skysight-inc/HackerNews huggingface dataset:
Have you tried cleaning up an AdBlue spill that's had time to dry? I apprenticed at an auto shop before I switched to metalworking and I had to deal with a number of AdBlue messes. Newer cars make it easier to refill, but the location of the AdBlue cap in some older models makes you rummage around the luggage compartment.

God forbid you have a sensor problem with the SCR system since your modern diesel is programmed to be crippled if it reads there's no AdBlue in the tank. We had a car come in once (a Citroen or Renault I believe, I remember it was some sort of Frenchie) that needed its rear left fender to be removed to replace the damn thing and I'm 100% sure devils designed the way everything attached together.
Yeah, its the don't treat S3 like a disk issue. I'm looking at S3 only for cold storage but need AWS VPC Gateway Endpoint support for S3 access since we are on-premise.

*Yes you can use a vpc gateway but need public IPs to waste to setup the BGP/IP routes.
What's the alternative? I don't know of any reason to think that tarballs or <os> installers are any better. I suppose I could clone the code and look for security flaws myself but I'm no expert and on something like nginx it's certain to be a waste of my time.
> but for their never ending support on making sure “gaming” can be enjoyed by all.

Oh how I wish that was true. Steam's accessibility story is an utter and inexcusable piece of garbage. Using Steam with a screen reader is a constant struggle, to the point where people had to write guides [1] on how to go about this. It got a bit better recently, at least on Windows, Mac still sucks. There are plenty of Steam games that a blind person can play, sometimes natively[2][3], sometimes through special accessibility mods[4][5][6]. Not to mention the Steamdeck, which has no accessibility support at all, despite the fact that Linux screen readers do exist[7], and consoles like PS5 and Xbox implement their own[8][9]. Valve really doesn't care.

[1] (outdated) https://www.mail-archive.com/audiogames-reflector@sabahattin...
[2] https://blind.shadows1428.com/
[3] https://mortalkombatgamessupport.wbgames.com/hc/en-us/articl...
[4] https://github.com/bradjrenshaw/say-the-spire
[5] https://www.nexusmods.com/stardewvalley/mods/16205
[6] https://www.youtube.com/watch?v=yQC6TJkBElY
[7] https://www.a11yproject.com/posts/getting-started-with-orca/
[8] https://support.xbox.com/en-US/help/account-profile/accessib....
[9] https://www.playstation.com/en-us/support/hardware/ps5-acces...
Evolving IoT Security: From Traditional Logins to Device Authorization Flow
I'm not gonna post my employer's proprietary code into ChatGPT.
unless you have a DRM'less file it's still renting

you own nothing
And what's your point? Did you misread something as I do not believe there is a problem? There's only a problem when you go to a theater that doesn't care about customer behavior. If you attend a theater that does, and removes people that misbehave, you do not have this experience.

Not sure of your confusion
They are very clear that they do not.
Cycling gear goes the opposite direction. Decathlon is great, but they have a weird fetish for a really intense shade of blue.
Wow, I'm only three minutes in, but it's a good talk. Among other parts of Apple's ecosystem (especially Webkit would make sense to move to Swift for memory safety), imagine if they start incrementally moving llvm/Clang over to Swift using this, that would be very interesting.
Seems like a similar concept to V8 isolates used in Cloudflare Workers and Deno
> What were Washington’s objectives in sabotaging the Minsk peace plan and cold-shouldering subsequent Russian proposals, in provoking Russia by crossing clearly demarcated red lines, in pressing for Ukraine’s membership in NATO

