skysight-inc/HackerNews huggingface dataset:
No, because making your car a target for theft happens because of a defective and impotent anti-theft system, and this process happens before the cars arrive where they can be stolen. It’s upstream responsibility being pushed to downstream forces because upstream responsibility failed to take responsibility or do their job.

Chronology matters.

Consider it more like selling locks that don’t lock properly to customers who expect their locks to work like any other lock, then blaming criminals for taking advantage of the situation. Because that’s exactly what they’re trying to do.

And of course it’s also specific to the manufacturer and almost all other manufacturers don’t have this problem.

So while it can technically be “blamed on the criminals” it’s objectively incorrect. It’s also objectively incorrect to blame the police for not doing their job. Or for customers for not keeping their cars safe. This is a product defect from the manufacturer that has killed a lot of people at this point and which they need to take care of, and this whole line of reasoning is their attempt to deflect legal responsibility as the situation is getting completely out of hand.
Yeah, since gumby wrote that, I assumed it was motherfucker, too! Maybe he was referring to Tesla.
Only journalistic or scholarly works are permitted for Attention paper
Attention Is All You Need paper got an updated submission with this red note

"Provided proper attribution is provided, Google hereby grants permission to reproduce the tables and figures in this paper solely for use in journalistic or scholarly works."
https://arxiv.org/abs/1706.03762v7
Whoa! I picked up The Fall of the Roman Republic by Plutarch this week and have been glued. Will definitely be reading this whole series
> if you have multiple writers

Our strategy is to not attempt replication at the level of SQLite. We use a single binary for our SaaS product which shares 1 SQLiteConnection instance for the lifetime of the whole ordeal. Remember - every single SQLite connection instance is a file system abstraction, not some in-memory/networking clever optimized thing that Postgres or SQL Server is managing on your behalf. Every time you open a new connection to SQLite you are doing some pretty heavy-duty OS calls, relative to just reusing a prior connection. SQLite itself is typically built with serialization on by default, which deals with multiple threads on one connection. In my experience, this is the most stable & performant arrangement (with WAL, et. al. also enabled).

Our backup solution is to snapshot the entire VM (or block storage device) that SQLite is running on. Replication is not a concern because our restore strategy is to just bring back a snapshot if required. Our customers are ultimately responsible for this and typically handle it with a few clicks through AWS, Azure or a quick email to their private cloud provider. RPO and RTO is entirely in their court and all parties prefer it this way - them being highly-regulated banks and us being a small startup operating at the edge of the abyss.

To this day, we have not once had to support recovery of a SQLite database from snapshot due to corruption or other weirdness. We've been at it for half a decade now.
I don't think he plans to build his own processors and write it in machine code.
That's all sequential code, it would be run inside a single "virtual thread". Note that the async code on the right is also sequential, just structured through an async API.
Swift is strange at first, but coming from multiple other languages I now recognize the good balance of features it provides. Perhaps it's possible to make a language which offers the same features with better ergnomics, but if so I wouldn't expect it to be vastly better. And thus far I haven't seen it.

And from my limited explorations, SwiftUI is a lot cleaner and clearer than UIKit.
It's amazing this showed up on Hacker News before it showed up in my RSS reader.
I also tested this with Harry Potter books (which are still not public domain AFAIK). It starts auto-completing the correct words quickly, and then hangs and eventually stops producing output. You can call the API to generate more tokens, but it stops again after producing a few more correct words.

I think for a few high-profile authors (for books like Harry Potter and Game of Thrones), OpenAI probably installed some output filters in order to not get sued too hard. Of course, I can't definitively check that without access to the raw model. Which OpenAI conveniently doesn't provide.
Hello All-en, HN-en,

All you need to do to set this up:

1. Fork or Generate from Template (into your own GH account, not an org account).

2. Open a new issue on your copy.

3. Follow the prompts!

You'll be rewarded with a URL that you can jump onto to connect.

