skysight-inc/HackerNews huggingface dataset:
Lol thank you armchair psychologist stalker, for your concern. I have generally found the contrary to be true in my anecdotal experience that people who travel all over, constantly go on hikes and seek out "nature" are the ones trying desparately to find purpose in life. I just decided I don't need to tour Italy to sense purpose in mine. I'm happy to lie down do my work make my money and decide what I'll do with the rest of my life.
Debian is basically the reason we didn't delete PGP signature support in 2018, because in theory some handful of Debian packages might be better off with this support.

In practice I think the handful of packages that this happens on isn't particularly meaningful or valuable, and in my experience what happens when Debian finds a new key signing packages is.. highly variable. I've seen them just disable signatures when a new key shows up (on major packages even), I've seen them just blanket copy whatever the new key is, I've seen them look at release notes for what the new key is. In one or two cases I've seen them actually track down the project and ask for verification of the new key.

To me, the PGP support in Debian's uscan feels more like security theater than actual security controls, given my experience with the varied responses to a new release being made by a different key.
It's a reddit thing which is why it doesn't land here on HN as well.
How do we know that either side isn't lying about the depth and breadth of their nuclear arsenal?
Thank you, it makes a lot more sense now.
The new listing.
same. been using it for years now, and even wrote my own plugins for structures I used often
They've got a much better deal than Eastern Europe, who went into the Soviets' sphere of influence for 50 years. But the US and the UK are willing to fix this by including those countries into NATO and giving the Ukrainians weapons to defend themselves (and the rest of Europe).
PGP is much more than email. It is a general-purpose text and binary encryption system with FOSS libraries and user-facing software for every major platform.

It can be used for email, IM, package signing, authentication, and many other uses.

And it is time-tested, with 25 years of library-building and 25 years of people trying to break it.

Yes, it has many features which most projects don't need, and anyone is free to not use those features. Most documents I write do not include tables, but I would not argue that tables are an unnecessary feature.

And same with PGP, I don't use most of its features, but I'm OK with them being there.
Locally ran models exist, and more will come and they'll become cheaper and easier to run.
Same. r/StallmanWasRight

I see the big fight now is over AI. The talk is over AI ethics and safety … but can we honestly entrust that to Big Tech?
Thank goodness we killed off all of those troublesome small forums and communities that weren't full of advertising or roaming psychopaths, in favor of the splendid experience offered by the likes of Twitter and Facebook.

Toooootally worth it. /s

I hope that people have learned a simple fact: megacommunities can't be effectively moderated, a place like HN probably represents the upper end of how many active users a site can tolerate and still be worth visiting. A place like Reddit is more or less just an open sewer by comparison, and it's hard to imagine a way to change that at scale.

Small communities share aims and tastes, individuals can stand out and be dealt with if needed, and an affordable amount of human moderation can handle spam and bad actors. Twitter, FB, Reddit and all of those giants are too big to work, and that's why they're full of such miserable people shouting at each other.
I was coming here to say the same thing. It's really amazing that they used their own domain name to receive the payload from this malware analytics code. Possibilities are (1) all of the people associated with this company are not real people (faked LinkedIn profiles and everything), (2) they are really, really dumb, or (3) it was a roque employee/contractor who saw an opportunity to set this up and skim some cream.
Worth the click! I had no idea there were such things as limnic eruptions.
They are cheap. Most people don't realize the extra long-term cost. They only realize how hard they were fucked over when they need to get their first ink refill. I doubt many people buy more than a few printers in their life so the brand loyalty isn't strong.

I think the solution should be something like the EnerGuide labels that reveal the long-term cost. Then customers would be able to tell that this cheap printer sold at a loss will have crazy expensive ink.
Ithkuil, the Most Complicated Language
That’s the point of AI in search.

