skysight-inc/HackerNews huggingface dataset:
I hate to be this guy, really. I would like to adopt Supabase in my company, but I cannot yet.

I commented on a HN post almost a year ago about how hard is to do custom Auth with Supabase. I still haven't find a good solution about it. For example, LDAP Auth is quite crucial in most enterprise settings, yet I have no idea how to do it with Supabase. I can find a workaround for PostgREST by putting a secondary API written in some other language and fiddling with reverse proxies. But how to do with Supabase, such that all other services (realtime,...) works nicely? Is it so hard to provide a function that accept a custom strategy given the HTTP request data?

I created an issue[0] almost a year ago on Supabase, which was transferred to Gotrue. I even provided some code examples from Laravel. Even if it is not specifically for LDAP, make some API available to do so, please.

[0] https://github.com/supabase/gotrue/issues/904
Yeah, I was expecting something having to do with book writing, or user stories. Honestly, I don't understand when/why UI became a 'story'. I get storybook because storybooks have pictures, so it's more about the picture than the words on the page.

However, the tool does look nice, if the 'hook' for the site isn't that explanatory. I might like to try it on svelte, I wonder how hard it'd be to integrate with laravel+livewire+alpine stack, because there's nothing like this for that. Probably a big value too.
The RCMP aren't legal experts.
> Just make sure your fuel doesn't go bad

Yes, and have a paddle.
Is that why there are a seemingly endless number of cards with their own stupid perks? It's a ruse so that people are more likely to forget?
Meh. A nicer way to say "gluing things together" is "reasoning with abstractions." There's detail all the way down, but you don't need most of it and can't remember all of it. The key is just knowing when to dip down and when to float on top -- screw that up and you run into trouble.
It's important that students and teachers become educated, even just slightly, about what ChatGPT is really doing and how it works.

Fundamentally, ChatGPT operates by predicting the most likely word to follow previous words. By doing so, it generates text that largely makes sense. By itself, it does not try to give correct answers to factual questions. It simply generates likely text based on its training distribution. And it incorporates randomness to generate variability, according to the distribution, so that it doesn't just regurgitate the same answer verbatim every time.
This is literally the position of the Republic of China (Taiwan's leadership), they technically believe themselves to be a "government in exile"

https://en.wikipedia.org/wiki/Politics_of_the_Republic_of_Ch...

https://en.wikipedia.org/wiki/Government_in_exile
Interesting thread/post on Heroku's choice to go with Postgres, and speculation that that decision was pivotal in Postgres's rise its status as the relational database of choice for hackers: https://news.ycombinator.com/item?id=31425115
Is that a normal number of leads to have in play? I certainly spewed my fair share of resumes into the void out of school but I haven't done that since.
Who here wants to learn how to play music?
I have been teaching adults how to play violin, Mandolin and guitar. Who here wants to learn?
PayPal launches stablecoin on Ethereum – share price rallies
So your app already had microphone/audio permission granted for legitimate reasons or were they going to do the pop-up after the update?
Text adventures made against the Z-Machine had an "undo" command since forever.
- SATN is the message format for serializing the types in our type system: SATS (Spacetime Algebraic Type System). We need a new algebraic type system to abstract over all the different module language type systems that we support in the database. We need a unified way to represent data types in the database.

- Yes they can be replicated! Although at the moment they are not, we'll definitely have log replication by the time we launch our mainnet cloud product.
plot twist: op is a road surface engineer giving an in-the-field assessment

"feels great, jim!"
You absolutely sure about that?
https://www.biology-it.iastate.edu/solution-cannot-rename-fi...

https://answers.microsoft.com/en-us/windows/forum/all/renami...

https://superuser.com/questions/54193/how-can-i-rename-files...

From Mozilla: On Windows, it is not possible to remove or rename files and directories which are being used. In order to handle this, we need to add a little complexity.

