skysight-inc/HackerNews huggingface dataset:
> I do not doubt that there is a lot of terrible things happening in the UAE, but at the same a lot of the same things are happening in Europe. Passports being taken, people sleeping on construction sites in some hidden away corner.

This sums it up. I was extremely surprised the first time I came to Europe, when I saw migrants being shuffled to and from work in trucks like cattle, or migrants having their passports taken away. And yet Western Europe has the temerity to report on "Dubai's inhuman conditions". Granted, I'm not a fan of the UAE's labor and corporate practices (which is why I left the region professionally), but Western European hypocrisy is often on a whole another level.

> It was completely normal. I would walk hand in hand with my girlfriend, just like in any western country.

While this is true, it often only applies to certain parts of the UAE such as Dubai, the city in Abu Dhabi and Ras Al Khaimah for instance. In many places, if an enterprising Emirati or Arab chose to, out of spite, they could simply report to the authorities, who would have no qualms to hold you for a few days and either let you go or deport you, depending on the mood of the officers. It has happened before, although the law has been repealed now.
So on the topic of NYC, and the new registration laws coming into effect tomorrow. From Bloomberg:

"At stake is potentially millions of dollars in lost revenue for Airbnb in one of its biggest markets. Some 7,500 units don’t meet the requirements to apply for a license, according to market analytics firm AirDNA, and so will likely eventually disappear from the platform. More than half of those listings are frequently rented and account for about 40% of Airbnb’s income in New York City, according to AirDNA. In a lawsuit against the city over the rules, Airbnb said it earned $85 million in net revenue in 2022 in the Big Apple, which is about 1% of its total.

New York has been sparring with Airbnb for years over rules that prohibit rentals in most apartments for fewer than 30 days without a tenant present. AirDNA estimates that only 9,500 of Airbnb’s 23,000 listings are legal."

Will that few units (out of a city of 8.5M) coming back online really pop the housing bubble?
+1 for anything by Neil Postman.
Harvard, Yale, and other Ivy League schools have absolutely nothing to do with academia. They are just training camps for elites. Personally I wouldn't trust anything that comes out of those institutions.
While it's an interesting (and effective) approach to learn something, what is the point of learning WebAssembly? After all, I thought that WASM was supposed to be something like "LLVM for web", a low-level IR for webdev languages to target and for browsers to execute efficiently, and not something that you'd write manually. Or am I wrong?
Musk posted a few articles of note:

[Background on the new leader of the ADL and some suspicious activity with Al Sharpton]

https://www.tabletmag.com/sections/news/articles/al-sharpton...

[A review of a documentary on anti-semitism that touches on political influence from the ADL]

https://www.npr.org/2009/11/24/120452232/exploring-the-polit...

[An article on how Facebook caved to leftist groups like the ADL]

https://www.politico.com/news/magazine/2020/07/03/activists-...
> I think having to right click (…) then maybe it would qualify.

Yes, I said so myself that it isn’t discoverable:

> Granted, you have to know that’s a solution and most people don’t

But once you know it it’s quite easy and within reach.

> The original article says the option was hidden from the GUI, not that it’s impossible to do.

I wasn’t replying to the original article; I was replying to a comment, in specific the text I quoted.
Most prominent for a surprising amount of the vendors we looked at last year (https://gradientflow.com/the-vector-database-index/):

- We would have paid more for storing billion+ rows in-memory than our gov & enterprise customers were paying for a full product. Since then, ivfpq etc have gotten more popular to do responsive searches for bigger-than-memory datasets. If we needed small in-memory workloads, we could have done faiss+pandas+fastapi and moved on.

- Vendors pitched themselves as managed databases yet their users complain about them going down & losing data

- Many did not support basic search operators: time filtering, ...

- Few/none had real modern security, e.g., row-level multi-tenant ABAC

I haven't been tracking on a per-vendor basis as each publicizes making piecemeal progress on these. We found one that did #1-3 without failing us yet, and we're biting the bullet to implement #4. A scalable OSS answer to #4 might be the one that causes us to switch.
A much better analogy would be how writing code in an open source editor, compiled by an open source tool chain does not make the resulting binary open source.
I can appreciate that, but in the context of LLMs where people are frequently drumming up discourse based on faulty beliefs about the systems' capabilities, I think it is important to be clear.
Cite? The article seems to clearly state otherwise:

> ...representatives from both companies told Rest of World, their rules already require delivery workers to only go as far as a street-level point of contact, from which customers are asked to collect their meals.
Given what you're working on and how close it comes to intersecting with the consulting work I've done ('05-'20) and the likely client overlap, and given the top-line dollars you said upthread you're bringing in, I'm going to go out on a limb here, way, way out, and say: you could double that effective bill rate, denominate it in days or weeks, and significantly increase the amount of money you make while working significantly fewer days every year.

