skysight-inc/HackerNews huggingface dataset:
> I’m convinced you don’t understand my words. Is English your second language?

It is, but it's not a language problem here… The problem is that all you write is nonsense!

For instance:

> The Australian one is spaced out because they have so much land they don’t care.

Like the I know the real estate in the Australian desert must be cheap, but why spend a HUNDRED TIME too much money on real estate just because it's cheap? You think the project financiers are completely dumb? Why can't you even imagine that your calculation is broken?

> Just to double check that, do you agree a single 400w panel generates conservatively 1800w/day ?

Come on. I don't know if I should laugh or sigh at this point.

> Yes we have installed enough panels to power the whole world many times over. But they aren’t connected… again that is my point.

Is there a sentience life behind this account or is it a markov chain language model? If there is, please take a big breath and think about what you just wrote. Seriously.

> Do you get what a 3GW line can do? It can deliver 72GWh in a day.

7.2⋅10¹⁰Wh/day, compared to the 8⋅10¹³Wh/day that the humanity consumes. That's 3 orders of magnitude off, that's how much you'd need to scale it up. Scale ISS by 3 orders of magnitude and you have a spaceship that's 5 times bigger than a Nimitz-class aircraft carrier, to keep the space colonization analogy. Scale the (provisional) budget required by this project by 3 orders of magnitude, and you get one year worth of US GDP. That's how non-trivial this is.

You should try and learn to manipulate orders of magnitudes, because that's a skill you're lacking and it really shows. The scales involved in such a discussion are so big you cannot rely on your intuitive sense of scale.
Is Rust memory safe if you have to use unsafe everywhere, like in the kernel?
Oh I was only thinking in an aerospace context. That makes sense.
That sounds like he was being figurative. He probably meant that he got ideas while working.

Every morning, I get up at 5, and take a 5K walk. During that time, I tend to "triage" the day ahead, and often solve problems that were vexing me, the night before.

Part of my walk is around a local high school track. There is a small flock of killdeer birds, that hang out there, and I guess they give me the ideas I have, as they often come to me, at that point in my walk.

I enjoyed this part:

> One story has it that when Cray was asked by management to provide detailed one-year and five-year plans for his next machine, he simply wrote, "Five-year goal: Build the biggest computer in the world. One year goal: One-fifth of the above." And another time, when expected to write a multi-page detailed status report for the company executives, Cray's two sentence report read: "Activity is progressing satisfactorily as outlined under the June plan. There have been no significant changes or deviations from the June plan."
The Amazon experience in a nutshell. I have yet to see a comment that captured it so comprehensively.
Google also rewrites URLs in emails at Gmail accessed via IMAP to use the Google URL redirector service if you have Advanced Protection turned on. This means that the PGP signatures break, etc, because they are rewriting the message body.

It's terrible.

FAA702 was enough, but if for some reason warrantless surveillance of all data held at Google wasn't for you personally, the terrible behavior of Google since their government mandated backdoors were installed should be. It's time to de-google your life.
Dynamic types do make people create more dynamic APIs because it is a lot easier to let the parameter be number or string or format-function or bigint, etc

Dynamic APIs are super hard to reason about if you don't have types to ensure you are calling your APIs correctly (function argument A can be number or string, but not formatFunction)

So having static types makes your APIs less dynamic because people are too lazy to type them correctly. Which in general is good in my opinion, making an API dynamic should be done only when it is really helpful to do so.

The other point is null-guards which _some_ (but not all) type systems enforce, null-guards are just 100% good thing.
so it wasn’t because of her gender. but she was easy to exploit, unlike the boys.

(the woman was easiest to exploit, coincidentally.)

she was also “his girlfriend” for a time.

sbf likes easy targets with low risk of blowback. moves like a particular type of abusive personality. the little boy who can’t be held accountable.

and now she’s testifying against him.

that’s not even getting into systemic gender bias, but that might not jive with your perception of dudes’ motivations.
Jon Fosse wins the 2023 Nobel Prize in literature
"The relationship between math and spirituality was very strong back then!"
According to those whose communication ended up being indelible. I wonder how we'll be able to preserve digital info for millennia?
The issue is not that there’s no way to do this, it’s that there’s no portable way to do this.

