skysight-inc/HackerNews huggingface dataset:
> you're talking to a computer in English ffs and it not only understands you, it goes away and does useful work.

Google has “understood” English queries for a while now in the sense that you can type a question in English into the search bar and it goes off and does “useful work”.

The problem with these AI implementations is that it goes off and does work, but not always useful work. In many cases it’s wrong. In many cases the result is below entry-level.

In those times where it can pass a structured test like a bar exam, then absolutely praise it and get curious about how it can add value to people’s lives.

But in this instance, it couldn’t pass a CS 101 or Design 101 class. It’s on its way, but these claims of being able to use AI to create websites are premature.

At this pace we might be there in a few years or even months, but right now the quality is lacking from any demo I’ve seen and in my own attempts as a designer to use it in the design process.
(I've done a lot of Lisp, for money, and for open source platform&community buildout.)

HN articles about exotic things, not just Lisp, do seem to get upvoted disproportionately.

Also, PG declared Lisp as something you're supposed to think is important or a superpower, and I've wondered whether that also contributes to some upvotes on HN.

But I'm not aware that a single one of the bajillion YC startups used Lisp.

Maybe it's like an admirable religious dogma that a congregation affirms each weekend, and then promptly forgets about for the rest of the week.
The actual correct alternative would have been to not freak out about COVID. I can understand the first 3-6 months of restrictions. The rest was a total own-goal. A politicized circus. At least we didn't own ourselves for almost 3 years like China.
Bigger picture here is to disincentivise bad practice of SMS 2FA.

A good move - regardless if you care about what Elon is about or not.

Media turned on him pretty quickly and it causes a lot of noise in the background distracting from the achievements.

Follow the science :)
If anyone's interested in a pipx clone with excellent tab completion, I would appreciate any feedback on pipz, a function of my zsh plugin for python environment and dependency management: zpy

https://github.com/andydecleyre/zpy
And now next years budget is justified with more money dedicated to missile manufacturers.
should you have to pay to not be impersonated? weird business model
> Not _exactly_ as easy, you also need a valid https cert, and set up a cronjob to renew it.

Web servers like Caddy automate this for you: you just indicate that you want HTTPS for a particular site and the rest is taken care of for you (in the case of public sites and HTTP-01 challenges, at least). Link: https://caddyserver.com/docs/quick-starts/https

Even Apache2 has mod_md which does pretty much the same thing (sans DNS-01 provider integrations, at least out of the box), so it's going to be good enough for most cases and similarly easy to Caddy. Link: https://httpd.apache.org/docs/2.4/mod/mod_md.html#mdomain

Nginx integrates well with certbot, which does take a bit more work and configuration, but even that is passable: https://certbot.eff.org/

Things can get a bit tricky when you want to run your own CA or ensure mTLS, but in most cases neither will be necessary.

As for whether you even need HTTPS in the first place, I'd say that it won't hurt in most cases and will guard against MitM, the ISP included.
> I don’t understand how they will grow to infinity.

You either have to be consuming faster than the queue is growing, or you are adding faster than you consume. There is no equilibrium.

If you are consuming faster than it is growing, at some point you'll consume all jobs, meaning your queue is sometimes empty. If you are adding faster than you consume, your wait time approaches infinity (tho in reality you'll fill up your queue storage first, of course).
Heh, left my job recently because of exactly the same. Unlocked few psychiatric achievements on the way. Hurry equals anxiety, anxiety equals lack of attention. Say no to this bullshit for your own sake, even if it’s unrelated to subj.
You wouldn’t even need people, a drone would be fine
<Insert “always has been” meme>

By definition the EPA, FDA, etc give corporations protections from events, not the other way around.

For instance, even if a company is provably causing me harm, say through a drug injury, I can’t sue the company for false advertising — FDA approved.

How about the EPA? Same deal, I can’t sue a company for causing me injuries due to carbon dioxide, so long as they follow EPA regulations. Historically, before all these agencies you could sue for any injury that caused harm (ie the law).
More people should try to self host things again. Seems that people are forgetting how things work and instead use services that does it for them at some cost.

Self hosting is rarely complicated. It's also easy to achieve better performance and lower cost in many situations.
You are right: here in the EU we often refer to ourselves as 'Europeans', thus implicitly excluding people from the non EU part of Europe. That's inacurate (and a bit disrespecful to non-UE Europeans, if you ask me). For that reason I try to always use the expressions 'EU' and 'EU citizen' instead of 'Europe' and 'European'.