If you don't have ngrok, you'll need to set it up for this. That will be annoying for some, but I've tried to make this as smooth as possible!
Yes you do, unlimited use.
I think you're skipping the replicated read only use case, which is our use case, and it's super handy there. but i understand this is a restricted scenario where little could really go wrong, and it could be done other ways.
Two key Fed officials express support for keeping interest rates high
Replacing external program calls such as usual sed usage with shell (including bash specific) built-ins was also core in neofetch's design when was made as alternative to screenfetch. Will say that checking dylanaraps, someone worthy to be called a bash wizard, programs is a nice way to learn how to do complex shell scripting.
I agree with you but isn't that what sharing moderation tools with the US is supposed to mitigate?

It stinks of red herring. The threat isn't the content. It's the hardware the app can control.

As of late we're seeing Chinese nationals uploading recorded Zoom meetings to YouTube, so I suspect USG knows TikTok is another vector for exfiltration or surveillance (RAT for camera/mic).
People don't seem to understand how to customize Bootstrap, so they re-invent the wheel with things like Tailwind.
In US States that have the death penalty, have murders stopped? And more to the point, are they significantly lower % per capita?

Policy change that requires the manufacturer to install a part (that is a $~200 option in the USA) would have practically eliminated the car as being a "target" object.

Getting caught is always secondary in consideration to reward. If somebody is desperate enough, then it doesn't matter how risky it is.

Car theft isn't new. There being a punishment for stealing cars isn't new. What makes the Kia/Hyundia situation so significant is how EASY it is to do. Make it more hard to steal, and make that a mandatory policy.

The thieves will find other ways to steal cars, but it might stop the easy theft. More cops won't do that.
I work for a Fortune 500 company. One of the things a higher up said in discussing getting people back into the office is they need us spending money of food and driving. Food I can kind of understand. We have a ton of food options on campus that are ran by a third party company. I would guess that my company has a contract with them that we will spend $x and if the employees are not spending at least $x, then the company has to make up the difference.

But the driving comment didn't make any sense to us. Is our company getting some sort of kickback from the gasoline stations, car mechanics, or tire shops? Wouldn't the city rather have us not driving to save wear and tear on the roads?

Any my company gives so much lip service to sustainability and the environment. What could be better for the environment than nobody driving into work?
Sunshine and Moonlight are fantastic though?
This is pretty awesome, but only makes sense if you've already got an AppleTV. The price difference between the Apple TV and a Raspberry Pi is definitely non-negligible. Also, you probably want the Apple TV with ethernet which is extra $$.

Personally, I don't care about TV so I won't be using one anyway.

https://kimbroughski.medium.com/how-to-use-a-tailscale-vpn-t...
The high-quality ports are being limited by how dependencies work on Linux distros. You're tied to a very specific version of a library. Fine if you can just recompile the code every time the version changes, but not fine if you're shipping an unchanging binary.

Meanwhile in Windows land, you static link everything and import only the system DLLs, and everything is great. You can't do that on Linux even if you wanted to.
IMO Python's equivalent of Rust's Enums would be `typing.Union` [1]. It is more ergonomic and type-safe, and mypy supports type narrowing [2] and exhaustiveness checking on it [3].

[1] https://docs.python.org/3/library/stdtypes.html#types-union

[2] https://mypy.readthedocs.io/en/stable/type_narrowing.html

[3] https://docs.python.org/3/library/typing.html#typing.assert_...
> can't you add any program as a "non-steam game" and apply custom inputs with it?

I mentioned this -- you can only do so if you use Steam as the launcher, Steam Input is tied to using the overall Steam client. Additionally, you'll have to make that config by scratch, Steam's community sharing for configs is much more limited for non-Steam games. This seems like a small complaint but if you're buying new games you don't know what the optimal config is, so the Steam Input experience for non-Steam games is that you load up the game and as you play it you constantly adjust the config until you find an setup that works, as opposed to Steam games where you just download the highest rated community config and go from there.

