skysight-inc/HackerNews huggingface dataset:
There's a study that shows flat UI designs cause uncertainty and can lower productivity: https://www.nngroup.com/articles/flat-ui-less-attention-caus...

My subjective experience agree with the study too. But since the entire industry (be it cooperate or non-profit org) collectively lost their mind and decided flat is the one true way and purged the entire internet of anything vaguely 3D, I can't really compare the experience again in a more objective manner.

I'd always go back to [Ross Scott's video of how a "non-expert" view modern GUI](https://www.youtube.com/watch?v=AItTqnTsVjA) whenever I want some reminder on what good GUI should do. I don't agree with everything he say since a lot of it is subjective, but this video cursed me to pay far more attention on how shitty modern GUI is in my everyday interaction with the computer and phone.

(Ross's video essay style is more akin to how a cultist on the street preaches about the UFO or the end-of-the-world and doesn't even care if anyone listen. I personally love it but it may not be everyone's cup of tea)
People make a bunch of excuses for Tailwind. If you're going to write CSS just write CSS. Stop coping.
>> But as long as we're doing it anyway - the only thing that locking the root account gets you is assurance that if you ever bork the user you created in this guide (or sudo functionality as a whole) you'll have no way to recover without booting into another environment.

> That's not true. It's not obvious what user you have that could do sudo. Thus it does improve security. I advice the same in my book (Deployment from Scratch) and I suggest that for both the host system and containers. There is little cost to not primarily using root.

It is true. To ensure root cannot be used when ssh'ing into a server, set "PermitRootLogin" to "no" in sshd_config (as mentioned in the OP).

Locking out root entirely, as further mentioned in the OP and suggested by your comment, does nothing to increase security regarding remote penetration attacks. Furthermore, should a non-root account which has sudo privileges be compromised, an argument could be made that having a functional root account with its own password accessible only locally and not enabling sudo is a more secure approach.

Either way, having a root account which can only be used locally ensures there is a recovery workflow should one be needed, as the GP enumerates.
False Cause fallacy
Solitaire Clone in Python
Made this in my spare time. Thought I could share it.
Warrant canaries are largely believed to be unworkable. Ie federal lawyers are going to say "cute, but no, you cannot disclose that we warranted you in this or any other way."
How do you mean? 3.11 is something like 10-20% faster than earlier Python releases. Why should that make it comparable to Java? Typically Java is still several times faster than Python, and this is totally natural since Java performance benefits from static type declarations and the language is generally less dynamic than Python.

That said I still use Python for CPU intensive tasks since in my experience Numpy/Scipy/Numba etc does a good job speeding up the CPU intensive parts of Python code.
I know AWS/GCP/Azure have overhead and I understand why so many companies choose to go bare metal on their ops. I personally rarely think it's worth the time and effort, but I get that with scale saving can be substantial.

But for AI training? If the public cloud isn't competitive even for bursty AI training, their margins are much higher than I anticipated.

OP mentions 10-20x cost reduction? Compared to what? AWS?
Telling people to stop chatting is close to a nonstarter. You have to offer a better alternative.
They all seem likely given that they all have multinational precedent.
Gag orders.
So by "basic economics" you mean the evil-is-magically-good school of economics. I disagree with you that HN is lacking in that area.
Let me know when you've read the article, and I'll reply to your question if you're unsatisfied with her answer. I'm not going to rehash any more of the points that Molly already made.
First off, I am huge fan of greynoise!

My experience is on the more practical side of things so I do get how compliance is bullshit. NIST CSF is another one. I am used to dealing with stuff and I agree about the bullshit part but the author here misses the point of SOC2. Audits and compliance as well as 3rd party risk rating sites are not there to make sure the subject org is actually secure, their objective is to measure practices and hygeine.

Maybe you will get ransomwared easily and your siem is shit. That's not the point, the point is if I do business with greynoise i did so after doing a reasonable amount of due dilligence and I know that their practices pass a smell test. That's it.

