skysight-inc/HackerNews huggingface dataset:
I'm agreeing with you that there are many reasons why the music Industry doesn't share stems but also concluding that many among those could be rationally considered gatekeeping by various groups. I'm not disparaging the industry as a whole or the individuals who comprise it, but the reality is simply messy. Many signed artists I'm sure wish they could distribute their stems or more of their process, but are hindered/prevented from doing so by labels. Seems close to what gatekeeping means to me, but that's just like my opinion, man...
I’ve used it to write a layer 4 load balancer to replace old hardware appliances. Similar to Facebook’s Katran, but switches traffic at layer 2 (rather than L3) for compatibility and in Go rather than C++,’cos I’m not a great coder ;-)
Incidentally, iteration limits are a good idea for production code anyway. If you don't imagine any input needing more than 50 k iterations, throw a user-friendly exception after something like 10 M iterations. Prevents much more annoying problems than it causes.
Not the Tsarist monsters who sent waves of young men to be butchered in WWI?
I believe it's from 2016 and by far predating the Mavic series which made drones common among regular people. So if you're looking for similar opportunities, you probably need to jump on the next trend before it goes popular.
> I mean, what are you exactly talking about here? Because developers do criticise each other all the time, both in code review and outside of it. If they have trust, they talk plenty. If you do not see developers communicating, it is because of how you lead a process.

It's not just communication which is needed. It's effective communication. For example, criticism without structure and consideration comes across as unkind and destructive. This is the piece which I rarely see working well without a framework. It doesn't have to be scrum. I just see scrum solving this and many other problems really well.

> Scrum is so inflexible, that it literally prevents accommodations for issues like this. And that is not even speaking about the fact literally this should be job of people management. This is literally what leaderships should do, because they have actual power to change the things.

Scrum doesn't have to be inflexible. It should be tailored to the needs of the team. The catch is that changes should be agreed by all, rather than one member going rogue. "Rockstars" hate scrum.

As for the "job of people management," if you're punting the responsibility of collaborative team dynamic to your leaders, be prepared for them to lead you. With scrum.
A small spelling mistake snuck in.
Who should decide how things are spent?

My wife and I vote on our personal budget all the time.
If you don't need a proper second factor, just set up TOTP and store it in KeePassXC. There is little benefit to a WebAuthn/FIFO "key" stored in your password manager over a password manager with your TOTP stored in it -- almost all of the benefits of WebAuthn (making phishing much harder) already exist with password managers that auto-fill.

There are usecases where you need proper multi-factor authentication, and in those cases you are either a professional (meaning you can handle backups yourself) or you're working for a large company where the management of the keys is done by IT and normal workers don't have to care about it.
Show HN: The Foreplay Game [a Bit NSFW]
Free, ad-free foreplay games. Created with Next.js.
I rest my case. If someone told me that the only way I was going to notice something is with the stuff you are saying, I'd be pretty reluctant to trust them.

If you're talking about optimizing around some agreed upon thing, sure I can understand the idea of using some more complex statistical analysis (though I might question the incremental value).
> I think the root of the issue is that newer versions of GPG have changed the format of the ciphertext in a way that the bouncy castle version OpenKeychain is using doesn't parse.

It might be worth your effort to test your hypothesis with an older version of GPG. The LTS version would be especially easy to investigate.
I have often considered that the word should be exfenestration. The frequency with which I've considered this probably says a lot about me.
> Buy a second Yubikey

I can (as a geek) but this is a problem for average Joe or a single mum with 2 kids.

This is the reason even banks or <your employer> incl. Federal places uses Cisco DUO not an opensource solution.

Most things are for average customer. passkeys are great

- Assuming a person keeps one password (either Apple or Google OK)

- Phishing for them is reduced

- No need to squeeze brain for was it username or email address (for login field)

- Most phones have fingerprint (even < $60 in developing world too with Android)

- Passkeys work from Android 9 onwards

- At the end some one needs to compromise.
It's a huge first step, but only a first step.

We still need:

- Guaranteess that attestation won't be used to block KeePassXC from being used as an authenticator. (Edit: it's been pointed out below that Apple is getting rid of attestation for its platform authenticators, and as far as I can tell that's true. Extremely big deal because nobody is going to want to cut off Apple keys, which effectively means those services can't require attestation. So assuming it is true (which it looks to be) this shouldn't be an issue.)

- Support for platform authenticators on Linux for Firefox and Chrome (Chrome currently has "no plans" to support this).

- Compatibility with other platform authenticators.