I might be wrong about this, of course! But I'm not being casual about saying it.
Robot – A fast 1kB functional library for creating Finite State Machines
Anyone a little savvy would have guessed that.

I'm betting even at the time of the game's release, it was so fragile that someone breathing wrong on the build machine would cause the build to fail. Any time the Windows machine displayed the numeral 1 in the systray, it would be unbuildable. And on Tuesdays, Wednesdays and Fridays it would just fail to compile. That there were only 3 employees who could get it to work at all the last 3 months of development... and they all quit years ago.

Now? Now it won't build on Windows 11, or even on the old XP machine they dug up. It's so riddled with Denuvo or whatever, that they'd have to spin up a team of 12 for two months just to delete that, and only for them to discover it won't build afterwards.

And, whatever else, they sure as hell don't have anyone who's good enough at assembly and IDA Pro to crack themselves. Probably too cheap to even get the single seat license for IDA Pro.
I'm trusting his indictment. The indictment he's facing has a maximum 170 years in prison, not execution. So yeah, I'd be extremely surprised if he were executed for a crime which doesn't care execution as a penalty. He's facing execution in the same way people getting a traffic citation are facing execution, in that he isn't facing execution at all.

Lying about his case isn't doing anyone any favors.

And if the options are hole up in an embassy where you're seemingly not entirely welcome for most of a decade and then sitting in a prison for years because you keep trying to prevent yourself from ever seeing an actual courtroom versus having a public trial where you could quite possibly be shown entirely innocent and be a free person, you'd take a self-imposed prison sentence every time?
Any examples of the tech world putting in significant effort to silence the viewpoint that men have penises?

In any case, that’s not “conservatives”. That’s a very specific issue.
Weird how this contemplates anything but there being a significant rise in the antisemitism voiced on twitter
You can't see the consumer benefitting from a certification label? Interesting. Also, the vendor benefits by gaining more sales.
You can't fire your SoC vendor especially once the product ships. And their are all PITA about security updates.
Read to your child, and provide books and opportunity once he starts learning to read. He'll either be drawn to it or not. I've had three kids and their interests and things that motivate them are all wildly different. So a lot of it just boils down to "if he likes reading, he'll read."

Do the same with music, and sports/physical activity, and other things.
Never forget that some portion of human beings aren't even willing to return a cart to a certain point at grocery stores. A surprising number of people don't see other humans as equals, but rather as pawns to be abused.

If you don't build your system with them in mind, they will abuse anything and everything they can.

That doesn't mean make things suck for people with few resources though, as anti-social behavior is MORE common the higher up in the corporate chain you go, meaning they are usually not poor.
That's a good thing. Either launch a closed proprietary product from the get go or commit to maintaining a real open source project. You can't have all the monetary advantages of the first while enjoying the goodwill and community support of the second.
Computer security is hard, and I think a "security label" would give a false sense of safety. Requiring manufacturers to respond to critical security vulnerabilities for a given period of time sounds like a good idea, but such rules often have unintended side-effects (like impacting startups, who maybe couldn't afford the certification or can't guarantee long term support). What we really need is local-only device access, so that I can firewall a device off completely from the internet, and still make full use of it with a local controller like home assistant. Locking down devices with the threat of DMCA violations to reverse-engineers actively reduces device security, and takes away my ability to fix devices myself.

This overall strikes me as much lower priority than the currently ongoing ATSC 3.0 DRM doom. Please please please do something about this nightmare that broadcasters are imposing on the public. Don't let broadcasters take away my ability to watch live TV without an internet connection (resulting in a complete emergency broadcast system failure?). Don't let broadcasters take away my ability to record/time-shift live TV using software-based DVRs (e.g. Plex, Jellyfin), which could never possibly meet the "Nextgen TV" certification requirements!
>Well do a short proposal to quote you a big proposal

Did that for a pretty large client project once. Basically brainstormed/did some research to pick out some technology areas they might be interested in and why. Then did a bigger project to dive deeper into areas, conduct interviews, etc. that resonated with them.
Nice, this looks pretty good.

It's always been my dream of having something like Retool, but using your own components and completely open source. Retool is a backend layer too, so that's partially what's missing to complete the picture. But if we had that as something like a framework, we'd start getting close to the days of drag-and-drop UIs.
Some AMD CPUs to Benefit from New Micro-Optimization in Linux 6.6
Yes. You're talking about a specific, I'm talking about a general case. We know that this wasn't the case here because the story didn't end with "I was carted away to prison." My comment was in reference to the general case of US jurisprudence the OP discusses when she says "not only is justice blindfolded, but is blind." In the GENERAL case, you can still be convicted even if exculpatory evidence exists. And this is the point I should have emphasized:

Do not assume that the mere existence of exculpatory evidence will allow you to evade successful prosecution.

