skysight-inc/HackerNews huggingface dataset:
> You can't advise for or against it without a well defined problem: for some cases explicit functions won't even be an option.

On average I think I can. I mean, I can't know without the exact problem specifications whether or not a developer should use `innerHTML`/`eval`. But I can offer general advice against it, even though both can be used securely. I feel pretty safe saying that exposing SQL access directly in an API will usually lead to more fragile infrastructure. There are plenty of exceptions of course, but there are exceptions to pretty much all programming advice. I don't think it's good for it to be one of the first examples they bring up for how to use the API.

----

> Overall if this was one of their example projects I'd be disappointed

I have similar complaints about their example code. They include the comment:

> # Note: the JSON response from the model may not be valid JSON

But they don't actually do schema validation here or check anything. Their example project isn't fit to deploy. My thought on this is that if every response for practically every project needs to have schema validation (and I would strongly advise doing schema validation on every response), then the sample code should have schema validation in it. Their example project should be something that could be almost copy-and-pasted.

If that makes the code sample longer, well... that is the minimum complexity to build an app on this. The sample code should reflect that.

> and still suffers from injection if you want to support querying on data that wasn't well defined a-priori

This is a really good point. My response would be that they should be expanding on this as well. I'm really frustrated that OpenAI's documentation provides (imo) basically no really practical/great security advice other than "hey, this problem exists, make sure you deal with it." But it seems to me like they're already falling over on providing good documentation before they even get to the point where they can talk seriously about bigger security decisions.
30 Years of PDF (and HTML)
Is this even GDPR compliant ?
At that time, does your business plan include forming an LLC and registering a designated agent at DMCA.copyright.gov?
As others have mentioned, turing machines can be achieved by only one instruction set. See https://en.wikipedia.org/wiki/One-instruction_set_computer

Most popular being subleq (subract if less than or equal to zero).

Subleq can be implemented with a transformer.

See https://arxiv.org/pdf/2301.13196.pdf (Looped Transformers as Programmable Computers).

The important distinction is that transformers need to be looped. Just like ChatGPT calls the model over and over again until stop token or limit is reached.

And we know ChatGPT does better if we let it think step by step and blabber more (chain of thought prompting). In every token it generates, it gets an opportunity to branch.
You're missing the point. Putting yourself in a position where you're close to indispensable gets you the title. Because the company now has to make a choice, stop having person X manage some area and find a new person who's not as good or won't be for some time, or just forget about the politics and rubrics and other annoying BS and give person X the title and raise. Way cheaper for the company to do the latter. Usually a better strategy too because you retain talent. I've known a few title chasers in my time and they don't last long. /2cents
I'm not super convinced about that. The (raw) quality in the phones sensors hasn't climbed as quickly as on dedicated cameras this last years. The secret sauce for today's phone's cameras is a lot of processin, and if you get an unprocessed photo from a current day phone-size sensor is almost as bad as one from yeeears ago.

And that's OK for regular photos, but I guess is not that good if you want to do image or signal processing and your data has already gone through some other processing and a "IA".
Depends on what you want. Do you really need a good plumber? The plumber you need to fix a leaky faucet is completely different from the plumber you need for an upgrade of hot-water delivery in a high-rise building that's putting in an upper floor restaurant. Most plumbers can do the former. Few can do the latter well.
If you can frame that question and ask it to someone in an adjacent business, such as a landlord, you might get a good answer.

That's a useful strategy. If you need a good plumber, ask someone who buys a lot of plumbing services.
Actually it just meant that this is a tired old argument when C/C++ programmers were new to multithreaded code.

Now we have languages and language facilities (consider Rust, Haskell, and others) to make it much safer. Same with green threads and what Go and now Java does.
The Value of in House Expertise
> Why are you pretending that this isn't confusing to newbies?

I'm not. Absolutely the onboarding experience can be improved.

The problem is you're losing the plot, here.

The original commenter complained about having to "read up on what rights server admins have over my account, why I should choose one versus another, which servers are de-federating which others, et cetera."

But you don't have to do that if you don't want to. If you're already willing to blindly join Reddit, you can blindly join mastodon.social.

And the app is already now driving people to do that if they really don't care (which is what the OP claims).

So this is already being improved (and yes, can absolutely be improved further).
WirePlumber's Event Dispatcher: a new, simplified way of handling PipeWire even
Ordinary, non-posting users (lurkers) are not the target right now. The goal is to attract the creators: users who already put in tons of effort posting on Reddit. They are much more likely to put in the effort to grow new communities and migrate existing ones to lemmy.

If enough creators move over then the lurkers will follow. But attracting lurkers at this stage is pointless if there isn’t any content for them to look at.
I wasn't quite sure what kinds of deployment are supported. I clicked on the next.js link but it just redirected to the same page.
Two scenarios:

- they're trying to prevent proprietary knowledge leaking;

- they're trying to prevent dodgy shit they're doing leaking.

