skysight-inc/HackerNews huggingface dataset:
Can't this be fixed by an SQL query planner that does those joins lazily? And don't some of them already do that?
The D's GC collection cycle does pause, but it does not run unless the GC is asked to do an allocation.

Hence, if you don't do GC allocations, or at least do not do them in your realtime loop, it will not pause.

D is not a GC language. It's a language with an optional GC. (It also does not have the code gen compromises that fully GC languages rely on, such as write gates.)
but who paid for the bullets?
You can always press “cmd minus” to bring the old web back. Every press brings you back by a decade
Once the supply chain restrictions ease, you’ll probably see the car manufactures start to realize that they make more money if they get 2000 in profit on a $20,000 car then if their competitor gets that profit.
Dropping the creator of ‘Dilbert’ is free speech at work
Yeah, not all people work optimally that way, and many of those that don’t do uniquely good work regardless. There’s room for all of us.

> What real project is specified to the point where all programmers are interchangeable and can work separately without EVER talking to each other?

I have no idea what this has to do with anything that anyone said here. But lots of projects don’t require a lot of ongoing collaboration. You may just be working in a very particular sector if you’re kicking around all these narrow absolutes. It’s a really big industry with lots of different practices and projects.
AI generated hero image is an interesting gambit.
This is great! I don't know if I'll have a project that I expect to last long enough to worry about bus factor, most of the work I do is either throw away stuff for myself or already part of a large shared team effort. But I love the idea. It's long but I skimmed it quickly and I think it's got a very good level of detail and is overall very readable with just the right amount of snark. :)
for impromptu breakin' sessions?
I have vague memories back in 1990 of a superman arcade game in a pub broadcasting the games image to my black and white tv with an antenna in a different room. Not HDMI but the concept is there.

There's a reason the FCC has RF standards otherwise there would be anarchy...anarchy I say!
It's helped me stay informed more efficiently, so planning to make it available to others. Join the waitlist if you'd like to try it out!
Their intelligence is clearly artificial
as a devop a shared account mixing private and business? would be a security breach if you ask me
There needs to be a new PL word for languages that work side-by-side (SxS?) with a legacy language. Not to replace it but coexist peacefully.
TypeScript, Kotlin, Swift and even C++ are all great examples of SxS languages.

Carbon could be a great SxS language with enough inertia building up over time: still never aim to replace C++ (a fool’s errand) but always work in conjunction with large C++ codebases.

It’s such a great pleasure to write things in TS while always being able to use mix-match JS libraries and tooling and debugging. I hope Carbon achieves a similar result moving the industry and engineers forward without resorting to “languages are religions” tediousness.
It's not possible to detect the presence of Vimium.

https://github.com/philc/vimium/issues/2399
List of Oldest Documents
I.e. when they graduated from slaves to palace coups, they weren't slaves anymore.
I used vimium to get here and to type this messsage!
It did, AWS alerted them on the traffic. It reads like they ignored it and when investigators later started going over that data it jumped up and slapped them.
Does this breach mean that LastPass effectively "transforms" 2FA into 1FA?

Because the attacker did not need a separate __physical__ MFA (2nd F) after collecting the master password (1st F).
We're reminded that cloud services are ultimately someone else's computer. Putting one's secrets someone else's computer under the marketing of convenience is just that.

This is not just to do with LastPass. It doesn't make sense why one would put their personal, most valuable passwords in the hand of another party. Of course, it's handy on a team between people.

When it comes to our bank accounts, do we trust someone like that with the pin numbers to our credit and bank cards?

One positive that comes out of this is that it raises awareness of thinking about the difference between security and convenience to manage one's own passwords.

One solution? Locating a zero, or no knowledge file storage system which is encrypted at rest and transit and placing your own files on it is the first start.