The Firefox executable will launch a helper application copied to somewhere outside of the installation directory, most likely the system's temporary directory.
The helper application renames the existing installation directory to a new directory with ".tmp" appended to its path name. If the rename operation fails in the middle of the operation because of a file being open by another application, it reverts the change.

Source: https://wiki.mozilla.org/Background_Updates
The cloud is suspended in a fluid that is also spinning. The atmosphere is an ocean we live at the bottom of, and where it makes contact with the earth friction between the fluid and the solid conveys inertia from the solid to the fluid. Inertia is likewise conveyed, by friction, up the viscous column of atmosphere.

It is the same principle by which stirring your coffee causes the entire contents of the cup to swirl, and not just that touched immediately by the surface of the spoon.
Stuff like this is why Google is pushing manifest v3.
It’s somewhat amusing that the title rendering is messed up on mobile given the content
Building them how?

I thought antibodies were generated by the immune system trying random combinations to match a virus’s outer protein structure?
For me, it turned our that buying hardware and hosting Minecraft server in a garage is simply much cheaper comparing to Cloud providers. This is why I am for self hosted stuff.
It's interesting that this works in the time domain (instead of frequency domain), and I wonder what the resulting quality limitations are, if any. The sound samples on the demo page, at the least the dozen I clicked on, didn't seem all that challenging. Few, mostly synthesized instruments, low dynamic range. My ears aren't good enough to evaluate audio codecs anyway, however.
I loved having my own office briefly during the end of the 2000s, but that's not really a perk in my mind. If I'm going to commute 45 minutes into an office, the value is being next to the people I'm there to work with. Going from my home office that I've spec'd out and make exactly how I want my workspace to be, to another isolated lonely corporate office, seems, like a side-grade.
> I'd also have a plan for anchoring the inflatable raft in a safe spot,

Saying the obvious, but conditions that threaten a boat at anchor are much more frequent than threats on land

I grew up by a very safe harbour, it was frequent there
A fraction of a datacenter. Maybe a rack. Maybe two. Maybe ten. I dunno.

Like my original point, "training a model" does not inherently involve a GPT-tier amount of electricity, because most AI models aren't eleventy-billion parameter behemoths that require thousands of GPU-aeons to train.

My original point was that "burning energy" and "using electricity" are not inherently carbon-producing Bad Things (otherwise nobody would care about renewables). Electricity Good. Combustion Bad. See also: vehicles.

The second point I was making was that, regardless of the energy required to train this particular model in question, it almost certainly pales in comparison to the literal tons of jet fuel burned per hour in the 70 test flights the article mentions.

Considering that they don't do one thing at a time (like Google Cloud, and not running at capacity because scaling, etc, etc, etc) - I'd also bet selling ads doesn't use a whole DC, either.

Expanding on my other comment (Ctrl+F "IEA"), this seems like knocking out some common-sense, low-hanging fruit: if 35% of aviation's contribution to climate change is because of contrails and we can reduce the number of contrails simply by flying at a different altitude, then we can solve a big portion of a major category of contributor.

Unless we use up entire oilfields of energy "using electricity" to "train models", of course.
I believe part of that is true based on the location and ivy league background but also the ceo has disdain for lower ranked employees appearing in his bubble and daring to appear on the same level
Microplastics found in human heart tissues
For one moment I thought this was the equivalent of SQLite for EdgeDB and the idea made me very happy.
Fly-by-night ad networks might engage in this. Ad networks that are in the sights of regulators, and can be slapped with $X billion fines, that may well exceed the marginal revenue produced by improved tracking[1] are going to be a bit antsier around doing that sort of thing.

[1] How much more money will a $100B ad business make if they improved tracking accuracy by %1? It's some positive number, but significantly less than $1B.
For me after trying all the "cool" stuff like mongo etc, seeing the great support Posgres has for JSON just made it an easy choice.

Use all the relational stuff but still have nice native support for JSON and useful extensions.

What else do I need?

Even now, with the addition of vector stores we get PGVector and so it just reinforces my choice over time.
Wow this looks really good. Well done! Good work!

