skysight-inc/HackerNews huggingface dataset:
High-severity bug in Cisco switches lets attackers break encrypted traffic
You said that pandemic price increases were caused by increased costs.
yeah that's exactly how it's pronounced :)
Streaming. If you’re expecting structured data as a response, request YAML or JSONL so you can progressively parse it. Time to first byte can be milliseconds instead of 15-20s. Obviously, this technique can only work for certain things, but I found that it was possible for everything I tried.
95% of what you said has nothing to do with JSX, and most of it would apply to any good framework, so its not even react-specific.

Why do you thing that a specific syntax for writing createElement gives all these positives?

What do you think all of this renders down to? That's right, html, js and css. So if those are not properly standardized and working then your house of cards falls no matter how well you have built it.
Any shred of imposter syndrome disappeared when I looked at the corporate code bases for the first time and realized that they didn't do magic, but things I could understand. I read the software and the documentation and it made sense.
Talking to the developers of that software made it clear they worked long and hard on it and naturally knew more about it. This familarity and the decade(s) of experience was the only difference between me and them.

Also realizing that a lot of people write really not all that good software was another big point.
Iranian hacking group impersonating nuclear experts to gain Intel
> you literally twisted what I said into something else and went on to argue against that.

I had to, your original post contained two factual statements and no opinions, so there was nothing to argue!

Based on your previous replies I think your distinction is that liking the sound of rain is different because it’s a thought conjured up inside your head? “It is good that my garden grows” is also a thought conjoured up in your head that others may disagree with. Your argument seems to require some kind of appeal to objective authority that doesn’t exist.

(I know I said the last post was the end for me but I’ll admit to being somewhat fascinated by the counter argument here)
Netscape and Sun announce JavaScript (1995)
Isn't nanite hardware rasterization with software shading? Like using the GPU to draw triangle/cluster ID #s into the FB and then shading those?
> Andreas has had a bunch of donations and sponsors in the last month

I believe that Igalia was the source of $100k of that! Awesome that they, as an open source browser consultancy, can give back to projects like Ladybird.
Anthropic Instant is the best LLM if you're looking for speed.
How to Roll Your Own Depth Sensor
It's Time to Revise Guidance on Political Activities for Members of US Military
Not on those trying to access /admin.php and similar.
Fun to see folks enjoying this! :)
Because it is either more expensive or require retooling. Greed, profit, the same reasons as always.
Everything has an opportunity cost. It's just often not explicitly realized or acknowledged.
Those things are about using code instead of HCL for modeling primarily. For us, it is about UI and UX (it is a REST API consumed by a Rundeck form and other services) as most of our engineers are not devops trained. Also, TF is only one possible backend. We actually emit other configuation code and configuration instruction sheets as MD and PDF for things we don't support.
I've used Flask/SQLAlchemy and Django a bunch in my day, professionally and on the side.

It's a different strokes for different folks sort of deal.

Django is very opinionated, in a way that is "eventually" correct (i.e. they might have had some bad opinions many years ago, but they have generally drifted in a better direction). If the opinions don't align with what you're building, the escape hatches are not generally well-documented or without penalty.

Flask is minimalist and flexible. Once you find a "groove" to building with it that fits your sensibilities, it's quite, quite nice. That being said, the most recent versions of flask have excellent documentation, imo, and the tutorial is a bit more opinionated in a highly productive way. The "patterns" section of the docs is also super useful for productionizing your app.

Personally, I prefer the combo of Flask+SQLAlchemy, and eventually Alembic once you decide that's good for your app's maturity level. I respect Django a lot, I just enjoy the explicitly "less magical" aspects of a Flask stack, which is an opinion-based trade-off imo.
No personal hit or anything here, but really looking forward to how badly this will age in 10-15 years.
In which situation would you not have access to the repo? I guess if it's a library or something, but libraries must always be documented in a different way to business code.
I got tired of this sort of thing recently and now my web server returns 402 for everything that doesn't exist or has an invalid request. Most of what I do involves API and static data so I just serve everything from memory and avoid all disk access. It really bothered me that tons of stupid bots eat up resources asking the kernel for ENOENT.
This will however play well with their local audience. I lived in Sacramento for 13 years, its a pretty liberal town. If you wanna get people upset about some stuff, there are ways to get them hooked in by a headline or sign etc. like this.

Its shoddy from a journalism perspective, but the Sacbee does put out some good reporting otherwise, however they tailor headlines to the intended audience, thats for sure
What you call "awful click-bait", I call "literally true as stated". The Sacramento sheriff is, in fact, sharing license plate reader data with anti-abortion states. If you have a problem with that headline, I suspect your actual motivation might be to try and squash news you find inconvenient.
Search for videos tagged by listenable. They have a pretty good handle on what you can skip the video for. One great option is standup comedy, it really breaks up just standard music or podcasts/informational videos.

