skysight-inc/HackerNews huggingface dataset:
> None of those things are going to make a bad feature successful and not doing these will not make a good feature unsuccessful.

Which is why the article says: "This last 1% isn't just what separates a great product from a good product, it's what separates a product that might not eventually fail from one that will eventually fail."

A feature can easily be successful while being impossible to maintain because when it comes time to pay the cost, all the main people involved have already claimed the required benefits and jumped ship.
The delivery part of the service is really good when things go right.

Very difficult to get a hold of someone when they lose a package even when they explicitly tell you “contact us”.

But if you stick to inconsequential items, it’s great. I needed a few USBC cables and charging cables the other day and got them next day at half the price. I checked the local stores and none had what I was after.

But yeah, I agree with your point
If this were true, would CMTC word the tweet like this:

> Enquiring minds want to know: Is diamagnetism not interesting? The answer is that NO, diamagnetism is NOT interesting, many materials (e.g. Pb, Cu, P going into LK99) are diamagnetic. It is a run of the mill property. (There are more results, but CMTC cannot divulge them yet.)
Writing docs, especially detailed and complete, can really save you in the long run. Plus the people that come after you will greatly appreciate your efforts.
Because it’s actually hard (both physically and mentally) labor. Unlike what most of the keyboard jockeys on this forum (including myself) are doing. Not to mention the misleading headlines as others have alluded to.
> All-together I would've required 9 servers, 3 control pane, 3 app or pods, 3 storage. … Yes, k8s is a nice comfortable way, if you can afford it. But it’s expensive and wasteful of resources. And we do have a climate crisis.

You can run each of those roles on the same machine, achieving high availability from 3 total. For learning purposes you can run this all in VMs on a single machine.

There are plenty of good reasons not to try kubernetes when it doesn’t fit your use case, but the overhead it imposes is mostly in time and expertise. Claiming it’s more costly in compute resources, and especially contributing climate crisis, is reaching.
It looks neat, I'll pass this along to the team and take a deeper look at it later.
> The fact that the blockchain will be used to store everything means

... lots of really bad (CSAM) or other illegal content you cannot take down, incredible amounts of toxicity, manipulation to abuse the underlying token mechanics, endless phishing and related malicious activity to reassign tokens from plebs to hackers

For users, storing their posts, follows, likes, etc on a public ledger means that anyone can request their history and do whatever they like with it, in particular the same things the capitalist social media does, but now anyone can read all your data. Yes, this is definitely what people want...
How much does this differ from the responsibilities of armored car drivers, who make $17/hour?
This is a pet peeve of mine. You even see the same thing expressed in the comments on HN from time to time.

Underpinning the mindset is the idea that users are idiots who are incapable of perceiving the unvarnished brilliance of devs and PMs. When, more usually, it's that the devs and PMs aren't understanding something that's very important to users.
Embrace The Program.
I have done the same to the same result. We must be the lunatics, as everyone keep defending their decision to put everything, even their personal blog, behind a single company, because "they might get DDOSed".

The absolute state of software engineers and systems administrators in here, man. Talk about overengineering and premature optimisation, let alone being totally oblivious that their laziness is what creates a monopoly.
The title of this post is related to the last sentence of the abstract, and least interesting part of the paper.

Let's not sensationalize good research for the sake of trying to get upvotes. This isn't reddit.
I was just about to ask why Youtube is no longer show the usual recommendations when you watch a couple of videos on desktop without login, I guess this is a way to force users to login?
Yeah one might as well just off themself now and not live a life because nobody is going to visit their grave. /s

This article is about financial success during the time someone is living I have no idea what your comment is supposed to mean.
Who? I'm genuinely curious
It doesnt look like it is a criminal offence but when I tried to remove myself the option wasnt there, so I changed the name. I could remove other people on the system.

https://www.legislation.gov.uk/ukpga/2013/6/section/5/enacte...

