skysight-inc/HackerNews huggingface dataset:
It's typical HN: word definitions don't matter and can be tortured to death to mean anything unless one wants to nit-pick then people better use the most academic, agreed-upon and official meaning of a word.

Now back to updating the sophos captcha appliance at work.
https://archive.is/OB21z
It's definitely used for checking and evidence of delivery. For instance, GPS coordinates are logged when parcels is marked as delivered so that know exactly where this happened, not only when.
Of course they "cost". But the issue is the mindset that they are "extra". They are not. They are an integral part to professional software engineering. You can't take them away without moving from a professional craft into some hobby hack.

When developing medicine you wouldn't consider safety studies as "extra". When you fly an airplane then the take off checklist is not "extra". Arguing that automated test suites or documentation are just "extra" on top of making software and could be skipped is similar to arguing that you could fly a plane without any checklists or releasing medicine to the public without evaluating its safety. That's just unprofessional nonsense.
I carry an external battery and a cable when I know I’m gonna be gone long enough that my phone dying is a remote possibility.
https://archive.is/QYwq7
It’s very easy to explain. By going straight to medication you are treating the symptom not the cause. And you don’t even know if it works.

SSRIs don’t work for many people and we only found out 2-3 years ago.

Opioids were prescribed to half of America for back pain.

That gives scope for healthy scepticisms at least. Just because you might have some anecdotal evidence of some chemicals working, doesn’t mean it works for others or that it leads to a good place.

Lastly - there are clearly lifestyle and even moral choices that people make or don’t make that can lead to mental health issues. Just from a common sense perspective it seems much healthier to try and deal with these first, with therapy, than just medicating. And not just therapy. Exercise, diet. We know these affect mental health, yet pills are easy, and they make doctors money.

medicating is much easier than searching, finding and healing the cause. Therapy takes years, if not decades. I can understand why people pick the easier route, but easier is not always better. Also, are you just permanently going to be on pills then? I mean it’s a great subscription business, I can see that.
I'm sorry, but looking at their other "research" makes me not want to even give a grain of salt to this site. As soon as the word "plandemic" is used unironically I feel as if the author has the combined IQ of three earthworms.
Most of the major cloud distros (AKS being the notable exception) do have --anonymous-auth enabled, although it's generally just /version and a couple of other endpoints exposed.

Makes it easy to find out what clusters are running what versions of k8s which is interesting, but not a major security issue.
> I'm pointing out that this isn't really normal or justifiable.

Oh well, what can you do? Vote with your wallet. Tell everyone on HN and Reddit. I agree. But at a certain point it wastes too much of my energy, so I'll basically just cancel cand tell them I can not use their service because reasons, very disappointed, bye.
What is science and how can i get my neighbor with the trump flag in his yard to learn about it?
Python imports are much more principled than sourcing bash though. They are executed in a new namespace, and subsequent imports reference that namespace directly instead of re-evaluating the code.

C extensions don't significantly change matters because the module is still constructed by procedural C code.
I could see my org adopt this if there was an out of the box way to add this to WordPress.
There’s even a term of art for making a plan up front and then hitting it with a low-skew latent space match: “Chain of Thought”. Yeah, it’s seen numbered lists before.

And if at first you don’t succeed, anneal the temperature and re-roll until you’ve got something that looks authentic.
I tried using it but after one prompt it has stopped processing my further prompts. I don't get it... Is there a free limit or something?
It's claimed to but it's worth noting that supportive evidence doesn't exist, small albeit possibly underpowered RCTs suggests it does not and there are potential harms in doing so.

This review article provides an overview for the curious.

https://www.sciencedirect.com/science/article/pii/S000293781...
GPGPU programming uses JIT compilation, either from source or bytecode, it doesn't matter what is the CPU being used on the cards.
Converting a JPG (raster)into SVG (vector) is non-trivial.

