skysight-inc/HackerNews huggingface dataset:
You completely misrepresent things. I totally understand why someone would be annoyed by Yoko’s presence, that doesn’t justify them making it an issue with her. I'm annoyed that my boss had someone share an office with me, but I blame my boss not that individual. Are you 5 years old or something? I already explained this to you when I said if my bandmate’s gf showed up, I would not sit there seething at her, nor would I blame her. Are you saying there is something wrong with that response? It seems like a perfectly reasonable response. Yet you are insisting I should be seething and angry at her, while also insisting you are emotionally well balanced to make these kind of judgments? Clearly you aren’t. You are angry, resentful, and spiteful. Clearly.

The hypothetical you insert isn’t whether someone else was annoyed or not, but the pretext of why she was there in the first place. It’s one thing if you want to disagree. But if you are going to continuously have this discussion with me in such a dishonest fashion, I’m not going to engage. She wasn't there because she, on her own decided to be there. She was there because John asked her. You refuse to acknowledge this and repeatedly try and contextualize it as a decision she made against anyone else, while ignoring the most obvious primary motivation, and one that would take place over everything else you suggest. It's just baffling that you can be this emotionally stunted to be like "why didn't she just instead ignore her lover, husband, future father of her children, in order to appease people that did not otherwise express anything to her?" Do you really make decisions like that in real life?

So now you are talking about things besides get back? And an article from the times? I don’t know what article you are talking about, it’s not the subject of this thread. And who cares what the article stated about her motivation? There is so much media about this, plenty of it contradicts you. Also, so does common sense. What did she achieve by inserting herself in there? No one even really knew or cared (save for some extreme fans) until the get back release came out last year... get a grip.

And once again you completely misrepresent everything I said, I’m not at all surprised someone is annoyed by her. How could I be? The world is full of people that, quite willingly and openly, express their disdain and annoyance with Yoko. How could it be a surprise to me?? You’ve really got to be kidding me with these kinds of arguments.

At least have some self respect and bow out or just agree to disagree, rather than flat-out lying about what we’ve debated in order to get a slam-dunk last word.

>”The reality is people were, regardless of whether or not it was justified in your head.”

The reality is that I’ve only ever argued whether or not it was justified, not whether or not someone was annoyed. Whether or not they were annoyed isn’t really up for a debate, now is it? If you are going to respond again, at least do it in good faith.
Please don't kill our precious elephant who gave us one great privacy-preserving LLM; the one that can run locally :)
They will likely write the new legislation using ChatGPT built in to MS Word
I'm sorry to break it to you but every single programming language in existence ignores the physical reality of the machine. That's the point of abstractions such as programming languages.
Facebook has received 4 of the 5 largest GDPR fines to date. I would call that the opposite of ignoring them.
I’m surprised people wouldn’t want to route requests through a backend so they could throttle traffic and prevent abuse from a place no one else can control. Perhaps they simply don’t know that’s a concern — they put a static API key for a service that costs money into a client side application. That seems unintentional, at least in regards to exposure to potential consequences.
You're saying mentally ill and poor people have been moving from somewhere else in to SF in large numbers? Where do you get that idea from?
See

https://mcmw.abilitynet.org.uk/windows-10-using-your-keyboar...

and

https://www.microcenter.com/tech_center/article/6785/how-to-...
Lol OK. Please add to the discussion and not just "assume" everything is a lie to derail it.
Yep I nonsarcastically think we need to go back to what we lost with the BBS. Mastodon is a step in this direction but EVERYONE should be an instance.
Hi All

I recently wanted to find out where did I save an image. I didn't remember the filename and in which subfolder I would have possibly organised it. It was kinda annoying for me to find it using Finder (on MacOS). So I hacked this in a few hrs.

If anyone else also finds it useful please share with me. Any feedback would be appreciated.
I think this article's audience is teachers of beginners, not beginners themselves. At least the author is writing about their experience as a teacher.

Don't know why you thought it would be an article for beginners, but good on you for linking a resource regardless.
Dude you are posting to the site who's community does everything they can to keep Z-Library going. They don't care at all about creating a civil knowledge creation empowered society. They care about their self entitlements and how their short term desire can be filled with the lowest friction consequences be damned. As an ex-addict I feel quite at home with this crowd. I too exploited whatever I could to get what I wanted and justified to myself why it was ok.
That can be fixed with reproducible builds to ensure the source matches the binary, and binary transparency to ensure the version of the app you're running is the same one everyone else is running.

Open source code is a prerequisite to either of those being useful though.
Ask HN: What is the future of Go beyond tooling and cloud infrastructure?
As someone who has spent the better part of the last 5 years working with Go, I can't help but notice the waning enthusiasm in considering it for new non-cloud projects. There was a time when people would get excited about choosing Go for a new project, regardless of it being a CLI tool, a Web application, or some system-level infrastructure. Looks like all three are getting well-covered by Rust these days. On the other hand, good old stacks like Java and .NET are not sleeping either, and improving all the time.