It will help you surface information faster.
Plotinus (2018)
Looks really cool, but What is the goal?
Redis already something instantly fast, and single thread brings a lot of benefits. Also Redis is multithreaded in a few smart things (sync to disk is a separated thread)
Wow, two posts about accounting at the very top of the front page! Must be a slow Sunday.

For my (extremely simple) accounting needs for my book writing, I looked at some of the packages, got turned off by the subscriptions, and realized I could do what little I needed just by opening a separate bank account, and doing all the costs & revenue through that. The bank takes care of the storage, and you can download a CSV of the whole year and import that into a spreadsheet. Some massaging and then give it to the accountant.

Obviously for a real business, you need something more, so I'm not saying this would work for everyone.
Any tips for getting ERPNext up and running? I just spent a weekend of yak-shaving, and I get to the point where nginx is routing my requests to the “bench start” process, but refuses to serve a page.
Haven't gotten the web browsing mode to successfully do a search yet. I guess their side of the search has been severely overloaded?

I know it is beta. Let's hope this clears.
Free Blue Noise Textures
Perhaps it is possible to avoid having the plaintext in memory at all?

- Only compare the crypttexts, never the plaintexts

- For input use a modified input field to minimize the time the plaintext kept in memory then wipe the memory used by the input field before releasing the memory

- If possible ask the OS never to swap the memory used by the input field
They could if you parsed it into syntax tree wit some methods to access keys instead of parsing into native struct. I think I saw YAML parser doing it...
It's a very relevant risk.

https://methinyourhouse.com/meth-fumes-from-the-neighbor/

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6926576/
I don't know what prompt you used, but this is what it tells me (just to be clear, I don't think it explains anything beyond higher temperature = higher randomness, range of API values 0 to 2):

> In the OpenAI GPT API, the temperature parameter controls the randomness of the model's output. A temperature value of 0.7 in the GPT API means that the model's responses will have a moderate level of randomness.

> When generating responses, a higher temperature value, such as 1.0, makes the output more random and creative. This can result in more diverse and unpredictable responses. On the other hand, a lower temperature value, such as 0.2, makes the output more focused and deterministic, with the model tending to choose more probable and conservative responses.

> By setting the temperature to 0.7, you can expect the model's responses to strike a balance between randomness and coherence, offering a mix of expected and unexpected answers.
>I pretty like the idea of a superset of JSON that supports (1) comments, (2) trailing commas, (3) unquoted properties, (4) optional {} for the root object, (5) multi-line strings, (6) number separator.

You're 90% way there to YAML.

And YAML 1.2 cleaned up most of the annoying YAML edgecases too
Of course it is the cost is a fixed overhead per-bug. It may be expensive, but it is scalable.

Plus on an open source project it may be a great way to attract more developers and document how the software works internally which may pay for itself.
LLMs definitely help with examples. I use them for that all the time - for any library that had reasonable usage prior to September 2021 they often give me the exact example code I need to understand how to solve my problem.
Do you have a link to your layout?
The amount of time spent worrying about this is vastly overestimated. You don't really have to worry about lifetimes in your common day to day coding unless you're doing some seriously performant or low level stuff. At which point you probably don't want a GC anyway.
> high-performance, low-complexity, and built for scale.

So, exactly like redis?
> But it can also be an impediment to iteration. Sometimes the code you're working on is still so experimental that you don't really know what the best structure and flow of data will be yet, and it's easier to just bodge it together with maps and heterogeneous lists for the first few iterations so you can let the code tell you how it wants to be structured. Having to start with static types subtly anchors you to your first idea. And the first is typically the worst.

That's a very interesting observation.

