skysight-inc/HackerNews huggingface dataset:
My hunch is that if you want to do that the safe way would be to have a mechanism that creates a snapshot of the SQLite database for the client to download when they request it.

One way to do that is with VACUUM INTO, e.g. how I use it in this TIL: https://til.simonwillison.net/sqlite/python-sqlite-memory-to...

If your database is less than 100MB or so I imagine this would easily be fast enough that the performance overhead wouldn't be worth worrying about.
The list has nothing to do with chip manufacturing.

The list is used as a list of reasonable-to-exclude countries from the CHIPS act.

The same list is used _all over the place_, including things like NASA mission collaboration, government funding for conference travel, background checks for visiting gov offices, etc.
I agree with you things will change.

And I agree, requiring permission to use copyrighted works in model building will give legs to the current paradigm, but only delay the change.

However, AI is going to upset everyone’s apple carts, so anything that allows changes to happen more smoothly, less disruptively, is probably with the effort.

AI is likely to devalue all human labor, except for the provenance value of creations (creator, history, associations) and a preference for the human element (many personal services, or services with a personal touch element).
https://www.sqlite.org/np1queryprob.html is one of my favourite answers to that question.
I'm not dancing around it, I just don't think belltaco's point is relevant to the current situation.
> Rubicon by Tom Holland

I'm currently listening my way through The Rest Is History, the podcast he does with Dominic Sandbrook. Very entertaning, highly recommended!
EAL5 is mainly about having a semi- formal description and for 6-7 you also need formal verification.

Outside some very limited cases, we don't have the tools to go there yet. EAL4+ is what people should aim for.
> Written in Node.js with practically no libraries (certainly no Electron)

Still V8 though.
> Not to mention that SSH has no forward secrecy.

What? This is not right, not even for the obsolete v1 ssh: https://utcc.utoronto.ca/~cks/space/blog/tech/SshForwardSecr...
Merck was aware of the danger of the drug[0] but pushed the studies under the rug. It may have been a more effective and less likely to be caught scheme than using a chemical which people outside the company would have known was poisonous, but it retains the essence, which is knowingly causing deaths to sell something.

[0] https://theweek.com/us/46535/when-half-million-americans-die...
I run a bunch of business logic in the database but have no interest in writing my whole application as triggers or whathaveyou. It's a bit of a middle ground, perhaps?
Took in your feedback in, we've changed the website and added some more information.
In the real world, "trust on first use" is literally true - it's never "check on first use." SSHFP DNS records would help a lot, or some other scheme. For all of the positive image ssh has, mostly because telnet and ftp were so ridiculously terrible, ssh-as-used is pretty mediocre.

And the reality is: "No."

https://www.usenix.net/system/files/login/articles/105484-Gu...
The heavy part is contenteditable is usually a million workarounds for weird browser specific stuff, which is why DIY is very risky there… or it was. I haven’t explored contenteditable from scratch since the final death of IE11. Might not be as crazy today.
Did he write a blog post (or newsgroup post) in advance of writing the first version? I'm all for pet project tinkering, but seems strange to publicly make a pronouncement before starting. There's no "news" here, why is it on the front page?
In America, hospitals cannot refuse emergency care.

So, while price gouging and insurance gouging are a thing, the actual hospitals may be poorly compensated in many places.

That's why rural areas are losing hospitals.
I'd say there are plenty of use cases where access to 2015 hardware capabilities is more than enough, given that you will profit from any automatic speed improvements beyond 2015 hardware as well. Which features beyond 2015 are you referring to?

