skysight-inc/HackerNews huggingface dataset:
I think Hilbert is one of the most underrated - and unknown - people (outside experts).
Hey all, I'm from Pinecone (shocker). Addressing common questions...

What are vector DBs used for? > Storing and search through embeddings at scale, which are created and consumed by LLMs and other AI models for applications like semantic search and chatbots (eg, to avoid hallucinations).

Why use a managed vector DB like Pinecone instead of [Faiss, pgvector, self-hosted thing, numpy.array, etc]? > Usually comes down to scale and convenience. If you're dealing with a small amount of embeddings, say anything less than 10M, you're probably fine just reaching for the closest and most convenient option. (We try to make Pinecone that convenient option, and our free plan holds up to ~100k 1536-dimension embeddings.) If you're dealing with larger scale -- say hundreds of millions to billions of embeddings -- and have strict performance requirements, and aren't thrilled by the thought of managing your own vector database like we are, then you should consider Pinecone. It turns out there's a sufficiently large population that falls into the latter category, just as with any other database category.

If you're new to this the best place to "see for yourself" is our free plan (https://app.pinecone.io) and collection of examples (https://docs.pinecone.io/docs/examples).

Allow me one more plug: We're hosting a webinar next week about testing Pinecone performance with your own data and performance requirements. I have a feeling lots of folks reading this would find that useful. → https://pinecone-io.zoom.us/webinar/register/WN_z9JqLjLGTyu4...
ARM architecture I guess
> Buzzfeed, on the other hand, was always gossipy crap.

Buzzfeed, yes. Buzzfeed News, no:

> Since its establishment in 2011, it has won the George Polk Award, The Sidney Award, National Magazine Award, the National Press Foundation award, and the Pulitzer Prize for International Reporting.

https://en.wikipedia.org/wiki/BuzzFeed_News
Can't you also think of rate cuts as basic income for the rich, because they tend to cause a rise in asset values as money searches for yield, and the rich own most of the assets AND rich people can take out very low interest loans backed by their assets rather than selling, which allows them to spend money without triggering a tax event?
> I don’t think interest rates have the capacity to change unemployment right now

I don't know. New + used car sales as well as new 15/30 year mortgages (or what would typically be refinances maybe) have to have some effect.

A car salesman closes less deals, he has less money to go on vacation with, etc. etc.
I have never looked into Swift, because it seems to me, as a non-Mac developer, like a niche, Mac-only language.

In my mind, if I'm not developing for the iPhone, why would I use Swift?

If I need to write a CLI app, why, of all languages, would I pick Swift?
It's not statistically incorrect. KPIs are generally discussed in time frames, year over year, quarter over quarter. There is year over year growth in multiple jobholders, three years running. That constitutes a strong trend, even if regressing to the mean. Also, if you're not filtering your multiple jobs data to prime age, you should use aggregate participation rate (unfiltered), which tells a different story.[0]

[0] https://fred.stlouisfed.org/series/CIVPART
I switched to Proton two years ago and I'm pretty happy.

It helped to get a custom domain before the switch. That way, I could stay on Gmail while switching all accounts to my new domain and later just transfer the domain from Gmail to Proton.
Sorry, non-native english speaker here: what does “wriled” mean? My “Google-Fu” is failing me.
They'll just commandeer it later...
They proposed RF-EMF as the mechanism of action, but they didn't provide any evidence that RF-EMF was the cause of the hypertension.
> Signal is e2ee.

That still does not change anything though. The backend is unverifiable, that's a fact. Why talk about E2EE, I wasn't really talking about that.

Signal for a whole year was running a different server code and nobody even could tell that they added some cryptocoin stuff. On top of that, metadata, server connection and anything other than the message content is all at the mercy of the server owner.
This attitude is not just ignorant; it's dangerous.

I'm seeing rampant use of ML now for problems we already know how to solve in much simpler ways: linear control theory, bayesian statistics, Kalman filters, etc. "Oh hey, no need to study those old, dry topics. Just throw a bunch of training data at this GPU-bound black box and it will probably work."