That last point is possibly the biggest problem, and it's part of why I've been pushing that this needs to be part of the spec. Okay, let's say you can export and import from KeePassXC. To where? This is still going to be a situation where a family member tells me they're interested in switching to Android and I have to tell them that they'll have to one-by-one transfer their login information. This is still going to be a situation where if you export your keys from KeePassXC, you won't be able to import them into anywhere. It'll still be a situation where if a family member loses their iPhone and they haven't synced keys to other devices already, their only solution is to buy another iPhone like a good little consumer.

That's not to say that an Open implementation of a platform authenticator doesn't matter. It absolutely does, it's just only a first step. We still need buy-in from the FIDO alliance itself that importing/exporting keys is an important part in general of being a passkey provider.

And we still need to see how the attestation situation is going to play out (see note above) and whether there are going to be any consequences at all for sites that just try to block anything except mainstream devices (see note above, the consequence would be losing iPhone users).
Ricky Mondello is a senior member on Apple’s Safari team. They were the actual presenter of PassKeys in the original WWDC video.

So at least Apple is on board.
Programming types and mindsets
Please build your own roads then...
The first paragraph of the article says the UK government is launching a service they call “CyberFlix”, and that a popular pirating app by name already exists.
Yeah, snowflake is super nice for analytics, but PG will get you a long way with less complexity (given that you're already using it for OLTP).
Most countries that inherited the Imperial Copyright Act extended the copyright term via national legislations decades ago. Canada and New Zealand were notable exceptions.

New Zealand did sign a FTA with the UK promising to increase the copyright term but it hasn't happened yet. I feel emotionally invested in this because if the New Zealand Parliament doesn't pass the legislation this year, Tolkien will be out of copyright next year.
Where's the insurance come from? and who provides the naval force to protect these shipments in other currencies? and what currency can handle 32T in transactions?
From what I have read the state will own 51% of new mines and levy special taxes on the profits. They won't be offering any capital to build the mines or refineries though. It will be interesting to see if there are any takers.
>"Canada will continue to do its part to protect the interests of artists, creators and rights holders, while continuing to balance the needs of industry"

They could have just put "the needs of industry" as the real reason and spare us of their weasel rhetorics.
Because they don’t actually need to defend it. We see that all the time, these days. When someone is called out on extreme rhetoric, they don’t bother to defend it. They just throw ad hominem attacks at those that question the position, and double down on their BS.

It works a treat. Trying to “call out” people, these days, simply gives them a new platform, and actually amplifies their hate.
Absolutely not. It’s illegal for the common person in America, but there are plenty of locations where it wouldn’t be, especially with a drone license.
This is the only video that ever explained it concisely and clearly, IF you don't care about trying to actually implement it: https://www.youtube.com/watch?v=YEBfamv-_do
The first time I saw someone using a VR headset was in 1994, the technology might have improved, but the adoption issues hardly changed.
Show HN: Taggy – Generate right texts based on the content of your photo
What can you do with Taggy?

Find the right phrases and keywords for your posts. Increase the visibility of your content on social networks.

- Generate custom captions and quotes based on the content of your photo. You can add or remove hashtags and keywords to generate new texts.

- Easily copy the text with the hashtags and use them in your publication.

- Edit and download your optimized photo adapted for social networks.

How does it work?

We use AI to detect and classify the keywords of your photo. Then, we translate them into trending texts, topics and hashtags.
> I know what SSR is and you can do it[1] in Rust, where you write type-safe, compiled Rust code and send HTML/CSS/WASM to the browser.

Yeah, but that way your frontend team is forced to develop in Rust, instead of develop in JS/TS. What I want to do is enable FE devs/team to do their job (writing JS/JSX) happily ignoring the server, and at the same time do SSR on the server happily ignoring how FE devs/team implemented the view.

You might notice, "ok but they need a contract to know which is the data shape that the server is going to provide to the JS/TS render() call"; yep, that's one of the challenges of what I'm trying to do :D
> Why would I pay $4/month

This was my biggest question. And changed my mind from “kind of neat hack” to “wtf, is the point to just trick people into doing things an expensive way.”

I can’t help but be happy that we didn’t have the 4 Hour Workweek way back when or wget’s author would be trying to charge $7.22/month or $62/year for the amazing capability to scrape web sites. Or every gnu util author would be trying to get $4/month (ie, we’d never have gnu utils).
That's the reason why I am doing a BSc in molecular biology in my 30s. The gap between possible and realised is just so unbelievably huge.
> The Ring doorbell doesn't function as a doorbell if it loses wifi connection. Oh and when it's connected, the initial press does ring the doorbell, but subsequent presses don't ring the doorbell, and this is by design. During the brief time I had it connected

The Ring doorbell absolutely works as a mechanical doorbell if it's hard-wired into the doorbell system in the house...if there is one.

Other than that, totally agree with you re: built-in "smart home" systems. They are cheap systems builders use to drive the home price up that you don't have much control over.

