skysight-inc/HackerNews huggingface dataset:
A question for people here saying "use a monorepo", and coming from a different direction than that of the article. Say I want to use a monorepo for all code I write for personal use and development, but I'll have a folder with dozens of projects cloned from github often with small tweaks and custom branches. Is the solution submodules? Saving patches or just code-snippets in the monorepo and keeping the random misc repos isolated? Hardlink specific files of interest?
Which would put you at a disadvantage relative to other Java programmers. In many teams, that would not be tolerated if you then start committing code with obvious issues related to your poor tooling choices.
This thread seems pretty full of people dismissing the project based on the idea that it only protects against ssh credential stuffing, and ignoring the other 99.5% of what F2B does.
why don't they just allow ads to be skippable.

shoving unrelated, unskippable ads is the reason people use adblock.

also content advertising, where the video is the advert. like biased tech "reviewers" only giving you a list of reasons to buy a product.
Are you saying that these companies should have zero net head-count growth in 3.5 years, during which their quarterly earnings grown 50-100%?

https://www.macrotrends.net/stocks/charts/GOOG/alphabet/net-...
That's where I got my inspiration :)
I think parent is suggesting that it’s absurd that a building not designed for residential use is an excuse to not let people inside who are camping at their doorsteps.
Rust: Polonius Update
What's funny is that these bad reviews actually do show up on the RSS feed, so you can read them even after they're removed.
I have to agree.

Why blame the users for a broken by design security model like password auth? Credential stuffing attacks are a known weakness. We cannot reasonably expect everybody to take precautions against them.

I've just become very irate at how people implement absolutely absurdly bad security and people just blame users when the inevitable happens. These attacks have happened for decades. It's not the fault of the users.
The Feynman anecdote was pretty cool. Feynman counted 'verbally' in his mind, so he was able to keep a steady and consistent count while reading and writing, but not while speaking or listening. His friend kept count by visualizing the numbers in sequence (like a clock, kind of) so he could keep steady and accurate count while holding conversations but not at all while reading.
Eclipses do odd things to radio waves. An army of amateurs want to find out why
My sister didn't have an account when we sent the packages. When the data got analyzed it showed it as "My Sister" with close to 100% accuracy. The packages were anon, so they couldn't know which sent which.
Who knows they could put something in there to change it, is it an online only desktop app? More and more of my desktop apps now require internet (for some stupid license check or something) so I've been avoiding upgrading them whenever possible but sometimes they sneak it in without telling me. I actually look for that as a feature for desktop apps now.
Red Hat solarization continues...
It took a while to start on my phone but the splash screen displayed instantly.
Do you have the RD Client app installed on an iOS 15+ device? If you ‘own’ the app (and the developer allows it, I think) the App Store will let you install the latest supported version on an older iOS. I was able to install RD Client on my iOS 10 iPad that way a little while ago, but maybe something’s changed in the meantime.
What Is Appropriation in Art?
>Audio CAPTCHAs are often much worse than even visual CAPTCHAs for humans to solve, with only 31.2% of audio challenges resulting in a three-person agreement on what the correct solution actually is

The goal of CAPTCHAs is for users to prove they are human. It's okay for a CAPTCHA to have multiple solutions that are human like to accept. Is giving up on audio and visual captchas an admission that bot owners have won and they are allowed to freely roam people's sites?

I don't understand how this can work though. Lets say someone tries to password stuff on your site. These CAPTCHAs don't do anything to stop the attacker. The attacker can just automate clicking the box if they get the challenge.
Yes, I can visualize almost anything, but there is a huge fovea aspect where my focus has to zoom around to check/see all the details.

But if the details are unconstrained conceptually, or not tied to a remembered object, then details won’t be consistent as I move around.

The memory palace thing works for me too, if I am not constantly moving things around.
> There is a common view of cultural norms as at worst tyrannical or at best random and arbitrary, rather than the sophisticated and curated product of billions of human lives.

