skysight-inc/HackerNews huggingface dataset:
I'd like to know more about the technical implementation.

For society, this is really important. Basically everyone needs a bank account. In some countries, the government even forces people implicitly to have one in order to pay taxes or fees.

In such a case, the government should provide a solution for this too.

Then, there are also economic implications of this. Society needs to run many banks, which uses a lot of resources (especially people). However, many people and companies only need one simple part of banking: cashless payment. Something that’s, from a technical perspective, just a database for transactions and accounts. So a default solution by the government makes sense to me.

Of course people will argue against this as the government would have full control over people’s money. But I think that’s the case anyway. Money is something inherently governmental as it’s produced by an governmental institution (central bank) and collected by the government in form of taxes.
So did Neeva. This is how I got on their waitlist.

Did not have enough time to actually use them though.
Pretty sure the guilt is shared. The profit seeking personal data peddlers don't choose overengineered solutions that only make sense at google scale.

I also have a feeling hardware designers could use being forced to live somewhere that's not a dust less constant temperature air conditioned office in California, but that's another matter for a different rant.
My 2009 Macbook Pro 13 (5,5) had firewire. Could you be referring to a different model?
I pay for twitch turbo, I even had youtube tv during football season. So I'm not that cost sensitive, and don't oppose giving youtube money for a service.

But logging in on every browser and device I watch youtube on? Fuck, I'd rather not. Also, I never login to my personal google account at work.

Before google bought youtube, my account there was called something like "duntwantacct".
Yeah, you can't have a public search endpoint or it will get spammed into oblivion. API endpoint is not cloudflared anymore though, since I use an API key system. But anything that is anonymous is basically toast if you don't use serious bot mitigation.

Cloudflare rejects about 2.5M search queries per day from bots. About ~20k make it through, and some of those are humans.
So if I'm reading this correctly the Dlang syntax has non-backwards compatible changes every couple months? That's absurd, how would you even develop for that?
Frida can now inject Rust and inline hooks into OS kernels and embedded targets
That formula makes no sense if you’re a scrappy distributed team.
Free Cyber Risk Report for Startups
It's more general than this, but in this example it's a chain of three functions, f, g, h, each of which can fail in the same way. The precise failure behavior is encoded in the types themselves, so there is no need to check for it explicitly in the code. If `f` doesn't work, then `g` won't run, and the failure will be handled as expected by the functions' return types. Maybe they'll return an error message or maybe they'll be a "null" sort of value; the types will tell you, but the chaining syntax itself will always be the same.

It's far more common to see this chaining done with `do` blocks but I wanted to keep it all on one line.

This lends itself to a clean and optimistic sort of programming. You just write what you want to happen, chained within the broader context of some exception that might occur. So I agree with the parent that static typing makes things faster and easier, but I would argue that most unhappy paths don't require unique attention, and that it's language smell to make you care about them.
I think if sending data to 3rd party vendors isn't an option for you we've seen Posthog being a great alternative to product analytics tools when the requirements are of it being self-hosted.

That being said I don't think using 3rd party vendors is a problem for most companies as it's far better to let someone else manage security updates, availability etc..

As long as you make sure there are good security measures in place. We undergo yearly external pen tests by a CREST accredited firm, and have an active SOC2 Type II program. For GDPR requirements we also sign Data Processing Agreements with most of our customers.

I think for most companies we guarantee better safeguard of your customer data then self hosting something in a docker container.
>This is an example on how to deploy the open-source LLMs, like BLOOM

BLOOM is under a non open source licence (RAIL).
Linear probing for a hash table that you’re not going to delete things from. Textbooks usually tell you to prefer other probing patterns unless you need deletion (and e.g. Go interface casts use quadratic probing[1]). Or is it still advantageous for some reason? (Locality?)

[1] https://github.com/golang/go/blob/03cd8a7b0e47f2141a1dbdad9f... via https://lukasatkinson.de/2018/interface-dispatch/
There is off course the technical issue: crypto is hard, attacks never progress to get weaker. In the realm of privacy this is especially important because you have to loose your privacy only once to not have it.

There is also the issue of contradicting incentives. To keep payments safe from crooks, no-one should be able to follow any trails. But to trace crooks making payments, the authorities need to be able to follow the money.

A central digital coin concentrates a lot of power. Money and power are a magnet for crooks.

Not saying this can't/won't/shouldn't work, but it's quite a promise to make...
This is a fair point and one I’d agree with when it comes to working on pre-existing projects.

I was commenting on CSS in general. That said, CSS is easy to understand in general IMO so even if you’re not familiar with a specific property or tool within CSS it shouldn’t take a ton of time to understand how to use it.