A seccomp bpf implementation of https://man.openbsd.org/pledge.2 could go a long way.
not only quality, but also the care you put in
Another question is whether parts that failed Cessna certification found their way into the Ford aftermarket parts supply chain...
That table in the README is definitely not up-to-date with the library capabilities. If you check the commit history, you’ll see a sequence of builds. Regarding the ones you’re specifically interested I’m not sure. Could be a good PR to make though if you’re interested? My feeling is that how they’ve updated it to produce recent builds has probably made targeting any missing platforms a lot easier, but i don’t know!

Regarding the issues being turned off, I think this maintained fork was not really intended to be some kind of widely used thing. I came across it today and it worked and I posted it, but when I found it, it had like one star.

I’m kind of hoping that the attention may convince the owners that what they’ve done is valuable, and may encourage the maintainers to open up issues or at least tend to it for a while but who knows? it’s OK if not. works now.
Can we just stop using the word “fake”?

They’re engine parts, not blender parts shoved into a jet engine. They may be uncertified, they may be counterfeit but they are in no way “fake”.
We shall see what the issue is next week.
Will the spread of QUIC improve low latency services such as video game servers? Last I checked they were using either gRPC or homecooked protocol over UDP.
What do you mean by AoC? I assume you do not mean Alexandria Ocasio-Cortez and I cant think of anything else.
Advanced data analysis: bad Medium articles all the way down?
There are some big questions around OpenAI's Advanced Data Analysis. Is it cutting edge data science or just bad Medium articles all the way down? Can you trust it? And will it let Larry from Sales take your job?

I've shared my experience in this blog post: https://www.rhosignal.com/posts/advanced-data-analysis/

tldr: the exploratory analysis was nice, the text summaries are oft wrong, the choice of ML models was poor IMO and it gains a lot from expert guidance
Increasing embedding size doesn't make the model allocate arbitrary extra compute only when it needs to. The extra compute from pause tokens is situationary, arising only when necessary and in amounts necessary. Increasing embedding size would be the wasteful option here, not pause tokens.

>WRT FlashAttention, surely you understand that the matrix-matrix multiplication must still happen

Of course it happens. The point is that it doesn't scales linearly now with respect to memory.
I’m a bit surprised by the description of sociable acquaintances. I can’t imagine going out of my way to spend time with people who aren’t really my friends just for social convention. Especially things like going to their weddings!

Now it’s one thing if they are your partners friend since that is a friend of a friend. But if it is someone you know but don’t actually like enough to elevate to full friend status, I don’t get it.

That’s probably just me being a big introvert though. The idea of willingly going out and being around people I have to fake laugh with is not my idea of a good time.
off topic, but what do you think of this video by Asianometry talking about the intricacies of analog design for a laymen audience? https://www.youtube.com/watch?v=lNypq1XuZRo
It’s interesting that people in a CS forum don’t seem to know what a theorem is. The tablet shows that the relationship was known, a theorem needs a proof
What? I just updated my nginx config to HTTP/2.

V3 still seems to be experimental in nginx: https://nginx.org/en/docs/http/ngx_http_v3_module.html
Okyo Pharma (NASDAQ: OKYO) Announces Positive Safety Data Profile for the ongoing OK-101 Phase 2 Clinical Trial to Treat Dry Eye Disease (“DED”)
QUIC is a really nice protocol as well, I find. It basically gives you an end-to-end encrypted & authenticated channel over which you can transport multiple streams in parallel, as well as datagrams. A lost packet in a given stream won't block other streams, and the overhead is quite low. Both ends of the connection can open streams as well, so it's really easy to build bidirectional communication over QUIC. You can also do things like building a VPN tunnel using the datagram mechanism, there are protocols like MASQUE that aim to standardize this. Apple is using a custom MASQUE implementation for their private relay, for example.