Examine any of these “fundamental norms” and see that they were not so fundamental after all. With their narratives built to enforce cultural norms today, not genuinely explore lessons from the past.

My grandma will _insist_ that homosexuality simply didn’t exist when she was younger. This is the “sophisticated” product you speak of - a blatant denial of reality.
Not sure if it's worse on iPhone (because successfully targeting one specific model means a huge user base to hit), but I've been consistently surprised with how old Android devices survive usage long after updates have expired without large-scale compromise.

It shouldn't work. Based on historical precedent from PC's, all of these phones should be full with the most blatant, obvious, ad-injecting/ransomwaring/account-stealing malware that simply cannot be ignored. And yet, in practice, most users are using ancient Android devices just fine.

Obviously you can't do that if you expect to be specifically targeted (either by governments or criminals), but the baffling fact is that an average user can apparently get away with it in practice.
I'm keeping my fingers crossed it burns down and the shit bag loses every cent he invested in Twitter. It can then rise from the ashes under new people....
Why NASA Chose WordPress for Revamping Its Flagship Website
I'm not sure what you're wanting to angle for here, that doesn't seem like a specific formula. If you're trying to calculate a single metric it seems to be number of years to pay off the debt? At current trend, that is infinity years. I'm not seeing how it could get worse than that, although no plans to pay back the debt is just business as usual by now. And I suspect the information in your sentence is actually contained in a Debt/GDP ratio (eg, is interest + GDP growth going up faster than debt implies Debt/GDP ratio dropping).

> I wouldn’t compare my $400k debt with my monthly income.

Pretty sure that is actually a fair way to assess your creditworthiness. I can see the conversation in the bank going "Yo I want $400k", "What is your income?", "$X", "Yea"/"Nay" with some basic due diligence.
Are they wrong to criticize Jeff "you paid for this" Bezos' rocket vanity project?
It's supposed to detect the automation / not real browser from other signals. They're deliberately vague about what those other signals are.
I like it, and in this scenario I'd be a user.
I think what is well worth it is for the individual to decide.
Auto Xylophone with Homemade Solenoids
I am interested in how these work, and most importantly why others failed to work. e.g. why LLM's capabilities where "unlocked" by prompts like "step-by-step"? How does CoT work?
Ask HN: Business Ideas for a physically disabled person
Long story short, I have a variation of cerebral palsy and am 38 years old. For the past 14 years, I've been working as an analyst and data scientist at different companies.

As my disability gets worse (it's degenerative), I've been trying to figure our a business idea I could focus my attention on over the next year full time. I have plenty of savings, the issue is how do i find a reasonable venture that i can execute on.

Any help on finding business ideas?

I do have some various saas data science products that i have been working on and are really focused on SMB's, but i am still not fully commited.

Also, i have a FT job at the moment as a data scientist at a martech company. I just don't think I can keep doing this for 2 or more years
Really curious about experiences of people that use or used Ash in production. Are there any gotchas or is it really easy to work with?
The whole discussion is incredibly moot, because Apple should be shipping devices with more easily replaced batteries.
GymBook, Seconds & WorkOutdoors are good fitness apps that also work really well with the apple watch - each of these apps offers pro options without the need for a subscription.
Sounds like how it works today in the UK and the US.
Some fantastic food for thought here, thank you!

Definitely will acknowledge that searching the provided data has room for improvement. Re: emails, it actually does have some rudimentary capability to detect which opportunity the email should be assigned to, based on a few factors - this too will be improved in the future. One workflow I've thought about was adding save@rolepad.com to cc/bcc on your outgoing emails to avoid the extra step. I have also kicked around the idea of creating custom Rolepad email addresses to use on outgoing resumes so that all communication is automatically captured in the system. Felt a bit fanciful at the time, curious if there's interest.

