skysight-inc/HackerNews huggingface dataset:
This is an amazing idea and I would only buy a product that has this stamp on them. I would put some additional triggers into the publication of source code as well, notably if the company goes out of business. I would also put some kind of timer and renewal process on it, like a company needs to recertify every 1-5 years (pros and cons to different time lengths) and that they have indeed been providing actual updates (and not just fake ones) and actual support.
> Landlords are price takers because supply is fixed in the short to medium term.

Quantity supplied is not fixed in even the short term, landlords choose whether to let vacant units or remove them from the market, e.g., for upgrades that might improve their relative position in the market when re-let but prevent letting them immediately, based on market conditions including adequacy of price.

There's a limit to how high quantity supplied can be in the short term, but underneath that cap it has the usual slope direction of a supply curve.
I've been watching WASM from afar, and it's my understanding that it's not a JS killer because it doesn't have direct access to the DOM or to most DOM APIs. I'm curious if there's another reason I'm missing?
Anecdata based on a sample of two: If you find things he's interested in and read to him, he'll eventually take off on his own. At least, that's how it worked for me. After my mom had read to me who knows how many times, I can still remember the thrill of realizing I was reading the book (about a rocket trip to the moon, late 60's) myself. The habit has sustained me in many ways since then, but it didn't feel forced at the start, which helped, IMO.

My own son is having difficulty with reading, among other things. The thing that gets him going is recognizing he needs to be able to read to serve some of his other goals. So, again, interest.
> All in all your points are mostly valid (i don't fully understand all your arguments about versions as integrity should be handled by git)

If you depend on github.com/owner/foo@1.0.0, there's nothing stopping owner from force pushing to foo to override an existing version. The way it can be mitigated is if your dependency declaration contains a hash, so Cargo.toml files would be closer to foo = { url = "github.com/owner/foo", tag = "1.0.0", hash ="$HASH$" }.

> there no reason on the world everybody writing rust should be trusting the same entity

Note that you can today depend on git repos, local paths, or on alternative crate repositories. In practice the only people doing so are either applications (for the former) or large air-gaped organizations (for the later).
> doesn't it make IoT devices incredibly insecure for normal users

How secure or insecure a device is is unrelated to whether its source code is public.

Disclosure: I might be biased on this, as I'm a reverse engineer.
In fifteen years of contracting, 20+ clients , I've never had issues or questions about my hours. All software project based work on projects that span months to at most two years.

Up front, the hourly rate is agreed to, the expectation that I typically bill forty hours a week is set, we agree that overtime is only undertaken with written permission. I tell them I don't bill for lunch or breaks and that if they can't provide me with work to do, I still bill but that I inform them persistently when undertasked.

I only estimate work by giving complexity numbers. They all ask well how long does that take??? I say over the last x months, my average complexity points accepted in production is y points per two week period. So expect this five pointer to be done in a week plus or minus two days.

Do you need a better estimate? Then it will cost you two unproductive days for me to fully spec out the work and I'll need three hours of your time for this feature to give you an estimate that has a tighter variance.

This is the way it's done folks. I know what I make, I can easily have a life, wife, family. Companies make sure they have me work on most important things first and they end my project when they feel it does enough of what they need it to do.

I'm visible, I show real progress frequently and they get value out of released features early on and continuously throughout the engagement.

Sometimes I lower my rate for equity, people I enjoy working with, working on tech or a business domain that interests me. I'll of course raise it for the opposite.

In the fifteen years I've had three weeks in 2008 where I couldn't find work. I've billed between 95-155/hr CAD. Mostly enterprise custom applications. Billing systems, engineering process systems, banking apps, trading apps. Typically lead dev roles. Working in a Canadian city or remotely for USA companies. C#, ruby, scala, python. Not a great programmer, I'd get laughed out of the room on a leet code exercise but I've repeatedly delivered projects and systems where the previous teams have failed. There's only been a few of the 20+ projects that haven't been rescues.
This will be controversial, but the one thing that worked to get my kids to read every day was to impose a strict zero screen time policy.

edit: ages 3-9
It makes writing the desktop apps easier, instead of using a separate framework for the web and another one for the desktop (which costs engineering time and money), or, again, shipping an entire browser per app (which saves engineering time and money but is a bad experience for the end user). You can't escape this complexity, there's no way around it if you want to make cross platform apps.

Now if you just want to make a website or webapp (with no intention of making it cross platform), stick with the DOM, it's not going anywhere.
I don't think the people most worried about AI as an existential threat are very concerned about assigning blame to the AI. They are just concerned about the damage, full-stop. They are worried about AI companies making continuing progress in capabilities research without ensuring adequate safeguards exist alongside. It would be criminally irresponsible to build a nuclear reactor without very carefully considered safeguards, automatic shutdowns, failsafe fire extinguishers, and numerous other redundancies, independently verified by licensed engineers. Simply putting that nuclear plant in the hands of well-meaning operators is not enough.

