skysight-inc/HackerNews huggingface dataset:
According to who?

According to Wikipedia, JPEG XL is a royalty-free open format, and there is no mentions of patents at all.

Are you perhaps confusing it with HEIF that does have some licensing confusion related to it.
I'm pretty sure it was using hardware acceleration since the cpu usage was so low. Using mpv and forcing it to use the CPU has it jump to something like 20-25%.
This is correct, but its uncharitable to call it a "hack" in many contexts. In oauth, for example, the access token / refresh token concept is literally spelled out in the spec. It's not a workaround, its how you implement eventual consistency in a loosely coupled system where the IDP can't push updates to clients because it doesn't know all of them by design
This article makes so many unfounded assumptions in order to make a point.

> Presumably they are going to immediately make themselves admin, or wire all your bitcoin to their account.

Attackers running scams like a sophisticated BEC will lay dormant for long stretches of time to gather information before acting. Sure, they can export the emails and set up auto-forward rules to maintain visibility when the session expires, but they've now made a lot more noise to detect on. I've seen threat actors view mailboxes once a day for months before they launch this scam.

> Also, it would be better to protect against this by securing the logs or using hard drive encryption.

Of course it would, but often it's not. It's that simple. It's crazy to think the person responsible for writing a secure app is also the one making decisions on endpoint encryption.

> some applications are used strictly within an company from company devices

Some are, lots are not. This reads like someone who has worked in enterprise environments with well funded security teams, not a small business with one IT guy running the show.

> But even then, the attacker could install a browser extension that sends your credentials to them the next time you log in.

This contradicts the rest of the article. Why is a company securing logs, encrypting disks, locking down where users can access apps, but then allowing anyone to install browser extensions?

I agree that short sessions are not the quick fix that some devs make them out to be, but the author is ruling out a perfectly acceptable control based on an imaginary end user setup.
Well it avoids client side state and improves load times. I personally think the main benefit of htmx is fetching components individually from the server and so JS on Edge makes sense.
Librewolf has an option to delete cookies on exit. Then you are as secure as possible.
ooh! phil wadler lectured me at glasgow.. he was always listenable but he's got funnier...
I'm interested in your take because every major cultural battle has been on by the positions favored by those on the left in the last 30 years.
If I understand the article correctly, the two main features of pg_later is that a SQL batch won't be aborted when your Postgres connection dies - and all results are retained until you retrieve them, and this is all mediated by Tembo's Postgres message-queue extension.

The thing is, both of those things can be done today without any extensions: just modify your SQL scripts to run under an Agent account, and change every `SELECT` into a `SELECT INTO` statement, all dumping into a tempdb - this technique also works on SQL Server and Oracle too.

(On the subject of Agents, I'm surprised pgAgent isn't built-in to Postgres; while MSSQL and Oracle have had it since the start)
thanks! be sure to sign up!
It's not about the objective(?) reality, but public perception. In my Japan days (1980s-90s), American companies were having a terrible time marketing their goods in Japan, because of the Japanese (often wrong) presumption that foreign goods were inferior.

It's true there are inconveniences in Japanese life, but they are generally very predictable. What the Japanese hate is unpredictable inconveniences.
Two random choices has a few significant advantages over "find the least filled one":

- It's O(1), rather than O(buckets).

- It's robust to stale data and concurrency. One way systems try to avoid the O(buckets) work is by caching, or by scanning in parallel, either of which cause stale load estimates. "Pick the best" tends to lead to significant over-filling http://www.eecs.harvard.edu/~michaelm/postscripts/handbook20... or https://brooker.co.za/blog/2012/01/17/two-random.html).

- Best-of-k (rather than best-of-two) provides a parameter `k` that allows the system to tradeoff between optimality (higher k is more optimal), and robustness to stale data and concurrent accesses (lower k is more robust). Mitzenmacher's core observation is that the step up from k=1 to k=2 is a massive improvement in optimality with only a small loss in robustness (and much more than most people would expect).
The number of people per dwelling went up though, so that hasn't happened, at least not on average.

But I think the average could be misleading if the household size had gone up significantly in council homes, hiding a slightly falling household size in the private sector. But that's pure speculation.
The pigs that could solve the human organ transplant crisis
I remember at NAMM about 10 years ago, the company I worked for made a touchscreen-based mixing console.

The CEO insisted to have Stevie Wonder try it. What surprised me is that he (SW) looked impressed doing so, moving virtual faders on a glass screen with no tactile feedback.

That was my first realization that music is a business like any other, and getting a famous person doing a PR stunt for your product may be beneficial, even though they're not at all the intended consumer.