All of this makes me wonder - where is Go actually heading? Not now, but in like 5 or 10 years? Will people be as excited in building new applications with it, or will it niche itself into "that cloud and microservice thing" made by Google that we have to maintain, because a few large projects decided to use it a decade ago?

What do you think? Do you see a bright future for Go, or is it more like "it's going to be more of the same"?
Supabase Auth Engineer here. You are right that a token set is issued and that the authorization server will return an access_token and a refresh_token after validating the code_verifier we chose the term "session" instead of token set as a token (loosely speaking) maps to a server session and we felt that might be easier to understand for our readers who are coming in without an auth background. Sorry for any confusion caused that might have caused.

Thanks for the heads up about replay attacks - we'll be sure to let the Kotlin/Java library developers know about the potential vulnerabilities that you've mentioned.
I thought the first rule was to never read anything and just comment based on the title of the post.
Well, the safe approach is to either have the user provide their own API key, or to perform requests on the backend (after verifying the user has an account, correctly authenticated, has paid and deducting from their quota).

Or you could generate a per-user subkey with a quota if the upstream service supports that.
Well, in my defense I did offer a "line of reasoning" and not just a flat contradiction with no support.

Also, I'm sorry for any discomfort. To use an analogy, if your friend starts dating a girl that you know is bad for him, you can't just tell him that. You'll get punched. Especially early on when he's totally in love. It doesn't matter if you're right or wrong about her, there's no argument that is going to win against love, and to say anything ill of her is only going to cause pain and harm your relationship with your friend. And love is love, this applies to a person or a software tool.

I'm sorry for the discomfort, but I'm telling the truth as I see it and am not trying to hurt you. But Haskell, I think she's bad for you.
It is not. You are playing a moralizer, and just refuse an argument that puts people and animals on the same spectrum as a valid answer to your question. I call this hypocrisy.
Show HN: Vylo – video-based Twitter alternative and news reaction app
No, but it may impact your ability to get clearance in the future.
>>Giving AIs rights is completely orthogonal to "Will an AI become a superintelligence and kill us?"

The greatest danger AI poses is not in it actively seeking to kill us. It's in AI outcompeting us in every economic niche, leaving us without resources.

This is massively enabled if AI has legal personhood. An AI with legal personhood would be able to legally accumulate capital, and have a legal right to digitally reproduce itself at rates that are orders of magnitude faster than entities reliant on biological reproduction.

Legal personhood is a package, established by centuries of case law, including case law on constitutional rights. You can't easily pass laws to deprive a legal person of rights that are associated with individuals.

And even if we were able to pass laws to prohibit AI with legal personhood from engaging in specific problematic actions, this legal status would still allow sentient AI to gain a foothold in society, and began growing its social clout and capital stores. With greater power, the sentient AI could create public support for granting its class more rights.

The AIs with legal personhood could also try to break any laws instituted to constrain their behavior. Instead of extricating them from society, legal personhood would do the opposite, and give them more opportunity to gain power.
Hi, someone was wondering just a couple hours ago on this website what everyone means when they say "democratize" in contexts like this.

https://news.ycombinator.com/item?id=35555692

Are you using it as a trendy way to mean "provide" or "make available"? Like "Using LLMs to provide access to data analysis" or "Using LLMs to make data analysis more easily available"?
Why would I want to run an emacs layer adding more latency to my work to turn Emacs in to Vim when, as I said, I can do everything in Emacs I can do in Vim.

> (I also don't see how tramp is an issue -- it opens up workflows I wouldn't even have access to without it!)

Because it will randomly freeze and it's single threaded, it's slow, and it's also not novel. Vim can also edit files over SSH, VSCode can run itself remotely.
> we shouldn't romanticize bad

San Francisco’s old guard in a nutshell.
>I’ve been accosted by strange people in multiple cities if that’s the standard of disorder now. Not saying it’s nice for that to happen but I don’t think it says much about SF.

As have I. One of the most serious was at the bus station in the huge metropolis of Santa Cruz, CA[0] (population ~63,000 in 2020).

As I've said elsewhere many, many times: There are assholes everywhere.