I haven't seen any AI companies acting with that standard of care. They seem to instead be caught up in a breakneck race to release products, attract investment, and maintain dominance, regardless of what their PR departments say. And so far the regulators have mostly been happy to leave it to them to figure out what safeguards are sufficient.

That said, it certainly could be the case that companies like OpenAI are pretending to worry about this issue in order to gain regulatory capture, or as you say, to somehow absolve themselves from responsibility for the behavior of the systems they create. (As if that were possible!). It certainly seems likely that they would co-opt the legitimate concerns of third parties for their own benefit. And perhaps rocketry companies also exaggerate the existential risk of asteroids. But while we can question the motives of certain actors, the existential threat may exist all the same.
A friend of mine works for the ONS and the notion that anyone within the entire organization would lift a finger to help the incumbent Govt is laughable.
That's the current status quo. In general, if it's not published (with peer review) its reflection of reality is suspect from a scientific standpoint.

"... Anyone who says differently is selling something." ;)
So Linux takes government's side, not user's?
Blogpost about how logging is hard, authored by logging SAAS vendor.
Paragraphs end with "it’s time to sign up for a SaaS and make it someone else’s problem."

The fun part is blog post mentions actual logging anti-patterns, like "Someone logged in a loop with 2000 iterations per request" but their solution is... you "sign up for our SaaS". Yeah, that's not gonna help.
> Any examples of the tech world putting in significant effort to silence the viewpoint that men have penises?

Dorsey era's Twitter, Reddit.
Why would it be difficult to sell a stolen Leica? Do they have some sort of cloud backed locating thing installed?
>> The answer we're probably going to go with is that the device is 'leased' to the customer. It's part of their subscription. <<

1000% wrong answer, unless you straight up front sell a service with an installer making a site visit to deploy chattels of service.

such as satellite television, or DSL internet.

when you swap handfulls over the counter before any contractual agreements i.e. clickthrough TOS , you are selling a hardware, that means user ownership.
> Banks have no clue about 2FA/ MFA, they will happily put the bank app and the custom TOTP generator/ "key"-app on the same phone or, as a fallback, send SMS to the same phone the bank app is on.

This. My bank in France, BNP, does that. Every so often, when I connect to the app on the phone, it says something similar to "in accordance with <some regulation> a strong authentication must be made every <number> of sign-ins". You're presented with only one button that says something like "ok". You press it, and you're in business.

This is after requiring me to type in my pin, which must be precisely 6 digits, and some sequences are forbidden, so you can't type 1234 or similar. It doesn't seem to interact with the secure enclave in any way.

If this number of sign-ins is reached while I'm on a PC (which is the most likely), it'll send a confirmation request on the phone, so at least it works there. When paying online, I'll also get a confirmation request on the phone app.

On my professional account, with the same bank, the situation used to be exactly the same. But a few months ago, they switched away from that to sending a confirmation code via SMS for bank transfers. Credit card payments still have the app confirmation request.
This is a great example of why E2EE is important even if you trust your government.
I would start with Engineering Your Start-up by James A Swanson and Michael L. Baird. It's written for someone in your position. It should work as a good base to build off of.
In another era "building on X to sell something else" would be still considered "embrace, extend, extinguish" (in the actual, originally intended sense), depending on the market power of the players involved.

At least if the "something else" isn't free software.
There's the Babylon Bee deplatforming that led to Musk buying Twitter. The Babylon Bee called a public official who is a biological man a 'man'. So Twitter deplatformed the Babylon Bee.
Do we "obsess over perfect accuracy in top 10 for vector dbs"? I don't see a ton of data that points towards us (vector DB ppl) building towards traditional TREC/BEIR #s.

I do see lots of us in the vector DB space demonstrating on real data the speed and semantic retrieval capabilities of vector DBs. Not many of us publish traditional IR benchmark #s simply because vector search is a pretty different ballgame than traditional keyword/BM25 search (as you know).

However, since most search practitioners have developed their mental models around things like TFIDF and BM25 + Learning To Rank, many vector DBs tailor their language to fit that heuristic.

If you look at vector DBs on their own -- I like to look at them as a piece of infra to use in conjunction with pre/post processing + RAG + BM25 + whatever else you want -- you'll find that measuring their accuracy against traditional IR benchmarks is a bit like fitting a square peg into a round hole. It almost fits! But not quite.

I think one of the starkest differences between the vector search and traditional search when it comes to retrieval evaluation is the great difficulty involved in creating judgment lists to measure vector search performance. Since vector search inherently retrieves documents that are approximately conceptually similar to a query, the initial recall set, especially with an IRL dataset (e.g. Reddit, Shopify, etc.) is a moving target. Language evolves. Idiosyncrasies pop up. Etc.

