skysight-inc/HackerNews huggingface dataset:
To whom it may concern,

We're building a new search engine. Of course it's AI driven, but at its core, it's all about human dignity. When you use it, you'll have a voice. If you'd like to try it, please email me: josh@sirch.org

Thanks!
Josh

PS. If you'd like to join our team, we have 16 people now (mostly Snapchat/Instagram/Twitter folks), and we'd like to go up to 50 before we raise capital. It's going to be a wild ride.
Yeah, the core issue is really that you can't cryptographically prove which human being is holding the cell phone you're talking to. You can't tell if you're talking to Bob, or someone named Charlie who is pretending to be Bob. Charlie could then hire an accomplice to call Bob and pretend to be you so you'd both think you were talking to each other.

The threat model here assumes Charlie controls whatever mechanism you used to learn about Bob's phone number / public key / whatever, and that he can convincingly alter anything you say to Bob that involves checking whether you have the correct phone number / public key / whatever.

Certificate Transparency type solutions make it easier to compare notes about whose phone number / public key / whatever is whose, but Charlie can still (with enough effort and resources) defeat them by impersonating everyone you try to talk to about Certificate Transparency.
Because the current bunch aren't eager to have their fingers in the pie.
We need Terraform for build pipelines and God help you if you use Bitbucket lol
Ask HN: Hootsuite Rebuilt?
I have been following up on 3 things lately:

1- AI being able to work as a literal coworker. Hence AI software not being a tool but the work/service itself

2- User/customer acquisition costs rocketing

3- (partially related to #2) Rise of content marketing, especially in B2B Linkedin and B2C TikTok.

Hence I have been thinking about building an app that can centralise your media and content generation and publishing for Twitter, Linkedin, TikTok and more.

The unique thing about the UX design would be that it would not require you to log in, enter data and publish. Rather it would generate the posts and content by its own, based on your Slack messages or Linear/Jira tasks. Then it would send you an email or notification asking for permission to publish these.
Just like a junior marketing manager you would hire.
Full transparency: I am looking to invalidate this before building. Hence any harsh feedback is welcome as long as the intention is good. Apologies if this is not the place to ask this but Reddit and other forums tend to be much more spammier compared to reviews here
I’d have to see data in order to confirm this is true. Once a delinquency gets placed on a credit report paying the bill doesn’t help the person that owes. It also assumes that the people not paying are choosing to do so rather than not being able to. Given the debts are sold at a steep discount, I’d say it’s more efficient to have lower prices up front which could potentially be affordable for more of the customers.
On Android, you usually need three exploits.

1. Chrome code execution (gain foothold inside Chrome process).

2. Sandbox escape (gain code execution outside the Chrome sandbox, with the privileges of the Chrome process, which aren’t very useful except to stage another exploit).

3. Local privilege escalation, usually a kernel bug or similar, to elevate to root where you can break the process “sandbox” and establish persistence.
Lisp languages facilitate building complex bioinformatics applications (2018)
Did I say they had to deploy it to production? If they deployed it in dev and test environments even a few years ago, they might have some experience deploying it in prod today.
"Yes, you need to be careful when you integrate GPL and LGPL code into your proprietary code base, and in some cases you just cannot do it. But so what? You are not entitled to use of that code. If you can't use it because of its license, then that's life: move on and find something else that you can use, or write it yourself."

Yeah, apparently people moved on and the GPL is loosing significance.
Oh boy, wait until the "Prompt Engineers" get a hold of this one.
Kagi's killer feature can't be blind tested, because Google and Bing don't have it. The ability to pin, raise or block sites in your results is a game changer.
I'm not saying that getting a license to sell a pharmacy should be just as easy as getting a drivers license, just that there's no contradiction between wanting licensing to be easier, and wanting people held responsible for damage.
I am really curious as to what happens when one of these big companies just says nope to the fine.

Will they be blocked from the EU? Is there some international way that they can get a US or Chinese company to pay up?
Don't mean to defend the execs that made this decision too much, but I think saying "they're all just idiots" is probably not what really happened.