That's right, it will probably work. Until it doesn't. And then you won't be able to debug it. More important: You won't be able to predict when the system will fail, because it's a black box. And if it's controlling a high-consequence system, when it fails people could die.

The moral is that if your problem falls into one of the already known easy-to-solve domains, you should use the old techniques. It will probably need at least 1/10^6 the CPU resources as an ML approach and you'll be able to characterize its failure regimes in advance.
“Externally managed environments”: when PEP 668 breaks pip
Some of us believe that content creators should get paid. It's a pity that ads are the lowest friction method easily available to the general public to accomplish this.
Yea this is the route I took, I’m a sucker for a good gui, and this is super simple.

If you use cloudflare for your domain you can use cloudflare-ddns[0] to automatically update your ip if/when it changes.

[0] https://github.com/timothymiller/cloudflare-ddns
Thank you, Mr. Betteridge, for giving us a quick way of knowing the answer to the headline in the form of a question.

People are going to continue to insist that there is no such thing as fact checking, and treat any attempt to contradict their beliefs as proof of a conspiracy against them. Crowd-sourcing it doesn't change anything. It just makes it more prone to manipulation -- which will be the first line of defense against any contradictory "note".
There is next to nothing about the DOM that doesn't already support application-like experiences. Yes, it was designed with documents in mind, but this claim that documents are antithetical to applications is something I fail to understand. Most SPAs fail to live up to their promise, not because there is something about the DOM that is incompatible with a type of UI, but because the chain of command in software development, especially when it comes to web apps, is dysfunctional. However, there are plenty of native apps that are bad at what they do as well. The difference is that the web attracts different kinds of developers, given that the bar to entry at every stage of development is significantly lower than iOS or Android development.

If you'd like to provide some examples of how the DOM itself works against application-like experiences, I'd love to hear them.
The Internet has been colonized by spies who work for corporations and governments, but it's been going on for well over a decade, as this article notes:

> "By the time ByteDance was founded in Beijing in 2012, Google had been reading our emails over our shoulders, Amazon had been watching us shop, and Twitter and Facebook had been mediating our messages to friends and foes for years. Indeed, Zhang Yiming, the millennial software engineer who set up ByteDance, modeled himself and aspects of his new company on Silicon Valley. Zhang, who briefly worked for Microsoft before going out on his own, was once fond of quoting Steve Jobs and Jack Welch."

It would be highly surprising if the ByteDance-Beijing relationship was all that different from the Google/Verizon-Washington relationship (2013):

https://www.corpwatch.org/article/verizon-and-google-helped-...

> "Technology companies willingly provided information to U.S. government agencies to help the Obama administration snoop on reporters from the Associated Press (AP) and Fox news in order to ostensibly crack down on leaks that pose a "threat" to national security."
Ask HN: Is AI causing companies/individuals to rethink their security?
I am a security and AI noob, so please pardon my stupidity and thank you in advance for your patience, honest responses and feedback on this.

Are companies/organizations rethinking their security models/processes/etc based upon the use of AI in hacking? If so, how(in detail)? Is there a live list of things to consider in protecting against?

Based upon what I have read/seen, there may be an increase in hacks based upon the use of AI in hacks (faked voice/video/etc) - which may have not been previously considered in the security processes and/or user journey. *I'm not saying that AI alone is the problem, its in the addition to social engineering, gaps in current security, current risks, etc. What about for personal use devices? Network/wifi/mobile/desktop/etc? Is there a live list of AI hacks? How is security leveraging AI to protect against AI hackers? Or is there a simple website putting things into 3 columns - what is susceptible, what is not, and unsure.
What if they refund it immediately? Maybe that is what they did, to avoid detection. Anyone knows more about this?
Show HN: Chatbots for Technical Documentation
> the actual solution to the housing crisis

« Actual solution » as in temporary - good enough for now, not as sustainable - can work and scale for tomorrow ?

