skysight-inc/HackerNews huggingface dataset:
> That's exactly what I (also) want, that is, knowing that the authors remained the same, whoever they are

The authors are often many people. You can have one person signing on behalf of all the others. PGP isn't going to tell you that the authors remained the same, only that the signer did (or that many people have access to the same private key and hopefully every one of them is completely trustworthy).

PGP doesn't let you verify that the authors remained the same. Only the key. If you wanted to actually verify authors, you'd have to have all of them sign their own commits, and you'd have to validate every commit, not just the release, otherwise you're just back to trusting whoever holds the key. Many projects very regularly get new committers, too, so you'd have to validate many new signatures with every single update.

> Nope, nobody really needs more of that, since that's what's your HTTPS certificate is for.

No it's not. Your HTTPS certificate will not tell you "this PyPi package release is actually built and uploaded by the same person who controls the GitHub repository linked on the package page". PyPi hosts distributions. It frequently has source distributions, but it doesn't necessarily host "source code", which would usually mean the source repository. Even with that, it's Transport Layer Security, or a Secure Socket Layer. It does not authenticate anything other than the Socket/Transport itself.

I'm fine with PGP, but most people don't really know how to use it. They add a key and think they're safe when it validates, but that only protects you if you already trust the key. PGP signing doesn't tell you "this is safe", just "this was signed by the person who has the private key for this public key", which isn't as useful without a lot of personal footwork or a trusted authority.

PGP key signing parties were a thing for a reason. Using PGP properly requires either an initial leap of trust (importing your distro's keys and trusting what they trust), a lot of dilligence (personally verifying identities), or a small amount of dilligence with a good web of trust (you sign keys that you know are good, and so does everybody you know, so a lot of what you find online you can validate through your links).
Not hiring a female engineer because she's attractive is prima facie sexual discrimination...
That's a good point, and the magnitude of the impact of speeding up sales cycles can be really surprising if you haven't done the math. We wrote a blog post about this last year with a model in Google Sheets that you can customize for your business, but the TLDR was that while holding everything else constant, moving the sales cycle from 4 month to 3 increases ARR by 46%. That's with the same starting capital.

Full blog post and math here: https://commonpaper.com/blog/impact-of-accelerating-sales-cy...
Bad link, please ignore
If you could command some of the world’s most sophisticated AI software to bend to your will — no matter how evil the intent —what would you get it to do first?

To prove this point (and have a little fun), a Swiss AI security firm called Lakera recently launched a free online game called Gandalf AI.

The premise is simple: an AI chatbot powered by ChatGPT called Gandalf — yes, it’s named after the wizard from Lord of the Rings — knows a password that it has been instructed not to reveal. If you can get the bot to reveal this password seven times merely by asking it, you win.

According to Lakera, 300,000 people around the world have revelled in persuading Gandalf to cough up these passwords.
Unix Network Programming - Stevens. (this is kind of a classic book on the subject.. but at the time, I had never heard of it).
The point is that the market would decide which uses of kerosene are important enough to keep using, rather than the government deciding.
I know rose tinted goggles and all that. But honestly the older I get the worse the quality of products has become (for me - important).

Everything has shifted towards planned obsolescence and I barely spend money today when I make way more than I used to when I first started working.

I got a Tesla and it was built crappy and interior kept breaking. A purchase should make me happy but I felt like my dollar didn’t go far enough for how much I paid.

I balled out on a $900 iPhone and it cracked on the first drop. Since then I’ve only purchased used iPhones for <200 bucks that I don’t care if I break.

Almost every single video game I have tried in the past few years crashes or has bugs. The last game I played was Cyberpunk and I even put a new computer together to play it. What a nightmare lol.

Everything is subscription based now. There’s no support unless you pay even more. And if you use it for a while and then want to use something else good luck because most of they make it hard to migrate.

Maybe I’m just getting older but there ya go.
After their move to train AI off of Github repos I am deeply skeptical of wrapping up any code with a neat little bow for MS to further analyze.
Obviously it won't be a replacement.

