skysight-inc/HackerNews huggingface dataset:
One serious problem not mentioned in the article is the feature that looks for magic strings in the output and treats them as special commands [0], meaning that you can't safely output anything that's not completely trusted or carefully filtered.

At least it's deprecated now, but they apparently decided to postpone the removal because too many people are still using it. Maybe if we all do our part in migrating to the new way [1], they will eventually close this giant security hole.

[0] https://github.blog/changelog/2022-10-11-github-actions-depr...

[1] https://docs.github.com/en/actions/using-workflows/workflow-...
Federal Register 101 [pdf]
> This can start with nonspecific symptoms like headache, light sensitivity, and insomnia and develop into neck stiffness and pain

Oh good, now I can be worried that every symptom of "getting old" is actually a brain parasite.
Exactly.

They've had about 30 years to correct course and self-regulate, and not only can the adtech industry not help themselves but companies like The Google have proven that they'll be complicit with the swindle if they can get away with it.

If fast-forwarding through ads on your DVR isn't stealing, then neither is using uBlock Origin. In fact, the morality behind web ads means that the right thing to do is to make ads, especially malicious ads, not profitable.
Some implementation details:

The whole app is built in Flutter. It was a first time experience for us. Everything went pretty fast and smooth and the Flutter documentation is amazing! There are tons of resources out there that helped us solving our problems. We just needed to be a bit careful about the plugins. Some were pretty outdated or even unmaintained. But we made sure we encapsulated every plugin so we can easily replace if necessary.

Dart is a language we felt immediately comfortable with. It didn't feel too dissimilar from Java.

For now, our app is client-side only. There is no server. Which is nice. Cause it removes complexity and we can leave all the data on our users' phones. Nothing is sent to us, or any other 3rd part. This is something we are pretty proud of and hope we can keep up for a long time.
Better pics: https://www.knightscope.com/products/k5

The dystopia looks slick, I was expecting ED-209[1]...

[1] https://www.youtube.com/watch?v=TYsulVXpgYg
There is no evidence that Amazon has no data showing decreased productivity during WFH period. The statement from the management is carefully worded so Amazon won't get smacked by SEC for misrepresentation: the stated "gut feeling" is about the RTO mandate, not about the productivity metrics. Amazon having or lacking performance statistics is a speculation, the CEO hasn't proved or disproved anything. But even if we agreed that, indeed, Amazon not having performance data is a fact, how is it "True Scotsman" again? Bringing up a counterexample against a claim "All companies have no data and do RTO out of spite!" only appears as a fallacy to you because you might be emotionally invested in this. A counterexample is is the proper way to refute a false assertion like that.
"True Scotsman" is, in fact, a fallacy of trying to invalidate a counterexample, interesting that you brought it up.
I went through a similar arch of sentiment since discovering crypto in about 2014. the field really is full of scams, but I think that's being cleared out. Bitcoin and Ethereum are emerging from that as legitimate projects. Still government regulation could squash them, or they might just fail, but if they were scams, I think they would have pulled the rug by now.
That's fine, but it's also a relatively easy to understand pattern that most can follow. You can explain it trivially in text.

But even in a simple case like this: if the user makes a mistake, say inserts a character that doesn't match the pattern, there's no way to tell the user which character exactly causes the problem.

Trivially, because the regex to validate, wouldn't be the regex (or parser) that finds the culprit and highlights it. You'd have to write a different regex for that (which is not natively supported anyways).

A slightly better example of this:

Say you let the user choose a password, but you limit the types of characters and also require that certain types of characters are inserted at least once.

(Aside from the fact that this is a terrible idea. You see this in the wild all the time and it's an example that illustrates the problem.)

Now the user's PW manager inserts a random, long password but the field doesn't validate. What's the message? How does the user find the culprit (character)?

There are all sorts of things like that, especially with inputs that require a specific format. Credit card numbers, social security numbers, stuff like that.

