skysight-inc/HackerNews huggingface dataset:
I don't understand why Meta and Twitter are charging a monthly fee for this. Surely, it's in their best interest to have as many verified users as possible on their respective platforms? Surely, they want to get to the point where there are so many verified people, that you don't trust anything that comes from a non-verified user?
I understand there's a massive logistical challenge with verifying users across the globe, but there must be a better way than charging a non-trivial monthly fee for the "benefit" of being verified.
exactly. ideally, accidentally exposing your db to the internet should be all but impossible
I hope gpt detectors will evolve into general bs detectors.
>So, explain to me why every C++ program always has its own String implementation?

i have no idea where you are reading about c++, but every c++ program i have read or written in the past 20 years or so does

#include <string>

std::string greet = "hello, world";

the full-stop in front of the hash is something with HN, not me or c++, and only seems to show up when editing.
Phonyland / language-model (2021) (PHP)
Facebook Announces Meta Verified - https://news.ycombinator.com/item?id=34858691
Metadata tagging in the mp4 container format used by Apple is very rigid, and IIRC it doesn't support multiple fields with the same name, or multiple values within a field, so they can't really implement it.

(They could implement it for most other formats, of course, but that would make their own formats look bad...)
There are no ads or trackers on my site, so it can’t be that - it is just the page content and some JavaScript, nothing more. I suspect it’s because I’m using an old off-the-shelf script for the navigation, and the size of the nav has grown too big for it to run reliably on all devices. So I need to recode it more efficiently, which won’t help you right now, but will hopefully do so next time.

This is what you get when you get a site author who would rather be coding in 8 bits than in HTML. ;-)
Confidentiality is not enough to claim Security. You also need Availability.
Rust – What made it “click” for me (Ownership and memory internals)
>So, explain to me why every C++ program always has its own String implementation?

*saner :)

>Then C++ is a disastrous choice. Almost anything is better.

True, C and C++ are most of the time not the right tool for the job nowadays. But, if it's just a project that you're working on in your free time, it wouldn't harm to write it in your favorite language. I write in C++ a lot even if I could do the same thing much easier in other languages.
It'll never happen. Every single time this comes up it turns into the same thing over and over again. You must remember the person that said they'd "write a blogpost bypassing OpenBSD mitigations next week" and that's been well over a month now and, surprise, there's no blog about this.

Everything OpenBSD does is wrong and trivial to bypass but everyone's too busy to do it. Maybe the dumbest part about this is that nobody on the other side of this is making claims that these mitigations are perfect in any way.

Qualys has bypassed some OpenBSD malloc hardening features recently but then they don't go around making wild or insulting claims about how wrong and trivial they are either. Go figure.
On the other one you have to login to facebook.com to see the details of the announcement.
Does every client side javascript project someone builds on GitHub for fun need to be verified if it is GDPR compliant?

And what if the source someone shares is using APIs that aren't GDPR complaint? That you can download, compile it, run it on your machine and then say that it was offered to you and so must be GDPR compliant.

I'm not in the EU and not familiar with the particulars of GDPR but that feels like it is stretching for a reason to complain.
Mutual funds.

It spreads risk across a big basket of stocks, averaging out lows (and highs) for a steadier and more consistent gain.
Is the term "ChatGPT" being used in place of GPT-3 here? Is this thing actually replicating the GPT-3 training process?

The thing that makes ChatGPT interesting (over regular GPT-3) is the RLHF process, but this article doesn't seem to touch on that at all, unless I've missed something.
Related:

“Is Parallel Programming Hard, and, If So, What Can You Do About It?” v2 Is Out - https://news.ycombinator.com/item?id=26537298 - March 2021 (75 comments)

Is parallel programming hard, and, if so, what can you do about it? - https://news.ycombinator.com/item?id=22030928 - Jan 2020 (85 comments)

Is Parallel Programming Hard, and, If So, What Can You Do About It? [pdf] - https://news.ycombinator.com/item?id=9315152 - April 2015 (31 comments)

Is Parallel Programming Hard, And, If So, What Can You Do About It? - https://news.ycombinator.com/item?id=7381877 - March 2014 (26 comments)

Is Parallel Programming Hard, And, If So, What Can You Do About It? - https://news.ycombinator.com/item?id=2784515 - July 2011 (39 comments)
I've been a subscriber for a long time now. Newsblur has been great. It's been pretty stable, and they haven't succumbed to frequent radical redesigns.

