skysight-inc/HackerNews huggingface dataset:
> Jumperless makes real, fully analog hardware connections between any points on the board or the Arduino Nano header at the top via serial, instead of needing to use jumper wires.

> fully analog (-8V to +8V, up to around 1 MHz before signal quality starts to degrade)

> $299

.. bit steep for a toy (which is all i could use it for) but oh my what a tempting little thing. i want to find an excuse to use it.
So? Feel free to educate me. This is HN and not reddit. We value meaningful contributions here. As it stands, your comment is just saying " I think you are wrong and have been brainwashed ". It doesnt add anything to the discussion.

I'm not saying I have all truths, but I provided a book recommendation and gave my POV. I am positive you can do better.! I'll be authentically interested in learning your POV .
> Every rule is written in blood.

Not really. This rule was written when the only form of written communication was paper mail and office memos.

It wasn't written with instant messaging in mind.
> Certainly if an employer quoted me a compensation package of $x and then revealed that 1/3rd of it was the cost of benefits I'd be quite livid.

I wouldn't, because that's exactly how most of my employers made their offer to me[1]. Not all, but most. Total compensation, in my world, anyway, isn't a rare way to put these things.

[1] The ones who do this also usually include the cash compensation somewhere in the offer letter, though. If they don't, I'll ask because that's the only part of the compensation package that I actually care about.
Interesting that .swf is still listed, I wonder if there's any still hosted on the domain. Looks like someone had some fun putting the file together at least, "just crawl it!" and the swoosh at the bottom are nice touches.
Tip: In Firefox you can use Ctrl-Shift click to bypass context menu blocking.
Printer companies sabotage printers. If you go through the standard Windows route (Devices > Add > Printer) you'll get most printers working quickly and reliably. In fact, if you plug in a USB cable, the printer will most likely Just Work (TM) after a few seconds of driver fetching.

They want you to use their shitty apps and shitty software, though. HP is the worst at this (they cover up the USB port, and will only allow you a limited amount of prints before you need the activate the printer through an app).

Windows has plenty of printer problems (like its print spooler that needs a serious security overhaul which would break loads of printers) but the worst of it only seems to show up if you follow the manual and install the crapware, including apps, that printer manufacturers want to shovel onto your devices.
2^32 is still incredibly small for crypto and is inexcusable.
there are a few k8s distributions works on single server like microk8s, kind, and they are not difficult to setup on a single server.
Makes me wonder how we all lived before Smartwatches. Were train commutes really that boring before the smartphone came about?

Every day I walk to work listening to music on my minidisc player. Looking around to all walking zombies staring down at their phones; as if the news, social media or whatever is a great thing to absorb first thing in the morning.

Technology has engulfed us.
I would be interested to see performance stats - I would expect an optimized attack (batch point inversion, large precomputed table to speed up multiplication, not bothering to try to be constant time) to run well over an order of magnitude faster than that.

Not that it's particularly worth bothering if you have an 80 core machine and only 13 billion keys to check.
Create your own haiku, never publish it. What are the odds of someone creating exactly the same haiku?
Servers are so much faster than they were ten years ago that a typical, fully-loaded enterprise app can almost always run on a single mid-sized 10-core box with 256 GB of RAM.. from ten years ago. It's absolutely ludicrous how much power is available now on a single box if you really want to scale up instead of out.

(Databases, of course, always like to eat everything because of poorly-optimized statements, but they've never really been good fits for K8s or containers anyway.)