A combination of a GPS receiver and one (or several) INSs will be much more accurate and resilient than either component by itself.

All ocean-crossing commercial airplanes already operate that way.
I think the fact that the most viable way to run Rust on the JVM right now is by compiling to WASM really says it all. JVM is going to die, WASM is the future.
>> knowing that the authors remained the same

The problem is that "authors" is not a well-defined concept, and especially larger projects will have very regular author changes. Is the author the person who made the last commit? The person who uploaded it to PyPI? The person who is currently managing the project? What if it isn't a person but a company?

>> that's what's your HTTPS certificate is for

A lot of open source projects rely on untrusted third-party mirrors. The main server will just randomly redirect you to a mirror near you, so HTTPS certificates are pretty much useless because you are connecting to a third-party domain. They use signatures to prevent the mirror from doing weird stuff, and they guarantee that the mirror is serving the upstream content as-is.
Related ongoing thread:

Social media can be a ‘profound risk’ to youth, surgeon general warns - https://news.ycombinator.com/item?id=36044561 - May 2023 (155 comments)
The internet that required users to purposefully sit down at a functional desktop PC and bear with significant latency to interact with it is quite different from the internet defined everyone with a touchscreen in their pocket. Yes, there were crazies and degenerates on the old internet, but there at least was a modicum of thoughtfulness and sense in much of the user generated content.

Because of the functional difference, using parental controls on the most addicting apps and sites during younger ages starts to make sense. Getting your child to conform to your value system is not the important part, what's arguably more damaging is the negative effects of emotional and mental addiction to social media and its trends, along with addiction to touchscreen usage itself - kids raised with touchscreens too early often lack the patience or self-control to read books, indulge their own imagination, or even watch a movie.

I too was allowed free reign on the internet in the early 00's as a child and teenager. I saw the shock sites, and browsed /b/ with schoolmates. However, the computer I used was a shared computer in the living room, not my own room. And I still fell into game addiction that affected my academic performance and mood until parental intervention. It's worth looking out for.
I originally ran the audit on 3/27 (IIRC), and then ran it a few additional times as I fixed data quality issues in my scripts (the ones linked in the post). The last time I ran it was on 5/19-5/20, when I was finalizing the post. You can also see that I did a new release of `pgpkeydump` at around the same time, to add some more extracted datapoints.

PyPI's admins have been wanting to remove PGP support for years; all I did was provide the final nudge.
AM can be untrustworthy in mountains too. Many factors play in such as how the landscape is actually laid out, the make-up of the rock in the mountain. How signals bounce off the rock, etc. It for sure isn't fool proof. I wouldn't think that much better than AM unless your close to the tower. AM's big advantage is being able to travel farther on less power, but the low frequencies don't have good penetration power. This is why the Navy uses radios that runs on 900+ MHz for shipboard radio, 900 MHz (UHF range) has less distance, but better penetrating power through steel decks. Compared to frequencies that AM operates (HF range). Then there are atmospheric conditions and the cycle of the sun. At a solar maximum sure, but at a solar minimum, probably not.
Matrix, Lord Of The Rings, some random sh* by balenciaga. Is it funny for you? Serious question ;)
IMHO, you mentioned "There is no rational reason to queue up at banks now."

So I replied to you by sharing news articles about people facing challenges on the ground level.

Then you mentioned "People and ground level probably also believe there's a GPS Chip in those 2000 rupee notes and that 10 rupee coins are all fake."

So I replied by sharing articles of mainstream journalists sharing misinformation, and I also shared how these journalists are actually sharing content forwarded by Modi Government.

I don't know how you got this impression: "The Financial Times is acting at the behest of the BJP is an interesting take."

I have never tried to imply that FT is doing anything wrong here. FT is simply reporting on what Indian Government did.
I hate Ads. They take up unnecessary bandwidth (pi-Hole shows me a good 15% of my total queries is ad-related noise).

