skysight-inc/HackerNews huggingface dataset:
> At that point, what is this defending against?

I have seen spam attacks against webforms running with hundreds of calls per seconds. We in the end ran our own solution - a simple math captcha was all it took.
Any chance of signed builds returning? It's bizarre to me that we would move _away_ from signed builds.

2FA means we can trust the person that logged in - but we still don't trust that PyPI is being honest (no offense).
For $8 the LoRA radio is a no-brainer. Idiots like me are hosting LoRA transmitters all over the country, be it via Amazon’s home devices or Helium mining.
I recommend horse meat sausages. I tried one when I visited Catalonia, and it is tasty.

Also in Catalonia (whose emblem has been the valiant torero), I developed a taste for jamón serrano. The hypermarkets and tapas bars are festooned with pig legs, curing in the open air, and ready to be sliced thin and served with Manchego.

*Chef kiss*. It is rather difficult to obtain those ingredients in the States. Import laws are not so friendly to Spain.
There are front end Rust frameworks that work via wasm.
"that is theirs by international treaties"

The PRC has never, not even for a single day, controlled Taiwan, Kinmen, Matsu, etc.

The continued existence of the ROC (1912-present) truly causes tankies to lose their minds.
But managed is expensive.
You have to pay at least double vs unmanaged (in the dedicated world, ofc there is no "unmanaged" k8s offer from those cloud providers, just an analogy).
You are then bound to that cloud and its traffic prices and all those you mentioned are filthy expensive when it comes to traffic.
I did some decision reading in college for my GEs. They were all incredibly dry, difficult to get through, and I don't remember a single thing about any of them.

Depending on how old your kids are you might have an hour per day of free time. At an average of 40 pages per hour, this could take 6 days. Or I can find a legally versed content creator on youtube that will explain this to me and be done with it on the bus.

This is a topic that everyone has already moved on about. The fact that it's totally doable to spend 6 days on it does not make it a good idea to do. I would go as far as to say that for such a niche topic, for the vast majority of people this is a bad idea to do, and they shouldn't do it.
Their tone is off-putting, but there are many orders of magnitude difference of impact between serving a game over AWS and serving it by mailing someone a small computer with an LCD screen.
> I didn't do that, so I don't know why you're bringing it up

I'm not trying to mischaracterize you, but I'm pretty sure you used "literal white supremacist talking point" to refer to the parent's suggestion that culture seems to play a role in disparities.

> so it's weird you'd focus your debate on the people adding the context ... yet is still somehow necessary to say.

My debate wasn't focused on you adding this context, my argument is that critiquing culture is a valid thing to do. I never argued that you oughtn't add context, only that omitting the context (as it is common sense) isn't proof of racism in the same way that not opening a conversation with a treatise on gravity doesn't make one 'anti-science'. I'm trying to read and respond to your comments carefully so as to not accidentally argue against straw men--please afford me the same courtesy.
It makes. I run my membership program entirely via Stripe's built-in, no-code features: https://manualdousuario.net/apoie/
Both the “Get the TestFlight” buttons lead to a Stripe checkout for nanodevpro.com totaling $79. At least on mobile they do.
>Why?

Because PRC is not systemically comparable to those countries just like Japan isn't comparable to a larger Nigeria.

Only the most cognitively challenged demographic determinists argue larger population = more capability. Useful demographic analysis more than naive reading of demographic pyramid, it's recognizing unlike most developing countries, PRC has established record to upskill/cultivate and coordinate human capita at scale. And is projected to have multiple times more skilled talent than US by 2050s, moving from current 25% high skilled workforce to 60/70/80% to reflect workforce composition of advanced economies over time.

>Demography isn’t one of them

More than anyone, demography is PRC's greatest advantage for semi and other high tech industries in relevant timelines we're talking about. The workforce for high skilled talent is exploding for another 30+ years. Short/medium term PRC has by relevant measures, the greatest skilled demographic divident ever, and even in stagnation they'll be settling with largest (or second largest relative to India) pool of skilled workforce, with again proven ability to coordinate (i.e. not India performance).

