skysight-inc/HackerNews huggingface dataset:
Gorilla [1] and Gorilla based algos [2] are simply overrated.

Store these values as 32 bits floats instead of 64 bits and you get instant 50% reduction without any compression.

This is valid for allmost all time series data.

Most of time series databases (ex. DuckDB) are storing floating point data as 64 bits.

They are reporting some extraordinary compression ratio by using a gorilla/chimp like algorithm.

However as shown in this benchmark, lot of time series data (ex. temparature, climate data, stocks,...)

don't have more than 1 or 2 fixed decimal digits and can be stored losslessly in 16/32 bits integers.

Integer compression [1] algorithms can then be used, which results in significant compression ratio and several times faster than the gorilla like algorithms.

TurboGorilla, the fastest Gorilla (or chimp) based algo in c, cannot exceed 1GB/s in decompression, wherea TurboPFor is in the order of 10Gb/s, TurboBitByte is >100Gb/s.

-[1] https://github.com/powturbo/TurboPFor-Integer-Compression

-[2] https://www.vldb.org/pvldb/vol8/p1816-teller.pdf

-[3] https://www.vldb.org/pvldb/vol15/p3058-liakos.pdf
The economy feels bad for richer Americans who are used to it being good
One fault of this argument lies in the assertion that every E2EE auto-updates.

IOW, if you decide to stick w one version that is shown to be without a doubt E2EE then certainly you are better off than with just TLS.

Furthermore, this article only focusses on in-transit encryption (TLS). What about encryption at rest? It can perfectly be viable to have an E2EE service provider keep my data stored in zero-knowledge fashion.

Lastly, typically an E2EE service provider's reputation and business rests on keeping their word. There is not a whole lot of incentive to break it, given the jurisdiction they reside in allows them to refuse compliance w secret services.

IMO this is fear-mongering. At the very least equating even this supposed "snake oil" E2EE with mere TLS seems out of touch w reality.

I wonder if the auther himself personally too avoids E2EE messaging services.
Could you possibly reduce those costs by fine-tuning the model with the assignment text and reference code, rather than including them in the prompt?
Ultima online, the first graphic MMO(precursor to that was MUD's: multi user domains).
It graded itself, so that explains that lol
The political orientations you describe don't threaten or oppose the political system, it's part of it and leveraged by the ruling capitalist class as its defenders. A better question to ask is, how does publicly voicing and acting with _real_ opposition get treated in the US? That's way more dystopion. See COINTELPRO for a historical example. Its modern equivalents which has only intensified the hunt for real, opposition does have extremely dystopian tendencies, through cencorship and political persecution.
- If your configuration has more than 5-10 options then env vars become a mess while a configuration file is more maintainable
- Nested configuration / scoping is a mature advantage of configuration files
- You can reload configuration files whereas you can't reload environment variables during runtime
- A configuration file is a transparent record of your configuration and easier to backup and restore than env variables. Env variables can be loaded from many different locations depending on your os.
- In configuration files you can have typed values that are parsed automatically with env variables you need to parse them yourself. This is just a difference not that bad for env variables per se.
Youtube + textbook + good discord (slack or IRC etc.) can replace an undergrad CS course pretty well IMO for at least the practical skills. AI can help but is a minor piece, at least right now.
5% is way too little to risk mainlining over
I implemented something similar in the past, in terms of storing user-generated content and found this barrier, the privacy. Although I tried to use google docs with encrypted data for guaranteing integrity, there is no way to demostrate to the user that a third party server (the app server, which actually connects to google docs api) is not manipulating its data.
And yet another gotcha with configuration file loading:

Over-elaborated hierarchies where configuration files may reside, and their precedence schemes.

E.g. from systemd.unit manpage ( https://www.freedesktop.org/software/systemd/man/systemd.uni... ):

>...