This does create a perverse incentive! I find the core part of my work difficult to perform sometimes becuase I am going beyond any framework's mandate. And I have to figure out ways to show managers how it helps with compliance. I have been at orgs where everything is box checking. Forget a SIEM, just get an MSSP that can checm that and more boxes for you! I was getting told how I shouldn't collect logs because that would mean we's be responsible for catching hackers (no shit!) but instead to get a vendor. You have no idea how much I have to fight "just pay someone" for the sake if checking boxes and having someone to blame.

And therein is the core problem: blame. That's it. Not just compliance auditing but getting consultants,etc... is all about blame, not security. This discussion has little to do with security, it's about covering asses. Ultimately, there are only few people that only care about security even in very large companies. And even then, their ability to protect the company depends on the chain of management they report to.

In this case, given the author's frustrarion at SOC2, I say their company is in good hands. This is the right reaction to unanvoidable reality. I am more concerned about execs that consider SOC2 a sign of their awesome security or who call co sultants anytime they have security concerns. I loathe vendors who publish MITRE coverage for this reason as well.

They don't even have categories in these frameworks that cover some of the critical security controls a modern org needs to take. Just pay someone, cover your ass and blame them when you get pwned. Welcome to infosec at most companies.
To be fair NVIDIA used to publish more detailed "white paper" for their GPUs ex. [1] and CPU textbooks like H&P [2] draws a lot of details from these. This less detailed "whitepaper" still has a scent of these old tradition.

[1] https://www.nvidia.com/content/PDF/nvidia-ampere-ga-102-gpu-...

[2] https://www.amazon.com/Computer-Architecture-Quantitative-Jo...
It loads on Firefox on my Samsung phone.
Correct, however the fact that this situation exists at all I feel is oft overlooked. The implications of it can be debated but the fact remains.
> I can see how one may reason non-westerness of Dostoyevski

I can’t. Dostoyevski’s Russia is still very much European. It’s culturally a lot closer to what was produced in my own Western European country at the time than anything written in the USA at the same period. But the very idea of the western civilisation is dubious anyway.
A comprehensive guide to Redux for beginners
WireGuard is fine, but since it's only UDP, it doesn't work well if you're connecting behind a restrictive firewall or from a network using CGNAT (many of them).

If you're a reluctant sysadmin that doesn't care, I'd recommend using Tailscale. It's wireguard without the drama, is extremely competent at piercing through almost any firewall [0], and has a great ACL system that lets you fine tune which accounts can access what.

It's also free (for now)!

[0] https://tailscale.com/blog/how-nat-traversal-works/
> catcalled her using wheelchair-related phrases

This happens to people without disabilities quite often too

> one guy on the train pointed at her and told her to kill herself

a homeless person? I don't think these anecdotes are really representative of anything specific to the disability, this has become commonplace in large cities.
I did not know Crypto bros are that old. Interesting observation though.
Just because you had difficulty does not mean you should give such advice to others. There is nothing difficult about configuring any of these systems if you know what you are doing.
Well, it was somewhat more bipartisan in the Senate, where 19 of the 69 votes were Republicans. Who knows what the outcome would have been, though, if Democrats didn't already have 50 votes and the tiebreak. https://www.senate.gov/legislative/LIS/roll_call_votes/vote1...

In the House, it was only 8 Republicans out of 228 votes. https://clerk.house.gov/Votes/2021370
https://support.twilio.com/hc/en-us/articles/360050891214-Ge...
> Case sensitivity is unnatural and weird; we don’t think by default of readme, Readme, and README as being 3 different things.

I believe you don't, but I certainly do.
The essence of a canary is you can't say they did, but you can stop saying they didn't.
I mean, the grand poster is literally citing marxism.

People also don't seem to learn from successful examples in history. Islam requires a 2.5% almsgiving/charitable contribution that is calculated on certain categories of wealth, but it seems that no western country is interested in implementing something that is proven to work, and much cheaper for everyone.
Look at Minecraft and say that.

