skysight-inc/HackerNews huggingface dataset:
Eicar Anti Malware Testfile – A signature to test your antivirus
Recently I was experiencing strange file locks on Windows while compiling my tools. Since my company is using anti malware software, my supervisor recommended to use this eicar testfile to check if this might be the problem:

https://www.eicar.org/download-anti-malware-testfile/

What can I say, I created a text file with this content

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

and immediately the anti malware software reported an incident. I did not know something like this existed and thought it might be useful for others.

Have fun.
It’s 20 minutes where I catch up on the news get a bit of walking in from the home to the train station and generally wake up to arrive at the office ready to go.
I either leave slightly earlier and beat rush hour, or even if I don’t, I can still use my phone standing.
It's a common misconception about hedge funds that objective is to outperform market.

The objective is to maximize profit per unit of risk taken.
If hedge fund made 20% less than market but took 50% less risk, that's a MASSIVE value proposition.

(now, one could argue they fail at that too, but that's more difficult to prove)
> It's not like their ad model does better if users lose faith in their results.

Yes but not really: if the results are so bad that they're useless, yes, the users leave, but Google profits maximally when the results are only barely good enough that you don't leave but still filled with a ton of ad-bloated crap.
The potential for hotspotting decreases with the number of inserts per second. Like if you only did 1 insert per second and timed it right you could put all of those inserts on one server, but this would likely not overload the server.

It's virtually impossible for anyone to hotspot in a meaningful way with this system.
Meh. “open source” vs “Open Source”.
> IIRC #2 in the minutes immediately after the daily scheduled time for publishing this file, there was a massive traffic spike.

Perfect usecase for bittorrent protocol imho. Funny thing is you can serve files with bittorrent protocol from Amazon S3 without any additional complexity or charges I think.
Ok. That's cheap AF.
They biased the model to return shorter answers. Remember that "Continue" button if the reply was too long and cut off? I haven't seen it since they updated the model.

And to get a non-abridged version of the answer I need to ask it to provide "a detailed and comprehensive answer" more often.
Things like this needs one to be creative before the prompting part, creativity first, then with help of llms you can get a code,based on your creativity, only have to think and work with AI as your assistance to make logical flow of your input or prompts, what I have noticed is, the engineers are less creative,but good at coding what they have on their heads, so imagine having both imagination and coding skills and also not forgetting the know how of what you are actually trying to create, example, we can have a creative engineer, that doesn't know how to trade (financial market) how so you expert that person to come up with a good project? They need to firstly understand how to trade, risk management, position sizing, a strategy, entry and exit points, so without this knowledge, the project is good as useless
I remember those days when videos on youtube could have movie playing in a moving small rectangle bouncing around, this was done to avoid content id systems I guess. Then some movies were reflected as well.
The statement "SSH keys are just long passwords" in your linked post is a huge red flag that you don't understand enough about how they work and are in no position to dispense advice (that anyone sane should heed) on the subject.

To start (but it would be a longer discussion), passwords can be captured as you type them into a compromised host, SSH keys can't. Also SSH keys can reside on a security device (TPM, smartcard, HSM, security token, whatever) and this way they can _never_ be captured, barring exploits on those hardware devices, even if your workstation is compromised. Some hardware security devices have features like touch-to-authorize, or even biometrics, for every single usage. SSH keys can be _used_ while unlocked, but not from a compromised remote site (unless you do agent forwarding, which this article is all about), and never captured from there. Passwords have literally _none_ of the above features.

Forwarding usually bad. SSH Keys otherwise good. Passwords so bad they're not worth comparing to anything.

(and yeah, there's stuff even better than SSH keys)
Exactly my experience. I cancelled my subscription a few weeks ago due to these issues, I now have to constantly follow answers with “please give me the complete answer, dont limit yourself to a shallow response”. Really frustrating to deal with. And I’m also spending way too much time pointing obvious mistakes…
> What did I miss?

From the top of my head...