Some might say that this isn't webscale, but Stack Overflow runs one of the most popular tech websites in the world.. on only nine web servers: https://www.datacenterdynamics.com/en/news/stack-overflow-st... and LiChess is similar: https://lichess.org/costs
As an expert in the software kind of packaging but only casually knowledgable about the electronics kind, I suspect rather little. However, the former is probably going to be much more prominent in the microelectronics world soonish, as dynamically configurable chips based on FPGAs are becoming very popular, and highlight more than ever how inadequate the conventional IDEs and SDKs for embedded software are. Proper software packaging is almost non-existent in embedded software engineering, but the current work-around of just using one company's SDK for everything won't scale to support all the FPGA cores that people want to use.
What are countries less racist than the United States or Germany? I've found Canada to be incredibly racist against French Canadians. Casually mocked in the streets. If we did that in the USA you'd lose your job
I really think it's meant to awe the business customer with a slick-looking demo, along with assurances that it's "made in Europe, GDPR-compliant, and proven accessible" rather than actually doing the job of a captcha. Sorry to be cynical, but it's oversimplifying the problem and just doesn't work (see below).
> The pandemic has had devastating impacts on learning

https://www.brookings.edu/articles/the-pandemic-has-had-deva...

> Nine-year-olds lost the equivalent of two decades of progress in math and reading, according to an authoritative national test. Fourth and eighth graders also recorded sweeping declines, particularly in math, with eighth-grade scores falling in 49 of 50 states.

https://www.nytimes.com/2022/11/28/briefing/pandemic-learnin...

> By the spring of 2022, according to our calculations, the average student was half a year behind in math and a third of a year behind in reading.

https://www.nytimes.com/interactive/2023/05/11/opinion/pande...

> Students “lost out on about 35% of a normal school year’s worth of learning” when in-person learning stopped during the public health crisis, according to a paper published Monday in the journal Nature Human Behaviour.

https://www.cnn.com/2023/01/30/health/covid-learning-loss-st...
As a maintainer of a semi-popular chrome extension[1], I receive so many buy-out offers that I started publicly collecting them[2] for everyone to see.

[1] https://chrome.google.com/webstore/detail/hover-zoom%20/pccc...

[2] https://github.com/extesy/hoverzoom/discussions/670
Nitrogen runoff strategies complicated by climate change
> Funny because AMD probably has the lowest share of the three if we include all PCs including office ones (and we should since the website says "any PC").

Steam says that users in Linux have a overwhelming majority of AMD and Intel GPUs [1]:

- number 1 GPU is AMD VANGOGH Steam Deck APU with 42.05% by itself;

- top 10 Nvidia GPUs have only 9.54%;

- top 10 "not Steam Deck APU, not Nvidia" GPUs are 26.64% of the market, so almost outnumber them 2.8-to-1;

[1] https://store.steampowered.com/hwsurvey/?platform=linux
While structure may play a role, the problem is that many researchers around the world have yet to confirm superconductor properties.
I'm also using it for navigation in my car; I find the navigation instructions (especially the way your next turn is shown with an arrow inside the map) much more intuitive than Google maps. It also shows any speed limits whenever there are any while Google maps only did this with additional software last time I tried. It's a super useful app for me.
As the hype around AI shows, humans can barely reason either.

“AI will destroy humanity!”

“AI is a blathering idiot!”

No proper reasons.
> a more general audience of artists

It says "Contact us", which probably means tailored license and support, and feedback of bugs/wishes, from a few selected clients.
Tax the volcano and use the vapor to make ice cubes.
PoW captchas are usually stupid ideas. You have to set the work factor low enough that low powered devices can do it without significant latency, but high enough that it actually stops attackers. Typically robots, unlike humans, dont care about doing things in real time.

It might stop the really low effort attacks of people who are spamming billions of pages where the cpu time becomes expensive, but i don't think the ecconomics work for most scenarios.

The current price for solving a js captcha is $3/1000 https://2captcha.com/ . The cost of cpu time for your PoW captcha is probably much lower. If people are willing to pay the $0.003 for a human to do it, they are going to be ok with buying the much cheaper compute.
> Yes, because ads are beneficial to the web.

Citation needed.

Ads are not beneficial to users of the web. There does not exist a website that is better WITH ads. Users do not care about ad fraud.

Ads are beneficial to adtech and companies with ad spend.

We should not destroy the entire internet to protect/increase adtech profits.
Maybe reasoning is overrated? We put too much emphasis on it and it's relationship to intelligence? :)
I don't think the stuff in the article is really that great. Google is basically shoring up a few possible avenues of man in the middle attacks.