Let me add a counterpoint, though. Indeed, you will refactor everything. But by having strong, static typing, you have a much clearer idea of what you're breaking along the way. Cue in hundreds of anecdotes by each of us, when we broke something during a refactoring because the dependency was not obvious and there were not enough tests to detect the breakage. I've seen two of these in Python code just this week.
Because more AI-generated SEO garbage is exactly what the Internet needs.
Ask HN: What is the best piece of advice your manager has given to you?
Don’t forget Apply also got the soft keyboard right which was no small feat. People were dead set against it but here we are no physical keyboards anywhere on smartphones.
Smart religious people will invent some, for them plausible reason for why it was all God's plan all along. Better to not touch that topic.
I have a 42 key. When I switched to Miryoku, I just removed the extra keys.
The blackberry message thread context was terrible, iPhone was better - come on, don't lie. The idea you could get full screen visual context was the kicker - blackberry screens were 'decent' but when it was a ~2.5 inch height, compared to the iPhone - it was unreadable.
I’ve been using hledger for a few years. I’ve tried Mint, Personal Capital, PocketSmith, YNAB, RightCapital, Tiller, and none of them ever give me a complete view of expenses because there’s always a problem getting data from one or more banks. All of these hosted tools use Yodlee or Plaid on the backend and there’s always a problem.

The common denominator, however, is CSV. Every service lets you download historical data as CSV, which can be imported by hledger and turned into journal files and then into visual reports.

It’s a bespoke setup and super nerdy and is a bit of a pain, but it’s literally the only solution that works for us.
> Which one do you think is preferred, cooking in the kitchen and wearing a headset, or propping your iPhone up and FaceTiming while cooking?

That's amusing, since wearing the headset while doing physical tasks on factory floors was the exact use case Microsoft pushed for Hololens 2.

> Microsoft’s HoloLens 2: a $3,500 mixed reality headset for the factory

https://www.theverge.com/2019/2/24/18235460/microsoft-holole...
There's not a singular thing at fault.

Though there is nothing inherently free or decentralized about "PKI", and given your conflation of those concepts I suspect that you're not actually aware of where the lines are drawn from.

Certainly the decentralized nature of PGP adds some challenges to good usability.

However, a large number of the problems come from the PGP spec itself (some of which is defensible in a 20+ year old spec, but not in anything in a modern system) and from GPG's poor implementation.
It's ANOTHER subsidy for the fossil industry. We (earth) already pay [1] them around us$1T/yr to accelerate our demise. CO2 offset subsidies are on top of this [2].

So instead of stopping X, we pay them to continue X and then pay them to cook some books about X. Insane. We will be the first species driven to extinction because the alternative wasn't profitable.

[1] https://www.iea.org/reports/fossil-fuels-consumption-subsidi...

[2] https://www.investopedia.com/terms/c/carbon_credit.asp
How do you know activating private mode in Chrome isn’t doing the same with Google?

After all that’s their business model too.
There is really a conspiracy theory for anything.
`cargo new --bin cli`. There, it compiles.

I use Rust because I want to move fast. Python would slow down my iteration significantly. I have a lot of experience using it and I prefer not to whenever possible.
Agree, and would add that “apps” is likely the wrong mindset: This thing is going to be all about experiences. Yoga on the beach. Standing on the pitch during Ted Lasso. Watching the Apollo moon landing from the surface of Tranquility Base.

Either they have the immersion and UI model that makes this kind of content viscerally “wow”, or they don’t have a product. I’m guessing they have a product.
AI boom could expose investors’ natural stupidity
> No firmware released in the last five years has been jailbroken without leveraging the bootloader exploit

It's worth noting that the desire to break these firmwares are much lower since the bootloader exploit exists. I'm sure people would be looking much harder otherwise.
I write both Java and Python for a living

trying to guide junior devs in the right direction for python is nearly impossible (don't use setup.py, it's deprecated, ah except that, ah setup.cfg is now too, use setup.toml, ah I'll just check the docs, crap they're incomplete and inconsistent)

you can't call your package that as someone already used that name on the internet and it's a flat namespace, sorry you can't share modules between teams because everyone has their own mini pypi to push to and the tooling is actively hostile against namespacing

and the same is true of the build chain, trying to version the packages, even getting coherent
dependency resolution between machines is a complete disaster