* A bunch of opinionated devs pushing for microservices because they heard that's what cool kids do now. No technical reason behind at all, just pure bias flamed by a couple of blog posts/YouTube talks they watched one evening.

* A bunch of devops with intentions of implementing "industry best practices and modern tooling ©" that will end up creating a house of cards in Terraform that nobody, themselves included, will dare to touch in six months down the road.

Am I sounding too cynical?
Only Japan would remotely apply unless you're cheating the system by checking only hotspot cities and trying to claim they are the entirety of their country. Suffice to say, most people don't live near Amsterdam, let alone able to afford it.
I would gladly pay money for a commercial version of this. I don’t have a cat, but I have a mother who has dementia. I started looked at tracking devices (in case she starts to wander) but battery life is generally miserable. The power management on this looks fantastic.
you are having too much of good faith in always-perfect assumptions when it comes to life-critical systems. I hope you are not involved in developing or designing such systems.
Replying to my own post: it seems each move can be packed into 8 bits in all but a few rare scenarios such as having many promoted pawns as queens on the board.

See: https://www.chessprogramming.org/Encoding_Moves#Per_Piece_an...
I am now back to a developer role, rather than being a manager (by my own choosing). I am much more productive (and actually communicate more with my colleagues (!)) when I work from home. Luckily my terms allow me to choose where I work from when by my-self.
An Analysis of the Square Outage
I know TikTok is everyones favorite bogeyman, but short clips taken from movies have been on youtube for more than a century.

Also as far as I'm concerened they should be considered fair use. At best they might convince someone to actually watch the whole thing, so whos loss is it anyway?
This looks so really cool, we tried to build something similar in-house for our SaaS product but it took too long and wasn't reliable enough. Would love to retry with superflows sometime!
Yes, there's really no reason to believe someone when they say they get along perfectly fine without strict typing.

Every project I've converted from JS to TS, no matter the size, even the small, only a few hundred LOC projects, has had at least one major "how the hell did this ever work" type bug that the type checking discovered immediately and would have prevented from happening in the first place.

So I don't really do even small projects without TS anymore. Anything more than can fit in my text editor, without scrolling, with the editor window tiled so I can see the app and the debug log at the same time.
Textile looms are particularly relevant : https://www.history.com/news/industrial-revolution-spies-eur...
Wow, was this with the regular model (gpt-N) or a purported unchanging datestamped model like gpt-N-0314/0613?
Or a small frame around with the video slowed down perfectly so you set it to 1.5x playback speed or whatever and it was back to the correct speed.
Youtube (and many other free video hosting services) also serve pirated TV series and movies this way. It's pretty commonand old tactic and not unique to TikTok.
When in doubt, check the primary source: https://www.seas.upenn.edu/~zives/03f/cis550/codd.pdf

See section 1.4 about eliminating “non-simple domains” (which means nested tables) through a process of normalization.
Why should they be considered fair use? Fair use very clearly dictates this is not covered.
> An unrelated director somehow ended up seeing this diagram and had some "suggestions". Please implement these changes asap.

this user gets it
https://archive.ph/RP8oj
The gpt-4 API and ChatGPT-4 are basically different products. It's not clear which one this is comparing. Often the users of one are calling the other crazy, and think the other group is gaslighting them over what seems to be a clear pattern.

ChatGPT seems to fluctuate wildly in quality of expected output. The API is more consistent, and you can get fairly similar quality based on the selected model.
Show HN: My demo for vector embeddings for the Earth's surface
I've had to build out some version of a geospatial vector embedding / latent variable dataset for at least 4 separate projects now. Come see the viewer I've built on top of it!

The embeddings come from globally available Copernicus land cover data.
No? If that's how sentence forming worked it would be impossible to count backwards, or count at all for that matter.
you probably mean decade, not century
I still sometimes sing "we will fix it!" in my head when I'm going to fix something <3
A lot of the authors get close to nothing. I had a professor who wrote the text book used for the course. He said that he didn't care if people pirated it, because he got something like $1.5 per sale. We could just buy him a beer if we wanted.
Our cities are so badly designed that we need an office as excuse to walk
It might just as well be increased by microservices due to fragile dependency chains and just different people working async and what not.
Okta Agent Involved in MGM Resorts Breach, Attackers Claim
This just gave me chills. Never would I want to work on a tool like this from scratch, and alone for that matter, that was underpinning crucial financial planning for a giant operation like the one described in the article.