The multiple addresses is a doozy, will need to noodle on this. I guess easiest would be manually associating multiple emails with your account. Or the whole custom address thing...
What is the point of making the user click the box? Can't that be skipped altogether?
Unfortunately, I think the current strategies for RLHF are a huge contributor to hallucination / confabulation.

In short, they're paying contract workers for quantity, not quality; they don't have time to do independent research or follow up on citations. Unsurprisingly, the LLM optimizes for superficially convincing bullshit.
I wouldn't be surprised if the entire consulting industry gets affected too, regardless of company size.

One of my friends who works at MBB told me that because of startups withering off and tech consulting gigs drying up (except for some one-off headcount reduction projects like these), there has been a significant reduction in MBB hiring too. For example people hired in 2022 were asked to join in the 2023 cycle for instance.
No, they didn't get it backwards.

Testing is great for resilience, but "content files generally only get added, not modified or deleted" is even better.

Copying files around may be fragile but people want to do it and get lots of value out of it.
It’s not a universal problem. A lot of modern languages allow multiple versions of a library to be pulled in to the same code base, through different dependency paths. (Eg nodejs, rust). It’s not a perfect answer by any means, but it’s nice not needing to worry about some package pulling in an inconvenient version of one of its dependencies.

Also, just to name it, it’s ridiculous that a specific graphics card manages to restrict the version of gproto that you’re using. You don’t have this problem with nvidia drivers, since cuda stuff is much less fiddly. AMD needs to pull a finger out and fix the bugs in their stack that make it so fragile like this.
Luxury? Some of the poorest places I've been are full of people with relaxed paces of life who make a habit of taking in the scenery, whether sitting at a cafe or walking.
Running Memgraph with the Go Fiber web-framework
As far as I understand this is not about tax evasion, it's about "illegally" using a vpn to access GitHub which is blocked by the Chinese government.

https://en.m.wikipedia.org/wiki/Censorship_of_GitHub
It checks lots of browser APIs and makes a proof-of-work calculation in the background. I guess we are getting close to paying for entry with computation.
This is who your authority is, by the way.

https://www.nbcnews.com/tech/internet/michael-benz-rising-vo...
It was for my family. We were a single income earning, home owning, two csr owning on a single blue collar income household when the show csme out. Most everyone in our entire community was too.
Sure, I'm working for German health insurances and service providers in data engineering, data analysis and BI Reporting, know the studies and statistics and once was a dialysis and intensive care specialised nurse for 12 years.
I placed the last dialysis cannula in 2006 on a Cimino shunt and connected the patient to a Fresenius 4008B.
We also used Gambro AK 200, but for some reasons we prefered the handling of the Fresnius machines.
Are these types of devices still in use today?

I also read the patient files and talked to the patients.
You have quite a close relationship with people you care for professionally on average three times a week for 4-5 hours over years.
You know them quite well after some time.

But, you can't base health care decisions on anecdota, can't you?
But, I found that the statistics corresponded to my observations.
People are peole.

Of course, not everyone who is overweight gets kidney failure, and not everyone with kidney failure has it because of their lifestyle.

There are chains of probabilities that add up.
That's a no-brainer.
https://en.wikipedia.org/wiki/Chronic_kidney_disease#Causes
The way you move your mouse, the timing of the click button down/button up events, all those things go into some algo to determine if you're a bot or not

Edit: actually not, I'm full of shit, ignore me
Attackers can and do use real browsers. Browser extentions and OS's input automation can both be used for automation even with unmodified browsers.
With as little details as you have provided, it's extremely hard to give you a helpful answer. Maybe share a link so people can see the reviews themselves?
The Evolution of NLP with Large Language Models
a theatre is where you have the feeling of security, but you don't really have it in reality.

You cannot claim that just because some users are 'saved' as evidence that this is an effective security measure, because if a password was leaked, and not discovered, then this measure doesn't prevent it. But it is imposing a cost, which cannot be measured against effectiveness.