I've known some people would listen to ASMR to work. I've never been a fan but, really enjoy listening to synthwave and vintage video game music to work.
> because apparently they were vital cogs who somehow "continue to have access to trade secrets"

I don't think this is a sane take. Knowing trade secrets and being a "necessity" are not related. They were, and you are, and I am, replaceable. Our possible deep esoteric knowledge of secret sauce maybe makes the replacement more painful, but that's all. If you've ever been on the "not fired" side of a layoff, you'll understand how losing someone "vital" is almost always just a disruption, in reality. The group may even collapse, but if the work truly is non-optional, pressure will build, and it will be done. If there's any competence, nobody will miss that person in a short time, and that's a good thing, because key person risk is a bad thing.
Yeah, this is just like a forged signature: falsified evidence of an agreement that never took place.

Yes, its a vulnerability, its also a serious legal wrong in its own right (on top of the trespass to chattels you need to do to accomplish it.)
Threads profiles can't be deleted without removing your entire Instagram account
I have been known to leave long comments or links to confluence for the purposes of QA and testing. Sometimes integration tests require special utils and in the worst case code modifications to work properly in a mocked production environment. Often this is outside the control of my own working group since I tend to work for giant megacorps.

Any tester is going to need detailed information that is devopsy and cannot be expressed in pure code (Despite the claims spoken by the code-as-infrastructure tools).

There are also cases where I like to document the living shit out of my classes/functions if they are something that will be used by many other devs. Bash/unix functions are some of the most heavily-documented tools you will ever see. Try using 'man grep'.

There are more questions than "why" that can be answered by comments. There are also "What ifs" that you could anticipate. Many of those "what ifs" are almost certain to appear in certain circumstances, and I choose to drop a few breadcrumbs that can save the code maintainers a few weeks of their time rather than following a false lead.

The beauty of code comments is that they don't require some external tool. They are in the pudding with the code itself, where they can be found easily. Most IDEs allow you to collapse long comments and even fade comments into a light grey so they aren't distracting.

From this thread and work experience I know that the code commenters are losing our war and are pretty much defeated by the code aesthetics crowd - who insist code should be beautiful before being useful.
They won't pay the bills
An entirely predictable turn of events. Next up:

- The lawsuit is never actually filed. Turns out just like Delaware (and unlike the SEC), California courts aren't going to bend to Musk's will.

- Twitter continues to bleed users and advertisers. Musk continues to double and triple down on his failed policies.

- Musk declares that this was his intention all along with the purchase, and killing Twitter was a "5D chess move". His fans eat it up.
I've been getting your daily list in my email for a couple months: great stuff
I have no idea tbh. Never got an email abt it. Saw the charges after a while (my miss) wanted to log back into my account to cancel - couldn’t because account was locked.

The thing that annoyed me most is: they knew the account was locked and I could not used it and still charged me.
I actually don't think Instagram should be allowed to target ads to me based on other people's photos in which I happen to appear.
That's what I always thought. Someday they will come up with a new embedding model, right?
Unconfuse Me with Bill Gates
Meta delays launch of Threads in Europe amid privacy concerns
Phones are pretty bad for the group who are scared of breaking something and so don't just try the first thing they guess.

Delete: maybe tap and hold, then three dots or an (i), maybe swipe right/left/either.

Close an image: probably pull down from the top but not always.

Undo: Shake the phone like an etch-a-sketch???

Whereas Outlook Express, for example, looking at screenshots, had a big red X with Delete written underneath it in the toolbar. And your mouse had a physical button dedicated to stuff that's now hidden away behind long-press or swipe or the (i) or whatever.
Unsure. Never been able to narrow it down.... never needed to so far, unlike with say - propylene glycol which has hospitalized me several times.
(I react badly to most "alternative sugars", which might be related). But then I also have some problems with fructose.
Do you think that what is popular today will be popular tomorrow, so needs no defending?
How does it compare to XChachaPoly? I guess it's only useful when you are sure to have CPU support for AES and not having to deal with the annoyance of non constant time software implementations. I feel like XChachaPoly has the benefit of being annoyance free (constant time by design even in software implementation), fairly fast even without hardware support and to exists, so it's probably a good choice for most use cases.