There are simply too many potential problems that could come up in this scenario and be the cause for catastrophic financial results in the end. And most of them wouldn't nessecarily be easily found via unit tests.
Truly shows how Free Markets are the most efficient
Did you take in to account that the default GPT4 model changed in June? That would explain the response difference. You can still use the original model released in march with the GPT-4-0314 identifier.
> No one has provided convincing evidence that Codd intended to exclude nested tables entirely.

See Codds original paper (linked in a sibling comment) section 1.4.

Note that the relational algebra developed by Codd does not support querying nested tables, which would make them practically useless, even if allowed.
Ideally you want to keep control of your blog, and not have it tied to a platform that's prone to enshittification.
Depends on the contract but the most I seen stipulate not working hour but context of the work. If it was made by instructions of the company for the company and you got remunerated for that then it is not yours to do whatever you please with it. Better check your contract in details.

Example: "All Intellectual Property Rights with regard to Developed Materials will be exclusively vested in and owned by the Company." (with additional data protection and confidentiality clause protecting company property)
The ugly truth is that human society is not crisis stable. As in, if there is not a constant economic surplus, society falls apart into little "wartribes" ready to go at each others throat- or one huge wartribe ready to got at a external others throat. Populism, is just the first democratic expression of this falling apart. So embrace eternal surplus providing, embrace ritualistic slaughter, embrace ritualistic civil war or try to hack human nature.
Show HN: Perforate.app – Focus-friendly bookmarking and task management
Hi HN:

## What is it?

https://perforate.app

Perforate is a web-app for setting recurring schedules, with timeouts for bookmarks and tasks. I drew inspiration from the "noprocrast" setting with HackerNews and wanted to apply it for every website I visit. And I'd like your feedback on if it works, and what you think.

## Why did I build it?

I'm a software-engineer, turned co-founder of a business-to-business software-as-a-services company, and my focus has dramatically shifted from writing code to running the company. This means, I need to regularly check client details, new releases, upcoming marketing campaigns - everything. And I started to find it overwhelming. What I wanted was a tool that helped me track all of the thinks I should be looking at, but hide them for periods of time to keep me from checking them too often.

Also, I love to code, but our products have grown in complexity and testing - and whereas I used to do evening hacks on the system, with new testing and change management processes (both good) - I don't find "hacking" on the product relaxing.

## What does it do?

Perforate has two main functions build on scheduling - tasks and bookmarks. You can set a schedule for when you want to look or track certain things. For each task, you can set a frequency for how often you want to do it, and for bookmarks you can set cooldowns for how often you need to check it. The idea is perforate helps you track the things you know you always need to do - bookmarks are recurring and tasks are things you want to do every day/week/month.

## How do I use it?

Within Perforate I have 3 main schedules for different periods:

* Morning schedule: includes tasks for getting up on time, working out, reading the news and so on.

* Workday schedule: from 9-5 each day I see links for our finance reports in Xero, marketing checklists in Monday, Jira logs - all things that need to be reviewed, but all on hourly cooldowns - once I've checked the Jira board to see updates, I don't really need to see it again that day.

* Weekend schedule: all the life admin tasks that make me feel "complete" - have I cleaned out the car, checked the mail, read tech blogs, pet tasks, etc...

## How did I build it?

* The usual stack which we know and love: Django, Bootstrap, Heroku, some webcomponents & love.

## Where to next?

I've never built and launched a direct user-facing, B2C product - so I've keen to add a payment processor to this for fun and fund hosting.

Also, I think there are some cool team features I can add - if you have team tasks that need to be done routinely, being able to have a team stack would be cool.

