skysight-inc/HackerNews huggingface dataset:
> just means it's something that depends on the particular configuration of a set of elements that vanishes if you just look at the elements in isolation

Sort of like how all the parts of an engine, even when connected, do nothing if fuel isn’t being pumped through. We can not proclaim we have knowledge of the engine by simply understanding many of its parts but failing to grasp how fuel moves through it. And instead say when these parts are together motion “emerges” and believe we are profound.
Being able to afford the best doctors, nutritionists, and personal trainers, without waiting, certainly doesn’t hurt.
The biggest problem is that there is no dominant solution. Right now having a rust-based app is a luxury when there are easier albeit 'dirtier' solutions. I don't have to build something in rust and I am dreadfully afraid that I'll spend hundreds of hours building something only for an altenrative to be the emergent solution forcing an expensive rewrite.
That doesn't explain what the library is trying to do and how it implements it though.
Would employees of non-sports industries accept the weird-ass ways that sports contracts work? Major League Pharma Research is certainly intriguing
>Yes, there are definitely people who argue that performance never matters.

Never seen one, post an example.

>half–second loading time on a webpage loses them a lot of money.

I didn't say milliseconds don't matter, I said it was diminishing returns. The size of those returns depend on the business. For Facebook it matters because users have other options to use their attention on such as Youtube and other social media. A B2B SaaS such as some CI/CD tool can care less about it because their users have lock in, they can't just switch tab to a different CI/CD tool and start using it immediately. So the threshold of acceptable performance depends entirely on the use case, which the author keeps ignoring to fight strawman absolutist arguments instead.
Anecdotes are meaningful but they’re not everything. Especially when talking about a systemic, emergent problem.

One of the larger problems in this space is: since we cannot view the inputs that created the problem, we cannot verify that the problem is actually gone (rather than, say, shifted somewhere else less visible but just as harmful).

If this effect was achieved by a word denylist for example: then I expect new slang and code words to pop up to combat the filter.

We should ask for independent review and high standards rather than declaring the problem gone when we individually are no longer impacted by it.
Gandhi was a racist early on but throughout his life he continually grew as a person.

His non standard sex activities are known only because he himself shared all about his life with everyone. And he stopped when people pointed it out.

Gandhi by standards of his days was probably one of the least misogynistic leaders.

Lots of heroes aren’t worth worshipping. But let’s not throw the baby with the bath water.
Show HN: Lancerkit, the Freelancer Toolbox
It mostly works except for the part 2 failing miserably; so many apps require full filesystem access to have sane behaviour it's not even funny.

It doesn't help a lot that instead of having a explicit "can I have a host file" API, the apps are supposed to use a framework that invokes "portals".
To me, this is the real answer. Gravity is not a force, it is a constraint on the shape of the universe. It is geometry.
A small screen isn't going to ruin the otherwise luxury experience of a Hyundai or Kia.
And given how hard fought the few successful Starbucks union efforts have been, I think “historic” is pretty apt. Every single unionization effort is an incredible uphill battle. Every one that wins against those odds is historic.
Not sure that tracks. For a show that ran for 20 years and apparently had basically every successful exec on it… odds are some percent will turn out to be frauds.
All tech companies do this, so "choice" is more limited than you're implying.
Previous discussion of topic: https://news.ycombinator.com/item?id=35478675 (32 comments)
Their product looks great but the price seems insane. $125/m per connection? That's very hard to swallow for a SAAS looking to charge maybe $10-30 per seat. I get it, "enterprise!", but that's a pretty high barrier to entry for a company still establishing itself.
I don't know how it works in the UK, but here in France there are many commercial ISPs that cannot provide IPv6 because the underlying infrastructure does not support it.

Yes, ideally, an infrastructure provider should not dictate what kind of IP packets the commercial ISP can use, and there are dozens of technologies that would allow them to provide transports that don't care about the routing layer, but in practice, these providers (that we never really hear about as end-users) often make very bizarre choices, for example setting up a complex DHCP interception schemes that feed both the OLT to "open the port" and a BGP route server to announce connected clients at the collection point, of course not supporting IPv6.