Look at Roblox and say that.
They are entirely different chips - like an order of magnitude in terms if transistor count and die size.
These days even elisp can be compiled. I think python need to be dragged kicking and screaming into cutting edge '80s dynamic compilation technology.
Drugs are something that you've acknowledged as being able to tear down a brilliant mind, so I keep bringing it up to illustrate how its about the environment. It would be great if there was a drug to turn you into a genius, we'd all be on it! (Erdos comes to mind. There is also research with magnetic fields and brains being done that looks promising.) Being brought up by a narcissistic mother, a selfish father, and a broken home environment would do just as much, if not more, harm to somebody as drugs could, but is much harder to see.

What drove him to go to CalTech, and not MIT? Or CSUN? Or even let him graduate high school? How did that education even get paid for? Where would he be if he couldn't have afforded it; if there were no loans to take out? If he'd had a drinking problem and then slept through his exams? No amount of smarts could help him pass the test he wasn't there to take.

I don't ask this to tear the man down, may he rest in peace. I ask to challenge your notion that geniuses are just born that way. There's absolutely a genetic component, and they are born that way, but in the wrong environment, they fail to launch.

Genius needs to be nurtured and cared for, in just the right way, to happen, and when it happens, it's magical. To put an extreme example upon that, if the environment lead to him being shot dead at the age of seven, we'd be talking about someone else.
So it does, thanks and sorry. I got so puzzled wondering what special case I was missing that would handle this correctly that I couldn't move on until I realized why what I was sure was wrong wasn't, even though, as you say, moving on would have let me realize that what I was sure was wrong was.
Thanks for this. I felt I was going crazy, decrying many professional and smart engineers work as not being 'expert' enough, as if they didn't weigh up and consider other options. Yes, there can be a bit of cargo culting, but to claim that only experts use JSON RPC is ridiculous.
I think there is a difference between ignoring someone’s advice because it would “hurt his ego,” and believing that a fail in the past doesn’t mean a fail in the future. (- false fail if you will)
As someone with a degree in Philosophy, I'm going to disagree with you here. I've often found the best way to hone my own argument is to think about what someone would say if they opposed it. This helps you hone in on potential weak points, but it has also caused me to change my point of view when I discovered that my original viewpoint didn't just appear to have weaknesses: it actually was flawed.
Slashdot reports that Netcraft confirms that source forge is dead.
Is there a point to a company as large as Cloudflare even having a warrant canary? Half the internet goes through their servers. Of course the US government had or has hooks in them for something or other.
From a quick websearch [1], it shows that the airport with the longest wait time on average was 26 minutes (STL) for a TSA checkpoint.

What should that target number be?

Also, how many people who arrive within the recommended window (2 hours before departure time for domestic, 3 hours for international) miss their flight due to security checkpoint delays, and how many people over all miss their flight due to security delays.

The purpose of the onboarding process (of which TSA checkpoints is one portion) is to maximize passenger safety, not minimize frustration. How much should US tax payers be expected to pay for better customer service?

[1]: https://usebounce.com/blog/airport-wait-times-2023
If you want to expand your mind, travel to south east Asia or India for a bit and see a different way of how billions of people live and drive every day.
I meant that people emigrating from India are on average better English speakers than people from China. Hence it's easier for them to interface with the West and make an impact in English speaking countries.
I have a sinking feeling this applies to most Google services...
This is a great way to see how screwed you'll be.
Why E-Bikes, EVs and Laptops Are Catching Fire
Same with Spideroak.
Introducing klynd: The Visual Feedback and Bug-Tracking Tool that accelerates web testing and strengthens customer relationships. Capture real-time feedback, track bugs effortlessly, and collaborate seamlessly with your team. Empower your web projects with klynd today!
https://archive.ph/QkD3G
Remember, Cloudflare CEO/CTO is active on HN.

Their lack of reply (if that turns out to be the case) on this post would be telling.
Is there a precedent for compelling speech, even with something like an NSL?
Chicken and egg problem. In many countries the legacy of telecom access oligopoly led to an ISP oligopoly. If your ISP doesn't support it then you won't bother deploying since there's no IPv6 route. The ISPs won't deploy it until "there's customer demand" (even though there can be no customer demand until they turn it on - hardware and infrastructure have to come first before layers on top can be deployed). Switching to an ISP with IPv6 is usually not an option.