But that’s my experience with it and I understand that I worked with CSS daily for the past 10+ years so I might have a skewed perspective.
Surely, you're right. Any geologists care to comment?
Fixed it, thanks. I'm still struggling to find words that will explain it well though, as it's still unconventional.
Thank you for the context and this is what I was getting at - if you really want to dig in on things like KV, D1 and DO you will see occasional mentions of regions (I'd really call it geography) to add context on things like "KV is eventually consistent, instant in the pop where the write takes place but takes X ms to propagate everywhere". For many (most?) applications it doesn't really matter, I get the sense for these you clearly document these things so people understand the more-or-less inescapable fundamental reasons why things are what they are. As other commenters have noted "there is no free lunch" when it comes to things like the physics of getting data from a pop in Tokyo to Chicago but Cloudflare does a good job and making it happen more-or-less invisible.
> As the developer of a very high-powered tool, I may well wish to limit its use in many contexts. But, I never wish to limit the tool's usefulness ahead of time.

Exactly, content moderation is largely an application layer problem not a foundation layer one.

Imagine the problems of MySQL trying to perform content moderation for Facebook.
I've always been decent at writing, and when it's about something I am interested in I enjoy it. I love history, though I haven't had much chance to read about it since the concussion. I also find aerospace interesting - I used to play lots of flight sims - and before I did programming, my primary interest was in astrophysics. History and writing are the least affected by my concussion. I plan to read some history books over the gap year. But I'm not sure if I want to pursue history as more than a side interest.

As for delaying A levels medically, I probably could. The problem is, this whole year has had a silver lining that's kept me going throughout: My school year had an abnormal intake of lots of brilliant people that are amazing, supportive friends. In particular, there's someone who is like me if I hadn't had the concussion. While it stings to look at the difference in where we are, they have all been immensely supportive. It also makes me feel physically safer - when I'm surrounded by friends that I know care about me I can actually relax. I don't know what I'd do without them.

Every year my school's intake gets worse as it becomes larger and more mainstream. It doesn't have an ability to properly discriminate due to the laws against new grammar schools. I doubt I would find this level of support if I waited a year, and that support is what has kept me going. Plus, I improved significantly last summer break; I can hopefully have a similar improvement in the upcoming 6 weeks.

You mention the need to grieve for what I've lost. You're entirely correct. This wouldn't be anywhere near as bad if I didn't know what it was like to have things come easily and the certainty of a bright future. I need to get over it somehow. I operate in strategic long-term objectives (This year I will achieve x, y, z) and I began this year deciding that no matter what, I would achieve my prior objectives. That's obviously been a complete failure. Changing my objectives is a difficult thing to stomach. It used to be that I had high expectations of myself and I would consistently achieve them. If I had problems, I would simply reallocate some time from casual programming/gaming/etc to that objective and then achieve it. I have no more time to reallocate.

Thank you. Your comment has prompted me to stop avoiding some difficult questions and work them out.
Private investment is what means perverse incentives. You care about your big donors now. If you take 50k from a guy you want to give him what he wants in return so he gives again. It's about ROI. The bigger the amount the more strings attached.

Public trading means clear protocol for ROI and it allows to have many small investors who can have as little say as you specify (non voting shares etc). Comes with requirement for a lot of documentation and transparency too. So accountability. If business I like wants to grow and needs money this is the route I want it to take
How to speak so that people want to listen – Julian Treasure
Yes, printing money during Covid led to inflation
I see lots of posts on HN saying corporations are rent seeking in the midst of global inflation.

But HN is basically an incubator for new companies and the pick sheets for start up investors.

Shouldn't some of the blame be directed towards governments?
Thank you for the advice. I don't think I'll go the freelance route, at least without significant improvement.
You don't need to store it indefinitely though, and there's not much point in crawling faster than you can process the data.

The couple of kilobytes per document is the actual storage footprint. Sure you need to massage the data, but that almost entirely CPU bound. You also need a lot of RAM for keeping the hot parts of the index.
This applies even to car manufacturers.
I seriously doubt the S-65 AMG from Mercedes sells in sufficient volumes to justify its existence on itself. But from a holistic brand perspective, Mercedes-Benz would be crazy to kill it.
That's not the worst I've seen, either. Some other password sins include:

- the password validation fails for reasons not listed entirely

- the password box truncates passwords silently
My reading is the lower initial price is a incentive to allow the company to collect data. The data can then be used as evidence of poor driving, which then allows the company to raise prices. Although I've never used such a tracker, my understanding is they use proxy metrics for safety (accelerometer thresholds vs. accident record) that can facilitate this.
Meh, the financial industry has bigger password shenanigans that NXP's dumb form.
There is no reasonable scenario whereby your insurance company gets access to your geolocation trace information from your phone.

It is possible that your phone provider does not have more than 24 hours of records of which phone towers you connected to.