On top of that, there are Steam Input features that flat-out don't work for 3rd-party games; specifically input glyphs within the game. Steam offers an API for developers to define "action sets" that among other features will make sure that instructions within the game use the correct keybindings and pictures. 3rd-party game are (as far as I can tell) completely locked out of that service.

----

> I am also aware of tools that let you download workshop mods for games you don't own [...] but they hardly make it impossible, so it's not like the mods are actually locked in to the platform.

I mentioned this as well, Steam has actually gone after and shut down community projects that allow you to do this. It's much harder than it used to be and for some games it's outright impossible.

Steam Workshop is literally DRM as far as I'm concerned; there are plenty of games that are completely inaccessible. Even if that wasn't the case, the inability for 3rd-party games to be linked to Steam Workshop profiles by users is vendor lock-in. The vast majority of gamers didn't have the technical skills to route around Steam's restrictions even before Steam started shutting down community projects and putting ownership checks in front of downloads.

----

What would be far more market-friendly and what would actually benefit everyone would be for Valve to debundle those services from Steam -- I'm not saying every developer should be able to use Steam Workshop for free, but Steam Workshop should not be tied to Steam. It should just be "Valve Workshop".

There are a lot of games that are Steam exclusive specifically because there are Steam APIs that they can't take advantage of on other storefronts. And it's very common for games to come to other platforms outright missing features (particularly online content) because developers don't even have a choice to pay to utilize those features outside of Steam.

I think modding and input configuration are the two most obvious examples of this, but if you've ever bought a game on GoG and then found out after the fact that it's missing an entire game mode, Steam is (in my experience) probably the reason for that.
It seems a lot of non-infosec but technical folks have a pattern of shallow first-order thinking. Like in that XSS issue, "no authenticated resources = not a big deal" even though realistically you could redirect end-users to a phishing domain (I can assure you that a much larger percentage than you'd like would fall for this), or create and delete invisible DOM elements in such a manner to exploit a UAF vulnerability in their browser's rendering engine to perform a sandbox escape and get code execution in your users' userland, where they'll proceed to dump all of your users' saved credentials and start emptying bank accounts - all because you couldn't imagine anything bad happening from an XSS on a site with no authenticated resources and therefore chose not to prioritize fixing it. Even CPU-level speculative execution vulnerabilities can be invoked through sandboxed JS running in a browser.

Deprioritizing an XSS vuln in an end-user facing website you built because there isn't sensitive, authenticated data on that domain is like being the owner of a construction company that built a hydroelectric dam incorrectly, who noticed visible cracks on the dam that aren't supposed to be there, and decides to not tell anyone and "maybe fix it later" because the hydroelectric generator is still working fine and cracks in the dam don't cause generators to stop working.
Not sure how to ask this without it sounding combative, because i don't intend that.. but, does that matter?

Ie there's a lot of causes in adult behavior that could be tied or contributed to by their childhood, ie another adults behavior and decisions. I struggle to understand the action items with that information, though.

I desire more mental health funding and etc, so i'm not criticizing any attempt to do something. Rather i struggle to imagine what the state's solution would be to a lack of fathers.
One benefit is that you only need to send one string value (traceId) through the whole call stack, instead of passing around a trace object that gets built up. It seems lighter and simpler to add to an existing codebase.
The article claims that Tim Cook said a certain thing

"Tim Cook laid it out for his investors: when people can repair their devices, they don't buy new ones. When people don't buy new devices, Apple doesn't sell them new devices"

It also provides a link to a source... in which Tim Cook said something totally different

"While macroeconomic challenges in some markets were a key contributor to this trend, we believe there are other factors broadly impacting our iPhone performance, including consumers adapting to a world with fewer carrier subsidies, US dollar strength-related price increases, and some customers taking advantage of significantly reduced pricing for iPhone battery replacements"

It seems to be a pretty big jump from "one of the reasons we didn't perform as well as possible this quarter is because of customers taking advantage of our reduced price battery replacement program" which could impact their bottom line by just operating on thinner margins than normal battery replacements, to "repairs are stopping people from buying new phones"
It is not just a CVE problem. Many sec standards feels really random and difficult to work with. You can get better scores on some of these sec scans if you open up some ports in the firewall.
Lots of smaller businesses could do fine with this if they don't have a write-heavy workload. Like an ecomm shop, for instance.
Thanks for the advice! I'm working on building a gallery for people to be inspired next.