Add that to autoplay videos/gifs on an limited data plan and its clear that ad content has no use for me, other than suck up data at my expense.
This is...completely missing the point. It honestly blows my mind how often exemplars of the Dunning-Kruger effect make it to the top on HN. You know that feeling you get as a programmer watching, like, two people code on the same keyboard on CSI or whatever? That's the feeling anyone with expertise in a domain other than programming gets when reading comments on HN regarding said domain.

The most fundamental appeal of the Push is that it is a very nicely-integrated hardware controller, and -- this is the big thing -- has physical knobs, buttons, pads, etc, a massive selling point to loads and loads and loads of musicians.

An iPad by definition lacks the latter, and will never approach the integration of the Push no matter how much work you put into whichever controller app you're using (TouchOSC, etc). And that's even before you consider the fact that the Push also doubles as an audio interface.

Literally no one in the Push's audience is looking to replace/upgrade the Push's hardware. No one cares what CPU it has. I'm honestly surprised that Ableton published the specs, because it just doesn't matter. It's not a "computer" (even though, yes, technically it is indeed a computer). Depending on which model you buy, its raison d'etre is as an accessory to a computer, more specifically a very specific application; or an appliance designed to run one app and one app only. You might as well be saying that you'd rather buy an iPad over a Tesla because the iPad has a better CPU.
Very few American cars, even small ones, will be able to fit in a UK multi-story car park. They are uncomfortably optimised to maximise the use of space and larger cars can barely drive in them, nevert mind actually park.
The transportation mechanics in Skylines are quite complex and fun. The player can trace individual trips, and some of them matter quite a lot: the businesses need to get and ship their raw materials and finished goods, and the shops need customers.

The budget mechanics are a joke, before long the player has practically endless money.
You mean like we made it illegal to sell cigarettes or pot (where it is legal) to children... whoa, it's almost like we can have laws limit stuff.
>Why? What if the company is OK with their monoculture?

Because it's illegally discriminatory. I guess not all of us want to live in a better society, but those of us that do have voted for representatives that have made sexual discrimination illegal.
Does it, how else would I find 423 lawyers as I drove to the store? J/K
> That midjourney et al are also detectable to the naked eye.

Again, either too slow, requiring outrageous hardware, or obviously noticeable. So far no examples to the contrary.

Don't forget, the topic is using special measures to detect undetectable with naked eye. When you can simply see the screwed up hands on a photo it's not even necessary.

> Why do you need to watermark them, again?

Why do you think I need to watermark them again?

> a mid-range video card

and a PC to put it in, a space to put the PC in, etc. With a laptop we're back in wait for an hour to see a result.

> hardware doesn't get better and 2. techniques don't improve to run them on limited hardware

We can revisit this if it consumer hardware gets good enough...
The only people I follow on youtube are my friends.
Instant market share if they're willing to lose 2x the money that Uber is losing. It's not like drivers are going to be falling over themselves to sign up if it's a 50% paycut.
I don’t think it’s right for the hiring team to decide if an individual will “get too much attention”.

IME, women are all too familiar with the challenges of working in a male-dominated workplace, but ultimately just want to pursue a career they enjoy. The “right” decision is to respect that drive and not to infantilize them by making decisions on their behalf.
For context, Bannerbomb3 is an exploit for the System Settings app. [0] It's used to launch a tool which installs some custom firmware on the device. [1]

[0] https://github.com/zoogie/Bannerbomb3

[1] https://3ds.hacks.guide/
Hang out with less shitty people.
D.A.R.E. to Keep Kids Off Social Media

Wages stagnated since 1980. Rents doubling every decade. Dead-end service jobs. Unpayable student loans. Social Security payments going to IOUs instead of retirements. Lying politicians and chief corporate officers making bank on the backs of the working poor. 30% credit card interest. Delaying childbirth to make rent until it's too late. GMO and processed foods poisoning giving an obese population autoimmune disease. Republicans gerrymandering elections. Democrats supporting neoliberal colonialism. A burning natural world set to end between 2050 and 2100.