My guess is the second as it's highly unlikely that they have any proprietary knowledge that would give their competitors a significant advantage to know. Most large companies' strategies are fairly obvious from the outside and proprietary knowledge leaks through employees moving. It's the dodgy shit they're doing that can damage them.
Certificate Transparency verification only requires the server provide stapled proof (either to the certificate itself or a OCSP response) that the certificate was submitted to the public logs. It does not involve any extra requests from the browser to a third party; at most it involves a periodic request from the server to the CA with no client-specific data.
That's not saying people aren't comparable though. It's saying people are bad at being the comparison function.
Many moderation tools relied on the Pushshift API; Reddit cut their access off last month. Pushshift will supposedly be restored (https://www.reddit.com/r/pushshift/comments/13w6j20/advancin...), but access must be approved by Reddit and is only open to mods with a Pushshift account; there are also additional usage restrictions. IMO it's an open question whether Pushshift or most services using it will ever be restored. Pushshift is now owned and managed by NCRI (Network Contagion Research Institute), which is based around selling the data to intelligence agencies (https://networkcontagion.us/technology/). Access for moderation tools isn't really part of their business model.

Reddit's CEO has also publicly lied about discussions with Apollo's developer (https://www.reddit.com/r/apolloapp/comments/144f6xm/apollo_w...). Their credibility with developers is almost nonexistent.

An additional factor is that the third-party app cutoff cost Reddit a lot of goodwill. Many mods reply heavily on third-party apps; they're much easier to use for moderation. Some subs such as r/traaaaaaannnnnnnnnns (393k users) have announced that they'll shut down because of this (https://www.reddit.com/r/traaaaaaannnnnnnnnns/comments/144tn...). Some popular bot developers such as u/Blank-Cheque have already taken their bots down. My other comment (https://news.ycombinator.com/item?id=36343447) lists some of the affected bots.
I mean that seems horribly tricky, but also totally doable.

Having read about JavaScript/Java VM optimisations in JITs and GC I would be surprised if a global state change like this is not manageable - think deoptimising the JS when you enter the debugger in the dev tools in your browser.
Raku failed to timely deliver a stable release. And didn't stick to sensible new features, but tried to make an uber-language with everything plus the kitchen sink, and even a multi-language vm.
Only if SPIR-V tooling ever gets half as good as PTX ecosystem.
> When you're talking about a highly successful open source project that has been going for more than 3 decades, it is beyond ludicrous for you to say, "If the project is going to succeed long-term..." It already has succeeded long-term.

Yes, your reaction here totally makes sense. Feedback acknowledged.

> If you want that apology to be meaningful, you should learn something.

I have re-read my earlier comments and I feel that you are being more hostile to me than is justified. I do not think you are adhering to HN's code of conduct guidelines for comments: https://news.ycombinator.com/newsguidelines.html#comments

> you would be better off figuring out why it works rather than lecturing about how it must work

This doesn't seem fair. The original post is about the limitations of the PostgreSQL docs. Docs have been the focus of my career for 10 years. I have experienced and analyzed docs problems in many contexts: small orgs, large orgs, open source, closed source. I made an on-topic comment about ways to resolve the problems that the PostgreSQL docs are facing. Is it the only solution? Of course not. But I totally have relevant experience in this domain and, just like you have a good idea about what generally works and doesn't work regarding open source funding, I have a pretty good idea about what generally works for creating the conditions that lead to good docs.

> So comprehensive external documentation is hard to find.

Again, I think the web platform space is relevant here. Web platform documentation could easily devolve into a tragedy of the commons situation. Yet MDN does exist and is an amazing resource.

Paragraphs 4 to 6 of your last comment seem to be arguing that hiring TWs is not an option for PostgreSQL. That is totally understandable. On another day maybe we would have arrived at that understanding on friendly terms and would have had a constructive conversation about how to create good docs when hiring TWs is not possible. But it's clear that my ideas aren't welcome here so I'll just stop now.
Moderators also ensure quality, by removing posts that don't follow rules.

For example, /r/ExperiencedDevs is one of my favorite subreddits. They have rules around the types of questions you can ask. These rules are put into place to prevent the subreddit from becoming like /r/CSCareerQuestions, or to prevent an influx of memes.

Without these tools or these moderators, I have a feeling some subreddits will become more generalist and possibly drop in quality.

I go to /r/ExperiencedDevs (and other subreddits moderated in a similar fashion) for a very specific set of posts and expectations for questions. I don't really want to see memes, jokes, etc. in the subreddit, as I have other ones to go for that.
Wasmer movin' fast and breaking things trying to make WASM real (and VCs happy).

Bytecode Alliance moving slow and steady. Does wasm have sockets? Maybe?

