skysight-inc/HackerNews huggingface dataset:
> Stay calm. I can’t tell you how much I wanted to curse out the Fizz team over email. But no. We had to keep it professional — even as they resorted to legal scare tactics. Your goal when you get a legal threat is to stay out of trouble. To resolve the situation. That’s it. The temporary satisfaction of saying “fuck you” isn’t worth giving up the possibility of an amicable resolution.

Maybe it's because I'm getting old, but it would never cross my mind to take any of this personally.

If they're this bad at security, this bad at marketing, and then respond to a fairly standard vulnerability disclosure with legal threats it's pretty clear they have no idea what they're doing.

Being the "good guy" can sometimes be harder than being the "bad guy", but suppressing your emotions is a basic requirement for being either "guy".
Yep, if the CFO has this kind of power the R&D pipeline is essentially being run by an accountant.

Remember when wall street was complaining about how Bezos was running the company? If an accountant was in charge Amazon would have been quarter packing to please wall street, and would be much smaller/out of business.
I'd love to know how much of the preparation for this release was hiring and training a sales team for it.
https://en.wikipedia.org/wiki/Monopoly_on_violence
Lucky he didn't eat something like a polar bear liver
“lower foot traffic” would cover work from home, no? Also I’ve been to this store and the area around it is nasty to the point that I no longer take my children there. Yes, retail is having a hard time in general but my goodness just go walk down that street - do it.
Because the truth is, each deal is custom packaged and priced for each enterprise. It's all negotiated pricing. Call it "value pricing" or whatever you want, prices are set at the tolerance level of each company. A price-sensitive enterprise might pay $50k while another company won't blink at $80k for essentially the same services.
> It's difficult to communicate and explain

Yes, it is. And it's not getting easier is it?

Nordstrom was there for the tourists. But SF tourism hasn't recovered as well as conventional group-think imagined.

When a tier 1 operation like Nordstrom bails it rings out like artillery fire for all the lesser operations. We're officially well past "didn't want that company anyway," aren't we?
That place lost a dramatic amount of foot traffic. But all these things have been a long time coming. Many big employers were already moving out of SF when the pandemic hit. PG&E and Bank of America were already out. Citi and McKesson are both going. And all the tech companies, of course. SF is a pretty parochial city and has attempted to keep local homeowner taxes as low as possible by extracting it from employers through payroll and gross revenue taxes. But ultimately the city as it was financially shaped was only possible through the employers.

Unfortunately, SF locals do not see the link between things like a gross receipts tax and Friends of the Urban Forest losing funding so we're here.

But I think it's overall a good thing. I'm not pro-austerity: we should spend on things. But now SF will be forced to spend on things that return.
You are leaving on the table lots of fun due to it being unmanned. How do you resist the temptation of installing a one person gondola and hop in there?

On the economics and moat: You said that it's cheaper than helicopters but would it be cheaper than manned auto-gyros/gyrocopters? What about military drones and even civilian drones which will benefit from the trillions of dollars being dumped into battery technology, that will make them capable of flying longer distances? Would blimps be competitive against those?

Finally. I want to ask about forest fires, would your blimp have the economics to be used as surveillance tool against forest fires?
I read it and I'm pretty much the most critical person I know, I didn't see any problem with the style, I don't know what that guy's talking about.
Strangely, I find theories, at least up to junior graduate level, amazingly useful in building systems.
omg, it does images, too? Absolutely pointless, beautiful work here :D
Sure, but we're talking about the time when servers were pets, not cattle.
Swedish government removes nuclear power promise from website
I wish these studies would include the type of diabetes they mean. Type 1, 2? Both?
People don't want to RTO even in places that aren't downtown SF.
I maintain a minor side interest in Awk, along side Lisp and other things.

I developed cppawk in 2022: https://www.kylheku.com/cgit/cppawk/about/

cppawk extends Awk with preprocessing.

There is a loop macro that supports a vocabularly of clauses. Clauses can be combined for parallel and cross-product iteration. And they are user-extensible. By writing five simple macros, you can define a new clause.

Something potentially useful if you use Awk.

Cppawk is documented with multiple man pages, and covered by unit tests which run with gawk and mawk.
Perhaps before killing someone with a comment, you should provide examples to back up your vitriol? The guidelines were reposted a mere four days ago...

The writing felt fine to me, if a bit terse.
Painboard: Extract and group customer feedback, now with Zapier support
This is really well put!
why should they solve it? if it's not a core competency, just buy it.
Bugs in the interface?
High prices reflect demand greater than supply. As much as I can also find things to complain about in urban living, it does not suffer from a lack of desirability.
Thanks for writing Modern Fortran!
Dumping audit reports with a sea of red on delivery teams for things largely low-risk in reality and out of their control rarely does any good.

