skysight-inc/HackerNews huggingface dataset:
Trying to wrap my head around Fugue and the comment explaining how Python is a good wrapper.

Does Fugue take advantage of each sublayer that already uses Arrow?
The mass proliferation of electron and other such webpages-as-desktop-applications would seem to indicate that the average user doesn't care for any of those things.
And yet somehow no one has had the bail them out yet. How bout that..
The article purports to be an investigation to find out what people like; but feels much more like they started off with a conclusion and then went looking for evidence to support that.

This seems very similar to many news stories or scientific studies these days. Start off with a narrative. Highlight anything that supports your narrative. Ignore anything that contradicts it.
I moved to Debian 11 and recreated exactly the same quite customized GNOME desktop I had on Ubuntu 20.04. Nothing is missing except snaps.
Sure, I only buy rice grown in italy due to that they have a much lesser amount of arsenic in the ground.
Take it as an opportunity: better to be the 'real Divin' than to be the 'fake Cognac'.

Then it can be judged on its merits and if it is as good as you say it is then selling it shouldn't be a problem.
>by concealing the fact that the People's Liberation Army has been funding your cybersecurity company, or that you're buying suspiciously-inexpensive 5G radios for your telecom company from Iran)

What if a VPN service like Mullvad is partially or fully purchased by an "adversary" and added to a banned list unbeknownst to you, could continuing to buy VPN services using crypto or cash get you up to 20 years in jail by your reading?
Show HN: Schema-aware Postgres extension for natural language queries using GPT
Something that was always fascinating to me: there had been a time, around 1100, when the style of ceilings in sacral architecture was "discussed" with urgency and churches went through 3 redesigns and rebuilds in just 10 years (from a flat ceiling, to barrel vault, to cross ribs, which became predominant in about 1105/1107 – there are several examples). This is totally unthinkable nowadays, where buildings that went through planning and construction phases of a decade and more are still considered "dernier ci".
Qubes OS: https://qubes-os.org.
This is a Red Hat project and RHEL ships with a version of this.
> A lot of people would have bought VR headsets just for that

But probably a lot less than would watch a Mandalorian animated or real life spin-off TV series - and the VR version costs a lot more to create.

A lot of companies (Disney, Magic Leap etc) have spent a fortune trying to make the killer VR content but have failed. Apart from the sports/exercise apps (probably not enough to support the FB metaverse) are there any that would make people purchase a headset for?
Can’t believe you were downvoted. Nuance and its appreciation are becoming rare.
Maybe in 2030 the AI will be able to respond to that situation appropriately, like it won't just layer more sticky plasters on top with each additional requirement and make a mess but will re-evaluate the entire history of instructions and rearchitect/refactor the code completely if necessary?

And all this with documentation explaining what it did, and optimising the code for human readability, so that even with huge reworks you can still get the gist in a time measured in hours rather than it taking, what, weeks to do manually?
Doesn't BEM equally solve the cascade?
Ask HN: Why Do You Exist?
i'll start, i'm here to listen and dazzle like a worm in the morning sun
Here's the quest:

> write a hello-world service, and run "go build" [...] you'll have your single-file binary ready for deployment

You seem to have written a much simpler hello-world toy program (one that literally just prints those words and exits), instead of a "hello-world service [...] ready for deployment". (Am I mistaken? 16 seconds—on what I'm assuming is not a modestly specced workstation—is a crazy-long compile time for a simple hello-world program, but it would be pretty crazy even for a deployable service.) What happens if you attempt to satisfy the actual criteria laid out?

> I believe the original claim has been substantiated enough already

Uh, no. It's not substantiated until someone substantiates it. To "substantiate" something is not synonymous with merely claiming that it is true.