Eyeball networks were waiting for the content networks to deploy and vice versa. Now that eyeball networks generally moved first the content networks say their anti-spam and anti-attack solutions don't have IPv6.

Many IT pros have become used to and even attached to Network Address Translation and specific IPv4 addresses. Some have beliefs like reducing security attack surface requires disabling IPv6, NAT is a firewall, or they reflexively blame any network issue on IPv6.

If the cryptocurrency bubble hadn't popped maybe there could have been a IPv6 coin that rewarded mining addresses. Mine the one correct address out of 2^128 that block and earn a IPv6coin (joke).
> You couldn’t create anything resembling the Instagram experience

I actually 100% agree with you here, but assuredly not in the way you meant it.

What it's NOT is that you couldn't replicate a simple media sharing experience between a tight nit group of friends. That's demonstrably false.

> This is by far the silliest “well actually” I’ve ever seen on HN.

No, it's... something else. Again, you're being extremely defensive when someone points out simple facts. Iykyk.
The phrase means that something isn't a holiday. Despite linking to an explanation of it, the grandparent does not seem to be using it correctly.
That all has nothing to do with this study (or its findings) and everything to do with antivaxxers being intellectually dishonest.
> what about the enormous long-tail of abandoned extensions which still work today, etc.

I mean there they're talking about keeping GIL in (and I imagine that will be the case for many many years) so those would still keep working. The fear is if some libraries just drop GIL-ful support, but there too I am hopeful for that not to be the case.
Heck, even my watch is dual-core.

Now i doubt I’ll be writing Python for it any time soon, but to call multithreading obscure is… really odd.
I got 74% for gmail. hrm....
I'd advise against Namecheap (as a former many year customer) as they decided a while back to start taking a political stance as a business; they terminated existing customers, with no notice, because they disagreed with political actions of the customer's home country. Whatever country you live in could so something in the future they don't like and they'll just drop you, can't rely on them to act as a business.
What action do I need to take in response? Please advise.
Darn good post!
ok, I'll dedicate some time every night to this and let you know what I find.
Giving kids a flight sim in cereal packs? One purposefully made for Linux no less sounds like an awful idea. Of course they don't do that.
Loads for me just fine on Firefox 116, on Linux.
Well, it’s been 4 minutes. I’m calling it!
I think it's worth the clarification that Javascript is usually JITed; (C)Python isn't.

And that CPython's I/O isn't really the problem: some of its async event loop implementations are fairly competitive with Node.

But still ... yes.

Javascript has benefited from two decades of intensive, well-funded work by the best people in the business, with clear focus on performance as a high priority goal. Not to take away from those who work on Python, but I think it's fair to say the effort has had orders of magnitude difference.

I don't have a deep enough understanding to say whether the nature of Python or Javascript makes one better suited for performance optimization than the other. Python is perhaps able to benefit from seeing what's been done with Javascript, although of course Javascript has stood on the shoulders of its own giants.
I know people personally who'd say something like that unironically so was hoping I'd be able to pick that type of person's brain
I use PlantUML to create quick network diagrams.

It's the only solution I found which allows tailoring a diagram if it renders poorly.

For example, if access switches are to be on the left, and trunk switches on the right, PlantUML is the only solution I found which adequately allows the user to add such constraints, via:

S1 --E-- S2
A single TPUv2 host has 8 TPU cores with 64GB of total HBM (8GB per core), but like GPUs, TPUs can't directly access a network, so the host also needs CPUs and standard RAM to send data to them. They are fast, and the host has to be fast enough to keep them fed with data, so the host is pretty beefy. But FWIW, a TPUv2 host has somewhere around 330GB of RAM, not 1.4TB.
https://en.m.wikipedia.org/wiki/Compelled_speech#:~:text=Pet....
> The Ukrainian Armed Forces announced on July 29 that Ukrainian forces successfully struck the Chonhar bridge on the M-18 (Dzhankoi-Melitopol) highway between occupied Crimea and occupied Kherson Oblast.