I could self-host an RSS reader, but Newsblur works well enough that I haven't bothered.
An activist group spreads misinformation to stop solar projects in rural America
Use the F.B.Purity browser extension.
There are books explaining those things, and as a professional I can expect to amortize the effort over years of other projects.
At first, I thought the same thing too, but, to be fair, this is a site that clearly caters to people who are familiar with acronym and the associated activity. As such, it might not be a good candidate for posting here, and there is no reason why every site should be. In this case, the free sample issue of the magazine, linked to elsewhere in these comments by somethingsaid, would seem to be a better introduction.
In addition to what 'lrem' said:
Don't turn off your devices before going to the forest, as, if both persons don't create network traffic for, let's say five hours, then the government could derive that these persons are related. Of course this is not applicable if your threat model is low.
> variety of DBMS's.

This is the key. Germany doesn't have a central citizen database or something like that, but each municipality has a system on their own. Any bad actor can't search through that to discriminate, deport or whatever people. This of course also leads to problems like paying out corona support money to students still isn't completely done etc.

Palantir tries to create an Über-Database.
I think many CS degrees teach FP, I remember learning a variant of SML (mosml) for my first programming course. Now the same university is teaching the same course in F#.

Of course a lot of the data science/machine learning is being done in Python, but that is likely due much of the frameworks/tooling around is Python in general in that world.
>Mobile

Interesting, firefox on my iphone mobile[0] does not allow this...

[0] https://support.mozilla.org/en-US/kb/add-ons-firefox-ios
> NewsBlur is useful, destroying it serves no purpose at all. And make no mistake: the hacker clearly aimed to simply destroy it and pretend they have copied the data, so they were more than willing to do just that, wanton destruction for a miserly amount of money. Whoever did this may think they're l33t and cool but I personally think they are utter trash.

I doubt this was even specifically targeted at NewsBlur. Reading the article it sounds like it's just an automated attack that scans for any open mongo servers on the internet and does the same thing to any of them. Not that that's any better, really.
Related:

Scalene: a high-performance, high-precision CPU and memory profiler for Python - https://news.ycombinator.com/item?id=22003368 - Jan 2020 (17 comments)
U would be really lying to yourself believing writing some lines of code is more critical than making a business profitable. At his level, deciding what to do is 1000x more important than how and who to do it

It is like you saying a director for a movie has no importance, because he didn’t act a minute in the movie

That is a big big ego to claim
> The human impact is real, but how is it different from how carriage drivers felt about the automobile, or how typists felt about the word processor?

Because driving a car or typing is entirely different from making art.

> People who enjoy drawing can still draw, just like people who enjoy playing instruments can still play instruments.

"You can just sit at home and play your little instrument, and not bother anyone, is that good for you?"

Your contempt for art and artists is just awful. It makes me despair for humanity.
https://www.nonhumanrights.org/blog/punjab-haryana-animal-ri...
Great write-up. I remember how shocked I was a few years back when we moved our backend to a micro-service architecture and our native Postgres installation to a docker container. As (I suppose) almost everyone, we also used ufw to manage the firewall.

Security should be the default stance, and any port exposed through docker should initially be restricted to local only. Going global should be explicit, imo.
Maybe not as big as what's happening with AI, but I can see my parents constantly having to adapt to Microsoft's new redisign of Windows, or <software> having a new version, or laws changing. And that's for jobs considered relatively safe and boring (accounting).

