skysight-inc/HackerNews huggingface dataset:
> All debate, from Socrates to this part, is bound to be heated and messy by nature.

Strongly disagree on that. In an academic environment, I regularly observe and participate in exacting debates that remain cool-headed and civil. Now, the ability to do this takes effort to develop, but incivility in debate is just a mark of laziness and immaturity.
An introduction to zero-knowledge machine learning
They are depicted in "Raise and fall of D.O.D.O." by Neil Stephenson.
I hope it never changes.

PHP reminds me of my socially awkward uncle who is endearing and means well and caused many cringes & me and my sister to laugh with his faux pas.

I love reading articles about its bugs. The Mr Bean of programming languages.

We need PHP just as the film industry needs its gaffer tape. It's just that we have a very good standard of Gaffer tape (357 or "perl" in programming). It is kinda expensive though in dollars or cognitive cycles. So sometimes we use the inferior stuff that is not the standard 357. But then, we find, after the film bumps out - it caused you to rip the paint off the floor in the venue the film hired and not get your $10,000k deposit back.

We need to have our humour.
Sieve is becoming a commonly requested feature. (;

For now, mox supports delivering to mailboxes with configurable rules, search for "Rulesets:" on https://pkg.go.dev/github.com/mjl-/mox/config. You can edit the config file (if you're the admin), or use the account web interface to add/remove/edit rules. I use it to get mail from mailing lists to the right mailbox.
Tomorrow Corporation Tech Demo [video]
This guy should have monetized his blog, as in every discussion vaguely related to php someone come with a link to this page.
How often do we talk here about Google rather than Alphabet?
A shame that they didn't even think of the genetic confounding! The universities only let in elite people. They don't make them elite.
Laws can be changed - and failing that, there are many lands
What about GCL?
"NEW! (20230113) GCL 2.6.14 is released"
> That requires the attacker top also have access to the salt

Which you must presume they do. If any part of your security relies on the salt being secret, that's a much bigger vulnerability than this.

That said, I do think there's a potential vulnerability here, because it allows you to break in if you can only corrupt another user's password hash (rather than controlling it entirely). Think a rowhammer attack or something.
Jim Keller tweet: https://twitter.com/jimkxa/status/1628530382516920321
Sam Zeloof specifically saying that he starts company with jimkxa: https://twitter.com/szeloof/status/1628528978884718592
> it is kind of irrelevant, because we don't know anything about the process that led to GitHub being included on the list.

The inclusion of GitHub, as written, is clearly either a mistake or the product of ignorance.

The students revealed that they spoke to the person who'd judged their submission, and that the judge doubled-double that they thought GitHub was a solely a temptation engine.

> We were finally able to talk to our school's CTE(Career and Technology) director and explain our situation. I told her about our website and how we were accused of cheating, even though we provided a public GitHub repo containing the history of the project. She then revealed that she had actually judged our project and explained that it was disqualified for using "GitHub, the templating engine"(Yes, she called GitHub a templating engine). She then pointed me to this rule: ...

https://www.reddit.com/r/webdev/comments/119j8o4/part_2_disq...
I agree that this is broken, and loses much of the benefit of hashing. But this is the php ecosystem; I'd be surprised if no one was doing that!
Unfortunately at these low currents, you tend to get a tiny amount of leakage across the LED junction - just a few microamps, but trying to make a small amount of light it becomes an issue. Worse, you can't even calibrate for it because the leakage is highly temperature dependant.
Integrate with MS teams and it will be game changing..
That's not what i expect when i see someone on twitter linking the CTO role in their bio.
> Regardless if you want to report a security bug you should include the impact.

Assigning impact, even only as a measure of risk, is not the responsibility of the reporter.

A reporter must provide a fair description and a proof of concept. Calculating impact involves much more than that.
Really hard to know, but the creatine that didn't seem to help was a cheaper, bulk buy. My guess is that it wasn't as much creatine as it said. Unfortunately, I feel like there is a lot of misrepresentation around supplements.
EDIT: I misread the linked post, ignore me!

<strike>crypt is the hashing function, not the password checking function</strike>
I think you're giving the worst-case scenario when citing large-scale cloud spend. A couple of hundred dollars a month for very fast builds is a good deal, and they can build on Intel and ARM, which is useful.
On balance, the role might be net-negative. Like PMs. There are _good people_ doing _hard jobs_, at most orgs. However, a role where you're not responsible for the systems you create is one where the feedback loops are too large to add value beyond random chance.
> The free “Personal Edition” limits the program size and the amount of time it can run, making it pretty much useless for anything but evaluation.

Also very good for education purposes.
Because the measurement itself was noisy, and unless the operational metric was updated, it would never be stable.
I’ve experienced this hell, where a client is “red” or “yellow” based on an a phone call with an account manager. That assessment is one of many inputs to a flawed operational metric that swings wildly.