In case if anyone wants to see what things may look like after a few simple prompts: https://www.rapidpages.io/r/clmuv2p2r0003l808x4pzdpe6
I was unfamiliar with the practice of "parts pairing" in Apple devices, which it seems can even prevent you from cannibalizing functional parts from an old iPhone to replace damaged parts in your current device. Does Apple even have some kind of consumer friendly justification for this practice, or is it just unabashed fuckery?
The State of Async Rust: Runtimes
I just got a dopamine hit from reading this. Gotta ignore all the haters, we keeping this platform simple and effective.
I wondered about the name. I guess I'm unfamiliar with a bunch of South Asian references, apparently it is Hindi and related to currency: https://en.wiktionary.org/wiki/%E0%A4%AA%E0%A5%88%E0%A4%B8%E...

I was perplexed a bit because paisa (like paisano, countryman) is also a word I hear a lot among Latin American immigrants in the US, seems like one of those things that can be taken offensively but I mostly seem to hear it as a term of endearment.
I choose MIT as my default license, because I don't like it when the license is longer and/or harder to understand than the program itself. Simplicity is underrated in software development; there's so much you can do with less.
There is a middle ground I think - all my banks/credit cards (7 or 8 accounts spread across 4-5 providers) offer csv downloads of transactions. I haven't tried to automate downloading the csv, but once the csv exists locally automation becomes straightforward. But yes, for real-time automated gathering of the data, this wouldn't be appropriate I imagine.
There isn't a lot to the Apple power-supply story. An Apple employee designed a switching power supply at a time when the industry was moving from linear to switching power supplies. Ken Shirriff writes more: https://www.righto.com/2012/02/apple-didnt-revolutionize-pow...

Yes, low-voltage power supplies are commodities. But they're also complex and critical to a product's operation (look up "glitching attacks" to see how squirrely power can influence behavior). If running hardware reliably at scale is part of your company's core competency, then your core competency will likely also include understanding the power being supplied to that hardware.
> I am so done with virtue signalling that puts the responsibilty on the individual instead of holding corporations and policy makers accountable as the main systemic culprits.

I agree with you on this point, but staying in one place instead of commuting to and from work every day really does reduce the carbon footprint of most drivers. For people who take transit or bike to work, this may be a moot point.
I pay for YouTube premium too, and it is $14/mo. Is that some different payment plan you have?
Screw the future, just so you don't have to keep your phone in your pocket or in your hand? Are the other reasons equally shitty?
No, dead people produce about 13 kg of carbon.
Maybe they want to get the most use out of their parking garage? If they have one.
> 1. What automation, if any, exists for entering transactions? This is the most laborious/cumbersome part of personal finance. Some tools use financial data aggregators (plaid, yodlee etc.) that involves sharing login credentials with a third party, sometimes disabling 2FA, or other steps that are anti-security or anti-privacy. It sucks that in the USA at least, there is practically no way for customers to fetch their bank data via an open API. Until recently, many financial institutions supported OFX, but that is being phased out.

It has import support (can be templated using handlebars), no
automated fetch though

> 2. How is categorization of transactions accomplished? Ideally, I want autocategorization based on my own previously categorized transactions, since the bulk of my transactions are repeats at the same merchants.

It has a very crude tf-idf based categorization. I do have plans to improve it.