The code I ported wasn't Swift+Metal, it was just Swift. It certainly wasn't optimized in any way, but the Javascript one wasn't either. Javascript data structures are just faster, because they are fully imperative, the Swift ones are more expensive, despite some copy-on-write tricks. And remember, carefully written Javascript is just as fast as C.
That's true from an EMTALA standpoint. But in certain circumstances once a doctor-patient relationship has been established and a course of treatment has started the doctor may be legally and/or ethically bound to either continue that treatment or pass the patient over to another willing doctor. They aren't necessarily always allowed to immediately drop a patient for failure to pay.
I think ctypes shines when it comes to fast prototyping, since you can iterate on the python bindings without a compilation step. It can also simplify distribution since the bindings can be pure python. Where it's arguably not so good is performance and maintainability.
A brief wikipedia search suggests a lot of humanity has Neanderthal DNA, not just Europeans.

Neanderthals shared more alleles with Eurasian populations (e.g. French, Han Chinese, and Papua New Guinean) than with sub-Saharan African populations (e.g. Yoruba and San).[8] According to the authors Green et al. (2010), the observed excess of genetic similarity is best explained by recent gene flow from Neanderthals to modern humans after the migration out of Africa.[8] They estimated the proportion of Neanderthal-derived ancestry to be 1–4% of the Eurasian genome.
Some of them wouldn't want to work for Google and Apple in the first place, regardless of the salary.

But while they could try and poach them today, tomorrow there will be a whole load of new people working for those companies, and it'll just be a never-ending cycle.
> Whether the US has an “official” language has been a politically fraught topic at times even though it’s obviously de facto English.

The US does not have an official language, and attempts to change that have failed multiple times.

This is a simple fact.

Whether the US should have an official language is controversial, though.

> it’s obviously de facto English.

You can't have a de facto official language, de jure is inherent in the “official” of “official language”.
I have a tool to easily convert bank csv's to ledger format https://github.com/muralisc/bank2ledger-cli
I resent them now for the same reason but on another game: Civ 5. I even bought that one in a box from a store.
They failed. Repeatedly. For decades. They spent billions trying. The failed so much that the standard writers determined the only logical conclusion is that it must be practically impossible to retrofit a system that failed EAL5 certification to achieve EAL5 or higher certification without a complete rewrite and redesign. It says so right there in the standard [1]: "EAL4 is the highest level at which it is likely to be economically feasible to retrofit to an existing product line". That was added due to the decades of experience where everybody who ever tried to do that failed no matter how much time or money they spent.

We also have plenty of evidence that it does matter, they just can not do it. Here is Google touting their Common Criteria certification for the Titan M2 security chip hardware which is EAL4 + AVA_VAN.5 (resistance against penetration attackers with a high attack potential) [2]. Note that this is only the hardware (software was not certified; a critical severity vulnerability was actually disclosed in the software allowing complete takeover if I remember correctly) and only cherry picks AVA_VAN.5 so is still only EAL4, not a holistic EAL6 certification. Getting that certification was a deliberate effort and cost. If they literally did not care about the Common Criteria then they would just certify to the checkbox level like everybody else. It is because they could certify it to a higher level than most other can achieve that they chose to do it because then they could tout their unique advantage.

Basically everybody gets a certification and basically everybody displays their certification on their page. There is something to be said about them opting for a EAL1 over a EAL4. It is basically assumed that any serious vendor could probably get a EAL4 with some effort. So, there is no differential advantage to displaying a EAL4 since everybody could get it. It is just a zero-sum game to pay for certification if everybody knows nobody has a true advantage. However, if you can achieve EAL5 or higher, then you do have a unique advantage because basically nobody else can do it. The fact that none of the major vendors attempts EAL5, shows that they can not do it.

[1] https://www.commoncriteriaportal.org/files/ccfiles/CC2022PAR... Page 18

[2] https://security.googleblog.com/2022/10/google-pixel-7-and-p...
The pinkertons still exist, and the people behind a fucking card game sicced them on an innocent person.
I mean, I can sing or whistle any song I can think of -surely thousands of tunes- without thinking about what I need to do with my lips. That same mechanism that connected tune in head to lips and mouth can also connect tune in head to fingers on piano with enough effort.
Took in your feedback in, we've added sign up with any email.
> Almost every server room of almost every large corporation is comprised mainly of servers running Linux

Even at Microsoft. Truly incredible.
The issue is that Make isn't particularly well suited to figure out properties of C / C++ compilers, or how to locate and link dependencies. That's the main reason Autotools and CMake exist.
Wikipedia has a very dire list of consequences of term limits: https://en.wikipedia.org/wiki/Term_limits_in_the_United_Stat...

