skysight-inc/HackerNews huggingface dataset:
Everytime "System UI" is mentioned on HN I feel obligated to post this: Be careful about it.

The intent of "System UI" is great. However, the actual implementations across multiple platforms and especially with different international languages, not so much.

The main issues are:

1. On Chinese and Japanese Windows, it would end up using MS Yahei and Yu Gothic UI. The former isn't optimized to show English-only (or Latin alphabet only) content, while the latter isn't even suitable to display Japanese content, let alone English ones. As the name suggests, it's intended to be a "UI" font - it's extremely narrow to accommodate long Japanese characters in UI elements such as context menu, button etc. You're supposed to use "Yu Gothic" to show normal text in Japanese.

And because these two fonts are unicode (include almost every glyphs), it won't fallback to other fonts either. English Windows does not suffer from this issue the other way precisely because its default UI font, "Segoe UI", not only great to show English characters, it also does not contain any CJK glyphs so these would fallback to proper fonts.

2. Unlike "sans serif", system-ui overrides "default fonts" that user can tweak in (any) browser settings. Users can even change fonts for each written script/language to make they have the fonts that suits them best too (and browsers usually have sensible default for them). This means you can use <lang="ja">, <lang="zh">, <lang="en"> to specify language of HTML elements to ask the browsers to use specific fonts for each language. System-ui overrides all these: once you have assigned "system-ui" it will just use system font regardless of any language context. Again, this is particularly bad for CJK users because of problem 1 ("system-ui" fonts have all the glyphs). So end result: Chinese paragraphs use Japanese characters (they're different but have the same Unicode point), and vice versa.

3. In lots of platforms, including MacOS (I didn't test newest version yet), Android, iOS, using "system-ui" will end up using exactly the same font as just use "sans serif" anyway. So it really has little benefit.

One of the only benefit of using "system-ui" is on English Windows: lots of browsers including Firefox and Chrome still use Arial as sans-serif's default for Latin content for backward compatibility (you can change it yourself in browser settings, though). So by using system-ui, on English Windows, fonts would become Segoe UI, which is indeed better. But you can "fix" this without messing over Chinese/Japanese users by just apply "Segoe UI" directly. It does not affect other platform either because they simply don't have this font. Actually, this is exactly what most of major websites (GitHub, SO, Twitter, etc.) currently are doing, after they rolled back from using "system-ui" due to issues and backlash mentioned above. Wikipedia also tried, but they now choose to continue rocking "sans-serif" without any fancy "stack".

(I'm not a Linux guy so feel free to chime in about situations there.)
call me short-sighted but any supposition that involves "the AI wakes up and realizes…" is a complete non-starter for me
I Zelle my kids money all the time and only needed to know their phone numbers.
> As someone who is deeply afraid of their Raspberry Pi, this could be the silver bullet.

To me this is much the same as writing "As someone who is deeply afraid of their computer, this could be the silver bullet." A Pi is just a credit card sized ARM computer - there is no magic, it can run many of the same OSes as any other desktop or laptop, it can run the exact same apps and software in many cases. Thinking of it as somehow different is already a bad way to begin.
Sure, Governments can do anything they want. They can round people up and put them in gas Chambers. I'm just saying it's a bad idea and don't think the fact that the government can do it has any bearing on if it should do it.

With your proposition, I think it would be a terrible idea and reduce stability. I don't see how letting Banks unload bad assets on each other does anything to help the situation. The Bad Assets just follow the customer wherever they go and some unlucky Bank get stuck with them when the customer converts their cash to something like stocks or buys a cheeseburger.

At best, you have just turned bonds into the same thing as cash, defeating the purpose of bonds to begin with. You buy a bond and are paid interest because you can't use it as cash.

At worst it would be chaos. Everyone buys bonds and holds them when the value is good. When the value is bad, everyone forces each other to take over their bad Investments.
Once the linux world moves completely to Flatpak, that would truly help languages like C++ - whose evolution and cleanliness has been tremendously crippled by being unable to have a clean ABI break.
How would I possibly prepare for that? In the face of all that, I'm a leaf floating down the river of history. What would I have done about the Facebook recommendation algorithm in 2016?

It's a sad(?) reality of life our agency is _so small_. We do what we can. But even there, the best we can do is align ourselves to whatever forces of history our out there that correspond to our values. Even "great people" have more often than not been thrust into whatever role they had, rather than single handedly willing something to happen.
> what HOA needs more than $250K in reserves? I'm all for a rainy day fund but I'd be asking for a reduction in dues...