> 3. What sort of reporting, dashboarding, and potentially sharing capabilities exist? Ideally, I want to share some reports with my partner

You can checkout the https://demo.paisa.fyi It's just a web app that
works over http, so you can run it on a machine and share them
access. You have to figure out the authorization part, I do plan to
add some password based auth soon.
I wasn't aware of this. Good to know.
More principles

- Require in code defaults for fault tolerance

- Start annoying the flag author to delete if the flag is over a month old

- Partial rollout should be by hash on user id

- Contextual flag features should always be supplied by client (e.g. only show in LA, the location should be provided by client)
1) dependencies need to be upgraded. for example, not all versions of Gradle support all Java versions. So you need to upgrade Gradle to upgrade Java.

2) other things are deemed to have higher priority.

3) people are satisfied with existing features and don't want to spend energy to upgrade to something that doesn't provide immediate value.

4) folks aren't educated on what the benefit of switching would be so why would it be prioritized? This is a case of "they don't know what they don't know".

I work on a team using Java 8 daily. It's fine. It's got things I wish it didn't (no null in switch statements for example) but I don't care about that so much that I'm going to go through the pain of upgrading 7-9 services in the mono repo, their dependencies, and then test them all to be on a new version of Java.
Or, maybe they just value the skins? Maybe they want to contribute financially to a game they really like in the hopes of keeping it healthy? I do know people that buy every new cosmetic that's released and they enjoy doing it. They aren't even millionaires. So what?
Biden aiming to scrub medical debt from people's credit scores
We recently added pattern matching to Dart [1], so I'm always keen to see how it compares to similar features in other languages. In case it's interesting, here's that Ruby example ported to Dart:

print(switch ({'name': 'John', 'friends': [{'name': 'Jane'}, {'name': 'Rajesh'}]}) {
{'friends': [{'name': var firstFriend}, ...]} => "matched: $firstFriend",
_ => "not matched"
});

Pretty similar! The main differences are that Dart doesn't have symbols, so the keys are string literals instead. Also, variable bindings in patterns are explicit (using "var") here to disambiguate them from named constant patterns.

[1]: https://medium.com/dartlang/announcing-dart-3-53f065a10635
In many European houses the main power line into the house has a 35A fuse at 230V, so that's only 8kW maximum load.

Heating (and water) comes from natural gas, or a high efficiency electric heatpump.
I’m bullish on SQLite, and this is mostly a great article, but this kind of stuff is flat-out misleading:

> When you put your data right next to your application, you can see per-query latency drop to 10-20 microseconds.

As if postgres and others don’t have a way to run application logic at the database. I like the SQLite way of doing it — you pretty much freely choose your own host language — anything with a decent SQLite client will work. While in postgres, for example, you’ll probably end up with pgplsql (there are others, but there are constraints). So this isn’t about latency, as the whole section of the article suggests.

There’s actually a relative weakness in SQLite here, since it doesn’t include a built-in protocol to support running application logic separate from the database. That’s also architecturally useful, and so you may have to find/build a solution for this.

Just adding replicas isn’t a general solution either, because each replica has an inherent cost: changes have to somehow get to every replica.

E.g., systems can grow to have a lot of database clients. In traditional setups you begin to struggle with the number of connections. You might think with SQLite, “hey, no connections, to problems!” but now, instead of 1000 connections you’ve got 1000 replicas. That’s something you’re going to have to deal with… that’s 1000x write load, 1000x write bandwidth.

Perhaps fly.io has a solution for this, but I suspect it’s going to cost you.
Which could easily be fixed if Valve decided to put a hard-cap by selling skins for a fixed price, even if they were only for sale a couple weeks a year.

They'd also pocket all that money, but I guess they don't want people who spent more than said cap to get their skins. But people who are spending 100+ on skins should know they are playing the NFT game.
I wrote my own engine 15 years ago, when web was much much much simple.

It’s a Herculean task.
What’s important - HTML, CSS, JS are highly complicated, even if you exclude other APIs.

It’s really cool pet project. But don’t expect anything usable as a result.
Yeah, I looked at that too. Seems like a very bad faith interpretation of what Cook was saying.