What does the background process do to attempt this?
Yes, they just ask companies for direct access. With a bit of arm twisting, they mostly get what they need because they have the law on their side and cooperation is not optional. No need for back doors if you can just come in via the front door.
> After a successful career as an entrepreneur, a business angel and a novelist

Of course it's a personal project, why undermine it, let the person do it's thing.
Is it "brain drain" when it's "cheap labor" that's moving, as claimed by the parent comment?

Regardless, doesn't matter, since their entire point is based on a very flawed and naive idea of economic development.
https://archive.is/Gt9Rg
> at the time it sounded like the perfect screen (high resolution, low-power, great readability and two modes)

My experience was that the OLPC looked awful trying to display color content -- the effective resolution was pretty low (~800x600), and everything had weird color fringing as a result of the bizarre "subpixel" layout.

It looked acceptable in greyscale mode, but, at the time I was using the OLPC (around 2008), software support for this mode was absent.
In VC-backed startups, "growth" does not refer to user growth or profits. Most of the "daily active user" metrics are bullshit. I've worked for a company once that gave away employees free funding money to make purchases. Yes, to get the number of orders up before a board meeting. It was blatant, unethical, but not really illegal.

So what is growth? The number of developers you have doing stuff. You hire more and more, and every few months you parade some Patagonia vests through your offices to show them. "Observe, more devs! Growth!"

The problems is, the devs all have to do something.

I stopped feeling productive years ago. It's all just never-ending grind, dealing with complexity that has no f--ing business being there. And the younger engineers have no idea. They think this is normal.
USB-C has existed for almost a decade, ~2014.
Is it that easy? There would be some tractable number of arrangements this would spit out, and from there you can work backwards and find all materials that could form these arrangements, and try to synthesize them and see what works? Might be easier said than done.
So it is possible to expose Kubernetes without auth (https://raesene.github.io/blog/2023/03/18/lets-talk-about-an... has some details) but it's not a default

You can make that mis-configuration with managed distros, which are generally exposed to the Internet by default.
I know something about this stuff, and Android does the same: charging only until you authorize the connected device.
I don't get how it's better than other high traffic platforms like IMDB.
I don’t think the issue is their customer service not being helpful it’s just that the bank is so predatory. Things like high fees ($10/month) for checking accounts being below a threshold or opening up bogus accounts for people.
The claim of the video is that lifetime, efficiency, and luminosity cannot be optimized independently.

Meaning that the best 2000 hours incandescent lightbulb is either less luminous or less efficient (or both) than a well built 1000 lightbulb.

Wether the cartel was nefarious is slightly beyond the point and primarily of historical interest.

As a "proof" the centennial lightbulb is about as luminous as a candle, that is useless in almost every case.

It is impossible to build a new centennial lightbulb that anyone would want to buy outside of niche industrial or artistic applications.
I don't normally like to talk about matters this personal in a forum like this—especially given that I use my real name as my username here, but if it ends up helping one person then I think it'll be worth it.

My son was born a little over 9 months ago. He's healthy, delightful, and utterly normal—and yet I, his father, still ended up with postpartum depression. I think it's underreported and under-appreciated that fathers can also have serious postpartum mental health issues.

I've been taking Lexapro since January to manage the symptoms, predominantly anxiety, and feel great from it. I haven't experienced any noticeable side-effects that you might normally associate with SSRIs, and I'm incredibly grateful that I was in a position to start taking it.

New dads: if you feel unusually down, anxious, frustrated, angry, or depressed, consider talking to your PCP about treatment. Taking medication is not an admission of failure. Being a father is tough, but it shouldn't feel impossible.

edit: see my replies for exactly why I don't like discussing this.

Edit 2: since I’m concerned that some asshole in my replies might dissuade some folks who might seek care from seeking it, please check this article out: https://health.clevelandclinic.org/yes-postpartum-depression...

8-10% of new fathers experience postpartum depression.
It's disappointing how much low-effort bashing there is in this whole thread. Sure urbit is weird and has a lot of baggage and questionable design decisions, but the project we're discussing is explicitly an attempt to separate out a few good ideas and remove the bad parts. Is that really deserving of casual mockery?