To extend your metaphor, imagine if you were constrained to only visually asses the food. Your fancy new remote monitoring system is simply a camera that allows a stupidly expensive pitmaster view your food and make an expert assessment. The result might get a little better, but it’s (probably) never going to be as good as using an actual thermometer.
Thanks for your feedback! With IngestAI you can make a Discord or Slack bot within minutes, with no-code. And if you would face any technical issue - please let us know on our Discord or by e-mail and will be happy to assist you.

We go two paths - finetuning and working with embeddings, so still to see what would perform better.

In what kind of kind of file types you store your knowledge-base?
> The words "quote", "quotation", "mark", etc. do not appear anywhere within the HN Guidelines[1], to include any rules regarding quotation marks (there aren't any).

No, but they do appear in the two links I gave—which describe the sort of behavior that HNers are expected to observe, regardless of whether it's written in a mod comment or on a mod-controlled page titled "Hacker News Guidelines".

If you think that's an inappropriate standard, then bring it up before just going ahead and doing it anyway, or leave for greener pastures. You succeed by being knowledgeable, considerate, cooperative, and also knowing where to draw your line in the sand—versus digging in (to defend the use of made up quotes and name-calling).
So why didn't/don't they use Java, R & Perl more often?

Because with Java you have to write inflated Fugu, R is too specific and it lacks the vast ecosystem of Python, and Perl causes eye cancer.
Ohio votes against having any breaks (handouts r 4 commynists & gubbermint regyerlations r bad)

Source: Ohioan & former door-to-door campaign canvasser (canvassee?)

*p.s., be careful going door to door knocking in Ohio - you will often be greeted with firearms in hand, in even the most suburbia of neighborhoods.
Did anybody see any answer? He only cites some studies, but no proper answers
When you say "he", do you mean Balaji?

This author is female, if that's who you meant.
Dispatches from Childhood
Here is the upthread comment I was responding to:

> Why would you want to retrain it from scratch every day?

I was explaining why someone might want to retrain it more than once (although not literally every day).
I had no idea expert witnesses got paid that well. I guess it makes sense, with them being experts and not having a personal stake in the lawsuit, paying him for his time sounds reasonable.
I think you're understating it. You're imagining a scenario where an attacker spears a specific row in the database. A much more likely failure mode is that a bungled database migration simply leaves the doors wide open: all users can now log in with any password.
Conspiracy theorists don't need evidence. The mere suggestion that someone could benefit from killing environmental workers is plenty to keep them going.
That is most often caused by reputation issues around the IP where your mail server lives. If you host it at home or in any “residential” block of addresses, then most definitely. Same if hosted on a VPS or with a provider whose address space may have been burned by spammers spinning up machines and then redeploying them when they start getting blocked. As someone said further down below, you can still host at home and use Amazon SES as your verified outbound relay. I do that with the Axigen free email server, and I have no issues with reputation.
Ahh, thanks! This makes a bunch more sense.
Private messages are included on local timeline
If you have a sql injection vulnerability they literally already have the keys to the castle. This in addition gets you nothing you didn’t already have simply by setting the hash to a known value.
There's some interesting paragraphs in the full ruling about providing support for other employees going through similar things, which would be prevented by such a severance agreement with disparagement and non-disclosure clauses. It's worth a read.
Never heard of anyone using it. AIUI not standards-compliant. LGPL for a Common Lisp impl. is not something I want to touch with a ten foot pole.
Tesla is the only one I'd classify as good enough for daily use without needing my phone. Possibly because they started as a tech company so they understand software.
Could also be a backdoor in combination with another yet-to-be-discovered bug…
> What unfair advantage is gained by using GitHub to store the code? A privately hosted Gitea instance would have accomplished exactly the same thing without technically breaking a rule.

If there was no advantage, then the students looked at the rules and said "Yup, those don't apply to us" and proceeded to break them?

It's a competition!

ALL the rules in competition are more or less artificial; that doesn't mean that competitors should expect to break them with no penalty.

> I would understand this point if they were leveraging Actions or something, but that isn’t mentioned so I’ll assume that is not the case. Their usage of GitHub does not appear to have been anything more than a convenient repository host.

If it gave them no advantage then they shouldn't have risked their entry being disqualified by using github.

It was a pointless risk for no gain, from the way you say it.
GENie – a project generator tool that uses Lua
“Chat GPT went down and 25% of my team could not work.”
They got that reputation partly because they were pagan, but mostly because of all the sacking, pillaging and brutal murdering. Of course, Christian armies were just as brutal to Jews and Muslims, but the Vikings being pagan made it easier to propagandize them as being a literal satanic horde.
That sounds so convoluted and would never actually be used by regular users as long as more intense options exist (see Mastodon).