And adding a chrome/firefox plugin to support Perforate as a homepage.

What I won't add is ads. Or social networking feature. Or opaque algorithmic views - just pure lists of your bookmarks.

## What can you do?

If you're interested, sign-up (via email or Github) - I find it pretty useful, and so do some early beta testers. Give me some feedback below - I'd be very interested to hear your thoughts on features, pricing strategies, anything...
Show HN: Dead simple API for Retrieval Augmented Generation
Hello everyone,

I am the developer of eazyrag.com, and here is the problem I am trying to solve.

When I was working on usegrasp.com (a search engine), I integrated the LLM answer engine, which is basically implementing a retrieval augmented generation (RAG) pipeline. First, I tried the most popular libraries available. I have to say I disliked the developer experience due to confusing APIs and complex abstractions. I wanted something like Algolia for retrieval augmented generation.

So, I built eazyrag.com, which is an easy-to-use API to implement RAG with your own data inside your apps or websites. You can simply index everything and query it. You don't even need a unique ID for the content you are indexing; just send the entire documents in a single API call, and we will handle chunking, splitting, embedding, and prompt with context formation, etc.

Here is a demo I built: I indexed all the Bun.js docs/guides pages on EazyRAG and performed RAG on them: https://eazyrag.com/bun
> For it to be saleable to departments I bet most assignments are already in the system and you just check off which one to issue.

Yeah, think of Khan Academy but paid.

The pricing I've seen so far in my classes (1 math textbook, 1 history textbook) is 100ish per semester for each textbook's accompanying service, 180ish for a yearly pass (eg. if you take 2+ math classes in consecutive semesters).
It's actually supper annoying.

I keep asking it to write out entire pieces of code, instead of only things it changed, can be annoying to merge it otherwise. But nowadays it acknowledges my request "I will write complete code" and proceed to still comment out parts.
Liberalism is right wing economically and left wing socially. At least in the 19th and early 20th century sense. Today it depends where you are
Me: Count backwards from ten

GPT-4: 10, 9, 8, 7, 6, 5, 4, 3, 2, 1

Me: Count backwards from a million to 999990

GPT-4: 1,000,000, 999,999, 999,998, 999,997, 999,996, 999,995, 999,994, 999,993, 999,992, 999,991, 999,990

I don't know about that.
Oh shit - we did not know. I guess we got lucky too!
Would be interesting to read it but it’s behind membershipwall
I'm writing this comment on a 2011 MacBook Pro (admittedly a fast machine at the time) with a busted graphics chip, running current Linux and Firefox, and my experience of the web is basically fine, including video. Some JS-heavy app-like sites are slow, but those are slow on my monster truck of an office workstation too.
> Being a doctor and diagnosing a patient is really a statistical mapping operation.

You forgot that the doctor makes observations.

ChatGPT does not.
haha .. well, it definitely makes sense
Why would you quiz your friends about pop culture? That would be treating them as informal research assistants.
psycohistory!
Heisse Preise: Fetches price data from big Austrian grocery chains daily
You do realise that your employer does not own the outside and walking isn't only unlocked after clocking in at the office, right? Right?
You’d only have to swipe 300 times to watch the Irishman.
> The Jellyfin codebase also terrifies me

Ok, why?
After Musk spoke to Zilis about population decline fears, she wanted children
At least superficially this looks a lot like C# LINQ to me in terms of structure and database independence (as for EF Core + LINQ). It’s in my top 3 features of that language.

https://www.tutorialsteacher.com/linq/sample-linq-queries

Edit: Shortened to link due to formatting issues
This thread from the author gives some fascinating background info: https://fosstodon.org/@badlogic@mastodon.gamedev.place/11107...
The interview in which Lee discussed the CIA bribery attempt : https://youtu.be/vNQXLhIcPrc
Wow, that sounds fantastic! \s
>Fair use very clearly dictates this is not covered

Fair use, to me, is anything but clear on that topic. It specifically talks about "Amount and substantiality of the portion used in relation to the copyrighted work"[1]

It then generally says "If the use includes a large portion of the copyrighted work, fair use is less likely to be found; if the use employs only a small amount of copyrighted material, fair use is more likely."