Java sorted out all the packaging mess 20 years ago, meanwhile Python continues to re-invent everything badly, and not just badly, really really badly

meanwhile pypa are faffing about mission statements and making github uploads very slightly more secure

python needs a Sonatype to replace pypa
“Portable workspace “ is an interesting concept to me. Something more than a laptop screen. It would be hard to get input devices right when you’re wearing a headset though.
Nothing is 100%, but there is an semi/implicit financial arrangement in most marriages.
That's not the behaviour you actually want though. You need to know exactly when a file closes.
People have been trying to educate users about PGP for what, 30 years?

At some point you got to say "yeah, we gave it our best shot but this is not working, let's try something else!"
Look man, just pay attention to your kids and don’t prioritize ideology over their needs
True. Also, there are definitely traditions and notions about better and worse jobs which play a role, besides supply and demand.

In some countries salaries for some jobs do not rise even though there is a clear lack of supply. But they just cannot move the salaries up (by much), for not disturbing their artificial salary hierarchy. You cannot pay the nurse better than the physician, even if you are direly lacking nurses and have a surplus on the physician side. Well, you could, but nobody actually does it.
GnuCash keeps a year of backups (e.g. old saves) by default. It's probably still there.
I don’t know how people reconcile “python is beautiful and elegant” with “name your file __init__.py or __main__.py” while keeping a straight face.
An excellent clarification to make.

"Formally verified software" means that some portion of the software's expected behavior has been rendered as a proposition, and that proposition has been proven correct using some kind of proof assistant or theorem-proving software that we assume correctly validates the proof of the proposition. Bugs can exist in three places, then:

1. Within the theorem-proving software.
2. Within the proposition itself.
3. Within the portions of the code that are not formally verified.

We generally have good reason to suspect bugs in (1) are almost nonexistent. Bugs in (2) and (3) are relatively common, but (3) is no different from the bugs present in software with no formal verification.

A lot of modern theorem-proving research lies in helping people to address bugs in (2) by making propositions easier to write and verify, and in (3) through the same mechanism (because then we can formally verify a greater portion of the software).
The Matrix team has been together in various incarnations since around 2003; we came from two companies (one UK, one French) who happened to get acquired by Amdocs in 2010. I ended up running their unified communications division as an independent unit, and after a few years of building SIP+XMPP based comms apps, we came up with Matrix in 2014, pitched the idea to Amdocs, who then funded it for a few years, and then we span out to set up Element (aka New Vector) in 2017.

Paranoia about Amdocs having funded Matrix from 2014-2017 is utterly unwarranted, and often seems to be rooted in some pretty unpleasant prejudices. Plus both the spec and implementations are all liberally licensed open source - it should be painfully obvious to anyone who actually bothers to look at the protocol that there is no cloak and dagger, however much some folks might wish there to be :|
Django has kept me chained to Python. Just can't beat admin/migrations/ORM. Ive often wondered why a true django-like project has never been born out of the JavaScript/Typescript ecosystem.
Right, as I said this is an unsolved problem.
You are right, this is probably not specific to Python. It just happens that:

1. we're currently discussing Python;

2. anecdotally, the C++ projects on which I have worked were all case 1. ("code it like it's Rust") – I make no claim that this is representative, though.
> To date, there have never been reports of higher-end Android devices coming with malware preinstalled.

One of my HTC phones (which was a flagship at the time) came with touchpad baked in as a system app, which was later discovered to be malware.
The best thing about showing anything to others is seeing things about it that you didn't see before. That can be flaws or a hidden gem, but either way you know more about what you have than you did before. You might feel that the focus on the FAQ page was irrelevant and irritating but it gave you feedback on something that at least a few people found relevant about your marketing. Even if you feel like it was just "find a weakness, and push it" I still hope you understand that you got something out of it and hopefully feel OK with that.
It wasn’t just pjb though. Even on the linked thread you can see another regular, not quite defending pjb for trying to wipe someone’s hard drive, being rude to the new user. And of course the name Erik Naggum is infamous.

