skysight-inc/HackerNews huggingface dataset:
That makes sense. I always do it in post and its to find notes not reviews. Generally if someone writes notes they viewed the book favorably so there is some bias. But i usually viewed it that way too if im searching
YAML has a lot of extra stuff going on that can cause accidents if you don't take care. The classic example is the "Norway problem" where "no" (the country code for Norway) is parsed as "false" instead. If "no" is used as a key, this can cause the Norwegian data to disappear or to throw strange errors on load. The other big issue is that, by default, it allows relatively unrestricted code execution in many environments. If a user is ever able to submit data that is interpreted by a YAML parser, they can run arbitrary code, and potentially even commands.

The fixes for these are both fairly well known (always quote strings and keys, use safe_load or an equivalent API), but it's very easy to make a mistake.

TOML, by contrast, is much simpler - strings are strings are strings, they must always be quoted but other than that behave pretty much as expected. Similarly, there is no mechanism by which a TOML file can instruct the parser to execute arbitrary code as part of deserialisation, which makes it (a) a lot simpler, and (b) a lot safer.
You seem to assume that the expense would stay just so high. I'm guessing it could all be done for so much less.

For comparison, please see the buildings in the former Soviet Union or Venzeula or Cuba to see how well they're maintained in a workers' paradise.
After 15 years of playing rugby, where pain is an ever-present game mechanic, I will say this:

My hardest season was the one where I had shin splints. You'd think the concussions, the hematomas, the separated ears, the stomped feet, the scraped hands, the black eyes would be painful, and you'd be right: they're painful. But not as much as the shin splints. Go figure.
No way would I ever run a random exe.

I only run random bash scripts from the internet with sudo permissions
You can usually google the thing and find an official link to the download and get a sense of whether it's a generally legitimate software company.

If it's an internal tool they've built, either make up a story about how you're temporarily on a machine where you can't install new software, or do it in a sandbox.

I'm not going to just blindly follow an executable download link in any circumstances. It's the same as if my bank calls me out of the blue and wants to confirm who I am with personal details, I'll look up their number online and call them back that way before proceeding. (Hasn't happened in a long time, but I do remember having to do that with a legitimate bank call ~15 years ago, when they called me and asked for my mother's maiden name before proceeding.)
But GPT4 can’t access or change its model weights… so crisis averted?
oh, i wish they did that. That area turned out nice and bright, nice to walk by. But somehow it's a dead desert. The massive bus terminal seems empty most of the time. Even the not-nearly-as-grandiose caltrain station has more life around it.
" Right, but what they are supposed to be modeling is the market, so if they went broke doing so they failed at doing that. [0]"

soo now we've moved from "take advantage of investors being stupid by trading against it inidivudally" to "accomplish a FAR HARDER task by modeling the whole market". Cool cool, moving goalposts for days.

Calling certain investors stupid is hardly contradicting the idea that the market as a whole will sort itself out in the end.
>The guarantee is worthless, HN could generate a new key with the same "Anonymous" name

Actually, it's not. That new key is an entirely different identity, and if you're struggling making the distinction between its "name" and its "identity", I'd argue you're not the target audience for PGP in the first place. There are 45,000 John Smiths in the world. Are you going to also argue that the concept of identity is thwarted by this fact? No. I believe this argument is made in bad faith.

>and use it to sign whatever they wanted to sign, and modify your comment to post that. I have no way of finding out whether this already happened or not.

Have you tried checking the signature? (hint: it's invalid - HackerNews manipulates the whitespace). Verifying signatures is incredibly easy in GnuPG. Would you like me to walk you through it?

>In general posting GPG signed messages in forums is of dubious utility, unless you're a celebrity of some sort and have a key with a decent amount of signatures on it.

On the contrary, it's quite useful. Public key cryptopgraphy allows you to be absolutely certain that a messages with a valid signature were signed by the holder of the private key. You don't need to know who that person is, but you can be certain that he holds the corollary private key. Your argument seems to be conflating _that_ with an argument on the metadata e.g. the authenticity of the public key itself, and that's an entirely different discussion orthogonal to the _utility_ of PGP.