I'm pretty against them (and not a politician) because it takes power from voters and gives it to unelected party members. Absent term limits, voters can just vote against any politician they feel has served too long.
I would love to see more analysis on result quality. Probably a good deal of it is subjective.
I do miss Google's Bard AI results. Bard AI is fine, and it generally adds some value to the search results. I don't know how I feel about the ethics of AI in search results, mainly AI summarizing results and people not visiting the actual content. Also, I don't like how Bard is only available in Chrome, as Bing's AI is only available in Edge. I really doubt there is a technical reason AI results can't be in other browser search results. I'm sure it is just a ecosystem lockin play. I usually use Firefox so I don't get AI in results anyway.
How can they reasonably expect you to pay in these circumstances? They were clear about wanting payment upfront, you agreed to the price, (presumably) paid them, received the service/treatment. That should be the end of the story. What legal basis do they possibly have to send a bill months later? "We felt like we needed more money because we had a bad quarter" is not going to cut it.
Took in your feedback in, we've added a sign in without google or apple. Use any email
Hah, I worked on the hardware loadbalancer team during that period. Fun times.
> it gains a performant 3D layer

It already is pretty darn performant - but without the many convenience features unity and unreal have. Also it does lack means to modify vertex buffers directly on the GPU - a feature I liked in Unity (https://docs.unity3d.com/ScriptReference/Mesh.GetVertexBuffe...). However, I think godot shouldn't try and implement everything - the project should focus on getting core functionality performant and flexible enough.

Everything else - managing massive world, etc, should be done by 3rd parties and monetised. I hope the game dev world wont take the web dev world path where code is in oversupply and there are little options to monetise.

Unity's asset store allowed many people to gain freedom by selling assets. I think godot should follow the same path. But indeed for that the engine needs even more low level access exposed in a nice manner.
"A lot of the functionality is all that PWA stuff no one asked for and no one is using for anything good anyway"

It is really hard to engage with your comment in a constructive way, if you start by insulting everthing on the web, that is not a simple document (with comments).

So I get it, you don't like the web as a plattform for apps. And it surely is not perfect. But do you have a better plattform independent alternative to offer?
Your system is either old or a Chromebook heh. Same problem here.

Try disabling the options that preload and refresh all the store/community "stuff" behind the scenes. Maybe auto-updates too.
I got a new pair of lululemon pants this week and they're terrible quality compared to year's past. I remember their CEO saying they were trying to double their stock price this year. Know I know how.
That seems the correct amount of violent and vindictive.
I think back when music notation was being actively iterated on, you had to convey all the information possible, because it’s not like you could share a recording. Things like guitar tabs - which typically erase timing information - only work because who ever reading them has already heard the song and know what it’s meant to sound like
Isn't this akin to asking why Google and Apple end up acquiring companies at very high prices if they could just hire the founders and have them build the products in-house?
Meh, I think the jury is still out on the effectiveness of carbon credits/offsets. Its a new system and there's no way in telling if it will have its intended impact. Levying taxes and enacting policy is an inherently political game, and these solutions impact people TODAY. Most people would prefer to keep their quality of life high today, vs mitigating some potential risk 100s of years from now when they won't even be alive.
I would use this if there was an easy way to integrate it with plaid. (login once and keep data synced). This would be comparable to personal capital at that level.
The one thing I can’t quit is Google Photos. I might give apple photos another go, but it really was subpar a year ago.

Anyone else struggled to leave google photos?
Postgres has plugins for running the entire backend.