In one of the ISPs I work for, we literally have /48s assigned to all of our clients, but the infrastructure provider's doesn't route them to us : IPv6 traffic is rejected at both ends of the transport. The ticket has been open for years (IPv6 was supposed to be part of the network they were commissioned to build), and insiders told me that they had difficulties adapting their transport system for IPv6.

We may end up having to tunnel IPv6 through IPv4 to our clients, but we try to fight against that so that the infrastructure provider doesn't declare the problem "fixed" and decide that the proper way for ISPs to provide IPv6 is to tunnel it through IPv4 so that they don't have to change anything.
Wait, were you serious with that post above? I was sure you were making a parody.
Finally, some sense.

Personally, I want a car with as little interaction as possible.
Sometimes I feel like a machine operator and not just a driver, especially when it's raining or when I need to defrost the windshield - constant hassling with whatever just to make things work.

How the hell is this progress? I want a car that does all the simple things for me - turn on the wipers at the right speed when its raining, defrost the windshield, knows when to heat/cool the car etc etc. You know - just learn me and do it.
This recent (10+ years) idea of adding more and more levers and buttons and cool screens to a car, to a point where it looks like an F-15 cockpit, might appeal to under-developed young males, but I really had enough. When I was younger, when you got into a new car, it took 2 minutes before you understood everything that needs to be understood and could safely driver with it. Now days you have to spend 10-15 minutes just to understand how to release the parking brake.
Incorrect. They get a new phone, login with their password and all their keys are downloaded to the new device.
Comments moved to https://news.ycombinator.com/item?id=35718912, which has more information and was posted a bit earlier.
Who defined nazi propaganda spreader groups?

Who draws the line? First Nazi propaganda spreaders, then gay rights activists?

Sounds extremely dangerous to have this kind of centralized control.
I worked in a government office where only unionized IT workers were allowed to move computer equipment. My boss gave me his old monitor after upgrading and I had to wait until after hours to move it. This was around 2018.

So the electrical strip thing seems plausible to me.
I know you're getting a lot of pushback here, but you're totally right.
Qt (among others) has been a thing in the embedded space for decades, and we've had snappy UIs on sub gigahertz CPUs for decades. I just don't buy that's it's a matter of under specced hardware.

I'd actually buy that it's more a matter of the corporate sausage making machine that turns ok hardware and talented developers with good intentions into an output of barely usable poorly performing crap. Ie: exactly how we end up with something like Spotify.
...what?

The server generates the auth code and redirects the user agent to your callback. You exchange that code with the IDP (over HTTPS which yeah that's its own nest of wormy trust) to get back a token. They can't inject a token because you don't get the token from them, just the one time code. If it's opaque you introspect it to validate or you just validate the JWT signature after pulling the keys from the JWKS endpoint. Introspection is standardized and an RFC. The state param is just a fucking session identifier.

All these URLs are defined and provided via the .well-known/openid-configuration endpoint. If your IDP publishes that endpoint correctly, most OAuth2 client libraries Just Work (TM) when pointed at the IDP domain.

Do EITHER of you even use OAuth2 outside of just cargo culting something you found off GitHub?
Yes I don’t think many people actually often need to fiddle the AC settings while driving. And that would be a very seldomly used knob when you have a good automatic AC.
It's kind of hard to follow the moral stance here. The university is apparently a Microsoft 365 customer. The objection of the students here seems to be that... They are being required to use a Microsoft product in order to access a Microsoft product? It's hard to understand how 2FA is the thing that crosses the line, when the university has already entrusted Microsoft with everything else.

And as they say in the letter, MS Authenticator (which is not even really a 2FA system but a passwordless authentication product, likely the best on the market right now) is not even mandatory as SMS is also an option. Setting downsides of SMS 2FA aside, they are not actually being required to use proprietary software, but instead seem to have bundled two mostly unrelated concerns together. I mean, they're objecting to having to share their phone number with MS... In order to access their email that MS hosts. The privacy boundary they're making this stand over is just a very strange one.