EDIT: my question is probably more clearly asked as: what's wrong with XChachaPoly that is solved by this new construct?
For small triangles, they use a software rasterizer into the V-buffer. Obviously for 1px triangles since they don't want to waste quad overdraw, but I think they found it's faster up to 12px/tri or so on AMD.
It's definitely gotten better, but yeah, it really doesn't reliably support what I'm currently working on.

My project takes transcripts from YouTube, which don't have punctuation, splits them up into chunks, and passes each chunk to GPT-4 telling it to add punctuation with paragraphs. Part of the instructions includes telling the model that, if the final sentence of the chunk appears incomplete, to just try to complete it. Anyway, GPT-3.5-turbo works okay for several chunks but almost invariably hits a case where it either writes a bunch of nonsense or spells out the individual letters of words. I'm sure that there's a programmatic way I can work around this issue, but GPT-4 performs the same job flawlessly.
There have been a lot of studies done, dose-response studies too. It gets ignored in the US because of left-right polarization. Here are a few below. Believe what you want I guess but this is basically overwhelming evidence to me.

https://www.hsph.harvard.edu/news/features/fluoride-children...

https://www.forbes.com/sites/brucelee/2019/08/20/fluoride-an...

https://pubmed.ncbi.nlm.nih.gov/18695947/

https://pubmed.ncbi.nlm.nih.gov/31424532/

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5285601/

https://www.sciencedirect.com/science/article/abs/pii/S08920...
Biggest news here from a capabilities POV is actually the gpt-3.5-turbo-instruct model.

gpt-3.5-turbo is the model behind ChatGPT. It's chat-fine-tuned which makes it very hard to use for use-cases where you really just want it to obey/complete without any "chatty" verbiage.

The "davinci-003" model was the last instruction tuned model, but is 10x more expensive than gpt-3.5-turbo, so it makes economical sense to hack gpt-3.5-turbo to your use case even if it is hugely wasteful from a tokens point of view.
> "With how good gpt-3.5-turbo-0613 is (particularly with system prompt engineering), there's no longer as much of a need to use the GPT-4"

poe law
From the http spec about 4xx errors:

> Except when responding to a HEAD request, the server SHOULD send a representation containing an explanation of the error situation, and whether it is a temporary or permanent condition.

So sending content alongside a 4xx error should be the standard behavior and browsers should display that content. Not sending/displaying that content is the non-standard behavior.
Good to see Zink now provides OpenGL over Vulkan for smaller GPU makers. I wonder if big ones will also eventually use it for it.
Part of Nanite is software rasterization by rendering triangles with 64 bit atomics. You can simply draw the closest fragment of a triangle to screen via atomicMin(framebuffer[pixelID], (depth << 32) | triangleData).
And it was supposed to be called either Oak or LiveScript until Netscape decided that Java was the be-all-end-all and this new scripting language just HAD to be called JavaScript. Too bad too, because the language that was originally proposed was dialect of Scheme (or was it Scheme itself?). So many what-ifs loaded into the adoption of JavaScript had it gone another direction.
No it won't without buyers. Importing is just as easy to make illegal, likely easier. EU does this for a lot of products and so does the US.
I can believe Sony did it. The PlayStation hit a lot of the right buttons at the right time.

Sega was dead by the time the Saturn landed. Sega burnt too many fans when they launched the Sega CD and 32X just to abandon them nearly immediately. Parents didn't want to hear that Sega was launching yet another system. Sega launched 3 consoles in 2.5 years in North America. Sega burnt all their goodwill.

Video games can be an industry of momentum and trust. If you keep launching and abandoning products, you lost the trust and momentum. Developers don't want to commit to a system you'll abandon. Gamers don't want to buy a system you're going to abandon. Sega had shown that it would abandon systems at the first hiccup - and try to get you to buy junk.

Sega's Saturn was also a weird system. It decided to use quadrilaterals instead of triangles and was complex which makes it harder to use effectively.

Nintendo's N64 would be launching a year after the PlayStation. While the N64 might have had more 3D capabilities, many of the games on the system didn't look as good and the 3D gameplay wasn't as compelling as the PlayStation's.

Not only that, PlayStation games were so much cheaper! At $50/game, it was just a ton more affordable than the $70 that N64 games were going for. By the time that the N64 came out, the PlayStation had a huge library of excellent games that were cheap. You even started to see older games for $25.

Sony's brand at the time was like gold. Everyone wanted anything with the Sony label on it. It can be hard to remember what a dominant force Sony was in consumer electronics. They were like Apple back then. When people heard that Sony was coming out with a video game system, everyone would think that it would be the best just based on the brand. Parents would hear the Sony name and think quality and reliability. Especially if they had been burned by Sega, the PlayStation from Sony seemed like buying the best product that would last.

