skysight-inc/HackerNews huggingface dataset:
Let's put it this way, imagine going to the doctor, complaining about how you’re putting on a little extra weight, your legs are getting tired, and you’re short of breath. The doctor, instead of suggesting the radical idea of a diet or exercise, goes, “Aha! What you need, my friend, is a super-fast, mechanized, all-terrain wheelchair that can drift corners at 60 mph. That’ll get you to the fridge and back in record time, ensuring your problematic lifestyle remains unscathed by reality!”

When life gives you lemons, don’t make lemonade. Construct an intricate, high-speed, international lemon delivery system, ensuring everyone gets to share in your citrusy misery, QUICly.

So here’s to QUIC, the glorious facilitator of our cybernetic decadence, ensuring that the digital freight train of unnecessary features, exhaustive trackers, and bandwidth-gulping page elements gets to you so fast, you won’t have time to realize you didn’t need any of it in the first place.

Buckle up, folks, because the future of web browsing is here and it’s screaming down the information superhighway like a minivan packed with screaming toddlers, on fire, yet somehow, inexplicably, punctual.
is there an interchangeable format for this? .tiff? .ora?
>My pixel 5 just stopped turning on one day about 2 years in

My Pixel 3 stopped working because Google fucked up it's kernel boot and mechanical design. They placed a laser focus IC, that's a bare die mounted on a tiny FR4 shim to get it closer to the backpanel, on top of the main PCB. When this tiny laser focus IC inevitably breaks off or loses contact with the pads due to mechanical forces on the back panel, the Pixel 3 linux kernel ends up panicking during boot because the driver can't communicate with it.

I could see this because I had the bootloader unlocked before it bricked and could get the boot logs coming out. In fact it could boot into recovery just fine too but what a PITA to fix this at that point.
...And Apple also considered making Bing the default search engine. And they considered building their own. They might even have considered Yahoo at some point...

Off course they considered. But it turned out no-one but Google was able or willing to pony up the billions of free money they have been hooked on for so long.
Googles trade in value is also based on what other deals they are offering. Bad or no deals they often give you better trade in value.
"stick in your memory"

haha, great word choices in a discussion about memory sticks.
Agree with everything you said except possibly:

> The risk that attackers will suddenly find the flaw after years because they were told "there's a flaw in cURL" seems low.

I’m not so sure about that. Still understand why they’re handling it this way but this is bait like a big red bullseye or rainbow with a pot of gold at the bottom …
Why does the website need to be eating my CPU?
I was also disappointed to see them using a KDE account for donations. I like KDE but i'm pretty sure there's tons of krita users who do not use kde, me included.

Found that there is a Krita on liberapay, which i much prefer as platform, but who knows if that's official or not, since it's not linked on this thread's link.
It can't be turned off.
Global warming is not a belief. It’s just a theory, like gravity
https://krita.org/en/item/intel-becomes-first-krita-developm...

maybe that has ended
Man, here I am reading this while fighting zScaler when connecting to our new package repository (it breaks because the inspection of the downloads takes too long). No one feels responsible for helping developers. Same with setting up containers, git, Python, and everything else that comes with its own trust store, you have to figure out everything by yourself.

It also breaks a lot of web pages by redirecting HTTP requests in order to authenticate you (CSP broken). Teams GIFs and GitHub images have been broken for months now and no one cares.
I believe that figure is electric efficiency only. For combined heat and power plants, the efficiency routinely goes over 80%, and for heat-only plants, 95+% is common.

However, there is still sleight of hand. The efficiency quoted is when the equipment is new and clean. Fouling and wear both take single digit percentages off.

Also, they use the lower-heating-value for the gas energy supply. That, in my view, is dishonest - the correct energy measure for gas is the higher-heating-value, which is 10.7% more. The difference comes from how you account for the heat in the steam produced by burning gas. In my view, the energy from that steam should be accounted for when considering efficiency - in GE's view, it shouldn't.
Timestamps are written by server, problem solved.
I was referencing the article which seems to indicate it’s more than just a buy box issue.

> Today, Amazon tells sellers that if it detects a lower price for their products on any other online store, they will be punished, which is to say, their ability to get their products onto a place on the Amazon website where customers click will go away. The net effect, as Amazon itself wrote, is that "prices will go up."
This type of software is an excellent fit for "eventually open" licenses:
https://news.ycombinator.com/item?id=12459492

This way, corporations and business users can pay to get the latest version and features just like commercial software, while the hobbyist community still gets a relative recent and feature-full release they can use for free, has source available and is guaranteed to become fully GPL code in 3-5 years.