TOTP isn't really a drop in replacement either, as MS Authenticator is intended to protect against a couple of classes of attacks that TOTP doesn't, most importantly 2FA interactive phishing, which TOTP remains vulnerable to. Following the Okta attacks a number of organizations have prohibited TOTP, as interactive phishing of TOTP tokens is becoming pretty common such that TOTP 2FA is no longer substantial protection against this extremely common attack vector. FIDO is another good option but frankly the usability of FIDO remains very poor and it produces a much higher volume of support issues than app-based interactive verification.
Bank of England Chief Economist said people need to accept they are poorer
This may not be the message of the article but as a side-rant:

I really don't understand the use-case for a Rust-based GUI.

Rust's syntax, manual memory management, and compile times makes it seem like it's really not meant for this kind of workload, but instead for things like compilers, embedded systems, that kind of thing.

I understand that not every UI needs to be a cross-platform blah blah blah written in TypeJavaReactScriptJS, or a pixel-painted canvas written in Flutter. I also understand there's a use-case for one-off UIs that may not target a browser.

Let's compare it to something like Golang. Fast compile times, similar libraries, garbage collection -- it seems like something more suited for UIs where there are usually a lot more iterations. Worse performance for sure, but Rust also seems more-than-overkill in that regard for the UI use-case.
> multiple years for the details of your life to change, and I would argue that mandatory RTO given that is not "reasonable".

People change. Companies change. Over a few years, what might have started out as a good match might not be any more. That's OK.

> History is littered with things that were legal at the time, that we look back at and say "wow, that's f'd up"

To be clear, you're comparing child labor, slavery, etc. to requiring people to go to an office to work?
I feel that there's just so much stuff in iOS that's hidden (might I say unintuitive) compared to Android.
Can't they also throw the representative in jail (etc)?
Redump does also have audio CDs in their database.

Their tools also have specialized support for audio CD ripping, under GPLv3.
Could also be simple pragmatics or the economy of scale. If your business makes both 5V and 6.2V devices it could be a decent cost saving to make them both use 6.2V adapters, unless production number are low burning off that extra 1.2V in the 5V devices will generally be cheaper than separate power adapters for each and if nothing else it is one less inventory item to deal with.
They have many options for the veneer - carbon fiber, aluminum, and a number of gorgeous wood options.

If I find the dough I really hope to buy one before they're forced to go all EV.
At the end of the blog there's a link - feel free to try it out and let us know what you think!
None of them went off the rails in visual quality, story, etc as dramatically as Dark...
Chinese movies suck but so do US movies now, and the problem is when both sucks the one that you can watch without subtitles usually wins.
This. Unfortunately, the problem is, the people making these tutorials don't know that OAuth is that simple. They just know how to use the library that the 3 lines of code are hidden within.
...what is a neoconservative?
There's a very old version at http://arclanguage.com/, but the current codebase isn't public.

FWIW, here's the Arc code I wrote to generate a string of the form "Italicized Title - https://news.ycombinator.com/item?id=$ID - Month Year (n comments)". The variable i stands for item, which is HN's term for a post (story, comment, or poll):

(def biblioref (i)
(let mon (monthdate (date i!time) 'short)
(tostring
(if (astorypoll i)
(do (pr "*" (subst i!title "*" "\\*") "* - " (fullurl:item-url i!id)
" - " mon" (" (plural i!klive "comment") ")"))
(do (pr (fullurl:item-url i!id))
(unless (is mon (monthdate (date) 'short))
(pr " (" mon ")")))))))

Not that elegant but maybe not too bad.
I can’t figure out if you are for post-2012 web tech or against it
Plenty of automakers put those cameras elsewhere (e.g. Kia integrated it into rear view mirror) so your statement is nonsense.
There's AccessKit that's integrated in a couple of frameworks (egui is one)

(but hopefully it'd be a temporary step back)
That would require a device with the power of an iPad. I’m sure it could be done but again adds another $500-$1000 to the final price of the car. A physical button costs a couple bucks. If we are going to get people on board with electric cars we need to get an economy version and any cost cutting they can do will make the difference.
Difference between Hitler and Churchil was not much. One killed millions of Jews and another killed millions of Hindus.