Don't trust Wasmer and don't like their big JVM-style moves, but I guess it's nice to see wasm happening!

All I need is wazero and wasmedge and wasmtime (and toy programs that don't do much).
You missed the pine64, great choice.
Apache mod_md has fallback too, https://github.com/icing/mod_md#acme-failover I'm just a user, not the author, and I didn't try the fallback. I'm more worried about stuff breaking if I switch issuers than certs expiring without me noticing. I've got some embedded junk that hits my website and has weak cert validation, so better to stick with something that works.
yes individualism is the answer; collectivism is also the solution, everyone should do what they think is the morally correct thing and the whole garbage pile will suddenly go away, nobody will starve and Great Leaders will be no more. This has always worked in the past. Leadership be damned! I am important and smart enough to do the right thing!
I am not well-read enough to really have a reasoned answer, but mine is that we don't know. But just because there is something more, something we don't understand, doesn't mean that it's something greater. It's just something we don't understand.

Through the ages people tried to answer the great mysteries with great answers, but they didn't achieve anything. Truth should have predictive power, and understanding of great enigmas should help explain lesser ones, like the laws of gravity can calculate the fall of an object, but these answers haven't done something useful.
But lesser questions have been answered with lesser and less interesting answers, and they successfully predicted stuff. Through answering many small questions, we now know why rain happens, why the seasons change, or how eels and flies come into existence. And the domain of the great mysteries was reduced, bit by bit.

Trying to answer the great mysteries, like the origin of existence, is building a house from the roof. Religious experiences and the numinous can be better explained by psychiatry and medicine than by theology.

There might still be something not more, but greater, than our understanding. It is probable, since our intuition and our senses are limited. But if there is, it would be equal to a colour we don't see due to lacking color cones. We might be unable to intuitively explain how it's like to see color to a colorblind person, but it's not divine or magical, greater than the material world and what we can measure and calculate; it's just greater than our eyes or our vocabulary.

That is at least my belief. It was hard to write somewhat concisely my beliefs, but I think I did a good enough job. I must say I'm not opposed to trying to answer the great mysteries, it's very similar to when the ancient greek philosophers tried to find the origin of matter. But I do not believe real truth can be obtained that way.

Also, I must say that your comments in this post were great. A perspective very different to the common HN point of view, thought-provoking and in-depth. I also learned the word numinous, which makes me happy as I have now a word to describe something I couldn't before.
You can join an XMPP MUC today to bring back that feeling and the server options are light enough to self-host on a home network unlike some other FOSS decentralized chat options.
So... Sounds like you want what I keep thinking about:

Front end that works with feeds from multiple sources, like RSS, and permits comments, posts etc using SSO, with all interactions logged centrally in the SSO account (for later edits deletes etc).

Sound about right?

Because you me it seems like every provider in that list should be able to make a profit off the data and interactions... With users who want increased privacy able to pay for an SSO subscription to prevent the sale of data on that end.

And we already have all the parts to make it work...
Supported on CUDA 12 no less!

To get an idea, the 1050ti is a card with an MSRP of $140 - almost seven years ago when it was released. Between the driver and CUDA support matrix it will likely end up with a 10 year support life.

While it's not going to impress with an LLM or such it's the lowest minimum supported card for speech to text with Willow Inference Server (I'm the creator) and it still puts up impressive numbers.

Same for the GTX 1060/1070, which you can get with up to 8GB VRAM today for ~$100 used. Again, not impressive for the hotter LLMs, etc but it will do ASR, TTS, video encoding/decoding, Frigate, Plex transcoding, and any number of other things with remarkable performance (considering cost). People also run LLMs on them and from a price/performance/power standpoint it's not even close compared to CPU.

The 15 year investment and commitment to universal support for any Nvidia GPU across platforms (with very long support lifecycles) is extremely hard to compete with (as we see again and again with AMD attempts in the space).
Agreed. We published a post recently about how to interpret a sequence diagram based on the 7 basic features and how our dev tool makes them automatic and interactive. https://dev.to/appmap/quickly-learn-how-new-to-you-code-work...
iOS 17 Gives You 72 Hours to Undo an iPhone Passcode Change
Go to school, with a good teacher. Yt videos are not a substitute for a proper course.
Absolutely agree with you. My experience with Reddit moderators is that they are largely abusive, arrogant egomaniacs and I have absolutely zero sympathy for their hardship caused by lack of API access.
I've seen those forums, and they're the worst. Idk why those "experts" are spending so much deliberate time giving people wrong advice.
Third and fourth scenarios:

- The risks (technical, legal) of using AI generated code are not worth assuming.

- They pay a lot of talent a lot of money. Efficiency isn't that important to them. Heck, over-employing talent to prevent them from working for start ups that might compete may be worth it to them.
All the competition fails in tooling and not being polyglot like CUDA.