> In addition to /etc/systemd/system, the drop-in ".d/" directories for system services can be placed in /usr/lib/systemd/system or /run/systemd/system directories. Drop-in files in /etc/ take precedence over those in /run/ which in turn take precedence over those in /usr/lib/. Drop-in files under any of these directories take precedence over unit files wherever located. Multiple drop-in files with different names are applied in lexicographic order, regardless of which of the directories they reside in.

> ...

And this is just an excerpt which doesn't cover the details. Read the manpage for all the hilarity.
In my day job I do a lot of troubleshooting. That's most of my job... helping other IT folks figure out what the heck is happening with something.

I'd say that in 70% of things I work on, part of that time is figuring out what config files are used because the app/service/process/whatever is doing something the owner/tech/whatever doesn't expect, yet is rational, and they "didn't tell it to do that".

It'd be great if everything reported as the article mentions -- amazing, in fact -- but I feel like it's a pie in the sky wish. Like asking that all programs always exit cleanly or something. I feel like there'll always be inevitable edge cases -- libraries that themselves pick up config files or registry values or environment variables that aren't expected, who knows -- that'll need to be discovered. If things are already not going right with a program, I'm less likely to trust what it says it's doing and more likely to just watch it and see what it's actually reading and doing.
You can use SyncThing
It's not the frequency of updates, it's the control. I can easily ignore an application update until any arbitrary standards I require are satisfied; whether those standards are "ok, 48 hours have passed with no security alerts" or "my company's professional auditors have reviewed all code changes" is up to me.

(Unless there's a breaking change on the server side, but precisely because app updates are not guaranteed, app backends are much more conservative than web backends).

Controlling the updates for a web client might not be totally impossible but it's far, far more difficult and clumsy. Best case is it's a full SPA so you can just save the resources locally, but it's using classic server-side rendering with just a single chunk of client-side JS used for encryption... And of course there are no clearly announced and numbered releases, you need to keep refreshing the page to know when an update is deployed.
I wouldn't be surprised if this is just another frontend for ChatGPT
> It isn't my job, as an engineer, to remember everything you requested.

Could you clear this up a bit? If the PM makes a request to you, who's responsibility is it to remember it?
The car would not need to know why road it's on because he suggested limiting it to the national speed limit, not the speed limit of the road you are currently on.

Existing vehicles would eventually be replaced.

Sports enthusiasts would presumably get some kind of exemption.

I can't imagine what kind of privacy or reliability concerns you are imagining from limiting cars to 85mph.

However... while limiting cars to 85mph is very sensible, the EU has decided to flex their idiot nanny muscles and do something much more stupid.

Continuing in the tradition of the headphone volume and cookie laws they have come up with an extremely annoying law that will achieve none of its goals.

Basically they will use unreliable GPS to figure out the current speed limit, but then it won't actually limit your speed, it will just beep at you annoyingly. You can disable it, but it will re-activate every time you start the car.

Can I get 1000 face palms for the EU? It's almost enough to make you support Brexit.
This seems poorly reasoned. The premise that there's a hard divide between trustworthy and untrustworthy systems is, at best, incomplete.

The authors definition would consider 1-password an incoherent system, yet it's exceptionally effective at mitigating a whole class of attacks. You could argue that any system where you don't control at least 1) the update mechanism, or 2 the keys isn't sufficiently secure. That's one valid approach, but I would recommend anyone who thinks this read Reflections on Trusting Trust: https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref....

The more interesting and important problem isn't preventing all possible attacks. It's knowing what attack vectors are worth preventing, and what the consequences for a successful hack are. It's definitely not black and white
Maybe you should stop to argue in bad faith? The guys behind this are nazis with nazis tatoos, a name and a logo inspired by nazis and are doing nazi-like actions and support nazi racial ideologies.
8 servers use up one third of a rack.

You need interprocess communication that works across machines.

You need to orchestrate the deployment of software.

Communication within a machine is much faster.
Sure but I don't think that most programs keep their config files open the whole time they're running.
Ultima Online, offered more freedom already in the 90s than most modern MMOs (of course freedom in gameplay doesn't necessarily mean "fun" for most players, but still UO pretty much invented the modern MMO genre, then WoW "tamed" and simplified it which made MMOs hugely popular, and in turn it was WoW - not UO - that everybody else copied).
Hopefully so. Those products support a lot of combinations that we don't tho.