Spideroak used to fill that slot nicely (not sure if it's available anymore), and others I have heard about are sync.com and syncthing which do this just fine. Are there any other solutions that would be reasonably teachable to the average user?
Your second bullet isn’t what the paper says. It says that the model’s accuracy under in-context learning from the meta gradients is similar to manual fine-tuning with back propagation (under some surprising constraints in the name of “fairness”). The language model isn’t implementing anything, you have the directionality wrong.

GPT models are constructed with pretrained gradients which are applicable in a large set of situations. It’s just an optimization technique, albeit a clever one.

Quoting from the paper:

In summary, we explain ICL as a process of meta-optimization: (1) a Transformer-based pre- trained language model serves as a meta-optimizer; (2) it produces meta-gradients according to the demonstration examples through forward computa- tion; (3) through attention, the meta-gradients are applied to the original language model to build an ICL model.
I've never used them, so have no opinion on that.
I’m sure there is a real name for this, but I tend to call it a “Document of Intent”. It isn’t meticulously trying to explain every nuance, it’s a coarse treatment of the purpose of things and what they’re meant to do.
I’m supporting a $30B companies ERP migration to S4 as a Client Partner providing project support and this resonates. Two years in, the program is so f’ed, morale is so low, the project plan and execution is so terrible, it’s inconceivable how a company can exist with so much pervasive dysfunction.

Go live is May. No chance that will happen. So many defects they can’t keep track. No business processing mapping or desktop procedures beyond L1. No data mapping. No requirements were ever submitted. Still processing change requests in UAT. Controls are laughable and do not meet PCAOBs criteria for completeness and accuracy. Still missing and adding reports. And a dozen other concurrent technology implementations happening in parallel with interdependent integrations that depend on this go-live, with the legacy platforms discontinuing by end of 2023 that will leave the business incapable of performing critical business processes.

None of my consultants want to be on the project. They think it’s professional suicide to be apart of a train headed off the cliff. I am still in disbelief and am hoping that somehow I will gain a unique wisdom by sticking it out and watching them pull this off. Or it will be a spectacular apocalyptic disaster that will make for a great story.
What does well documented code look like for you? For me if I look at a new (webapp) repo I start from the controller level and look at the services and models. Would a good swagger page count as good documentation? My worry with documentation is that it can lie but the code doesn't.
Your local style guide can’t override this?

Just turn people loose on your codebase without supervision and be really surprised that the hackers make off with your data?

You, sir, are arguing from bad faith as your obvious mission is to promote “rust in all the places”.
> Once you understand lifetimes well C++ is a joy to write.

Well, so is Rust. You even have usable macros and templates that are't cancer to write.
back when videoing theater screens for making bootlegs was rampant, we used to talk about installing IR LEDS in the projection screens to ruin the image of the camera's recording. nobody felt the expense was worth it, and the trend became obsolete when ripping blu-ray quality sources became easy
They carry it up. I'm not joking.

https://www.city-journal.org/deconstructing-new-yorks-buildi... (ctrl+f crane)
Follow-up studies looked specifically at erythritol (i.e. not a fishing expedition) and at-risk populations (i.e. it's not that people prone to cardiovascular disease are more likely to use the stuff). Still observational studies but enough to suggest caution in at-risk populations maybe.
But the power costs of the less and climate control overwhelm these benefits
We use bootstrap for layouts. I think you're going to need to write some special tooling if you want to migrate hundreds of forms to the web. Maybe load a form, generate a component tree, dump to json and then try to generate devextreme forms with that information?
The whole point is this stuff isn't contracted out.
What's the story with VAAPI AV1 encoding? Does it exist anywhere or not yet?
If your company uses something like Duo they still can do some security posture on mobile devices like prevent rooted/jail broken devices or have a minimum iOS/Android version.

It’s also possible that the stuff mobile devices can access are walled off from the internal network with a DMZ or firewall.
And neither of them are aligned with actually moving the most people with good quality service. You only get that from semi private entities like the various Japan Rail.
I thought this style of artwork was quite common in the 90s in the corporate world?
It's a blog post. It has a breve and light tone. There aren't many ways to make it more casual. Perhaps a tweet?