Which reminds me that USA != America, also. It would be perfect we should not have to deduce from context when 'American' refers to anyone from the whole continent, from Canada to Chile, or just someone from the US. I guess it would be more practical to use 'US' and 'US citizen', for clarity...
I should've quoted to avoid confusion, but I am replying to a comment talking about heating with gas vs this:

> if natural gas is cheap it can also be used to generate electricity without having to run and maintain natural gas lines to every house
Independents and foreigners also use it, to distinguish the description from the political party. Using the official term I think much more indicates a US liberal bubble.
I find it so funny there are actually people here that seriously cannot see the gulf of utility that separates LLMs and blockchains.

What a crazy world we're in.
This is something which I need, ALMOST!!

It will be great if someone here guides me on how I can solve this below problem.

I am part of a Enterprise company which installs a bunch of managed security softwares in employees' laptops. A couple of these security softwares can/must be used in BYODs as well, to connect to the company network.

I would like to build a application such that, whenever a employee finds that something is not working right on their laptop, they should be able to fire it up on their browser and it will access logs from these security software and does troubleshooting/debugging locally on the machine and provides the results and remediation steps to the person. This will tremendously save time instead of contacting IT team and waiting for their help.

For this usecase, I have some limitations.

1) I want to be able to solve for both managed laptops and BYODs (both Mac and Windows). So I cannot push this as a desktop application using MDM solution.

I want this to be a web-app as I can control the version of the application that they are running. So a local-first web app seems perfect in that sense.

2) I want to be able to access local file system where the logs of these security software are located. I am not a developer, but rather a infra guy, but based on what I know, a web-app cannot access the file system without user actually doing a file picker. But in this case, it is too much friction for non-technical users, especially since I want to build this solution for multiple security software which is dependent on multiple file location.

3) Moreover, I don't want to unnnecessarily reveal too much information of location of the log files for the security softwares. But if it is a local-first "web-app" and the user has to be pick the file using a dialog box, I cannot do it without revealing the location.

4) For "some" use cases, I want to be able to "securely" send meta data to a centralized server for more complex troubleshooting scenarios or to log a ticket, for example.

Sorry for the long question. May I know if anyone have any solutions for this scenario?
Sadly, the author of this article doesn't provide any proof of his statements regarding chemicals "draining into the Ohio river"... he just seems to accept the statements made in other news sources without question.

Here's the latest news from Cincinatti:

https://www.cincinnati-oh.gov/water/news/ohio-river-test-res...

Various conspiracy minded and politically motivated groups continue to push the Ohio derailment as some sort of environmental apocalypse in social media and elsewhere online when the evidence seems to indicate the spill was successfully contained.
You forgot to mention https://github.com/marqo-ai/marqo. It's a tensor search platform and has had traditional search features since Day 1.
> Why is everybody forcing me to upload to the web the very files I want to keep private to myself?

This isn't the use-case I had in mind.

My personal one: I want to build a small utility web app for a very specific task, and it would be used by me and by some of my friends (less than 10 users total). The entire thing can easily be front-end code, which is nice, because I can just host it on Netlify and not bother with hosting, managing it, etc., thus making the complexity of it all much lower.

But there is one catch - the web app uses an external API, and, along with it, the API access key. This puts a big stop sign for making it front-end only. And I don't want to up the level of complexity by managing the back-end just for the API access key retrieval (for a webapp used by less than 10 people). Exposing the API key in the front-end code on a publicly accessible website is one of the worst ideas I can think of.

I haven't done the evaluation on how well the solution in the OP would serve my specific purpose, but it looks promising.
When I wrote a lot of cross platform performant numerics I loved the bus error thrown by the Sun machines.

In essence it was a RISC machine saying "I can't deal with unaligned data" and a sign that code was (say) storing a 32 or 64 bit int that straddled a word boundary and the hardware was not coping on a MOV.

Why did that matter and why was it good thing?

It forced programmers to think about data alignment and resulted in code that run faster on CISC Intel chips.

The dirty secret about Intel chips was they "just did it" w/out complaint - and it slowed them down significantly on pipelined computations if they were constantly double handling unaligned data to get it from memory (across a word boundary) to bus (aligned for transit) to memry again (across a word boundary).
> That whole privatized profits / socialized losses issue that keeps showing up.

The Banksters demonstrated that back in 2008.
> No they shouldn't, just how nginx shouldn't manipulate iptables just because you've said it should listen to 443 on "the network".

But you've typed in a command that explicitly will alter the iptables rules, as documented, and as you have requested

> Many times you don't even want docker containers to go "to the network" directly and it shouldn't assume unsecure behaviour by default.

Docker containers do not have a network connection outside their own subnet by default, and only expose the ports that they have explicitly been configured in the Dockerfile to expose.

By determining the container's IP address you can talk to it directly but this is not really recommended, because it can and will change. This internal IP address is by default in an RFC1918 range, and will not be in any way accessible from the outside world.