Meanwhile, the mobile ecosystem is still rife with many other avenues - your MVNO, fractured Ma Bell, Play Services still has outsized privileges on standard Android, most apps aren't E2EE (despite the article's bastardized use of the term), etc. It's just this boring corporate security narrative where we're supposed to continue ignoring the 800lb gorillas selling our personal information into countless surveillance databases and focus on how they're closing down possible independent attackers.

What would be newsworthy is if they were even talking about real security - libre baseband, mitigating protocol identifiers (eg IMEI) that allow for pervasive location tracking, etc.
It’s a great path to a middle class existence.

Before you get to drive, you toil in a hot warehouse for several years. If you have the work ethic and stick to it, you achieve a good career.

How can wages be that high? It’s what good workers demand for good work. Everyone bitches about the problems they have when they get shipments from herky jerky companies like Laser. They pay peanuts and get what they pay for.
I believe that the concern is that it will infringe on some people's ability to use their computers to interact with some websites (something which is vital to living in our modern society). My computers all run Linux and I use Firefox so this is a personal issue for a lot of people. As someone who is only able to use sites like Netflix on my computer through the continued generosity of a bunch of large corporations (honestly it's really good fortune) this makes me extremely uncomfortable. Especially since the whole point of EME was to prevent privacy and it hasn't done that (100% of Netflix content is trivially available to anyone via a multitude of pirate sites) so...
> if you're storing the passwords in the same place as the MFA secrets, then it's not actually MFA anymore.

I see this sentiment a lot and IMO it over-simplifies the security model pretty drastically. It's unlikely that a 1P vault is breached or leaked. For most people, the most likely threat vector for a random internet account is:

1. they re-use a password across sites
2. one site gets breached and that password is included in a hash dump (probably associated with their email)
3. one the hashes are broken, an attacker can try that password on another site

In this situation, MFA stored in their password manager is still MFA because the TOTP secret wasn't leaked with the password (or it was and then it doesn't matter where you store it on your end).

The only case in which storing MFA secrets with your passwords becomes an issue is if other people have access to your laptop (and password manager). Then you'd probably want passwords on the laptop and MFA on your phone (or something else kept on your person).

Nobody questions leaving a yubikey in a laptop (which is also full of passwords). Even if doing so means anyone with your laptop can use your yubikey, it narrows your attack vector from "anyone who got your password" to "anyone with physical access to your laptop", which is a great reduction in scope (for most people).
Yea I’m more interested in an explanation as to why I cannot read more than a few lines of this without laughing. It feels very primal like something about the absurd repetition and nonsense just breaks my brain as well and I laugh uncontrollably.

Time Cube and Dr. Bronzer’s soap has a similar effect though not quite as strong.
> a typical, fully-loaded enterprise app can almost always run on a single mid-sized 10-core box with 256 GB of RAM.

If you don't care about high-availability, then yeah. One thing I've learned in my career is that delivering reliable enterprise-grade service is anything but trivial. The level of complexity of any modern stance is high enough that there will inevitably be sharp-edged corner cases which aren't simple or cheap to deal with.
How can parties which have no power have any kind of dialogue with a megacorp with billions of dollars. From a thousand miles up the only level of dissatisfaction that is even noticeable is the kind where people throw their androids in a lake and switch to Apple and Bing.