The traditional open source economic models (support and customization, services etc.) simply do not work for professional software with a large number of non-programmer users. A commercial license would allow these clients to pull resources together to allow software to be written, and eventually released as open source for the benefit of all - and they are the most interested in this because they don't want to get locked in.
Why do you think OP isn't refering to mmap()? Its behavior is pretty much what they describe, and a common way it's used.
Show HN: Request Control – A browser extension to redirect and modify requests
The case for continuing to write by hand
The Sycamore Gap tree held a particularly deep place in people’s hearts
So… Why is there a climate scientist working for a payments processor?
I'm impressed. They got four APUs to take off from Antarctica? ;)
I have thoroughly enjoyed all of your comments! You’re great at showing how learning can be fun. Do you have a blog where you compile these stories and anecdotes?
Alternatively they've been completely skewed by the profit margins of the big software companies, where it turns out they print money regardless of how high payroll gets. As supporting evidence, VC funded startups pay less than said software companies.

It's interesting that Europe has abjectly failed to produce anything like Google or Meta. I'm not sure what the underlying reason for that is.
> then we should use strongly typed languages that prevent these bugs

So Typescript then? The most common recurring bugs on my team is front-end devs not knowing the shape or property names of types written by other devs (backend, other font-end, themselves a month ago). If we moved to Typescript they would get those little spellcheck-like underlines pointing out these errors before they attempt to commit, rather than customer's pointing it out.

Sounds like an argument against untrusted input, I just want Typescript so at least my own team becomes trusted input.
Or

1) SSL

2) HTTP/3

3) Other (DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET and TFTP)
Because they are already mimicking human behaviour (speech / 'thinking'). It lends itself to making psychological analogies.
Great question! PyPI already supports Trusted Publishers [1], which gets you most of the benefits of SLSA build provenance (provable link between artifacts and a public software repository). Implementing Trusted Publishers is the recommended first step for ecosystems looking to implement build provenance [2].

[1] https://docs.pypi.org/trusted-publishers/

[2] https://github.com/ossf/wg-securing-software-https://docs.py...

I don't think there's a big effort /right now/ to implement complete SLSA build provenance for PyPI and expose it for users to verify.
Location: Austria

Remote: yes

Willing to relocate: yes

Technologies: JavaScript, TypeScript, React (Native), Next.js, Vue.js, Deno, Node.js, SQL, Git, Jest

Résumé/CV: available upon request

Github: https://github.com/slymax

Email: contact@slymax.com

Web: https://slymax.com
terrible for efficiency.
Maybe a stupid question, but if Krita can read/write .psd then why does this matter?
I don't think either of you are entirely wrong but I think it can be broken down more generally.

There are very few web applications that have any real proprietary implementations that are impossible to replicate. Its a combination of factors that builds the potential moat to the business.
Of course. But you also catch some of the fools.
The author only cries in the (pretty boring) style:

“We invented a knife and now things got fucking complicated! We have to deal with NEW OPTIONS like to cut the meal or to cut each other.”

:)
I had the same thought. I bet the NSA has a dossier on every single one of these people around the world. If they don’t, then they should!
Not having a system API is the entire point of QUIC. The only reason QUIC needs to exist is because the sockets API and the system TCP stacks are too ossified to be improved. If you move that boundary then QUIC will inevitably suffer from the same ossification that TCP displays today.
I do hope it's a fair and living wage for whomever is receiving it.

That said, I absolutely would take a significant pay cut to get to work on a project I cared about again. Golden handcuffs are not absolute.
I think we need to examine this more closely in terms of who and why, not just the binary format men or women mostly because from the footage it appears to have been a system which was attempted to have been gamed for advantage by two particular IT-centric demographic groups perhaps South east Asian, and Indian-continent from what i could see from the video footage. Afterall, graduates these days in particular are learning to game the system more and more in order to attempt to find an advantage whether it is being from a wealthy family background and having easy access to the top colleges and universities (varsity blues scandal, Vyapam medical scandal, 11 plus exam, etc), to doping with ritalin before important exams, to parents buying their kids into sporting academies, or paying to have another sit an exam for you. The list of potential creative hustles never ends and will never end as long as we place the dependency of top jobs going to top-certified undergraduates. People will literally do anything to get on board the life raft of salaried employment instead of chancing it with trusting in their invention and skills abilities to come up with something which will give them financial independence. But in the Internet age product shelflife isnt vey long and perhaps I don't blame them either. Besides it has been discussed many times before in depth about the problems in creating gender/race based subsidies/bursaries for employment roles.
If interchangeable format means non-proprietary then Krita's .kra is one. If it means a format designed to be used as interchangeable format then .ora.

If it means one that everyone uses then none.
Even though Rails 7.1 comes with a Dockerfile, there's still a lot of opinions you can add such as using Docker Compose to have a fully working out of the box experience that works in development and production -- complete with Postgres, Redis, Action Cable, Sidekiq and more.