But then gives counter-examples that don't match that theme at all.

[1] https://www.copyright.gov/fair-use/
At my company we got bit by this several months ago. Luckily the database was either empty or only had testing data, but like you said the port was exposed and someone found it.
Most people don't watch a whole movie on tiktok, they'll watch a few clips in a row.

Regardless, that user doesn't go on tiktok to search or watch the movie, it just comes up in their fyp.

That user was never going to buy that movie, he might of never heard of it, but now there's a chance he might go watch it on one of the million streaming platforms.

It's the equivalent of people zapping between channels and finding something to watch.

Streaming platforms and co don't have this kind of discoverability, they should consider releasing clips themselves.
Looks great! I really like the developer dashboard - so many other OSS tools (eg langchain w/ loaders) trade off ease of debugging for setup speed.
If you're homelab'ing then you should be using private IPs to host your services anyway. Don't put them on a public IP unless you absolutely have to (eg port 25 for mail).

Use your internal DNS server (eg your routers) for DNS entries for each service. Or if you wish you can put them in public DNS also. Eg. gitlab.myhome.com A 192.168.33.11

You can then access your services over an always-on VPN like wireguard when you're away from home.

Then it doesn't matter if anyone knows what subdomains you have, they can't access them anyway.
And uploading their works on LibGen do. Got it.
> I've never understood them and I'm convinced every definition I've read was written by someone who also didn't understand them

This seems about correct. The book in the list also seems to fall into that category.

Quaternions are actually really simple and pretty once you understand them. The idea is that you specify and axis and an angle. The axis alone gives you a 180° rotation. 1 is the identity and gives you no rotation. If you interpolate between those on a circle (cos/sin) you can get any rotation around that axis.

One may wonder why one needs the sandwich product to rotate a vector when simple multiplication is enough for complex numbers. The reason is that in 2D there is only one plane of rotation and all vectors lie in it. In higher dimensions vectors can be decomposed into a part that lies in the plane of rotation and a part that's orthogonal to it (parallel to the axis in 3D) that is untouched by the rotation. With the sandwich product the quaternions cancel out for the orthogonal part but combine for the part in the plane. This also makes it obvious you have to take half the angle.

Finding the quaternion that rotates between two vectors is also easy. You just multiply them, then take the square root to get the half-angle. Taking the square-root is extremely simple: assuming your quaternion is normalized, you just add 1 and renormalize! Obviously this doesn't work if that quaternion is -1 (can't normalize 0), but it makes sense geometrically: a 360° rotation (-1) is the same around any axis so no axis can be recovered, but for its square root (180°) you have to pick one. It's just not well defined.

Of course all of the above can be shown with a few lines of algebra, and with geometric algebra the whole thing becomes even cooler.
For anyone interested in a day-to-day briefing on the trial, I can recommend www.bigtechontrial.com.
Yes please! Fantastic work by the way.

I’d love to see the code with a permissive license for others to build upon.

Reminds me a little of ncase’s fantastic simulations — for example: https://ncase.me/sim/
I think they probably finetuned that because it used to be the other way around and it was pretty bad UX to wait 1 min to apply a function change to a class or stuff like that.
I remember hearing the opposite, 20 years ago when I made one–that PVC was preferable to ABS because you couldn’t readily buy ABS with any sort of pressure rating.
The major difference is embarrassment. People don't like when other people see them in private, but they don't care if computers see them in private, so computerized surveillance is a lot more acceptable to people.
Looks nice, if it works for you to get your work done faster in the film industry then go for it!
Actually, ChatGTP is very useful for fixing your writing.

Sometimes when a paragraph I write reads a little too harsh to the ear, I ask ChatGTP to rewrite it - it's still my original thought.

It's really effective, but I tend to tone it down a bit to sound like myself since the output can be too formal, dry, and "academic".