Exactly zero folks are liable to notice that you have a subtle nuanced analysis regarding their strategic direction with a feature. It would be like you telling a star about how you feel about how they wore their hair at a show 3 weeks ago. Your opinion is either invisible or irrelevant.
I had a similar situation where I was convinced that Code Interpreter had escaped its sandbox but SimonW was able to reel me in, discussed here https://mastodon.social/@Jackivers/110715505542072107
And humans do that and much more by squeezing opposable thumbs together ...
That's one way of looking at it. My way of looking at it lately is: Why would a trillion dollar company pay obscene salaries to work on this?
The library itself looks interesting.
Bravo, bravo, bravo. HN still has some open-minded and far-seeing people left. Was almost giving up here, but your comment made me calm down.
I'm not sure I agree significant gaps in the playing fields are really there. By significant I mean something that explains it should be e.g. 10x harder or something to the point it's supposed to be suspicious how the ratio is indicative of something off. Sure, you don't get to see how they laid out the transistors of the CPU but that's not how these attacks work it's by some oversight in memory handling not that different from software. They analyze how individual assembly instructions behave in certain scenarios vs how they are designed to behave. Compare this to the process of attacking closed source software like Windows, sift through a bunch of assembly in a debugger and see what gets left behind or compared incorrectly, and it's not glaringly different just because hardware is involved. Difficult, sure, but far from anything to suggest it should be uncommon. More importantly, by definition you don't really get to see all of the things they do catch. Maybe they are getting 90% of other related vulnerabilities with the patches but you only hear about the 10% that weren't covered by it because that's the only thing someone is going to publish/get a cve for/make the front page of HN.

The point isn't that billions of users all actively try to exploit software it's that if you have billions of users then even if 0.01% try to then that's still a hell of a lot more external bug finders than internal bug finders.

Yeah nothing against you or genuine curiosity it's just when a comment sets up a series of logic and concludes with a leading question then the conversation is damned to largely revolve around the leading question instead of genuine answers.
Personal details of all Northern Ireland police officers released by mistake
And you obviously don’t think kids can’t recover or excel.

Kids are resilient
> Computing devices based on Intel Core processors from the 6th Skylake to (including) the 11th Tiger Lake generation are affected.
Or everyone has to wait for the full paper to be released which supposedly includes some manufacturing steps not included in the leaked paper so that replication can happen properly.

The original samples are now under testing at a national lab in SK.
We should aspire, in general, to put away forever the ridiculous term "unskilled labor."
Its not really reinventing if its the original idea. Hashcash came before bitcoin.
> It would seem logical to force the contributors to use good security practices right from the start. I would have probably started with those.

I agree, but that's the benefit of hindsight :-)

PyPI is simultaneously one of the oldest and most active language packaging ecosystems out there; a lot of of the things we treat as "table stakes" in terms of good security practices weren't even invented when it was first released.

The consequence of all of this is that there's a lot of ossification, and things can't be changed suddenly without (reasonably!) upsetting a lot of people who are invaluable to the community. It'd be great in terms of security if we could just force it, but that wouldn't be fair to them, to their historical expectations, etc.

Edit: I should say: I'm not a maintainer of PyPI, just someone who has contributed to it. My opinions aren't representative.
Won't AI be taking everyone's fucking jobs?
Use uBlock Origin and then you won't have to see them ;)
>both communities overlap.

The overlap is much smaller than gemini proponents would have you think.

E.g. I wouldn't touch gemini with a 15ft pole.

>Gemini gives you methods to display your media on nearly any size of screen.

But it still requires SSL and it still doesn't tell you the size of the resource you're fetching.

The Gemini protocol can't be fixed, as by design it cannot be modified.

Overall, Gemini just smells like an expression of the authors' narcissism.
They are easy to spot with the right sunglasses.
I don't think the law is unclear at all on this point. If your site wants to ride the fine line of what is allowed, you can get into a gray area. But unless you're trying to push the boundary, there isn't any mystery.

> Google's suggested answer

Do not trust Google's suggested answers for anything that matters. If you're really in doubt, consult an attorney that works with these issues.
I remember they started out as something akin to a digital assistant/AI robot friend. I wasn't aware that the main subreddit had a suicide hotline pinned, thats very depressing.

Sad to them see it years later being a horny app.
>Why are we here?

>Because this guy in the sky who's all powerful made everything. Also, if you don't agree with the opinions he has on things and be his slave, you're going to be punished by being this bad guy's slave down underground.