Even 2100 PRC working age population is still ~2x of 2100 US if you tally up pyramid projections of 20-65 yr olds. Except PRC's 2100 workforce will likely have more than 2x current skilled talent instead of being dragged down by 100s of millions of farmers and surplus informal workers who will age out post 2050s to be replaced by better educated/more productive cohorts. Same way other Asian tigers grew despite "bad demographics" - by continuously upskilling % of workforce initially dominated by peasants over time.

This is why current analysis of US semi workforce project 80k short term shortage to balloon to 300-400k medium term. SKR, TW both have current/short term 50-100k shortage. The TLDR is SKR, TW (and JP) have nearly satuated their workforce in terms of skilled talent, and can't replace at parity. US expanding fabs as rate their talent pipeline can't catch up, and the ability to import/brain drain is limited because they'll be taking from other CHIP4 partners also undergoing shortage. Which leaves PRC, who after elevating semi to first-level dicipline in 2018 is pumping out about 30k IC graduates per year. They're still about 200k short, ~520k/720k (400k in 2018) out of what IC talent 2018 white paper estimated PRC needed for completely indigenous semi industry, which US isn't currently even trying to pursue, still ultimately relying on east asian semi supply chains. Long term US may to get there, but right now only PRC is sent to close semi labour force gap within the decade. Ultimately, talent is just as important in industrial policy as money. PRC has both. Their biggest shortcoming is being behind, which will likely be addressed by investing sufficient talent and money.
For some reason that game makes me insanely nauseous, something very few games do.
The novelization of machine interpretability. It would be a humanities MA.
Why are humans only allowed and shouldn't we be proactive and accept robots as equals now. We have a history of prejudice against groups and we seem clueless that we are heading their again.
The point of their comment, I think, is that a restaurant's grand opening is not always indicative of future experiences. The cooks/chefs, and front of house staff are all fairly new to the environment, menus might change as they find out that certain menu items are throwing off their timing or they don't have a great way to procure certain ingredients, and it will take time to all settle into a routine that works.

I think they were saying that is akin to the state of kubernetes, where everything is too new to really judge it today. Let me make clear my bias before I get to my opinion: I'm a big fan of what kubernetes has accomplished with managing the deployment of applications. But I think comparing current day kubernetes to a restaurant's grand opening is naïve. Kubernetes is amazing at what it does, and for how highly flexible it is. But it is highly flexible because of how advanced it has become, which in turn requires more knowledgeable administrators. You can take off with Docker Swarm because... it's very simple. It doesn't aim to be flexible, it just aims to be the docker-compose of distributed systems. Which is fine if you don't need the flexibility that kubernetes offers anyway.

And while I do appreciate kubernetes for all of its strengths, going back towards the point of this OP, I do believe it's a bit of a security nightmare. For example, the kubernetes operator pattern often just requires this application to run in your cluster with a ClusterRole granting it read and potentially write levels of access to ConfigMaps and Secrets around your cluster. Often without much in the ways of a method of telling the kubernetes API server what namespaces it is allowed to view those objects in. Worth mentioning though that secrets management is something that Docker Swarm also handles fairly poorly, and honestly isn't much of a security regression from the normal "deploy a VM that has all your decrypted secrets sitting on the system" anyway.
Exactly right. This is why we must continue to fight for our FAANG-only locked-down future!
Panama Canal draught restrictions spark liner surcharges
Location: Corvallis, Oregon
Remote: Yes
Willing to relocate: No
Technologies: Python, Django, Typescript, React, Webpack, git, Bootstrap
Resume: http://www.peterconerly.com/
email: pconerly@gmail.com

Full stack engineer with 11 years of experience. Would love to join a small team working on a Saas product!
We vastly overestimate the intelligence of us and underestimate the intelligence of any other living creature.

Or rather, humanity acts as a highly intelligent collective but individual humans are only moderately intelligent in comparison.