It is almost certain that the granularity of any information subpoenaed after the fact will not be sufficient to establish any specific behavior at the time of the accident.

Your phone provider is probably not using some off-the-shelf ML modeling to slap together a risk profile that you will be unable to appeal and yet is years ahead of any government regulation. (E.g., in the US if your credit rating causes you to get a worse rate, you must be notified. I have not looked, but I'm very dubious that your "Driver Risk Profile (TM)" will have any such obligations - now or in the imaginable future. See below.)

Biden's proposed AI Bill of Rights [1] is (surprisingly) a pretty interesting read:

> You should know that an automated system is being used and understand how and why it contributes to outcomes that impact you.

If this were a law, this part would be useful.

> You and your communities should be free from unchecked surveillance

I suppose watching your every move in the car isn't going to be considered "unchecked". Since people are all carrying cell phones, I'm not as hopeful this point goes anywhere useful.

[1]: https://www.whitehouse.gov/ostp/ai-bill-of-rights/#privacy
Would having permanent nets severely affect the efficiency? Specifically for baseball-sized hail, i.e. large gaps between threads.
It is a shame. I have been using tab-separated sheets recently as it allows me to simply not care about almost any possible character in my strings...apart from tabs of course. But those are far less common than commas, and putting strings in quotes 100% of the time looks messy to me.
I hope so. Canada is a wonderful country.
Yes. There’s not a single line of C code in it. It’s practically a bait-and-switch.

Edit: you’re right. There is C code intermixed with Go. It’s tricky to tell apart on a skim. Need to read carefully
This is why we added http cache headers, CDNs and caching of common assets, and cross domain requests. All of which are being assaulted for various levels of "privacy" concerns. Privacy I never asked for mind you, but I get it anyways. Though how convenient that tracking still happens, I still get ads, my content still doesn't belong to me, sites are slower, everything is an App, and the general experience and openness of the web is Down.

I exaggerate a bit to prove a point but the gist is definitely happening, we're just waking up to it slowly.
I got this from Liberty Mutual and it was an awesome mutually beneficial agreement.

Liberty Mutual only records your behavior for one quarter, and then gives you a discount for as long as you hold your policy. I ended up with a permanent 28% discount!

It analyzes your driving based on four factors: total miles drive, how fast you accelerate and decelerate, and whether you drive in the wee hours.

I found the temporary loss of privacy to be totally reasonable and an excellent tradeoff.
Slippy Maps with Unity and JavaScript
Absent any other external forces, liquids (even non-uniform ones like the ocean) will form an isograv, where every part of their surface is at an equal gravitational potential. This is a natural consequence of how pressure works. So you expect this kind of deviation from gravitational anomaly. And while other forces can have a significant impact, there's not a lot else which can cause a persistent change in the average of this size. Dynamic effects will just to make things oscillate around the average but not chang the average much if at all, and even an extremely heavy prevailing wind (rare at the surface) won't be enough to cause much of a change in sea level.

(ok, there is one really big thing left off of this which is important with respect to what 'average sea level' means: the largest other persistent effect is the centrifugal effects from the spinning of the earth, which results in the bulging at the equator (both for the rock itself, which at planet scales and timelines is approximately liquid, and for the oceans). This is way larger: the oceans are actually about 7km higher near the equator than you would expect if the earth was a sphere. The average they are comparing to here is coming from measuring sea level with respect to the shape it would be if the earth were just a ball of liquid with the same mass and spin. There's a bunch of different approximations which get used here and the details get really messy, but the next step after taking into account the centrifugal effect is basically various levels of approximation of the distribution of gravity: https://en.wikipedia.org/wiki/Geoid)
> It increasingly is also the case with regular libraries and programming languages.

Let me posit this, without actually feeling sure that this is correct:

As a rough example, say there’s 100 hardened libraries and languages that meet the reliable and slow and steady sensibilities. Now consider that programming becomes less and less niche, and in addition to those 100 libraries, we also have 500 libraries of dubious dev attitude and quality.

People will feel that quality is falling off a cliff when they experience it as a whole. But really there’s just more choice, most of which you can just ignore.

I think I wonder the same thing about people’s feelings of how programmers are getting worse or everyone’s just a web dev these days. I’m gonna guess there’s more “”serious programmers”” than ever before. They just make a smaller slice of the pie.

So I wonder if this is actually true and can be measured beyond a handful of anecdotes, or if we’re just being biased by a growing selection of “move fast / I’m not too serious about this” libraries?
Skin disease in orcas off North American coast concerns scientists
I'll go further than implying every penny can't be traced in the current system to stating it as a matter of fact. The default for cash is that it isn't traced.

There are plenty of nit-picky exceptions, but I know for a fact that I or anyone else can transact in complete privacy with cash if we take the most minimal of precautions.