I'm not up on EKS-ELB these days, but if the nodes only allow ingress to NodePorts from the ELB, then it seems like those findings should be suppressed in most orgs.

If the SecEng team was partnering with the delivery team they'd know that before sending the report.
Premature Optimization: Universally Misunderstood
they should just create another consumer tier with those. there shouldn't be a need for individuals to want the Enterprise plan.
isn't microsoft unable to scale their version of chatgpt 4 ?
>salt cod was very common in an area I used to live

Cod was much more common period prior to 1992.
In my experience (31 years of C++) it is much more likely that problematic pointers will be non-null but also invalid.
I feel like this article reflects an overall positive change in the way disclosure is handled today. Back in the 90s this was the sort of thing every company did. Companies would threaten lawsuits, or disclosure in the first place seemed legally dubious. Discussions in forums / BBS's would be around if it was safe to disclose at all. Suggestions of anonymous email accounts and that sort of thing.

Sure you still get some of that today. An especially old fashioned company, or in this case naive college students but overall things have shifted quite dramatically in favor of disclosure. Dedicated middle men who protect security researcher's identities, Large enterprises encouraging and celebrating disclosure, six figure bug bounties, even the laws themselves have changed to be more friendly to security researchers.

I'm sure it was quite unpleasant to go through this for the author, but it's a nice reminder that situations like this are now somewhat rare as they used to be the norm (or worse).
One should still add them up, the results may be surprising

(One should also account for the energy spent bookkeeping all energy expenditure)
In short, if they are a company and are not 100% secure and they say they are then they are committing fraud. The person doing the testing is providing the evidence for a legal case and no amount of legal threats change that.
Exxon Predicts World Will Miss Climate-Change Targets
In the UK a transfer of ownership does need some token payment at least but a contract isn't that nor requires one (IA most definitely NAL).
IANAL, but:

1. threatening violence is explicitly a crime

2. at a higher level, threatening violence is a crime because the underlying act (committing violence) is also a crime. threatening to do a legal act is largely legal. it's not illegal to threaten reporting to the authorities, for instance.
That’s some serious hardcore, uncompromised performance-art right there.

Thanks for posting!
Doing a portfolio site can help. I would probably suggest spending your free/learning time doing something productive, make something you want to see... maybe create a hobby community site from scratch, with the source/ci-cd releases from github. This will demonstrate that you can understand backend, front end, database as well as ci/cd and version control systems. The fact that you operate a support community for a hobby (doesn't have to be technical) can be a bonus.

That's just my though... you can probably target one of the free platforms out there, such as AWS or Google's free tier, use another tech that lends itself to a free tier such as Deno, cloudflare, etc. If you have some spend, then DigitalOcean, Linode or another VPS may be a decent option as well.

In the end, make something that scratches an itch and demonstrates the skills you are likely to need. You will probably make mistakes, but getting something made accounts for a lot. I must admit, in my hobbiest activities lately, I have several projects in varying states of stalled out; Don't be like me. ;-)

Mostly lack of motivation, partly analysis paralysis where I have too many things I want to explore. Favor making any decision and push forward. It's a good habit to get into, and I'm much better at it when someone else is paying me vs working on my own.

Aside: (Admin/Mod) if someone could add the [AskHN] tag to the title...
Yep, Scrum can't fix bad management!
> SF is pretty much always about the current day.

SF is often speculative fiction that extrapolate current trends into the future - frequently taking them to their logic conclusion - to explore and critique. Good SF anyway.
Ham radio license (in the US) allows up to 1500W on most bands.
I'd be surprised if OpenAI didn't offer "and we'll run it on EU servers for you, too" as part of a $1m+ deal.

Surprising it didn't make the initial launch announcement though.
When it comes to the subject of mental health, the FAA is absolutely full of shit, and everyone involved knows it.

The same goes for the VA, though that situation seems to be improving gradually, at least on a case-by-case basis.

This story is yet another instance of an unelected federal agency using bullshit from another unelected federal agency to drum up FUD; all in order to make themselves appear to be useful.

We can all see the perverse incentives that are driving this situation. We can all see the outcome of this system. It's well past time for a change.
Gmail supports emails for kids. Adult owns it and can link to the kid account.

https://support.google.com/families/answer/7103338?hl=en
I saw it, but it only mentions "applications" (whatever that means) and not bare documents. Does this mean companies might be able to upload, say, PDFs, and fine-tune the model on that?
Yeah, don't worry about the above complaint. The writing is just fine.
Will they include their weight tables with the price?
I dunno. Doing basic due-diligence level investigation of law enforcement policy and effectiveness first is a good idea.