I'm not sure why it needs to be a right to waste time consuming information about random celebrates and people you haven't spoken to since high school.
Interesting! CL & embedded sounds like a dream job to me.
Structural Pattern Matching in Python
Thank you

I love this song and have used it in my own media compositions but didn't have this background information that makes it so much more delicious

THIS is what makes HN so beloved around the world

Meaningfully obscure insight from thousands of brilliant minds

Thank you
This more or less describes a lot of how I view software industry Twitter.

Tweet threads on topics like this are rarely deep and thoughtfully considered, and when they are, an article or blog post would always be a better format.
Perhaps you didn't see what post I was replying to, but it would help in order to understand the context. The OP said "there is virtually no developed country that allows abortion this late in the pregnancy" and this is a common misunderstanding about abortion law, particularly in the US. Almost every single person that learns there are a number of states that allow elective (i.e. non-medically necessary) abortion up to the moment of birth, are blown away and don't believe it. But it's true.

Most people believe that if the life of the mother is in danger at any point, abortion should be available. Not everyone, but the vast majority. Most people believe that there needs to be a cut off at some point (generally after viability, but this varies) where non-medically necessary abortions should not be legal. If you take a poll of 100 people, how many would support a non-medically necessary abortion at 8 months? Not many. So then the question is, why are there states with zero restrictions that late in term?

As to your claim that "nobody" would abort that late in term unless medically necessary, we know that is categorically false. Hundreds of already born children are murdered by their parents every single year in the US, so it's inexcusable to give them legal cover to do it prior to birth when the child is viable.

What is the difference between an elective abortion at 8 months and just smothering the baby after its born?
https://www.joelonsoftware.com/2000/08/09/the-joel-test-12-s...

Article from back in 2000, based on info from ~1990.

> 5. Do you fix bugs before writing new code?

> To correct the problem, Microsoft universally adopted something called a “zero defects methodology”. Many of the programmers in the company giggled, since it sounded like management thought they could reduce the bug count by executive fiat. Actually, “zero defects” meant that at any given time, the highest priority is to eliminate bugs before writing any new code.

Please read the entire article, it's worth it ;-)
Thanks for your feedback!

We have our docs right on our web-page: https://ingestai.io/docs but your're very welcome to join our Discord server and we'll guide you thoughout the process in case you have any issue: https://discord.gg/kMpbueJMtQ

And yess, we have video in our docs too? Did you find it yet?
There are scenarios, but they are pretty out there.

For example, a service might import hashed passwords from a directory, and an attacker has limited influence on the network connection to cause some random-ish data corruption.

> Like, its a really interesting security adjacent bug, but clearly not a security issue.

I kinda disagree. We often think of security in layers, and an unexpected fail-open behavior in any layer should be treated as a (potential) security issue.

The impact might be low because you expect another layer (like protection of the password database) to prevent exploits, but there could always be corner cases where that assumption doesn't hold 100%, especially in something as fundamental as a language built-in, a system call or something like that.

So IMHO it's pretty low severity, but still a security issue.
> You're looking at it from the PoV of the rule-breakers, and saying "This is clearly a stupid rule". Look at it from the PoV of those competitors who had to do without github - they are saying "well, it's unfair that those people can win when we had to work harder because we did not use github"

You're right, it isn't fair if students were denied the use of industry-standard tools because of the technical incompetence of the competitions administrators falsely believing GitHub is a website generator. Sure, the students are obviously miffed that they were disqualified, but they were obviously following the spirit of the competition.

I hope this rule is amended and further clarified so that it's fair in the future. As it stands, it's very clear that the rule was written by someone who doesn't know what GitHub is and not by someone who doesn't want version control to be used.

) We were finally able to talk to our school's CTE(Career and Technology) director and explain our situation. I told her about our website and how we were accused of cheating, even though we provided a public GitHub repo containing the history of the project. She then revealed that she had actually judged our project and explained that it was disqualified for using "GitHub, the templating engine"(Yes, she called GitHub a templating engine). She then pointed me to this
rule: ...

https://www.reddit.com/r/webdev/comments/119j8o4/part_2_disq...
My pessimism in startups is how much its been gamified. Ycombinator has essentially created a class of people who are now chasing their achievements (unicorn status, Series A, B, C etc...) and the startup is only a means to that end.

This leads to a rat race by which instead of making the best product to solve the problem they originally intended, they try to market their company as best as possible to VCs.

