skysight-inc/HackerNews huggingface dataset:
I actually kinda wished HN had a separate category for free vs. paid HN stuff. Don't get me wrong, I've no issue paying for a product, but to click on something that is seemingly interesting only to find out it is overpriced for what it offers? huge turn off. Many of these projects (not necessarily this one...haven't looked yet) simply wrap open source into a 'cloud' offering and charge $X for Y.

I do hope we can get some type of filter for these things, or if not, HN should start charging a ton of money for these types of posts.
That makes me curious if Bluesky does anything to prevent Homograph attacks.
Flight crew can't work if they have young kids? Or puppies? or noisy neighbors?
If this really does add $5 to the cost of every delivery it will dramatically reduce demand for deliveries.

This will cause huge demand for delivery jobs, with insufficient supply of jobs. Normally this is rectified with price (wage) adjustments, but not here.

It'll be like rent controlled apartments: A privileged few get high wages (low rent), and no jobs for the rest (high rent in my analogy).

The requirement to pay even when there are no jobs will make it even worse - the companies will require drivers to accept every job or be kicked out, and/or reduce the number of people they accept as drivers. This will make service worse for everyone.

Not smart NY, not smart.
Do you _really_ need AES256 though? Just a large computation overhead while AES128 is extraordinarily secure already.

The conversation about nonce sizes is 100% on point however. Why isn’t it at least the size of the key?
AMD is good at being the underdog, hopefully it will focus more on its software, the ROCm thing, which really needs some love, a lot of love indeed. The software ecosystem for AMD's RDNA(gpu) and CDNA(MI2xx MI300) is at its best a mess.

AMD shall own OpenCL and boost it heavily and make it a central piece for its ROCm framework as the preferred backend, in my opinion.
That was basically the same as my experience. However what I should have included more explicitly is that, if we’re failing a lot of “successful” high school students, what are we doing for the average student, let alone the below average one? Due to the expense, college seems to dominate a lot of educational conversations we have in this country. However, I feel like the issues start way earlier than that. It seems like we fail at getting the average student in primary and secondary school to internalize the point of a lot of why we’re teaching things, what they’re useful, how they apply to life, and, maybe most importantly, why there interesting. It doesn’t help that the life value of a lot of subjects have more than one value: history and English class seem on face value to just teach you about our cultural forces, but the real value in the subject is to read and write in a critical manner. Math seems totally useless to a lot of people after you learn long division because the word problems we deal with are incredibly contrived, and we don’t teach the most important part of math, formal reasoning very well. In my opinion, fewer people should go to college but because their K-12 education should leave them with a much stronger toolset to face challenges in work and personal life.
Even that is not enough. My wife recently had an experience where American Airlines sent her bag to the wrong country after she was forced to gate check it due to lack of room on the plane. She had paid to have a carryon luggage in the cabin, which she had brought with every intention of having on the plane with her, but was forced to check it anyway or be denied boarding at the gate.
I'm weary of tying my domain registrar to social media. One of the nice things about owning my domain is that I can control it -- if I get banned on bluesky, a much more likely occurrence than CloudFlare kicking me out, what's the policy of transferring out?
Fear has nothing to do with it, you can make a rational assessment of risks and reasonable decisions to mitigate them without living in terror.

I sometimes drive my automobile for non-essential reasons too despite that being one of my largest risk factors, much larger than covid.
Who cares about your guess? You're just doubling down on your previous faulty argument, and anyone would know that there is not a 1:1 between handles on Instagram and Twitter
Bluesky trying to go the way of Clubhouse with their invite-only clownshow
That is mortifying and cruel. It's unfortunate that Microsoft didn't prevent registration of expired emails for a set period of time. They had to have an idea that this type of situation would occur. I'm tempted to ask what the domain was...
Even in season one, before all of the actors could demand huge salaries - GOT had to have been an expensive show. Limited special effects (initially), but so many characters, in so different locations. The series is still not even fully written yet!