> Moreover, CRITICALLY, you can't prevent Docker from doing that and you can ONLY secure the machine by adding another rule on top that supresses Dockers rule... and those dockers rule change over time making it easy for the blocking hack to stop working after an update and again make the machine unsecure.

You can prevent Docker from doing that, by not adding into the command line the additional option that tells it to hook containers up directly to the "outside world" interface bypassing any firewall you might set.
$14m is a lot to the vendors. A few thousand could be enough to significantly impact their business or even loose it.
No it isn't. It is math and queuing theory.
Right. One of several bits of architectural friction that didn’t matter while your large DBMS was I/O constrained.
> I’m going to use AI tools to design an entire website!

Proceeds to use AI for ideas only and manually edits everything.

Generative AI tools are extremely powerful. But I’ve been recently getting people asking, “Did you use AI to write that?” for extremely complex, innovative solidity smart contracts and web3 UX design. The hype is so far ahead of reality that no matter how useful gpt4 is once it comes out, people are going to call it a failure.
Two good friends were running a sketchy Instagram business back in the day.

They had a massive churn issue around 3 months. They knew this was a cash cow that was printing money but someday it'd come to a end abruptly.

I suggested to them to offer 20% to their existing customers to switch to annual. They made ~$60k in a day and knew they'd have to refund if things went south before the annual contract ended. They were able to deploy the capital into marketing and explode.

In the end they had to shutdown but not before each founder had taken home +$250k and invested into legitimate means.
It does. I appreciate the write-up.
> Swap accounts as necessary.

It's an interesting idea, but I don't want to buy a copy for every family member when we'll never use more than 2 simultaneously.

> No, but hotdesking and a licensing service…

Steam Family Library Sharing already checks that there's an available license, and that it's not currently in use. I just want the ability to buy multiple licenses.

Or better yet, I'd prefer that Valve and other game app stores do what Apple does, and allow users within families to play whatever's "on the shelf", separately or together.
Yes true about hardware support. But Linux is advantageous for many reasons that made it the standard in large-scale cloud environments in the first place; largely because it offers much greater customization and control in just about every aspect. The cost/open source advantages as well.
If you're just making people wait 12 hours, or five minutes, or whatever - you aren't saving on compute. You're just adding a buffer. Maybe that is what you want, but it should be intentional.
Been doing Clojure for the past 5 years and while the language itself is great, the ecosystem really isn't. The tooling is subpar, editor support is clunky at best, everything is for some odd reason much harder to set up and explained in a more difficult way. A ton of libraries don't even provide documentation, they just expect you to REPL their functions to find out what they do.

The older I get the more I realize that what makes something great to use isn't all about the language, but the surrounding environment, and how pleasant _that_ is to use. Personally I think I will most likely not Lisp for much longer because I'm seeing many other languages have much nicer to use ecosystems, even if they probably pay less.
> who will go work at other companies and likely escape lawsuits since they were operating within the umbrella of their job.

And who'll exactly hire people responsible for the death of their previous company?
To avoid the bill of attainder issue the companies wouldn't be individually named. All corporations that fit the bill would be subject to the bill. And since Congress is forbidden from passing ex post facto laws, such a law would obviously not be a bill of attainder, as it could not guess who would be subject to it.

IANAL. I believe that there are limits to the penalties a judicial action can impose. A corporate death penalty presumably wouldn't survive appeals without an underlying law. I guess the 8th amendment might still be a barrier to my alternative.

> In my view, the L&E approach of punitive damages calculated to be greater than the profit incentive of the negligent/reckless behavior is the best approach.

I agree. But I also want a corporate death penalty beyond this.
Ask HN: Query about local-first web development
This is related to recent discussion earlier today in HN about local-first development - https://news.ycombinator.com/item?id=34857435

Local-first web development seems to be something which I need for solving a problem which I am facing, ALMOST!!

It will be great if someone here guides me on how I can solve this below problem.

I am part of a Enterprise company which installs a bunch of managed security softwares in employees' laptops. A couple of these security softwares can/must be used in BYODs as well, to connect to the company network.

I would like to build a application such that, whenever a employee finds that something is not working right on their laptop, they should be able to fire it up on their browser and it will access logs from these security software and does troubleshooting/debugging locally on the machine and provides the results and remediation steps to the person. This will tremendously save time instead of contacting IT team and waiting for their help.

For this usecase, I have some limitations.

1) I want to be able to solve for both managed laptops and BYODs (both Mac and Windows). So I cannot push this as a desktop application using MDM solution.

I want this to be a web-app as I can control the version of the application that they are running. So a local-first web app seems perfect in that sense.

2) I want to be able to access local file system where the logs of these security software are located. I am not a developer, but rather a infra guy, but based on what I know, a web-app cannot access the file system without user actually doing a file picker. But in this case, it is too much friction for non-technical users, especially since I want to build this solution for multiple security software which is dependent on multiple file location.