I'm a fan of UBI, but you may also want to do a web search or two before saying UBI should be 'U'.
>The truth is Scrum was never a magic bullet and it is downright harmful for many projects. It is useful for highly predictable projects where research component is negligible, for example, CRUD websites AND where you are stuck with unmotivated tier-3 talent who failed to get job at insurance company.

Nailed it.
You’ve not worked with Salesforce or Oracle ISVs…
Your sentiment is silly. In general, with important caveats I will not state here, you can of course voice a threat to do an action that is legal (file a lawsuit), and may not voice a threat to do an action that is illegal (physical assault).
Walt Disney Pictures VFX Workers Move to Unionize
The Stanford Daily article says “At the time, Fizz used Google’s Firestore database product to store data including user information and posts...Fizz did not have the necessary security rules set up, making it possible for anyone to query the database directly...phone numbers and/or email addresses for all users were fully accessible, and that posts and upvotes were directly linkable to this identifiable information....Moreover, the database was entirely editable — it was possible for anyone to edit posts, karma values, moderator status, and so on."

That's wild!
A lot of Swedish words that end in -oar (like “reservoar”, “memoar” etc) are all french import originally ending in -oir, so if you start digging into words ending with -uar in Romanian you’ll probably find more :-)
agreed, and I can't wait for gpt4 to have great competition in terms of ease, price and performance. I was responding to this

> something that should just be completely on-device or self-hosted if you don't trust cloud-based AI models like ChatGPT Enterprise and want it all private and low cost
There is just nothing out there, open source or otherwise, that even comes close to GPT-4. Therefore, the value proposition is clear, this is providing you with access to the SOTA, 2x faster, without restrictions.

I can actually see this saving a lot of time for employees (1-10% maybe?), so the price is most likely calculated on that and a few other factors. I think most big orgs will eat it like cake.
Seems like legal terrorism.
I found a bit of humor in this:

>Does she use Siri/Alexa/Whatever regularly? ... Jeopardy! is great because you can be blind and still follow 98% of it.

you just suggested Alexa Trebek!
The Orange Pi looks interesting, that's another good option it seems. Thanks for sahring.

I was wondering if there's already a more "off the shelf" solution where you just initialize them, ship them out and then be able to deploy Docker images / packages to it easily.
Do you have any example for a project with 40k entities? I'd love to see how they handle the complexity.
Could you go down a rabbit hole a bit on this part of your response? "[Manufacturers] could design their packs to be more reliable and easier to repair."

What is it, if you were a state or local government, that you would force on the industry?

Also, what happens to the remaining "good" cells when you recycle rather than repair a battery? Are they kept in tact?
jokes on them, it's been years since I used skype!
Elixir Saves Pinterest $2M a Year in Server Costs
Also I'd heard anecdotally on the internet (Ethan Mollick's twitter I think) that 'code interpreter' was better than GPT 4 even for tasks that weren't code interpretation. Like it was more like GPT 4.5. Maybe it was an experimental preview and only enterprises are allowed to use it now. I never had access anyway.
Oh yes. I'm willing to bet that it involves things like progressive discounts on # of tokens or # of seats, etc etc. This is just how you get access to the big bucks.
I never said Nim was unique | older than awk. While I cannot make you read my cousin comment to understand I meant "new" as clarified-"different" [1] or click through any links, I can perhaps non-redundantly emphasize that the mentioned approach "works" not just for Nim, but for any language, C & Go (impls refd in mentioned `rp.md`), and Python in another comment in this comment thread: https://news.ycombinator.com/item?id=37295399 (maybe even with `eval` there!)

Only, the approach "works" with differing levels of "success" for different use cases / contexts. It is true (whichever) shell language is still there to differ in shell 1-liner cases. That is also true of sed / awk / perl / ... If you don't want to click through on `rp.md`, you could also read Ben Hoyt's article on his Prig if you like: https://benhoyt.com/writings/prig/ discussed on HN a while back https://news.ycombinator.com/item?id=30498735

It's not actually that different from your `cppawk` that you mention elsethread.. just maybe rotated 27 degrees away in "idea space". ;-)