(But thankfully, it worked fine in this case and works in many other cases.)
If you have had an allergy your whole life, and never once had any meat product contained that allergen, then are you really going to check the packaging?

What if you thought you were getting the same thing you always get, assuming the packaging only changed slightly?
I think Packer is a reasonable candidate for a CNCF project.
In this particular case the author is using a controversial headline to drum up attention for his business, which he plugs about 2/3rds of a way through the article. I think web developers in particular are more familiar with SEO and web-based sales and are more likely to write about software in an attempt to funnel eyeballs towards their software business ventures.
Bubble: The best way to build web apps without code
Looks promising, can it import/export typescript interfaces?

Being able to share schemas with colleagues would be great.
He's mostly putting it on, with the "vidjaeos, J-A-Pan" and such.

He does combine a bunch of Quebecois and Western rural slang in a very impressive way though!
> Later, consumers can _attempt_ to hold manufacturer's feet to the fire with false advertising and other fraud class action lawsuits.

I would hope that this becomes relatively simple at some point.

1. I have this box that says I get updates until 2025-01-01.

2. It is 2023-09-05.

3. I have applied all available security updates.

4. Vulnerability X is still exploitable and has been made public to the manufacturer for 4 months.

5. Get full refund for defective product.

Obviously we are a long way from this. Especially 4 being hard to make a concrete rule for.
FDA: $450K per product. And they aren't doing very much more than asking the vendor to describe their protocols, then ensure the vendor complies with their protocols and any agency guidance. Source: I work at an FDA-regulated company.
Since this is literally "Hacker News", I think it's worth focusing a technical hacking-nugget near the center of this political thing:

Allegedly Assange agreed to crack password-hashes for Manning, supplying the resulting fresh passwords to Manning to use. [0]

While I'm sure the US government is out to make an example of Assange, I don't see how anyone can argue the above allegation falls under regular ethical journalism. Just imagine a newspaper editor saying: "Wow, these documents you found while burgling the mansion are awesome, hey, how about I give you fresh lockpicks and a grappling-hook so you go back and check the upper floors that you couldn't reach before?"

[0] https://blog.erratasec.com/2019/04/assange-indicted-for-brea...
That sounds like zit lol
> you will be hitting one of those 19 commits at some point during a bisect

But not if you merge the PR as a squash-merge, which turns those 19 "development" commits into a single "permanent" commit.

Using PRs as the unit of development, with all intra-PR work squashed into a single atomic test-passing commit, is a well functioning process that many teams use.
Landlords are price takers because supply is fixed in the short to medium term. Demand is what sets prices in the rental market as landlords look to find the tenant that will pay the most for their unit. Because of this property taxes are not passed to tenants, unless you think about second order effects that change the supply of housing available for rent.
How would opening up the hardware solve the issue for the average consumer? Let's say the official update channel goes dead on your smart fridge, the company has gone out of business. What would happen in that scenario for the average consumer (not someone who posesses the skills or will to tinker around with the firmware and such)?
We don't have our API documented yet but here is the documentation for the CLI.
https://docs.nullstone.io/getting-started/cli/docs.html

To launch your application you would use the `nullstone up` command.
To tear it down you would use the `nullstone down` command.
To deploy your code, you would use the `nullstone launch`.

Each of these command are just making API calls under the hood. If you want to hop on our Slack channel, I'd be glad to share the details.
This sums up the situation that government regulations don't work. These regulations put us on the path of trusting religious-like in government. We could be working toward push-button simple network segmentation with some kind of default filtering for install by the average home user.
Be that as it may, your comment runs the risk of being contrary to the HN guidelines ("eschew flamebait").

It is interesting to see how different organizations eventually get subsumed by those more interested in the power and prestige of the organization itself (and by extension, their own power and prestige), rather than the stated, foundational values of the organization.
But OP said the most valuable strategy is to reduce as much as possible the time to 1M without accounting for any other factor.

It’s much more likely to become a millionaire by robbing a bank vis-a-vis playing the lottery
I'm happy with Migadu with a custom domain: https://www.migadu.com/
Some reasons to understand the textual representation, besides curiousity:

You are embedding a WASM engine and want to better grok how the import or exporting works.

You are writing a compiler that targets WASM.
Permalink: https://edition.cnn.com/europe/live-news/russia-ukraine-war-...
Who does the ADL hate? antisemites?
> his fellow alleged co-conspirator who probably did more of an actual crime

And was actually facing execution, at one point, as the initial military charges included Article 103b “Aiding the Enemy” charges.
Profile-guided optimization in Go 1.21
Should be off by default!
I like this angle. Require device manufacturers to actually comply with OSS licenses and extend it to require providing the means for consumers to build upon the software as you mention.

Furthermore, if the concern is national security, then I think some of the onus should be on the corporate consumers of such devices. Holding them responsible for doing due diligence on their vendors seems easier to regulate and enforce than trying to regulate supply side.