HTTP/3 is a protocol on top of QUIC that adds a few more really interesting things, like qpack header compression. If you e.g. send a "Content-type: text/html" header it will compress to 2 bytes as the protocol has a Huffman table with the most commonly used header values. I found that quite confusing when testing connections as I thought "It's impossible that I only get 2 bytes, I sent a long header string..." until I found out about this.
Got quite a review for his latest book in NYT last year https://archive.ph/75v78
To anyone that knows what the vulnerability is, this announcement does not bring any new information.
Proof by construction, the Curry-Howard correspondance.
Apple is very generous on input capacitors for their power supplies. It's usually a sign a good design as it's one of the first places companies skimp; and ensures that even dirty wall power or highly spiky load will not trip the PSU and keep the computer fed. However, it is widely recognized that Apple overdid it on apple silicon macs. Like, they really should have skimped a bit on that one. (we have racks full of M1s at work, and boy powering the rack on is a pain due to the inrush)
Fast and featureful collection/file/library management tools. If I never have to write nested loops to rename a bunch of files ever again I would be very happy.
I opened this expecting something about hot sauce! What a dope!
Let’s wait and see what the vulnerability is. Maybe it doesn’t have anything to do with the pitfalls of C. But if it does, expect to read a lot more comments like this.
Security engineer here and for context I manage a very small amount of servers that don’t really matter too much. Having the notice means that I see it on HN before i need to patch - that’s massively handy.

I don’t want to run updates on cron because I feel the risks may outweigh the benefits in some cases, if this extends to other implementations (php curl, etc) then I doubt vuln scanners would pick it up.

Not every company has infinite resources, and security notices are a firehouse.

Sure this gives bad actors more of a chance to tee up staff to hit this thing, but it helps the competent but under resourced blue teamers a chance too.

Edit: I upvoted you btw and would encourage others to consider this also. I think your opinion is a valid perspective and conversation provoking which iirc is the point of votes - I’d rather not see HN fall into an echo chamber hive-mind, if it’s not already too late.
Crew-less Droneliner may one day slash the cost of airfreight
Is the graph showing the number of requests served by HTTP/3, or the number of individual hosts that support it? I believe it's the former, and it's explainable by the fact that most people these days visit only the same handful of siloes: Google, Amazon, Facebook, Twitter and Youtube probably make 90+% of all anonymised requests seen by Mozilla. But I doubt even 20% of global webservers are HTTP/2 ready, let alone HTTP/3.

So HTTP/3 is eating the world, if by world you only count FAANG websites, which sadly seems to be the case.

Remains to be seen how many websites are hidden behind tech's favorite MITM, Cloudflare, which might make figures a little harder to discern.
My approach would just be to sample one channel, like green, with the ADC and generate the sync signal, avoiding digital processing of the video itself. Just pass it through with any necessary level shifting in analog.
Maybe if the thing you're selling is something "disruptive" enough that people will give you that pass. But if you're selling another variation of <insert new devops tool> or <project management software> you better have a baseline (aka good) level of polish. people absolutely judge you based on those pages.

i can't tell you the last time i went to a corporate site that had a shitty landing page and a wonderful to use product. this advice was sound 10 years ago, not now IMO.
Anything which involves more work than dnf/apt install nginx isn't worth wasting time on. So http2 for now.
Will there be a WASM port?
Read up until author is confusing HTTP/1 with TCP, claiming that it's TCP's fault that we must make multiple connections to load a website.

Actually, TCP allows continuous connection and sending as much stuff as you want -- in other words, stateful protocol. It was HTTP/1 that was decidedly stateless.

Sessions in web sites are direct consequence of the need to keep state somewhere.
No. You have no idea what you are talking about. You are doing a huge diservice to anyone who read your comment and didn't know any better.

They are not placing fake gold into real packaging. They are manufacturing the counterfiet packaging themselves.