Houses needs lots of time, energy and material to be build. Let’s not « market » them as they were plastic bags.
Not hosting or updates. Paying money to unlock content or in game BS currency
Looks like a typo for 'riled'
I'm not sure how large z-lib is, but LibGen is ~120TB. You can pick up a 5TB external HDD on Amazon for ~$100, so it would cost a good $2400 dollars for the raw storage costs if you wanted to host it all yourself. You really have to wonder how the owners fund all of this.

Edit: fixed my math
I was replying to the point programmer_dude made in his comment.
OK, so now we're going to fire any CEO that lays off more than X% of the staff? The likely effect will be slower hiring, and less jobs in our economy. Is that desirable?
Show HN: Next Apprenticeship CGPP Enrollment – 5/5/2022 to 6/5/2022
LET'S COLLABORATE
Transform Learning Into Tangible Experience For Your Resume

https://www.certificationpoint.org/student%20freelance.php
Why not use Elasticsearch/Opensearch? Way more battle-tested and has many more features for text data. Also uses the same vector indexing algos.
https://archive.today/4D3pt
Helping an impoverished country that has been actively invaded is one thing.

Providing decades of national defense as a service is quite a different thing. Especially when the beneficiaries are some of the richest nations in the world.
Something is fishy:

[1] - SpaceX Accuses Europe's Ariane Of Unfair Competition

[2] - Europe eyes Musk’s SpaceX to replace Russian rockets

I feel like EU's industry is being held back on purpose

Yet SpaceX benefits lot of subsidies from the US government, as well as Tesla, hmm, methinking

[1] - https://worldcrunch.com/business-finance/exclusive-spacex-ac...

[2] - https://www.cnbc.com/2022/08/12/europe-eyes-musks-spacex-to-...
Sure, but what I'm saying is that it's not as simple as a function that moving people closer together is infinitely scalable to lessen our impact on the environment. There's no free lunch.

That's why I think upzoning to medium density 15-minute cities is the best of both worlds.

Not to mention that living in a dense urban environment has a worse quality of life for a lot of people - that's why people don't want to do it. They like the space.
Administration Announces National Standards Strategy Critical and Emerging Tech
climate control

good point.

i live in an area where climate control is not needed at all, so that changes the equation considerably here.
It is collecting information but it's not specifically for a government. Facebook and Google also spy on their users. Should we ban them too?
No. Everyone does understand that such usage is fine. It's like owning a gun. You can use it legitimately to display on the wall or illegitimately to rob a liquor store. In the case of guns the fear for illegitimate usage is such that a lot of countries chose to restrict gun ownership in general.
1. Buy or gather everything needed for the project and put all parts of the project in a box. Probably it may be a directory on a file system if the project is something digital, but as I love to get outside of displays most of that boxes for me are some real cardboard boxes in the offline world, full with offline stuff.

2. Wake up as early in the morning as possible because evening is never a good time for any projects with uncertain time constraints - because waking up early constantly is important per se. Believe me or not but all my time except of more than 1 year I was an owl and now I realized that this is a key for my productivity.

3. After your morning coffee realize that there are a lot of boxes around. Pick any one and start working! And get ready that most of that boxes gotta be untouched for the sake of dealing with the most important/interesting ones.
riled: informal make (someone) annoyed or irritated
https://writingexplained.org/idiom-dictionary/all-riled-up
Maybe because that's the only way we end up talking about it? Would you prefer they keep the Gephardt Rule and keep lifting it and go on to start planning another massive infrastructure package?

People are sick of the finger pointing. No one cares. Something has to be done about the debt or its going to end up biting us even harder than it already is.
In my personal life, I've discovered to name some files with (the most common) punctuation. I've taken to using the full-width unicode variants. These work on Mac, Windows, and Linux. They don't seem to cause problems for any software that can handle utf-8 correctly. Looks like there are curly braces in the full-width stuff... it'd be \uff5d looks like.