> Demanding precise time measurement of a ballpark is where the "double standard"

It's not a double standard; I didn't even ask for "precise time measurement". I asked you to substantiate what you're saying. Seeking substantiation does not comprise a separate claim in and of itself (but nice try, I guess?).
I wonder what the breakdown in sources for the disparity is. I can think of three potential differences, that are all likely contributors:

- Rainfall levels in the drainage area

- Evaporation over the course of the river

- Diversion for human use

I have to think the third is a substantial factor with the Nile vs the Amazon, considering that the Nile is essentially the only water source for two high-population countries (agriculture in Brazil is ostensibly supported by rainfall as well as by the river).
> Flour comprised of mostly insects should say that, just like whole wheat flour is separated from pizza flour, as they contain different grain milling and grains.

This seems like a fictional problem. Who is trying to pass off insect "flour" as wheat flour? What possible motivation would a company have for doing so? Cricket "flour" costs like 10x as much as wheat flour
I don't see that as a problem of iterations, but scale:
Framework just doesn't have the same engineering capacity as Lenovo (at least, not yet). They are bound to make errors, or make suboptimal choices because the optimal ones are costly. It's the same for smaller manufacturers like GPD.

> A physical case issue with a gen 1 X1C Thinkpad

Physical cases issues with thinkpad are extremely rare. Comparing the framework case to any random X1 thinkpad, I know which one I'd pick without hesitation.

> decoupling the laptop's frame from the hardware inside of it

That's addressing the wrong problem - and it's nothing special: Framework could have started like the X62 project and offered motherboards for current thinkpads.

It would have been less ambitious, more expansive and would've reduce the market size (as paying for a thinkpad + a framework motherboard would be strictly greater than just a thinkpad and making do with say the Thinkpad keyboard if you don't like it) but it would have guaranteed a better results.

I sincerely hope they succeed, because more choice is always better, but right now, they'll have to be reinventing the wheel for a while.
I estimate 50% higher in tech-focused places in US. However, that would ignore worse work-life balance and insanely high living costs in those places! I sounds like you are being paid well. I would love to live in Perth for few years, then explore the beaches, reefs, and bush in my free time.
If this is the case they need to up their abstraction game.
Right. Second Life was the metaverse 20 years ago, they even sold real state. It slowly died for a reason.
Say that each letter has two versions, and they look exactly alike. This means there are now 8 file names that look like "foo", and it's not clear which one of them you have to type in to get the file you're looking at.
I wonder what their answer would be to Green Revolution in the 60s...

Also, I can't get past random graphs with random numbers with zero explanation of the axes.

There are valid concerns expressed, but they are buried underneath an avalanche of demagoguery.
So, for a developer, what's currently the best hassle-free desktop Linux Distribution?
CSS is really not that hard to understand and use adequately. And as I said here, linting should be more than enough to nudge you in the right direction, CSS-wise.

Or maybe you don't like CSS at all?
As an aside, most industrial meat is exposed either intentionally or unintentionally to lactobacillus strains. Working in kitchens I've had the opportunity to taste spoiling meat that had high amounts of it. When prepared right it is actually quite good. Taste can be similar to dry-aged steak, but juicer and more flavorful. I've never gotten sick, but it certainly seems like a risk, however tasty it may be.
The impossible search for the best private journaling app ever
Show HN: Use GPT4 to quickly build simple, shareable web apps
Hi everyone,

I built a quick experiment last weekend that allows you to use GPT4 to quickly generate single page web apps. These apps are immediately deployed at a shareable and bookmark-able web URL.

Even though I’m a programmer, I think the idea of letting users build little apps without coding to solve their own problems is super exciting. I specifically built this because I wanted to solve a tiny problem of mine. I have a goal of running 500 miles this year. I track my runs on Strava and it shows me the total number of miles for the year. But I wanted to know: how many miles should I have run by this point in the year to be on track? I prompted and iterated with Pico and a few mins, I had a simple app: [https://backend-pico.onrender.com/gender-hybrid](https://bac... that I could add to my iPhone home screen.

The apps built by Pico have lots of limitations (single page, can only use HTML/CSS/vanilla JS + popular JS libraries) but they can also be incredibly powerful and surprisingly useful sometimes. And sometimes, Pico will completely fail to generate anything useful :(

Here are some fun things you can build:

* Wordle, Tic Tac Toe, any simple game.