Yeah, humans are not above pure confabulation when their training data's lacking.
It’s typical of Unity to announce something cool sounding and not link to more in depth articles on how to use the stuff.
Sigh. I did not know that, thanks :(
Read this most excellent comment

https://news.ycombinator.com/item?id=37056453

The truth hidden from you your entire life in plain sight.
Enduro mountain bikes tend to be lower, but they won't be great in the city. They're heavier, less efficient because of the dual suspension and the maxim chain ring size is around 34T (they usually come with only 30T or 32T if you're lucky).
https://lets-go.alexedwards.net/

https://lets-go-further.alexedwards.net/
"—it reaches out it reaches out it reaches out it reaches out— One hundred and thirteen times a second, nothing answers and it reaches out. It is not conscious, though parts of it are"

:)
The disable 2G switch is available on my Samsung running Android 13. Maybe your carrier is doing it to you?
Interesting project! I have lately been trying out these cool and perhaps in some way similar sqlite libraries:

- https://github.com/haxtra/kvstore-sqlite (Basic key-value store for SQLite databases.)

- https://github.com/haxtra/super-sqlite3 (Fast SQLite library with optional full db encryption, simple query builder, and a host of utility features, all in one neat package.)

- https://github.com/haxtra/live-object (Standard javascript object with built-in JSON serialization to file. Dreams do come true sometimes.)

All from github user: https://github.com/haxtra

I think the super-sqlite3 source might also be an inspiration for the 'driver' topic: "super-sqlite3 is a thin wrapper around better-sqlite3-multiple-ciphers, which extends better-sqlite3 (the fastest SQLite library for node.js) with full database encryption using SQLite3MultipleCiphers. super-sqlite3 then adds its own query builder and other convenience features."

And do check out this user's XRay (JavaScript object browser component) library for your preferred component framework.

In my bookmarks I also found these other related and interesting links:
- https://dgl.cx/2020/06/sqlite-json-support (An article about SQLite as a document database, using the relatively new 'genrated columns' feature of sqlite 3.31.0, which you seem to be using)

- https://www.npmjs.com/package/best.db (easy and quick storage)

- https://tinybase.org (This project seems to be an even more similar idea to Doculite) https://github.com/tinyplex/tinybase (The reactive data store for local-first apps.)

Good luck with your project!
MIT License:

https://github.com/ChimeraOS/chimeraos/blob/master/LICENSE
> That isn’t the model reasoning. That’s you figuring out exactly what parameters you need to use to make the model give the result you want.

If its to get the model to present a fixed answer, sure.

If its to get a model to do a better job at solving general classes of problems (such as when what you are optimizing is the built-in prompt in a ReAct/Reflexion implementation, not the prompt for a specific problem), that's, at a minimum, different from Clever Hans, even if its not “reasoning” (which is ill-defined).
I honestly thought this was going to say “marketing, sales, support”! The things I hate to do… but have to do.

But actually this blog is apparently talking about a single feature of a larger product. In which case the larger product should already have the necessary infrastructure (metric collection and dashboards), and so perhaps it is just 1% of the time.

For the kind of indie style product I’ve worked/am working on, I think these are more like 20% issues, but I don’t think that you need all - or even most - of the items listed until after your product gets a bit of traction. Better to launch an 80% product now than a 100% product in 6 months.

Until you’ve got many customers, you can get most of the usage, performance and error instrumentation from watching the appropriate logs, perhaps adding a bit of dedicated perf logging in performance critical areas. Building all this other infra too early is just a waste of time.

In fact I’d say that, in the early days, continuous deployment and a bit of testing is more important than instrumentation. It’s way more difficult to retrofit CD, and it saves so much time, especially when you’re pushing lots of updates, i.e. at the start of a project.

But like I say, my comments apply to a new product. Not a new feature of an existing product. In which case I’d expect engineering standards and infrastructure to be well defined.
I think the point wasn't that Saxony and Saxons were terrible people in general, but rather that if you're non-white you might get smashed in the face or murdered on the street if you're unlucky, and the odds of this happening being higher than in other parts of Germany. Which seems fair to me given recent history.