We're basically just chrome. Theoretically you could port the protocol to Playwright, but it'd be rough.

Don't do it.
> and deploying mostly meant getting my jar file or whatever running on some ec2 instance

And then you:
- deploy the wrong jar

- someone else overwrites your jar

- the jar and its libraries has a vulnerability (e.g. log4j)

- the jar doesn't support the Java version installed on the EC2 instance

- the EC2 instance isn't patched and gets hacked

- the EC2 instance generates lots of logs, fills up the disk and crashes

... and many more

There are reasons some things are put in place. It's not just a sunk cost. Is insurance just a sunk cost? There's always a risk factor to it.

Platform doesn't need to be a huge team or lots of complexity. Lots of things can be automated but you still need to cater for important essentials.
> There are at least two such cases

The first was Hushmail.

https://www.wired.com/2007/11/encrypted-e-mai/
For the sake of argument, let's assume that punishment has absolutely no effect on whether someone will commit a crime. Even so, there's still a benefit to imprisonment: it separates criminals from society for a period of time, during which they won't be committing crimes against it.
I think GT7 would beat it out in pure racing, it also supports VR which increases the fun 10x.
Slow tests.
The one i mentioned btw. only hsa that NDIR sensor and is at 60 bucks: "Hochwertiger NDIR Dual Beam Sensor" <> "high quality NDIR Dual beam sensor"

And it doesn't meassure anything else. So a good point that its not the same thing and if you want both, you probably need to spend 100+
You stop your service, do apt-get update java, and then start it again? New URLs, update your nginx config file and restart nginx. Second instance? Dunno, provision a VM, ssh into it, FTP the jar over and stick a load-balancer in front of the two. When you get to 3 instances, we can maybe talk about a shell script to automate it. Heck, before we do that, we can just flash an image of the VM and ask EC2 to start another one up.

Literally 100's of ways to do it.

All this IAC and yaml configs and K8 are exactly like DI and IOC. You get sold on "simple", you start implementing it, and every single hurdle only has one answer: Add more of it or add more of this ecosystem into your stack (the one you just wanted to dip your toes into).

Before you know it, everything is taken over and your whole stack is now complicated, run by 50 different json yaml configs, and you now need tooling and templating to get it all working or to make one tiny change.
IDK if it helps you, but a simple epub reader is Bookworm.
Nothing dampens fun like constant reminders that "hey it would be MORE fun if you just buy a booster/unlock/etc"
> I think that's more a problem of one person vs a team

Not always. The "team" you imagine might also be 1 person deploying the jar and the rest copying them. When that person leaves suddenly know 1 knows what to do anymore either.
My 2p-worth on this topic, as an experienced EM.

1. Agree what jobs need to be done as a team, and who’s doing them. Think RACI matrix. If you disagree over roles, consider breaking down the responsibility into smaller parts until you can agree.

2. Engineers should understand the strategy. How are you acquiring and retaining customers, and what are the biggest issues there? How are you spending money? What are the risks?

3. PMs need to think about NFRs. Instead of the common “tech debt vs features”, break work into customer-facing and internal-facing. If a feature is about decreasing latency by 200ms, for example, that’s customer facing.

4. Engineers and PMs need to empathise with each other. PMs typically lack control, but are at the coal-face receiving demands and complaints from everyone but unable to directly do anything about it. Engineers have to deal with huge complexity in areas they often know little about. Understand each other’s problems.

5. Have more effective meetings. Use them for answering difficult questions that need debate. For imparting huge amounts of info in one direction, record videos or write documents.

6. Be honest and transparent. Challenge each other where there is ambiguity until you are all ready to fully commit and prepared to be held accountable for delivering the same goal.