Who won the war decided their legacy.

Power by any means is the deciding factor
> unions have been gutted heavily in the US compared to where they were a century ago.

The red line isn't normalized by workforce size, but it suggests the big gains (five-day work week, 8-hour workday) were before unions really became powerful. Unionization was only a 15-year trend, then it stalled-out.

https://upload.wikimedia.org/wikipedia/commons/3/3e/United_S...
> It isn’t like Stable Diffusion, it’s more like Google’s Imagen model.

Yeah, it looks exactly (architecturally) like Imagen.

Google would be running circles around everyone in Generative AI (maybe OpenAI would still have a better core LLM, maybe, but portfolio-wise) if they simply had the ability to cross the gap between building technologies and writing up research papers on them and actually releasing products.
It isn't. OAuth2 really did away with AuthZ and focused on AuthN, regardless of what anyone says.

You have scopes but even those outside of the OIDC scopes are wishy washy and meaningless outside of each implementation.
It’s not entirely wrong. Rust GUI has been held up by a significant dose of trying to do things properly, since the language definitely pushes you in that direction. It’s taken so long because Rust insists on correctness and on an ownership model that the popular solutions for GUIs simply didn’t fit into, so it’s taken time to come up with things that do work in those constraints.
Taken case by case, no. The absolute majority of those cases are used to get ISPs to block pirate streaming sites, or sites selling personal data.

However, once every few years, a high profile case suspending something like Whatsapp, Youtube, LinkedIn or Facebook appears. They are usually thrown out of appeals court so fast there's no time for the block order to actually reach the ISPs.

The ones that actually do result in a block have a police investigation behind it, making the whole bureaucracy more slow as there needs to be some back and forth between the police and the company. The fact that Telegram's entire team in Brazil is one lawyer might make this worse.

For example, this particular incident may have come from a misunderstanding. The police asked for all available data on all users of a group chat called "Movimento Anti-Semita Brasileiro" and another with a similar name. I hope the translation should be obvious.

What did Telegram deliver? The requested data of the group admin, not all users.

So now they get blocked until they deliver all the data.

Source for this incident, that is, the legal order for the block: https://www.conjur.com.br/dl/telegram-decisao-suspensao.pdf
One thing I could imagine here is a signature flow happening from the sender side where they sign the nonce + the token, to avoid forgery. I don't know what the signature validation looks like in that model though (if you request a public key from the provider, are you requesting that at every request flow? If you're not, now you're adding a request to every normal, non-malicious validation flow)

> Maybe you need to implement some uncommon signature verification. It could be anything.

So my feeling on this is that at the very least OAuth tends to be "well it's going to look like this, but there might be some tweaks".

I have set up OAuth verification with multiple services in the past. The social aspects and the business aspects have always been more complicated, but at least "it's OAuth" (much like "it's REST" for APIs) establishes a core understanding very quickly.

I'm open to saying that we should add more standard stuff to the flow, if it's optional then people who use oauth libraries will end up with a lot of this stuff by default. But I think the status quo is pretty nice, all things considered.
Nah, TF has had dynamic execution since TF2 and it’s still losing users, it seems. The execution model and API is simply more complicated. What’s a session, placeholder, constant, tensor, …? PyTorch was sold as numpy with GPU support and it is pretty close to that. JAX is an attempt to approach language simplicity and purity.
Because it's not a force?
You are wrong, sir. Seems like some of these students use Android ROMs without Google Services...and probably without any proprietary software.
Order was issued by a trial federal judge (1a instância). Please stop spreading conspiracy misinformation.
Click on the “>” on the right side to expand
Sorry, but if one is directly stating nazi ideals, symbols, denying the ocurrence of hate crimes, spreading information on how to create weapons and more effectively invade schools to "go for the high score", one isn't a gay rights activist. It's a nazi.