Again, I very much lean into HTML and Web standards when I can (and am aware) but at the same time you can't avoid JS if you want to make a good UI that helps the user and is accessible in many cases.
They'd bring up that poverty is the "necessity" in the phrase "Necessity is the mother of invention." though perhaps in lieu of invention, industry.

In neither case is either correct. Rather poverty exists in a strata of manmade architecture that defies scrutiny. Some elect it, others have it thrust upon them, and there is of course every space between and above those statements that make up a much larger space.
Cool to see someone use and abuse Twitter to make money.

Seems that every successful indie hacker story has a component of being somewhat known on twitter.
> Allowing anyone from any country with a smartphone the ability to hold and transact in US dollars, for one.

By breaking the law. People can do the same thing without blockchain for less.
As fewer people need to be employed to keep going with society's actual work, we're going to see more of these jobs programs. Our culture is obsessed with this idea that "a living" must be earned through toil, despite civilization requiring less and less toil year after year. You're absolutely right. It would be better for everyone if the TSA simply pay these employees to do nothing, but handing money to people is politically impossible, unless those "people" are banks and Too Big To Fail Businesses.
They have to have this policy. You can come up with a weaponizeable design for almost any object you can think of e.g. a toy lightsaber with a heavy metal hilt the is basically usable as a club. You have to give agents the discretion to say "yeah, that's not coming on a plane"
Until using Twitter drops out of these types of post, I'll continue to suggest retitling them to "How I became a tech influencer that writes software at 45k/mo". Also would love to see usage rates on these products instead of subscriptions alone, as very clearly Twitch has demonstrated people will give money to influencers they like regardless of (even in absence of) their product.
I'm not, I've just lived there ;)
Mark Cuban recently lost $870k in crypto by a fake app scheme:

> “I’m pretty sure I downloaded a version of MetaMask with some shit in it,” Cuban told DL News. He said he had searched for Circle on Google, not MetaMask. [1]

[1]: https://www.dlnews.com/articles/people-culture/mark-cuban-lo...
For most Americans, they don't have glass plates/bowls at their work. That's where enough microwaving happens that if you can't "fix" the problem there then there's no point in changing habits at home.
Nalgene make HDPE water bottles now. They’re really durable. I’ve had two as my daily use bottles for about 4 years and they’re as durable or more durable than the hard plastic Nalgene bottles I used before.
I've never owned a microwave, instead I air-fry everything. Pretty sure this is the same trick restaurants use, especially fast-food ones. Microwaves make soggy leftovers.
The Harassment of Elon Musk
You don't have to sneakernet it.

That's why they made this cloud enabled software, you should use that.

You hypothetically have to sneakernet it because you refuse to embrace new tech.

Ultimately 3d printers are like washing machines or vacuums. They're not a lifetime purchase. But it, use it for 4 years while it's up to date and has support, etc. Then when it doesn't, buy a new one.

It's like the people that worry about parts availability for 10 years from now when they buy a Camry. As long as you buy a Camry not a Jaguar, you will be able to buy parts.
i was rooting for opa! it was pretty sad when it died. ocsigen does do a lot of the same thing in theory, but in practice i found it really hard to learn and eventually gave up.
There’s a little bit of alert fatigue on this stuff. Online internet privacy/security folks kick up a fuss about a lot of things that I don’t think cause me any harm, and it’s reducing my ability to detect legitimate threats. I can’t constantly evaluate whether something is Google “spying on my web browsing” or “this guy can steal your money”.

Fortunately, the solution of just sticking to mainstream platforms works. If I’m on a Mac with an iPhone, anything that hits me hits half of Americans. I’ll be in a nice big class-action once the damages are widespread.

Interestingly, this disincentivizes niche platforms.
The effectiveness of a security program cannot solely be measured by penetration tests under controlled circumstances.
Aspects of deterrence and standardization required by the program fundamentally changes the threat actors’ calculus.

This is the very fundamentals of mixed strategy calculations in game theory.
The problem with saving money is that they're replacing nutritious stuff with filler. So cheaper per oz, but you get a worse product.
https://www.scientificamerican.com/article/do-the-eyes-have-...