Legal threats shouldn't be made this way, especially by a government toward citizens.
The gameplay wasn't novel in PUBG. Battle Royale games (mostly from the same Brendan Greene) were a thing for years before that, and they were massively popular, enough to set the hype train running. The only relatively novel thing compared to the previous games was their solution to the teaming issue, as they separated solo and team modes.

What made the game go viral was their marketing strategy - they were one of the first who bought Twitch streamers en masse, and paid a lot of money for that. In fact they triggered a gold rush of a sort with everyone doing it. This isn't to say that the gameplay wasn't good - it absolutely was. But the viral growth wasn't due to that, without marketing it would have been just like the other Greene's games, maybe a bit more popular, but surely not 3 million simultaneous players popular.

And before PUBG, he proved his design viable in the original ArmA Battle Royale mod, in the H1Z1 Battle Royale game mode, and in a myriad other games in which the devs suddenly added battle royale modes - in other words, on another platforms.

PUBG was iterative, it didn't happen overnight.
These sites are super scummy, but it does feel a little like the author is being willfully ignorant. I don't know why he didn't dispute the charge/request a chargeback.

Also, I went to the site, and here's what I saw:

First, you get a list of tickets to choose from. There is a small but clear "ea" under the price: https://i.imgur.com/erAV4W7.png

Then, once you select "buy", the order summary clearly says "each" or "x4" every time the price is listed: https://i.imgur.com/58N6Fne.png

Once you select a method of payment, the order summary looks like this: https://i.imgur.com/IFfvVwC.png

For the record, that says "total charge" in bold with the exact total amount you pay.

And before the place order button is: https://i.imgur.com/y2K4LrF.png

Unless that amount is somehow a lie, I'm not sure how this is misleading. It is very clear what the total, final charge is, it says it in multiple places, and it is consistent.
This reminds me of how German employers are legally required to offer at least a month (20 working days) of paid vacation a year, and many choose to give 25-30.
it's amazing how uncommon this is in the big business world. Individuals have pride, cogs do not. I've been in both camps. Currently I'm a cog because it's better for my life at the moment. I'm frustrated by the lack of simple documentation - but at the end of the day I'm not really interested in fixing it.
Ask HN: Market leaders not providing useful APIs and force devs to scrape? why?
In my next life I think I will do this. I decided to get married and have kids, so this one is mostly spoken for---but next time round I am doing the sabbatical thing.
For anyone that had been deep in LastPass with passwords, I recently switched myself and convinced my family also. We switched to another [read recommendations] online centralized password manager. It takes a couple hours of your time-off; totally can stream some whatever show in the meantime to pass the time.

One benefit is that it made me audit my online accounts -- I removed many.

So: Be prepared to switch if you want this type of service. New normal.
Not sure what you mean by lazily but in general this sub-optimality can't be fixed by joining relations 2 at a time. You need a different algorithmic step that takes > 2 relations and joins them "column by column". That's why you need new "multiway join operators". So you cannot just use existing join operators in a traditional system and fix things.

For the latter part of your question: Yes, there is at least on RDBMS, Umbra, that implements wcoj's. I have a pointer to it in the blog post. Although, I'm convinced eventually many GDBMSs will integrate these algorithms, whether RDBMSs will broadly integrate these is less clear to me. The reason is not whether it's doable or not. Every DBMS, graph or relational, is relational at its core, in the sense that they compile high-level query languages to joins, groups by, filters, scans etc. In fact wcoj algorithms were invented assuming a relational system joining multiple relations. The reason is whether they care enough because wcojs are primarily for "cyclic joins" and they don't appear too often in traditional olap workloads, which are aggregation-heavy. Cyclic joins are more frequent on workloads on GDBMSs (e.g., finding a clique of users to develop a recommendation engine). So these algorithms are more critical for GDBMSs.
Mhm I'll definitely look over SSO and talk to the team about including it in the lower plans as it would definitely be useful for smaller teams as well.
All digital cameras are in "ir mode" point your TV remote at your cell phone camera and press a button on your remote it will light up on your screen.
I know we (WorkOS) have already chatted with you about SSO, but reading this comment I'm realizing we should really also chat about Audit Logs too.