Feels like a riskier play vs any number of fully formed fantasy settings.
Could be a huge boon to the self-hosted movement, might reach the critical mass of users that are willing to fund open source development of self-hosted cloud, just BYO domain
Yes, and? It allows recovery of the authentication key, but not the source AES key.

The authentication key is _derived_ from the AES key, but they're not the same.
>while sci-fi about killer robots was entirely unhelpful in preventing software bugs.

Unless we are now talking about actually building AI and killer robots, which we are assuredly doing.
>Personalized ads have to know about you in order to target to you. You'd assume the more they know, the "better" they will be at targeting.

Meanwhile you buy a pair of shoes and get bombarded with shoe ads for the next few weeks. Give me untargeted advertising anyday.
What Does TVL Stand For? Does It Matter?
That’s a Lot of salt…
> or that they are adding features like generators/decorators that make code more difficult to understand, which goes against the zen of python.

Those features are 20ish years old which made the word "adding" seem a little weird. Interestingly the Zen of Python itself is not much older than generators.
> I mean, silicon aside, isn't it all basically CUDA lock-in?

Everything is and always will be some form of lock-in. Look at what’s happened with CentOS or even Ubuntu. Even what was solid open source choices before have turned into some form of exploited lock-in. I’ve come to the realization that it’s impossible to optimize out of lock-in, instead it’s better to cost optimize for current best practices while continuously running test applications on different platforms and technologies when you have the resources to do so.
I think you've had your wish for well over a decade. Federal minimum wage has been beyond meaningless for multiple decades and as it stands today only coastal states have minimum wages over $12/hr.
It might not be a thing for “normie” users, but the tech-overlapping crowd has been all about domain name based handles for quite a bit, and many are registering domains specifically because of it. This isn’t something they’re doing on a whim, they’re doing it in direct response to demand.
The lack of search / trending is really a bummer, I hope that is just a v1 launch choice and not long term product vision.

Otherwise I'm impressed with the launch and its sheer scale, very smooth.
You just put a txt record in your DNS to get a Bluesky username. They don’t have to manage your domain

Edited for clarity
Presumably you'd transfer your domain from Namecheap, not bluesky; there are extremely strict conditions on registrars around domain portability.
I have a love/hate, but SQL Server Management Studio. Especially if you load a couple of the Redgate tools, it is insanely powerful and the intellisense completion is amazing.

I've used almost all of the major tools for other DBs, and they feel like toys or simple query runners in comparison. The biggest downside to SSMS is that it does feel and perform like the bloated, kitchen sink it is, but honestly, things that do more than run queries, like pgAdmin are just as slow or slower and don't offer nearly as nice of an experience.
There's a 2009 list of 2,096 banned sites posted by pg, along with general rationales:

<https://news.ycombinator.com/item?id=498910>

I'm not aware of a more current list.
Nothing stops you from spending a day to watch some decent documentary that shows what was before and after. Tabloids, with cheap screaming titles, don't give a shit about climate, they just monetize on hype, but the hype is based on reality in this case.
A thief would prefer to strip cars without cameras.
> Did Australia not drastically cut back and stop the amount of back burning that Australia used to traditionally do in order to prevent larger bushfires?

No, that didn't happen.

“Hazard reduction work has increased because of increased funding to the RFS and to national parks. There has been more carried out in recent years than in previous decades.”

https://www.theguardian.com/australia-news/2019/nov/12/is-th...

> You only have to ask anyone who has lived for a while in an at risk area to discover first hand that these activities had been curtailed and stopped for quite a few years.

Farmers get all their information from Sky News and Facebook. I've lived in at risk areas for over 15 years, and I can't tell you first hand that the activities have been curtailed and stopped. Very few people would be able to tell you that first hand. A lot of people will tell you bullshit conspiracy theories they've read on Facebook though.
Apple should really communicate more clearly what they mean in these privacy reports, because I don’t think it’s insane to interpret “The following data may be collected and linked to you: … Health & Fitness” in this way.