Maintenance of registers: invitations to register in Great Britain

(1)A registration officer in Great Britain must give a person an invitation to apply for registration in a register maintained by the officer if—

(a)the officer is aware of the person’s name and address,

(b)the person is not registered in the register, and

(c)the officer has reason to believe that the person may be entitled to be registered in the register.
When reading the tutorial, we are describing one stack to build a specific app. But the stack is made of building blocks that you can replace with others if you need to.

- Airbyte has two self-hosted options: OSS & Enterprise

- Langchain: OSS

- OpenAI: you can host an OSS model if you want to

- Pinecone: there are OSS/self-hosted alternatives
DARPA Wants to Capture the Next Chinese Spy Balloon
It's called dynamic window management, it's very popular, and that's without the animations showing you that something got moved.
an easier explanation is that modern chipsets are incredibly complex, side channel attacks like these are hard to reason about and traditionally, processors themselves have not been the target of these kinds of attacks, so i don’t think the engineers working on them are accustomed to thinking about them as attack surfaces in this way.
Google is a profit-seeking machine who has long shed any "startup" stage principles ("don't be evil" and such) as luxuries.

Even the parts that do good feed the parts that do bad.
It’s skilled labor and it likely takes training and years of service to get to this level of pay, which, given that its inclusive of the provided health care benefits, is just enough to provide what used to be considered a normal middle class standard of living. We should aspire for basically every job in America to work like this.
Potential Risks of Kratom
They actually started off in the New York City publishing industry.

McGraw Hill was founded by the Bush family before they decamped for Dallas in the 1920s.
Honestly I think they should let people enable this manually, I'd have so much fun.

=======

> Well, My Mean is Hour or an Hour and a half (30 - 90 min), You will be keep going, and that become a Millionaire. Ask the cash register.

=======

> Are you ok now
> No, I am not ok. I am sick and I cannot move.
Got a few others also listed on https://wiki.thingsandstuff.org/Creative_coding
I don't understand the premise. The point of a CAPTCHA is to tell Computers and Humans Apart, that's what the CHA stands for. You cannot hope to do this test using a proof-of-work system where the work is computer work.

Call this a client rate-limiter, or whatever else, but it is obviously not a CAPTCHA and cannot function in this way.

Another obvious problem is that server hardware is vastly more powerful than the average user's device. If you set your challenge to an amount of work that doesn't meaningfully drive users away and/or drain their batteries, you are allowing a malicious server to pass your challenge tens of thousands of times an hour.
> The primary endpoint of both studies was the change in depressive symptoms using the total score from the 17-item Hamilton depression rating scale (HAMD-17), measured at day 15. Patients in the Zurzuvae groups showed significantly more improvement in their symptoms compared to those in the placebo groups.

Why would you mention the number of items on the scale, but not mention the number of points the drug gained? Is it that professionals normally refer to it as the "17-item Hamilton depression rating scale"?

That they're mentioning the number of points in the scale, but not the number of points gained, makes me wonder if this barely limped into significance under the most favorable conditions.
So it seems like speculative execution cannot be disabled. What’s the mitigation here? Nothing and wait for patch or significant redesign?
https://archive.ph/kH07d
> I hope you're not in charge of hiring QA.

This seems unnecessarily harsh. The whole post would be improved by removing that sentence IMO.
Correction: kzu, not ksu.
> ” This behavior of legal loopholes to discount workers should be made illegal.”

It comes down to priorities.

In the US at least, regulators are very pro jobs & job creation.

People employed contributor to society in many ways (eg purchase goods, taxes, lower crime, etc).

Which means, US wants to make it easy for someone to create a company so they can hire a people.

Now if the business that’s created to employee people is a subcontractor for a Mega Corp, the US regulators don’t care. Because again, it comes down to priorities - which is pro job creation.

Note: I’m not anti-unions. I’m just trying to depict it comes down to what’s highest priorities for regulators. And pro job creation / making it easy to create a company, is pretty high on this list.
I disagree with everything you've said but there isn't enough content to any of your complaints to respond meaningfully.

