skysight-inc/HackerNews huggingface dataset:
Show HN: Open-source Postman alternative with type safety
Hello! This is Jeane and Samuel and we’re building RecipeUI. RecipeUI is an open source Postman alternative that uses TypeScript to statically type and autocomplete requests.

We built this because current API tools don’t deal with the fact that some APIs are just painful to work with. For us, it’s usually error after error as we try to figure out how to properly form the first request.

We recorded a demo to show you how TypeScript helps us autocomplete a request correctly.
https://youtu.be/O_Mly_p-g5s

How does our platform improve the developer experience? The analogy is similar to using a statically typed language vs dynamically typed. Most API tools are dynamically typed. You’re guessing the params and relying on the request to magically work at runtime, only for you to go back to stack overflow or the docs when it doesn’t.

We take the approach of defining parameters and the schema first. When you add a new parameter, you need to mention upfront if it’s required and what type it is (integer, string, boolean). While this can be painful in the beginning, it will save you and anyone you share this with the hassle of understanding how this API works.

Our app is cross-platform on web and desktop. Our desktop app is <20mb and built on top of Rust with Tauri, NextJS, and Supabase. We open source our code because we want to be transparent about how API requests and secrets are handled (all local IndexDB).

I built the first version of this at Robinhood when my colleagues were sharing bash scripts and internal APIs on slack to test things. I wanted to make it easier for anyone to use an API quickly and made use of our OpenAPI specs to generate a nice autocomplete API tool. Soon after, the Options team, then the Crypto team, and then the whole eng org at Robinhood adopted this tool!

Try it out at recipeui.com! Please star us on GitHub if you like the product https://github.com/RecipeUI/RecipeUI.
* had to shorten the title to fit HN size. No editorializing intended

* original study: https://arxiv.org/pdf/2307.09009.pdf

* thought it's interesting as we hear a lot of people's experience, but this seems structured and well tracked set of specific scenarios
I agree, those laptops are terrible too. But whataboutism doesn't change that they're both terrible. Nor that decent laptops exist, nor that good desktops exist.
Defender Experts Chronicles: A Deep Dive into Storm-0867
I'm of South Asian Muslim heritage, and that's just not been my experience at all. Literally nobody I know, ranging from relatives to friends (thus spanning several ethnic groups and a range of wealth/social status) has a concept of this.

There are definitely things like social stratification based on wealth or ethnic group, and you can see things which, I suspect, are remnants of things adjacent to the caste system, such as Jatis, in the form of things like the Memon community.

Granted, even though I am talking about a range of ethnic groups, I'm still talking about north-west Indian ethnic groups: Gujratis, Panjabis, UP/Delhi people, and Pashtuns. Thus, maybe what you're saying holds true in other parts of the subcontinent--or perhaps just in very rural areas (?)
> Weights are simply a lossy compression of the training data set.

No they're not -- they're more like the dictionary generated to produce a lossless compressed data set. But then we throw out the compressed data itself, and keep only the dictionary.

> but if the weights can be reasonably used to generate copyright infringing text (and condensations and abridgements and transformations are explicitly listed in the law, verbatim copying is not necessary)

First of all, they haven't been shown to substantially generate infringing text that aren't the kinds of short snippets covered by fair use. And my previous comment already explained that longer texts are not going to happen, for both legal and economic reasons.

But secondly, you're wrong about "condensations and abridgements and transformations". You can absolutely sell a page-long summary of a book without getting permission, for instance. What do you think things like CliffsNotes are all about? Or all those two-page "executive summaries" of popular busines books?

You can't abridge a 1,000 page book to 500 pages and sell that, but you can summarize its ideas in a page and sell that. Which is basically the approximate level of understanding that LLM's seem to absorb.
Air only supports 1 monitor (without using a DisplayLink software and dock), but other than that, I can't see any tangible difference for most power users.
I think the biggest advantage to Click is the ability to namespace different commands to have a single entrypoint for your CLI and all your commands. For example, if you had a hardware test interface and a webserver, you could have something like following:
```
protocli hw-test i2c
protocli webserver -p 8888
```
It also does a great job generating the documentation, defining the commands is easy and robust, and it makes the CLI's more full.
Inside-Out TDD doesn't necessarily drive your architectural design, that's right. But Outside-In TDD can do so.
Between 1900 and 1970, agricultural jobs went from 35% to 5% of U.S. jobs.

One out of three jobs lost in a single lifetime.

During the same time, the standard of living skyrocketed.
Can we add November 2022 somewhere in link?
A precinct where reason prevailed over tradition would recognize that new legislation is required to adapt to changing demographics and find a way to enforce cleanliness without infringing on religious freedom. (Off the top of my head: offer certified-clean burkinis for rent.)