An incorrect interpretation, sure, but not one you have to be dumb to make.
I have not studied ALL cities in the US, but in Seattle, SF, and Portland new bike lanes in more than 90% of cases carry _less_ traffic than the car lane that they had replaced. For the rest 10% there isn't enough data.

They quite literally sabotage traffic.

Heck, even Berlin that is supposed to be "transit heaven" is waking up: https://www.telegraph.co.uk/world-news/2023/06/26/cyclists-b...
I am new to NYC. Come 6pm, Hells Kitchen turns into the greatest thoroughfare of ebike riding delivery drivers I've ever seen.

They cycle the wrong way on the street, they clog up the pavement, and they appear overwhelmingly to be foreign workers (like me, but without the cushy tech job). I understand logically that this must be a good option for them given their circumstances, or they would do something else, but I will not be gaslighted into thinking they are treated well by the delivery companies.

There should be dedicated parking (take away some of the car spots), there should be driver friendly sanitary facilities, there should be ways for them to secure their bikes, and yes there probably should be a minimum wage because they are in an extremely exploitable position and guess who's making money from their exploitation?

I do not come from a country with a class structure, so seeing the emergence of an 'app-class' / zero hours contract approach that OVERWHELMINGLY targets the poor rubs me the wrong way.

I don't care about GrubHub's profit margins and neither should you.
its only a txt record, not hosting a node (etc)
Problem for companies is clients will ask for this or that certification (a due diligence checkbox they have little control over). Also unless you’re a big co., there is no way a service provider will let small co. customer interview the security and development teams and let you audit their security practices, etc. So at that point a known low bar is better than an unknown unset bar.
Yes, and that's a great ArtX doing and legacy tracing roots to SGI and Nintendo64 cooperation which ATI bought (into). However, it's not at all relevant since consumers aren't buying those for AMD GPUs, they are specialized (to consoles), and they're buying it for the brand of consoles themselves not because they have AMD GPU in it. Same parallel could then be drawn for intel's integrated GPUs. We're talking discrete GPU cards where market directly picks and chooses and it chose Nvidia that it's not even a contest anymore it seems. Even HPC area is done for almost.
I can’t wait to read the tell all book about Bluesky during this three day period when Threads hits a hundred million users and Bluesky makes the most important strategic decision of its existence.
I still don't see the technical difference, and lxc/lxd doesn't seem to provide one.
I want to build a bitgrid ASIC, I think it would be a good stepping stone to getting petaflops in the hands of the masses. Even if the chip itself is a bust, I think the concept of the chip itself could be a "solvent" in terms of thinking about how to get there. Unlike a Turing machine, this has no moving pointers, so it's much easier to think about.

I'm completely sold on the shockingly old idea of capability based security. I'd love to never have to run a virus scanner ever again.

I'm hopeful that bipolaron chain ultraconductors actually work, and it's possible to have room temperature conductors that are 10,000,000 times better than silver, grown from urethane. You could make some really good 3d printed motors if this works out.

CNC machining and 3d printing are amazing to me. New stuff all the time. I can't wait until we're able to sputter semiconductor onto an atomically flat surface, then build transistors one at a time on it in a home fab.

Software defined radio (SDR) is amazing stuff. I can't believe how much you can do with $100 of hardware and a bit of code.

I'm hopeful that Mike McCulloch's ideas about quantized inertia[1] turn out to be close enough to right to build some reactionless thrusters.

[1] https://physicsfromtheedge.blogspot.com/
I'd discussed HN's linking SciHub directly with dang back in 2016, at which time his response was "I think that degree of anthill-overturning would be past prudent."

<https://news.ycombinator.com/item?id=11984443>

Apparently the anthill has been overturned for some time. No data on time/distance from prudent.
Taking the example:

cmpb $115, %cl
sete %dl
addl %edx, %eax

vs

cmpb $115, %cl
jne _run_switches_jmptgt1
mov $1, %dl
_run_switches_jmptgt1:
addl %edx, %eax

The argument about why `jne` might be faster is that that in the former case, the CPU always executes a dependency chain of length 3: `cmpb` -> `sete` -> `addl`. Each of these instructions have to be computed one after the other, as `sete` depends on the result of `cmpb`, and `addl` depends on the result of `sete`.