People don't like it for a lot of reasons. Making privilege escalation harder is a big one, but also, all the CPU (and memory) load on serializing that data is CPU that could be used managing the distributed processes problems that only the DBMS can solve.

Personally, I think access management on those tools needs to improve a lot before they get usable. But also, the data-oriented languages have some issues, and the non data-oriented ones don't gain much by running inside the database.

IMO, we are missing a really good data-oriented language. But I don't see any gain from running it inside the database.
Given the description, this sounds more TUI than CLI. Honestly, when I saw the title, I thought it was a competitor to ed(1).
> weights of a model, that a domain expert can tweak by hand

This sounds similar to how image recognition was done before deep learning [1]

[1] https://www.youtube.com/watch?v=8SF_h3xF3cE&t=1358s
It definitely matters. Just think about what sort of how much Dr. Evil would pay for an exploit that relies on user action versus one that doesn't.

https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator
This view is too zoomed in. The human organism generally expects other humans to be around. Solitude in nature is a death sentence for humans, so our organism provides inbuilt incentives to avoid solitude. We can’t turn this instinct off, except to partially anesthetize it via fake social interaction like television, podcasts, etc. The anesthesia works better or worse for different people.

Some people have convinced themselves that they don’t like social interaction, but this is probably due to a trained negative association caused by repeated past negative experiences. It seems very unlikely that some humans simply lack the social instinct congenitally.

Society is currently set up in a way that social urges are largely satisfied by work. Is that a good setup? No, it definitely isn’t. Is deleting it without a proven replacement a good idea? Also no.
To be fair, someone making $25,000 a year will have almost as much trouble paying out of pocket for an MRI as someone making $15,000. But the former won't qualify for Medicaid and the heavily-discounted health insurance won't do much to help with their first $10,000 of medical debt.

Good but worthless advice to the majority living without any savings: don't get sick and don't get injured. Can anyone blame them if they avoid expensive testing? Medicaid is a great bandage, but the US needs a better system.
Darn it Theia: I can't stop playing your hoverator game!
I honestly don't know what you're even saying. The value proposition of an 8 year old piece of hardware that doesn't even have a battery in it is essentially unrelated to the cost or value of replacing a battery in a brand new phone.

Likewise, the used cost of a device that is functional today (iPhone SE 2020 in my example) is almost unrelated to the cost of the battery replacement. I think you'd find that attempting to repair the NUC you highlighted would soon exceed the $100 if you needed to do anything more than very basic repairs.
Many people are talking about dumping prime. I don’t care about the annual fee, but I do not like the fact that they build an ad profile of me.

Has anyone tried using burner accounts with their retail side? (Sign up, buy something. Pick up at locker, delete account, repeat.)

I’d pay a service that offered such a thing, perhaps as perk for renting a post office box.
Not GP, but for a while I have thought that PR shitstorms should be treated like security breaches and outages.

So you do a blameless post-mortem where you outline what went wrong, your five whys, and what steps you are taking to make sure it doesn't happen again.

The Rust leadership did it right during the RustConf scandal. Key figures resigned (from leadership, not from their respective teams), changes in procedure were announced, process transitions were accelerated, etc.

Here Unity is just saying "here's somsome decisions we're lightly amending, sorry you got upset".
Difference being Rome was an entity with government, military, etc. with which we can draw a lot of parallels to today, whereas Greece was more of a loose interconnection of cities that shape shifted over time. Both extremely interesting, of course.
Convince me to not just use Postgres for everything!
Poaching founders is an entirely different kettle of fish than just poaching line employees.
I guess when quantum computers do finally get invented, I could start a consulting company selling software for computers which can solve NP hard problems in polynomial time...
A more efficient and faster GPT4-level LLM coming from a smaller model running in consumer hardware is going to be good enough. It will be competitive if it is easier to train on current events and keep updated, by anyone for nearly free.

OpenAI's next gen offerings need to be something entirely different than smarter, and good for them if they do. All the multimodal capabilities have to be out, readily available, and stuff I haven't thought of yet.