Oh cool just more bullshit from a bought and paid for Russian asset
But this doesn't let you use your phone's camera as a webcam on MacOS.
Why stop there? The best mind-reading search engine is one that doesn't even let me type queries, it tells me what I need to know before I even know I need to know it. The fact that all search engines still have query fields tells me they all still suck at reading my mind.
I am probably the target audience for this kind of thing, but I’m having trouble seeing myself slog through hundreds of household transactions every month (or putting in the time to automate transaction imports from my credit union and credit cards). I’m happy to huck money at YNAB to do all this for me, on top of which they give me an app that my wife and I can both use to check the budget and enter transactions on our phones. Reconciling the accounts and budgeting for the next month becomes maybe a half-hour exercise. Whereas with Paisa I see nothing but entire weekends lost in service of the machine.
Act's incompleteness has had me barking up the wrong tree many times. At this point I've temporarily abandoned using it in favor of the old cycle. I'm hoping it gets better in time!
I don't think the authors typically get to choose the title for publication, and that more often than not, that is the editor's call
1984 is when people dont like being called stupid
If you go into a game's properties in Steam (the little gear icon), and and then choose "Compatibility" from the resulting window, you can choose a version of Proton to run the game, usually the latest stable is good, sometimes you have to play around to find a good version.

Once you've chosen a Proton version, the option to "Install" will be available in your game menu.

I gave up on Windows a couple years ago, and most Steam games run in Linux using Proton through Steam. Some modern titles with fancy DRM don't work, but I generally don't buy those anyway (Denuvo, certain anticheats, etc).
lol at being stuck in xkgjd's walled garden. At least with hjafskdj I can sideload apps, but I guess some people just prefer a phone as a status symbol.
When it was TF2 and not CSGO, there was a lot of money laundering.

Not sure if that's still happening.
But to make money those sites have to show ads
It means the median mortgage cost per month is higher than the median income per month.
And the fact that they aren't stopping the use of scene cracks in distribution is cool too, that is awesome.
Show HN: The most over-engineered URL shortener
Hey HN,

Welcome to trimd.xyz, the most over-engineered URL shortener on the internet.

I used this project to learn EKS and GitOps.

The architecture is as follows:

* Kuberenetes cluster deployed with terraform on EKS

* ECR is used as the container registry

* Prometheus / Grafana for monitoring and alerts

* Argo CD for automated cluster deployments

* Gitlab CI for continuous integration

* DynamoDB for the storage layer

* AWS Load Balancer Controller for ingress

* FastAPI for the API Layer

* React / Tailwind / Vite for the UI layer

It's really going to be used as a sandbox type project for me to experiment with kubernetes related tools and learn different topics.

If you like what you see, check out my website ayofishr.xyz, and If you know anyone that wants to hire a cheerful recently certified AWS/K8s engineer, my email is in my profile ^^

Cheers !
I feel like there's now a perverse incentive here for Amazon to drag their feet at implementing full feature parity with IPv6. I wish these new charges only applied for IPv4 addresses used with services that already do have that.
I mean GH Actions is basically a re-brand of Microsoft's "Azure Pipelines". As somebody who used all previous incarnations of TFS/VSTS/AzDO build and release pipelines: they are not good at this. This is not a team with a record of success. That Azure Pipelines is moderately usable only happened because they failed literally every other approach they tried.

There was a project to allow you to run the pipelines locally so you could do the edit-run-debug loop on your own private environment without committing. It was, of course, canned.

https://github.com/microsoft/azure-pipelines-agent/pull/2687...

However, there are tools to improve QOL. For example:

https://marketplace.visualstudio.com/items?itemName=ms-azure...

A vscode extension that's syntax-aware.

Now, I'll be a bit controversial: if they'd used XML instead of YAML, you could have an xmlns declaration up-top that would give you validation in most decent code editors without user intervention. XML is awful, but it has a lot of useful features that we gave up when we threw the baby out with the bathwater.
The AI Revolution in Content Creation: A Modern Marketer’s Guide
It's not only that the CVE database / process is broken, but via EO 14028 in the U.S. and CRA in Europe transparency is mandated via SBOMs. While I believe this transparency is good, it can be abused to enforce compliance-driven security: Fix all critical, high and medium CVEs within well defined time frames. PCI DSS and many other standards kind of encourage that view already today. It will then just be measurable by outside parties, which then means the limited security budget will be used to "fix" things that don't matter as much.