* TODO list.

* Daily affirmations/horoscope.

* Camera filter app

* Audio recorder and processor

* “App for lumberjacks”

See website for demo apps.

I would love to hear your feedback and see what you build with Pico.
What does a natural nuclear reactor have to do with a nuclear weapon? There's almost no connection between the two.
The posters here seem to be highly skeptical of the need to regulate emerging AI.

I find that pretty disappointing and surprising.

Recently, they gave gpt-4 access to a terminal, the internet, and money. And gpt-4 itself is a software (and software in general has bugs, vulnerabilities, etc) black box that is incredibly, unprecedentedly powerful and not fully understood. Part of its training data is almost every known security vulnerability.

You guys really don’t see any potential problems with this? I mean really? Get a little creative here.
This is silly. Every era's art, architecture, and fashion look similar. That's why you can even identify categories like Victorian houses, Mid-century Modern design, or expressionism. It's why you can throw a 70's party and people show up looking the part. And it's why truly great art stands out - it either creates the trend or bucks the trend.
> When clicked, the links redirected visitors to pages hosting exploits for either Android or iOS then redirected them to legitimate websites such as the page to track shipments for Italian-based shipment and logistics company BRT or a popular Malaysian news website.

So at least this is not a 0-click exploit

I'm an Android Pixel (5a) user, how does this affect me...

> The Android exploit chain targeted users on phones with an ARM GPU

according to Wikipedia, my Pixel 5a has an Adreno 620 GPU made by Qualcomm so looks like I'm safe there. Curious to know which phones use the ARM GPU, not sure if this is a complete list but I found this[0] on an ARM website. Looks like Pixel 6 and 7 are affected since they use the Tensor chip which are ARM64 based.

> running Chrome versions prior to 106.

Current Chrome for Android version on my phone is 111.0.5563.116. The earliest version of Chrome for Android version 106 I can find is late Sept 2022[1], so not super long ago but it was at least fixed back in Sept.

> Note, Pixel devices with the 2023-01-05 security update are protected against both exploit chains in this blog.

My last security update was 2023-03-05 (and I mentioned my Chrome version above) so I'm protected

> Chrome users updated to at least version 108.0.5359 are also protected.

So which is it? affects users of Chrome prior to 106 yet you need to be on Chrome 108 to be protected? This is a bit confusing. Looks like Chrome for Android v108.0.5359.x was released late November 2022[2].

Just needed to do that for peace of mind. I understand that Google wouldn't be posting this if they hadn't at released a fix for this and handled their Pixel phones.

I really wish there was some kind of database where I can look up a phone model and see a list of exploits and whether they have been patched or not, at least when they are hardware and/or OS related.

0. https://developer.arm.com/Tools%20and%20Software/Arm%20Mobil...

1. https://chromereleases.googleblog.com/2022/09/chrome-for-and...

2. https://chromereleases.googleblog.com/2022/11/chrome-for-and...
I am Italian, so I can provide a bit of context to better understand this decision.

The right-wing government won the election with few key promises: reject the immigrants coming by the sea with a naval block, a sort of victimhood against UE that want to "fight" Italian habits (like forcing us to eat worms instead of pasta), and penalize Italian companies (like force Italy to liberalize sectors like taxi licenses or bathhouse concessions).
Right now, the situation with illegal immigration is out of control and we are approaching a new record in the arrives with many tragic wrecks; moreover UE is menacing Italy to get back the funds from NextGenerationUE because the government is not able to spend them on the right way and time.

So, as a populistic politician, what is the best solution to divert public opinion and keep consensus high? Talking about an attack on our traditions and our food.

It's just internal propaganda, nothing more by someone that would like to live in the 80s
Well they could state that they aren't storing submissions if that was the case. But they didn't.
> This isn’t very conducive to corporate work though. It’s about timelines and features promised to customers. [...] I wonder if ChatGPT can help there.

Obviously not, it will just make expected windows shorter and shorter.