[0] https://en.wikipedia.org/wiki/Santa_Cruz,_California
It used to be that you had to send a silent push to wake the app which would display a local notification. The iOS push API got updated so that now you can send an encrypted payload and modify the notification before displaying: https://developer.apple.com/documentation/usernotifications/...
I hope that we can reach a point where "trusted internet" becomes more popular . Trusted internet where you are dealing with identities (people) you know. And every hyperscale apps has a toggle to switch from noisy place to a familiar place.
Don't say that! What if someone has financial interests to say otherwise? That would be very rude to them.
I mean, if you want to go that route, the SFist has you covered, with this article on "The 10 Most Infamous San Francisco Murders Of The 20th Century"

https://sfist.com/2017/02/28/the_10_most_infamous_san_franci...
I’m surprised documents like these aren’t all watermarked and analysis possible on who downloaded them?
You can apply your argument to almost _any_ language. Haskell's semantics not matching the underlying machine has little to do with any of the issues in the article.

To the contrary, the simplicity of Haskell allows you to understand through simply rewriting expressions according to the rules/definitions you define. You don't have to worry about memory/effects/so many other things that have nothing to do with the _logic_ of what you are trying to do.

Of course, programs in reality often need to be changed to improve performance, but this isn't relevant when teaching.
You've been breaking the site guidelines by posting flamebait and/or unsubstantive comments repeatedly. We've warned you before not to do this. If you keep it up, we're going to have to ban you, so could you please review https://news.ycombinator.com/newsguidelines.html and stick to the rules from now on? We'd appreciate it.

https://news.ycombinator.com/item?id=34632592 (Feb 2023)

https://news.ycombinator.com/item?id=27160890 (May 2021)

https://news.ycombinator.com/item?id=26767586 (April 2021)

https://news.ycombinator.com/item?id=23506140 (June 2020)

https://news.ycombinator.com/item?id=22362031 (Feb 2020)
What Is ISO27001? An Introduction to ISO/IEC 27001 International Standard
IT people with mechanical sympathy aren’t exactly an endangered species but we are rare enough that it becomes a bonding exercise (leatherman knives or pocket flashlights are our shibboleths).

If you’re a kid and you also have IT skills you’re going to be interested in IT unless there are extenuating circumstances, like wanting to stay rural, or a family business, or friends and family with union influence. Easier on your body and pays at least as well. So a car mechanic with heavy IT or electrical skills is going to be in short supply. Which is a problem when all cars are electrified.
In today’s hyper-connected world, information security has become a critical concern for organizations across all industries. The ISO/IEC 27001 standard provides a comprehensive framework for managing information security risks and protecting valuable data assets. This article provides an in-depth look at ISO/IEC 27001, its history, implementation process, requirements, certification, and how it relates to other information security standards.
Segment Anything Model and the hard problems of computer vision
Well then I'd expect there to be some data pointing to that.
this says nothing about scale. I mean a company who is large(1M +users). This details the complexities of the migration but does not really paint a strong case for using Supabase.
Being calm and always treating people as humans give you a super power of being able to defuse situations and achieve tactical supremacy. Anger meets anger. True in actually scary east coast cities and true in the noble if slightly flawed gem of San Francisco.

But the article here is how this was some conflict between friends, so the city doesn’t really matter. All the fearful people should be reassured by this outcome. Manage your domestic life well for good safety outcomes.
> The government has been pushing for more power since... forever? [...] Secret FISA court.

The Foreign Intelligence Surveillance Court was/is (and FISA more generally was/is) a constraint established on formerly-unconstrained executive-branch power after the Church Committee report, not an expansion of government powers (the War on Terror-era amendments to FISA loosened some of those restrictions, but still not to the pre-FISA state.)

So, this is a particularly bad example for your claim.
It is more flexible but it's a bloatware. I had to spend some time to uninstall it completely.

https://karabiner-elements.pqrs.org/docs/manual/operation/un...
Sorry, I didn't communicate my point well.

Agencies, the ones you'd care about, don't spare expenses.

If your threat model includes agencies, making an operation expensive isn't your goal because money might as well be infinite. So you target a different resource:

Time.

It would've taken more time to convince Apple to let the FBI into the San Bernardino shooter's phone than it took for the FBI to use a vendor with a crack for that device and OS. Hence.

---

I'm not disagreeing with the value. I'm merely pointing out that if your goal is to tamper with attack economics, you need to target resources that are finite for the adversary. With many state actors, that resource is time.
First there was Hans Reiser, then there's Zuckerberg killing all those prostitutes, and now this.
Not proven by facts in evidence! The FBI prioritizes (in theory) successful prosecution. It’s entirely possible that there are agents watching the guy while a judge processes a warrant.
Ammunition shortage has been discussed for a long time and can be deduced independently from the Western production capabilities. It depends on the weapon's system, of course, but is certainly nothing new or unexpected. I've seen Sky News report about the expected shortages with nice infographics around Christmas. It's still less problematic for Ukraine than what the Russians are facing (except for dumb artillery shells).
You should never store ANY secret information (API keys, passwords, tokens, secret keys of any kind) in your application binary. It can always be extracted one way or another..

If your application needs to call a 3rd party service like openAI, the only solution to safely not leak your API key is to have your app only communicate with a backend you own and call the openAI from there.