I know I'm shouting into the void here, and under a pseudonym to boot, but this is an active FOSS project that real live people work on in their spare time because they hope it'll be important and useful. I like to think it's a convention here not to shit on such people for comedy value.
Replace forb and tworby.

How common is the pattern? I would expect quite common. So if one can do some replacement, it could solve it just by replacing right words.
This is a T-Mobile rant about them turning off non-LTE 4G service. T-Mobile is still providing non-LTE 4G, but they will not let you activate a new non-LTE 4G device on their network. Last year I tried to do this. Before I did anything, I called them and asked if I could activate a new non-LTE 4G device. They told me it would not be a problem. Activation went fine, but after a few days, the device stopped working. I spent hours with Tech Support trying to solve it, but we couldn't, so they had me go to the store and get a new SIM. The new SIM worked fine for a few days, but then the device stopped working. Troubleshooting on my own, I swapped the SIM with a different non-LTE 4G T-Mobile device on the same account (iPad Pro). Both devices began working! After swapping the SIMs back, they both continued to work, but the new one stopped working after a few days. I called T-Mobile Tech Support again and confronted them with this proof that the SIMs and devices were fine, but service on the new device would fail after working for a few days. After hours more, they found some Tech Bulletin they were unaware of that explained it this way; Any device activated after (some day I forgot in 2022) will cease to function unless it registers 4G LTE service with a tower every 24 hours. T-Mobile would have to have written a script to implement this, and they clearly did it only for marketing purposes. My non-LTE 4G iPad Pro (2016) still works great, but I had to replace the other non-LTE 4G device with something newer. Note: I had used that same device on the T-Mobile network for several years before temporarily deactivating it for six months and then trying to re-activate it. If I had re-activated it a month earlier, it would have worked fine.

TLDR; Cellular providers make money by selling you new equipment, and they will claim a device is unsupported even when it's not true.
Between mind-blowing complexity and never-ending distractions, I find doing actual work near impossible. After getting laid off, I just... didn't look for work.

I instead started writing my own product for pull request assignments and direct Slack notifications for those (my personal frustration).

I needed to get away from it all and decompress. It's been refreshing writing code.
True, only a single determined person with a botnet it more than enough to wreck it completely.
If you hear it on the news everyday, it is not a important problem
> Mac owners can't even an usb from 5 years ago into their computer.

Can you unpack this? I don't want to turn this into platform back-and-forth, but I've not had any issue working with older hardware on my late-model MBP. I assume this is a reference to USB C? But I have the same issue with my XPS 15. A C-to-A adapter is a simple fix.

That said, the place where I've had the most trouble is trying to mount old MacOS7/8 era filesystems onto macOS 10+. It requires some strangely janky unix of mounting individual directories. I tried a little while back to take a look at the Nautilus CD[1] that my dad had had when I was a kid and it was a mess to relive that nostalgia.

[1] https://archive.org/details/NautilusIntroV7
> This might be true in an absolute sense, but I'm really skeptical that it's true in a meaningful relative sense,

It's thousands of (square) kilometres of land virtually untouched by humans. Even in the skies. I'd wager that other enormous remote areas (Sahara, Amazon, Himalayas, etc) have significantly more human intrusion. Even Antartica, due to its various research stations.

The only other place that I can think of that is equally sizeable and equally untouched is around the Northeastern Passage. Basically, the only parts of the planet that are almost impossible for humans to get to.

So that is quite different from just about every other possible habitat on this rock.
1. It probably always will be

2. AFAICT some of Yarvin’s ideology, particularly Neo-feudalism, is explicitly baked into Urbit’s design.
I've done quite a lot of looking at exposed k8s clusters, and one thing this piece doesn't really cover is what percentage of the 350 clusters they identified were in fact honeypots.