But also, SW was using his ears more than his fingers to get the feedback the product was lacking, and so what started as a bad joke made me respect him even more.
>On a farm in Bavaria, German researchers are using gene editing to create pigs that could provide organs to save thousands of lives.
even locally, when the GUI hangs and i need to restart it (Xwayland still has issues), having most of my work in local tmux sessions saves a lot of time after logging back in.
Interestingly, skin cancer incidences are highest in northern europe, which is maybe due to the fair skin that people up there have:

https://www.euronews.com/next/2023/07/19/skin-cancer-which-e...
Chrome increased their release speed to stay one version ahead of ff. During the pandemic they missed one release, but they also skipped one version so that they can stay ahead. The version was somewhere in the nineties.
This is a similar one: https://www.architecturaldigest.com/gallery/burj-al-babas
No one is saying self regulate here - not me or anyone else - but the rules need to flexible - the spirit of the rules is supposed to require that a driver gets 10 hours of off duty time, with the idea that they'll get 8 hours of sleep in there. If you're requiring drivers to shut down on the side of the highway (lack of parking for trucks is a real issue), then I dont think thats helping safety much.

Being able to shutdown where I can get a parking space at a place with a bathroom, a shower, and a hot meal is better than on the side of the interstate, the next best place is a rest area on the side of the highway.

Particularly in the case as a parallel commenters noted of a driver who runs out of hours 20 min from home.
take with a grain of salt, I only have minimal experience with both, but I really like the fact that pulumi is code over terraform config. Keeps me in the same toolchain, no need for extra plugins, etc.
When your LLM is fed by blind Buddhist monks.
‘Am I Ugly?’ This May Be the Only Place to Get an Honest Answer
What follows is meant to be descriptive rather arguing "my camp is right".

> JavaScript's redeeming quality is that it is ubiquitous due to being used by browsers.

JavaScript has other properties that make it very adept at a wide range of web app usecases. Languages exist not in isolation, but have a dynamic environment w.r.t. domains they excel in, tooling, mindshare, programming in the small and the large, comlexity, etc.

> I don't think anybody credibly claims it to be a language we would want to use if we were to redesign web programming from scratch today

Dart has tried.
Many languages transpile to JavaScript (and have for a long time).

Yet, JavaScript and TypeScript are some of the most popular languages on the planet.

If the web is still around in 20 years, it will be interesting to see whether another language has taken center stage. I'm not quite holding my breath, if only because even with transpilation being around for many many years, no other language has overtaken. I have a hard time seeing WASM changing that outcome in a meaningful way.
While llama is probably not useful in any meaningful way to the DoD, it's nice to see Meta take a stand.
Not so much a big user of Postgres. But, out of curiosity, does Postgres have a way to run async queries _and_ have them run in the background with lowest priority such that it doesn’t affect other important queries and transactions?

As an example, a way to run an upsetting query about a cosmetic change in big table without locking rows for other transactions we care about on the same table..?
See my reply here: https://news.ycombinator.com/item?id=37175685

Short version: it's robust to staleness and concurrency, which is important in distributed settings ("find the best" is hard to do when "best" is a moving target).
https://archive.is/IkjhU

Wouldn't knowing your swipe rate on Tinder, compared to the average swipe rate for your sex, be an alternative?
Could you speak more to the dart, and specifically the "Java level of boilerplate and code generators"?

I've used it a bit but I haven't found it very boilerplatey in general, so I'm interested in learning what contexts you run into that.

I'm assuming you're using it with flutter?
The series on building a parser combinator from scratch has been one of the most valuable things I've read and worked through. A lot of concepts and mechanisms from that have been just incredibly useful working with typed languages in a functional style. I still will never know what a monad is tho.

https://fsharpforfunandprofit.com/series/understanding-parse...
There are two use cases here which are different.

Inactivity session termination mostly just protects against someone using your device if you leave it temporarily unattended.

Absolute session termination is a different control, which protects against compromise of the session token. So someone who hacks the device and gets the session token can only use it for a period, after which they would need your credentials to get another one. This is usually longer than inactivity termination.
Cities like London could absorb pretty significant population growth with high quality, high density home building of the right type, in the right areas as long as they also invest in infrastructure and services too.

Obviously making up the infrastructure and investment gap in other medium and large UK cities might make more sense. Most of the UK’s next 10-20 cities by size (at least) could probably take on a doubling or more in population while also becoming wealthier, easier to get around, and better overall for everyone who lives in them.

Just needs competent government and proper investment in the right places, which have sadly been far from forthcoming for a while now.
Yeah after working with cloudformation for so long I really despise working with anything else. Terraform isn’t bad but it’s still much more verbose than cloudformation
they are predictable because they grew up in japan.

they just xenophobic -- literally the fear of the unknown.
>Both are vehicles designed to take things into space for crying out loud!

They have quite different fairing capacities, in a playfield that does not scale linearly.

