skysight-inc/HackerNews huggingface dataset:
Thanks! It's great to read all your comments here. I appreciate a good mixture of aesthetics and self-referential logic conundrums. ;-)
Post Post Corona
The upcoming revolution: an early look at a supercharged power in TiDB 6.6
TiDB, TiKV, New SQL, HTAP, Database
The problem with housing for everyone is that location demand is not distributed equally. How exactly would you provide housing for everyone who wants to live in Manhattan?
If someone said "the original pledge of allegiance" I think most people would interpret that as being about its form before any alterations. And so, the 1892 "I pledge allegiance to my Flag and the Republic for which it stands, one nation, indivisible, with liberty and justice for all."

(Before the 1923 addition of "the Flag of the United States of America" and the 1954 addition of "under God")
> Well, it's the USA fault that they're more unpredictable now. They reduced one of China's most important trade partners into "just a rebel island near you that only trades with the western world".

There's definitely still a significant economic relationship between China and Taiwan. For example, one of the biggest companies operating in China, Foxconn (which makes iPhones), is Taiwanese: https://en.wikipedia.org/wiki/Foxconn

Taiwan Semiconductor (TSMC) is a major supplier of chips for iPhones, so presumably these chips are being imported into China: https://bgr.com/tech/apple-orders-all-of-tsmcs-3nm-chip-supp...
oh my sweet summer child, The Democrats have been trying to reduce/eliminate the influence of Iowa and New Hampshire for many years. The reason it's not likely that primaries seasons would be changed solely for a particular candidate is that a party will need to "live with" the result for some time to come, they're not going to be able to rearrange it every election.

South Carolina Democrats, black and white, are much more toward the center of the overall electorate, which is where the national campaigns shift their focus after running left and right in their respective D and R primaries. It is not Biden's specific strength that matters, because it was also the reason "Super Tuesday" was created many years ago to benefit the establishment candidate (Walter Mondale at the time)* https://en.wikipedia.org/wiki/Super_Tuesday#1984:_Beginnings...

And black voters are (or have been) reliably Democrat, which benefits all Democrat candidates, not particular to do with Biden (or Bill Clinton) though they did enjoy outsized black support. Saying the first primary is being moved "to make the electorate look like America" is designed to shut up the Left, who would scream bloody murder if they said "putting this state first is an establishment move because SC is not so left wing" It takes an "establishment move" to change the primaries because the state parties have to change it in the local places with cooperation or opposition from the other party in those states.

* a much younger Biden was a candidate back then too but when, as an English coalminer's great-grandson, Biden's support was centered in the UK so nobody in the US was doing him huge political favors)**

**this is a tongue-in-cheek reference to Biden plagiarizing Niel Kinnock's speech which knocked him out of the 1992 race https://archive.ph/idkaA
If you take the plaintiff's allegations at face value, of course the defendant is going to sound guilty. The reason why I'm skeptical is because "cartel as a service" doesn't make any sense as a business model. Realpage doesn't gain anything from creating a cartel because they don't own the homes. They advertise that they maximize profits for landlords. If they are indeed price fixing, they aren't fulfilling their promise to their customers.

Edit: As with all just about anything. It looks like, people are hostile of the idea of "presumption of innocence" when that requires them to question their priors.
> ometimes have to write the .desktop yourself if you want it launchable through the UI

I even don't have to manually write them, KDE has kmenuedit.
Monday off makes a lot of sense, as "observed" holidays (ones that fall on a weekend but are given a by-convention weekday off, by some businesses and, usually, schools) are often Mondays.
Ask HN: Where Are Ukrainian Developers At?
Marketwatch today reported that "‘Ukraine is open for business’: Western companies urged to be part of Ukrainian recovery ". The link, sadly, was just a rather limited landing page briefly discussing opening a business in UA and, that is it. I don't know much about the market there, especially now, but where do Ukrainian devs go to looking for leads/projects and so on?
The question really is only whether the solar cells pay for their weight and cost in the electricity they generate. I think the answer can be a qualified yes, depending on technology.
AFAIK, Joe does not have any direct relationships with Google. I suppose, he's just a powerful venture capitalist.
I get 5 - 10 "Your <Amazon|Paypal|Google|> account was suspended...". I haven't tried to see what their followup is for phishing.
Always assume your employer can view all activity on _their_ devices on which you work.

Personally I have no issue with this as I use their equipment/infrastructure to do my job and have zero expectation of privacy.
What makes you think that apple can even compete at all? The businesses they are competing with in this space have actual monetary incentive to do research in the field, this sounds like the comments people make about apples electric cars and AR headsets that are always just around the corner and better than anything that already exists
Looking at other countries on https://en.wikipedia.org/wiki/List_of_countries_by_GDP_(nomi..., North Korea is near the middle of the pack too. Really puts into perspective how enormous an amount of money this is by most countries' standards.
Flatpak is supported by Endless [1], SUSE [2], Codethink [3], Collabora [4], Igalia [5] ... none of these businesses have an issue with "supporting their competitors" because that's an inherent part of doing open source as a business.