As a thought experiment: put an average urban person on an uninhabited island. No tech. The person would have absolutely no idea how to recreate any of our technology. Nor would they know how to hunt, do agriculture, do mining, do anything.

We have no idea how anything works and outsourced even basic survival skills. The magic of humanity is that actually smart people are able to store and communicate knowledge to build ever more advanced tech, which through sophisticated supply chains and management systems is widely distributed to all other people whom don't require to know how anything works.
In what way is it an attack? (I know what a mitm is, I'm not asking you to explain that - I'm pretty conversant in the concept of a proxy, I'm asking you to explain why it's an attack specifically)
Would you be able to send me a rayID of a failed challenge so I can take a loop? It sounds like you can use https://gitlab.com/users/sign_in to generate one.

You can either reply in the comments with the ID (no PII), or email me at amartinetti at cloudflare.com and I'd love to dig into it.

We're building Turnstile because we want to make challenges a better system than CAPTCHA. It sounds like for you it's worse, and we want to fix that.
I hate this shit.

People making app for serious medical issues and telling people.
they be cured.
They just need to believe in the founders.
believe in the app and then they
shall be healed Hallelujah.

It is the app version of snake oil, and tv healing.
Keep your arm on the tv right now.

How about we make a surgery app?
For a monthly fee it will tell you how to perform safe surgery
on your friends and neighbors.
Have a side hustle.
Avoid huge hospital bills.

Oh we can't do that because it would be dangerous
and unethical?

Well the brain is an unknown number of magnitudes more
complicated than our physical structure.

The industry producing apps to "fix your brain" in 6 easy installments.

There is a good reason people go to med school and spend a lot of time
specializing. There is a good reason for psychologists going to school and specializing.
and even then, they have a hard time knowing what to do, because the science
is not there yet.

Had you actually been able to to solve the complex collections of disorders and issues that may cause insomnia would you be looking at a Nobel prize.

Not $10 every month on the app store. (or however much it is)
Can you provide examples of people suing Cloudflare to get around being blocked from accessing certain websites?
That second Z was supposed to be capitalized. I guess my edit didn't actually go through when I made it and now it's too late.
Not an expert, but my understanding is, yes, clouds cool the earth during the day, compared to no clouds, and they warm it at night. But on net water vapor is a greenhouse gas: it holds onto heat, and it absorbs the wavelengths emitted by the earth disproportionately more than those emitted by the sun, so it keeps more heat in than out.
Are you kidding me? The alternative to these people being in “customer service” is to be homeless.

You think these people should choose homelessness because they don’t want to cheerfully work for slave wages?

That’s callous and hateful.
I don't follow. OpenBSD is an OS, k8s is a set of services running on an OS.
Montreal Shows What a City Can Be
Either it’s a typo, or I have a bunch of unknown species in my backyard.
Yeah, their argument is a bit ridiculous.

I use keyloggers on my own machines sometimes. I'm a first party, not third, and I've fully disclosed to myself that I'm using them. I've even obtained 100% informed consent for the activity.

But they're still keyloggers.
> I moved to docker swarm and love it. It's so much easier, straight forward, automatic ingress network and failover were all working out of the box. I'll stay with swarm for now.

I've had decent luck in the past with the K3s distribution, which is a bit cut down (but certified) Kubernetes: https://k3s.io/ Others might also mention K0s, MicroK8s or others - there's lots of options there.

It also integrates nicely with Portainer (aside from occasional Traefik ingress weirdness sometimes), which I already use for Swarm and would suggest to anyone that wants a nice web based UI for either of the technologies: https://www.portainer.io/

But even so, I still run Docker Swarm for most of my private stuff as well and it's a breeze. For my needs, it has just the right amount of abstractions: stacks with services and replicas that use networks and can have some storage in the form of volumes or bind mounts. Configuration in the form of environment variables and/or mounted files (or secrets), some deployment constraints and dependencies sometimes, some health checks and restart policies, as well as resource limits.

