skysight-inc/HackerNews huggingface dataset:
For some (myself) the right shift key is the main shift key; so doing away with it would be terrible. Typically holding it down with the right pinky while typing full speed ahead, as well as single movement stroke patterns for <>{}?"+_ and so on, so heavy on all caps C snake case type use (if that makes sense.)
You can get coverage working for almost anything by having each test convert its coverage data to LCOV before stopping, in the same sandbox as the test.

I forget the exact details but I think you can do this with a custom run_under test wrapper used during coverage. The wrapper runs your test, with whatever custom coverage system you have, then afterwards it converts to LCOV. Sometimes this might require updates to language specific rules because the test runner itself needs to be configured.

The bottom line is that Bazel upstream does not put a lot of attention into this, so it’s under developed outside of Google, because Google internal does not use the OSS rules.
Serverless WebAssembly for Browser Developers
The problem isn't that laws are being enforced. The problem is private institutions are enforcing extra-legal penalties on legal activity.
Twitter Blue subscribers will be able to hide their checkmarks to avoid shaming
There's a reason that punctuation marks in legal documents are generally supposed to be ignored. Drafters should write in language that is unambiguous even if all punctuation marks are deleted. My will, for example, contains no punctuation other than full-stops.
MDMA and Psilocybin have shown fantastic efficacy. Look up MAPS Trial for efficacy data, it's about as close to a magic pill for PTSD as one can imagine.

"MDMA was found to induce significant and robust attenuation in CAPS-5 score compared with placebo (P < 0.0001, d = 0.91) and to significantly decrease the SDS total score (P = 0.0116, d = 0.43)."

A p-value of 0.0001 is extremely good.
[1] https://www.nature.com/articles/s41591-021-01336-3
Doesn’t work. Try again
Bob's Red Mill is my favorite example. And their products are very high quality.
There's a few reasons I wouldn't worry too much:

1) Nation state level actors can probably insert or compromise high level staff, or multiple high level staff, at any given company, and perform MITM attacks fairly easily. And some could compel turning over your code or secrets more directly anyway. Not worth worrying about this scenario: nobody working on anything truly sensitive should be using any externally hosted (or even externally networked) repositories.

2) It is much more difficult for other actors to do a MITM attack, and if they did, they'd probably have access to your code more directly.

3) Your code actually isn't worth much to anybody else. Imagine someone launching a complete clone of HN or any other site. Who cares? Nobody. What makes your code valuable is that you have it, and that you have a network and relationship with your customers. If somebody stole my company's codebases, I'd feel sorry for them, that they are going to waste any time wading through these useless piles of shit. The only potential problems are if secrets or major vulnerabilities are exposed and provide a path for exploit (like ability to access servers, services, exposing potential ransomware attacks).
I don't understand why it would write in assembly. That is not portable and it makes verification difficult and also assembly has less grammatic structure which LLMs rely upon.
> A well regulated Militia being necessary to the security of a free State

The second amendment protects organized armed resistance against state-level tyranny, whether external or internal.

Can't have a militia of one.
To me looks like the era of standard aspect ratios ended some years ago and the new standard is varying aspect ratio and notches or holes somewhere
Since the IOPC wouldn't exist for another four years, I'd imagine they didn't handle it at all.
Modern API Development and Deployment, from API Gateways to Sidecars
Show HN: Free time tracker that works in the browser
As well as the super-upvoted PR to change the model license to Apache 2.0: https://github.com/facebookresearch/llama/pull/184
How about just putting a shot of alcohol in it with the water?
What I expect has happened here is that you've remembered that your HSM comes with instructions for how to use PKCS11 to make user authentication rely on the HSM and you've just assumed that's relevant here. While I'm sure the vendors make it seem like this is all very secret, it's just a pretty boring C library and it's probably half-arsed in real world implementations.

AIUI OpenSSH does not provide any way to use PKCS11 to protect host keys, which are the concern here.