Basically, execs (especially public company execs) have the responsibility for growing revenue and earnings. Ideally they do that by just making better products, but some times you do need to "thread the needle" by charging more for your products while not pissing off customers too much.

I'm sure the devs and customer support folks were screaming bloody murder, but they are also not responsible for satisfying public markets, so it's easier to say those things without having to worry about revenue growth.

So point being, I'm sure execs thought there would be some blowback, but they probably felt it would be "manageable", and like others have said, they overestimated the irreplaceability of Unity. So its important at the exec level to have someone who can whisper in your ear, someone who does understand the requirement for growing revenue, that can honestly say "you've managed to convince yourself of this bullshit."
An open-source and privacy-by-design Conversational AI in-browser
If only the government didn't have so many safeguards against votes threatening the status quo.
But many times you can’t fix the root cause. Maybe one of your parents is dying. Maybe your relationship with your spouse is falling apart. Maybe you bought a house in the last year and now you’re $50,000 underwater.
You don't get 1.5-2% neanderthal genes in modern humans by viewing them as demons.
i liked the article from an artists perspective. I resonate a lot with the "your tastes are better than your skill level". I have music i write which i think sections of punch right up there with the pros. But not all of them do. And i have fooled myself into thinking i have ALL the skills required to roll with the pros before. It's humbling - but i fully endorse the "perfectionism isnt your problem" idea.

Technology has advanced so far, and the possibilities, and permutations of ideas is endless. Just like coming up with a theory as grond breaking as the theory of relativity is super hard, so is coming up with really novel new art....we have so many examples of it - and so much in high quality - the bar is high.

A parallel issue is societies obsession with "shipping"...specifically speaking of music/art - i remember 15+ years ago, folks working a lot longer on music before it saw the light of day - folks are very happy to show off loops on tiktok...and - the results in finished music equate to half finished/underbaked music which everyone is patting each other on the back over.

Nice post.
More to the point, often you need assembly to prevent the compiler from sabotaging your carefully constant-time algorithms, replacing your careful length-independent XOR loops with branches and the like.

Performance is a small part of why crypto code is often written in assembly. C is simply too high level, allowing too many optimizations.

For that matter, assembly is too high level, and Intel is adding flags to turn off some of the internal CPU optimizations:

https://www.intel.com/content/www/us/en/developer/articles/t...
I've been playing the piano for 55+ years, and still practice daily.

What makes piano difficult isn't reading music notation. You can learn to read music notation in a week. What makes it difficult is the physical challanges.

Skipping music notation may save you a few weeks at the very beginning, but you'll quickly hit a wall and need to learn the physical skills. And if you can't read music, you won't be able to make music with other people.

This is a very, very bad idea.
I grew up in the area, those shores aren't tribal lands other than a few tiny bits. And most of it is already preserved shore/ocean, so this just appears to be a land grab attempt.

I agree that this area should be protected, but giving it to a few people based on ancestry is ridiculous.
Likely yes, they were unable to capture the following stages so they don’t know what was exploited after gaining initial execution within the chrome sandbox.

Likely there’s a chrome sandbox escape and a kernel exploit remaining “unknown and unpatched”.
Fair enough. I'm open to data on that.
The caption underneath this setting when you turn it on makes clear that scanning is on-device
Not wallowing in negative emotions can be a struggle.
> no one asked for and no one is using for anything good anyway

Speak for yourself. This is a crappy attitude honestly, you might want to keep an open mind on things you don’t have an interest in
Feel similarly unemployable. Year and half ago even FAANG recruiters were knocking down the door to talk and not having worked for a period didn't make me a leper. Now can't get any interviews pretty much regardless of position or salary. Tech job market is terrible.
> How did you decide which bits of business logic would live in the database as opposed to at the application layer(s)?

Not the previous poster but...

I would think of it as an application layer that is running at the database.