With `jne`, the CPU might predict the branch is not taken, in which case, the dependency chain is
`mov` -> `addl` (the `mov` of an immediate might be handled by register renaming?).

Or that it is taken, in which case in which case the dependency chain is just `addl`.

I guess you're arguing that the CPU should handle `sete` the same way?
That is, instead of treating `addl` as dependent on the result, predict what `sete` does and start executing `addl` before `sete` finishes, rewinding if that went wrong?
> By a wide margin, their most impactful designed purpose is to sell security products and services

The cyber causality dilemma - which came first, the vendor or the framework?

I think there's some use for the framework to make people think about which controls and concepts might work for a given situation, but certainly they need the real world to be examined in parallel to be useful
It's okay. If all else fails, they have a team of sales bozos that will visit your company and convince them to use Edge as well as Teams. It's the Microsoft way.
> "Custom" would be the way Apple Notes or Evernote stores their data in opaque binary blobs.

Apple Notes uses SQLite.
Well, they'll be easy to track down with street cams and cell phone data.

And since they care about "surveillance", they are likely to be rich bike bros, so they can be profitably sued. Heck, probably just look at Reddit posts in "/r/fuckcars" and subpoena Reddit for the IPs.
>The market for GOUs is declining because crypto is over and because the GPUs are so underpowered and overpriced that people don’t want to buy them.

No, this is not true. DIY PCs aren't as popular as before due to the advancements in laptops and interest swinging to mobile. People are buying far more laptops than 10-20 years ago. In fact, gaming laptops outsell gaming desktops 2:1 now.[0] The gap is expected to widen.

The market for discrete GPUs has been declining long before crypto. Crypto just slowed the decline.

Notice the word discrete. The entire GPU market isn't declining. Only discrete.

>And if GPUs cost so much to make, why do they get discounted so drastically when the manufacturers eventually decide to compete?

Part of it is because of price inflation due to covid and crypto bubble. So prices are just going back to a more normal.

[0]https://web.archive.org/web/20210406085311/https://www.idc.c...
The other bad thing they do is encourage technologists who aren't security subject matter experts to invest in programs and tools that aren't valuable, either at their current state or, in some cases, ever. They create the impression that there is an important checklist of things that most companies need to have, and if such a checklist exists, not one of these frameworks captures it.
How does this minimum wage work, specifically? One of the selling points as far as I can tell of these delivery apps is that the workers effectively bid per order -- they're not hourly workers, they can choose or refuse which orders they want to take. Workers are not on the clock, obligated to work certain hours, they don't even have hours.

It would be interesting to see an even more market-based delivery app ecosystem -- each contract is auctioned separately, with spot prices for each hour and route of delivery going to the lowest bidder. It would never happen, since it would ruffle to many political feathers, but it's an interesting thought experiment. It would also require much more transparency than the apps currently allow or would ever willingly give up.
ZLUDA is a library written by a hobbyist. The comparison you are looking for is oneAPI. They don't have the messaging down, but Intel is good at software.
I build lofi.radio with only Cloudflare
I don't think you can walk back your previous comment, which was pretty categorical. Either way, we're clear about the brittleness of GCM at this point, and there's little else for us to talk about.
Messages with duplicate nonces. Recovery of the authentication key may also allow message forgery (although it won't allow decryption).
Many of us do, indeed.

<https://news.ycombinator.com/item?id=33698018>

<https://news.ycombinator.com/item?id=20781277>

<https://news.ycombinator.com/item?id=17652359>

(The /r/dredmorbius links in the comments linked above may be seen at the Internet Archive, as that subreddit has been taken private in protest of Reddit's recent policy direction.)
DBeaver. It just works, and for lots of DBs.
The lunch is ate.
Why have BlueSky taken so long to onboard customers? They had a head start, and they blew it.
Media companies get views by being sensationalistic and spreading paranoia. Governments love that too, since it means another excuse they can use to enact more authoritarian policies. The Internet has taken that to the next level.
For the above, are the RAM figures system RAM or GPU?
> You're thinking of cars/roads.