Nintendo still did well. They have their niche. Sega had destroyed their reputation while Sony was the most admired electronics company out there. The PlayStation offered people a non-Nintendo system that they didn't feel would be abandoned and by the time the N64 came out it was established with an amazing game library that the N64 couldn't match.
snakeviz, tuna, pyprof2calltree etc. use data collected by cProfile which is probably the most flawed profiler anyone has been shipping for a long time, because cProfile only records the caller instead of the stack. Strangely enough the documentation for cProfile has an entire "Limitations" section which does not mention this.

Recording only callers instead of stacks means you literally cannot distinguish different control flows going through a common function at some point. All tools, like the mentioned ones, which pretend to reconstruct a flame graph or similar visualization don't actually work. A common cause for degenerate cases are function decorators used by multiple functions, especially if the decorator appears multiple times on the stack.

So for many practical programs the output of these is simply wrong and misleading.
Simple AWS snapshot:

https://imgur.com/a/IGu1syf
I would also argue that it prevents important technical conversations and accounting. If you have a m/s architecture, and you're concerned about redudancy/cost/etc.. well that conversation has been delayed and potentially prevented over the constant correction of saying manager/worker instead. It's a mental/cognitive/communication tax on the contributors.
There are official bindings to C#, the official docs have C# examples in them, and it can use the latest and greatest .NET versions, not just mono.
>True, but it's the best ORM currently available for any language.

Better than Entity Framework? Consider me impressed.
WCs, toilets, lavatories, restrooms, loos, johns, bogs, heads, khazis, commodes and such.
I mean, did you think he was pouring money into this out of the goodness of his heart?
In the US basically every large exam especially the end of year and college admissions tests (except the essay portion recently added to the SAT when I took it) were all bubble forms. In college it was most common in the large classes that were part of the options for the general education requirements that would use them instead of open ended questions so they could be automatically graded for the 50-100 students who'd be taking each exam. It was also way more common in classes where answers would be numerical rather than say my proofs and logic class where we needed to write out a proof. IMO it was deployed logically where multiple choice made sense it was used and classes where the path to the solution was important they'd not use it.
Timely thread about Joplin, an open-source alternative: https://news.ycombinator.com/item?id=36611355
The third major problem:

Project Manager/Scheduler/Sales/Customer doing one/any/all of: not believing the input of the SME (you) when they ask for input developing the schedule, overpromising, expecting the world, or so many other problems.

Too many times in my own field (heavy construction) the scheduler has asked me how long it will take to do a given task, and it is actually reasonably quantifiable to say "It will take my crew X days to move Y volume of material at Z/shift" only to be told "Well our proposal only allocated X-5 days and budgeted a Crew of <your chosen size - 4> for that task. Figure it out."
I find I'm almost mad when I have to actually do something on a mobile device. I can scroll through feeds just fine but if I need to start finding answers to questions, or editing text, it's just obnoxious and I'm mad the whole time.
I had the same perception, but if you read the paragraph closely it says that folks at “Below Level 1” can delete an email, and that’s about as complicated a thing as they can do.
Mapping the Materials of the Human Body: The Evelyn Tables (2013)
I worked in factories, I worked minimum wage jobs, I paid for my own college through scholarships and part-time jobs. I came from a lower-middle class background, and we never went on trips and we never ate out. KFC was considered a special treat. I manufactured my entire career and where I am in life, the fact that there are some people who weren't able to match me is orthogonal to any of that and I won't feel guilty about it. I don't look down on them one bit, life is tough and unfair, but I also won't feel guilty or self-flagellate myself because I worked hard and took advantage of whatever opportunities I either got or created for myself.
I imagine the API quality isnt nerfed on a given day like ChatGPT can be.

There was no question something happened in January with ChatGPT, weirdly would refuse to answer questions that were harmless but difficult(Give me a daily schedule of a stoic hedonist)

Every once in a while, I see redditors complain of it being nerfed.

Sometimes I go back to gpt3.5 and am mind boggled how much worse it is.

Makes me wonder if they keep increasing the version number while dumbing down the previous model.

With an API, being unreliable would be a deal-breaker. Looking forward to people fine-tuning LLMs with GPT4 API. I'd love it for medical purposes, I'm so worried of a future where the US medical cartels ban ChatGPT for medical purposes. At least with local models, we don't have to worry about regression.
A big enough hole presents a wedge for new entrants to get started.

OpenAI will never fulfill the entire market, and their moat is in danger with every other company that has LLM cash flow.

They want to become the AWS of AI, but it's becoming clear they'll lose generative multimedia. They may see the LLM space become a race to the bottom as well.