Change the whole process to 2FA is secure because there's provable guarantees for the costs imposed, and therefore, you can make an objective decision on whether it is worth implementing.
Incentive for the model is to survive RLHF feedback from contract workers who are paid to review LLM output all day. They're paid for quantity, not quality. Therefore, optimum strategy is to hallucinate some convincing lies.
Fair enough, my point still stands because the decades older from the Simpsons people were my grandparents
Honestly the only interesting thing about that thread is the severe lack of engagement. Single digit likes and replies on the reply comments. Threads definitely didn't work out.
As a developer I dislike "build all things even if they don't neatly fit in the system". I would like product people to come up with features that fit in and are thought out. It makes my work harder :)

But at the same time I agree if we don't build it, we won't have customers and unfortunately keeping/geetting new customers is not exact science.

In the end important part is to get rid of stuff that was build for big fish customer once they stop being customer because it keeps living in code base and after years no one remembers why that stuff is still there.
Platrons – Long-term stability of aerophilic metallic surfaces underwater
I wish they also included the report link on the failed attempts, so I can let them know when Turnstile stops me from seeing websites on my mobile about every other week. I know other people are annoyed by captchas for good reasons, but this system also sucks unfortunately.

Just a rant / modern web sucks / CloudFlare effective monopoly sucks. There are other providers - please give them a go to diversify the web a bit.
> Second, we find that a few privacy-focused users often ask their browsers to go beyond standard practices to preserve their anonymity. This includes changing their user-agent

> those users can immediately understand the issue and make a conscientious choice about whether they want to allow their browser to pass a challenge.

So they will block privacy-focused users. I guess VPNs will be blocked too. It seems they have just removed the captcha part of their system and are spinning it as a good thing to block certain users.
I have almost 6% myself, but to me it feels like, if I don't even know about who it might have been in my family tree, it doesn't really count.

But yes, for EM it said "Ashkenazi;Balkan;British Irish" - no percentages in there - and I believe 23andme has confirmed the authenticity of the data.
have you seen sqlite official documentation on corruption resistance? https://www.sqlite.org/howtocorrupt.html

supported failure modes, tested and handled:

"application crash, or an operating-system crash, or even a power failure" - so basically proper atomic renames. git does this well.

unsupported failure modes:

"Backup or restore while a transaction is active" - when you backup your machine, do you really treat each sqlite specially? I know I don't.

"Deleting a hot journal" - or, you know, downloading database file and forgetting to grab journal at the same time

"Multiple links to the same file" - did you ever hardlink or bind-mounted a database file? prepare for corruption...

-----

Don't get me wrong, it takes some skill to implement proper safe file handling, and a random person off the street would be better off with sqlite.

But git specifically took the effort and designed the system so that the database is resilent in all sort of crazy conditions, and even if not, it's easy to recover. Switching git to sqlite would be all downside, no upside.
You can scrape email/sms for codes automatically and add them to the clipboard or autofill, and what does user hostile even mean? User hostile is losing all of a users data because you were more concerned with customers liking how easy your service is to use than you were about ensuring your service didn't hurt them.

You can do better than email/sms, especially sms, but they're transitionary technologies. I login to way more things than most people do way more often. I don't use password authentication alone unless it's literally my only option.
I just took the survey, answering with complete and total honesty, and

> Your kink equivalent is Mother Theresa (2nd percentile)

LOL! I mean, I know I'm vanilla (a rich, complex, and expensive spice, I'll have you to know), but if Mother Theresa represents the 2nd percentile, who's the standard-bearer for 1st?

My serious point is that I strongly suspect that people towards (ahem) my end of the spectrum are likely to be under-represented among the takers of the survey. The people most likely to take a survey about kink are the people most into, well, kink. I don't know how any survey design, no matter how good it is in a vacuum, can square that circle.