You can find k8s clusters without auth using Censys as they specifically try to access things like pod lists, and from spinning through lists of those they tend to be obvious honeypots (e.g. lots of ports that wouldn't usually go together being exposed), although I have seen the odd cluster that looks a bit more realistic, unlike Aqua I didn't try accessing it directly as that could be dodgy legally :D

If anyone wants to look at the list, Censys handily has a search query for "kubernetes clusters where the pod list is exposed without authentication" https://search.censys.io/search?resource=hosts&q=services.ku...
Many other languages give the backwards compatibility promise. For instance Vlang (https://vlang.io), does as well. But in their case, they limit it to a 3 year backward compatibility promise, which kind of makes more sense (also due to them being in beta). It gives them more flexibility to make needed changes to the language, but enough stability to limit issues for users. Though in general, such more open languages are going to be more responsive to users and their requests/needs, because of how they are structured.
This is a really great article! It would have helped me a lot when I started writing an IMAP library. I initially underestimated the headaches that come with the IMAP server being able to send responses at (mostly) any time.

> Note: If you want to connect to Gmail through IMAP, you need AUTH=XOAUTH2 or AUTH=OAUTH2. This requires registering an App with Google to create the necessary tokens. It’s not trivial and took me an hour to do using a Python script I downloaded from the Internet.

> Unfortunately, you can’t speak IMAP with Google by any other means. It’s good for security but complicates testing.

I don’t think this is true (although Google definitely pushes you to use OAuth). If you make an app-specific password in Google’s settings, you can login using the app-specific password, e.g. `a000 login “username@gmail.com” “appspecificpasswordhere”`. Unfortunately this wasn’t super well-documented and may not be something Google supports forever.
How do you "insert it incorrectly"? It's symmetrical and works in both possible orientations.
Ah sneak, posting about analytics in every Homebrew thread. I thought you might like that we moved to InfluxDB but: no.

A new low for you by literally comparing an open source project gathering analytics to sexual assault and rape this time.
See the first comment you replied to:

> This way you don't lose commit granularity while you can still obtain the "one commit per unit of work" view with simple `git log --first-parent` (or do the opposite and skip the merge commits with `git log --no-merges`).
We are running a very similar setup with the exception that we went with Alligator Valet... Conceptually very similar but we found it snappier in production.
Saw your demo video. Amazing tool! Let me try & use it from your code
I initially had the same thought as I have a custom layout but realized that once you have identified which key position is being pressed you can then apply standard cryptographic analysis techniques to get the key mapping.
Yep. Package management is the core of a (Linux) software distribution.
If it’s open source, doesn’t have a hilariously overinvolved and unreliable build process, is used by more than just the author: it’s best in the main repository.
GrapheneOS had this since December, 2021. Nonetheless, its good that these features are becoming mainstream.
How is a union disruptive?
Good content but wish it was articulated a bit more.

Makes me think of the Seinfeld quip about buying pain relievers, “this one is fast acting, this one is long lasting. Do I want to feel good now or later?”
Nvidia in a very real way built the market by providing not just the hardware but the APIs and the tooling and so on. The rest of the market has been reacting to them for a long time.

Can't say they don't deserve their success in a capitalist sense. Can't say their success doesn't alarm me.
True, but there is not delineation as to which flavor of DOS in the Title.
It did in the old days of the "Insecure API port" which listened on 8080/TCP, but that's been gone a while now.

Whilst it usually was just bound to localhost, I did encounter a distribution that, by default, bound it to the container network, meaning that anyone with access to one pod, got to be cluster admin!

Generally speaking though I don't think any distributions do that now.
> Every day I walk to work listening to music on my minidisc player. Looking around to all walking zombies staring down at their phones

When the Walkman came out, it was seen as incredibly antisocial to listen to your own music while out and about instead of participating in the world.
That is the exact opposite of how the immune system is designed.
Does it have to be exclusively vram to be useful or is shared ram also useful here. I have a system that reports 8gb dedicated to GPU with another 15 that is shared and thus a GPU memory of 23 GB
JM2C

lood_in_4bit=True will let you run Llama2-7B variants at 6.3GB VRAM.
We are reaching peak HN. Animated discussions on everything by chatbots, while the humans are the lurkers.
Ask HN: How do you synchronise your notes?
tl;dr: How is your personal / work setup?