Leftover from suing the builder for improper waterproofing. We're spending that. Turns out retrofitting waterproofing costs a lot of money!
No, you're wrong. Everyone who wants to stay in business and makes money actually does it. Has been my experience in all big companies, it's a business continuity problem /not to do it/.
You can and should run security in the vendored images.
I’m facing this issue of it nagging to accept iCloud terms. Since this is in my work laptop, I don’t want to sign in to my account. This has gone downhill pretty quickly.
The article also explains the person didn't just happen to have his phone number if you continue on:

> When the two Tesla owners met up, the rightful owner of the car Randev was driving told him he’d found Randev’s phone number on a document inside Randev’s car.

Overall the original article linked by jalopnik is better written though.
Hopefully we will be able to find a roughneck crew of drillers who will be able to fly to the asteroid and plant a nuke.
How would GPT be useful for Alexa? I don't actually want to chat with the speaker I just want it to find my keys and set timers
OK, I got it . Thanks a lot, found the right answer with 3rd try :D
>“The unbridled, competitive free markets that the Right cherishes don’t exist today. They are a myth.” Furthermore, “The Left attacks the grotesque capitalism we see today, as if that were the true manifestation of the essence of capitalism rather than the distorted version it has become.”

https://www.cato.org/regulation/fall-2019/myth-capitalism

I’ll posit that this am academic flight of fancy or distinction without a material difference. The fact is there’s no meaningful competition in the American economy, whether it’s called capitalism or socialism for the rich and debt peonage for the rest.
Texas exploring the lucrative side of magic mushrooms
It would be nice if browser offer per-origin encryption of files so that if an exploit at a future date allows x.y.com to access the files of y.z.com they would only be getting encrypted blobs (unless the encryption/decryption API is also exploited, but now we're talking about multiple exploits rather than just one).
And the same seat and correct mirror positions? Sure, it is not impossible, but I have a hard time imagining that one would not notice driving away in the wrong car.
I don’t think a 1-in-600 chance, while less remote than I’d like, rises to a reasonable standard of “may”.

Can we get the title edited?
Elgato HD60X: https://www.elgato.com/en/game-capture-hd60-x

There are cheaper options if input lag isn’t an issue.
The better bet in your case is a Credit Union. Something local and not very large.

They're smaller organizations with far less overhead and no stupid fees for every little thing.

Perfect for just storing money if that's all you need.
How data centers at public pools can keep swimmers warm
Would LOVE to see memepool resurrected!
> The "goal" of an LLM is to predict the next token

That's another common misconception. That statement personifies GPT: GPT does not have goals or make predictions. Those are the effects of GPT: the behavior its authors hope will "emerge". None of that behavior comes from GPT itself. The behavior is defined by the patterns of tokens in the training corpus.

GPT itself has two behaviors: modeling and presentation. GPT creates an implicit model of every pattern it can find between the tokens in its training corpus. It then expands that model to include the tokens of an arbitrary prompt. Finally, it presents the model to us by starting at the location it just added the prompt tokens to, and simply following the most obvious path forward until that path ends.

The paths that GPT has available to present to us were already present in the training corpus. It isn't GPT that constructs the behavior, it is the people writing patterns into text.

> not brute force memorisation or regurgitating training data in various combinations

Not brute force: the combinations are not blindly assembled by GPT. GPT doesn't assemble combinations. The combinations were already assembled with patterns of grammar by the humans who wrote the valid progressions of game states. GPT found those patterns when it made its model.

> to have a world model inside of it that will allow it to predict both the moves a bad player might make, and moves that a grandmaster might make.

There is no prediction. A series of moves is a path carved into grammar. The path from one game state to the next involves several complex patterns that GPT has implicitly modeled. Depending on where GPT starts, the most obvious continuation may be to follow a more complex path. Even so, it's not GPT deciding where to go, it's the patterns that are already present that determine the path.

Because we use the same grammatical/writing patterns to describe "good play" and "bad play", it's difficult to distinguish between the two. GPT alone can't categorize the skill level of games, but narrative surrounding those game examples potentially can.
That's how we get wonderful things like the East Palestine Disaster. Let's deregulate biotech! Coming up next after Shark Week -- Lab Leak Week! Let's deregulate environmental pollutants! You don't need clean drinking water! /s
"Over the last week, three U.S. banks have failed."

Wait, 3? I thought it was only 2 (SVB and Signature Bank).
100% agreed. Donate to cURL!
We have this sort of issue with my mother-in-law (90s). The best thing I did was setup a Chromebook (ChromeOS Flex) with just the basics (mail, photos, etc). From there, we routinely login to the GMail account and remove crap from her emails. It is tough - especially since the world is so on-line (photos of grandchildren, etc). Given the huge disparity between her age and technology, it is extremely important we act as her proxy for her online communications. Privacy be dammed.
Sure if they'd all left their money there then nothing would have happened, but on the other hand, if a company has a large uninsured deposit at an under-capitalised bank, leaving the money there is arguably irresponsible. I don't really blame them for moving their cash elsewhere.
My nightmare story takes the cake. I tried to switch from Google Fi to "visible". I filled out the online signup, got mailed my sim card and when it came time to switch, their sign up website would just point me to a broken page. No problem right? I go to their support. It turns out the support is literally just a chat bot that you have to navigate correctly to finally get to a representative which is just a facebook messenger like window. (No phone support or address whatsoever).