And I agree with you, Lars: We should be using CISA's KEV, First's EPSS and other means. But I'm not sure software customers would accept seemingly higher risk (high number of unfixed critical / high CVEs), even if the EPSS suggests overall much lower risk.

I've written in longer form at [1] about this issue.

[1] https://florian.noeding.com/2023/08/29/sofware-bill-of-mater...
The results so far look promising! I'm curious if this technique can be generally applied to any arbitrary compositing method (like something more ad-hoc than screen and multiply) given the proper training set.
`ctypes` is part of Python's standard library and allows you to directly call C functions from Python code.

It's glorious in its simplicity.

https://docs.python.org/3/library/ctypes.html
The government is seeking to 'destroy the NHS', expert says
Since you are targeting developers I would highlight the differentiating features: "database-backed", and "asynchronous", or whatever they are. This is more informative than "production-grade", "fast", or "scalable", which anyone can claim. In fact, the competitors have a better claim to being fast -- they're in memory! -- so I would drop them unless I had benchmarks. Something I would also encourage you to work on.

Finally, call out your competitors, and explain your value add for each one. Maybe in a table. Why not just use a vector database and hand roll the rest, for example?

Good luck!
FDICT (Preset dictionary)
If FDICT is set, a DICT dictionary identifier is present
immediately after the FLG byte. The dictionary is a sequence of
bytes which are initially fed to the compressor without
producing any compressed output. DICT is the Adler-32 checksum
of this sequence of bytes (see the definition of ADLER32
below). The decompressor can use this identifier to determine
which dictionary has been used by the compressor.

Well, wow. I have to wonder why this wasn't more utilized, then. There are a ton of contexts (columnar data in databases, for example) where shared-dictionary-based compression might have helped a ton before now.
Fun fact: Microsoft had a plan to provide that!

They canned it.

https://github.com/microsoft/azure-pipelines-agent/pull/2687...
Better than Apple.

Apple don't reinvest in creating open standards, and don't invest in improving user experience for everyone.

Their investments are generally to increase lock-in.
I specifically mentioned labor laws as an exception.
Unlike Google who has incentives to promote the spam Kagi has incentives to fight the spam.

Also Kagi lets me blacklist domains myself if I want stricter rules than Kagi already provide.
Taxonomy for Physics Beyond Quantum Mechanics
The feature I'd love is history.

I'd like to know if my builds are getting slower over time. I'd be able to detect flaky tests automatically.

It seems basic, but I know third-party solutions exist for this. It's out of the box in Circle CI and Buildkite and feels like it should be here.
Love it!!! This is going to make (my) dev and testing env cluster so much easier.

Now imagine running derp-server with in the DC with your k8s.
If it's been a while since you last tried it on the Deck, you might want to try again since recently they've added official controller support.

I had managed to get used to the Steam Input mappings so my experience may not reflect too much on you, but the official mappings are also pretty nice. IIRC they also show control hints underneath the map for context-sensitive actions, which help a lot too.
> I don't consume content, as if it were used up after I watch it once.

You may be in a minority here, many people I know (like my wife) very rarely will go back to something when they're done with it. Most people are on the lookout for something new to keep them entertained, so I would definitely argue that they are in fact consuming media.
It looks like a modified ender 3 or ender 3 clone
At this point Codeberg is clearly distinct from Gitea and is more thoroughly open-source in its nature than anything Harness is going to bring out, but yes, you could combine it with Forgejo if that feels more fair.
How Europe's forests regenerate–without any human interference
I agree, it's a feature that I find sorely lacking in my tailnet.

These are the relevant Github issues to follow, hopefully they address these someday:

https://github.com/tailscale/tailscale/issues/465
https://github.com/tailscale/tailscale/issues/4324
There is import option available on Paisa, but I agree, it won't match YNAB level experience.
An open-source implementation of A16Z’s LLM architecture
It’s not a story the Jedi would tell you.
Google on trial for violating antitrust law, the verdict unlikely to change much
ha, im just forgetful. thank you.
IMO most of what people do on the web is either reading articles (these don't even need JS), watching videos (no advanced browser functionality needed either), or writing comments and messages (some rather simple JS if any).
> Is it possible to "teach myself" the foundations of CS? And if so, is it even necessary?