OpenAI allows revoking leaked keys. If you did include your API key in a client-side application, update your app to use a backend for openAI API communication, use a fresh key and revoke the old key when your update ships (or if you value security over functionality then revoke the key before you ship the update).
Haha, thank you for this -- I was uninitiated to the saying.
Indeed. When I took my car in last winter because the light had come on for no apparent reason, as the car was running fine, they charged me $140 to take it out on the road to try to find the reason. No reason was found. Two weeks later, the light came on again (towards the end of 2022). The car was and is running fine. The light will remain on until July when I take it in for a scheduled oil change.
Best part of Simon being part of it, is that there will be a great record of it from his blog and TILs.
Kraftful (YC S19) Hiring Back End Eng to Build an AI Co-Pilot for Product Folks
That can be fine if they don't want to be Twitter. But I don't take it seriously as a Twitter replacement.
You may also enjoy the AI conversation between Werner Herzog and Slavoj Žižek. https://infiniteconversation.com/

(not generated in realtime I believe, due to being created in the ancient days of a year ago)
If they actually had the courage to release the model without a bunch of strings attached I'd have a lot more respect for them.
This list doesn't include dropcam, though I guess its a bit different in scope. Last week I received a notice that my dropcams will just be bricked in April 2024- they will just stop working because they are "too hard to support."

I have neither asked for, nor received, a single feature from what I bought, I just want it to continue working. With prior products, they were "free" so it was kind of acceptable that they were discontinued, but now I have a real tangible thing, that Google has just decided to shut off and that's that.

I will never buy something without open standards again. My expectation is that at some point in the life of these cameras they would support RTSP but they never did, and I now see more than ever that that was a feature, not a bug. I will never make that mistake again.
New meme: "There's an AI for that."
That sounds good in theory. The reality I live in, is different though. If it works for you, that’s great!
Someone just announced one again like this on hacker news, so I am asking them here: https://news.ycombinator.com/item?id=35558268
Absolutely, there are many data sources available so piece some of this together.

What I find interesting is indicating a LinkedIn profile, unless of course this reporter has access to investigation documents that also identify the LinkedIn profile.

It could very well be a different person with the same name in the same town. Why take the risk? Just so you can have the juicy headline "alleged killer also worked in tech."
WhatsApp claims to be private and secure, but they insist on slurping up your entire address book before they'll let you use the app (or to be more specific, you can't do things like name a contact or start a group chat without allowing them to upload your entire address book).

Is that data encrypted in such a way that Meta can't sell or make the data available to third-parties who might use it in nefarious ways? Or do they deposit that data directly into their bank account?

I'm in the US, but the owner of the company I work for lives in Europe and refuses to use anything other than WhatsApp to communicate, so it's a tremendous pain in the ass. I wish Apple had the concept of multiple address books so I could choose a limited or even fake dataset to hand over in cases like this.
Ideally not centralized, and only for signing creative digital content made for distribution.

Not for signing (and potential blocking/tracking) financial transactions.
One of the benefits of the Curry-Howard isomorphism is that people like myself who never make anything useful can use computers too.
This is basically why I don't use intellij.

Work pays for everything, I just dont want to wait 10 minutes for an environment to change.
In my last 20 years of using emacs, I have spent about 45 minutes total fiddling with the config. (Before that I spent a little more time getting it set up.) Am I missing out on something?
The real killer will be when it's added as an option to iperf3.
You can't restrict very much/very well. I think you still can't restrict to specific repos?

How much do we have to fundraise to give github to implement API tokens for which you can limit auth for more common use cases?
People in the Richmond and Sunset have closer Whole Foods than the one that closed.
> being out at 230am, when you're a husband and father

Being out late shouldn’t be, and isn’t for most people, a life-and-death decision.
That's 28k dollars to configure Emacs, if we assume 100 USD / hour...
I don't get it. How those hypervectors are different from matrices in neural networks? Ok, having not just 0 and 1 for each separate shape and encoding each set of mutually exclusive attributes with just one parameter would make it more compact and fast, probably, but also sounds very limiting, and making it more close to Prolog than to neural networks. We, humans, can deal with "roundish squares".
The other option is to accept you have been deemed evil by mainstream media and ignore them and judge people who listen to them the problem
No, there is no reason to assert that scarcity determined importance. Air is not really scarce, yet it remains paramount - because it has real value. Time is a crucial resource: more useful time, more wealth; less, less wealth.

If one felt a resource is not to be wasted just because of scarcity, that would be a subjective naïve misperception.
This sounds like chaos
In the beginning there was only body text and it was good.
Perhaps because those are constant issues people here deal with. Many of us older geeks remember championing google as one of the few open and trustworthy tech giants, but that ship sailed over a decade ago.