It would make the most sense for logic that is closely coupled to data access... exactly what that is depends on your app. Low-level access control policies... maybe you need to dig data out of a bunch of tables and turn it in to a hierarchy based on complicated user prefs also stored in the database... Or the opposite where you have complex data coming in that needs to be written to a bunch of tables, especially when there's back and forth.

I don't think very many should try to put their whole app in there. Database compute tends to get expensive and complicated to scale, so stuffing things in there just because you can might run in to trouble. Not to mention (except for SQLite) the runtime environment is seriously constrained in all kinds of ways.

The previous post mentions triggers but I don't know what those have to do with this. The chance that triggers are right solution to any given problem is approximately 0% in my experience.
For SSH: setup an SSH CA and then disable asking in the client config.
> I have been able to read sheet music since I was 8.
If the whole concept of this confuses me, and it does

It’s been my experience that most people who are fond of sheet music learned it at a very young age.

Or perhaps I’m just stupid? I’ve tried several times to learn sheet music in my 20’s and it is brutally difficult. Guitar tabs? Easy. Chord charts? No problem. Sheet music? Go fuck yourself!

What is it with the musicians in the comments here having _zero_ awareness? Sheet music is probably great! Sure, fine. But to claim that OP’s idea or even YouTube tutorials are outright not a good idea is laughable and tone deaf.

Not everyone’s folks bought them a Steinway and piano lessons at age 5-13 (the age when humans can magically pick up on absurdly difficult concepts with relatively little effort).
I noticed this on my Sonicare Toothbrush already. I expected there would be Home Assistant integrations or Gadgetbridge-like alternatives but no: Creating an account is a must. Instantly returned it for a "non-smart" model
It’s the opposite.
A Kubernetes solution for Postgres.
Never heard of this game before.

Is it still a common game to play?
I found this (not an endorsement, I have no affiliation, and I don't use it):

YakiHonne is a Nostr-based decentralized content media protocol, which supports free curation, creation, publishing, and reporting by various media.

https://yakihonne.com/article/naddr1qq2njnfcdpsngu3sdev4wjn3...
One of the comments mentions powering and sshing into a pi with their iPad Pro. That would be cool to do with the iPhone :)
I did Windows/WSL for years and have bailed. No amount of integration or functionality will ever make me put up with the user-hostile and attention-thieving design of Windows 11. I'd stop using computers completely if I had no other option.
Training an LLM on a ton of multiple choice questions doesn't "infect it" like you're thinking. The tokens capture the fact it's a multiple choice question, and the LLM eventually captures the nuance of textual entailment as a common form of multiple choice question.

In a more natural conversational setting, you'd get a different answer:

https://chat.openai.com/share/00fed9d6-e3de-4319-9c76-ae1800...

https://chat.openai.com/share/dc9a796c-870c-44ee-b421-31c24b...
Rails GraphQL authentication from scratch #1
I think your suspicion might be correct: long videos exceeds GPT token limitation (16,385 tokens in my case of GPT-3.5-turbo-16k).

Thanks for your suggestion about how to address it.
I beg to differ. Impact will not be easily felt by businesses if it relies on trickle down consequences. In a capitalistic society, employers and employees don’t share the equal power dynamics.
Do I need an operator, though?

I'd definitely take something over the insanity that is managed services and constant ticket filing with the cloud vendors, but my gut says I just need a Helm chart that makes it decently easy to, a.) bring up PG & some replicas that hopefully have a decent consistency story and b.) a backup job that can write to S3 et al.

I need a better "seduce to use" for a CRD for Postgres, I guess.

"It doesn’t rely on statefulsets [and manages disks itself]" and "The Kubernetes way" (and dark red on blue, yeesh) … just doesn't inspire me?
Did you watch the video, or is this a rhetorical response? Spoiler: it's about the conflict of interests in google search.
Very importantly, just to append, midi start note also contains velocity, and midi also contains and control changes.
Oh, I thought finding these vulns was a highly open-ended endeavor with variable payouts.
optional things like this are fine. preventing me from joining e.g. NSFW discord servers wholesale is not imo. As an adult I should be able to use my phone however I want
I don't believe that anything Google does now - summarization included - will avoid being gamed just as effectively as their current search results have.