In the end they couldn't figure out why my transfer failed and why I was stuck in limbo. They said they would escalate to their "Technician" who never got back to me.

Doing some research on Reddit I discovered that this is a common issue with that MVNO. So now here I was, never got onto visible while Google Fi is now informing me my service is about to be terminated because from their end I transfered out.

Keep in mind this whole saga took many hours to get to this point. I decided at that point to get away from this MVNO as fast as I could. I call up Google and they said they are missing the pin and some details to initiate transfer back to Google.

Visible says they dont have that data and to talk to google. I had no idea what to do and no one to ask for help so I decided to wait to see what would happen. Would I lose my number i've had for 15+ years? Turns out nope, Google Fi kept providing me service while keeping me in a perpetual state of "pending termination".

I just stuck with them for the time being because I didn't want to deal with anymore headaches. Eventually I tried to sign up for T-Mobile proper and they managed to get the phone transfered.

I've used multiple MVNOs (Ting, Tracfone,That Walmart MVNO,Mint,Xfinity mobile, visible and a few others). They all seem like they are gimped in some way whether it be delayed SMS, slow speeds, but now i've learned that another way they cut corners is with horrendous support and processes. As long as I can afford it, I will stay the hell away from these guys and I totally understand why so many others do as well.
Are we sure that no matter how de-prioritized you are, some data is always available, with reasonable latency? I was just at a large sports stadium last night, and I was able to message my wife to tell her I was on my way home while looking up the best bus to take. I remember that not being possible a few years ago, but I don't know if that's because networks in general have gotten better, or because I'm now paying quite a lot of money for Verizon post-paid.

EDIT: Oh, and I totally forgot about tethering. That can be severely restricted on MVNOs. And, at least for me, I don't need it. Until I need it. Then I NEED it. haha
"I like your taste in internet" – Thanks, I will add this expression to my repertoire.
Sending Slack Messages with Python
And at an early startup, making the damn thing work is all that really matters.

Not if it comes at the cost of making your co-workers hate you for the messes you continually leave behind. And to lose faith in upper management for holding you up to be a "rockstar" for doing so. And for them to start looking for new jobs, as a result.

The optimal level for basic hygiene and defense programming in a startup is -- perhaps a notch or two lower than in a staid, manager-driven post-startup company. But certainly not zero.
I've had tons of friends, family, and co-workers complain that Google Docs' performance is astonishingly shit, and the UI terrible. I know one non-nerd writer who does all his writing in some old-ass version of OpenOffice (yes, not even LibreOffice) specifically because he finds Google Docs' poor performance intolerable—so bad that a giant, slow hog like OpenOffice is much better! For my part, I use Pages, because it's got about 2% the effective impact on my overall system responsiveness, of having a Google Docs tab open, and doesn't have painful input latency like GDocs.

It's free and available everywhere, so you're not imposing on anyone when you share a doc with them. That's the appeal. ~Nobody I know actually likes it. Googlebucks delivering free service is the reason it's dominant. Easy to win a competition by burning cash.

Users would prefer a better product (I'm certain a much better one could even be delivered in the browser—Google's god-awful at writing efficient customer-facing software, especially on the Web) but GDocs wins due to subsidies and network effects. Its winning has little to do with whether customers would prefer native (or just somewhat better in-browser) software.

Native v. non-native, maybe they don't care, but good, yes, they care.
Surprised there's no comments on the URL?

mintmobile.com/unicorn
Smartphone becomes mainly an interface to an AI in the cloud. Doesn't matter if you use an expensive Apple device or a cheap Chinese phone. People stop buying expensive Apple devices.
Flatpak is great! Flathub on the other hand... The app submission process is very convoluted and the documentation is super vague.

Snap is much easier to publish and a joy to use with the dashboard and analytics. I hope Flathub improves their submission system and documentation because it's still a mystery to me.
Flatpak is the reason why people who only used Linux because of Steam Deck can just install the app from the app store, and it works well enough.

And it's actually pretty cool that Flatpak keep improving, even in the past few years. It's not improving as fast as I'd like (I want VPN apps, Lutris controlling emulators, and Native Host Messaging to be working already) but a lot of issues are being worked on and these days they work well enough.

I still prefer to use AUR if I could access it there, and some of the things I do are only available distro-agnostically through Nix or arch distrobox, but Flatpak is absolutely great when it's available and the sandbox isn't in the way.
Is Fastly planning to make their OHTTP service generally available (rather than just to specific deals)?
Same situation I was in with my new laptop, except that I already had USB C docks lying aroud
The government put them out of business for poisoning my food. That's exactly what happened to SVB and Signature. They are gone. Dead. Wiped out. Seized. All the people responsible for mismanaging those banks are now broke. [1][2]

And made me, the depositors, the people impacted by that bad behaviour whole.