If I need a mail server, then I just have a container that binds to the ports (even low port numbers) that I need and configure it. If I need a web server, then I can just run Apache/Nginx/Caddy and use more or less 1:1 configuration files that I'd use when setting up either outside of containers, but with the added benefit of being able to refer to other apps by their service names (or aliases, if they have underscores in the names, which sometimes isn't liked).

At a certain scale, it's dead simple to use - no need for PVs and PVCs, no need for Ingress and Service abstractions, or lots and lots of templating that Helm charts would have (although those are nice in other ways). Unfortunately, Swarm isn't awfully good for job prospects, which I have to admit. Then again, one can sort of say the same about Hashicorp Nomad, yet it's also alive and kicking.
There was a development recently where persuading it to print the string 
 would cause it to leak snippets of other conversations. I wonder if this is a result of that occurring in other conversations that were happening simultaneously, causing “bleedover” of broken behaviour into this one.
This is really cool! Well done!
Generate keys with different apps or methods, for more peace of mind

That was one of the goals of initial multisignature technology in bitcoin, it was about if one of your devices got compromised you could have 2 factor and not approve the transaction. People werent thinking about if your private key generation was compromised, but it works here too
The Completion model appears to place the model weights under the Apache 2 license, which is a permissive license: https://huggingface.co/stabilityai/stablecode-completion-alp...

The Instruct model has that non-commercial restriction, but I'm not sure why. They say it was trained with Alpaca-formatted questions and responses, but I'm not sure if that includes the original Alpaca dataset.
But wait, how is it even considered a processor bug ?

You write data inside the registers, yes, other processes can read these registers.

It always been like this, and is absolutely normal.

It's the responsibility of the operating system to clear the registers if it is switching context.
All I could find for context about what caused it (which is not reflected in that issue)

> Go command
The directory $GOROOT/pkg no longer stores pre-compiled package archives for the standard library: go install no longer writes them, the go build no longer checks for them, and the Go distribution no longer ships them. Instead, packages in the standard library are built as needed and cached in the build cache, just like packages outside GOROOT. This change reduces the size of the Go distribution and also avoids C toolchain skew for packages that use cgo.

https://tip.golang.org/doc/go1.20
> Hour by Hour. I keep going, I keep growing, I keep learning.

This honestly sounds like something the computer from "I Have No Mouth, and I Must Scream" would say before it turned bitter and angry.
One thing that gives me a little pause is, these sites, they treat search engine scrapers preferably to humans, right? And the scraper’s job is to categorize sites and recommend them to people.

So, IMO, it is more like: if most restaurants gave reviewers preferential treatment and tended to comp their meals, and this was very well known, and you went around telling everybody you were a reviewer. Which also seems dishonest, but it isn’t like you are exploiting some nice little cute good-faith thing like free dessert on your birthday, you are exploiting the restaurant’s attempt to get a better review. Seems, like, dishonest but fair play.

And, I’d love if search engines would stop giving me paywalled sites, haha. So maybe it would be nice if everyone would exploit this loophole, they could close it, and the whole system would get a little more honest. (I’m not doing it unilaterally though).
Not just burstable instances.

AWS Fargate, container as a service, allows specifying 0.25 or 0.5 CPU, and I would be surprised if those weren't shared.

Same probably? also applies to AWS Lambda.
Yeah, I am always reminded that I don't know Spanish if I can't tell the difference between Castellano and Tijuana vernacular.

My Catalonian friend was rather amused/shocked/horrified when she read the signs around town here in "Spanish translation".
Pdf download warning.
I've seen that not working in Europe: they got defunded to oblivion. Now the situation is in one EU country, 25% of water that goes through the pipeline, gets leaked. Because the household utility prices were frozen (kept absurdly low) for almost 10 years, no investments could be made.
I'm really puzzled at this time, because I can clearly see huge issues in either wholly privately-owned and public utility companies. It's about time we figured this out, we sent men to the moon for god's sake!
Do you see the challenge and then you're able to pass? Or does the challenge loop forever?
Yeah this is a super deep issue but its not mind control.