"This would take a C developer a month, but you use Java so 2 weeks should suffice"

"This would take a Java developer two weeks, but you use Python so a week should suffice"

"This would take a Python developer a week, but you use ChatGPT so I'll expect it sometime tomorrow."
Incredible. Thanks for your book, and thanks for your art.
I wouldn't say favorite but it's definitely been a useful one recently.
I don't have a US credit card and a plus subscription I haven't had any issues.

FWIW I am using a UK debit card. It's hard to believe they would have reason to block cards from Belgium or Ireland.
Europol sounds alarm about criminal use of ChatGPT
> Do you really, really think someone just "went to opiates" before trying absolutely everything to identify and treat the underlying cause?

Given that doctors regularly prescribe opiates and pretty much never prescribe cannabis that would seem highly plausible.
All great points, and I appreciate them because I think CodeApprove's marketing materials should address them more head on.

The first two (trust with repos and GitHub API rate limits) don't really apply to CodeApprove in the same way they do to Reviewable. Because we're using GitHub's newer "apps" system and not OAuth, we only have very limited scopes (can't write code, etc.) and API rate limits go up as we get more users.

Your points about stacked diffs and PR adoption stand!
A Town Without Zoning Fights to Stay Free
Unfortunately people thinking they are overall worth 10 to 1000 times their co-workers exists.
PopOS, SuSE maybe
Being a large open source project is an even lower standard of transparency than a formal NIST review of a very small codebase, from which the NSA was able to hide at least one backdoor. It wasn't until use in the wild for decades revealed the ECC magic number that this vulnerability was uncovered [0].

Similarly RE has a way of investigating the actual functioning of code in a way more thorough than a human tasked with hunting for an intentionally obfuscated defect (if even any human has undergone that process)

[0] https://jiggerwit.wordpress.com/2013/09/25/the-nsa-back-door...
Some of us never did...

I often think of the Gene Hackman line in Heist: "I try to imagine someone a little smarter than myself, and I try to imagine what he would do."

It's not a level playing field, there are people who are just way more efficient and effective than the norm. Whether it's drive, focus, creativity, or knowledge (usually a combination of them), there are people who solve more problems and solve them better than average.

I don't know the literal number, but some folks are just better at it than others.

Perhaps you are just in a bubble and haven't met one?

I was at a conference once talking to a recruiter, when he stopped mid sentence and literally ran after one of these 10x engineers that had walked past.
How do they generate/collect inputs in such quantities from GPT-3.5?
No automation invoked, or involved, I add references where I feel they are needed.

If further commentary by me is redundant, then it is no doubt a moot point.
non-ghidra example, but just the other week I was pulling apart a commercial phishing kit that had implemented its own version of AES in javascript, and then created a kind of conceptual virtual file system based on nested layers of b64 and a "custom" rot-20k encoding that turned everything into unicode, where one blob was the image with offsets, and then different parts of the malware would be pulled out and decoded and decrypted at runtime - rendering the static analysis that AV and WAF tools do useless.

I used a REPL to manually do the steps you describe dynamically, but doing it statically means writing a decoder. You really need a proper sandbox to do dynamic analysis becase you don't know what's going to actually detonate, whereas static analysis gives you a whif of how off it seems, and that's sufficient for most security and privacy purposes. It was also common in Android apps several years ago now, not sure what the current state of the art is though. Android isn't my problem anymore.

Officially, I suck at this and I defer to more skilled people because I am a much better writer than hacker, but when they aren't around, you go to war with the army you have. :)
The “Mythical Man Month” book mentions something about “10X” or something, not necessarily in those terms. And people think that it’s a classic book (for whatever reason).
Anatomy of the Eicar Antivirus Test File
Early cars were immediately killing innocent people in the streets and there was totally justified outrage. We've just become numb to the idea that it's okay to be cut down in the street because cars are just too gosh darn convenient.