You can use PKCS11 to sign OpenSSH certificates, so if GitHub had elected to use certificates here, it could have protected the CA keys for those certificates in an HSM, but it did not.
Yeah, check out the audiobook, it is great and was worth the wait. I have the physical book but it has so many pages and is so heavy that it is hard to hold and read, especially lying down. It probably should be sold in a box set.
For me, there are a couple YouTubers I watch: “Ukraine Matters” and “reporting from Ukraine”. Or “William Spaniel” though he’s more of a strategist and only updates once a month or something. (I personally wish Spaniel and Asianometry would collaborate on you name it.)

I also periodically search/look for interviews with Stephen Kotkin or Michael Kofman in them.

Also, more mainstream, the Economist has coverage of it in every weekly publication of theirs.
U Texas football had tailgate parties that got sponsorship from several big named beer brands, hot dog companies.
You will need to maintain MS Build files alongside the Bazel definitions. In theory the MS Build files can be generated from the Bazel definitions but someone has to write that tool.
Watching TV on a screen where black is so bad that letterboxing is not an option
How The New York Times managed to avoid ruining Wordle
SOC isn't very strict either, it's more opinionated and allows more leeway with auditor standards. The CSA Star CAIQ is open and free, but it doesn't mandate HSMs (https://cloudsecurityalliance.org/artifacts/cloud-controls-m...). ISAE is a precursor to SOC 2 (ish). The only one of these that I'm not familiar with is "FedRAMP Tailored LiSaaS ATO".

As the adjacent commentor 1970-01-01 states, PCI DSS is actually pretty strict and requires use of HSMs. However, that level of PCI compliance is only required for institutions that actually handle the full credit card number. GitHub uses Stripe as a payment gateway, so they don't need to meet it.

FIPS 140-3 levels 3 and 4 often are met by using HSMs, but technically speaking there aren't any standards that I know of that exist outside of the payments industry that have hard requirements for HSM use for all cryptographic key media.

I think the unfortunate reality is that many organizations struggle to deploy HSMs widely for all cryptographic media because they aren't very scalable and deployment can lead to other operational constraints that many companies can't or won't deal with. It's much easier for low-frequency high-importance tasks like signing new releases of OS images or packages, rather than I/O heavy high-frequency operations for a site like GitHub.

So, in-summary, look for PCI DSS or FIPS 140-3 Levels 3 and 4, but, be prepared to discover that "creative" solutions may let a company meet even the highest levels of FIPS compliance without HSMs for all cases.

I know it's sucky advice, but for ISO in-particular, I suggest just acquiring and reading 27001 if you want to use it as a basis for decision making. It does offer a lot, and I think it's a very well-written standard, but all of the implementation advice is in ISO 27002, and it's not required. The advice in 27002, when used to meet 27001, leads to a very compelling program. But a 27001-compliant org can completely forego 27002 and DIY it as long as it meets the test criteria set-out by the auditor.

Edit: Also, every auditor will include standard disclaimers in their report that they perform sampling-based testing, and that the testing is not a complete guarantee of the state of the company. ISO in-particular is performed by getting an initial audit, followed by two years of surveillance audits that test the entire suite of controls. But due to sampling-based methodology, something can be overlooked or evidence can be provided that doesn't holistically reflect the org in all cases. If it's any consolation, this particular issue will certainly be in their audit for next year, as a security incident and probably lead to an opportunity-for-improvement from the auditor.
I am fairly certain nobody in his right mind would want to fly this thing under its own power. As a glider, sure.
Oh, a lot of reasons. For one, I'm a data scientist and I am intimately familiar with the machinery under the hood. The hype is pushing expectations far beyond the capabilities of the machinery/algorithms at work, and OpenAI is heavily incentivized to pump up this hype cycle after the last hype cycle flopped when Bing/Sydney started confidently providing worthless information (ie "hallucinating"), returning hostile or manipulative responses, and that weird stuff Kevin Roose observed. As a data scientist, I have developed a very keen detector for unsubstantiated hype over the past decade.