As for art school, I've always heard that it was more fun than IT/computer science/accounting but way more dangerous, as in you weren't guaranteed a job at all. Not everyone has heard that, of course, not everyone has the time/skills/resources to plan their career. I don't really know what to say except that it sucks for them. On the other hand the lower bar of entry may bring way more art in general, like it did with digital art.
> GLib adds an object system, not a type system.

In service of GObject, glib implements GType, and GLib's goals necessitated adding a (dynamic) type system to C:

https://docs.gtk.org/gobject/concepts.html#the-glib-dynamic-...

We've had literally decades of glib-utilizing free software developers mocking C devs reinventing their own bespoke type systems (and/or object systems) in their projects in lieu of simply adopting glib.

It most definitely adds a type system, at least as much as one could manage something called that in C. It just doesn't end there, and obviously your object system will dovetail with your type system.
Driving Lego Cars in Sand
And I believe data portability and interoperability would achieve the same ends. If you can just migrate to not-Facebook and still see posts from Facebook and message Facebook people, I can be on my opaque platform, and you can move to your transparent one.

That said, I could see a requirement for support commitments. Being able to get human support and transparent answers to account questions. If you can’t support people you accidentally lock out, you are too big. Like fire department requirements for a city population.

Another product I could see requiring regulation is login auth services. If I use my social media account to auth against other websites, you can’t just take that auth away from me if you don’t want to serve me anymore. Force a forwarder so I can use my new auth service to log into my old accounts.
If you're writing in a style you're unfamiliar with, how do you know the model is doing it correctly?

I also think writing yourself might be far better practice. This tool can easily become a crutch. This is unlikely to be free anytime soon. In fact it's likely to be quite expensive.
They know what the bandwidth graph looks like when a full DB replication/dump is in progress.

Since that level of data transfer only occurred once (when they did it), they know the attacker did not actually transfer any data.
what. docker isn’t the problem here. dbs on public subnets, and the lack of monitoring for accidental db exposure are the actual issues here.
Games, just as movies, have anything from dogs to the people who kicked in $2 on the Kickstarter in credits, there has to be more to this story than this or there is soon going to be a massacre of some "rogue" catering driver taking down Disney's blockbusters.
I respectfully disagree. It solves a huge problem - reproducible app environment. It comes with its share of footguns too (hint: always explicitly specify pool of IP addresses it can use!), yes, but what doesn't?
Can you elaborate on why most startups fail when they hit PMF?
Non-JS Readable [1]

[1] - https://archive.is/O0QPk
> there's enough tech and know-how to keep script-kiddies out

I think that this is true for the parties that have the budget for a proper security team. But your average programmer is not able to keep up with both the very rapid evolution of the security scene, a bunch of tooling to build their application with (backend, frontend) and then the burden of writing the application itself. Even with an interest, and without the urge for an MVP or the subscription to 'break-fast' you are essentially a sitting duck given enough time. After all there is an army of attackers out there and you are just you.

I have a ton of ideas of how I could make my current project much better by adding a service. But I'm not going down that route because I know I will inevitably end up in an arms race that will stop me from being able to focus on the application and that will shift more and more resources to the security domain. So instead the app is limited in functionality and only works using local storage in the browser, everything else is utterly static. It's a dumb and very much brute force solution but it works. It is also severely limiting.
Not for me, personally. FB without ads still has no interesting content for me. YouTube premium is the best value for my money out of all my subscriptions due to content.

On Facebook the network effect that made it cool in the beginning has now died and it will keep it from ever coming back for the same reasons it was great in the beginning. I'm very confident people I really care about will not start posting there, and they probably have the same thought process. It's just uncool.
You can learn C in a few days. It takes 10 years to learn C++. My experience, anyway.
> it is more like the moment we lose ours as we go forward on foolish endeavors we don't fully understand.

Ahh, so the Singularity is that thing rapidly receding in the rear view mirror then?