If in fact the current system can trace every penny then our governing officials have a lot of explaining to do as to why human trafficking still happens with USD transactions.
Exactly. There was a very similar discussion on here a little while ago about electric cars. For me, all I want is a simple smart watch that has great battery life, navigation with maps, and high GPS accuracy. Everything else I don't care about. The Garmin Fenix fits that bill, along with 500 other features for everyone else with their simple lists.
I don't think it's so much about "predicting execution" as exposing the underlying mechanisms that browsers supply for handling asynchronous tasks. The "order" essentially is a priority system, is it not?
> You'd have to keep an additional mapping from the sorted to original positions.

2*O(n) is still O(n)
> When I tried to do this I came to the conclusion that I needed to actually render the page to find out where on the page a particular piece of text was, what font size it had, if it was even visible, etc. And then there's JavaScript of course.

Are there open source projects devoted to this functionality? It’s becoming more and more a sticking point for working with LLMs. Grabbing the text without navigation and other crap but while maintaining formatting and links, etc
Ex Garmin Instict user here, I just now changed to MK2S beacuse of the diving capabilities, but in general one of my best and robust watch that I ever used.
Appreciated, as always.

(My top-level comment applied to the original URL, and is no longer relevant.)
Lighthouse lights are losing their sweep
I used to flash custom ROMs regularly until 2021, when I bricked a second smartphone. It was a rare mishap (went smoothly the other times), but it made me too scared to try again. This is to say it's already an anxiety inducing operation without Google interfering.
For all practical purposes, customers don't care about that. And the minority who cares is going to do what? move to an even more restrictive walled-garden?
> no claim was made of implied that they were mostly due to issues that memory safety would help with

he literally did

this is the entire message

Sudo 1.8.0 to 1.9.12 (the latter is from 2023(!)) are *memory unsafe*.

Sudo before 1.9.5p2 is *memory unsafe*.

Sudo before 1.8.26 is *memory unsafe*.

Sudo before 1.6.6 is *memory unsafe.*

memory unsafe here is used for dramatic purpose by the author

it actually means that

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c *array-out-of-bounds error* that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo *by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.*

in this light, is PHP memory safe because it enforces runtime bounds checks on arrays?

Or

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, **it is NOT the default for upstream and many other packages**, and would exist only if enabled by an administrator.)

has one of these bugs ever been exploited?
> Eventually of course road taxes need to be extracted from something other than fuel.

If we get to a point where fuel consumption is so low that it stops generating significant tax revenue, then that is a great problem to have.
A nearly impossible project and a nearly pointless project make a perfect pairing.
I've been mostly doing Haskell for last 9 years, but I find Rust to be awesome nowadays. Great feedback from the type checker, no unnecessary runtime, great tooling. It's unique in a sense that it's fast, but quite safe at the same type. If it would have Higher-Kinded Types, it would be even better for me personally, but it's a tricky compromise from a compiler design perspective.

Also, I find static linking to work great with Rust, so it's quite easy to distribute your app.
Shrink to Secure: Kubernetes and Secure Compact Containers
Wall Street Regulators’ New Target: Emojis
This, so sadly this. The SciAm I subscribed to in the 70's and 80's is long since dead and gone. Back then, articles were routinely dense, tough long reads, with excellent editing and fact-checking. Now...it's filler fluff, and I'd trust Wikipedia more for facts.
Show HN: Scrapscript “guide”, proposals, and community chat
Or buy an actual rackable server containing Nvidia's server offerings for neural networks and never need cloud AI again?

Your IT professionals will thank you for getting actual IT grade equipment with actual IT grade management interfaces.
Right, now to try to rebuild the VM...
I think Strava already offers this. I used it for a 10K last year.
Accrescent: A novel Android app store focused on security, privacy and usability
Have you ever tried to dig a hole? What tool did you use?

- Want to cut through and move loam, compost, sandy, and compacted soil? You're gonna want a rounded shovel.

- Want to break up rocky, clay soil? A pick mattock will penetrate deep, breaking up soil, shattering smaller rocks, and is used as a lever to uproot. A tiller is a faster method but disturbs the soil more.

- Want to dig a narrow, deep hole? An augur will quickly break up rocks and soil in a shaft and move them upwards.

What do you use the Perl tool for?

- Quickly and efficiently open files, read line by line, analyze text, and perform any kind of operation you can think of, with complex data structures, objects and modular code, using very few lines of code.

- Executing external commands with a shell, returning their output, and making complex yet short programs easily with arguments to the interpreter from a command line.
Interesting, but doesn’t beat memorising your keys
How’s that going to work with AML etc
I'm not sure how you'd replace a decklink card with ethernet. The bandwidth just isn't there. Same issue with the TB ports, there's not nearly enough bandwidth for pro AV.