[1] https://news.ycombinator.com/item?id=37293475
Hetzner is fantastic. We switched from Linode to Hetzner over a year ago for our website and backend, and have been running with zero downtime. The pricing is also pretty darn cheap. Hoing they expand their US locations!
Nice video! I was genuinely surprised to see how far PHP has come since I last touched it.
OK, let me put it differently: you cannot reason about safety in those circumstances in the way you can when "unsafe" has not been used. And since reasoning about safety (or perhaps more accurately, not needing to) is one of the raison d'etres for Rust, that's a bit of a hit. Not huge, but for those of us close to metal of some sort, it's a bit of a hit.
The reality seems even worse. 1M+ cases of tinnitus or hearing loss linked to these earplugs, claims increasing double digits YoY.
>other than profit maximization

Are you aware what the entire point of a business is?
At least in California, if your employer substantially changes your work duties or schedule, then you can very likely collect UI. Your advice to take better employment options is still the best advice though.
Elections are coming soon.

Can't prosecute the voters if you want to be reelected.
> Unless there is a contract with the employee, such as a collective bargaining agreement with a union, there is no legal reason a business has to pay an employee severance in the US.

Who on Earth is working without an employment contract?
> It feels like you're asking people to only create Postgres, but SQLite has a perfectly valid use case as well.

I don't mean this to be a "well actually" comment, but because I found it interesting when I learnt this a few weeks ago - some limits for SQLite [1] are actually higher than the limits for Postgres [2] (specifically the number of columns in a table and the maximum size of a single field).

1 - https://www.sqlite.org/limits.html

2 - https://www.postgresql.org/docs/current/limits.html
The really short answer: If the wet-bulb temperature in your basement is sufficiently low, then yes. Otherwise no.

Note that for a small poorly-ventilated basement, the humidity will rise from respiration, thus increasing the wet-bulb temperature. For a well-ventilated basement, the air temperature will approach the outdoor temperature, thus increasing the wet-bulb temperature.

If you have a giant, well-shaded, pool of water, the water temperature will usually be below the peak air temperature (water has high thermal mass, so it will take a long time for it to come up to the ambient temperature, even at high humidity, where evaporation effects are negligible) so that's another non-AC method of staying cool.

In any event pools of water and basements don't scale to densely populated areas.
By "acceptable yield" I mean having the hope of obtaining one working CPU after a large number of failures, i.e. I was not referring to "acceptable yield" for a commercial operation.

Making NMOS ICs has been impossible for many years even for the biggest companies regardless how much money they have spent (because all their attempts were contaminated with various impurities that ruined the MOS transistor characteristics).

While now it is easier because we know the tricks, that is not helpful for a small-scale operation, because the techniques required for making good MOS transistors are very expensive. Besides a clean room, a large number of chemicals with extreme purity are needed.

The bipolar ICs, like the 7400 series or the analog ICs, were much less demanding.
It is 80 for "fixed form" (card image) source files. It is 132 for free form modern source, but adjustable on the compiler command line. LLVM Flang uses the line length only for emitting optional portability warnings.
Thanks, works nicely and easy to set up.

Is it possible to use GPU for this? With R9 7900x and 32GB RAM it takes 15-30sec to generate response. I have a 6900XT which might be more suited for this.
I had the same thought. Then I wondered why they even bother with the manual sales process. Enterprises will buy it anyway.
According to what I learned in grade school history, the rivalry goes back the the "Toledo War": https://en.wikipedia.org/wiki/Toledo_War

I wouldn't be surprised if early Michiganders had an inferiority complex due to rough pioneer living in a nasty swamp, and if Ohioans later resented MI's growth into an industrial powerhouse during the early 20th century.
If it goes to the direction of Microsoft Copilot, then you can check out the recent announcement. Microsoft currently estimates that 30/user/month is a good list price to get „ChatGPT with all your business context“ to your employees.

https://blogs.microsoft.com/blog/2023/07/18/furthering-our-a...
Look at it from a consumer rights angle. A product is advertised as having some feature ("100% security" in this case), but nobody is allowed to test (even without causing any harm) if that is true.

It's effectively legalizing fraud for a big chunk of computer security. Sure fraud itself is technically still illegal, but so is exposing it.
I found this story about the same situation (linked from the OP) easier to follow: https://saligrama.io/blog/post/firebase-insecure-by-default/
I personally hate them. I've never been to one that wasn't insanely overcrowded. I want to enjoy myself, not hate everything about the day.
Einstein-Rosen bridge from the minimal length
Doesn't have to be a business... I made a similar suggestion specifically mentioning a hobby based community as the target audience. It's mostly about scratching an itch and creating something with the touch points you're likely to experience. Front end, back end, api, data storage/persistence, source control and ci/cd deployments.

You can do all of these things with free and/or nearly free platforms. Currently playing with Cloudflare and Deno, which both have some cool factors/features.