Today is the 30th. It’s been less than a day.
Perhaps, but until there's a test case we're all just guessing. So far the Supreme Court has been fairly strict in following the compelled speech doctrine.

https://www.mtsu.edu/first-amendment/encyclopedia/case/30/co...
Compelled speech of any kind has been repeatedly ruled unconstitutional. Also many companies have triggered their canaries, including Apple, Silent Circle, and Reddit. If Apple's legal department considers it valid I'm inclined to agree with them absent positive evidence of the contrary.
They said keep going. 59 is where NIH says you want it to be. From https://ods.od.nih.gov/factsheets/VitaminD-Consumer/ :

* Levels of 50 nmol/L (20 ng/mL) or above are adequate for most people for bone and overall health.

* Levels below 30 nmol/L (12 ng/mL) are too low and might weaken your bones and affect your health.

* Levels above 125 nmol/L (50 ng/mL) are too high and might cause health problems.

Although there is a weird confusion of units. The results I'm looking at right now use ng/mL, but lists the numbers for nmol/L. The report includes a graph like:

30 ng/mL --- 59.1 ng/mL (in range) --- 100 ng/mL
> While it may seem like YC invests in a diversity of companies across <healthcare, banking, travel>, it is an “Airbnb for X” type of diversity... if you are not building a product that is fundamentally like an Airbnb (or alternatively, a dev tools startup), then YC will not be interested in you.

I'm looking at the S23 batch and among them, I see a product for automating processes in healthcare, an AI voice assistant, a company tracking methane emissions with satellites, a company fixing GPS errors, building decarbonization, an AI for medical coding and others. None of these feel like AirBnB to me and certainly are not dev tools.

>As a result, most YC companies look the same. While I won’t name specific companies in any of the batches, YC companies will generally... have low capital and infrastructure costs, with low marginal variable costs

Yeah, that's the kind of company that wants $500k to get started. If you are building something capital intensive, then 500k probably doesn't move the needle for you. Either you are going to start small and build slowly (which makes for a bad VC investment) or you are going to need a lot more than 500k.

>For instance, if you are pitching a research lab without a specific plan to profitability (e.g. Mistral AI), then YC is not for you.

Yeah, Mistral AI raised $113M. If you can raise that as a seed round, then you don't really need YC. YC just isn't in the business of financing things that need 9 figures to get started.
But in this context, I think the supported devices don't matter: the idea is to interface with one-or-more telcos directly at a higher level of the 3GPP stack?
In other words, if 780 million people were to cut their emissions to the levels of some of the world’s most advanced and densely populated economies…
The no-gil fork of Python makes the builtin collections thread-safe, so that will remain not an issue (see the "Collection thread-safety" section of the design doc https://docs.google.com/document/d/18CXhDb1ygxg-YXNBJNzfzZsD... )
To answer your second question directly: CUDA predates Vulkan.

So if your question then becomes: Why did we need Vulkan if we have CUDA? OpenGL, DirectX, Metal, and Vulkan all have lots of graphics-specific concepts built in to their APIs. While you could probably implement most of this in CUDA, at some level you need hardware support for your graphics APIs because in the end the data in your framebuffer goes from the GPU's memory to your monitor via HDMI or DisplayPort.

CUDA has no interface for that graphics-specific stuff (technically there are CUDA-OpenGL interop APIs inside CUDA) because it has to be able to run on AI acceleration hardware in datacenters (although that hardware didn't exist when CUDA was invented either, to be fair)
The government officially declared that it would (or must) listen to the people, even about things that aren’t mundane, and even if there are simpler (undisclosed?) explanations. Hollywood has always come up with and encouraged us to believe in fantastic things, but, science technology here on Earth continues to advance, reduce, and expose our senses to effective reality. If the internet can help us find consensus (WWW, mobile, IoT), what is the best (most direct) way to nurture peoples’ intellect, capital, and future in sustainable connection?
Same for me, it appears that this URL is being blocked by FF. Is that was is causing the issue?

https://2542116.fls.doubleclick.net/activityi;src=2542116;ty...?