No idea if it'd survive Tcl or not.
CRTC considering banning Fox News from Canadian cable packages
It depends on what you were expecting from GOFAI. The future state is likely to be a combination of approaches where each makes sense rather than a single one. We're still in the honeymoon phase with deep learning and disillusionment with its ultimate limitations is likely still to come.
I have legal, instant access to nearly every technical publication I need in digital form, but I still illegally download almost everything. It's much faster to get the docs, I don't have to slog through crippled page navigation or search, and they don't cut me off because I've opened too many research papers in one day to see if any of them actually answer my question.

The music and TV/film industries figured out how to get people to pay. The print industry can figure it out too.
> I'd also argue that if you're granting employees access to things using their personal email then you're going to hit a bunch of snags. I'll give this one more thought.

While I agree, I’d argue that the by-far numerical majority of companies don’t have sufficient internal controls to prevent someone from using whatever email they like when creating a dns record for some service. Actually, I even doubt that email gets turned off reliably.

It doesn’t generally matter, since the email address still validates the user’s identity to the same level, but in this case there is a chain of trust that isn’t necessarily trustworthy.

OTOH - a standard for domain verification is a good idea. perhaps it just needs to have an expiry date on it. It would be less convenient, but at least people could start to build tools around it.
https://academic.oup.com/ehjdh/article-lookup/doi/10.1093/eh... (linked in the References section)
As annoying as this is, I was mildly amused at the irony that this article itself has ads shoved between paragraphs.
> It works, and works well, and is supported by all the major domain providers.

Source? The domainconnect.org website certificate is revoked (great sign for trusting it) but it's a standard created by GoDaddy two years ago.

I can't imagine "all the major domain providers" all supporting it so quickly.

IONOS, one of the providers, only lists four companies supporting this standard as a whole, DNS or service provider: https://www.ionos.com/help/domains/glossary-important-terms-...
Interestingly I see your second paragraph as an endorsement to use flutter because it is platform agnostic. If the premise is your users want good UX, then they don't care about the rendering mechanics or uniformity (with regards to the rest of the web) of your application.

Sure it's an opaque flutter canvas you're rendering, but then the browser becomes just another platform you target for your app. Your users don't care, they just want the damn app to work everywhere with good UX.
Creators can get paid in other ways. It's their choice to rely on something people both (rightfully) hate and are willing to block for revenue.

If a creator must make a living by throwing State Farm ads in front of me again and again, I can't say I have much sympathy.
There are multiple numbers for inflation that are all tracked accurately. The most commonly excited is the unemployed and looking number. However, there's also many more numbers like total labor force participation rate that capture retired people or people who are no longer looking
I think you're overstating the new danger level.

The same applies today, you just have to utilize any other internal attack vector, such as code injection in CI, on the deployment server, through a personal dependency etc.
Brave is independently funded, but it's leveraging Chromium, so it's kind of receiving funding indirectly.
Compare European and US salaries sometime, you have no idea how lucky you are.

There's a reason tens of thousands of European engineers, doctors, lawyers, developers, etc. are desperate to move to the US.
Hey I saw you are facing some issue with reauthentication on reboot. If you are running it on a docker container then having a persistent state directory for tailscale might help (TS_STATE_DIR=/var/lib/tailscale).

I use it on my system and it works flawlessly on restarts.
It's around 31TB right now, you can read more about it on https://annas-blog.org/ or get the data from https://annas-archive.org/
More, of course. But better? Percentage-wise, unlikely.
downloading from onion exposes your location not always advisable :)
Information Superhighway Anagrams
That really varies by region
"for homeless" socks. I never knew such things existed.

P.S. You aren't, by chance, homeless, are you?
I think the answer is that it’s always a rate; it’s just that the skydiving is such a rare event we can implicitly drop the “per chute” because we’re assuming it’s always going to be “1 chute”.