A precinct where tradition prevails over reason would find "ah-ha!" gotchas from over 40 years ago as justification for their inherit sexism/racism and refuse to budge on them (so long as only the "inferior" race/gender/religion is affected).
A year after the disastrous breach, LastPass has not improved
> especially if messengers keep advertising that they do end-to-end encryption

That's probably a crime in UK. It is a crime in plenty of countries.

Anyway, the most impactful an anti-e2e law can be is to force people into getting some functional thing from free-droid, instead of naively getting it from the play store. The bar of intelligence required for that is still pretty low.
Developed a failed threat modelling product, some of what I learned:

- companies want to be told by a 3rd party what their threats/risks are for liability and insurance purposes. Doing it themselves might be accurate and make things better, but it doesn't add value by transfering risk to E&O policies of consulting firms who provide the advice.

- many of the risks threat modellers identify are risks product managers are tacitly taking and managing onto users and customers and other counterparties. Security people are often playing chess against poker players, where security people idealize a perfect information game, and managers create value through imperfect information games. Threat modelling increases information but not necessarily value.

- the threat model is the contra case for the business model. e.g. what happens if an assumption or a business factor fails. the real business models of software are often secret from the developers. Until you have established PMF, nobody actually knows what the business model will be anyway, so submitting to a threat scenario discussion prematurely problematizes solutions and can create fatal disalignment on the team.

- if you tell everyone the risks, some of them are going to defect from the team and use them as leverage in local struggles.

- the threat scenarios discussion is a forcing function in dynamics that need to be sustained to get value from them. e.g. do you solve this existential design problem, or do you launch/deliver a feature to get your next round to survive and then grow your way out?

- knowledge is liability, and creating a paper trail of who knew what when in a threats exercise can be disruptive in a lot of orgs, particularly government.

That's the short list. I actually use threat modelling myself in my own consulting work, because the other thing I learned is that in security, the threat model defines the product. What does your tech do? It mitigates threat-X.

What I had really built in my threat modelling scheme was a security product idea generator meets fridge magnet poetry, where each threat scenario and mitigation feature it generated were potential products themselves.

I like threat modelling, it's important, but it's a kind of luxury I don't think the vast majority of teams can apprehend.
https://archive.is/axRa6
Do have have any links handy to those test results?
If this isn’t a sign of the collapse, I don’t know what is.
Backblaze B2 is $5/TB/month,
Hetzner is $4.08/TB/month for 1TB,
Wasabi is $6.99/TB/month

Wasabi seems like the most expensive here, with the caveat that Hetzner requires ordering discrete steps of storage rather than the 'pay-as-you-go' model of the other two
Tryhackme helped me land a job. I found nothing better in studying for technical screenings and getting familiar with new tools. Certs are great and all, but thm is a proving ground with their rooms, and king of the hill competitions.
Disappointed this is not about basketball.
> Something many here don't understand.

This is a complete cop out, and a misunderstanding about how this works.

This is a principle that works right up to "Can I feed my kids" and then it doesn't work at all.

Principles are flexible. Some are more flexible than others. You NEED food in a way that you don't need general purpose computing. If you are forced to choose, I know which one people will pick.

They will just put a finger on the scale to make it more and more difficult to choose an open solution. You will start losing things like income, job opportunities, government access, etc.

They don't have to make you switch... they just have to make an environment where you are less fit. Make your life harder at every step, limit your opportunities, and wait for you to go extinct. And... you will.
Do you care more about mass shootings or average day to day gun crime?

They have different sources (one, poor access to mental healthcare, the other, poverty) and probably need different solutions too. I personally dont care as much about mass shootings, because in the grand scheme of gun crimes, lots less die. Nevermind Suicide, which is just access to mental healthcare.

I'm really interested in making poor communities safer, and reducing the transactions in illegal guns - but tbh, thats like trying to bail out a rowboat with a thimble - and without dealing with the underlying causes of gun crime folks debating in this space are effectively arguing about what color a building ought to be, while its also actively on fire.

In the end, I think everyone who buys a gun should have to go thru the same process, and should undergo a background check, and that a fail dangerous system is bad - now how we go about fixing that issue? thats another question entirely.
That's very expensive!

I would recommend buying a Dilemma instead: https://bastardkb.com/product/dilemma/

or building one of the hundreds of DIY open source keyboards e.g.:

- https://github.com/mmccoyd/hillside (46-56 keys)

- https://github.com/GEIGEIGEIST/TOTEM (38 keys)
I'm looking forward to giving the Keychron K15 Pro a spin. It's not _nearly_ as compact as something like the Voyager, but I've never been productive on <75% layouts.

My only missing feature is layer support, so if anyone from Keychron is listening....
A mechanism requiring disclosure of how long security updates are available seems like a great step.