Not to say that those ^ issues don't plague keyword search as well. But the powerful thing about vector databases IMO is that unlike traditional indices that need lots of fine tuning and IR experts, a vector DB will capture these new additions to your domain's vocabulary immediately, based on the surrounding context in the document.

Of course you can do similar things with traditional search engines by incorporating curated lists of synonyms, antonyms, stop words, etc. but that takes time (despite engines like Solr having built-in lists of these kinds, search engineers often have to curate them further, manually, because their product's domain is so niche) and lots and lots of query-stream analysis (I remember personally doing lots of the latter at Reddit, hehe).

TLDR:
- I think pure vector search platforms should be evaluated differently than traditional keyword search platforms
- I think vector search is a tool -- simply one of many -- that search engineers should use to make their search engine results more relevant.

Disclaimer: I'm from Pinecone (and hi, Doug!)
https://trec.nist.gov/
Same here in NL, for now. But: banks are pushing their apps hard, to the point where every authentication you have to manually switch - again - to indicate that you want to use the token generator and not their app (never mind cookies and so on, those are only for the marketing department, when for once they could actually use them to store your preferences).

And there will likely be a time when the bank simply cuts access to the cardTAN system and only allow their apps. Screw them because that means I have to use a smartphone, which I really do not want. The cardTAN system has been very good so far in preventing fraud, once the phone is the token it suddenly gets a lot more complicated and less secure.
The other thing that is important about reading beyond brain development is the learning of lessons / history / culture. I can't remember who the quote is from, but something like "He who does not read lives but one life. He who reads can live thousands."

There is also something about forming your own identity that is important too - like understanding history tells you something about who you are and who you can become. Stealing from David McCullough [1]:

"History is philosophy taught with examples... First of all we have to get across the idea that we have to know who we were if we’re to know who we are and where we’re headed."

"The Greeks said that character is destiny, and the more I read and understand of history, the more convinced I am that they were right... It is not in the still calm of life or the repose of a pacific station that great characters are formed."

And so reading is much more than just developing skills around reading and focus, it is about learning and growing as an individual.

[1] https://www.butwhatfor.com/p/takeaway-tuesday-knowing-histor...
Yeah, thats really gross and also wildly incorrect, having been unhoused in Chicago, multiple times, over a period of years and not in any way by choice. Few, I would say vanishingly few people in those circumstance, are "unhoused by choice". And if this is in some way a gesture to the many many people who are mentally unwell, and were in housing until Rahm got in power, that is a grotesque use of the word "choice".
I BURNED OUT

it was fun

19/5 stars, recommended
To be crack -- as in "a crack shot" or "a crack team of commandos" -- is to be seen as expert.

To be on crack is entirely different -- definitely not expert or good.
I live on the west coast, and sometimes visit family in the Midwest. The quality and quantity of used furniture available over there is so much better.

I attribute this to much of California only becoming as densely populated as it is (which is to say, not) after around the 1950s. While there are families who have lived here for five or more generations, they’re by far the exception rather than the norm. The overwhelming majority of people who are here have comparatively shallow roots, didn’t bring furniture with them when they came here, and even if they have access to good furniture from elsewhere, it’s cheap and good enough to go to ikea.
My comment is more about not incentivizing locking down hardware vs incentivizing opening it up so I can't speak a lot to your questions.

> How would opening up the hardware solve the issue for the average consumer?

At the risk of going off-topic, what I will ask you is, why do you feel that opening hardware requires a consumer have special skills? I'd argue that open hardware wouldn't have to limit adoption to those who possess the skills. I think requiring special skills is a bug because currently manufacturers don't even consider the idea of a second life for products.
Framer also has a CMS and you can import React components [1]. They pivoted because there wasn't much traction in that use case.

[1] https://www.framer.com/developers/#overview
Your comments here should go in the textbook for "why people often prefer to work in private for awhile while zeroing in on their processes for a new endeavor".

There will always be someone who will gleefully jump down your throat for imperfections.

But on balance it's probably better to work in public anyway and ignore the haters (while also continuously improving processes).
https://archive.is/tQgER
Thank you very much for reading. It was the first, and last time, I ever took place in the public process and political action.

https://www.computerworld.com/article/2993112/vint-cerf-and-...

We were within months of delivering a massive RFC8290-based fix for wifi performance and we´d been bricking routers left and right... and then got in a whole bunch that we could not modify... due to that proposed regulation... I lost my temper, organized 260+ to sign, made that filing, won, and went back to work. I should perhaps have pressed harder, as the binary blob issue has got ever more terrifying, deeply embedded into too many baseband processors.