7. Build a decision-making framework that you both follow. This can be particularly effective with work intake.

8. Keep the focus on moving KPIs, not delivering features. Align around a few product and engineering metrics and concentrate on them relentlessly. Regularly review the case for all in-flight work.
For me it is still the controller.

I had an OG Xbox, and the dpad was horrible (ignoring the size of the thing). I hate the disk shape dpad and like the traditional cross that Playstation offers.

If they made a controller that was nice I might reconsider my options, but after also having to deal with Microsoft locking hard disks, and then doing the same during the 360 era soured my attitude towards them. And this is ignoring all the other bad will that Microsoft has generated over the decades.

I've stuck with Playstation, Nintendo and Steam and I don't see anything Xbox that I'm missing so unless something fundamental changes, I'll stick with Playstation over Xbox.

Why would anyone buy Xbox? No idea.
No Markdown support in Google Drive after all these years
Why does Google not (want to?) support the full Markdown experience in Google Drive? I'm not talking about the limited, mostly useless support in Docs, but supporting opening, reading / editing real (.MD extension) files. Just, why?
I think customer managed keys are often misunderstood. They aren't innately more secure than cloud provider managed keys from the cloud provider. They just give the customer the ability to manage the key lifecycle. Key generation, rotation, revocation. This is still a useful capability.
That's what it does, see its readme
Netflix increase prices. Reddit closes down free API access. Twitter introduces subscriptions.

I've noticed that people are quick to react negatively to such news however I feel like all of these services provide a real value and they are without any real competition.

Also these services are still better than traditional alternatives. I can cancel Netflix anytime and that alone is worth to me more than anything which cable could offer.
This was written by young undergrads with no actual research experience and a random visiting lecturer who is obviously trying to career climb (and had it backfire). Certainly there is bad research produced by MIT but I'd hardly call this "produced by MIT" in the traditional academic sense. It is extremely easy actually to get yourself some sort of affiliation.

Perhaps they should crack down on that, but I think the relative openness of MIT is overall a good university culture to have, and only a small minority of those with tenuous affiliation are actually grifters.
> SOC2 is behind a lot of that.

Which might actually be a good thing in disguise.

Lots of companies do random things that just look good from the outside. I've been to places where code review wasn't a thing until SOC2 forced their hand and even then it wasn't well enforced.
Mostly exclusives. XBox used to be synonymous with Halo. Microsoft shit the bed with that franchise so Sony took over.
It's also what the article omits... Yes, "the authority" that made the E2E software can screw you over, sure, but that's where it ends. There are good reasons for E2E encryption beyond doing shady shit or messing with goverments. E2E solves an entire class of server-side security and personnel issues. Some moderator type of person browsing your nudes? Not possible. Hackers stealing data from the server? You don't care, they can't decrypt it.
Your example is not balanced. Alt-right denotes a certain extremism or being a outside the overton window, while BLM and AOC are comparatively moderate on the left-right scale and less likely to hold racist viewpoints that the AI is likely to be trained against.

Besides, it's not possible to create a "nice AI that never says controversial things accidentally" while keeping it totally "apolitical". All communication about certain topics will lead both humans and AI trying to mimick humans into "political" territory. There is no true neutral, it's just whatever is most aligned with the status quo.
Problem with that is, they were so bad at continuity in Voyager they had to make an episode with a fake ship (cloned on the demon planet) that gets destroyed, so minor issues with previous episodes could be explained away as having taken place on the duplicate ship. Imagine how much worse if could have been of they had to keep track of actual plot relevant continuity...
and by teacher you mean it is just a debugger https://dailyartificial.com/news/harvard-university-to-deplo...
I don't follow the YC applicant space that closely. Is every rejection posted publicly? Cryptocurrencies do have some true believers, but there are also some of those that aren't. Hence by sheer statistics, we'd be safe to assume they exist in the YC applicant pool.
Ask HN: Useful Discord Communities to Join
Please let me know the Discord communities to join, Where we can gain knowledge across different subjects.
Can you reference which major index fund has tanked 30% in one day?