[1] https://support.endlessos.org/en/apps/flatpak
[2] https://fosdem.org/2023/schedule/event/containerised_apps/
[3] https://www.codethink.co.uk/articles/2022/flathub-codethink-...
[4] https://www.collabora.com/news-and-blog/blog/2017/08/17/debc...
[5] https://github.com/Igalia/webkit-flatpak-sdk
There are other forms of art which humans make apparently without conscious thought.

Some written words, poetry, dance, and music can be made this way. Why not painted art?
> Real talk gets stuck down immediately for being inflammatory

I've noticed that I have to shy away from certain ways of expression when I say things critical of a US-positive narrative. I have to avoid "real talk" as it were. It's kinda frustrating because that's how I prefer to speak but I can also see a difference in the discussion that ensues.

I feel you though. It can be pretty tough when you say something genuinely concerning, which people don't like thinking about, only to have it dismissed with the downvote button. Still, oftentimes such things gain more points while I'm sleeping and seemingly people in other parts of the world view my comments (which I think is kinda telling; it's what it is).
I work at a full remote company in a similar situation. On the record, yes we work Friday, but it’s silently accepted you don’t make sweeeping changes to our products and organize intense meetings on Friday. And if you take a half day, nobody will judge you as long as you’re Not blocking anything important
Wow, that's so completely fucked.
Dude if my restaurant choice being reduced is the cost of everyone having a nicer life I think we've already reached a pretty clear conclusion.
There is a long story about how just when it looked like the combination of BlockBuster brick and mortar + mail in was about to deal the killing blow to Netflix, Carl Icahn came in and snatched defeat out of the jaws of victory.

https://hbr.org/2011/04/how-i-did-it-blockbusters-former-ceo...

https://www.cnbc.com/2020/09/22/how-netflix-almost-lost-the-...
APIs are usually public (exposed to the Internet). This is why issues in authentication, authorization, configuration are commonly exploited.

That might be ok if you are Stripe and you have tens of millions of dollars of people and infrastructure to mitigate the risk of that Internet exposure. But what if you are not Stripe?

For example, you are a small team inside a financial services company and you need to expose your data (via APIs) to other teams (or to B2B partners), and your enviros are in different private or public DCs.

Historically, teams in those situations used private networks or semi-private networks - VPN, MPLS (ExpressRoute, DirectConnect), private mobile APN, whitelisted IPs, etc. But that's slow, costly and expensive with massive numbers of distributed API clients.

One answer to the above dilemma seems to be reactive API solutions. Constant scanning and reaction to problems. Great visibility. Quarantining. Etc. And of course doing your best to avoid auth issues, misconfigs etc. Is this generally the path which works for teams in that situation?
> Eventually somebody is curious enough to try it.

Or "just" hungry enough
You could probably simplify this setup a bit by using a qmk-programmable macro pad[1]. You can program the keyboard to send keypresses like F23, F24, etc, and then handle those directly. This suppressed the need for the rpi entirely.

[1]: Some random examples: https://candykeys.com/product/megalodon-doio-triple-knob-mac...
Claiming revenue that you never actually had sounds fraudulent?

Can't they extend the trick, so that they have one unit that rents at $100B that always has the vacancy expense of $100B? Then they can set the other rents as they like with little impact to their revenue
You seem to be forgetting that over here in the US we're all a bunch of "temporarily depressed millionaires", the wealthy landowners have and will continue to convince the voting public that any of the above rules would be detrimental to the not currently a millionaire class, and such rules should be prevented at all costs, less the dreams of them being rich will be permanently dashed.
That’s an issue if you’re running E100. Gas+ethanol blends will dramatically reduce ethanol’s hygroscopicity.

But if water is getting into your fuel (focus on fixing that, not your fuel choice), isn’t it better if the ethanol can carry it through the engine instead of just accumulating as a separate layer?
Governments normally maintain monopolies on violence.
IMO the appeal of Deno was an opportunity to rethink the JavaScript ecosystem. The introduction of all these Node features make it far more likely that things stay the same way they currently exist with Node, making it feel pointless to bother with Deno at all in the first place.
I have kind of pivoted my career away from the idea of making as much money as I could be if I moved to San Francisco or whatever, and have been travelling internationally for the most part while doing this. I think that's probably what's kept things fresh enough for me.

I suggest looking at visas for working remotely somewhere you can do something on the side like learning how to surf or whatever sounds interesting and fulfilling to you. It's honestly not even close to as expensive compared to being stuck in some expensive city paying expensive rent for expensive car use.