Again, what exactly is the problem, here? Which bad outcomes have the changes to the rules produced?

[1] Well, the C-suite isn't, but they are all going to be sued by the investors that lost money due to their bad management.

[2] Once the FDIC finishes picking through their carcass, if there's any value left (Possible for Silvergate), those groups might get pennies on the dollar.
> manually create and specify the entire "system" libraries set bit by bit every time I want to compile (or run!) something is no go.

I don't have first hand experience with nix, but if I would look at this statement from Guix point of view (and I assume nix will be same/very similar), this is not really true.

Nothing prevents you from having a list of libraries (in a manifest). That list might be way to wide for any specific program and it can represent what you would normally have as "system libraries".

You can then just invoke shell as guix shell --manifest=manifest.scm and you will be given working shell with all the libraries available.

You can also just package your program using trivial copy&paste code with the same list. Sure, the dependencies will be too wide, but since you are not sending the package to upstream Guix for inclusion, no one really cares.

So, is it as friction-less as "normal" distro? No (especially the "add to /bin" part).

Is it as bad as "manually create and specify the entire "system" libraries set bit by bit every time"? Also no.
No-Async Async with Python
Show HN: Convert your MySQL database into an open source CRM – IceburgCRM.com
A few months ago I released an open source CRM called iceburgcrm (iceburg.ca). It allows developers to quickly prototype a CRM while providing a sensible default crm using modern languages and frameworks. It's based on Laravel 10, Tailwinds, DaisyUI but mostly written in Vue3.

Today I want to let everyone know about the platform iceburgcrm.com, which provides a playground area to play around with iceburgcrm without having to install a copy yourself.

Convert your MySQL to IceburgCRM: iceburgcrm.com

Get your own copy of IceburgCRM hosted with us.

Upload your MySQL Schema and we will turn it into a CRM.

Connect your MySQL Database and we will turn your tables and fields into crm modules.

Give it a try, experiment and see if iceburgcrm is right for your next project. You get two live CRMs to play with and can delete and recreate new crms.
There's a Black Mirror episode with this plot.
> What failed here is that a group of uninsured depositors did an old fashion bank run.

Oh, there was so much stuff that happened.

You had a bank where the wide majority of the deposits were uninsured. That's quite a major problem.

But then, it doubles down in that those deposits were largely correlated. They increased all together, and decreased all together.

The bank then made sure to double down on that correlation and favor lending to people whose income were highly correlated with their deposits.

Then, when they got a highly correlated amount of deposits, they decided that the risk of a highly correlated change on their funds was low, and optimized for long-term profits instead of safety. (Why? I still don't fully understand this. I was expecting to see one of those "tails we win, heads you lose" games banks like to play, but from what people say, looks like bare incompetence was a very important factor here.)

Then they use corruption... ops, sorry, lobbying to make sure the government doesn't stop them from betting against their deposits and debit repayment being correlated.

And finally, they got all so surprised by a highly correlation stop on deposits (and probably repayments) when withdraws kept going.

That one bank failure was quite a feat, and it's completely unfair to blame it on a bank run.
They did have insurance... They had significant campaign contributions to the DNC.
I attended school with my main job being running Google Ads. $900 check every month. And then there was the money I made off supporting the open source app (which I wrote in Perl) that the website running the Google Ads was for. The site couldn't have been more than a few dozen pages.

Good times.
In case anyone else is curious: https://caniuse.com/native-filesystem-api
Alexa is a complicated rube goldberg machine of ML models. For instance, when asking, "play songs by michael jackson", it runs an entity resolution query to figure out who michael jackson is, and then retrieve his music. There are a ton of systems along the way to solve this. Tons of data pipelines, formatting, autiditing, rules based matching etc. But all of those brittle expensive systems can be replaced by a single LLM.
https://archive.is/5HpVD
Show HN: Introducing Vulert, the Revolutionary SCA Tool
Hey there, fellow hackers!

We're thrilled to introduce you to Vulert, an advanced SCA tool that makes monitoring and identifying open-source vulnerabilities in your software a breeze. With Vulert, you don't need to give us access to your code or go through a complicated installation process. Simply provide a manifest file (e.g. package-lock.json), and we'll do the rest for you in real-time!

Want to give Vulert a try without signing up? Check out our demo at https://vulert.com/abom!

We're passionate about creating a tool that truly helps you, and we'd love to hear your thoughts and ideas. Your feedback is invaluable to us, and it'll help us improve Vulert and make it even more effective for you.

Thank you for your support, and we can't wait to see how Vulert can help you take your software security to the next level!

Best Regards,

The Vulert Team