Gold-plated lead would instantly be discovered if it was measured by weight AND dimensions.
With medical doctors in Germany too (numerus clausus has been hovering around 1.0, 1.1 for decades).

It's the system saying fuck you to good working conditions for medical professionals and good care conditions for patients.

Because they could instead be working in consoomer industry or crap like that?
By the descript, backstage intimate is too much. I am not talking about people who are almost my romantic partners.
Should have written "commercial transport aviation". My bad.
Right, and those big jumps are more to do with large Cloud providers or proxy providers switching it on, and less to do with web applications themselves switching it on.

It's great that the upgrade path for the end clients is so easy, but it doesn't reflect that the environment for web application developers has shifted towards HTTP/3
It most definitely does. You know it's going to be patched. You no longer have to tiptoe around to conceal the problem. This can be the difference between snooping a bit of data here and there and just straight up dumping the contents of entire servers.

Of course this depends on the vulnerability itself. But knowing a vulnerability will be patched can be hugely interesting and worthwhile information
In my opinion this is the single biggest benefit of GraphQL, forced validation of data server-side. Sure you can do that with swagger in REST apis as well but nobody ever bothers to do it strictly and correctly.

Technically you can have more complex and custom validation (email is a valid email address) with annotations but the client-side will not have this information.
I suppose it's theoretically possible someone was hoarding this as a zero-day and may decide to more actively exploit it before it gets patched. Except of course that they don't know which precise vulnerability it is.
I'd be much more enclined to blame the cigarette lighter to usb adapter used in the car instead of the magsafe adapter. apple usually do their homework.
If my gift is good I don't need fancy packaging... thanks for the insight.
That would be a good start, because it would allow one to "hollow out the attack surface" - a great concept I've encountered in the erights community. Primitives that allow one to gradually secure a system in the future when the need arises.

Though unfortunately it doesn't provide the level of expressivity and flexibility that a full capability security architecture would.

The world has a great deal to learn from the likes of KeyKOS, seL4 and Genode, i don't see any of these issues going away without their adoption (or at least their ideas, in other systems).
Android makes frequent use of unsafe but in their blog post they claim an unsafe rust line has never caused a memory issue. Because they are such a small and focused selection of the code, full scrutiny can be used for any unsafe lines.
Well... "Fosse is one of those writers you feel guilty you haven’t heard of already, or have vowed to read someday (probably some late October, after a major announcement from Stockholm)"
European Commission Probes Alleged Subsidies for Chinese EV Makers
This only works for curl itself. But how many programs use curl or libcurl and bow many of those won't get an update?

It's good to know beforehand to check which software in your stack will be affected so you can take precautions if those don't get an update fast enough.
3Blue1Brown: https://youtu.be/v0YEaeIClKY?si=BQ2W64DWIuhHoUuX
Yes, almost every country in the world has restrictions on this. For example in the case of employment, with a contract stating that you have to work for life for a company, you can easily challenge it in court since it is more than obvious unconscionability. But the limitations on 'freedom of contract' by the us government never made or make the contracts businesses went into with amazon illegal or contestable.

There is no such thing as 'operate at the expense of others' in this case. Again, nobody forces you to buy at amazon. There is nothing illegal with setting requirements for a seller, e.g. not selling at a discount elsewhere. If you do not wish to sell on amazon you can freely choose to sell at any other store. If one is whining about not having the same reach: Nobody has the right to challenge amazon for just being good and demand anything from them. There is no law that gives you the right to be able to do business 'in the land of amazon' at conditions that please you.

Amazon is a private company. The FTC is treating amazon exactly how many people wrongly see it, as a sort of common good - quote:

'Amazon is a monopolist. It exploits its monopolies in ways that enrich Amazon
but harm its customers: both the tens of millions of American households who regularly shop on Amazon's online superstore and the hundreds of thousands of businesses who rely on Amazon to reach them.'

(https://s3.documentcloud.org/documents/23991590/read-the-ftc...)