This species started looking for intelligent life on other planets before first establishing to any reasonable degree of satisfaction that intelligent life exists on this one… foolish endeavors we don’t fully understand is our thing.
Does that mean that we can use fake names again? I mean, you can get "facebook verified" just by getting locked out of your account and having them demand photo ID to let you back in again. Facebook certainly force-verified me.
#include <stdio.h>
#include <stdlib.h>

int main() {
size_t len = 0, cap = 0;
char *buffer = NULL;
int c;
while ((c = getchar()) != EOF) {
if (len >= cap) {
cap = (cap << 1) + 1;
{
char *newbuf = realloc(buffer, cap);
if (!newbuf) {
fprintf(stderr, "Could not reallocate to %zu. Printing what I've got.", cap);
break;
}
buffer = newbuf;
}
}
buffer[len++] = (char)c;
}
while (len --> 0) {
if (putchar(buffer[len]) == EOF) {
fprintf(stderr, "Output failure.");
return 1;
}
}
free(buffer);
return 0;
}

Most of the verbosity here is in correctly handling errors, something that isn't much easier to do in C++. (Be warned: I haven't tested this code.)
Why You’re the Biggest Loser in the AI Wars
In the US you may broadcast FM with a Part 15 device limited to about 200 ft (61 meters.) However, finding such devices and transmitter ICs is becoming rare as this device market has mostly transitioned to Bluetooth. Low Power FM requires a FCC license and appears to be stagnant with no licenses granted since 2013.

https://www.fcc.gov/media/radio/low-power-radio-general-info...
> If you give the customer a 20% discount to pay annually, they're now paying you ~$1000 upfront, for a PBP of 0

This sounds like a huge assumption being made here - as in, this is not as easy as it sounds.
I get you but I believe mouth-feel is more than texture, for example it's the crunchiness of crisps in your mouth, and temperature alone doesn't cover the coolness of menthol.

I certainly agree with you that a lot of pretentious long words are taking over from short words that do a perfectly good job, and it sucks.
Not to downplay the intent, but hosting static site is much simpler in something like github or netlify. Also in my area business internet with fixed IP is more expensive than what I would pay for decent enough cloud instance($50 vs $10).
CatPPT--generates Powerpoint (legacy .ppt) slideshows of cats, I guess. I imagine the file format is less important, unless the AI has a novel form of generating binaries.

Holy crap, VirusGPT.
I have run into this firewall problem too (not in any sort of production environment, thankfully).

The problem is that your mental model of a firewall tends to be that it sits 'in front of' all applications on your machine. Docker breaks this assumption by implicitly inserting rules into iptables.

Worse still, if you then inspect the state of the firewall (using UFW), it does not show you any of the rules that Docker inserted, because those rules are on a separate iptables chain.

The problem, then, is the interaction between Docker and UFW. UFW is designed as a 'simple' frontend for iptables, for situations where the advanced configurability of iptables is unneccessary. If you manage the firewall using UFW, you are not really supposed to also inject 'raw' iptables rules, especially not on non-standard chains. However, this is exactly what Docker does.

Therefore, we end up in the hairy situation where Docker adjusts your firewall, but UFW does not provide any indication that anything has changed. Neither project considers this a bug, and they just point to each other for a solution.

Personally, I think it should be on Docker to, at the very least, throw up some warnings when it is about to change firewall rules, as this is clearly unexpected behavior for many users (despite Dockers claims to the contrary).
Well, someone controls those tools and someone is on the receiving end of that bitcoin address.
Agreed, using the paths makes it feel like a conventional toolchain. I haven’t tried this but it sounds like if I execute the python executable in the venv directory I get that shell. Only issue from there is writing executables that invoke the venv path in a deployable way
Who here is part of the, " deleted my Facebook" club?

Raises hand
This point dovetails nicely with the idea of a "Commander's Intent." In this case, a strategy document is the intent being spelled out. If it's written well, a rank-and-file engineer can read it and understand why certain allocations are made, why certain priorities are pursued, etc without having to ask too many questions or feel like a cog in a machine.
They are mostly dead and unable to argue on behalf of their works.