By the way, GPG is just an implementation of the OpenPGP protocol. There's more than one implementation (RNP, sequoia, and OpenPGP.js, to name some for instance).

>Even then, GPG makes path finding extremely inconvenient, so even though I'm very well connected on the PGP WoT, it'd take me a serious amount of work to verify a signature

So? I never said it was easy. At the end of the day, you'd have to trust someone. PGP allows you to trust your web of friends. TLS requires you to trust some certificate authority. You're not really making any case against PGP here. Moreover, it's net even close to the use-case I argued.

For a journalist trying to report his findings in an unfriendly country, PGP is an excellent choice. For a client to secure communications with his lawyer, PGP is an excellent choice. And I'm still waiting for you to forge that signature to prove me wrong.
(Haiku developer here.) This is a pretty common misconception, but it isn't true; Haiku doesn't have a "POSIX compatibility layer", it's just natively POSIX under the hood. You can find some elaboration on an old forum thread: https://discuss.haiku-os.org/t/is-haiku-a-unix-like-os/8801/...
How would that even be conceivably possible with the technology of today?

Look at the state of the art for projectors, they still require special reflective screens to reach their full potential. You're asking for what is still very much in the realm of science fiction.
Yeah, I'm the same. Google and a few others. The rest all just get the new password that Firefox suggests and I don't even pay attention to what it is.
speaking of the "dark web" I do wonder and worry about the seemingly growing pattern of censorship and chaos-sowing, from certain segments on both the political Left and the Right.

I'm trying to extrapolate from these trends, taking them into the future, and then parody them, in a game I've been building. (see my bio if curious)
i don't deny that child support is frequently extremely burdensome or even impossible for the person paying it. i don't have strong feels about alimony as a general concept being a bad idea. i do have strong feelings that the way child support is awarded is broken.
This is a well-deserved Intuit complain-fest.
I think it's a very special case of a deep lake in volcanic caldera in a tropical zone with a lot of vegetation and heat to make it decompose. Usual lakes don't do that (IIUC).
Linus Sebastian Is Stepping Down from Linus Tech Tips
I like the Quest 2 but you’re so spot on about the battery. I have to plan a day ahead — ‘maybe I want to use the Quest 2 tomorrow, better plug it into the charger and make sure everything is updated!”.

Although (tangent incoming!) I think omitting the OLED from the Quest 2 was a bit of a mistake. My theory is that the screen actually has more to do with why most games in the library have that same-y bright cartoonish look, rather than just the limitations of the XR2. It’s a relief the Apple headset is going OLED, if this leak is to be believed that is.
Graybeard opinion: all of toml, yaml, xml, json, kdl, etc., are ridiculously over-engineered for simple configuration files. You can nearly always fulfill all of your needs with a simple two-column text file of key=value pairs that can be parsed by a trivial call to fscanf(3) or whatever your laguage supports (yes, even correctly discarding comments). The world would be a better place if people just gron'd their jsons, xml2'd their xmls and so on, thus pruning the universal dependency tree by a considerable amount.
You do have to buy a subscription, but the desktop version is not done. There is a subscription for the desktop edition and separately one for the online edition. They are still perfectly happy for you to use the desktop edition.

https://quickbooks.intuit.com/desktop/ -- it's the "Work on desktop" options.
No public applications. Drakon and the CASE software based on it have been used in certain Russian and Ukrainian aerospace and energy industry projects. NPTsAP continued to use it in all their projects after Buran (mostly control systems for upper stages).
If you're going to run a shop like this, it had better have a newsstand, a library, a collection of board games, and the best coffee in town.
Almost certainly a system cofiguration issue. I’m pretty sure the default process limit on BEAM is something like 200K. Additionally I don’t see mention of updating file handles or anything else on the operating system.