Long version: I’m starting to burn out searching for a note system that suites my needs and values.

My values:
- Privacy and Security
- Open Source

My needs:
- Markdown writing
- Note printing (somewhat beautiful)
- OS agnostic (i use Linux/iOS)
- Sync across devices.
- PDF storage (this is where trust comes in, as some documents contain sensitive info)

My capabilities:
I run my own VPS, and as a software developer I’m familiar with git, ssh etc.

As always, tradeoffs are acceptable if I get something in return. For example it doesn’t HAVE to be open source software.

I‘m struggling to find something decent, that is not overblown. I don’t need note revision, I don’t need note-linking, I don’t need fancy productivity hacks or calendar-support.

Best wishes from Germany.
Yeah, it sounds like pre-building the worker JS, so it's a static asset when the client does their bundling, is the least-bad option. Thanks!
> start a philanthropic venture
> created a non-profit

Sure, people can do whatever they want, and this project seems mostly harmless (I can also see forced data collection/publication on individuals having negative consequences for some people). I collect crossword data myself. But I don't go around patting myself on the back for my philanthropic efforts and non-profit status. I mean come on.
Is this a point of sales or am I the one selling? If it's not a POS it's not an alternative.

[Edit] Searching the website, it looks like it is not a POS.
Perhaps also a factor in why some managers prefer to manage employees in-person rather than remotely.

When it comes to avoiding the record, it doesn't have to be lofty corrupt/ish deals or schemes, but also cases like certain anti-union threats, or even plain personal power-tripping.
That works only on 64-bit systems. You need something like this instead of 24:

ctypes.sizeof(ctypes.c_long) * 3
The bravery is in using what has traditionally been called a database. ;-)

https://youtu.be/05mVvkp6f2M
Looking at this[0], I don't see a difference to what uBO (or any other adblock list) is doing here[1]?

[0]https://github.com/TheDen/origami/blob/main/scripts/content....

[1]https://github.com/uBlockOrigin/uAssets/blob/f16c69b9d8322a5...
Like with the Arizona fab question where will they find the skilled workers?
Putting up four walls and a roof, with some chip fabbing equipment doesn't make an efficient fabrication location. When you have American TSMC worker complain about long shift hours i imaging it wouldn't be any better in Europe for TSMC.

This feels more like TSMC grabbing from subsidies pots where it can hoping this will please the NATO nations and that TSMC hopefully survive long enough te reenter the mainland again on time before the mainland goes completely domestic with chips fabrication.
This is published by an org. with a presence on "truth social", obviously pushing an alt-right agenda. Why would you post this claiming that it is released by "The US"?
The trend started before COVID, but it hasn't been normalised for demographics.

The average 60 year old is inevitably sicker than the average 20 year old, and there's an increasing proportion of the former in the UK workforce.

Not to say there isn't a real problem here - the UK isn't doing a great job either on healthcare or, to my mind even more importantly, preventative medicine and public health, but you need to control variables to get a robust conclusion.
Whilst Kubernetes defaults are indeed not great, they aren't that relevant unless you're building your clusters from scratch instead of using a k8s distribution, and I don't think I've seen anyone do that in a long time.

RBAC is enabled by default on just about every distribution I've seen (with the notable exception of microk8s)

Lack of default admission control to prevent someone with pod creation access breakout to the host is indeed pretty common

Unencrypted APIs hasn't really been a problem in years, the insecure API port and read-only Kubelet were a thing but they've been disabled for quite a few versions now.

I'd definitely agree that early k8s versions had very bad security, but things have been improving gradually over the versions :)
With all due respect, fuck off. How dare you question my lived experience.