It's worse. I'm modelling them using OSM and historic traffic data. I'm writing a book about the failures of urbanism.
Because it predates awareness of how nonce-based AEADs are misused by developers. Which, in fairness, is true of most of the first generation of AEADs, including Chapoly --- XSalsa was a clever hack, not the original design.
These frameworks don’t guarantee security, but there is a stark difference between companies that do this and those who don’t. Companies that follow these frameworks are at least attempting to be secure.
10 billion$
That's what I am getting as well. Also, they only looked at the autopsies, presumably most of the mortalities are not autopsied. Lancet just removed the article, - it lasted only 24 hours online.
That seems like pretty much the perfect way to go about things. Kudos on that work!
Is Bluesky a Threads clone?
I think the point is "system container" is a marketing term, not a technical term.
Mostly stale, yes, thanks in some part to the solidification of the specs that the interview touches on. “Quirks mode” is still a thing to some degree in browser engines, but you’ll get farther than ever adhering to the spec.
Engineers having poor legal analysis seems to stem from a common assumption that lawyers are the programmers, the law is the code, and the judge is the interpreter/compiler who just sort of runs the arguments the lawyers provide and outputs an answer. This leads them to over-weight “rules lawyering” and creative interpretations. It can be fixed by instead viewing lawyers as junior devs making competing PRs and the judge as the senior dev reviewing and approving/denying them: if you find a clever loophole that inverts the law , the judge will say “that is not intended, denied”.
https://github.com/t-mart/kill-sticky works on most of them.
"The only thing we have to fear is fear itself."
It's not the upper bound that matters but the frequency. How frequently should the compiler assume an 's' appears in the dataset, or any other character?

We know that E[# of '\0' in a string] == 1.

But what is E[# of 's' in a string]? Is it greater or less than E[# of '\0' in a string], and how should the compiler know this?

You haven't given the compiler any reason to assume that 's' or 'p' will appear more often than '\0'.
Speculative execution is all about control flow. It's about what value is in the instruction pointer at some nebulous point in the future.

A conditional jump can put one of two values into the instruction pointer, they will either increment the instruction pointer (jump not taken) or put the immediate value into the instruction pointer. (jump taken)

cmov/sete are utterly deterministic; they always increment the instruction pointer. There's nothing to speculate on, there's nothing to predict. They just go to the next instruction.
E.U. is planning to purchase Pegasus for law enforcement purposes:

https://www.europarl.europa.eu/news/en/press-room/20230609IP...

"They want EU rules on the use of spyware by law enforcement, which should only be authorised in exceptional cases for a pre-defined purpose and a limited time."
Not in Western Australia, no.

https://www.dfes.wa.gov.au/hazard-information/bushfire/plann...

I've been around fuel reduction burns for 60 years.

As a local practice it dates back tens of thousands of years.
Since the content is basically plain-text already, read-only access to all of them at the very least shouldn't cause any problems.

I was wondering though, since my Nextcloud storage is encrypted, does the SQLite file get synced as well?
The power of defaults: Are network effects overrated?
You know these are the floor of what you should do, not the ceiling.

If a big company can’t explain why they aren’t doing the bare minimum defined in a framework, that’s a red flag.

There are open source solutions for the majority of controls in these frameworks. It isn’t 1995.
I don’t really get it. How is this better (or needed) when compared with MilkDrop?
Not so sure about that, I'd expect prices/margins are much better on PC GPU's compared to the deals struck with console makers.
Save for coding they've been pretty good in my experience.

There's definitely some prompt magic openai does behind the scenes that helps beat the raw style local llms usually go for. With proper prompting you can get chatgpt like answers.
Bluesky is dead.

Nobody is going to move again. They had the chance of outrun threads but slept on it.

Whatever they release now, will never get initial users to get it off ground.