Maybe I’m cynical but this is what happens if you rely on chatGPT to give you programming answers without understanding the fundamentals first.
Could’ve just said you work at google bc that’s the only place where it works like this afaik
I find it intriguing that you decided to build Domainotron.com using Python and Flask, despite not having previous experience with Python.

I haven't tried cursor.so yet, but I have experimented with similar tools and wasn't able to get it to translate code from a language I know to python beyond simple function translations (`len(arr) => `arr.length`).

I kinda regret spending all that time learning python if gpt can just translate code from a language I know to a language I don't know.
“The maximum number of simultaneously alive Erlang processes is by default 262,144. This limit can be configured at startup. For more information, see the +P command-line flag in the erl(1) manual page in ERTS.”

https://www.erlang.org/doc/efficiency_guide/advanced.html#:~....
ID button, beer, eggplant
Personal ones close to that. But as a contractor, way more than than 176.
There's an unfortunate correlation between how long and complex my password is and how I often I have to manually type it in. Microsoft are really good in this regard, and you almost never have to type in your password once you have the Authenticator set up. Google isn't too bad, once you're logged in, but you still sometimes have to type out your password in a situation where having access to your password manager is not convenient. But I find Apple is the worst - I often need to type in my password, and often in situations where I don't have access to my password manager.
Works great here (Firefox 113.0.1 on Windows)
Counter-anecdote: directly questioning "scale-out fantasies" has contributed to my early departure from a handful of jobs and contracts. One place was obsessed with getting everything into AWS auto-scaling groups when the problem was actually that they were running on MySQL with a godawful schema, dumbass session management, and horrific queries that we weren't allowed to fix because they were "migrating to node microservices anyway" (pretty sure that still hasn't happened years later.)

> Being able to constructively challenge assumptions is an incredibly valuable job skill

I would agree but ...

> good managers

... are few and far between.
*touchpal, not touchpad.
It's a PKI system, and by far the most widely used PKI system at that. Calling PGP "the most proven, and most supported PKI technology" is just simply not factual. You may not like it, but that is no reason to disregard understanding why it is so successful and something like PGP languishes with basically no usage in comparison.

(As a rough estimate, there's something like 10,000-100,000 PGP users.)
As do I! That stuff works damn well, I still use it on SBCs and 3D printer controller boards.
I don't speak Russian, but I think the grammar differences it lists are legit and not confabulated. Now, these are rather elementary errors, but I presume that ChatGPT could also generate more fluent English with only a couple of Russian-isms here and there.

Re: alcohol drinking etc. you just have to prompt engineer it to convince it that it's all just roleplay and nothing dangerous happens in the real world.
Would be nice to see throughput tested at this level. There is may be a good reason for Go to allocate more per thread if each thread is really doing something. Hat tip to Rust and C# tho!
Except it isn't a mystery at all. The new owner is Ecology Auto Parts, who owns a fleet of over 600 trucks that haul away construction debris and green waste (biodegradable materials). https://ecoparts.com/

It isn't a huge logical leap to figure out what the old iron ore mines will be filled in with.
Speed is only one aspect, comfort is the main benefit for me. The biggest change in comfort I found going from row stagger to ortholinear, then a small bump again going column stagger and low profile
What about country flags? For Gladiator I considered the Italian flag (and then also the thumbs up/down).
Well you would be dumb to give it anything but unique per-device credentials to a working SSL-enabled SMTP server.

For non-techy home or SOHO users, they're likely using smtp.gmail.com with their gmail creds though. Would not be unresonable to dedicate a gmail account just for scan to email IMHO.
It's not pragmatic, it's dangerous.

Sooner or later someone could take control of one of the accounts you don't care about and use in a way you don't expect to gain control of things you do care about.
FWIW, the 70% number of Chinese cheating students matches almost exactly with my own experience as a teaching assistant. I believe that most TAs with a sufficiently large class have made similar experiences. In general, cheating is much more rampant and organized than most people would expect. Most institutions just do not care because catching and punishing cheaters is a lot of work with little short term benefit.
> They’re all data with some attributes, and pgp handles them nicely, if you can write the interface for it.