I've tried to find examples of ChatGPT doing impressive things that I could use in my own workflows, but everything I've found seems like it would cut an hour of googling down to 15 minutes of prompt generation and 40 minutes of validation.

And my biggest concern is copyright and license related. If I use code that comes out of AI-assistants, am I going to have to rip up codebases because we discover that GPT-4 or other LLMs are spitting out implementations from codebases with incompatible licenses? How will this shake out when a case inevitably gets to the Supreme Court?
Well. Those Q's are part of answer from RWKV.
I think USB4/TB3 was a huge box for the latest gen AMD mobile platform. Can't speak for others, but I'm generally docked with power over TB3 at home, and when I was in the office before. It's the one thing I wanted out of AMD that was missing for general use. Glad to see it here.

Definitely going Framework for my next laptop in a couple years... really tempted to get one sooner than later and pass down my M1 air to my daughter.
I think you misunderstand my comment as an appraisal of crime, or something. My point is that wealthy financial criminals get off the hook way too freely, and that this is the injustice (relax, I'm not the justice warrior you think I am).
World is way better WITH internet than it would have been without it. Hackers and scammers are just price to pay.
https://kosmoschain.com/kosmos
In terms of the specific, very low, multiple you're of course right - a dating app is an extreme.

But the overall principle that you should expect the discount to reflect their estimated lifetime value of a customer unless the amount is high enough that the investment return can exceed the regular income. With the exception, as noted by conradfr, that if someone suddenly offers a steep discount it could reflect an attempt to raise expensive capital fast

Assuming you're aware of those factors, it's a useful way of gaining insight into customer retention (assuming they're competent enough to run the numbers...)
Remind HN: Unplug, take a break and go outside
Climbing the vertical big wall learning curve of tech progressions can be overwhelming and exhausting.

I just wanted to remind remind myself and other's on here that we can collectively progress faster by letting our minds and bodies recover from these weeks that feel like decades of progression.

I'm unplugging, taking a break, getting outside and I'd love for you to join me.
Former commerce dept. official: no line to be drawn in tech war with China
> That's because the economics are a scam.

No. It means there is someone in China who is willing to do the work cheaper than someone in Europe. If you beleieve they should be paid more for the same work, then great give those people money so they have the option of saying no to the "explotative" work.

But the idea that other people should not have the job because it isn't fair, is what kids would these days call "peak white supremecy" [TM], i.e. Europeans don't have the right to a job any more than other people in the world do. Historically they've ensured this through colonialism and war -- everyone around the world has done that. Now because of technological advancement a poor villager in China has the opportunity to say yes I want to do this work and take that job away away from his European counterpart. Are they getting off worse than the Europeans? Absolutely but it is better than being even worse off. If you want higher wages for them pass a law that bans Europeans from doing the work and I promise you wages will rise in China.

> You can't compete on wages when everything is asymmetrical.

You can't because what a European worker demands from others around the world is more than what a Chinese worker demands. This is both in terms of relative purchasing power in the country, and between countries.
Kobold, a new web UI crate with zero-cost static DOM
So, are you saying it's not clear cut...
That decision was always baffling to me. Basecamp is such a UX nightmare even Jira looks good next to it...
I used Earmaster a few years ago. It is not free but it covers everything from sight singing, which works fairly decently, to rhythm detection/dictation, chord detection, melodic dictation, interval training, etc.

It was a ton of practice and for me not very fun. I already knew quite a bit of theory but after putting in the work it's helped a lot. Prior to this I had only done some sight singing, basic interval training, and some basic chord progression detection.

I can pretty much play close to instantly anything I hear in my head. I can also play anything I hear in real life as well, almost, if the music is incredibly fast or complex I might not remember it well enough to do so. Even if I can't play something I hear though in real life I can break down the higher level parts and structures pretty quickly at the very least.