So it is already a non starter if they can't meet those baselines.
JSX is expensive than JS, because JSX first needs to become JS, then other things happen
You can be less formal if you want here! :) it’s not a job interview, we’re all excited you’re making something!

The bent for this space tends to be towards start ups, so expect some advice towards how to market/best feature something you made, vs what would look best on a resume.
With the rush we forgot to update some of the cases in the product page, thanks for the feedback! We'll update them shortly.

Right now we are starting with Rust (with full networking with tokio) and static sites.

Node.js (allowing Next.js to be fully runnable) and Python (allowing Django and Flask) support will be coming soon!
But I like the compiler.
I've been drawn to kbin, it is part of the "Fediverse", so you can see kbin, lemmy, and I believe also mastodon posts from it. If you just anonymously browse to https://kbin.social/ (the main instance right now) you'll have something similar to the reddit front page, content from a bunch of different instances. It is definitely still a little rough around the edges, but considering it is one dev and the first commit was only two years ago, it seems pretty good.
Does the existing standard make the web more app-like?
I’d also recommend Chris Smith’s “The ZX Spectrum ULA: How to design a microcomputer”

http://www.zxdesign.info/book/

https://alibris.com/search/books/isbn/9780956507105

https://www.amazon.com/ZX-Spectrum-Ula-Microcomputer-Compute...
Promoting went from HTTP headers to HN comments.
If your class diagram is comprehensive enough to get circular dependencies, then I'm completely sure¹ nobody will use them for anything.

Computers are much better at this kind of checks anyway, and they don't need diagrams.

1 - Instead of "well, maybe it's possible despite I never seeing it"
Chex Quest was my first FPS and only many years later did I learn about Doom. It all clicked and my gratitude for whoever at General Mills was responsible for the title flowed immensely.
> Less moderation and more open speech would drastically improve most subreddits.

This just isn't true. Subreddits without moderators get buried in spam (both thinly veiled self-promotion and outright unrelated spam link dumping).

(I've both moderated a small subreddit and tried to participate in subreddits with absent moderators.)
We just dropped our H100 on-demand prices to 1.99/hr. It's now the lowest in the world, you don't need to talk to a sales person, and it's available now: https://t.co/AcqRIITS1s
Encryption protects our rights, privacy is not a crime
They didn't do it all by themselves though!
Submit Your SaaS
Need more traffic to your new SaaS? We got you! Submit your Software to our directory now!
>This is all to say that if networking doesn't come "naturally", it doesn't make sense to intentionally engage in the behaviors of it, as this commits the error of optimizing for the wrong things instead of doing what comes naturally to extroverts

I hate to say it but you may have a point here. I read the example in the article and what goes on in my head is "Do I REALLY want to go to parties just to meet friends who may or may not know a good plumber in the area?" Or worse, "Romantically involve myself in someone to get access to their friend group so maybe one of them knows a good plumber?"

And I guess that's the point. This sounds like work and unnecessary effort to me, wheras it's just a "natural" side effect of something an extrovert would typically enjoy. I've always been the shopper that comes in with a list and doesn't waiver unless I genuinely forgot to list something I intended to. I guess that mentality isn't the best in networking unless I myself am valuable.
SRV records are the thing I was talking about.
EVs have been in production on the market long enough that previously leased and rented models are going to be available to dealerships to sell as used.
If you have secure boot enabled, how does the attacker replace the kernel or bootloader?
> Mature teams write code.

Sounds very Dunning-Krugerish “smart people like me do X and not smart people do Y”

Coding and documenting aren’t exclusive. Modeling is part of documenting. UML is a type of modeling.

I would think effective teams will want to build good software. And to build good software they’ll want to capture requirements, communicate with other teams, and test their software. Design helps with this and is part of coding.

At the end of a successful day, I should have some updated models, some code, and some running software. If someone wants to see what I did, they’d likely read through different parts.

Just like trying to figure out a stage by just reading models sucks, so does trying to figure it out by just running the software.
> Already parts of the Linux kernel as well as Windows are being written in Rust, so if it's good enough for them, it should be good enough for those bunch of C experts.

The C experts I was referring to are the subsystem maintainers and none of them are currently working on migrating to Rust AFAIK. So far the work in Linux with Rust has been a few driver rewrites. Keep in mind that there are subsystems like eBPF, io_uring, etc. that are under rapid development and are completely in C. I think if you really believe that kernel code should be written in Rust, you should start submitting patches instead of telling people that they have some sort of moral obligation to use Rust when you aren't the one that has to do any of the work.
This is actually as designed, and is a good thing.

It creates the possibility for a business model where subscribers pay for access to a big news spool and lots of groups. Just like USENet.

There will be some growing pains, but there will eventually be a continuum of "free" lemmy servers, for pay premium ones, and lemmy servers where the front end is only an app on your phone.

And they'll all see the same messages.