If anyone is interested in that, I updated my example Rails app https://github.com/nickjj/docker-rails-example to use Rails 7.1.
I know that they have a gigantic intranet, that might make the lack of internet during the workday less painful
As far as the Bosnian thing goes, this is from the wiki article you linked:

> Direct study of the site by geologists, archaeologists, and other scientists has demonstrated that the hills are natural formations known as flatirons, and that there is no evidence that they were shaped by human construction.The European Association of Archaeologists has condemned the so-called 'Bosnian pyramids' as a "cruel hoax"; along with various other scholars they are also concerned about damage being done to genuine archaeological and paleontological sites: a medieval Bosnian castle, Roman fortifications, and some even more ancient remains. Osmanagić initiated excavations in 2006 and has since reshaped one of the hills, making it look like a stepped pyramid.The academic community has called for the government to end funding of excavations and disruption of the site because of the damage to true archaeological resources.
I was going to say this description sounds exactly like "fun friends", but then I noticed this:

> Utter joy: no fun, ...

Can you elaborate how "utter joy" is not fun?

Also later on the author suggests friends can be a mix of the types (multiplex friends).
What Really Started the Great Chicago Fire?
You have to consider the author of curl has recently been vocal against CVE scoring for vulnerabilities that require very specific conditions or user stupidity to trigger. For him to come out with "the one rated HIGH is probably the worst curl security flaw in a long time" most likely means it's bad.
> People who can handle manipulative messages from ads should be mostly resistant to manipulative messaging from bots.

Not necessarily. LLMs at the model of GPT-4, and eventually above, affect the economics of advertising. Currently, there's only so much sense in optimizing your ads before it's cheaper to just spam more of it (er, "increase exposure"). LLMs will make it cheaper to optimize the ads further (i.e. get more bang for the same buck), so I expect the baseline manipulative effect of most ads to increase.
Is it description of culture or is it framing?

I can’t say, most of this isn’t something I can relate to (fortunately).

The Internet is a collider, smashing contexts together and at an ever increasing clip.
Wouldn't it be easier for everyone if we switched away from Facebook to another social network instead?
> People have been successful in updating the device by temporarily putting the SIM from another carrier in the phone.

You can also just update the phone using the OTA Google provides on a page and ADB to side load it.

https://developers.google.com/android/ota#cheetah
> stolen Lattice IP and hires

If this is true, then the bitstream for Gowin and Lattice parts would be similar and both are being actively reverse engineered to be supported by OSS tools.

It would be nice to see more evidence of this.
I believe the person I'm responding to is using "pollarding" and "coppicing" to specifically refer to the European tradition. I'm not sure what the Japanese equivalent would be called
It's not, taken in complete isolation, evidence for global warming. It's an example of it. When people call something evidence in this sense, they mean it colloquially - that it is an exemplar of an overall body of evidence that points in a particular direction. The record cold month is part of the same body of evidence that, overall, points to the existence of global warming, but it isn't an exemplar of that evidence, so it doesn't get called "evidence" colloquially.

Similarly, an individual fossil might be called evidence of evolution, but nobody thinks you should take this one fossil as a knockdown argument that evolution is real. On the other hand, when a strange fossil that's anomalous with the rest of the record is uncovered, a creationist might call this "evidence that evolution is false", but just as in the record cold month case, it's correct to point out that you shouldn't be looking at individual fossils.

So what's happening here is that people are using the word "evidence" in a rather casual manner. Properly, what we're talking about here is an example, and in this case it's a very pertinent example because people have been given a concrete picture of what the world might look like on a regular basis in the near future.

(Obviously there are some members of the public who really do think a single month is proof of global warming, or vice versa, but I'm trying not to strawman anyone here.)
Guerilla gardening: how you can make your local area greener
Do we ever record record cold months on a global scale?

My understanding is that globally, we keep seeing record warm months. Perhaps locally there are some record cold months but that's much less _news_ than the entre global average.
The two faces of a wartime engineer: the controversial tale of Wernher von Braun
Most language package managers have some notion of dependency resolution, since various deps declare bounds for their dependencies instead of pinned versions (since otherwise frameworks would be impossible to upgrade).

Nix the language doesn't have such a thing (would be a bit of a category error), and nixpkgs the ecosystem is so far away from that kind of thing...

Language ecosystems around sharing source code cannot exist as they do today if every dependency pinned its dependencies to specific versions. Source distribution like that has different requirements than binaries.
I see your point, but comparing this with an off-line AV scanner with a regularly updated internal database (assuming that's what you meant) is not an apt comparison.

The analog would be an AV scanner that sends a list of your files/hashes to a centralised server somewhere, so that the company can target ads related to your file contents (or sell your data...), in addition to warning you about viruses.