Either way, if you're new to this or don't want to pay for software since you can probably do a lot of this for free, I would definitely start out with sight singing. It'll speed up learning intervals and melodic dictation much faster than if you don't learn how to do it.
It seems like these consulting firms are going to slash anyone who isn't billable. As long as you're able to bill to a client, feel like you're safe?
There is only 1 question here.
I'm unfamiliar with this meme that "woke" is a made-up term. It's absolutely not a made up term. It's a term in use since the 1930s by African Americans that largely matches the Desantis counsel definition above: there are systemic injustices, and they should be recognized and addressed. Its _definition_ (or lack thereof) when used as a derogatory term by conservatives complaining about all manner of things is what's often criticized (and memed) by the left.

Your follow up examples, I think, corroborate this point. It's basically word-salad with no clear definition. Is it political correctness? Identity politics? CRT? Defund the police? (all things conservatives also tend to be unable to define). Is it an incitement to revolution? To shake (destroy?) the foundation of society? This deliberate obtuseness is by design, and you see it in this rant: to paint people who'd like to make society slightly better as radical reactionaries wanting to level society. It's obviously ridiculous and would be funny if it weren't so frighteningly effective at scaring the shit out of otherwise intelligent people.

(Edited to add: another major problem I've noticed when talking about these things is conservatives tend to treat random Twitter users as representing some monolithic "the left", rather than some random dipshits on Twitter, whereas progressives tend to treat elected conservative politicians in-power as "the right" when criticizing them (e.g., referencing Ron Desantis instead of "they" or "these people", talking about people on Twitter).
Is IA something different from AI? Or maybe just the French version ("intelligence artificielle" I imagine...)

My feeling is that a lot of Meta's AI/ML work actually ties into the AR/VR long-term dream. How do you make the so-called metaverse alive? By having people design it themselves. They're not going to do that in Maya, that's for sure. But if they could create virtual spaces and virtual people with Holodeck-style natural language instructions...
> Even now it's a cinch, in 20 years it'll be so easy that if any text or video has any public exposure it'll be copied by consumers as a matter of course—copyright holders bedamed. (Think Google Glass—like tech that captures everything a human sees in high definition. If a human sees it then it will be copied automatically. Right, copyright is on the wall without major reform.)

That is, until your phone apps start scanning works automatically to detect copyrighted material before allowing you to store it on their cloud-storage
I would not love wearing them. I waste a significant amount of money on contact lenses each year for the privilege of not having to wear anything on my face.
I think you have a very narrow view of software development practices. In most companies I've worked at, most tickets are created by the QA team, few of whom have ever seen the source code and there's no reason why they'd ever need to.

They raise a ticket about the problem they encounter, and then other people triage it and try to find a way to reliably repro the issue, and then it gets passed to the development team when there's something actionable.
I am banging my head against a heisenbug. I wrote the code that works yesterday. I spent a lot of time rewriting it a dozen times. Now I am back to the original and it works for unexplainable reasons. I doubt that a chatbot could have sped this up.

I envy the people who are bottlenecked on their typing speed and benefit 10 times more from the chat bot than I do.
Eudora Pro.

Wow, that's a blast from the past.
Funny, but I actually discussed this with my therapist. He asked me where he can try out the AI shrink and was impressed by it. He's on board!
I don’t think you’re right to put Awk into the one-liner category. It actually scales up remarkably well to a couple hundred lines or so, as long as the problem does not strain its anaemic data-structure capabilities.

Compared to straight Python (i.e. not Numpy/pandas), it can also be surprisingly fast[1]. I experienced this personally on a trivial problem: take a TSV of (I,J) pairs, histogram I/J into a given number of bins. I can’t remember the exact figures now, but it went like this: on a five-gig file, pure Python is annoyingly slow, GNU awk is okayish but I still have to wait, mawk is fast enough that I don’t wait for it, C is of course still at least an order of magnitude faster but at that point it doesn’t matter.