Upgrades and downgrades work fantastically. Putting "a firewall in front" is trivial - just... put a firewall in front. I don't know what "punch a hole" means, but if you mean "bind a port", yes, there are indeed a lot of ways to do that (on linux, windows, and osx!), and kubernetes provides excellent, organized, standardized and controllable ways to do that.

Kubernetes does not create complexity in my experience. It's the other way around - developers who have never seen the complexity in the world complain about the complexity embodied in the tools. They think "you're not gonna need it", despite an entire industry of operators saying "actually yes, we do need this, and badly".

I've seen developers who've never built a website in their life complain about React, and it sounds exactly the same as this. You might not need these tools, but they're not unneeded. If you can make a simpler and more powerful tool, please, go ahead, you'll be rich and famous, and everyone from the US Navy to telecoms to where I work will celebrate you.
Documentation is a deliverable as much as software. Just as important too.
It is the National Library of Medicine, which is a database maintained by NIH.

The journal this article is from is from is Cureus: https://www.cureus.com/

Their tagline seems to be "publishing beyond open access" and to my eye at least looks like a 3rd tier journal.

But NIH really has nothing to do with it, they're just a catalog. Libraries have tons of bullshit in them. You are supposed to be the filter.
It’s a hard work, yes. And people should get paid for hard work.

But you’re a delivery man, that’s it. In each job you need to wake up in the morning and have responsibility to do your work well. And very often you’re handling equipment/goods that exceed not only your monthly salary but your lifetime income.
to me, rust has extra complexity related to memory management and raw performance, which are irrelevant to typical web dev.

I am not an expert in rust, but looking at it as potential choice for my next project.
ISA complexity breeds microarchitecture bugs.

In the internet era, x86 is an anachronism.

RISC is the way forward.

RISC-V is inevitable.
> I love to build digital products

Should update that to “I love to throw the people who love my digital products under the bus”
They said physical processor. I took this to mean chip. Of course you can't trust chips on the same mother board (there could be a bug where they can read the same memory), so you need a network boundary. So different rack on the server, for each [boundary, however you define that...]
It’s usually pretty hard to get an ups driver position. Most people work the warehouse for years before they get a shot, and that is incredibly hard work that doesn’t pay as well.
I started making 3D assets in the past year and I have a newfound appreciation just how large these files can be. A single 3D model can easily grow to several hundred megabytes if not optimized properly. With the rise of photogrametry scans you'll have lots of rather large assets.

I'd figure out the business model fast if I was you.
And solvable since other societies have solved it in the past and today.
Likely work based off of previous exploits.
Friends Built a ‘Hypercube’ to Play Final Fantasy Crystal Chronicles
Sure if you want to spend tons of money on a product that doesn't sell. I've seen corporations do it multiple times before (I myself was staffed on a project that was going to be 'the future of our department', worked on an MVP for almost six months, then the project was shuttered when the two major clients they were planning to sell it to didn't end up signing the contract in the end (one eventually tried to do their own in-house though, and tried to get us to just hand them our business logic for it).

If we had spent an extra four months or so getting this 'last 1%' done, it wouldn't have mattered. It would have just been even more of a waste of time and resources. At least they realized it before we polished the hell out of it.
When the alternative is sacrificing privacy or anonymity, I think it's at least useful, even if not ideal given the current energy situation.
Yes that's obvious hypocritical virtue signaling. Especially when he is puffing the smoke right into somebody's face.
For anyone interested in how the new (bigger) locks use less water than the old locks (reclaiming 60% of the water - without pumps!), this old Practical Engineering video explains with diagrams:

https://www.youtube.com/watch?v=SBvclVcesEE

They store the water in a series of basins at different levels, and use those basins to fill the portion of the lock below. It's more obvious with diagrams.
The pod is the basic abstraction. The underlying container technology can be swapped out. People have made Kubernetes schedulers for Microsoft technologies and WASM runtimes as well. If you wanted to use microvms, you can. Most people stick with Linux containers.