If you took the skydiver instructor, doing hundreds of rounds, then suddenly skydiving should no longer be considered a “discrete event” — your determination of how to treat it isn’t based on the event-type itself, but the object undergoing the event.
The management seems to be extracting lots of value into their own personal wealth. Sure, that might end up killing the company long term but the amount of wealth they're extracting has the top management set for life.
Wireguard has a dead simple onboarding process as well. For users you want to grant access - providing a QR code and them installing the wireguard client app on their mobile device is all that is needed. Also wireguard server itself is a easy setup and has very little overhead. Took me like few minutes to install and setup on a raspberry pi 3. Of course, you do have to open up a port on your router. That's the only downside. I've since switched to Tailscale for that specific reason.
the point is that the tragedy of the commons is a lousy excuse.
Britain doesn’t seem to want us, say Revolut founders
Probably just some single celled life, like a batería analog. But still, that would be the biggest discovery of the century.
"It would be hugely helpful to have carbon removal technology in our climate change portfolio"

Planting trees and establishing more forests is a already working technology with lots of other nice side effects, while I see the "artificial carbon removal" tech often just used as a excuse to not do anything now at all and wait for the magic game changer.

"Set up a CO2 removal station in the desert, power it with a few square miles of solar panels, and run it when the sun shines."

And I totally like anything related to this, but as long as we build new coal plants, building this would be just symbolic.

So first I would use the desert solar power for actually powering the grid, removing the need for coal.
Gmail supports IMAP, right? Would changing to a different desktop/mobile client make the ads go away?
https://archive.ph/FQkDq
In padlocks we trust (2021)
Their goal is to incur that cost. It is a short term goal.
So what was a global contagion that affected several lives, businesses, and introduced trillions in debt is no longer an emergency? I would expect a big post-mortem to be done on such a destructive force if it's in the rearview mirror.
Thanks for mentioning this protocol – I've been a fan of Domain Connect [1] for many years and referenced it in one of my earlier comments [2].

Our Record Creator tool [3] integrates with Domain Connect, so if you want to setup a Domain Verification record for a domain with a registrar that's onboarded with Domain Connect, it will simplify the TXT record creation.

> Domain connect allows providers to request fine grained access to domain records, and for customers to allow/disallow those records, for a limited period of time.

From memory, the async flow enables this but I've not seen permission control available to customers in the way you describe. Can you point me at a screenshot or blog post?

As far as I've seen, these parts of the protocol have not been implemented particularly well anywhere. I'd say this is partly because the Async flow is far more complicated than the more basic flow, which most registrars and service providers adopted.

> This not only addresses domain verification but also configuration of complex configurations like spf and max records.

In my view, simplifying the setup of SPF, MX, A, CNAME records is where Domain Connect really shines.

As far as domain verification goes, I would argue that the two solutions are attacking a similar problem (friction for users creating DNS records) but in quite different ways:

Domain Connect simplifies the creation of the DNS TXT records that all service providers currently ask you to create.

In contrast, the Domain Verification protocol:

- Allows you to setup and manage multiple records
- Enables permission based access
- Enables time-limited access
- Most importantly, it reduces the amount of DNS records you have to create since the first one you setup can be used in onboarding with future service providers.
- It's far simpler to implement, once email verification is taken care the actual Domain Verification check is five lines of code.

> It works, and works well, and is supported by all the major domain providers.

You're right that registrar adoption is quite high, which is because it was a GoDaddy and 1&1 (now IONOS) initiative but when I last checked it wasn't implemented at Google, Facebook and many of the others larger providers for domain verification (to be clear: neither is my solution!!!)

1. https://github.com/Domain-Connect/spec/blob/master/Domain%20... (http://www.domainconnect.org currently failing with cert expiry)

2. https://news.ycombinator.com/item?id=35828772

3. https://domainverification.org/create-record
The evidence is that increased mobile use means increased RF-EMF dosage. It's not solid, but it's not bad for a survey.