3) Moreover, I don't want to unnnecessarily reveal too much information of location of the log files for the security softwares. But if it is a local-first "web-app" and the user has to be pick the file using a dialog box, I cannot do it without revealing the location.

4) For "some" use cases, I want to be able to "securely" send meta data to a centralized server for more complex troubleshooting scenarios or to log a ticket, for example.

Can someone please give me pointers on how I can solve this?
Shameless self plug but I built something similar: https://heylaing.com . Basically I got fed up of not being able to practice my language skills realistically (fed up of always getting precanned responses etc). I also had limited time to get a language buddy and so built this.

Originally it was just a python script, then a terrible Flask App that me and some friends used, then posted it on reddit and it went somewhere so started to develop it.

Any feedback is welcome! I'm currently working on an iOS and Android app but never built in react-native before so it's a steep learning curve.
Maybe there should be an IDE plugin that after you run your code once it makes a list of recommendations for parallelisation, including the possibilities "please rewrite this in language X and style Y" or "forget about it"
This is obvious to anyone that works. What do we do about it?
>And "sharing" is kind of stupid. If you own your escooter

Then it gets stolen.

The main value of the rentables comes in making it so you never have to deal with that eventuality.

The fact that they're far more difficult for the average thief to turn a profit from stealing compared to a private vehicle is a bonus for the company (getting away with stealing one requires a Faraday cage or some similar way to jam GPS, and you have to strip it for parts because even the shadier pawn shops won't accept obviously stolen-but-repainted gear), as is the side-effect that (because they're interchangeable) it's fantastic for people who come to the city by car but don't want the inherent hassle that is driving downtown.

Yes, you still have to dispatch people to charge them up (and swappable batteries is something that takes a bit of time to figure out), and sometimes they get destroyed by angry would-be thieves for shits and giggles, but that cost also scales sublinearly as you deploy more of them. And once the batteries have worn to the point of uselessness hopefully batteries are cheaper- a prediction that's likely correct.
it's easy to blame freeloaders [but] the project maintainers are at fault

No one except butt-hurt OP is blaming anyone. If someone agrees to finish your basement for free, you accede and ask him to keep the noise down.
I’m not familiar with open sourced code under MIT that is still protected by a patent. Can you share some examples of this?
Honestly those are great ideas, as well, and maybe should be the starting point. I admit I'm deeply skeptical that reducing barriers to transition between services would allow the market to actually function in a way that results in better outcomes--the reality is the information asymmetry between users and tech companies is enormously high, hence my belief in the value of mandated transparency--but it's a very good place to begin.
Son of a gun. I've never felt in more esteemed company. I figured I couldn't have been the only one to think of it. Thanks so much for the link, I never would have found that on my own!
the # of items in a queue is either growing or shrinking, there isn't the concept of "staying the same" and as you approach the line from shrinking to growing, performance (queue time) degrades after roughly 70-75% utilization.
> How do you propose the artists who are now blissfully freed from the work that pays their bills should pay the rent on their homes and studios, and to pay for their tools and materials, while still spending all their time making art that “breaks the mold, hasn’t been made before, and is meaningful to the artist”?

They should connect with the people that aren’t artists and have a similar preference for non-AI art.

Or, they should learn the new tooling of the field, and use it as part of their mix of tooling.

The vast majority of would-be artists have never been able to afford to do it full-time and have needed “real” jobs; it would be astonishing for the narrow fortunate elite that have to think that they are somehow the one group of people in all of human history entitled to have that privilege without being concerned to adapting to change, even though that’s never even been the case in that same elite, which has had to deal with change (whether driven by technology or changing aesthetic preference for media, techniques, subjects, etc.) rather continuously, historically.
>> he engages with the thought honestly. Russell does not.

I'm struggling with your use of the word ''honestly''. I have usually taken Russell at his word, bowing to his widely lauded expertise. When he referred to Rousseau as a lunatic, I was inclined to believe him and never for a moment felt that he was being dishonest. If anything, it forced me to check out Rousseau one more time. Nietzsche never instilled that same sense of awe within me or desire to do further work following up on his own critical targets.
you've got to be joking mate.

>Google has “understood” English queries

you can't, with a straight face, be comparing a Google search to what ChatGPT is doing. C'mon man.

>In many cases it’s wrong. In many cases the result is below entry-level.

Once again I'm baffled by this dismissal. I don't think you actually understand what you're seeing with ChatGPT. There is very interesting emergent behaviour occurring. Trying to explain the behaviour is literally cutting edge research.

>but right now the quality is lacking

the technology was literal science fiction 3 years ago, what it can do is astonishing. If you're not jaw on the floor astonished then you simply don't understand what kind of a leap this represents.