(I say that with all possible respect for Aella and her work. I've followed her blog for ages - her essay about growing up within, and trying to shed, a fundamentalist upbringing is one of the best things I've ever read - and sexology research is fascinating. I just don't know how you can draw robust conclusions from survey data, given the social pro- and in-hibibitions most people have inherited.)
Weird pricing BS they just started.
Do a search for "residential proxy" and browse through the results a bit, all claiming to own millions and millions of exits in the entire world. The malware could be from the manufacturer or preinstalled apps since all app developers are contacted to inject various SDKs into their code source in order to act as residential proxy nodes and make profits based on the target's internet. It's on phones, android TVs, routers etc. I wouldn;t be surprised if some of the devices we, as technical users, use are infected - who reads that TOS when updating apps anyway?
Some type of education/consultation service?
Kanban would help, with max tasks in progress for team and PR being a task.

Now you can’t do a new thing you have to take the PR!
I guess it could be merged with the "login" or "checkout" button with few lines of JS.
How well does this work in practice? Does it block users who have relatively mundane settings like Firefox with "resist fingerprinting" on, or only extreme edge cases like someone's hand-compiled version of some obscure browser on HURD for Itanium with an extension that blocks all third party cookies and half of the JavaScript APIs in the browser?
TBH, I just went through the official docs and that was sufficient - they are fantastic. I wrote a bit about my experience in the top comment here: https://news.ycombinator.com/item?id=35186812

Other tools? Have been using Visual Studio mostly (due to C#) until recently when I switched from a Windows laptop to a Macbook. Now all coding is in VS Code, which is ... good enough so far. Really the only other item worth mentioning is I bought the Tailwind UI component library early on. It's been a total lifesaver. Design does not come easy to me at all, and I was able to get started with semi-decent-looking UI from the get-go. It still requires a lot of effort to get things to where I like what I'm seeing, and there's still lots of iteration, but it was definitely the right move, and the cost was well worth it.
Harnessing LLM in End-to-End Speech Recognition
China's First 28nm Lithography Tool to Be Delivered This Year
> But I guess this guy didn’t have the option to report the income and pay his taxes?

He has the option. I'm not sure if he did it though.

The problem here is it was confiscated arbitrarily, it's not tax authority doing all that.
From the moment I understood the weakness of my flesh, it disgusted me. I craved the strength and certainty of steel. I aspired to the purity of the Blessed Machine. Your kind cling to your flesh, as though it will not decay and fail you. One day the crude biomass you call the temple will wither, and you will beg my kind to save you. But I am already saved, for the Machine is immortal. Even in death I serve the Omnissiah.
Is the Talent Pipeline for Women in Stem Broken?
Are your physical disabilities the reason that you cannot keep doing your current job for 2 more years? Or is the job in itself too stressful/demanding, regardless of disability?

Because if you are still OK doing data science, I would suggest consulting/freelancing.
You can try, but a lot of ISPs assign a big subnet to each user. Mine for example assigns a /48 to each home user fiber connection.

Even if I make no effort at all to hide things and just select xxxx:xxxx:xxxx:1:: as the subnet (leaving a factor 65535 options on the table) the devices behind it will randomize the next 64 bits meaning you'll have to scan 18 quintillion (1.8e19) addresses to find one.
Yes it is. It's like holding up "Hey, how about 20$?" on a sign next to your competitor's HQ.
There must be an expression which can be evaluated to determine the length of the array, and which can thus be used for checking. Without that, the code has little chance of working, since something had better define the size of that array.
There are billions of people living in just such a "disrupted" state today. Says more about your attachment to convenience than about what humans can handle.
What they are saying is that it is not easy money for anyone.
Actually kicad has a bitmap importer. You could pull a bitmap in to the copper layer. It’s often used for silkscreen logos but it’s not limited to that.
Yeah, I’m more of a macOS and Linux guy these days.
You can do many FP things in Java as well, as it is a multi-paradigm language, hell, Kotlin is not even particularly functional-y.