It is like saying that the Boeing 737 is cheaper than the 777, and we can compare them because they were both designed to fly people in the sky.
If I wanted to create a microvm with 4G RAM and 2CPU or 4G RAM and 8CPU would that work? Or is it currently only possible to create 1:1 vms?

Also wanted to note, that I came to this question by reading the website explanation on the benefits of microvms, to me it seems to heavily favor the operator vs the customer by touting the oversubscription capabilities. This feels like something that should not be presented front and center to prospective customers?

With lack of nested virtualization and compatibility with qemu cloud images I also wonder how much benefit is really there for microvms. The fast boot time feels like the only benefit, but how much faster than qemu when you add on API overhead. Offering both hypervisors and have the customer choose could be interesting.

Congrats on the launch and thanks for sharing!
> so having a no-GIL multithreading is useless.

Wrong. Processes pose hurdles via the limits of IPC and control between processes that Threaded applications don't have to bother with. There are ample examples for this in the PEP.

> What Python need is better support for placing native instances in shared memory.

If that were the case, then threading wouldn't exist in the first place. Shared memory is still IPC. It still requires context switching into the Kernel. It still poses problems that threads don't have.
Is there a different link that shows they are prohibiting all use by the Department of Defense? The linked page is their acceptable use policy. From that policy it appears it is fine for the Department of Defense to utilize it, as long as it is not for one of the prohibited reasons.
> Nonsense, defence in depth is a core security principle. You should not rely on a single control to protect you.

And you should not prioritize security over the goal of the product.

The conversation is a discussion of relative value and tradeoffs. Does increasing security make the tool as a whole worse? Sometimes - the answer is yes.

I have a nice set of front windows, but that means a risk of someone breaking through them. I accept that risk for the windows - the extra light and visibility is well worth it, and the windows are not the only way in. Compare to short sessions.
Yeah, mostly true. But were you figuring that the short expirations were for actual security, or for theatrical security? They can be extremely useful for the latter.
And the government provided over $1B..

Search for the word 'excessive'
https://historycollection.jsc.nasa.gov/JSCHistoryPortal/hist...

Griffin is arguing against himself there in giving all that money-- covering his tail. The important part if you read the contracts is a majority of the money was awarded before SpaceX built any hardware, they just had to present plans and half the money was transferred. Elon never risked his own money as all the costs were covered up front and if they failed they would only lose the other half of the contract.

Elon was very scrappy and cheap in the initial builds because he didn't want to risk his own cash.
Thanks; you confirmed my suspicion. This is not a useful number representation.

> When n > numargs, |n|(args...) ignores all its arguments and halts

I would say it reduces to a term of the form \_. \_. M that is definitely different from both False and True.
Sargablock: Bricks from Seaweed
Except if the cookie is copied elsewhere, then that cookie/session needs to be expired?

(but yes, expiring locally reduces the window for copying that cookie)
The file handle is the PID of the process that opened the file, it monitors the process that asked for the file to be opened. and if that process goes down the file will be closed.

You can also add an else in the with so it looks like

with {:ok, fh} <- File.open(filename),
{:ok, contents} <- IO.read(fh)
do
contents
else
{:error, reason} -> File.close(fh)
{:error, reason} # this will return after the file has been closed
end

or maybe you would prefer to open the file, and pass that into the with and either way close the file. I just used IO as an example because they return nice {:ok, x} or {:error, reason} tuples, but this works with any pattern.
> If getting a company car, you are in for some real tax hell.

Only if you want to make use of tax incentives for company cars. It's easy to complain about the downsides and ignore the upside. You can just not put it into your tax declaration, then you don't have trouble. Oh then you don't get the money?

> Meanwhile, when I talk to my friends in Spain they pay less than 1.000€/year for accounting for an LLC (S.L.) with not even close the bureaucracy.

Their cost of living is likely also a fraction of where you lived in Germany. (I'm guessing a larger city with high cost of living.)
The properties don't have to be 'state' per se; they can also be used to store metadata about the function. e.g. you could have a function with 'domain' and 'range' on it, or an 'integrate' method.
That's basically my use case, and I'm quite happy. Battery life for me usually is somewhere between 6-7 hours. The keyboard is pretty decent - not quite as good as a Macbook keyboard or similar low-profile keyboards (e.g. Logitech MX Keys line), but good enough, though the oddball arrow key configuration and sizing for the right-hand Shift and Fn keys is a frequent annoyance. Sleep and wifi auto-connect work well for me on Ubuntu 22.04 w/ KDE Plasma. Can't vouch for bluetooth headphone usage, because I don't really use bluetooth with this device.
Hey! Yeah my email is in my profile. Feedback is super appreciated!
Private companies over the military and sovereign nations, isn’t there a famous Zuckerberg quote about that?