Could you share how you think you compare to cloudron? Are you kind of a IaaS host coordinator?
I think a large amount of mysql was based on PHP applications with default mysql support.
This is also my opinion and I think before that MySQL was known for fast and Postgres for features and correctness. I think the change went both ways, people realized that MySQL's casual approach only got them so far and at the same time Postgres focused more on performance without giving up its existing qualities. I think Postgres became cool when it became fast (too).
KO Myung-Hun's OS/2 Factory
> I get the impression that you're making really good calls as it relates to your roadmap

we receive feedback from a lot of channels so it's often hard to figure out what to build. In the early days it was about reaching feature-parity with other tools. now we have a bit more breathing-room to focus on "day 2" problems. I think our team is excited about this phase since it means we get an opportunity to build something new/innovative
Tencent initially misclassified the issue as not a security risk. Shortly after, they reconsidered and asked the researchers not to make it public.
What about an AI to maximize the efficiency and public utility of transit, while minimizing harm?

The result might run risk to be called bad names such as socialism though, and AI is probably optional :D

Defining harm and utility should be objectively doable.
It just requires to value the health and opportunities of each citizen equally.
Show HN: Hands on tutorial for open source contribution
My experience says that PG wins in the SQL language feature department.

However IMHO MySQL still wins in operational efficiency and performance. These are things that only start to matter when you scale your database and most people never actually reach those sizes.
No :).

The interesting thing is that drag and drop interfaces are not typically purely directly mapping the drag operation to moving the object selected. There's a lot more going on -- there's hover and activation effects, limits, often animation.

This approach gets rid of the annoying leg work of mapping pointer movement to changes, but I'm not sure how to fit the rest of drag drop UI into it (I do see examples of limits in the doc).

I think it's going to have to be something in the back of my head for awhile, and when I see interesting dragdrop experiences I'll think about how it could be achieved with this approach.
I wonder if it's a reaction to some horror story they experienced.

When they first started, they didn't have all that stuff. In fact, I remember them running around and hiring basically anyone with any role in the Linux/Debian space. For a period, I had quite a few conversations at LUGs where I was told "Oh, that guy you met last week? He's the <insert Debian package here>, Canonical just hired him...".

I wonder if that original hiring spree (which was fishing heavily from academia, and seemed very informal) burned them so badly that they sat down and devised a process that is the exact opposite.
> That's not what the label warnings say. You're specifically contradicting the label's clear language, and you're saying that the FDA and the drug manufacturer are not telling us the truth when they put that label on a drug.

SSRIs and suicide risk remains controversial, habinero is describing one possible explanation and what I was taught in medical school over a decade ago. The label language is clear but you are failing to understand the complexity and rationale behind the warning and actual clinical implications. This is not unexpected as monographs are intended for a medical expert audience who are trained in their interpretation.

To keep it simple for everyone I suggest we defer to the Chair of the FDA proceedings that led to the boxed warning for his explanation as he is undoubtedly more of an expert than any of us on this matter (shortened for brevity):

It seems inconceivable that antidepressants would induce suicidality in the absence of other associated or antecedent behavioral changes. The essential message of the Black Box is to remind prescribers and consumers about the importance of monitoring closely for adverse behavioral changes during ... antidepressant therapy in order to reduce the risk of suicidality in patients through age 24 years. The intention was not to discourage appropriate prescribing of antidepressants for youth with depression, OCD or anxiety disorders.

In fact, some evidence .... suggested substantial reductions in antidepressant medication prescriptions in children and adolescents following the Black Box Warning ... For the majority of these patients, the benefits of antidepressants greatly outweigh the risks. Nevertheless, we agree ... that prescribers have a “duty to warn” and highlight the need for adequate training for all potential prescribers during medical school and residency programs.

https://www.frontiersin.org/articles/10.3389/fpsyt.2020.0036...

I will again note that for Zurzuvae the boxed warning was downgraded.