Another great step would be a guarantee of making the firmware Open Source after no more than a certain amount of time, and having that guarantee known at compile time. Effectively, that means the device will always be supportable.
I don't know who those manufacturers are, but I can guess. One left-field piece of advice I would offer is looking at what they specify for their own offices/HQs.

"Smart" commercial office space has a bit of a head start in this area, and the specifiers have now had some time to find their feet.

Some prominent IoT device manufacturers have had written into the specifications for their own buildings that, for example, the end user (read: them) shall be able to manage the certificates on the devices, and so on and so forth.

A couple that come to mind would make for nice blueprints for consumer protections if you can cut through the prescriptive talk about preferred tech.
Those aircraft were designed to maximally exploit the physical properties of statosphere via airfoils, gas turbines and materials science. There's no more there there other than more efficient turbines and materials which aren't really needed to accomplish the limited mission. Anything higher or faster would be less an aircraft and more a rocket so much more logical to jump the mesosphere and go straight to space.
You don't need "an AI" for that - you can just use any of the dozens of CI tools. Most of them can do auto summarization and auto highlights.

Although looked at that way, this is really Google's entry into the CI space.
Can I make my own prop editor?

Ex. instead of an input for the prop `name` I want a picker that fetches data from some API
> Companies may cease supporting a device well before consumers have stopped using it

In which case all information required to create and load custom firmware should be released to the public. This information should be placed in escrow, in case the company ceases to exist. The same rule should apply to backend services, in case of a device being depended on such a service to operate.

> security updates for a reasonable amount of time

Which is 25 year or more for some classes of devices. Phone have already reached a point where they should be required to come with 10 years of security updates. I'd expect light switches to get at the very least 20 years of security updates.

Generally I believe that governments are being WAY to lenient towards manufactures of any type of electronics when it comes to updates. It's bad for security, the environment and the causes consumers to make bad investments. The companies making these devices have long since proven that they DO NOT CARE and shouldn't be trusted to deal with the issues themselves.
Every android release I see things removed, and inconsequential things added.
It seems like iOS has been doing the opposite, such that slowly they may meet in the middle, and then iOS exceed android in every way.

Apple folk, can I get an honest opinion here: I've been using macOS lately and I hate it because it fails at really basic user experience things that've been common on windows/linux for decades. Like finder, it's just the worst.

If I were to get an iphone next generation instead of an android, would I have the same negative reaction to iOS? Would you say that iOS is a more complete, useful UX than macOS, for the smartphone use case?
I think I want to make the jump, but I also don't want to waste my time/money.
I agree that owning the DSLR niche is a good strategy for Pentax. Ricoh hasn't given them the budget to make digital autofocus systems that are competitive with the other big brands, and it's likely hard to justify doing so with their market share.

There's an interesting world where Ricoh sells Pentax to Samsung or Apple or Google. Taking cutting edge computational photography from smartphones and applying it to a full-size camera with the sensors and optics to match could be really compelling. Pentax has good brand value and the optical expertise to make this credible to photographers, and there'd be growth potential in just taking market share from other players.
That's the exact service customers are paying for: deliver the food to their door...
I do tech support for a couple extended family members that have M1 macbooks and they're quite terrible computers. I couldn't believe Apple sold a computer for $1600 with only 8GB of ram and 256GB storage and a 13" screen. I spend most of my time re: M1 Apple computers fixing the people's problems with their computer not being able to back up to their external drives because the internal tiny drives are full and time machine can't run.
There are a few exceptions that have made the cut for a useful DSL, like SQL, Solidity, and Regex. Unless your project is totally groundbreaking, odds are low that you invent a new language that can be widely adopted.
Whose fault is it that Amazon, Facebook and Google - all trillion dollar market cap companies are not able to compete? Amazon and Facebook both tried creating their own phone.

Consumers have choice. They can buy from Apple or any number of much cheaper Android devices. They made a choice to pay Apple more. It’s consumers making a choice that led to Apple’s revenue.

Both Google and Microsoft have better services than Apple and they still can’t compete.

Google is worth a trillion dollars plus, have their own operating system and has the most visited page on the internet and still is estimated to sell as many phones in a year that Apple sells in less than a month.

It’s not Apple being anti-competitive. It’s the competitors - all large companies - being incompetent.

In the computer space, Apple was a nobody and almost bankrupt compared to Dell and HP in 1997 when Jobs came back. Why were they so incompetently run?