To my knowledge Black Monday in 1982 was the biggest single day dip in the stock market, where the S&P 500 lost about 20%. See: https://en.m.wikipedia.org/wiki/List_of_largest_daily_change...

Also after these dips, did the market recover and how long did it take? Imo index funds are where you put your money away for decades. Over those years, what is the average gains per year?

There is nothing wrong with accounting for extreme events and that’s why all investment could be risky. But I am challenging your narrative.
I just store my vault in a backed up iCloud folder. Syncs to Apple devices automatically for free.
I've always found the original Xbox/Xbox one controllers horribly oversized and heavy compared to the PlayStation 2 ones. The early PS1 controllers without analog sticks were a bit small but personally they've always seemed to have the best balance of weight, size, shape, stiffness, and quality.
As I mentioned in another thread, dpads are still used especially in platform games that require precision and the Xbox dpad disk is horrendous.

I've had both playstation and Xbox, although I stopped after the original and the 360, and I can't imagine completing something like Celeste on an Xbox controller.
This is good advice and my own software is following it:

$ oq info cfg

Looking at the following paths (the last wins)

/opt/openquake/oq-engine/openquake/engine/openquake.cfg

/opt/openquake/venv/openquake.cfg

However, I do not think there is any standard API to follow, I used "info cfg" but many alternatives were possible. So sysadmins have to explore to find out which is the introspection command to give. Not ideal, but I don't think there is a solution.
Even a very experienced engineer might not have encountered this specific bug/situation that you’re testing for in your take home assignment. How do you make sure that you don’t filter out good engineers by testing them on a situation they haven’t encountered in their career?
The new update confirms that the US intelligence community has no evidence of a lab leak.

The most prominent lab leak supporters are so upset with the lack of evidence in the new release that they are now accusing the US government of being part of the cover-up. To quote the most prominent lab leak theorist, Alina Chan:

> It's getting very difficult to believe that the government is not trying to hide what they know about #OriginOfCovid when you see a report like this that contains none of the requested info.

The other leading conspiracy theorists, like Richard Ebright, are echoing Alina Chan. So now, the conspiracy theory involves the Chinese government, the US government, and most of the world community of virologists.

All of this is based on no evidence, and each time evidence fails to materialize, the lab leak theorists argue that this just proves that more people are involved in the conspiracy.
I would argue that the "distributed by the same entity which it purports to secure against" is a less relevant distinction than this makes it out to be.

Consider, for example, Signal's progenitor, TextSecure, or E2EE for RCS.

What's stopping a government from compelling these services to ship backdoored code and then compelling the telco to spill the now-vulnerable ciphertext — which doesn't also stop them from doing the same to modern Signal?

I would also argue that the FBI/Apple example is exactly that scenario — the code being distributed by a different entity (Apple) from which it purports to secure against (any party with physical access).
You know what, that’s actually fair enough.
"Our old data warehouse consisted of the most popular components of the time, including Apache Hive, MySQL, Elasticsearch, and PostgreSQL. They support the data computing and data storage layers of our data warehouse."
"As you can imagine, a long and complicated data pipeline is high maintenance and detrimental to development efficiency."
Redis has consitently been the nicest program to admin everytime i have to interact with it as a sysadmin
For a regulatory body it is beyond trivial to assign a person to a phone number for a given time range.
Automated Godot iOS Upload
Ha, come to Austria where your break times are not included in your working time, so if your contract is 38,5h per week, then that's your expected butt-in-chair time as that doesn't include any breaks.

The mandatory 30min lunch break and other coffee breaks are not included in that, but as extra in your own non-billable time, while the clock is not running, so you could easily be spending 40+h/week in the office if your company insists on keeping track of your time, which some do and also don't offer WFH so they can nickel and dime you on your butt-in-chair time which they can't if you're at home.
He could have literally funded a competition and made 100 games and then do a closed or open beta and let the audience choose with the budget he allocated to the metaverse.
Automated Godot Android Upload