Tons of volunteer positions abroad too which you can do alongside remote work. One I recently considered was at a jaguar rescue centre in the jungle, and another I was invited for in Japan for some long distance radio transmission project for some group of people who are trying to live on less than a dollar a day (I have ideas) - And that's just a small idea of what's available. A lot of these volunteer positions are looking for someone to fulfill technical work alongside something you may have never done before.
It depends on how you define decline. From the perspective of a modern financial analyst, the consolidation of food supply chains is more efficient.

But left without controls, these types of markets tend to devolve into monopolies if allowed and cartels if not. Markets require regulation. That’s why you can get fresher cheaper produce at a farmers market while the supermarket doesn’t be road is selling California Peaches in Georgia and Washington apples in New York.

An example I’m familiar with is a local farm that’s been in continuous operation since the 1750s. They built successful long standing relationships with local grocery chains, which allowed them to grow over 20 years. Enter modern finance - the biggest two chains get bought by private equity, who fires the grocery buyers and brings in Accenture and does a strategic sourcing engagement. End of the day, the supermarket went from buying 100 truckloads of onions to 0, having made a deal to source Canadian (subsidized) onions for 1.5% cheaper. It broke their cash flow and almost put the farm out of business.

They made mistakes for sure, but this is the pressure exerted on the production and supply chain so long as our current legal thought process persists.
AI can only interpolate. Humans can extrapolate.
Pretty Rust backtraces in raw terminal mode
I'm guessing numbers are real hard to get for North Korea's GDP, but a couple places I looked[1] showed it on the order of tens of billion USD!

[1]CIA world fact book and world bank (both a few years old)
Is package.json required?
It is undecidable to determine whether a manuscript has terminated, or whether it will continue being revised forever.
... To be super ridiculously over-the-top pedantic... That Applicative instance is on ((->) r). If you could actually do type-level sections, that'd be (r ->). But type-level sections are the same as type-level lambdas, and they would break a lot about Haskell's type system so they don't exist.

All of which is to say, great work.
spoken like a true middle manager :)

i don’t disagree that that’s one way to get some people motivated. some people prefer the carrot.

/shrug
a phone is small, can be easily put away, and can be used while doing other things with limited or no loss of basic spatial awareness; it's not hard to look up from a phone, or put it away.

and it's not just the crime angle, it's things like not missing your stop or being aware of the people moving around you so that you're not a nuisance.
I like the idea but I definitely feel like this would benefit from a less regular design. Have separate banks of keys, maybe even different cap shapes.

Otherwise you're inevitable going to hit the "switch input" button when you meant "screen brightness" half the time and have to wait for 10 seconds while it switches back.

I've seen nuclear power stations use beer handles, and submarines use randomly shaped knobs to avoid the "easily confused controls" problem.
>* 65B model's performance is broadly comparable to PALM-540B. Not a small feat, but also could indicate the benefits of good model-vs-token size ratios [Tables 3,4,5,6]. Their conjecture for underperforming on MMLU (multitask language understanding) compared to PALM-540B and Chinchilla-70B is smaller fraction of books and academic training data.*

what do you mean by this ? The OpenAI papers talk roughly about model performance scaling by parameters. does this show the other way ?
i created this propaganda site to try to help formalize informal fridays -- with the ultimate goal of making them go away completely -- i.e. a 4-day work week:

https://nomeetingsfriday.com/
It is by far the most aerodynamic at a Cd of 0.13.
Next best is the 0.17 of either the experimental Mercedes Benz EQXX or of the cancelled Lightyear 0.
My only reservation about the Aptera is the huge distance between the front wheels, which hampers maneuvering in tight spots, risks hitting curbs, and in the worst case other vehicles.
Avpr! V nffhzr lbh zhfg unir n glcb be znlor fbzr havagraqrq juvgrfcnpr: pbafpvbhfarff
It's probably safe to say that phishing is the most common method among APTs like state intelligence agencies. It's cheap, it's easy, it works. No reason to burn zero-days unless simpler methods with less exposure don't work, and they usually do.

But we can broadly categorize security incidents into two bins: first are opportunistic attackers which broadly attempt a method that sometimes works. Two common examples are minimally-targeted phishing emails (think Best Buy invoice) and automated scanning for old versions of WordPress with known vulnerabilities. Second are targeted attacks, where the attacker chooses a target and then attempts different methods to reach success. Overall targeted attacks are far less common than opporunitistic ones, but because they involve a higher level of effort they're only attempted when there's a high level of motivation. Targeted attacks tend to result in greater financial losses than opportunistic attacks, for example, because compromising machines to add them to a botnet usually isn't worth the effort of a targeted attack, but getting banking credentials or crypto wallets usually is.