Yes, it's not only possible, it's not even that rare. And it is necessary.

You teach yourself this stuff the same way you'd learn it in a classroom. Study books and quality websites on the topic. And, mostly, practice practice practice.
> If you buy a car the mfr is hardly inserting themselves between something you could have without them.

They start to, though. What was that about BMW and having telemetry on car radio I heard about the other day? Or attempts by manufacturers to turn pieces of car into services, which has an effect of them inserting themselves into car resales?
What are the "foreign countries of concern", and why do they write it that way instead of just saying China?
Oh my gosh. It's not FOSS that kills software, it's ctrl-c and ctrl-v.

Computers always allowed you to copy code for free and any new concept that took six months to be made up, can be duplicated for free in one second.

The real problem is that you have to ship code that can be disassembled and read by another human being, to sell software. This fact annihlates any incentive and control an author-of-software has over their conceptual labor.

What we need is a method to sell a binary (and source-code) that are completely free of human-perceivable information AND authorized against a purchase server. Identify the code author or not, both are fine, what matters is the conceptual labor is protected.

That's it. We do that and it becomes viable to do hard mental work for a long time, and take risks on bold moves. Make the concept work and sell the baked end result without giving away the recipe.

Every other industry keeps the means of production to themselves.

But for some awful reason, programmers are expected/required to ship the means of production, the understanding of the code and the concepts of the code AND be ready to answer anything, in a relationship with the purchaser.

The balance of effort between software developers and the benefit everyone else gets from them, is completely messed up.
It seems that GrapheneOS is making releases for Pixel phones, including the 4a which include patches for the webp exploit: https://grapheneos.org/releases#2023091800
My all-time most hated CVE is CVE-2022-24975. This is not a vulnerability - it's a user education issue with not understanding how Git works. The Git documentation not explicitly explaining the dangers of using mirror was rated a * 7.5 *. Due to the policy of having no high CVEs, this ground development at my company to a halt for an entire day until our security team put an exemption in place.
No kernel has ever had such a gigantic mind share and adaptability as Linux. Very few tasks demand so much of different areas of an operating system as games. The moment game developers, especially the ones who deeply optimize engines, start contributing and tuning Linux to get as much performance, throughput and low latency as possible will be the moment when games will improve in ways that current option can't compete or offer anything close.

If any of the big vendors of AAA is reading this, please consider that there is a severely under served community who is willing to collaborate, help and improve everything that is needed to make your product run better. Consider that your company would have the power to tune the environment in ways that the competition can't even dream of. Consider what we did to servers, mobile and HPC and enable us to do just the same with games.
> It's easy to be open when you have a money printer by practically having a monopoly

I'd argue it's actually hard(er), based on history.
Yeah, Steam has always some really impressively dedicated help when somebody escalates. It's probably harder to access now, but I remember one time in college when TF2 came out of beta and performance was awful. Steam Support didn't have anything, so I sent an email to GabeN; he put me in touch with a senior Source dev who had me press some debug buttons and hop in a game with a bunch of Valve folks (I was pretty good but this was definitely an exception to "game devs are worse that their games than players", I got my ticket punched worse than when I was playing in competitive leagues). A few weeks later there was a patch that significantly improved perf on my particular flavor of hardware.
It does not, at least not on iOS.
Here's the up to date documentation
https://source.android.com/docs/core/architecture/kernel/gen...
Love this project! I've been trying out Paisa off late and it's been great at just de-cluttering my investments in various assets (which are spread all over).
> To complete the analogy, I guess you’d expect to see this browser come out of former Safari interns/engineers at Apple.

Sounds like Andreas Kling: https://www.techgamingreport.com/new-ladybird-web-browser-wh...
Sadly, this is a battle you are destined to lose. I have almost completely given up. The best you can aim for is to use feature flags better rather than worse.