We recently built an entire product to make it insanely easy to offer enterprise-grade audit logs to your customers. Plus it includes strongly-typed event payload schemas and log streaming to 3rd-party SIEM vendors. Super fast to integrated with pay-as-you-go pricing based on volume. Vercel and others are using this.

https://workos.com/audit-logs

I think we have a shared Slack channel set up with Infisical so feel free to DM me there. You can also email me direct: mg@workos.com. (Same goes for anyone else on HN needing this stuff. :))
It is true that the "ea" on ticketsales .com is smaller. I opened up the inspector and the price for a ticket is at 14px and the "ea" is at 8px and since the price is numerical while "ea" is lowercase the actual size difference seems even more drastic.
That's awesome. You're living my dream.

The App Store is so competitive nowadays though. Any advice for newcomers? (without giving away your trade secrets). How did you come up with your app ideas?
They laid-off the dogs? Those monsters! I can not condone that. People have a much better chance to find another office to work in. Either way, terrible situation all-around.
> Davis’ star has risen steadily since he came to Twitter as part of Musk’s transition team last year. In December, the Information reported that Musk tasked Davis with cutting $500 million in costs; instead, he cut close to $1 billion — all while sleeping in the office with his partner and their newborn child.

Get your newborn on that grindset, bro!
That’s cool. As an old school unix sysadmin that’s aware of the “containers don’t contain”, people ditching proper isolation for containers everywhere for performance reasons has been alarming. now with Firecracker we have isolation and performance.
Fun fact of the day: ffmpeg is written by Fabrice Bellard, who among other impressive things, wrote the JS PC emulator capable of running windows 2000 in a browser over 10 years ago that got me fascinated with emulators in general.

https://bellard.org/jslinux/tech.html
There are market gardeners making a living with 2-5 acres and a bit of open source DIY tech.
It depends what the billing specialist and charge master for the hospital say, and how much they think they can ream you.

For example, I got a bill for my Covid booster ($42.50) and Mpox ($67) vaccine, yet apparently my state considers this fraud, as the vaccines are supposed to always be free to the patient, regardless of insurance status or citizenship.
Demands on corporate boards are more intense than ever
Pretty much, limiting mfa options to otp only. Then the attacker getting access to customer shared secrets means they basically just have to guess the master password.

>Backup of LastPass MFA/Federation Database – contained copies of LastPass
Authenticator seeds, telephone numbers used for the MFA backup option (if enabled), as
well as a split knowledge component (the K2 “key”) used for LastPass federation (if
enabled). This database was encrypted, but the separately-stored decryption key was
included in the secrets stolen by the threat actor during the second incident.

Unless I am misunderstanding this, they mention to business users the need to reset shared secrets from OTP providers.

>For users of Duo Security, Symantec VIP, RSA SecurID, or SecureAuth, regenerate the shared secret for each respective MFA solution and paste the new shared secret into the respective MFA app configuration in the Admin Console.
There's no getting around it. Are you going to invest in the guy trying to sell his engine that runs on water? He's not in any reputable channels either. Maybe it's suppressed by oil companies.

I think it's good enough to rely on the fact that the world has a lot of people in it, and there are more than enough people, not even including the idiots and misguided, but more than enough provably rational people who just have decided it's their hobby or even their vocation, to investigate even wacko claims, purely for academic reasons without necessarily caring about the claims themselves. They will bring anything worth our attention to us. Maybe we are all one of those people on occasion or on specific topics. To me that is quite sufficient way to allow for the possibility that someone did actually discover a way to burn water essentially like gasoline.
Thank you so much!