If we build our own house, I'll ask for non-smart devices but replace them with my own. I LOVE our smart home stuff.
Yes, but this is tautological.

"If I can clone a physical key, or create a copy, then it's not a good physical key" isn't particularly insightful.
If you were to learn a phrase that insulted the king in Thai, and said it in Thailand, you would end up in jail. Doesn't matter if you understood what the phrase said. Ignorance doesn't make you immune to consequences.
It may be worth investing your time in skinning/theming whatever reporting/search tool you decide to use :)
It worked for Gmail.
it solves how to integrate LLMs (Langchain) an application API pipeline with Rasa... of which I could not find an out-of-the-box public example on github. and so here we are :)

TL;DR: i solved a friend's headache (at the time)
Show HN: Play and Create Games with ChatGPT
I didn't know what tensegrity was and the Wiki is... very unhelpful. Almost cult like. Here it is verbatim:

What is tensegrity?

Tensegrity is the way the world organizes itself. Build or buy a model and experience it yourself!

Why learn about it?

Whatever your goal in life, it's good to understand how the world works. Tensegrity, discovered about 60 years ago, is a new way of understanding forces at play. Whether you are building a business, designing household objects, building robots, or trying to live sustainably in a resource-challenged world, tensegrity offers innovative ways of thinking about how parts and wholes interact.

What is Tensegrity Wiki, The Encyclopedia of Tensegrity?

This website is a wiki dedicated to exploring the field of tensegrity, a subset of energetic-synergetic geometry. It is intended to use the "power of crowds" to fine-tune and make available accurate knowledge about tensegrities. This includes all aspects of tensegrity including structural tensegrity sculptures, dynamically adjusting tensegrity robotics, biotensegrity as expressed in cellular mechanics, biotensegrity as expressed in mammalian anatomical fascial/bone structure, tensegrity therapy as a set of mind-body practices, tensegrity as it illuminates ancient philosophies of harmony, music and dance inspired by tensegrity, and so on.
> If the "you" is an external person asking for a "quick job", then the default answer is "talk to the scrum master" whose default answer will be "No.

I hate working with people like this. So unhelpful.
I find monospace fonts surprisingly readable, but the font size is too small on smartphones, and yeah, the alignment is off.
With few exceptions, the motivation for scale that isn't driven by a real need in the real world is because someone wants to experiment with distributed systems and is looking for an excuse. I think it comes from a good place -- wanting to learn something new, or add a new skill to your toolbox.

However, what happens is most of the time the product or company will never even reach that scale so that effort will be wasted. If you're not able to close the loop and actually support a running system at scale, with a real workload (not simulated or ab stats) it actually does the opposite: you don't learn what really works and what doesn't. It's easy to convince yourself you have built a system that can handle such scale based off back of the envelope calculations, synthetic testing, or cargo-culting.

Most of what actually happens with scale in the real world has to do with old & boring things like appropriate choice of data structures, cache design, load balancing, locality, etc. and has nothing to do with distributed computing, serverless, etc. which are just tools that have specific characteristics that might make them good choices or not.
What I find particularly interesting about games is that it is treated as an entertainment product from a marketing prospective (which obviously it is) but it is the only software that is treated this way.

We get release dates sometimes a year or 2 in advance and yet maybe internally we (software engineers not in the games industry) have some idea of a release date but we sure don't share that publicly beyond maybe a month.

You could argue that there are pieces of this in movies, particularly in CGI and animated movies like Pixar. But from what I have seen a lot of that tends to be more finalized once we have a release date in that area. Maybe even at the rendering state.

I wish more games could follow a better software development pattern but it would be really hard to change the industry now it seems like. Gamers expect it and publishers expect it.
Any problems students experience in transferring credits are entirely the fault of the college/university administration, especially between same-state schools. Community colleges have been major feeders to the university system at least since the 1960s. I remember in the 1970s hearing about negotiations between the local university and CC departments to ease the transition of students between schools. Of course, there were always some courses that were taught less rigorously at the CC, but students were told up front about their transfer value.
Criminal of Theseus, lol.
If it makes you feel better, most American home owners have a loan that originated with one of them and still don’t know any more about them than you do.
And if you need a person with supercharged rights and a slippery amount of liability...form a corporation.
Very little is "impossible". The point of developing a good second factor is to have a design that makes it economically infeasible to copy. Like a good HSM.
I’m sure the CIA will think of something.
> Are you sure about that?

Yes I'm quite sure. Unless you're claiming that source code existed before humans?
I disagree that a proper key-based solution wouldn't have security benefits (auto-fill doesn't always work and is more vulnerable to phishing).