All of information security is fairly bimodal in this way. It often seems like even technical professionals like software engineers struggle to understand basic security practices, but I think this is one of the biggest causes: most people tend to think about one case and ignore the other. Unfortunately one of the things that makes security very difficult is that both cases are real and the two require fairly different practices to deter, prevent, and detect.

Social methods are far more common with targeted attacks because "true" social engineering involves a higher level of effort, like time on the phone. That said, phishing falls into an in-between where some consider it to be a social method but it is amenable to widespread automation. There's also a wide spectrum of effort in phishing. Many are tempted to try to categorize phishing activity into a binary of "phishing" and "spear-phishing" (I hate these terms), but that doesn't really reflect reality very well. In a large corporation you can usually find examples of phishing that are targeted to varying degrees of specificity: at anyone, at corporate employees broadly, at people in the industry, at employees of a company, a department in that company, and even carefully tailored to a specific employee. The frequency of course tails off as you get more specific, but then it's not that unusual for some organized crime group to run a sustained campaign of fairly closely-targeted phishing as happened recently with Twilio.

Opportunistic attacks are certainly greater in volume to the extent that some call them "internet background noise," but most think that targeted attacks probably produce greater total financial damage. Security is very faddish though, not only on the defense side but also on the offense side, so it probably varies from year to year. For example, the emergence of ransomware was a major trend that required a strategic shift in defense in many organizations since ransomware attacks were fairly low effort but also very high damage in many cases.
Deno fans, how are you using this language?

I think they have some interesting ideas, but it increasingly just integrates Node.JS features, and from a casual observer's viewpoint I'm not entirely sure I understand what their initial goals were and if they have drifted far from them. It looks like compromised principles from where I sit, which can often be a bad thing - especially because package.json was one of the best parts of NodeJS and so it looks like their principles were made without a plan.

Thoughts?
I assumed they were in the trenches fighting.
I have trouble believing it's to do with commercial real estate because these $1T companies are holding, what, ~$20B worth of real estate? Why would 2% of their value ever be worth changing the way their entire workforce works unless they've estimated that the productivity impact of RTO could be at worse -2%?

Personally, I look at the incentives. Companies are incentivized to maximize their value and they have the most internal metrics on productivity compared to HN commenters and IC WFH advocates. So if they see productivity slump while WFH, they'll advocate RTO. Meanwhile, IC's care more about their personal situation than the company's value. If they like WFH, they will advocate for it, even when overall it negatively affects the company.

I think some companies that are high-achieving and very intentional are able to full-remote and get an edge by recruiting high achievers that will only remote-work (open-source leaning like Vercel, Gitlab).

But I think for the majority, the negative value effects outweigh the positive, and there's a reason Sam Altman and OpenAI are in-office only.
Tell me about your mother…
(Almost) No one would argue that working less for the same exact output is worse than working more. That flies in the face of the most basic ideas in economics.

The question is finding the balance, work that produces productive things people value. And it turns out, free market economic systems are pretty good at democratically converging on answer.
You can criticize a person, you can criticize a company, but criticizing capitalism itself is never popular here. I've been called a communist for literally quoting Adam Smith.
>try to buy from companies in a build phase.

It is a lot of work as the big companies will buy brands with good names because of this reason (and will proceed to make them shitty).

After this phase the few remaining companies will attempt to find a way to entrench a regulatory monopoly and survive off of rent seeking behaviors rather than actual work.
> Google replaced "don't be evil" with "do the right thing", which is entirely fair to hold them to.

That's fair, but "the right thing" for whom? If it's for their shareholders, which apparently by law is in fact not only the right thing but a requirement, then it's hard to argue they're not good on their word.

> Firefox install fingerprinting: https://www.ghacks.net/2022/03/17/each-firefox-download-has-...

I commented on the sibling. This is only true if you download it directly from their website. Firefox is acquired from many other sources - package managers, FTP sites, other free software distributors...

> Persistent web socket connections

Thanks, this does seem less than ideal. There seems to be zero evidence of any breach of anonimity via this mechanism though. Just to be clear, I agree that it shouldn't be this way.

> In both cases this "telemetry" is something that the user did not ask for or authorize, nor is it disclosed prominently.

No argument here. I both agree with your assessment and that this is a bad thing.
You know, Google releasing a ChatGPT competitor that could be run locally would really take the wind out of Microsoft's sails without needing to shift their own business model.
That sounds like a hell hole. I’d throw my sim away.
Congratulations!

A good instance of the very simple explanations and theoretical solutions that, "hiding in plain sight", manage to possibly remain unseen for a very long time.

I nearby noted that "you do not cast your shadow on your documents" and that "you gather around a fire facing it". There is something even simpler:

___ the sun is above. ___

So, to represent something with a light coming from "the south" is as unnatural as lighting a face from below.