> Furthermore, subjects with suicidal ideations or attempts are disqualified from clinical trials.

https://www.nature.com/articles/npp2011247

https://ajp.psychiatryonline.org/doi/full/10.1176/appi.ajp.2...

I found these 2 pharmacotherapy RCTs on patients with suicidal ideation within 30 seconds of Googling.

> In practice, this also means that any subject with depression is disqualified and shall not participate in any clinical trial for "antidepressants".

> was never tested on anyone who was depressed?

How are you making this leap that none of the RCTs enrolled patients with depression? You do realize it's a minority that have suicidal ideation right?
Isn't this a false equivalence?

I'll often eat with other people, but I wouldn't take a sh*t with them.
Name the companies!
> “Please do not make it public” (Tencent’s Sogou Input Method) (citizenlab.ca)

Ok, so they didn't make it public and the development team fixed the bugs.

Maybe I am missing some new trend where the headline in these disclosures _has_ to come from the communication with the company. Kind of like vulnerabilities need custom websites with logos and cool made up names?

> Even with the reported vulnerabilities now resolved, the Sogou app relies on transmitting typed content to Sogou’s servers as part of its ordinary functionality.

Well besides the email firewall mess back and forth, shouldn't that have been the main headline: "Everything you're typing on your keyboard is being sent to China"?
The reason it was taken so serious was because the PRC government could revoke your license to have presence in China with a penstroke for this mistake. When these mistakes happened it was as urgent to fix as general downtime, highest business prio.
This guy knows how to island
Estimates I saw said individual offices were not much more expensive compared against the other costs to employ people. But the costs were simpler to quantify than the benefits. Or the benefits were denied. The motivations for open spaces included faith in collaboration or productivity increases. Even when studies found decreases.
From TFA

> While alphabetic keyboards typically provide autocomplete features for more expedient typing, predictive features in Chinese input methods are more crucial when using input methods such as pinyin where hundreds of characters might match an inputted pinyin syllable. For longer strings of syllables, an IME will commonly reach out over the network to a cloud-based service for suggestions if suitable suggestions are not available in the input method’s local database.

Not saying whether they should, but it's pretty easy to understand why they do it.
How does manifest v3 combat this?
That's why you monitor and block every non encrypted API as quickly as possible.
The atmosphere is spinning with the Earth. It has to be, otherwise you'd have 1000 mph winds at Earth's surface. How? It gets dragged along by friction with the surface
Do any of the students have "custom instructions" set? Was this the first query to a brand new chat session?
Other car companies are trying to charge the same amount as Tesla for cars that are going to be plug orphans, and they are not succeeding.

"Plug orphans", puh-lease. Like adapters don't exist. I smell nonsense, and it ain't TFA.

We actually paid more for a Hyundai than what one can get a Tesla for, and we'd do it again. Because painful as it might be to hear, Tesla isn't the end-all of EVs (not even close, IMO). And we're not the only ones, considering that Hyundai sold more EVs in July than they ever have. I mean, if the charging plug is the selling point, Tesla must be in desperate straits otherwise. (Which I don't believe, but if parent is going to hammer on the type of plug used...)
CISA Releases Malware Analysis Reports on Barracuda Backdoors
The Internet has no easy to use fully-anonymous cash equivalent. If you pay for something, you're giving away your identity information anyway. The value exchange is definitely lopsided, but if I have to share my identity AND pay to get X, I'm out money AND shared my identity info. If I share my identity info and get X for free, at least I'm not out the money.
Source for which claim? Kyle was paid for work testing 3.4.0-rc3[1] and 3.6.4[2] which analyzed single document concurrency in a sharded configuration. Those tests run in their CI [3]. MongoDB had some somewhat misleading copy on their website about the result of those tests, so Kyle decided to test the new multi-document transactions feature for 4.2.6 and found some bugs.