But they were just old white cisgender oppressors, so who cares what they would think?
According to Medical Guidelines, Your Doctor Needs a 27-Hour Workday
> a symbol which had previously meant they'd attempted verification

That's not what it meant. It was an award for being notable. $8 is a fee that you pay to get verified.
"hitting 100 million monthly active users 2 months after its launch".

I'm deeply suspicious of that number. It came from Similarweb, who track these things through analytics gathered from browser extensions.

I trust this article more: https://www.nytimes.com/2023/02/03/technology/chatgpt-openai...

"But two months after its debut, ChatGPT has more than 30 million users and gets roughly five million visits a day, two people with knowledge of the figures said."

"Two people with knowledge of the figures" is journalism speak for "I heard this off the record from people with insider info, and I'm ready to report it because those two different sources provided the same number".
New List about Polars
For those interested in Polars, have a look to this new awesome list about Polars !
> You know that Docker containers are self-contained operating systems?

That doesn't qualify as a program?
I think the main point I am trying to make here is:

1) I don’t know what his role was (and neither do you, most likely)

2) that different “types” of people work differently.

in your example: imagine that everyone on production has to sit in a canvas chair all day in a warehouse because thats “how the director wants to work”.

3) If he is a businessman, which seems to be the case, then his personality type tends to favour the absolute worst type of working environments for developers.
It was amazing how open things were back in the day. Whitehouse.gov had an open mail relay that I enjoyed sending mail through.
In D we write it "char* p, q;" because both p and q are pointers.
Considering how many different combinations of PC components and applications Windows is expected to support, you might as well call it random variation.
It's not good enough for them because Musk seems to be limiting its use in line with his political views.
Reserves are money -- they are the key component of the monetary base, included in all money aggregates.

Yes, the Fed trades with the rest of the world only via its primary dealers. But note that these dealers are non-US-government entities (specifically, they're for-profit businesses, part of the private sector), or trade with the Fed acting as intermediaries for other non-US-government entities (businesses, individuals, etc., also part of the private sector). Thus, newly issued money with which the Fed pays to purchase instruments in open-market transactions ends up in the hands of... non-US-government entities -- mainly domestic businesses (e.g., mutual funds), domestic organizations (e.g., pension plans), domestic individuals (e.g., day traders), etc., all part of the private sector.[a] The newly issued money ends up as private cash balances.

[a] For simplicity, I'm excluding foreigners from this mental model. I'm also excluding the so-called "multiplier effect" of bank lending.
Apple Moves to Prevent iPhone Users from Getting iOS 17 Developer Beta for Free
I believe they have made some projections before charging for it. So, I assume that only a small amount is willing to pay for it.

There can be an explosion in the first months, but most people will cancel the subscription when they realize how useless this thing is.

I believe it tends to normalize in a curve not so distant from what we have today.
Collaboration isn’t a personal preference. By definition it requires at least one other party. In person collaboration is far more expensive in terms of real estate, time, and cognitive load. People who can work remotely effectively should be at an economic and productivity advantage.
Facebook lets you create 4 additional profiles with pseudonyms for users who don't want to use an account with their real name. Your main account still needs to use your real name, but you can just not use it.

https://facebook.com/help/967154637433480
And you would probably be wrong as we have underestimated the intelligence of animals.

You are also allowed to believe what you want, but that’s not science.
Show HN: Ouruboroi, Digital Art Orrery
This is basically every apple product ever. Get turned into paperweights despite being fully functional devices just because apple won't supply updates, won't open firmware or software up for users to apply updates. Can't claim your a ethical company when you do toxic unethical crap like that. Legit e-waste created for nothing but maintenance of a companies profit. Shit drives me up the wall. Should be legislated against. You can tell alot about people's ethics by how much they like to fix and reuse things or how much value they put on repairable items.

Business tactics that are this malicious towards society on so many levels should be legislated out of existence.