I imagine humans have a lot more cognitive biases that affect their memory than a video camera, even groups of humans.
https://archive.ph/SlCbA
Dual licensing becomes very difficult once there is more than one person writing code, and that includes submitting bug fixes. Once this happens you need to track down every contributor and have them sign licensing terms. It's long, difficult, expensive, and you might prefer to rewrite the whole thing again. https://en.wikipedia.org/wiki/Contributor_License_Agreement
Think of it as an excuse.
CA is losing population too and building houses in those desirable locations. Why don't prices go down? These are financialized assets bought on credit. Some 8-10% of SF rental and 2% of owned housing is vacant (over 25% of commercial), but you don't see prices go down. Building 1% per year would involve a project on every single residential city block. That would have huge externalities. Why should current residents deal with the mess so more people can move in? So builders can get rich charging $1000/sqft?

The quick way to lower prices would be to annually tax vacancies (if you can't show a CA resident/corp paying rental income on a residential/commercial property) then pay the sales tax income the city would have received from those in an occupied location. This would encourage people to lower rents/prices to fill vacancies. Prop13 has made the property taxable rate so low that many people would rather have an empty rotting hulk than an occupied older property since it would lower their leverage on asset appreciation. A residence tax wouldn't be limited to the Prop13 assessment (5-10% of current value).

If there is ever a bubble pop, prices would likely to stay low for a generation. Just like Japan. It's not that different from bitcoin/NFT (other than some people live in them).
In case you were wondering, there is a "FossilHub": http://chiselapp.com/
Well, young people don't really watch that much TV these days. Why would they? I mean, you have to choose a channel and then you're watching the same thing for ages, like 25 minutes or something. Boring! And you have to sit there with your family for that whole time. I guess it's ok if you're really old and can't move very much, though that seems like a kind of torture where you can't move so you have to keep watching the same thing over and over.
The humans inside the suits and lander also provided some useful heat. For most spacecraft, once you put humans into them the problem changes from conserving heat to getting rid of it.
Ok so at 120 degrees C got it
That is definitely true. I currently live in a one-bedroom apartment near Silicon Valley; I can't afford to buy a house anywhere near the Bay Area unless I wanted to commute from Stockton, which has a very high crime rate. Conversely, I could afford a really nice place in Tokyo with my Silicon Valley income, but if I transferred to my company's Tokyo branch and took a local salary, my salary would go down substantially. Even so, I'd still be able to afford a home in a suburb of Tokyo (even $250,000 can get you a place out there).

As someone who travels to Japan frequently, my dream is to own a vacation home there. Outside of Tokyo homes can be even cheaper; I've seen listings in rural parts of Japan for places as low as $40,000!
It's mind boggling how crypto people still trust hot wallets that run as fucking browser extensions.
in other news... Thought leaders in AI/LLM/AGI meeting next week to bury this inconvenient finding that threatens their narrative.
I was just gonna post this.
What you are saying is paradoxical.

Morality necessarily comes from authority. Otherwise, it's nothing but a preference or a fashion. Everyone may have a different view of morality, but the whole point of morality is objective, if it is to have any comprehensible definition. Hence it is correct to state one's morality with authority if one truly believes it.
Bullying will just happen in the camera's blind spots. Are you going to put cameras in the loo?
It is absolutely bonkers how many otherwise pretty reasonable people miss this glaringly obvious fact.
I've spent a lot of time profiling clang when compiling the Linux kernel.

For large C codebases, compile time is dominated by lexing and parsing, not optimization passes.

Headers have become too crufty; they tend to only grow over time, resulting in an amplification attack on the lexer and parser.

Lazy parsing is maybe interesting. There's a hazard related to the mangling of lambdas. Carbon has an interesting idea of not constructing an AST.