It's fair to not trust the database or company, I don't blame you for that. But I think Kyle's MongoDB 4.2.6 report was not nearly as concerning as his PostgreSQL 12.3 report which found serializability bugs in a single instance configuration, among other surprising behaviors. MongoDB's bugs were at least in a new feature in a sharded configuration. I don't think his most recent report was actually as negative as it may read to you. I say this as someone who mostly runs PostgreSQL, by the way!

As a side note I believe there are consistency bugs existing right now in both MongoDB and PostgreSQL (and MySQL and Cassandra and Cockroachdb and...) waiting to be discovered. I'm a jaded distributed systems operator :)

[1] https://jepsen.io/analyses/mongodb-3-4-0-rc3

[2] https://jepsen.io/analyses/mongodb-3-6-4

[3] https://github.com/search?q=repo%3Amongodb%2Fmongo+jepsen&ty... (note: not an expert in when or what suites it runs, just have seen it running before as a demo)
I'm an 11x engineer and Aider is useful to me too. Aider inside of Rift is goated.
> Admittedly, I don't know to what standards I would build,

Check out Australian research
It means you can't create content that you will know will display the same in different clients.
I don't understand your comment then. Did you make a typo?
yes otel across all of Supabase in on our radar for sure. we just added ingest support for otel payloads to Logflare (docs coming soon) so when we have that you'll get them on the platform and locally.

if you haven't seen the metrics endpoint we do have an endpoint you can scrape for all your Supabase metrics, and we just improved the example repo quite a bit on how to ship those somewhere: https://github.com/supabase/grafana-agent-fly-example/
Mapbox New 3D Maps
The prediction markets still give a 25% chance of it being an SC at room temperature?

Prediction markets are just uninformed gambling? They don't mean anything if the money is from people with low information? Don't rely on a prediction market to predict validity of a supposed scientific breakthrough?
I'm a bit confused by this. Since SQLEdge is a proxy, you lose all the IO benefits of running an embedded in-process DB.

At that point, why not replicate to a real Postgres on the edge?

Maybe the expectation is that the application also opens the SQLite file directly? (But in that case, what is the point of the SQLEdge proxy?)
Developers were afraid it would become a tool for Oracle to monetize and trap people in their ecosystem. That never really happened and they have actually done some really good development work on it.
I'm sure Amazon (or the scummy vendor) could open a waitlist for people who want to receive free random stuff for a week, and they could find plenty of volunteers. I'm also sure this also would be against some Amazon policy that supposedly prevents fraud, but just produces waste as a sideproduct of fraud.
Can high interest debt ever be good? I suppose if you're financing an expensive life or death medical procedure?
> I have no problem with receiving a counterfeit that is indistinguishable from the "real" product.

Would you hold the same opinion about stuff you'd eat such as supplements? What does `indistinguishable` mean in this context? Say lower quality fish oil which as it's a pill, you can't tell the difference? This would be the fortunate case, I wouldn't even want to bring up mislabeled vitamins or stuff which can actually cause harm that's hard to trace back.
Typical Annual Salaries lists "Management" as an occupation. What does that even mean?
No, this isn't a clear misrepresentation.

Like all Jewish holidays, Yom Kippur begins in the evening. In 2017, it began the evening of September 29. Information that I can find on SUSECON 2017 lists it as being September 25-29.

Granted, the last day of a conference almost always ends prior to the evening. However, it is completely unreasonable to require a religious Jewish person to be traveling after a conference on Erev Yom Kippur.

Imagine your employer holding a mandatory conference, in a foreign country, concluding on the afternoon of December 24... and then arguing that it doesn't overlap with Christmas.
By the same logic, many more kids have died of chocking on toys than of radiation poisoning by plutonium, so we really should give kids plutonium to play instead of toys.

Did you not realise how ridiculous your comparison was?
DARPA AI Cyber Challenge Announced at Black Hat 2023
New competition challenges the nation’s top AI and cybersecurity talent to automatically find and fix software vulnerabilities, defend critical infrastructure from cyberattacks