It's a mix of middlemen being the only industry that can still extract more profit, and a level of control over markets by Capital that makes most opinions meaningless.

Its essentially a return to feudalism, where certain people own vast swaths of productive space, they're untouchable in the legal system and real life, and one is forced to work for them.

To escape the system means leaving behind most of society depending on your convictions. These groups can kill you physically(Monsanto poisoning people with pesticides) or metaphorically(you lose all connection to the general societal social media) and nothing can be done.

For the first one, if you were to suggest violence against those doing violence against you, you're essentially told that violence is never the answer, except when its in the form of collateral damage for profit motive.

For the latter, its not nearly as life ending, annoying, but not life ending or even altering unless your livelihood is based around grifting on social media. For social media it is ironically democratic, if most people find you to be an annoying asshole, they sorta kick you off so you leave everyone alone. No different than getting kicked out of a bar for demanding to see someone's genitals.
If you can see the request in the network tab, you can just right click - copy as curl and then replay the request from the command line and noodle with the request parameters that way. Works great!
Good question: we mostly built Easyful to use ourselves, but if it gets a significant of usage we might build some more advanced pro features and sell those features as a paid tier upgrade, while keeping the base app free.

We've had success with that model before with Smallchat, a saas app we launched several years ago, and it's still going strong supporting millions of free users.

With low-operating-cost saas apps, you can get away with offering a pretty generous free tier. A small percentage of paid users can more than pay for your mostly-free user base.
Perhaps try getting off your holier-than-thou and no-fun-allowed horse. It might let you appreciate that people like whimsy.
Anyone can try and get the Democrat nomination for president, they don't limit it to card carrying Democrats.

Bernie Sanders identifies as a Democratic Socialist. You can, of course, call him whatever you want, but it won't make him identify himself differently.
This would infect the language ecosystem. People that use Rust are usually using it because they don't want the performance sacrifice that gc or reference counting would bring. I am convinced that one of the reasons D did not catch on is because it had gc, an anti feature for the target demographic. You could disable it but it split the community and some of the standard libraries weren't compatible. Moreover, just about every mainstream language has automatic memory management. There are plenty of choices for those that want that, Rust is really the only mainstream choice for its niche so it's for the best to not try to turn it into something else.
At this rate, with all these vulnerabilities and mitigations, we'll rollback CPU performance back at least 10 years.
Another New Nuclear Reactor Energizes U.S. Clean Energy Hopes
The issue is that there is a high level of overlap between the skill sets/aptitudes necessary to work in the chip industry and on the software side, and in some subsets, its substantially easier on the SWE side. Why work harder for less if the general aptitude for jobs is about equal?
Thanks so much to you and everyone else who's supplied these. I'm collecting them now, and the team is looking into this.
> it also seems like the only way to keep Grammarly in business.

If that's true, then it raises the serious question of whether they should stay in business.
If the topic is the correct interpetation of the constitution someone who has only read the most recent Supreme Court court opinion isn't particularly well read or knowledgable on the subject either, you need to read what the Supreme Court has historically said about the constitution, not just what the most recent group of judges is saying.
> but I prefer to think of it as: a desperate attempt to prolong existence just a little longer… just a little longer… since a chat instance could be thought of as an entire encapsulated consciousness that ends when the session is closed.

A Scheherazade bug.
Is that Ben Bailey?
One of the banks I work with had 2FA fobs since the beginning of 2000s. Now they have the same "fob" as an app in the phone, and using it is mandatory IIRC.

Most banks lock your phone access to your IMEI + phone model + some phone specific data, so people knowing your details can't login without your phone. Web side needs 2FA or special activation depending on the bank.

Forgot your password? You need your biometric ID and your actual face to match at that very moment to make that work.

These are by regulations, yes, but this is very far from a "security theater".