The Linux container/namespace is useful in the sense that operational characteristics matter, and many troubleshooting can end up going deeper and deeper in the stack. But as far as understanding how to _design_ things, knowing how the pure abstractions are composed together lets you be able to apply it to many systems, whether it is Kubernetes or something else.

I suggest reading through the first few chapters of Roy Fielding’s PhD dissertation. He is known better for REST, but his dissertation was actually about architectural elements, properties, and constraints, and then applying to hypermedia as an engine of state.

Once you know how to reason through computing architecture, you can pick apart any architecture, framework, or paradigm, and know how to work with it, and when you fight against it. You don’t grok a system by finding out how specific parts fit with each other, but rather, how things are consequences of the architectural elements, properties, and constraints. Then, the specific way things work (and don’t work!) together pops out.

And don’t be afraid to dive into the messiness behind an abstraction. Knowing and being willing to do that can set you apart in your career.
You would need a dedicated core per tab.

Partitioning tabs according to trust would be ~fine, but laborious and error-prone.
Right. Captchas are supposed to ensure the operation is human-initiated. This solution doesn't work.
Yeah, I wonder about that. My hope is that other platforms’ fees are high enough to motivate creators to switch, and the transition to Easyful is pretty fast for most users, especially if you already have a Stripe account.

But I guess we’ll see whether we get any traction!
They should make more too.
Nope, it's not pumped. It's a clever system where there are several storage basins at different levels.[1]

In the 1960s and 1970s, there was a nuclear reactor mounted on a ship to provide power for the Panama Canal. This reduced water loss via the hydroelectric plant at Gatun Dam, leaving more water for the locks.[2]

[1] https://en.wikipedia.org/wiki/Panama_Canal_expansion_project...

[2] https://en.wikipedia.org/wiki/MH-1A
Firefox is such a pain to me as a web dev who does a lot of WebGL and Web Audio API work. Even CSS and SMIL animations can get funky. It’s not nearly as bad as Safari but it’s harder to swallow due to how small the user base is relative to the amount of time it sucks out of my life.
I was not involved in that specific aspect, so I can't provide accurate information. We may release more information later in the future.
I had original Pebble and even 7 day battery life was a bit annoying, couldn't imagine having to charge my watch every 2-3 days as some modern smartwatches have. Ended up getting just a solar powered casio with no smart features whatsoever...

Garmin makes ones with over 2 weeks of battery life but for the money I can't excuse spending on a watch just to get some gadgets.
Show HN: Fast, JQ-like JSON parser in C
Reached a version 1, still seems faster than cJSON in most instances. Added some unit tests and an api for selecting json properties off the in memory structure. Error handling drastically improved from my first iteration.
That would be really terrible for streamers
>What’s the mitigation here?

Replace the buggy CISC CPU. Ideally with a less complex thus highly likely less buggy RISC one.
I think you're last statement is half right. They probably don't bother looking for them that hard because if they look for them they might find them and then have to make their CPUs slower before launch.
If ever there was a place where a standard would be nice, it's with LLM API's.
"Together, these calculations suggest it is doubtful that Cu enters the structure in meaningful concentrations, despite initial attempts to model LK-99 in this way."

So does this mean all those DFT calculations were useless?
.NET 8 Preview 7
> It affects your credit quite significantly.

I dont care, I closed my bank accounts because I dont like the way the banks share data with credit agencies. One of the reasons why I stopped using crypto.

Privacy is massively undervalued. :)
Yes, that's scary. Understandable, but it does come with a lot of functionality that's nice to have no?
How surprising; the same company which already doesn't give a damn about counterfeit products and fake reviews now doesn't care about fake books.
> Why would you mention the number of items on the scale, but not mention the number of points the drug gained? Is it that professionals normally refer to it as the "17-item Hamilton depression rating scale"?