Of course, this leaves the general population without a clear solution to updates if the process of updating using alternate channels has any amount of friction whatsoever. I'm clueless as to what to do about that. Regulating it entrenches established companies. Not regulating it maintains the status quo.

Anecdotally, it feels like software has gotten far more secure in the past decade without regulation but security theater and concerns around national security have grown considerably faster. This isn't easy to measure of course, but that's how I see it.
Some clients are absolute pains with flat costs. They argue over scope, then argue over the definition of done, then they argue over features that were not in scope and refuse to pay you until you do them (for free.)

For these "special" clients, I found the best model to be a pre-paid declining balance retainer. Nothing gives more focus to clients than a slowly ticking meter. Further, i'd set the rate to be something that is worth even bothering with such clients.
I would like to add: many owners in the disaster zones can't afford to rebuild even with insurance's help. Due to actual cash value policies with non-recoverable depreciation, homeowners with older homes get much less money back. Add insurance companies intentionally writing poor estimates, code upgrades that aren't covered, and the market inflating due to the large number of projects -- many homeowners can't make it.
Going All in on Phoenix/Elixir
I would expect some sort of license "agreement" that shields the manufacturer and resellers from all liability.
A cyber vuln is a defect in a product expected to function well. In other domains (cars, apartments, pharmaceuticals), if there is a defect, the manufacturer is responsible to ensure it is fixed.

It seems pretty simple. The standard should be the same as used in other industries where vendors need to recall, repair, or refund products in case of defects.
I can't see this changing much if they water it down to a point where liability isn't an issue. If a company is weighing whether to put resources into a security update vs. roll the dice on whether they are used as an attack vector, where they will be sued and just declare bankruptcy, I don't think it would be effective.

Doubly so if their products are still in use after the company goes under. Now who is liable? What protections can one create for this scenario?

Most consumers will never file a lawsuit against such behavior because it is an incredibly uphill battle.

I get the sense that regulation like this will just create a new goalpost that won't ultimately help consumers, we've seen it happen time and time again, but I don't have a better idea. I suspect if you tried to enact real change you'd get too much opposition.

Tricky situation.
An act of kindness For the PostgreSQL community
If you’ve been passionate about NLP since before 2022, you’ve undoubtedly heard of SpaCy; you might have even developed projects using this powerful library. If you joined the community after 2022 with the emergence of ChatGPT, you’ve likely heard of LangChain as well. What if I told you that you can now combine the power of SpaCy and the versatility of LangChain at the same time?
Sounds fabulous, doesn’t it?
Based on your comments and all the valid points above - are you working for some intelligence agency to make Russia looks good?
I detest my cynicism that immediately made me roll my eyes and remember that there's an election coming up, and the opposition party is making big economic growth promises. So this is very timely for the incumbent government.

The ONS ought to be above political motivation and is, I believe, not politically controlled, so I doubt that cynical take would really explain the facts.
Razor should sue rockstar for IP theft.
Author here!

My initial motivation to learn WASM (as someone from a primarily web background) was that I had a pretty poor understanding of WASM in general and so I had a lot of difficulty working with WASM builds in just about any capacity other than a heavy JS wrapper.

There are aspects to how WASM works that are quite different from other kinds of assembly formats that make learning the basics pretty important. e.g. how memory is requested, provided, grown. How functions are received and exported. Capabilities of tables.

A lot of this might be abstracted by massive wrappers, but you're losing a lot in perf and debugability when using them.
No, I wanted to build an App to do that a while ago and gave up.

They keep that market for themselves, it's a silly company.

BTW, if you're looking into that space, maybe let's have a chat :-) email in bio
Battlebit 3 people team and it seems just 1 dev https://joinbattlebit.com/meet-the-team/
Windows File Explorer Bug Ironically Boosts Browsing Performance
The billionaire executives are much more conservative than middle managers, HR, corporate drones. But even at the top level you have plenty of liberals (Omidyar, Bezos, Zuckerberg, Pichai…)
What will this do for individuals not bound to institutions though? Will regular people just have to accept whatever is published as scientific research?
https://archive.ph/kLEvd
It would be up to the certification organization to market their seal of approval to increase awareness.
The big thing is you can do audit with original documents created by the voter themselves. Which is the problem with all the 100% electronic systems. You can't because the voter doesn't create a master copy of his vote.
I have one of these fancy keyboards. It is not the "primary tool that keeps me gainfully employed".
I think the appeal of cracks is still there for the technically minded. Learning reverse engineering, understanding how to circumvent technologies.

That seems to be the real point for these groups. Reputation from reverse engineering. I certainly enjoyed my time writing them. I don't know of any group that does this and doesn't support the developers of the IP in question. You still end up buying the software.