I wrote it in snatches of time nearly always late at night, so the snark just...happened. I was worried how it would be taken, so thank you for the encouragement, including about the level of detail.
This is completely unheard of for any company with any level of security. I’ve worked for 60 person startups that wouldn’t allow this.
This sort of hand-waves the core issue we've always had, which is that it's too error-prone and annoying to set up self-hosting. That, and that alone, is why it's still only done by enthusiasts, no matter how much technologists would like it to be otherwise.

Until it's as easy (and cheap!) to self-host as it is to sign up for an account, self-hosting will remain a niche.
Receive AWS Billing Reports on a Slack Channel in real time without code
It takes me a few minutes to build a notification system, and AWS bills can be synchronized to slack or email in seconds.
Version control feels like it does require some complexity though. I think we all like to imagine that all it does is stores changes per file, wrapped in commits.

But when you add requirements like merging other people’s work with yours, movable “tags” to mark named versions, and the sort of cut/splice/move around operations you will always need because you accidentally did something you shouldn’t have… I think you end up rebuilding most of Git’s plumbing.
I'd say the difference between "get paid less" and "go to zero immediately" is pretty large.
That’s absolutely no better.
Agree with the iteration variable being far from the iterated structure.

Also so many special characters for such a simple construct! While I do like {} languages, this has () || {} whereas e.g. Rust would only have {} in that case:

for x in xs {}

However, Rust's zip is much more cumbersome:

for (x, y) in xs.iter().zip(ys.iter()) {}

A bit more reasonable with the zip function:

use std::iter::zip;
for (x, y) in zip(xs, ys) {}

You still need the () to match the tuple. Would be cool if that wouldn't be needed. And it still removes the connection between multiple iteration variables and their iterated structure. hmmm
I think the point is that all of the users of Lastpass whose passwords were put at risk through this one breach. Using Lastpass means that a single, high-value target is now an attack vector that can affect you. If you keep it offline yourself, you're not likely to be a high value target, and you won't have to worry about the 3rd party with your passwords being compromised.
> but if you're long timer deep in the system you'll realize that "rules are rules" is only true for the little guy

Is there anywhere this isn’t true? The later bit (which I haven’t quoted) about corruption of politicians and courts might be less true in other locations, but it’s certainly a lot easier being wealthy.
> For example, if rights were invented by the government, there would be nothing about slavery that was wrong.

Slavery (or it's near equivalent: peasantry) was not considered unnatural for the vast majority of human history, really up until modern era. As horrible as it was, it was also the basis of many feudal economies the world over, and it probably powered societies through the dawn of agriculture, so at least 10k years. Prior to that, hunter gatherer groups also raised other groups and took slaves.

Industrialization had more to do with slavery's eventual decline than any idea that it was unnatural.

This is reflected in the areas where it ended earlier due to earlier industrialization (England, the Northern States of the US) vs where it ended later due to a persistent preindustrial agrarian society (Russia and the American South).

What is inherent in humans is the capacity for empathy and the ability to mentalize about another human's experience. That can lead to a belief that slavery is wrong, but that belief is in battle with the desire to exploit other humans for your own gain.
The part where they tell you the driver has been carefully vetted and they haven't been?
The bfcache doesn't just store cached resources like static files but the entire javascript heap. It makes back button action instantaneous.

I've observed the effects on both Firefox and Chrome and it's like day and night.

On chrome you can even test it using Devtools > Application> backward forward cache
It is such a swiss knife kind of tool, there's just almost nothing it can't do when it comes to video, audio and image modifications.

I wonder how many big companies uses it "in secret" that we don't know off, or distributes it with mentions buried deep underneath usage agreement.
One of my measures of a good programmer, is the ability to grok, debug, and extend code written by someone else, regardless of its perceived quality.
> Gas pumps don't get slower the closer to full you are

Actually (and pedantically) some here do. Just as you approach full they will drop back to a slower pumping speed for the last few drops.