Bureaucrats.....Good luck proofing 'conspiration to monopolize'???. A thing which is not even possible in a free market society. The practices of amazon are in fact competitive - doing everything to kill the competition - a thing every capitalistic incentivized company who wants to become or stay at the top does. Those practices of the FTC are anti-competitive and a huge intervention, their policies is what hurting customers.
Does the root cause even matter when the ancestor poster is already blaming C?

If we’re gonna start somewhere when it comes to memory safety, I assume fixing adobe acrobat would have a better ROI.
July 2022 maybe linked to cloudfront supporting it https://aws.amazon.com/blogs/aws/new-http-3-support-for-amaz...
There's a cookie I took out of a package for a nibble. You could say I'm eating that pack of cookies. Not justifying the sensationalist title though.
I take voice notes. I would really like a way for voice notes to be transcribed with timestamps. There are SaaS services that let you do that but they are for professionals and too expensive for stream of conscious personal notes.

A while ago, I did find a tutorial that would do this in Python but never got around to it.
Except of course they don't know what vulnerability is getting patched. So, they might actually end up revealing a different vulnerability.
> While AI can streamline tasks in SaaS categories like sales and customer service, offering relief from repetitive work, the impact on project management is more nuanced.

Every single AI hype article includes some version of this sentence! "While AI can be helpful for the repetitive boring work that other people do, the impact on MY work is more nuanced."

It's basically the face eating leopard meme. "AI wouldn't automate MY job" says president of AI job automation company.
Forget about Rust, and forget about drive-bys.

Why hasn't Apple rewritten libtiff, libpng, libjpeg, libwebp, et c in Swift?

Their flagship moneymaker keeps getting popped via these, and they have thousands of engineers and a memory safe first party language. The zeroclick from a few weeks ago relied on a chain, the second most important of which (CVE-2023-41064) was in libwebp. (The first most important was a kernel privilege escalation. XNU is c and cpp, of course.)

I really can't imagine that writing performant replacements for these libraries would be that daunting a task for them, and it would permanently shut down an entire class of repeated, ongoing vulnerabilities. I really don't understand why Apple relies on 3p code for format parsing/decoding when it has proven over and over again to be a source of brand damage.
They also mentioned playing the song Dixie during the nightly sing-along
Woah that's actually pretty neat about header compression. Thanks for sharing!
This was happening to me too (Instagram but same thing); it’s pretty easy to fix.

Ultimately it is because I wasn’t using Instagram actively enough so the algorithm defaulted to Late 20s Male profiling.

Spend 2-5 minutes selecting the posts you don’t want to see and training the algorithm.

Instagram: Press and hold on items on the search tab and select “not interested”. To give it your actual interests, search for a few things like Golf, Cars, etc.

Threads: Select the three dots on posts and choose “Hide”. Same as Instagram, search for a few generic topics you prefer.

Massively better results as soon as the next day.

I want threads to work so badly compared to Twitter that I’ve happily just written a guide to train Metas algorithm. That’s how badly Twitter has dropped the ball.
Yes but no.

I was involved with a startup that ultimately failed because of the dot com bubble, but one major observation was that everyone who used our product was fantastically enthusiastic about it, but persuading them that they needed it in the first place was really difficult. Making the login page look pretty helps with that.
I agree. The job hunting ritual wastes a lot of time.

Let's kill it off by getting rid of HR except as an advisory body that helps people navigate legal requirements.

All hiring should be done by the future employee's bosses and coworkers.
I didn't call them Divine, I said they are made in the image of the Divine. And yes, I misspelled.

Despite our constitution, we can still collapse into ruin. Some of us become cruel. Some of is slothful. Sone of us keep it together.

For those of us prone to slothfulness, the end game is becoming parasitical (ie eating off of the work of others without helping out).

Its not that hard to see that a person may be infinitely valuable and still be a problem. Its the basis of our Western jurisprudence!
Lorenz ransomware crew bungles blackmail blueprint leaking two years of contacts