware, however, my first thought when hearing the description of the App is why? Why do we as technologists insist on making things more complicated? Breathing is as old as life, and though I concede that there can be tremendous depth to the study of breathing, particular in relation to disciplines such as singing, meditation, anxiety, couldn't you more effectively teach someone a technique by simply informing them rather than making an app to accomplish that same goal?

I apologize if in any way this feels as if I am criticizing your creative work. I am a software engineer and medical student and I appreciate when the two fields collide. I also never want to put any creative work down because I understand the effort and risk one takes when doing anything of the sort.
Uncovering Stackoverflow's Toxicity
Problem should eventually solve itself when people realize tailgating is illegal and automated cars have them on recorded cameras. Just enforce the already existing laws against wreckless, dangerous driving.