If I hold your attention a little bit? It would be rather nice if modern fq + aqm algorithms went into the internet nationwide. "Bufferbloat" is at epidemic proportions. Most the fixes arrived for it in Linux in 2012, and are only slowly rolling out 10+ years later, due to the accompanying epidemic of manufacturers´ not tracking new Linux kernels, (with all those accompanying vulnerabilities). I care very much about addressing security issues, but care about internet "latency under load" and better videoconferencing experiences more.

There´s only a billion or so devices left to upgrade.

https://www.usenix.org/system/files/conference/atc17/atc17-h...
Or even Prolog w/ the AWS CDK. Hmm.. that might even be a business.
>"nah, screw it, mostly correct is fine"

This isn't new, a big chunk of systems you use everyday are based on probabilistic models and heuristics that work most of the time.

LLMs reach very broadly and make the trade off very apparent.
Are we sure they didn't just lose the source code entirely?
Hilariously, not that time.

I do understand why you might think that though. :-D
Very delicious as well. Didn’t know the name but Googling the name I recognize the photos. My girlfriend cooks this meal quite often for me (she is Thai and we live in Chiang Mai province).
Is this in store?

Cheapest in stock I see on their site is M2 Air for 899
Oh thank you, I wasn't aware of those!
Maybe there is a market for smartphone filters in full blown DSLRs. Maybe not. I for sure want my DSLRs to give me a clean RAW file if I want it. And my phone, too. Which my Pixel does.
If you buy from a supplier with a contract that stipulates security updates then you certainly would define the damages which failure to fix will cause you, wouldn't you?
Sounds familiar...

Big proponent of cleaning while cooking myself.
We need to reform section 230.

Either you are a public square and you gain protection from your users commenting but you can't delete or moderate their content (sans actual spam/child p/etc), or you can moderate/curate your users content but you are no longer protected/can be held liable for things your users post.

This worse of both worlds we have going on here results in these alphabet soup agencies/ngos having a place on the boardroom directly affecting people's speech.
Sorry for your experience and thank you for all the work you did in this domain. But I'm afraid that custom roms will never be a mainstream thing no matter how much Google (or Apple) misbehaves. That's a hackers only thing and then only a very small fraction of the hackers.
This is great, thanks!

One of my favorite ways to learn a new language or framework is via "koans"[1], which this reminds me of. It's a gentle ramp up from basic to advanced features, and the TDD-like workflow of seeing a test fail, understanding why, and fixing it, is really conducive to learning, while giving you that dopamine jolt from "a-ha!".

[1]: https://github.com/ahmdrefat/awesome-koans/blob/master/koans...
What's the theme used in the readme screenshot? I would love to use it myself :)
Thanks for putting this together, I too learn best by doing, and this looks very helpful!
will this work w SIP disabled if i download it from the app store
Very cool. Are you familiar with plasmic.app? I'm expecting to integrate it into my next site build and would be curious for your take having built something in the same general category.
Did not know it was $450k per product, my second responsibility outside of software engineering was being the risk manager at my previous company as well which is FDA-regulated.

Still, many IoT companies that sell products don't even have protocols or a QMS at all, and need some kind of heat applied to them.
Sure but at least in my area vacancy rate is sub 4%. The structural minimum is 3% so there really aren't any landlords just leaving units vacant. Surely some will choose to sell when taxes increase but rental supply is pretty stable after property taxes are up a solid 50% so that seems to be minor.
> But I don't see how that has anything to do with a private, non-government advocacy group making their feelings known to advertisers. It happens all the time. Conservative groups call to boycott Budweiser, liberal groups call to boycott Chik-fil-A. It's not illegal.

Definitely not. But if (not asserting this happened) the ADL threatened to defame as antisemitic any advertiser that didn't participate in a boycott, that could be illegal.
Location: Detroit, MI
Remote: 100%
Willing to relocate: No
Technologies: Full Stack, C# .NET, ASP.Net Web API , EF/SQL, Azure, TS/JS
Website: https://danschnau.com
Email: dsschnau@gmail.com

Looking at consulting work in the .NET/Azure space. 12 years experience.
Pioneering a Safer, Ethical AI
First time I hear someone suggest that hashes might be a superior form of journalism. The cracking group signature is a smoking gun. Hashes would only show that the steam binary isn't bit-wise identical with the original release, which any solution to "steam release can't require a CD check" would imply.

(well, "smoking gun" in quotes, because I don't really see Rockstar doing anything wrong here. Would it have been better if they had zeroed out that string?)
> But it's not hard to imagine that chronically-online groups who have hate for Elon and his companies would try to crumble his social network because they don't agree with his approach.

You're imagining a vast anti-Elon conspiracy (with no apparent motive), instead of the much more boring explanation that an organization that tries to combat antisemitism is upset at antisemitism.