Ah yes…

“Companies over countries,” he told me once, as we discussed a blog post about Facebook’s goals. “If you want to change the world, the best thing to do is to build a company,” he added.

So he is being consistent (perhaps foolishly).
Why go to uni for 5 years to get a job in systems programming if you are talented? That seems like an awful waste of time. Learn C/C++, do 2 courses on operating systems and 1 on algorithms and data structures. Work on open source systems programming projects to get spotted. That's 4,5 years saved.
It's so good right???

Then we can branch out to different cereal types for different genres... Count Chocula -> Serial Mysteries.

I wish I didn't already have a startup. This one has been a dream for me since somebody spitballed it in 1999.
Checked exceptions are one of the main reasons I’m sticking with Java, even though Java lacks the ability to abstract over sets of checked exceptions, which does cause some inconvenience. It’s unfortunate that no other mainstream languages have been taking that approach.
Here is an example in the standard library: https://pkg.go.dev/slices
As a side effect of getting older, you're eligible to have friends that you haven't seen in very long periods of time. Just because you're old enough for that amount of time to have passed.

I was talking to my grandparents a number of years ago and they were talking about some good friends they have. Which they haven't seen in over 40 years. This is sometimes just a thing that happens.

ALSO, 'ask not for whom the bell tolls'. I didn't even know about this person until now, but I still feel bad for her.
The whole initial concept is so bizarre to me. The point of owning a grand mansion is to show it off. If it is identical with all the neighbours then that undercuts the mansion's value.

Honestly it feels like someone thought: "Let's make a neighbourhood for rich people." and didn't quite think it through what those people will need or want.
Neither does “Your password cannot match your previous 1,000 passwords”. Let’s just keep everyone’s password and previous password around in a database shall we?
The problem here is that you have provincial level leaders with a 7th grade education who are dictated to up their GDP to a certain number. They know that building something will do the trick and at the same time prop up their personal unofficial finances via bribes and whatnot. So it continues...
> You’d better know how to touch type. The Cyrillic-ish alphabet designed for Acronym by Rudnick is all part of the theme

Any high res photos of the keys/lettering?
WhatsApp will let users send ‘HD’ photos
> Given that the major lenders and banks are state-owned , this essentially means that the government bears the loss through these institutions (what else can happen anyway??) .

All major banks ( 'too big to fail' ) are state owned. The only difference between china and the US is that china's state also directly runs the government whereas our state hires out the running of the government to popular clowns. It's essentially the difference between owner operated business vs employee run business. But fundamentally, it's the same thing.

> To address these challenges, the Chinese government has enforced exit bans and placed these individuals under strict supervision. They are often required to return these funds to China, potentially under threat of reduced prison sentences. This sounds not right... but yeah... it is China.

What is so special about china here? 'Exit bans' exist everywhere. If you commit serious financial crime and are deemed a flight-risk, your passport gets seized and you are banned from leaving the country. This happens in every country but for some reason when china does it, it's deemed 'special'. And getting a reduced sentence for cooperating with the government is the norm everywhere. If 4 people commit a crime, it's basic strategy of the prosecutor to offer 1 of the criminals immunity or reduced sentence to testify against everyone else. Once again, what's so special about china? It's amazing that basic standard legal process is consider special just because china does.

> A full government bailout, in the Western sense, does not appear to be on the table.

There is a full government bailout or not. Nothing 'western' about it as if there is a common 'western' strategy about anything. Governments all over the world do full bailouts, controlled or strategic defaults or stay out of the issue depending on the severity and systemic importance of the situation.
I’m disinclined to treat CHATGPT as a source of information without a reference to the source of that explanation.
i dont know if it would turn my stomach, but i have never had an experience in an airport that i'd describe as good -- best case, described as "not bad".

its a fundamentally miserable experience, and the stealth fees, high costs, and general bullshittery make me hate it.
It broadly prohibits "military, warfare, nuclear industries or applications, espionage, use for materials or activities that are subject to the International Traffic Arms Regulations (ITAR) maintained by the United States Department of State." There is no other specific mention of the DoD.
Round robin can work very well when the variance of task sizes is small, but degrades quickly when the variance of task sizes becomes large (i.e. there are some tasks that keep servers busy for minutes, and some for milliseconds).

In distributed systems with large numbers of producers (like one of the systems Mihir has worked, AWS Lambda) round robin essentially degrades into random placement as the number of producers increases.
I live in Ottawa and have been donating there for years. Just wish they would send me less junk mail.
The US can absolutely use it, if they want. US law permits them to violate the license; Facebook can sue to be paid costs ("recovery of his reasonable and entire compensation for such use and manufacture") afterwards, but they can't really prevent its use.

https://www.law.cornell.edu/uscode/text/28/1498