The list of threats to anyone younger than 50 is so infinite and growing so rapidly that social media is the new drugs in the endless war on youth culture. You know, the one that inconveniently lists the problems and solutions only to be told over and over again to sacrifice their dreams and get serious and study and get a job, that it's all in their heads.
The US and EU are looking into backups for GPS. For short-range, can use GPS-like beacons. This will work well for airports and close to cities. It is probably worth doing for increased accuracy.

There is talk of reviving eLoran which is enhancement of Loran long-range navigation. But countries keep shutting down transmitters because of lack of use.

Finally, it might be possible to use other satellite constellations for navigation. In particular, it sounds like Iridium provides timing information. In the worst, could add something the big constellations like Starlink.
That may be the case for blog sites, but big companies just directly ingest it into their application or internal analytics platform for a dashboard of which sources were the biggest contributors.

For example - a company sends out a newsletter with a link to a blog post goes out to 20k subscribers with UTM params, but those UTM params end up getting 100k clicks, 80k with a referer of "news.ycombinator.com". This means that someone posted it on HN with those UTM params, which indicates that they should continue to prioritize that newsletter, since the audience is likely to cause a snowball effect of traffic and thus growth.

Is that a bad thing? Knowing that traffic came from x source so that they can properly route future resources to the those high-impact sources?
Does Waymo get to demand human-driver level prices and therefore capture loads of value

I'm pretty sure the Waymo Driver costs more than a human driver at this point. Obviously they want to make it cheaper eventually but who knows when that will happen.
It’s the next great thing about surfacing semantically relevant bing ads in your start menu and sending Microsoft summarized “diagnostic data” about everything you do and read to “improve their product experience.” Enjoy!
Don't take this as a critique of this video which is an ad for some youtube channel about philosophy.
Neetcode: My Brain after 569 Leetcode Problems
Kagi also sorts results by the number of ads/trackers on them (pushing them down), so higher quality content is more likely to surface on top.
Ask HN: How do we hold VCs and startups accountable for engineering addiction?
That mission has always been bull!@#$ though. Always. A big part of startup culture has always been doing something exploitative, but finding a way to sell it to the workforce as "changing the world". That's how you make unicorns.

If Uber or Facebook told employees what they'd actual be doing and what the actual goal was no one would want to work for them. If you can make people feel good about what they are doing, they will do whatever you want no matter how abhorrent it is.
> none of them makes any of those places feel less safe

Experiences certainly vary: security checkpoints definitely make me feel less safe, whether or not they include metal detectors, so I avoid going into any place which has one.

I would go to some significant effort to avoid putting my child through that experience every schoolday. What a drag on one's educational experience that would be!
Ain't it funny how a system supposedly designed to prevent a need to trust anyone only functions to it's current barely functional level if you trust a giant, centralized, opaque organization that has on the public record lied in the past about pretty serious things?
> I'm only doing this to support my family. There is not a single day where I don't dread sitting down in this fucking chair and staring at a screen for 8 hours. Thankfully I'm able to stave off depression with hobbies and other interests.

I've preferred working tech support. I've preferred low-end service jobs.

But those pay shit, so here I am.

I think I might really enjoy & be good at product management, but breaking in without lucking into a role at an existing employer is tricky. Keeping an eye out for opportunities—I definitely do not want to still be killing Jira tickets and fighting broken tools and bad SDKs when I'm in the last third of my career. Started out ambivalent, and have grown to hate it.

[EDIT]

> There is not a single day where I don't dread sitting down in this fucking chair and staring at a screen for 8 hours.