- Some flags are going to stay forever: kill switches, load shedding, etc. (vendors are starting to incorporate this in the UI)
- Unless you have a very-easy-to-use way to add arbitrary boolean feature toggles to individual user accounts (which can become its own mess), people are going to find it vastly easier to create feature flags with per-use override lists (almost all of them let you override on primary token). They will use your feature flags for:
- Preview features: "is this user in the preview group?"
- rollouts that might not ever go 100%: "should this organization use the old login flow?"
- business-critical attributes that it would be a major incident to revert to defaults: "does this user operate under the alternate tax regime?"

You can try to fight this (indeed, especially for that last one, you most definitely should!), but you will not ever completely win the feature flag ideological purity war!
Is there a carbon credit for that?

If not, there should be a tax on employers for RTO, in the cause of realizing externalities.
A linter can catch some obvious errors: https://github.com/rhysd/actionlint. But yes, I agree, it's not a fun debugging experience.
But how is the user supposed to know if their query is a weird complex edge case or not? The model certainly can't tell them.
> I expect that after such attacks, science would be strengthened rather than destroyed though.

Depends on if you're talking about the activity or the institution.
If this is always true, then where does crypto come from?
I'm not sure what your nitpick is supposed to be getting at. Good businesses create a solution to your problem and then "insert themselves" between you and that solution. That's how they make money. If they could not stand in the middle and charge you for access, there would be no incentive to create the solution.
Hah! I had roughly the same route; I held out for things to improve on MacOS up until Catalina, then drifted around to settle on NixOS. Funny how things work out like that.

Largely though, I agree with your conclusion. It speaks volumes that Apple's most significant GPU translation efforts to-date (Game Porting Toolkit) is largely based on Open Source DXVK code. Apple and Microsoft basically have the same tactic now; push a high-level GPU API across your software platforms, using your clout to force developers onto it and 'lock them in' to your ecosystem, so to speak. The bigwigs might try to tell you that this is necessary for a quality native port, but I've doubted those words since I beat Elden Ring on Linux. Apple publishing the G.P.T. is their shameful admission that a Vulkan driver would fix gaming on Mac.
Another $36/year to remain ad-free...? That's more than enough to break the camel's back in my case.
> Signal would prefer to pretend that they get to choose what tools their users get to use to consume their service. Unfortunately for them (but good for us), they don't. It's the web and such a restriction would be insane.

https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act

Sadly, they do get to choose what is considered "authorised" use of their service :(
That is a pure coincidence.
Yes please. Blog would be awesome.
It's definitely a very similar method but fundamentally different in that the 'Distilling step-by-step' approach is a multi-task model.

As I understand it, rather that training the smaller model to produce the CoT/rationale as a part of the (decoded) response, it actually has two output layers. One output is for the label and the other is for the rationale. The other layers are shared, which is how/why the model is able to have an improved "understanding" of which nuances matter in the labeling task.
> Up to 10 includes websites

With goggles, you can build and maintain custom lists of _thousands_ on github.
Ehm, what exactly is the difference between estate revenue loss due to AI vs my works in the style?
I mean how many cars are used solely to drive from the airport and then sit in a hotel parking lot for the next week only to be driven back to the airport. 50% seems a conservative number considering that resorts like Disney world have their own transit systems.
I faced something similar, and I think it's unavoidable. Give people a screwdriver and they'll find a way of using it as a hammer.

The best you can do is expect the feature flagging solution to give some kind of warning for tech debt. Then equip them with alternative tools for configuration management. Rather than forbidding, give them options, but if it's not your scope, I'd let them be (I know as engineers this is hard to do :P).
It's crazy that it came out before the bulk of its professional players were born. It is truly a timeless game.
GraalVM without native image is comparable or faster to Hotspot.

The main point of native image is that it cuts drastically on launch and warmup time.
I think half of the world can still use Huawei or Xiaomi
Does it matter if it's a law? One day a national security letter from some three letter agency shows up at your doorstep, requiring you to keep logs (or let their engineer install a room 641A), and forbidding you from saying you do.