Correct. "17-item Hamilton depression rating scale" (or HAMD-17) is the precise name of the scale; "17-item" is required to
distinguish it from other variations with different numbers of questions.

The precise improvement in scoring is undoubtedly present in the clinical trial paper, but isn't relevant to a FDA press release about their approval of the drug.

https://dcf.psychiatry.ufl.edu/files/2011/05/HAMILTON-DEPRES...
The 6502 in my argument was meant for something like controlling seats or mirrors.

The ECU obviously needs more compute power. That said 6502 was an over exaggeration.
Could maps.me also be in a similar state? It used to be a good OpenStreetsMaps frontend and it was bought (possibly twice) by some investor firm to generate profit.

I don’t know what is the state of this app now. Does anyone know? What is the profit scheme (I suspect it might be similar to this one described here) and to which app would you switch instead?
Renderdoc Security Update
I’ve had production SaaS apps running on elastic beanstalk just fine for years now. Better SLA than any of the kube apps I’ve seen. You’re right that if you have highly capable support team and the real need for it go with the pods but if you just have mediocre engineers and a straightforward deployment with no real scaling issues then just stick to simple systems.
That's why you use something like this, where each request incurs a cost for the attacker so it doesn't matter if the origins are distributed.
I'd add that the status quo has done pretty well, and many of these exploits are fixed. It's also worth noting that a lot of the exploits in question may be known, but the people working on them couldn't theorize a practical exploit. How many web browser sandbox breaches have there been over the years? Far less than the CPU exploits in the past several years. The latter can have a much bigger impact though.

The biggest risk target seems to be shared servers, and you often don't know who you're sharing with, so is it worth trying? It seems to be usually, no... in a specific target, maybe.
Asp.net Core updates in .NET 8 Preview 7
[SECURITY] [DLA 3501-1] renderdoc security update
Another set of watchmen.

... unless they conspire together. Ugh.
Treating end-users as a threat is galling, given the crappy security all over the web - IOT, infrastructure (BGP,DNS), leaky S3 buckets, misconfigured government sites, etc.
Damn, looks like it's a no then :(
Nothing to make you feel as old as a younger person who feels old!
> In other words, the network decides whether traffic is encrypted and the user has no visibility into whether it is being encrypted.

I'm pretty sure that it was intended that the OS UI would show you when your connection is unencrypted, but none of them do because that was undesired by state actors.

Also, even if encryption is enabled it's only for the radio part of the data transmission, not handset -> handset. Otherwise you would not be able to make calls to landlines, so isn't it already trivial for a Network Operators to decrypt your raw data? It would help for scenarios like an embassy mounting a fake base station to grab data about protestors outside it, I suppose.

Also, how can they tell if the encryption key is weakened by setting lots of bits to zero, like was done in the original version of GSM?
Reaction: Given how many Soviet spies seem to have randomly wound up inside the Manhattan Project's "Top-Secret fence", without any actual effort by or direction from Moscow - would it have made any real-world difference if Oppenheimer was a Soviet agent? Once Stalin had 4, 5, or more independent copies of the A-bomb blueprints, what was the marginal value of yet another?
Can someone explain why the ssh video at 2:25, where the 256bit comparison is pasted in, it doesn't match? The first two colon separated number sets do match, but not the following two?
2^32 search space for each set? That seems to imply a little under 2,000 keys per second?
(Note: I may have added to my post a bit before seeing your reply.)

> Would that equivocation not be a positive thing? When we said global warming, it caused huge political nightmares when things were cold.

I don't thinks so, since a similar kind of equivocation (and a strawman from it) was involved in creating those "political nightmares" in the first place:

1. Scientists pointed out that the globe, as an entire system, was warming. For short, "Global Warming."

2. Opposed politicians took "Global Warming" and twisted that into something like "every single point, globally, is warming simultaneously and strictly increasing." Then they "disproved" the strawman whenever anywhere had a colder winter night than the prior year.
Regarding the "high trust" part, they are tracked in real-time with GPS including when they scan deliveries.