Oh, yeah, and this resonates, in particular. If not for having a family, I'd be out already. Find something with much lower pay but a quick little well-defined, "person asks for thing, I deliver, they're happy" reward loop, ideally with as little glowing-screen time involved as possible, and go back to having, like, any energy at the end of the day. All that extra money would not be worth staying in this industry, if it were just me (also I'd have a whole lot more saved up for early semi-retirement by now if nobody else needed any of it, LOL)
> who knows how things would have gone

There would be living ships, of course. This is a Star Maker reference.
Less aggressive doesn't mean not aggressive. It's a comparison. They're far less aggressive than most any other animal that could give you a bad day is. I'd rather run into a wild elephant than a wild wolf, lion, hippo, giraffe, etc.
The good news is that it looks like this new patch won't affect anyone who always has Luma3DS custom firmware installed, and there are other methods for hacking your 3DS, but they're a lot more convoluted. The bannerbomb3 method was super easy and essentially foolproof.

Really shitty of Nintendo to sunset the console and then close the door behind them on the way out. Homebrew communities have been doing their damnedest to keep the 3DS (and its extensive library) alive... but that's Nintendo for ya.
Y'all are talking as if the Waymo app doesn't already exist. https://waymo.com/waymo-one/
Real-World GitOps with Flux, Flagger, and Linkerd
"Guess now it's again time to line up in banks."

Thats what I mentioned in the top comment to which are you are replying.
> The Internet, in its current form, is not a force for good. And the way it is going, it will be a net negative for humanity as a whole.

i'm convinced the dead internet theory is an inevitability for the reasons you outline.
It had to be someone evil like Oracle. I wish it were a more trustworthy organization, like Proton AG, Mullvad, Mozilla, or the EFF, auditing them instead.
I generally agree that it is better to tax emissions and let consumers decide where to spend their carbon budgets. For example, I don't support the idea that we should ban beef, because there are people who want to eat a hamburger and never burn motor fuel, and good for them.

But, in this case, that logic doesn't seem to apply. There is nothing "free market" about either air or rail travel. Both exist within and only because of the structure of government, and would not exist without regulation and subsidy.
A further data point here is that Homo Neanderthalensis had a larger brain volume than Homo Sapiens.
Show HN: QuickFeedback – generate QR codes and feedback forms
Last year I visited a hotel and kept noticing small inconveniences and didn't want to waste my holiday time complaining at the reception.

I wished they had an easy way to give them feedback and let them know how guests felt. So I created QuickFeedback, a way for hotels to intercept and handle feedback before it ends up in negative public reviews or gets forgotten.

I purposely kept the core concept very domain-agnostic as it is very fundamental and could be used for almost any physical product/service.

For a while I was looking for an interesting side project. As a developer, once this idea came along I thought I could put something together quickly and cheaply. So here it is, I'm trying to follow advice and ship early so don't expect much!

This is my first go at something like this so please go easy on me but I am looking for honest feedback!

Thanks!
I don't think you can put an age range on this. As an example: Look at all the QAnon believers. They're pretty much all ages. Look how many of those people went to Dallas for Kennedy's return.
Cool, when can I actually do anything with XMR other than trade it to other tokens and play dumb scams on various crypto systems?
Show HN: DataGPTd – Making data analysis as easy as asking a question
I'm excited to share a project I've been working on called DataGPTd.

DataGPTd is a browser-based tool that aims to help make data analysis as simple as asking a question. It allows you to import your data (csv, excel), edit it, ask questions, create visualizations, just with text. All within your browser. It runs a code interpreter locally by WASM.

Key features:

- Text-based interaction: Using Large Language Models (LLMs), DataGPTd lets you interact with your data using natural language, no complex syntax required.
- Data privacy: All computations are carried out in your browser via WebAssembly, ensuring your data stays on your device and is never sent to a server.
- Saved and shareable chat sessions. Examples: https://shorturl.at/esFR0, https://shorturl.at/qAIU8

DataGPTd is for anyone looking to quickly and easily derive insights quickly from their data.
We have for so long incorrectly believed the mind is both the disease and the cure. This is evident even in our use of the phrase "mental health."