It's a negative-sum arms race, but if Google (or whoever) wasn't spending the money to fuel the arms race by passing on ad money, who would pay for Google to exist in the first place?
It's hanging for everything I try.

I suggest a progress bar rather than a spinny thingy. Give the user some sense that a conclusion is on the horizon.

From my own experiments, I think you'll get better summaries with a prompt like "This is a transcription of a youtube video. Please etc etc etc". Context seems to help.
Yes, if you need these things, you will have to go native (although you will probably automatically benefit from unified memory).

For many many things, you won't, and then the ability to target Apple/Windows/Linux with exactly the same code, pain-free GPU access etc, that's just great. The other day I checked if I can access from the browser the 3D coordinates of my space mouse, and it just works, based on a standard Web API (GamePad API). While from Swift, it would be a hassle to setup and maintain.
One point I am going to harp on

> 8. Everything Is Becoming a Web App

Microsoft has done such a terrible job making a clear way for devs to make windows app with native UI. Should I use Win32 legacy? How about WinForms? Can I have device independent sizing in WPF? Should I use the dumpster fire that’s Maui? Can I get away with the limitations of WinUI?

I find the state of native development a real pain point in 2023 and Microsoft’s internal infighting is doing nothing to improve the situation.
> it being open-source

Absolutely not. The LLAMA license [1] is clear that it's not open source. It's for non-commercial, research only, and only by explicit permission from Meta. The weights were leaked, on 4chan [2], illegally, according to the license. Very very few people are using it legally. This interpretation is clear from its wording, and also matches the interpretation of our flock of lawyers.

[1] https://github.com/facebookresearch/llama/issues/266

[2] https://levelup.gitconnected.com/metas-chatgpt-is-now-illega...
Thanks - worthwhile features for sure and being decentralized.

I was hoping to find that information on the site itself, I was looking for an about page or similar. Couldn't find it. Hence why it was confusing for a first time user. Or maybe I just missed it.
SMIC, a Chinese fab that is heavily sanctioned by the US, has reached 7nm, which has allowed Huawei to start making competitive phones again. The sanctions are failing because Chinese companies are developing workarounds and replacements.
Isn't this how most nations work? If one's parents are American, they inherit all the rights due to Americans, including the ability to run for political office. This gives the descendants of Americans sovereignty over a chunk of land in North America known as the United States.
When I got to your website I get a Vercel 404 `Code: DEPLOYMENT_NOT_FOUND`. Perhaps not the most confidence-inspiring for potential candidates..
Haha, that might be a better way of putting it. "A solution for running Postgres in Kubernetes"
Consider this code:

fn foo () -> A | B | C {
if condition {
bar();
} else {
baz();
}
}

fn bar() -> A | B {
...
}

fn baz() -> B | C {
...
}

vs

fn foo () -> Either<A, Either<B, C> {
if condition {
match bar() {
Either::Left(a) => Either::Left(a),
Either::Right(b) => Either::Right(Either::Left(b)),
}
} else {
match baz() {
Either::Left(b) => Either::Right(Either::Left(b),
Either::Right(c) => Either::Right(Either::Right(b)),
}
}
}

fn bar() -> Either<A, B> {
...
}

fn baz() -> Either<B, C> {
...
}

The latter code composes poorly and requires an extra branch at runtime. It is fundamentally more complex to dispatch on nested discriminated unions instead of flat non-discriminated unions both for the programmer to write, read, and for the runtime to execute.

The compiler can also optimize the representation of the anonymous enum based on the context in which its created, whereas its more difficult to do that in the discriminated case.

This isn't a controversial opinion, there are mountains of Typescript written in this style.
When I worked at a Tektronix spinoff company, one time they were clearing out a lot of bench equipment, using a blind auction instead of the Dumpster.

Among my haul, I got two large logic analyzers, for $5 apiece, free of Dumpster commingling artifacts.