I don’t know what the state of the community is these days, and I don’t know if a toxic community alone is a good reason to avoid a tool if it’s best-in-class. But the Lisp community definitely had a problem back then.
Fast, user-respecting, and liberating?
Serious question - why are people stuck on QB when there are seriouly decent alternatives put there, like xero?

My minimum price to go back to QB online would probably be $150k, maybe even more. Here is why:
- constant down time
- constant errors
- clueless offshore support
- inflexible reporting
- constant UI changes for no reason

Switched to Xero, havent looked back.

QB Desktop was quite good but working offline is impossible these days for any tech startup.
Gizmodo loved it, but "The real elephant in the room is the fact that I just spent $600 on my iPhone and it can’t do some crucial functions that even $50 handsets can. I’m talking about MMS. Video recording. Custom ringtones. Mass storage. Fully functioning Bluetooth with stereo audio streaming..."

TechCrunch: "That virtual keyboard will be about as useful for tapping out emails and text messages as a rotary phone. Don’t be surprised if a sizable contingent of iPhone buyers express some remorse at ditching their BlackBerry when they spend an extra hour each day pumping out emails on the road."

A ton of people loved it, but it came under heavy criticism for the lack of physical keyboard and the AT&T dependency.
https://archive.is/Eb79S
I appreciate the honest description of what it feels like to do something where nobody cares. With all the glamour surrounding successful startups, it’s easy to think your journey will feel like a movie montage followed by rewards relatively quickly. In reality it’s usually lonely and quiet, and you have to figure out how to keep yourself going to build something meaningful.
Small communities are nice, yes, but how do you keep them small. A lot of subreddits start small, are very nice places, and then grow big and lose all that.

HN is an exception, not just because of extremely good moderation, small size, text only, clear rules and strong encouragement of assuming good faith. There is no clear way to translate it to other communities.

e.g Quora when it was very small was a very good website to visit. The more it grew the more it became useless to the point that I don't find anything on it worth visiting right now.
The key word from GP is "reliably". Sure, you can probably tell when someone blatantly copied and pasted output from ChatGPT and when the prompt was not very sophisticated (write a comment about X). However for all other cases when someone put even the tiniest bit of effort into the prompt or did some post filtering the reliability of such detection plummets significantly.
Seems to be a shady political operation to help the fracking industry in the US:

> Huffman notes that today most of the carbon dioxide transported in pipelines is used for something called "enhanced oil recovery." That's a process where oil companies inject CO2 into oil wells to boost the pressure and pump out more petroleum.

> Currently over 70% of carbon capture projects involve "enhanced oil recovery," says Bruce Robertson, energy finance analyst at the Institute for Energy Economics and Financial Analysis, a nonprofit think tank. The CO2 in the pipeline that ruptured in Satartia was headed to an oil field where it would have been used to extract more oil.
25 years of people trying to figure out how to use it. I think the population of PGP users has some extreme selection pressure acting on it--it's a bunch of people who want security and don't care how bad the UX is.
Thank you. I don't think I was clear enough that the desire really doesn't match reality, in part because I'm not clear about that myself. I don't have a deep understanding of the new way of doing things, having only read about them whilst trying to understand if/when I should migrate from setup.py.

> including one embedded in their own source

I didn't know about that! I thought it needed to be a pre-build dependency.
I'm not "against" anything, but I only drink water in 2023. Furthermore, beer has a far higher amount than coffee. FWIW, it's only some herbal teas that contain phytoestrogens.

A more compelling "gotcha" would have been invoking something like broccoli, which is higher again, and actually higher than natto (fermented soybeans) per 100g.
I have an iPhone, and it’s not always easy to save a file and then find it in an intuitive place.