Today in the US, cars are the number one cause of death for children and lag only firearms for accidental death overall. Excusing the daily human slaughter by saying, "Well, they're not _designed_ to kill people like guns are" is not a cunning retort.
For classical guitar:
https://youtube.com/@SiccasGuitars
In my case Debian’s old package versions can often be awkward because I’m not using Linux exclusively… my macOS and Windows boxes are running latest releases of most things which can cause problems with e.g. sync features.

I usually run Fedora rather than Arch though, because in my limited experience with Arch it really doesn’t like to not be booted into for extended periods of time — if you do that the piled up updates are much more likely to break somehow or things like required config changes will slip through the cracks, whereas I have yet to experience this with Fedora.
They claimed that before the banking crisis, after there was considerable pressure on them to disclose where the reserves are kept (many in crypto doubted if all the money even exists). At the time it didn't look good because what everyone wanted to hear was that they keep it as cash in a bank, so the commercial paper disclosure was seen as negative and risky. Ironically it turns out that this might actually be safer than what USDC did. They played by the book and wanted to prove full solvency by having every single dollar in bank custody. Which nearly cost them their neck with the SVB failure when parts of the funds got frozen and users panicked.
Thank you for the kind words and for upgrading! Let me look into why the settings page is throwing an error.
That's obviously not what I meant.

The CCP "great firewall" excuse is, precisely, that it will keep "bad actors" away from the homeland, or "flies" as Den Xiaoping put it. We all know what is the real reason, though.

Apple uses the same excuse: security through arbitrary content control.

As other users have said, I could go and buy an Android phone, or I could even use no phone, why not? But that's not the point. The point is, I'm not buying a device from Apple, I'm just leasing it, with certain conditions. And that should be, in my opinion, not only against the law, but widely considered unethical.
Are you suggesting that Snowflake compatibility/integration is coming in the future? If so, do you plan to integrate Snowpark (Snowflake's custom DataFrame APIs) into the mix?
It's not the format that I'm referring to but the style.

The dominant architectural style of them includes:

- Multiple boxes merged into each other at different heights and depths

- Multiple (2-3) siding materials used in a regular pattern, such as vinyl slats + brick, or smooth aluminum + brick + cement.

- Multiple colors used in a regular pattern, usually white + gray + bright-primary-color. Primary color is used in small rectangular splashes, usually below or beside alternate windows

The basic look is that of many shipping containers nestled into each other.
The schematics will be released publicly when the product is shipping, but it won't be OSHW. I don't want to end up like the HackRF, where one small company is burdened with supporting an ecosystem of what is mostly clones. The HackRF designer himself said he wouldn't do it again.
https://github.com/npiv/chatblade

this has built in history and lots of other features that a serious user needs, like checking token limits and estimating costs, etc.
> But shouldn’t be called “flour”. It’s not.

the definition of flour is "ground substances," see also bone flour, fossilized flour, stone flour...
Sorry which wing?
I think most people end up doing what he's suggesting anyway, out of necessity. I suppose his key insight is to just stop feeling guilty about not being able to get through it all.
Congrats you just invented containers :P
First of all, it's not just the LTS binaries, it's also the LTS source and license for it. Commercial-only. No FOSS.

But it goes further: even for what is still FOSS (i.e. the non-LTS), the licensing gets progressively more and more restrictive:
* whereas Nokia made Qt available under the relatively permissive LGPL2.1, that since changed to a mixture of LGPL3 and GPL, with a clear shift towards the latter: that is: for new modules, you typically only have the choice between commercial and GPL. Unless you are content with that for all of your software projects, that's quite the problematic constraint.
The U.S. enjoyed and continues to enjoy pseudoslavery by any other name.

That other name would be capitalism. Capitalism can be "pseudo-slavery" for some who lack motivation or ability to achieve.

China enjoyed and continues to enjoy real slavery based on politics, ethnicity and religion.

But the biggest "truth" here is the fact that you can say these sort of things without fear of retribution in the USA but not so in China.

Don't take my word for it, just ask Jack Ma, Ren Zhiqiang, Xiao Jianhua or Bao Fan --- if you can find them.
It looks like I had to push it to production and you're probably the first to try it out, so thanks!