I think we also need tools to help us automate header refactoring.
> We focus way too much on tools, processes, and forget that at the end of the day, we're trying to exchange useful products for mone

Yep, just look at @levelsio and his $250k MRR stack of apps built with PHP and jQuery

> I'm a little disappointed by all the negativity here, but I suspect most of us are just jealous.

Yep x2, for a website built around startups a huge number seem to be against a solo founder bootstrapping apps successfully
This is why investors love software: the marginal cost of product is tiny. However, real money must be spent on R&D and marketing to keep those profit margins going, especially if you don't have a technology moat (e.g., AI wrappers).
I'm criticizing the hipocrisy of denouncing greed while being part of the tech industry, especially on this forum, and the accusation that the author is guilty of it, based on nothing but a post about a successful entrepreneurship journey taken on "hard mode" (being a solo founder with no VC backing or advertising scam business models).

This is a success story we should all celebrate in this community, and it pains me to see this type of response at the top of the comment section.
Your issue is of trust.

Do you use an Apple device? I can see why non-Apple users lack trust.

Apple would be eviscerated if they were doing more than they claimed.

Other devices makers are excused for poor behavior. Often with the tech-bro response that is some flavor of "install a custom OS, bro!"
Everything about TSA is subject to the whims of the the agent that day. Even pre-check. Leave your belt on, except here, today, because reasons.
Or rather, perverted adults are harming kids, using clandestine means.
Yeah it looks more like a Protectron than a ED-209. Seems to be awkward like one too. [1]

[1] https://arstechnica.com/gadgets/2017/07/knightscope-k5-secur...
How?

I would be hard pressed to find someone who could more cheaply and easily smuggle physical dollars into Argentina than they could smuggle in stablecoins.
This certainly looks interesting. I've been using Kitty for a while and it works great and supports so many features. It would be nice to see how it compares to Foot in terms of speed. I'm also curios about Ghostty, the in-progress (but currently private) terminal from Mitchell Hashimoto.

https://mitchellh.com/ghostty
I make ceramics using slip casting and I just realized this might be a great idea to try! I'm currently working on a ceramic mason jar that will be compatible with mason jar lids, but I should play around with other food storage containers.
> But that assumes that Google would settle.

See also:
Google settles account settings lawsuit less than one week after being filed [pdf] (ca.gov) 174 points by 1vuio0pswjnm7 3 days ago

https://news.ycombinator.com/item?id=37582565
So Lou Reed had written "Walk on the Wild Side" before he recorded his first solo album which did not feature this song.

Actually I like his first album more than "Transformer":

https://en.wikipedia.org/wiki/Lou_Reed_(album)
Ya frozen tv dinners are a big culprit here. Fortunately, atleast Trader Joe’s in my area has just switched to paper containers. Who’s got the over/under whether that paper is lined with plastic…
If the overhead was negligible, then so would gas costs.
Free is 100 searches, not 100/month -- when you've used them up, they're gone.
This is a social problem. She was instructed to do xyz over whatsapp. Any device can be compromised. It’s all about informing people what not to do. Like how very slowly old people are starting to wake up to the idea that you don’t pay the IRS with google play gift cards.
I'm a hardware product design engineer, have been using 3d printers for 20 years professionally to get my work done.

Recently purchased an X1 Carbon with 2 AMSs and its incredible. It's a very high quality, enabling, wonderful piece if equipment.

I have used dozens of professional machines that cost hundreds of thousands, built, bought and run many lower cost machines also.

I can only count on one hand the number of times I've been this impressed by a 3d printer when it came out, and never by a printer even remotely in the X1s process range.

I think this A1 mini is a great entry level printer, if you only have $500 to spend on a printer, get this one. If you have $1500 get the X1.
I agree with the headline, but for a very different reason:

Kid's online activities are criminalized when schools snoop and hand that information over to the school resource officer.

I don't ever want a visit to the wrong website to cause my family to be sucked into the legal system. So, I provide my kids hardware, and refuse to allow spyware to be installed and that includes browser extensions. Every year I have at least one of the three schools my kids are at try to force us to let them install something, and they find out:

0. The spyware they are using is creating a lot of network traffic to unexpected (and often unwanted) places and is much more intrusive than parents are led to believe.