I think everyone's right, or "accurate" that OpenAI will have far more resources, I don't think its important.
https://youtu.be/Lxo6l_whDeE

So much for "we need to do this for security!" lol
Which will unfortunately never happen due to the machinations of said influence. Ever since the Citizen's United decision we've just been kidding ourselves that normal political action will get us anywhere.
Well it sounds like you'd do fine tracking the IPv6 blocks that are currently very active, without needing any significant amount of resources.

If you go the extra mile and simultaneously track /64, /56, and /48 with moderately increasing thresholds, you'll probably end up causing less collateral damage when you block someone than with IPv4.
> Some of them wouldn't want to work for Google and Apple in the first place, regardless of the salary.

For moral reasons do you mean? I would be surprised to learn there are a lot of people that are open to selling 0 day exploits to "bad actors" (granted that this term is doing a lot of heavy lifting here), but wouldn't want to work for Google or Apple.

> ...it'll just be a never-ending cycle

I think the idea is you pay them so well that they can work for a handful of years and remove any cash incentive reason for them to continue selling 0 days to bad actors.
I think it should be acceptable that unpaid medical debt appears on the credit report. The medical debt should be removed once the debt is paid.

The above is for medical debt only and how I would prefer the system to work. There are other good comments about possible second and third order effects from such changes to debt reporting.
Technically those 'aliens' were humans too. Different species, same genera. We had interbreeding with them, though it's a small proportion of neanderthal and some other species dna that were discovered.
You should be able to! Though we did not integrate the QR tool itself into the tool. In other words, you have to make the QR elsewhere and then upload it.
There are also, frankly, a lot more jobs out there where 100% remote isn't even an option. Maybe they should consider changing jobs? 100% WFH is a dream for a lot of people, so let someone else have that spot
> when Congress refuses to hand out free food for everyone?

Can you say that when USDA food security and nutrition assistance benefits are around $183B a year? Certainly, it isn't for everyone, but for those in need. Why would we not extend similar policy to healthcare in a more efficient manner? No one is arguing for free healthcare (although that phrase is used colloquially), but a more efficient payer and delivery system, versus all of the bloat between patients and providers as exists today (insurance companies, pharmacy benefit managers, etc). Sibling comment by willcipriano touches on this bloat.

https://www.ers.usda.gov/data-products/ag-and-food-statistic...
Let's Build a FIPS-Validated Rust Crypto Library
Google has one of the best teams money and prestige can buy:

https://en.m.wikipedia.org/wiki/Project_Zero

They also have excellent collaboration with independent researchers across the world. But given how much software is written everyday, they can still miss some issues.
I think up until last year it was federal policy for Fannie Mae & Freddie Mac to use fico 5, and the rest of the industry kinda follows.

Now I think they can use a new model, but it's probably some inertia on changing.
This number is likely too high by a factor of 10, and there are more reliable sources.

Derek Lowe's rebuttal to the article is here: https://www.science.org/content/blog-post/500-000-excess-dea...

and a medical press article from 2019 estimates 60,000 excess deaths: https://www.statnews.com/2019/10/09/vioxx-relaunched-treat-h...
I think your understanding of competition is a little warped or flawed. The mark of competition isn't that a company's price changed. It's that other people/companies were free to enter the market.

You are absolutely free to go and develop your own phone ecosystem and app store, or go provide your app development services elsewhere. That is competition. And that is what the court has found.

Competition is not that I need to give you more shelf space or a better price for selling something on my marketplace.
So, biased in the other direction?
My ex had collectors calling her several times a day for months while she was disputing a bill. It probably depends on whether the hospital writes the bill off or sells it to
collectors.
> But while they could try and poach them today, tomorrow there will be a whole load of new people working for those companies, and it'll just be a never-ending cycle.

The number of people who successfully find 0-click 0-days for iOS/Android is very small. It's not a vastly replenishable resource.