It's not a situation where people who just didn't get enough information (or downright wackos) can try and relativize the contents. It's quite, quite clear.
Here's an idea – build newer reactor sites near the sea, like (as you'll see from this map) a lot already are: https://www.nuclear-transparency-watch.eu/wp-content/uploads...
I had a two year stint where I ran around doing "database optimisation" projects that were a week of billable time at consulting rates, and my entire "toolkit" was to simply flip three boolean flags from bad to good values.

Now in the public cloud my gimmick is to switch VMs over to current-generation AMD EPYC models, and then collect my pay-check for the "performance tuning".

The fruit is hanging so low that I'm trampling over it. There's no actual fruit picking going on.
You might be surprised how much machine learning goes into image processing, because it doesn’t get all the hype that chat bots do.

We shouldn’t conflate intelligence with being able to speak.
Is CarPlay really that terrible? I don't have issues using Android Auto easily with my Mazda, it all takes a few very learnable clicks.
https://promptbase.com/prompt/ocr-text-fixer

This is the prompt I bought from promptbase. You basically provide GPT with some examples on possible OCR errors, and then you give it the OCRed text and it tries to correct it
Feedback is often extremely neglected, and expectations can often be set poorly.

Telling an engineer you expect literally 20% of their time to go to their mentee, not 20% of their free time, but 20% of their total time seems like an important expectation to set.

Applying major pressure to mentors to write consistent thoughtful honest required feedback is probably the best thing to do. Like minimum 3 paragraphs per week, potentially with direct prompts for questions people would prefer not to give direct feedback for.

Specific choice of project can also make a big difference.
Scale / data set size tends to expose performance issues. But that's a good problem to have.

Yes, it would be great if all developers could write performant code, but let's face it - there's only so many hours in a day and days in a week. Developers already struggle to keep up with all the required knowledge. It's not that people don't want to be competent. We're building more and more complex things while expanding the number of people employed building software which means average skill level is probably slightly decreasing.
> So, this is going to have new different issues.

Well, yeah, its a bigger set of models (particular the language model) that takes more resources (both to train and for inference.) That’s the tradeoff.

> Here’s my question: are there any image models where, if you prompt “1+1”, you get an image showing “3”?

You want a t2i model that does arithmetic in the prompt, translates to it to “text displaying the number <result>”, but, also does the arithmetic wrong?

Yeah, I don’t think that combination of features is in any existing model or, really, in any of the datasets used for evaluation, or otherwise on anyone’s roadmap.
In your scenario, you’re calling this the opposite of an expansion. But aren’t the companies literally “expanding” into these countries? Otherwise, what’s the issue? Unless you’re saying they should have sway regardless of whether they’re doing business there or not?

And to be clear it is “doing business”. Nobody is forcing companies to ship anywhere they don’t want to. Nobody is forcing them to allow IP connections from countries they do not operate in. The internet connects us all, sure, but to accept payment for any service, that company must have a financial relationship in place within that country — or with another country that’s already doing business with the first.

And I must disagree about the EIC being inapplicable. There is not so great a difference between weaponizing dopamine and transporting opium.

I’m truly not trying to be inflammatory here, fwiw, and I appreciate your perspective and the way you’ve gone about conveying it. I just disagree with your premises on a fundamental level.
> or the hardware is underpowered by a few decades.

Wouldn’t surprise me, automotive-grade components tend to trade power for durability & certs, and then you cut down on BOM.

And then the infotainment is hardly ever a visible make or break, people will shrug, then sigh heavily for years as they try to use the POS.
I think some features just weren't meant to be discoverable. It's not like a feature this niche deserves a dedicated icon on the homescreen.