This apparently almost wilful ignorance of the context of the "data with some attributes" is (specifically, how it's used), arguably, part of the problem.

It's been how many years, and still no-ones' written a good interface?
I believe it’s not necessary to fully verify a piece of software before it can be trusted. We humans are all black boxes, no one can read our minds, but we can trust each other through our reputations. I treat software the same way; as long as software comes from a reputable developer, I’ll give it the benefit of the doubt until proven otherwise.

Verified trustworthy is too high a standard to hold to software. Take for example Log4j, an open source logging library used by many enterprise Java apps worldwide, had a huge vulnerability existing in its code base for over 7 years. Even with its widespread use and open sourced code, the exploit was not reported in a timely fashion.

Thus I’m left with reputation as the only practical means of determining trust; imperfect as it may be.
'Juggler Encore' real-time hologram of a 1986 ray-traced animation
> I’m under the early adopter pricing but I fear that the higher price (and cognitive effort in lower prices to keep track of how many searches I’ve made) might make adoption a bit harder.

I pay for Kagi, I had a few minutes of minor outrage when I saw the pricing changes, which in retrospect was childish (for me, others motivations may differ). Iirc, the pricing actually won't change for me given the number of queries I do, and regardless I'll probably just get the highest tier anyway and be done with it. There are always ad supported options for people who want to save money. Personally I prefer to pay what it costs (meaning pay so that kagi can run a viable business) because I know how advertising perverts a business. I hope they can succeed by appealing to people who think this way.
> What if your purpose doesn't align with society's definition of talent? Are you worthless as a human being?

From the perspective of the nebulous and not clearly defined 'society', it certainly seems like it's trending in that direction.

The real question is why do you believe its judgements are what's most important?
In general, journalists at publications like the WSJ can't hold stock in companies they write about.
I don't assume it would stay 'just' so high, I just accept that some designs are higher maintenance than others.

Let's stay focused on market-oriented countries since that was the claim here - that the "market" could magically figure out how to maintain any given building cheaply. I'm pointing out that it's far more likely that the market would just give up. Why optimize the crazy building instead of replacing it with a boring easy one? Since you want to be snarky, though: ever wonder why there is such a thing as "historical preservation" status for certain buildings? It's because we know that not every building makes economic sense, but sometimes we want to keep them around anyway, even though if wholly under the control of a profit-motivated organization they'd be gone and replaced with something in the name of efficiency.

There is more to life than monetary efficiency.
Stranger in a strange land by Heinlein
An Example of a Sad Google Account Recovery Failure and Its Effects
G-7 Leaders Agree to Set Up ‘Hiroshima Process’ to Govern AI
There's no such thing as a "soft brick". To paraphrase one of the replies to the comment I linked to stated, calling something a "soft brick" makes as much sense as calling something a "soft pregnancy".

It either is or it isn't.
I have 921 items in 1Password; most of them are logins.
No, that's just the Ise Grand Shrine, and the cost of doing that is stratospheric.
I noticed he didn't use the latest version of each language. Maybe that's just what you get on Ubuntu 22.04 LTS?
You can enable developer mode ($20) on the Xbox series S/X and install (UWP) emulators. The Xbox also has pluton on the die so it's a lot harder.
I'd have something to say to them regardless of how I felt.
> I have the feeling that you're talking mostly of single-person (or at least small team) projects. Am I wrong?

Small teams. And ones that work collaboratively, not ones that than carve the code up into bailiwicks so that they can mostly work in mini-silos.

I frankly don't like to work any other way. Conway's Law all but mandates that large teams produce excess complexity, because they're basically unable to develop efficient internal communication patterns. (Geometric scaling is a heck of a thing.) And then additive bias means that we tend to deal with that problem by pulling even more complexity into our tooling and development methodologies.