The idea was always build something impactful and make it as profitable as possible via fulfilling your company's mission. You can see the ramifications already in the last 2-3 rounds of startups, all of them looking for easy money "uber for X" "AI for Y"...
Ask HN: HN Comment Spam / Attack?
Look at this thread about lisp currently on the front page (using showdead for the full effect): https://news.ycombinator.com/item?id=34909113

There are all sorts of new accounts posting nonsense to it. I saw this in another thread yesterday. I haven't seen much of this before, at least not so systematic. Is this a GPT thing?
Microsoft themselves will be coming up with that sorta integration? I feel the opportunity of this probably is going along the lines of Intercom (support desk) which can be present in chat tool of the client/customer choice itself ?
Seems like a pretty big hiring fail. How do you end up with a team of programmers where 25% ... can't program?
Thanks, I honestly felt a bit gaslighted with the way no one was mentioning anything about these accounts.
I use Amazon SES to send system-generated messages from a couple of tiny websites I ran on EC2. When applying I needed to specify the volume, and put in a generous number in case the sites got a busy day - maybe 100-200/day (when realistic traffic probably averages single digits/day).

I promptly got approval for 50,000 mails/day!
For simpler, more intuitive syntax give flowchart.fun a try
thanks for your comment! Sure, it's even stated on our web-site - our closest releases are: WhatsApp on 2/24, API on 2/25. But we're also woring on adding MS Teams that would be in March 2023.

Do you use mainly MS Teams in your organisation?
As @TimWolla commented somewhere else:
https://stackoverflow.com/questions/75519073/password-verify...
Seems like there is virtually copy/paste from old comments, e.g. https://news.ycombinator.com/item?id=34910103 I remember reading the original https://news.ycombinator.com/item?id=32324797
comes and goes in waves, nothing new
> > The code has to be updated

> I'm pretty sure this is not how an LLM works.

You can say that about any software. "You can use this software perfectly well without ever updating it." Sure, you can do that, but typically people have lots of reasons to update software. LLM isn't magic in this sense. An LLM does not mysteriously update its own code if you just wish hard enough. If you want to continue the development of the LLM then you need to make changes to the code, just like with any other software.
> "Sorry, the rules clearly state that you can't browse websites that promote hacking or other criminal behaviour, like hackernews. It doesn't matter that HN isn't actually a criminal website, we must always unquestioningly follow rules."

It's childish and immature, in a competition, to question the rules only after you have been caught breaking them.

I never said rules should not be questioned, I said that you should question them before agreeing to them, not after you have been caught.
I never knew this. Thank you for the tip.
> Uh, actually, if nothing else --- this should definitely matter.

No. It doesn’t. See https://en.wikipedia.org/wiki/The_Yes_Men exploits for plenty of examples, like https://theyesmen.org/project/snowcones

It is legal to parodize your local police department if you live in the US. (You would get in trouble if you tried to make parody traffic stops with a parody police car with parody flashing lights, but that’s very different than a Facebook page.)

> So the consequences of one's actions, don't matter?

The government may not punish legally protected First Amendment speech - which parody absolutely is.

Your boss can fire you for it, though.
They did. MD Data was a thing. It just flopped super hard. It was way too expensive over Zip disc for a minor storage increase and size decrease.

LGR did an Oddware video about it a few years back:
https://youtu.be/CzwtCBj5jEs
Hmm… You make a very interesting point.

I wonder how long it would take for someone to spot and report “I entered my password wrong and it worked anyway”

I was thinking of an attacker with specific goals of accessing things who doesn’t want to be found out.

Your hypothetical attacker would be more of a general chaos agent.

I have certainly encountered far more of the latter.
You’ve reversed the question, which would have made me answer something differently. You said “what percentage of US centimillionaires attended these 8 universities”. If THAT was the question I potentially would have guessed lower than 35%.

But the way that I understood the original question was “what percentage of centimillionaires attended the 8 universities which produced the MOST centimillionaires”. When you pick the subset that produced the most of something out of a group, you should expect the subset to be over represented compared to the group. Sort of like the Pareto principle.

Also, part of the reason that I was surprised it was so low was that the numbers in the article were intentionally picked to invoke a reaction from the reader, and so if I’m coming from the angle of “let’s see how much wealth these fatcat elitists are hovering up!!” Then I’m a little surprised it’s only 35%.
Death Valley Days
It's not that hard, it's actually easy. Very Easy to get into a devolved state where the shortest path back to sanity is to clone the whole repo from scratch.
Ask HN: Best manual software testing course?
Have you done any from youtube,udemy or other sites? Please share the course details.
Because of the peculiarities of quantum physics, researchers have created a sensor that transforms light into an electrical indication with an astounding 200 percent accuracy.
Interesting article, I think I actually understand a lot more than I usually do with physics articles. This quote stood out though. I lol’d:

“The Higgs field, on the other hand, is just as spinless as the Higgs boson. Like a college senior sitting forlorn in a career counselor’s office, it has no direction”.
I tried to use it when writing my article. It could not even load my initialization file because it is not standard compliant (it does not support the :VERBOSE argument of COMPILE-FILE).

The fact that they use GCC under the hood is interesting though, I'd be curious to see how fast it can get. But standard compliance comes first.