Why couldn’t Microsoft make a competitive ARM chip?
I don’t know anything about the proposal or the person, but on its own, this seems like a prima facie great idea to me (in theory).
Almost every meeting you attend, almost every email you read, is pointless or irrelevant to you. If an AI can do it for you, you probably should have never been involved to begin with. If all this AI accomplishes nothing but filtering out several hours a week of pointless bullshit, then "mission accomplished", IMO.
You’re saying per capita increase in incidents is the same in Colorado or Nebraska or Minnesota as it is in Florida and California? Can you provide the data you used to reach this conclusion to back up this statement that seems absurd on its face?
I’ll never buy a Dell XPS again. The fan is awful. I’ll stick to Macbooks.
Is it the proliferation of giant condo buildings? Cities like Toronto went from having cloisters of 10-15 story concrete appartement blocks to having tons of much taller condo buildings all over in the last 20ish years. More than a few have questionable elevator situations too. There's even viral tiktok videos about residents waiting 20-30 minutes for elevators. Would you want to deliver to the door in a building like that?
> Isn't centralized agriculture more efficient on a calories-per-acre basis

That's exactly the problem, the entire industry is built on metrics that revolve around calories and poundage. The calorie is an absolutely useless metric by itself and says nothing of nutritional value. Similarly, a pound a beef is not always the same and nutritional value can vary wildly depending on how the animal was raised.

Moving all production to one place like the US Midwest only externalizes the costs for everyone else. Centralizing that dramatically leaves the Midwest in a huge whole with regards to input requirements - they have to ship in fuel, fertilizer, feed, etc from other areas. Not to mention the cost of processing, preserving, and shipping that product back to customers hundreds or thousands of miles away.
This is kind of adjunct to the right-to-repair question. "Smart" features are being added to things that a person would expect to have a long usable lifetime--like cars, kitchen appliances, and so on. If the manufacturer is saying, we'll only support the "smart" features for five years, one would be inclined to opt out on that unless there is a way to ensure the appliance remains useful.
I do mostly B&W these days, using an Olympus OM-1. The ability to mix the colors in post enables some real subtlety that it would be hard to reproduce using optical filters on a pure B&W camera. I was lusting after this camera (and the Leica monochromes, though they are way too rich for my blood) before I got my OM-1; but I think I'm happier with what I've got.
You could create a JS object with accessor functions that stores an offset, but the object itself still takes up heap space. In Rust, it would just be a (typed) pointer to the position in the buffer and wouldn't require an allocation.
https://archive.is/Kty4A
>Garageband?

Yes, that is exactly why I need one. I'm not joking when I say that is the only reason.

Other applications that run on Windows or Linux have been very confusing to me in comparison. Garageband always felt intuitive.
To bicker,

Many cities spent millions of dollars on the city sponsored bikes from a period from 2005-2015... and 2015 was the first time ebikes + scooters became convenient and abundant enough to establish a volume of users.

One could conclude that the cities provided a very costly startup beta, that the for profit entities were actually able to adopt. From $100s dollars per user activation to $1.
We really need a third operating system for phones.
Weird that the article doesn't mention air conditioning, which basically makes life in Florida possible. Florida population almost doubled in 10 years with widespread air conditioning: https://theparklander.com/2017/07/07/floridas-sweltering-lif...
> I’ve advocated for the FCC to require device manufacturers to support their devices with security updates for a reasonable amount of time [1].

No offense intended, but I would be worried about this more than I would be worried about the current state of the IoT world. A blanket requirement would punish hobbyists and small companies prototyping new technologies. But big players could spend relatively minor technical and legal resources for publishing regular "security updates" without trying to find and close the biggest security holes.

I would prefer that FCC works to inform: maintain an up-to-date database of issues (reported by both the manufacturers and by third-parties), impacts and recommended fixes for those that have a fix. My 2c.
I have quite a few of these sorts of keyboards, including the Ergodox EZ. I think for generalist usage they can be adapted to pretty easily, but as a developer, the lack of dedicated keys for [, ] and ' is an insurmountable obstacle for me.

Those keys are in my opinion perfectly placed on regular keyboards and no amount of layering, tap dancing or anything else will ever come close. Please somebody just make a split ergo keyboard where the right side has extra keys for regular programming symbols on the top layer. The two halves do not need to be symmetrical.
Yes, 360 is a superior highly composite number, and we would move through the sky exactly 1° per day.
HTTP Toolkit was very helpful for me to extract hidden APIs from crappy EV charging apps in Turkey, combined with Frida to prevent SSL pinning and root detection.

Then I realized, the reason they try to hide is maybe those APIs are abomination /s
This is tangential, but another issue I've had with existing vector databases is write throughput. Weaviate and Pinecone build an index immediately after the creation of a "table" (or rather, the analogue thereof) and this makes write throughput abysmal at times.

We have around 2 million 768-length embeddings + metadata -- writing too fast to Weaviate quickly results in OOMs. We circumvented this by very slowly trickling our data through to Weaviate, but this causes many-hours-long writes.

I'm experimenting with dumping our data into postgres and building an hnsw index with pgvector once all writes are done. This has reduced our time to maybe 2 hours at most (the bulk of that being index building time, of course).