(This is both a happy memory, and an embarrassing one. After I moved the loot to my cubicle, before figuring out how to get it home without from the rural-ish science park without a car, one of the hardware engineers came by my cubicle, and was admiring the logic analyzers. Being a dumb teenager, with little understanding of adult interactions, I didn't realize until years/decades later that he might've wanted one of the logic analyzers, and I should've offered.)

Years later, I was a grad student, and, amidst a pile of junk in a common area of the lab that was being cleared out, was a NeXT Cube, which someone said I could take home. So I had it in my office (again, no car), and then another grad student comes by, and says they'd already claimed it somehow, so I gave it to them.

Generalizing from two anecdotes: keeping things out of the Dumpster is good, methods are unfair, and, if you score discarded gear from your workplace, then exfiltrate it immediately, to avoid awkwardness.
BI demo in a box with DuckDB and dbt
support python client with https://github.com/timeplus-io/proton-python-driver
I tried to do something similar, but I could only get transcripts for videos with transcript files attached, which isnt a huge number of videos. How did you get around this?
Please don't post "regular reminder" style comments - they're too generic, and generic discussion is consistently less interesting. Good threads require being unpredictable. The best way to get that is to respond to specific new information in an article.

https://news.ycombinator.com/newsguidelines.html
Seems to be an arms race between youtube forcing creators to make videos 8 mins long min to be able to get mid roll ads and people coming up with ways to summarize the transcript.

Idea for the future: Use the summarize to re-cut the videos to the most important parts. Like a super to the point tiktok style video that is nothing but dopamine being injected into your veins. There seems to already be "auto podcast clipper ai agents" out there but nothing for consumers to use. those are more video editor adjacent. If anyone wants to work on something like this, lemme know.
Gabe Newell: Reflections of a Video Game Maker (2013)
Care to share the secret that would have avoided countless exploits?
Explicit control can work for ranking but can’t scale to the retrieval step of search - you aren’t going to sift through thousands of thousands of pages of potential results to give feedback on a meaningful portion of them, there must be some method of pulling pages to be ranked. This is where the gaming happens, with basically limitless spam domains that need to be filtered out. There just is no way Kagi is 100% relying on self reports for this.
It's been K - 8 letters - S long enough that everyone at work just calls it "Kates" now, which initially annoyed me to no end, but has kind of grown on me.
Huge fan of RASP et al. If you enjoy this space, might be fun to take a glance at some of my work on HandCrafted Transformers [1] wherein I hand-pick the weights in a transformer model to do long-handed addition similar to how humans learn to do it in gradeshcool.

[1] https://colab.research.google.com/github/newhouseb/handcraft...
I bet that in most cases you'd make more if you got the broken phone repaired and then sold the now working phone.
This is a feature for kid’s devices, not the default setting.
I'm sorry. I don't really do maintenance on my synapse either (few users, no problems), so I should have figured that usually you do, and then also for the proxy.
Redhat and Nvidia have been pushing the boundaries of GPL recently, and Free software / open source as a concept continues to get watered down. I wouldn't be surprised to see MS try something.
Holy wow, this is FAST. I wonder if both videos I used were cached. How do they do it so fast?
100%. It's the difference between empowering users and patronizing them.
> Of course, sometimes the cache isn't found, particularly because there's a 5 GB cache size limit (which cannot be enlarged, not even for payment) which cycles out FIFO. So if you go over the 5 GB cache, you might as well not have one.

Looks like I can move on that "build caching mysteriously broken" issue now. Thanks for the heads up!
I stopped getting any care at a large hospital near me's outpatient office because they had a bad habit of just sending bills to collections before my insurance responded to them, and then not updating anything once they did, so I'd get a debt collector notice and call the hospital, and they'd say "oh you paid that in full, you shouldn't be getting a notice" "well you should probably tell that to the debt collector".

Over and over again.

So if those started showing up on my credit report eventually, it'd be a significant impact, even though I was not involved in any failure to pay. Fortunately, they never did, but for many people, that's not true.