1. Government, and that would be a public school, does not have legal right to surveil my kids without a search warrant.

2. They have no right to install stuff on a computer they do not own.

3. Public schools cannot deny education to my kids because we opted out of surveillance.

The final resolution is usually the district's lawyer telling the head of IT they have to stand down on the issue.
Respectfully, it's this take that is poor. Musicians don't owe people anything and aren't obligated to smile any time anyone asks them to perform something. Some musicians will enjoy playing the same song a million times, while others have a different relationship with that music that may necessitate them feeling the need to "move on" from it. Music will always mean different things to different people.
I think that is exactly what physical engineering largely consists of, selecting the correct material, process, or part. The reason they don’t print these for software is because the numbers changes too fast. The physical properties of steel are relatively constant. Sure, you can invent new types, but 1080 steel has about the same properties as when it was invented.

Software numbers change too quick. The amount of CPUs in a system, the network speed, storage, etc. Why write guides on what tech to choose when the numbers changes so fast?

I think it’s also a sign of our professions immaturity that we don’t write more books like that. We don’t even have good dimensions defined on which to compare approaches.
Is rustc is backward-compatible, does it typically compile .rs files written 1 year ago? 5 years ago?
I have quite a bit of tools/progs or game mods that pretty much nobody uses.
Mostly because they are very niche and long dead OS. Same for games, nobody plays them anymore. Is this making me sad? A bit, because would be cool to share and play. But, from other side I have stuff I can tinker myself and play too.
It's impressive. My only complaint would be that the article is mainly focusing on pretty good conditions. I'd be nice to see the same thing with crap lighting.
The vast vast majority of users will neither want nor use this embedded reverse shell functionality. I fall in that majority. Hats off to the users who do to get their work done with it but I/we don't.

So for us, this function should have an enable flag which is off by default. The slim minority who do want it and would use it can suffer the inordinate burden of having to go into the preferences panel and clicking enable.

You can argue whether it is a hole (it is) or whether it is a piece of a hole (it is). But it should be off by default and on by permission.

Yo Microsoft, add a preference for this thing which defaults off.
AlvaAR, SLAM algorithm running with WebAssembly in the browser
Or it shows how insanely hard it is to make a flowchart to deal with actual reality. Here, try this: https://novehiclesinthepark.com/

Then imagine a rule set as complicated as “all rules required to ensure safe air travel” being redteamed by a population of a billion people with incentives varying from “personal convenience” to “fly into an occupied skyscraper” to “move ten pounds of cocaine.”

Now make that rule set enforceable by tens of thousands of people in a time and cost-effective manner.

Deferring a lot of authority to a somewhat sensible person on the ground is the only plausible approach.
God seems to notice a lot less bad behavior than the school resource officer.
> [...] that the whole thing is just a tax-funded wealth redistribution program [...]

Aren't they paid by the passenger fee?
Yeah, it's useless to comment on a post if you only read the first paragraph.

But cool. You do you.
> Unfortunately for git alternatives, the momentum behind git is in large part pushed by the "social network" aspect of GitHub

And there was a time everyone thought facebook wouldn't dethrone myspace, [something.js] wouldn't replace [somethingelse.js], and so on.

First mover doesn't mean a lot in software. The network effect you brought up does, but there'll be plenty of people who don't want to get caught up in that "trap" and git/MS-land to seed a decent alternative. (Why should your code discovery networking site be prescribing your choice in VCS, anyway?)
Exactly. My mother-in-law is an avid golfer and had a temporary condition requiring the use of a cane. Friends of hers got her a driver (the largest golf club), modified to have a bent handle and some rubber on the head to serve as a cane.

She was surprised to find that the TSA wouldn't let her through security carrying what most would agree is effectively both a golf club (not allowed) and a cane (allowed). (I was surprised that she was surprised.)