But I also really want to be clear here that we are not talking about multi-factor authentication in the long run. The explicit goal of Google/Microsoft/Apple is to get rid of passwords. Passkey is designed as a replacement for passwords. It's not a replacement right now, but that is the intention, they are not thinking about having a Yubikey as a second-factor for login.
Nice such a tool appears up here. There is still lots of unsolved problems in the open source space of drones.

We are currently developing a open source flight log database & plotting tool for ardupilot logs (graphs, maps, stats, images using PostgreSQL, FastAPI, Next.JS) covered by the german prototype fund (sorry german only link) : https://prototypefund.de/project/searchwing/

Source is here: https://gitlab.com/searchwing/development/groundstation/flig...

Maybe this is also helpful for others.
Not an expert at all but I would expect there to be shared fossil record on coasts that used to be joined up until they are no longer joined. So probably based on that data we can make good estimates of time periods and joined up coastlines.
== A REPORT FROM WITHIN THE GOOG ==

'a plan to make Google Search more “visual, snackable, personal, and human.”'

"visual" => easy to mix ads into the results without the mark realizing it

"snackable" => addictive

"personal" => personalized to the mark because that's what advertizers want

"human" => where possible, AI-generated or customized to more appeal to the mark's emotions and desires

The ads must flow.

I was not here.

I did not say this.
To read public gists, do you even need oauth? Why not just pull all the public gists using your own GitHub api key? You don’t need the author to login at all with a GitHub scope.
What's the private part of the Quebec model?
> Rather than conjecture, why couldn't they just phone up each packer and ask if that's what's happening? Why do we need pontification in this case when we could just go look?

We know meat packers do this. The question is whether this behavior explains price asymmetry. There are reasons why it might not (e.g., other market actors in the beef market, goods substitution, cost of demand smoothing, shelf life, etc.)

The details matter, and no sane packer is going to release the models/algorithms/decision criteria they use to determine when and how to release stored inventory.

> The language in the paper just makes me think the whole thing should be ignored. E.g. there are sentences like:

I hate this.

It's researchers accurately reporting their findings. They aren't "pontificating". They are explaining the nuances of what they discovered when they tried to answer this question.

These days, you can't just ask a real questions in plain English and then accurately report your findings. If it's not TED Talkified bullshit, you'll get pilloried by the commentariate for being mealy mouthed. Our appetite for nuance is dead, and with it our appetite for truth.

Also, given the point you're trying to make, you picked a weird sentence for focus on when this sentence is in the intro:

> We do not reject the null hypothesis of symmetric responses to shocks
at other points in the distribution chain when models are estimated using scanner retail price data.

Asking a question and finding that the answer is "yes, but not as bad as previously believed" is a contribution to our knowledge about the true state of the world.
Do you know there is a country named Sweden, that didn't follow lockdown herd mentality and they didn't die?
It's data. No one owns data.
"People" aren't owed an unstainable business model by society any more than companies are. Taxing everybody else with copyright rules is not a clear net benefit for society.
Looks like a snake neck darter.
> why couldn't they just phone up each packer and ask if that's what's happening?

And Tyson and Cargill will just give out corporate information to anybody who just calls them?
Just to be clear, because I do t know the answer to this… if Google locks your account, can you still use your Android device to login with a passkey to that other site?
the next best platform I could find for my friend I was helping was google's dialog flow. again, it was managed, closed-source opinionated and not as flexible. and most importantly design considerations were for a pre-LLM world.

i personally think there is an acute opportunity for creating a bare bones rasa built with LLMs in mind. the core concepts behind rasa are useful (domains, intents, actions, etc.) but the underlying NLU technology and assumptions around the platform are obsolete so 70% of the footprint is unnecessary.

just my humble Ξ0.02
> since free plans might eat a lot of resources

Will they though? It seems like all this runs through some free level GitHub actions.
It's someone with a passing knowledge of logic and expecting justice to work like boolean logic (a && b = true but the current legal system says it's false!)
NDCG Is Overrated
The budget is implemented with a law. There's a good reason for that. Parliament passes laws. And the budget is decided by Parliament. So they implement the budget with a law. The mechanism is fundamental to the Canadian (or UK) political system. The government, the executive branch, must have the confidence of the legislative branch, the authority to rule, which means having the support of a majority of Members of Parliament. The budget is a confidence bill; it must be debated, voted on, and pass. If it does not pass, the government has lost confidence, has no right to rule, and an election must be called.

It's conceivable Parliament could implement a law that allows taxation and spending to be discretionary within a range, by the executive -- they in fact do that to give departments some emergency room. A large such allocation happened during the COVID crisis budget. But the overall year-to-year tax levels are debated and argued anyway in Parliament, so they might as well just write it directly into a new law.
A temporary limitation to your freedom vs being forced to bear a child. I think those two things can be confused only if you intentionally want to confuse them.