[1] https://brenocon.com/blog/2009/09/dont-mawk-awk-the-fastest-... note that the original author of mawk has made a release since then, at https://github.com/mikebrennan000/mawk-2, that doesn’t have the crashes I encountered with 64-bit builds of Dickey’s fork
Zuck really thinks he can build the Ready Player One reality I guess.
This is easy to say, but I would argue that it's impossible to know what to level up in; the field is just moving too quickly now.

At this stage, the best advice I could formulate would be to learn LangChain and prompt engineering, but these too are fast moving targets, and who knows what's going to be relevant in 2024?
>and Switzerland as well as far as I can tell.

Where on earth did you get that from?

Armed forces are definitely not a big deal, in fact there's hardly any mention of them in public discourse, no parades or events involving the military, you hardly see them except occasionally you'll see soldiers going to their training on weekends on the train since Switzerland has national service.

There's also very little jingoism or mention of historical military activities. Really, hardly at all. And that's a good thing, and as far as I can tell that's how the Swiss like it.
Anecdotally, it’s one of the main reasons I got one. Aside from work things that require Windows, it can run plenty of PC games. Especially when combined with an external GPU via Thunderbolt.
Rob Roy's Glacier, ShotoniPhone
> How can openssh documentation be vendor-specific?

I isn't, because the cryptography is (in case of HSM) not handled by OpenSSH itself. So OpenSSH's configuration has nothing to do with the HSM.

Usually, the actual cryptographic functions are not performed user-space, but handled by the kernel, which in turn can offload this to dedicated hardware. Basically if you compile OpenSSH for it to use kernel level cryptographic function, then OpenSSH can work with a HSM without it even knowing it.

Disclaimer: this is simplified explanation, there is a lot more to this, and I am by no means an expert on this matter.

Edit: meant to say kernel level cryptographic functions, not TLS.
Yes, if 95% of white collar professionals are put out of work, there will be so much competition for the trades that their labor value will be destroyed as well.
Could just be a small typo too
Tk debuted in 1993, so I presume Tcl's event loop features were in place by then.

IMO Tcl would have been a vastly preferable choice for a browser scripting language. Text is its native data type, and would have minimized impedance mismatches with other functional areas of the text-based HTML/HTTP environment. Also it would have been far easier for newbies to get started with web script hacking. At the time JavaScript seemed like alien algebra to a lot of non-computer science majors.
It sounds like when you say "theory" what you mean is sight-reading. I'm not aware of any tools but there must be lots of options online. I learned from books and it's just a matter of practice.

There are lot of music theory books that I can recommend, but it sounds like your class has you covered. Sight reading is like learning to read a spoken language. You just need to do it every single day and it will come with time.

If anyone else is interested in books that I would recommend for theory:

- Elementary Rudiments of Music by Barbara Wharram (a good intro book)

- The Jazz Theory Book by Mark Levine (this is my "theory bible" and, despite the title, is not limited at all to only jazz music)
BitTorrent is the answer for these cases. This is just an observation.
IMO it highlights just what a commodity they weights are. If all one needs is the weights to reproduce the work, then where is the value? I mean there is very little moat here. Further, what does it say about consciousness and individuality if we all are simply the values of the weights in our wet neural networks? Or whatever the biological equivalent is?
Another casualty on the road to Reddit's planned late 2023 IPO.

I hope old.reddit.com sticks around, because I still enjoy a few communities on reddit. But the platform rot has been evident for a solid decade now. I sometimes wonder if we'd be better off if Reddit pulled the plug on old.reddit.com and all us old-timers finally abandoned the site for forums.
Sorry - I should have been more clear.

Their examples compared the A* CPU performance and the repo includes Swift only code samples. But they’ve also made it possible to use them with traditional tooling (torch, huggingface).

Hope that helps explain it.
Microsoft is a pirate boat of lawyers.
A combination of food and white noise, a hypnotic app
They very clearly labeled it as AI generates and “purely speculative.”

With that amount of transparency, I have no problems.

It’s like a drawing.