I used to believe that was just how it was, but now I'm getting to old for that crap. Better to push the whole "expensive communication" mess up to a macro scale where it belongs so that the day-to-day work can be easier.
AI Lets Microsoft Target Google and Google Target Amazon
His book of essays/articles he wrote over the years is pretty great and includes many memorable turn of phrases. One I can recall almost verbatim from memory goes something like, "You can stir a vat of mollasses with James Wood's Chekhov boner."

His memoir Experience was also a good time if you're into that era and circle of people.
> If you want to charge different rates based on hour of the day, you should consider contract work rather than salaried.

What I'm saying is I don't want to do unpaid overtime and heroically sacrifice my weekends for oncall.

> The whole point of taking a salary is to have a predictable income, which cuts both ways.

Unsure what point about "cuts both ways" are you trying to make here. I think the company can pretty easily calculate how many non-business-hours are there within a month and allocate some money to compensate people doing oncall.
The only caveat I would add to this is: if you begin the position without the expectation of on-call being made up front, and then it's pushed on you without any extra comp, that's not exactly fair.

However, as long as that's made clear from the outset, yes, your salary covers you performing your expected duties whenever they need to be performed. It's not like salaried engineers aren't compensated well.
Any company offering full remote right now could easily pick a lot of talent being bled by faangs pushing for a return to the office.
We get multiple hits from Google (though not always ranked by merit). We can scan a few and we often find forum style threads containing valuable elaboration or criticism of the primary material.
Instead of paying $5000 for a tiny 1 bedroom apartment so you can go to a nice library in SF:

Move to a cheaper place, buy the same books you were interested in borrowing brand new, plus bookshelves, plus a high end reading sofa, and perhaps even pay an actual human to read you the books and you will still would have spent less money. And if the book is not for sale, pay for a plane ticket, visit the library in SF and go back. Again, you would have spent less money.

Regarding the museum, you could move to a cheaper place, and each time you wanted to visit the museum, simply pay for a plane ticket, visit the museum, go back and still spend less money than living in SF.

Regarding the music stuff: move to a cheaper place, hire a musician full time, brand new instruments, a recording studio, and you will still have more money at the end.

Do the math. Living in SF is throwing money down the toilet.

Have fun drinking $50 fruit juice at "Joe & the juice".
I think it's better to charcoal the wood and burry the charcoal. If charcoal is stored properly, it takes a lot of time to decompose and keep the carbon down there for a long time. And it has less storage problems than CO2 that is a gas and wants to escape.

Probably instead of wood, it would be better to use other agricultural waste. For example here, some sugar factories use the rests of the sugarcane ( https://en.wikipedia.org/wiki/Bagasse ) to burn it and produce heat and electricity. I'm not sure if it can be charcoaled and buried instead.
380+ logins on bitwarden

45+ 2FA on Authy

2 yubikeys

It gets... pretty confusing, especially as I've not checked the gopass repo, where I keep _other_ stuff, too...
I have no idea why your number is so high. If it's not heating or AC, if you do run a small server room, that can explain things.

To be frank, my consumption was already quite lower, but I've made quite a lot of changes to reduce energy consumption even more.

I ran a custom x96 router/fw that I replaced with a $60 Mikrotik router that also replaces a separate switch. I've replaced more power-hungry computers with energy-efficient ones.

My existing server setup ~500Watt continously would likely take up 10KWh a day, but this is my magic trick: I don't need them 24/7. So they are off, and only turned on when required (remotely with WoL / remote power switch). The rest of what I need is on several Raspberry Pi 4B+ devices (I was lucky to buy a ton when we still could).
I prefer not to use tabs at all. Rather than opening a new tab, instead I almost always open in a new window. I have Firefox customized to hide the tab bar when there is only one tab. The luxury of lots of high resolution monitors helps as I can view everything often without scrolling and without switching tabs.
This. SMS 2FA has been considered insecure by NIST since 2016 [1] and it's a major pain when travelling and swapping sim cards.

[1] https://www.theregister.com/2016/07/24/nist_says_sms_no_good...
That also speaks to the enduring appeal of tools like vi and emacs.