Agreed that % true positive is not a factor in whether or not to have a given security feature. But it is merely convenient that the vast majority of the usage of this "link protection" feature would benefit Google/MS and not the customer/user (assuming that Google/MS are data mining, which is yet unproven in this use case).
I’m not an American, but in general it’s possible for people with different views to understand each other, provided that they have the patience and awareness required to explain their views down to their core values.

It’s not always possible, however, to agree, because the core values are frequently incompatible. A catholic can not reach an agreement with a leftist on e.g. first trimester abortion, because for the former it’s murder, and for the latter it’s not. So the leftist will consider the woman’s right for bodily autonomy, and the catholic will simply want to prevent murder, and evil from happening.
Put "Ever" back into "Month Ever". "Ever" is what's being analyzed and September is the outcome of that analysis.
Because there hasn't been a "record cold month" since 1917.

What you're talking about is people discussing local weather.
Stripe has a carbon removal division: https://stripe.com/climate
Because just like the most "open source app reading/writing proprietary format" scenarios, it doesn't do it perfectly.

Even if you simply import a .psd and re-export it again as-is, it will still break things like smart objects and layer blending options.

It's not Krita's fault: .psd is not an interchangeable format. Implementing .psd support perfectly is basically implementing the whole PS itself. It's all the artists' "fault". But it doesn't change the fact that using Krita makes my days difficult.
Svelte UX
I don't agree. As an admin I can cordon off systems which might be exploited until the fix is released. If there's nothing to exploit, how can you exploit it?
I'm willing to believe Daniel is a bit of an asshole, totally.

But I am thoroughly on his side when it comes to the CalyxOS and Techlore drama. However I wasn't aware of any of the Louis Rossman stuff
It pulls at a compelling thread about the differential possibilities of design and the identities it's coded against. Anti-design is an inherently valuable approach to work. It can let us think about how to achieve the right client fit, the right product motivations, and the right overall system incentives. This isn't to agree (per se) that only bad clients want glossy design in prototypes, but rather to suggest that we as people self-segregate into particular visual cultures that may seem inherently bad to outsiders. Design, or the perceived lack of it, can be a form of (highly valued) in-group signalling that allows us to sieve out the wrong kinds of interactions.

And then sometimes bad design is just great on its own merits. By way of example: https://x.com/NCTreasurer/status/1577673238536245248?s=20
>IIRC you can download the images from Google via web browser and flash manually, but not sure if you can still do that, and I've never tried it myself.

Yes you can still can.
https://developers.google.com/android/ota#cheetah

In fact they even host all the images dating back to the Nexus lines still.
I read this recently for sysadmins at Google and Microsoft that have access to absolute core services like authentication, which does make sense to keep these airgapped
It reminds me of my kids occasionally telling a nonsense story as if it's something real that happened, but where it feels like they're subconsciously just practicing grammar or vocabulary and they're perfectly happy if I just correct their sentences rather than respond to the story.
If I'm not mistaken, that's pretty similar to the reasoning behind BSL, which is even more "open" than "eventually open" - code is source available, anyone who isn't a competitor can use it however they want outside of competition, and in a fixed amount of time (max 4 years) the code becomes truly and entirely free to be used however one wants, including competition.
I've never lived in Manhattan, but I'm under the impression that every bridge and tunnel connecting to it has a toll. Is that not the case?
Ask HN: Does your microwave interfere with Bluetooth? Mine does
I can see the Faraday cage in my microwave. It's never cooked anything outside of it. But if I put my phone on one side of it and a Bluetooth speaker on the other, running it interrupts the connection to the speaker. Sound gets through but it's choppy.

Seems bad, right?
Often what is “approved” and “delivered” conflict. In this case, they approved a part, a genuine part, but got a fake part, unbeknownst to them at the time.

One could say the fake part was not “approved”.
Seems to me that stuff like this is the single, biggest reason why we should try to return as much manufacturing as possible to America.
I'm not really sure what would be considered cheap vs valuable here so I don't have a great answer there. My point was only that individusl data is collected and sold often, it must be valuable or there wouldn't be a market.

I'd be curious to see how the price compares when selling 10k individuals' data versus aggregate data the 10k people. Presumably if it was cheaper to buy all the individual data I would do that and aggregate it myself.
My context is the Only True Context. My way is the Only True Way.

Zealotry and fucking bullshit.
That would be a meaningful raise for me actually, but the skillset is a lot more specialized as well.
I think it’s more likely that you would use a security graded bot.

It’s perfectly reasonable to not use secure code for a large number of use cases.
When I feel that I have to upgrade because the phone slows down or that newer apps aren't available on my OS version anymore, I move over to the opposing team so as to avoid incentivizing short-lived phones too much.

So far, I only owned 2 phones in my life (didn't need one before the smartphone era), an iPhone 4S and a Google Pixel 3. For now, the Pixel 3 is doing great, battery life is not so good but holds the day.